last executing test programs: 2m59.085680085s ago: executing program 1 (id=4213): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x6}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) writev(r1, &(0x7f00000008c0)=[{&(0x7f0000000100)="00000005", 0x4}, {&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c5", 0xd}, {&(0x7f0000000800)="38c8", 0x2}], 0x4d) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = socket(0x1d, 0x2, 0x6) ioctl$AUTOFS_IOC_FAIL(0xffffffffffffffff, 0x9361, 0x44) r4 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r4, 0x1, 0x53, &(0x7f0000000100)=0xe095, 0xffffffdf) sendmsg$inet(r4, &(0x7f00000005c0)={&(0x7f00000003c0)={0x2, 0x0, @broadcast}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000080)='\b\x00', 0x2}, {&(0x7f00000001c0)="960400000035d635a3fa0e0a6d49d65f988b8d47999380c2ec3db181a5a221920e9e56f8e7f64cba3795801a1b5e9f1d0ddf46192187d6cc0ec3e53f6e227e1a9827a8ea13f75b4c7023ffd0d174267627a7d6d29fd69362c58302d6bfd98ecc57c8c70714386b42e8df00919045fb52f6b36146cbf32f11ae7a56f14877", 0x7e}], 0x2, &(0x7f0000000240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @broadcast}}}], 0x20}, 0x24048894) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r3, 0x6a, 0x4, 0x0, 0x4) r5 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r5, &(0x7f0000000780)={&(0x7f0000000000)=@tipc=@id={0x1e, 0x3, 0x1, {0x4e21, 0x4}}, 0xffffffffffffffbc, 0x0}, 0xe07e872420dfefca) sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x20000081) socket$packet(0x11, 0x2, 0x300) (async) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) (async) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x6}, 0x1c) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) socket$kcm(0x2, 0xa, 0x2) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) (async) writev(r1, &(0x7f00000008c0)=[{&(0x7f0000000100)="00000005", 0x4}, {&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c5", 0xd}, {&(0x7f0000000800)="38c8", 0x2}], 0x4d) (async) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) (async) socket(0x1d, 0x2, 0x6) (async) ioctl$AUTOFS_IOC_FAIL(0xffffffffffffffff, 0x9361, 0x44) (async) socket$inet(0x2, 0x2, 0x1) (async) setsockopt$sock_int(r4, 0x1, 0x53, &(0x7f0000000100)=0xe095, 0xffffffdf) (async) sendmsg$inet(r4, &(0x7f00000005c0)={&(0x7f00000003c0)={0x2, 0x0, @broadcast}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000080)='\b\x00', 0x2}, {&(0x7f00000001c0)="960400000035d635a3fa0e0a6d49d65f988b8d47999380c2ec3db181a5a221920e9e56f8e7f64cba3795801a1b5e9f1d0ddf46192187d6cc0ec3e53f6e227e1a9827a8ea13f75b4c7023ffd0d174267627a7d6d29fd69362c58302d6bfd98ecc57c8c70714386b42e8df00919045fb52f6b36146cbf32f11ae7a56f14877", 0x7e}], 0x2, &(0x7f0000000240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @broadcast}}}], 0x20}, 0x24048894) (async) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r3, 0x6a, 0x4, 0x0, 0x4) (async) socket$kcm(0xa, 0x1, 0x106) (async) sendmsg$kcm(r5, &(0x7f0000000780)={&(0x7f0000000000)=@tipc=@id={0x1e, 0x3, 0x1, {0x4e21, 0x4}}, 0xffffffffffffffbc, 0x0}, 0xe07e872420dfefca) (async) sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x20000081) (async) 2m52.842540229s ago: executing program 1 (id=4222): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)=ANY=[@ANYBLOB="0600000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={r0}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r0, @ANYBLOB="0000000000000000690200000000000095"], &(0x7f0000000d40)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}, [@jmp={0x4, 0x0, 0xc}]}, &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000080)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x2, 0x2, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x30, 0x0, @in={0x2, 0x0, @local}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0xfe, 0x18}, @sadb_x_filter={0x5, 0x1a, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@dev={0xfe, 0x80, '\x00', 0x3b}, 0x8, 0x0, 0x14}]}, 0x60}, 0x1, 0x7}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x3, 0x4, 0x4, 0x28, 0x10e}, 0x48) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000800)=ANY=[@ANYBLOB="c8000000000201060000000000000000020000003400018014000180080001000102030408000200050607081c00028005000100060000000600020004d2000006000300001500003400028014000180080001000506070808000200010203041c00028005000100060000000600020000140000060003009c40000034000380140001"], 0xc8}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000500)='vegas', 0x5) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000fe7f03446b000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000140)="11d6cb557c8496a2fe7a81f38210bfa9b70ee09c", 0x14}], 0x2}, 0x4000000) 2m52.414345541s ago: executing program 1 (id=4230): r0 = socket(0x400000000010, 0x3, 0x0) (async) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth1_to_team\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x6, 0x2, {0x42}}}]}, 0x38}}, 0x0) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r3) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x5, 0x0, 0x0, 0x4}, 0x94) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB='&'], 0x10) (async, rerun: 32) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) (async, rerun: 32) recvmsg$unix(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001780)=""/4071, 0xfe7}, {&(0x7f0000000300)=""/78, 0x4e}, {&(0x7f0000000400)=""/133}], 0x9}, 0x40020000) sendmsg$inet(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0xfffe}], 0x1}, 0x0) syz_emit_ethernet(0x1c6, &(0x7f00000006c0)={@link_local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x190, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @remote}, @mcast2, {[@routing={0x3c, 0x10, 0x0, 0x1, 0x0, [@empty, @private1, @mcast1, @local, @local, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1]}, @dstopts={0x84, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x20}]}, @hopopts={0x68489d8cb04595a4, 0x1c, '\x00', [@generic={0x5, 0xcd, "51f901b043eef5c253d828db239414250fe01d153fcc116eeac65d9d651e7ffbf89df693ac98089581e5a4118ad0ee5330bfcfbe9ded29f5006692bb4235db7bce9ffa8eca75bf9fb4057890b765812d94f71fa815c7fa9274c71663ed54432461a9342210573229ccf418027d7944a4999caff0a6c2114ae3eebbe56b6efdcace5410544c42ce491818534b5f0f85f968460dd3bc81044c0f158315aa7321a06a09fd7c30ba0a801c5b2b999ffed7514839f4e1dbdfbfc4d2721b3123b86cceefeef8cb1677570d577c2574aa"}, @jumbo={0xc2, 0x4, 0xb82}, @pad1, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}], @ndisc_ra={0x86, 0x0, 0x0, 0xff}}}}}}, 0x0) 2m52.141862801s ago: executing program 1 (id=4233): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000740)=@newtaction={0x64, 0x30, 0xb, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_MARK={0x8, 0x10, 0x1000000}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021740000000c0a01030000000000000000070000000900020073797a31000000000900010073797a30000000004800038044000080080003400000000238000b80200001800a00010071756f7461000000100002800c000140000000000000000014"], 0xf8}}, 0x0) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000200), r0) r5 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_buf(r5, 0x29, 0x32, &(0x7f0000000180)="9ea2a0b1a39471c2e58c96cae6850478554b8bab", 0x14) sendmmsg$inet6(r5, &(0x7f0000000340)=[{{&(0x7f0000000380)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c, &(0x7f0000001740)=[{&(0x7f0000000100)="a0002883781ecc0e", 0x8}], 0x1}}], 0x1, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)={0x98, r4, 0x300, 0x70bd26, 0x25dfdbf9, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:hald_mac_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x98}, 0x1, 0x0, 0x0, 0x400c084}, 0xc8a0) 2m51.815122939s ago: executing program 1 (id=4236): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x0, 0x0, 0x2}}]}}]}, 0x44}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0xa, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000000851000000100000095000000000000001800000020646c2500000000002020207b1af8ff00000000bd21ffff0000000007010000f8ffffffb502020008040000b703000000000000850000008900000095"], &(0x7f0000000080)='syzkaller\x00', 0xa, 0x0, 0x0, 0x40f00, 0x45}, 0x94) 2m50.830574277s ago: executing program 1 (id=4241): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x12, 0x4, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x4}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xa}, 0x90) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x20, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000040000000000000000079120cde0000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000140)={'ip6erspan0\x00'}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x35dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x0, 0xb}, {0x5, 0xc}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x4, '\x00', 0x5, 0x9, 0xff, 0xa635}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240048e4}, 0x40) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket(0x2b, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f00000000c0)) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086dd65001144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0xa, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa210106, @local, {[@ssrr={0x89, 0xf, 0xe9, [@multicast2, @remote, @multicast2]}, @ra={0x94, 0x4, 0x1}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x20, 0x8000}}}}}}, 0x0) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, 0x27, 0x1, 0x70bd29, 0x0, {0x6, 0x1}}, 0x14}}, 0xc000) 2m35.80067068s ago: executing program 32 (id=4241): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x12, 0x4, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x4}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xa}, 0x90) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x20, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000040000000000000000079120cde0000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000140)={'ip6erspan0\x00'}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x35dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x0, 0xb}, {0x5, 0xc}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x4, '\x00', 0x5, 0x9, 0xff, 0xa635}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240048e4}, 0x40) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket(0x2b, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f00000000c0)) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086dd65001144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0xa, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa210106, @local, {[@ssrr={0x89, 0xf, 0xe9, [@multicast2, @remote, @multicast2]}, @ra={0x94, 0x4, 0x1}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x20, 0x8000}}}}}}, 0x0) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, 0x27, 0x1, 0x70bd29, 0x0, {0x6, 0x1}}, 0x14}}, 0xc000) 2m30.358885618s ago: executing program 0 (id=4391): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff1100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010001011404000011000000b7030000000000006a0a00fe000000008500000032000000b700000001000000950000000000000075cdc4b57b0c65752a3ad50000007ddd0000cb450063dedba767ade51f7f1f66acd19100002000000000000000ff7f0000b52f17cee19d0001000000000000000000cb04fcbb4e4d0b9bafe3ba431351a58a885ba9918d37b056b9bbd11b6b9f6cf7db6d574620260000000000008062d77e85cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b83b994fc4051ade12f41deff6df6a936b4ec3827c739bb39aad16cc75fe369258673b5df11cc2afb53611cc32a790bc0b80e80eae8f5e64be2c9d2d29db3d36dd0cf8f79a015c7bd3f15aa6aadbeab2a01685108e61aa00000000000000000000000000c67c6c6a06e828e5216f601b19db1af1b5d356d0f062137d866d11be4ba3f0151fdbbd4e97d62ecc645e143a60f10800000000000000826151e3b42bcae95239ef5ca2a730a00c87c493db0300e63fda97a296820000000001000000eecc952a3fd2c46f3c1cde71a19d1a2982492a210e00d2bfea3b8d188df2eff8d56aaae7d32a2e180022537395019f02ec4b85f6aad7faca088de9b26797a8446b16c28d85f225992dbdd5bb01ba51508951c7a7d6ca0916c3a12912715649c2b1c7192a4251b59d378d3f00000000000000665c8b7e89eddfc3783f6c9129a7c5f8ee5f50579e2f638f7eb12f63be72a3d81ab324d6e417b1c2cbfdcada0a16e31790e26cf19588a7e0496ee2782224cf30f810da86cf1a3204f4c9404f5d7321a4fefc4d1c9139ca4b65b99909950000006b42077ca60fdecb2717e21f8f187b1866108b6e8c71e2603217606637ece1fa89917e131f4034a8383e99c3568fd04201b37cd92ca6ebf94a2d8310f7032775cfd75652f87b039d5430b3c6643e9146d2478ce31344b554aca7670000000000000010c65608fda6ed5d08e7a796042aa127d874105787d0347aa37801faff5b9050803a19ff6205aa5c263e407a2f7de56f7a0000e094fa4e3f05528caab5a430c08dd810bc97204b767dd969721a26aa740000000000bc433fe2d0a6ef2a8a91cd3cb305aa80dadef8b0caca780000000000000000863e21db415a222bb1a7ab94bfe4a74157d794f9d0430c2c0eb563350559829865a3dd08fb31bd0801e09aa3ee45e61a56fc83076451cff7632e49a41eadb5044a0d5f73d6932161ae5e9ce218a35cd8e7b747887b1a74798982d0b492c3f0ff53189d80733eb04f8124877b648ff438f7d66c7efcc09a8f3330b6c22d14e80db8e5608bdeab9388b758a15f4ce70390c214bc6838798f5b9b0b500d4e8b5174f329b8501c6feb7a6982bcea74a0f2ced7fa2059234a8d10b7f0597151d5c9067d57d85f4ae933eaf5174ba122f3f702ef8695578d3c08562c9fc185f0f65d11b4c58ae52500cbe99cde3758a5cbe6093dd328ac820e2de309d25a324647aadffcecf0f3bbaeda7af4436d9ffbce1b240a2f5e346eba8812e6329e01b087bde7da4a6448f478102e90c8134f531de08d4cf4f6f35b15a202544c0ced0c1715fd3a90099f785a13a2412bedba2981dd22bd9d736c00000000000000000000000000000000eb6fec8d7d2f77f4d470a9caa5b1bfc00cd1d40830ac35f229f8ffe1c02a63d3c2d9"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x0, 0x0, 0x10, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0xb, 0x0, 0xfd], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x800, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x20004000}, 0x20000000) (async) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x4, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x4, 0xd}, {}, {0x3, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r7, &(0x7f0000007a80)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000001a00)=""/4096, 0x1000}, {&(0x7f0000005780)=""/4083, 0xff3}, {&(0x7f0000000080)=""/52}, {&(0x7f00000003c0)=""/26}], 0x2}, 0x1000}], 0x400000000000237, 0x10022, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r8 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) close(r7) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="90000000000101060000000000000000020000003400018014000180080001000102030408000200050607081c00028005000100060000000600020004d2000006000300001500003400028014000180080001000506070808000200010203041c000280050001000600000006000200001500000600030004d20000080007000000012c0c00058008000100667470"], 0x90}}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000800)=ANY=[@ANYBLOB="c8000000000201060000000000000000020000003400018014000180080001000102030408000200050607081c00028005000100060000000600020004d2000006000300001500003400028014000180080001000506070808000200010203041c00028005000100060000000600020000140000060003009c400000340003801400018008000100ffffffff08000200ffffffff1c000280050001"], 0xc8}}, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r4, 0x8936, &(0x7f0000000180)={@mcast1, 0x49, r3}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x702, 0x36, 0x0, &(0x7f0000001080)="e460334470b8d480eb00c15286dd08d8829f5fb5e2eb3b56fddaa2b27da9d81c20bfde92a3cd98f29389530882794568195b29c77653", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m29.72621998s ago: executing program 0 (id=4397): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x4) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'ip_vti0\x00', &(0x7f0000000100)={'gre0\x00', 0x0, 0x80, 0x40, 0x80, 0x5, {{0x27, 0x4, 0x2, 0x3, 0x9c, 0x67, 0x0, 0x2, 0x4, 0x0, @multicast1, @multicast1, {[@timestamp={0x44, 0x28, 0x9f, 0x0, 0xf, [0xc0, 0x7542, 0x2, 0x1, 0x4, 0x200, 0xc0, 0x10, 0x2f5]}, @ssrr={0x89, 0x7, 0xa8, [@rand_addr=0x64010101]}, @generic={0x86, 0xf, "1dbe7c7ff9bf15b0b7013e1483"}, @cipso={0x86, 0x8, 0x0, [{0x6, 0x2}]}, @end, @ssrr={0x89, 0x17, 0xf1, [@private=0xa010100, @local, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101]}, @rr={0x7, 0x7, 0xf9, [@dev={0xac, 0x14, 0x14, 0x2c}]}, @generic={0x88, 0xb, "e7b2a6e3f8fbf045ab"}, @ssrr={0x89, 0x17, 0x55, [@loopback, @private=0xa010100, @loopback, @multicast1, @broadcast]}]}}}}}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000720000032cbd7000fcdbdf2507000000", @ANYRES32=r2, @ANYBLOB="ff0001000100010000007fe5572200000000"], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 2m29.71660752s ago: executing program 0 (id=4398): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x804}, 0x0) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x11883}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2404c0c5}, 0x0) write$tun(r0, &(0x7f0000002380)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaa29"], 0x104a) 2m28.686836446s ago: executing program 0 (id=4404): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000000c0)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r0}, 0x8) r2 = socket(0x2b, 0xa, 0x1) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000380)={'gre0\x00', &(0x7f0000000280)={'syztnl2\x00', 0x0, 0x80, 0x8000, 0x9, 0x1, {{0x2b, 0x4, 0x0, 0x8, 0xac, 0x64, 0x0, 0x2, 0x29, 0x0, @remote, @empty, {[@timestamp={0x44, 0x8, 0xa4, 0x0, 0x6, [0x4]}, @end, @lsrr={0x83, 0xb, 0x27, [@local, @private=0xa010100]}, @timestamp_addr={0x44, 0x24, 0x9b, 0x1, 0x2, [{@dev={0xac, 0x14, 0x14, 0x22}, 0x8}, {@broadcast, 0x44}, {@remote, 0x4}, {@rand_addr=0x64010102, 0x8}]}, @timestamp_addr={0x44, 0x2c, 0xed, 0x1, 0xb, [{@multicast2, 0x6}, {@remote, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}}, {@loopback, 0xd}, {@multicast2, 0x9}]}, @timestamp_addr={0x44, 0x34, 0x32, 0x1, 0x5, [{@local, 0x9}, {@rand_addr=0x64010100, 0x2}, {@loopback, 0x66}, {@multicast2, 0x2}, {@multicast1, 0x8}, {@empty, 0xe}]}]}}}}}) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000004c0)={'gre0\x00', &(0x7f0000000440)={'gretap0\x00', 0x0, 0x7800, 0x20, 0x4600, 0x7fffffff, {{0xe, 0x4, 0x3, 0x1, 0x38, 0x65, 0x0, 0x81, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102, {[@end, @ra={0x94, 0x4}, @ssrr={0x89, 0x17, 0x1d, [@multicast2, @empty, @rand_addr=0x64010102, @empty, @multicast2]}, @lsrr={0x83, 0x7, 0xeb, [@broadcast]}]}}}}}) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000a00)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000009c0)={&(0x7f0000000680)={0x31c, r3, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_STRSET_HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x16c, 0x2, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0xa8, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}]}, @ETHTOOL_A_STRSET_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x48, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x4}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x4}]}, @ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x31c}, 0x1, 0x0, 0x0, 0x40}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000100)="c0248738d13756666b715d45f4b9984c058be87e7020f9ae8ceb3dfb948c11564cc3d11e8bf0dcbc82763e8811057be98aa868074a37d46a23ba8a2d39cee7513e054deaab6734c10a75f1ad29a6300c98133dea14b366de26c7060fa3759353203c8c3f5a82f57d40f82bd41e252f042a15482c7228be0af1b9cfca9bed429c48a65cae514f38", &(0x7f00000001c0)=@tcp6=r2, 0x2}, 0x20) 2m28.435683864s ago: executing program 0 (id=4406): syz_emit_ethernet(0xaa, &(0x7f00000003c0)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x9c, 0x2, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @local, {[@rr={0x7, 0x3}, @ssrr={0x89, 0x2b, 0xae, [@loopback, @dev={0xac, 0x14, 0x14, 0x2d}, @multicast1, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @multicast2, @loopback, @broadcast]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private=0xa01012f}, {@multicast1}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@local}, {}, {@dev}, {@private=0x4}]}]}}}}}}}, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r0, 0x111, 0x4, 0x0, 0x4) syz_emit_ethernet(0x3a, &(0x7f0000000440)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x4, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data}}}}}, 0x0) 2m27.848652959s ago: executing program 0 (id=4410): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x27, 0x301, 0x270bda5, 0x25dfdbfa, {0x1}}, 0x14}}, 0x80) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_RECVERR(r2, 0x114, 0x5, &(0x7f0000000000), 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$key(0xf, 0x3, 0x2) recvfrom(r4, &(0x7f0000000100)=""/237, 0xed, 0x22, &(0x7f0000000200)=@ethernet={0x0, @remote}, 0x80) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="a2b3282e4e195997284400000018003903e4", @ANYRES32=0x0, @ANYBLOB="00000200000000002400128009000100626f6e64000000001400028005000100050000000800090000000000"], 0x44}, 0x1, 0x0, 0x0, 0x41}, 0x4048010) 2m12.757636522s ago: executing program 33 (id=4410): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x27, 0x301, 0x270bda5, 0x25dfdbfa, {0x1}}, 0x14}}, 0x80) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_RECVERR(r2, 0x114, 0x5, &(0x7f0000000000), 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$key(0xf, 0x3, 0x2) recvfrom(r4, &(0x7f0000000100)=""/237, 0xed, 0x22, &(0x7f0000000200)=@ethernet={0x0, @remote}, 0x80) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="a2b3282e4e195997284400000018003903e4", @ANYRES32=0x0, @ANYBLOB="00000200000000002400128009000100626f6e64000000001400028005000100050000000800090000000000"], 0x44}, 0x1, 0x0, 0x0, 0x41}, 0x4048010) 1m58.06262244s ago: executing program 5 (id=4663): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000500)={'hsr0\x00', &(0x7f00000004c0)=@ethtool_sfeatures={0x3b, 0x2, [{0x200, 0x4a39b33c}, {0x2, 0xb}]}}) r3 = accept$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local}, &(0x7f0000000140)=0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000711243000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000001cc0)=0x0) sendmmsg$sock(r3, &(0x7f0000002280)=[{{&(0x7f0000000240)=@ethernet={0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}}, 0x80, &(0x7f0000001340)=[{&(0x7f0000000340)="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", 0x1000}], 0x1, &(0x7f0000001380)=[@timestamping={{0x14, 0x1, 0x25, 0xffff0000}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0xffffffffffffffc2}}, @txtime={{0x18, 0x1, 0x3d, 0x800}}, @mark={{0x14, 0x1, 0x24, 0x6}}], 0x90}}, {{&(0x7f0000001440)=@rc={0x1f, @none}, 0x80, &(0x7f0000001600)=[{&(0x7f00000014c0)="4ac55ba37e7880d0b06c2ea1acc622d12d6639ed5047aae56c0fae95c7c49615157af5ddd4c9ddee8c205ac8d95c3aca520d2052dd63425d2d96eb7dc9ca8ba72d5e92116e67e6af6dd39c20efec2f59f720ab3a94cffb04d1f543a4ac98589214992713bb23043183c15bd2ae3e251e563e35de958f44d07eba05818f0cb82797150c8223f56bcb01e474adedda9e86faa71270c68b1e29483fe1ec3316309cef4626516912da7e482892c8581ef31b76b7d9c42e24f868f45a92842525bd2ad465e5ad", 0xc4}, {&(0x7f00000015c0)="d078888ae38f17cacf", 0x9}], 0x2, &(0x7f0000001640)=[@timestamping={{0x14, 0x1, 0x25, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}, @mark={{0x14, 0x1, 0x24, 0x1a}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}], 0x60}}, {{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f00000016c0)="9fb19697ff743c52f8c17c609f4814f7e5cc70d3503575ae62ccd96adf9fcdd67bfbfdbef21c8f9cdb48446dcd9c0d2e36939b722d28a4512d922a183182ab7aa0c803958d5a3c056bb244e9e9266483fc2bfed17d509d1110991690982b5e559d5d39353638cf7a12b281797344c8713c52daad8a883b5571f7fadad77ac9fe0519b0ffbd597e6fd2487bd977ee7f3c50f7c5c7177530f0cfc151453b665badaec794f012c0b3d673b2ba2bc878414c6a51c70e196c46a0ee04eec5c2f8a17eb2cb10cb578eb9d153e6fcce88e908d0a095088316df699b8542ff047815cd0c5aceca60a214589a", 0xe8}, {&(0x7f00000017c0)="499374c8a9fa683acff223c7a03af759449b20bc36ef4e507c1b816c5c68d626dffa55f3a417a3d3d2515c025af032d72b3cc9dc3ed31f47f62d105268dd2c34", 0x40}, {&(0x7f0000001800)="2fcb58d9a213ff718162f642945983c91da288419bdca668f82d69d7f72675f08f4b3e05fff4f1b6b2d82ead95c38c301e5c111c6ff3febcf4b9a643caf0c7e7c7229f63b9ddb4aeb8a02b7fe122263967999ea28cc8fed13320c281a68fa29b10df14800e8ed486376cfcf3a344b3d3294a8f5d1718a47bb88e1d65acce0f05f102da0c59a65e7aa76243464fdb1ab4a79a448afc01a3e8674b72e34892715b5034924cf223877b", 0xa8}, {&(0x7f00000018c0)="1542cf7dc70f2727dfcbe618a523391a3f48819385cef5a470db4c839780239c6393ed366d134fa3a27aaa957d41f0e979d94578b15059263674a1e62e5beaa59069ee3818490f1ace7d970076556b4f4ac55b50", 0x54}, {&(0x7f0000001940)="123904f4c4eb", 0x6}, {&(0x7f0000001980)="66b7186c7372fef7fb345c114d2089e20bc11293ca236b670ca6f900e2b5a1fa29e6f93312d92efdd49dff682d08aa99aa0d350ba128032881efc028746b57867fada99094be421e9d21abf9444b94e86fecaebe34689d2c3a14b9f0a32261b3ed99d7124e15b0a818159ce8118ca31f40dc8c6a175625758e2f9569428cc92734f645f96d5a8f6014428fde2ef4ba15c4c0c21fe226e4ec1e38878ade3ed9426dbe1f0c3a5a564e434baf7c06eb6534d0eeb9befd04601feda6e25b4995f2fb6b8483e8ee327cbc3960ed0c376df3d6568e5c6577ba7da06bb19416dc1e2ff5", 0xe0}, {&(0x7f0000001a80)="3d1a3003243602cc2f9fffafd1a15ff1d841e9e9a5225293766a11daad4e4e3e711e6ee2d5dc99a7091c85994220af4a8c351c6d6731ca267fd9ee5a813b4f5d334f0113b9b788c27a6c3f1e772008e04f27b7f0d2d0a7ef5b6b88f8dd70d64affe8dffc226f781dd07bdc4983bb5d0952bf60161cc0b0211c7ba641d67cc86f78dcd6f0dfc817bb22e8d08c38aa130fc7a19954b5a70c06529ae9", 0x9b}, {&(0x7f0000001b40)="0469bd88736841e5822e525dfc320cf225bd2dc190faf219f1f63d97ce2039f6e7e7fc867bc58778e63758beff015be8fd60ba1d1a6ed75dd12036b473e758d714a18ce74794bd37064b5d14d7b358a8399488daf10d8816dfbf67b399b13a2531a8110d11fe089d6d547d7e2790123e69b0f78e4ec250175a8948c28b54c41371ddb9e76910c870086b399aa42b19f6d0e1c33f131252b0291d3e8a4021fdd60de5b89f84bf0fe2db60a4c0cad7d45a81c80e84", 0xb4}], 0x8, &(0x7f0000001c80)=[@timestamping={{0x14, 0x1, 0x25, 0x1000}}], 0x18}}, {{&(0x7f0000001d00)=@nfc_llcp={0x27, r4, 0x0, 0x5, 0x7f, 0x47, "6e3d05884c978f5b3a9c483dfc86c1179dd789cab51fa44721a1d0972953a675345b4583655dea100ae58c9bea30a5aba3bdb582b2b99bb552eb03ae9714c5", 0x23}, 0x80, &(0x7f0000002180)=[{&(0x7f0000001d80)="24a8009b32d6da7b1fb2eef4c00faed0cdc287ecf9ba31c257922735647eb9e30dbd22edcc6f8ee9ddffe84eee3301e3695121cba6bdee5c6daf75fae8518b37f2fe1d4124f832bc586afdd05d76eb51e59d069cc6d78f3327bf25b2cc2fdabd4788fe6f53", 0x65}, {&(0x7f0000001e00)="8ca0979e79b8d0f6bbd04cb29e3554ac7d16788b33735d721d252bc077f23dc3efbfae13f6bfe23e87cd5e4bfa870ef08529860ed2e783e181dcf411e2df12778a842691e13d451a68c4cfcfcf6e598d84e0dd5e855fff98312588dd779c9b5d9787c49cf4c2ab3baf01f585483c84dcf501ebbefff36fd991a268d04201e1bd5323f43ca7e9f8eae1ae0b624e76268006383d10c2ee74b202206f4835e167e1cb013357951e83f2560370175654bfaa07585c020488b04824836993f34b551a7da8472c9e21072d4c4ea2a41c1fcc", 0xcf}, {&(0x7f0000001f00)="f10d0c1bf492dd5b6b13c2e454bd7ca7a55de1e5d706fc797603797db631bdb352fa31189306c0bcfad7bcfd8b021a7f9639545917215105bf04bbb1798c82e548d0320192c10344e62b7206e9ee5db73ca93444816e7126c29814f471645302fd18c4ed4e3101d8e4b9d4424999444a3cf7eb8bceecf24a4dfd7c1b79b6a3a47af673a47c582dba75f8ec0ef899af81b7eb443dff84584108643e1c5d65346ce1456403465363f8304df33913dcc1a4e1fafff88ba6ab50f1d078a7b2b89496c6c063546fe7dd16d66f9f5661c43db67310da3eb2320914718b0aa41e6c691799c3b3cfbacb305289", 0xe9}, {&(0x7f0000002000)="2c4975bd770049262980df4dd60f0928a69a9de306313ca90693c9367f484fc0dd810dcfa38dc35e06f841757030fffd6d7f740ccd4a03fd4afbaefc15a9da53f9d6e3aba7130adfe861c847a9f392edbfe39441b5fab80e3d24df74f38c73499b568c6b33370434e4fc13250f8ce86063579dd3b224fac07c736c8e67e69047b0c9ce51d35b8fb03f33ce0874ab90647671586afd0927c5481674f1baa06231ea06573a43f4af439a3728796d132e41ba76b0270dea5ea1b01ca983017f577bdf4d25e37fd8054742ce20c2442bd50129990547b3b3e182da0d83a062d4b08a1e3d3cbb27a7fea86fd8acace5a5def9e4e6a41a", 0xf4}, {&(0x7f0000002100)="dad6e45892f2e828a501b6f32eb48e855e0b69cd25d8d26eb3d1224a617b77f4b9ffba23471e1811eae5fabd921fae1a3494e742d499cdbe7540e3ba4adf657b37110818b0bda51266de3880a863626986efa0ff1e146cfe99fe012e40adac9bba270de431db9d3fe7083d8bdb6e54", 0x6f}], 0x5, &(0x7f0000002200)=[@mark={{0x14, 0x1, 0x24, 0xffffffff}}, @mark={{0x14, 0x1, 0x24, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x400}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}], 0x60}}], 0x4, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x40010, 0xffffffffffffffff, 0x0) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x11, r5, 0x3fcb7000) 1m57.672953634s ago: executing program 5 (id=4668): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000540)={'netdevsim0\x00', 0x0}) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c0100001000130700000000ffdbdf25fc010000000000000000000000000000ff0200000000000000000000000000010004fffe4e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fe80000000010000feffffff00000037000004d232000000fc020000000000000000000000000000050000000000000000000000000000000000000000000000090000000000000001000000ffffffff0000000000000000030000800000000043050000000000000400000000000000ffffffffffffff7f000100000000000001000000000000000000000000000000000000002cbd70000535004002000400500000000000000060001200726663343130362867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000080000000210466d38547aa140db9a200000000c538c7cb7a0c001c00", @ANYRES32=r1], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) 1m57.456627975s ago: executing program 5 (id=4671): syz_emit_ethernet(0x2b, &(0x7f0000000000)={@link_local, @dev, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0xff, 0x0}, @multicast1}, {0x11, 0x0, 0x0, @private=0xa010100, '\x00'}}}}}, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000540)=@newqdisc={0x3c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {0x0, 0xa}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xc, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x3}]}}]}, 0x3c}}, 0x0) r3 = socket(0x15, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x2720, 0x0, &(0x7f0000000000)) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$MRT6_INIT(r3, 0x29, 0xc8, &(0x7f0000000100), 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x8) setsockopt$inet6_tcp_int(r5, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r4) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000000c0)) sendmsg$NFC_CMD_DEP_LINK_UP(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={0x14, r6, 0x1, 0x4000}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000024c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002480)={&(0x7f0000000800)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x4}, @NFT_OBJECT_SECMARK=@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}}, @NFT_MSG_NEWTABLE={0x130, 0x0, 0xa, 0x701, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_USERDATA={0x3c, 0x6, "26aff74cb838bd46fcc52cfae7537d1b257b46b6bc29d8288faaaf67ae2887a3c47f8ccbcc0bfd080038fb3dfc3e9e52f6fa1f4d1afd6149"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0xc2, 0x6, "97869c27c002f2ed7fb15baf1ad8310556c95694c05dc3c3576c05847617b197861f13b54d5e8985a7cdefca34f64fc6314d989c91c383b222e653f7048d93a6a55dc9993929d8af52f68c3d4f5fbbbf0b5c912666548114aa3fc025cc170160c2df25cbdeebfd4d7b653fa8a9ccc88a70c02f80c3d65fc8fa1c9e9f0859fbed634abd74a2f86b2623d61f5f8bd8a1d1f39c852a89da85a72484809f2d26bd9da25f534f509a535810d253fd031bb540782b317638e30eded93c607ee358"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWFLOWTABLE={0x154, 0x16, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_FLOWTABLE_HOOK={0x40, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x40}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_team\x00'}, {0x14, 0x1, 'bridge_slave_0\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7fff}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0xbc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0xb8, 0x3, 0x0, 0x1, [{0x14, 0x1, 'netdevsim0\x00'}, {0x14, 0x1, 'caif0\x00'}, {0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'geneve1\x00'}, {0x14, 0x1, 'ip6tnl0\x00'}, {0x14, 0x1, 'ip_vti0\x00'}, {0x14, 0x1, 'vlan1\x00'}, {0x14, 0x1, 'macvlan0\x00'}, {0x14, 0x1, 'ip6_vti0\x00'}]}]}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'virt_wifi0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}]}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x8}, @NFT_OBJECT_SYNPROXY=@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}}, @NFT_MSG_NEWSETELEM={0x1890, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1844, 0x3, 0x0, 0x1, [{0x248, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x1b4, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x7e, 0x1, "0f389d7f794a4d15343e456ec3a9e12017c8a55c5c6c6a07511ab5fe4f434453ff3c62c285a9c8217aa91cbc2b6a61f3f5d4a5ff0907633ca60bcb8b5cfe5194f5c612bc9cebfc4fb5683e79af274078551d089c9573dcd228a914ca6527fe82c7816556876962c4cb903f8c072c5142f9c73b5352ebe0046cd4"}, @NFTA_DATA_VALUE={0x9b, 0x1, "543e529b191093d6a3919ac9a27980704c4d8d6ed814ae6094a8a41a93511f8cc75e4796face0157635cb8c5eb0c210377c4249baab06f7bd38864b55db55d8c2ca22f864ec5f388c7400fff0c4da7bfaf85617ea15904abd7e5d65ae9f82185cfb3276663c473f9c07f56ddb5c1d00a89942b7c23c9db332b4b425b01d264080780cf8d3a260f5143944f5faa602d18977fa380728098"}, @NFTA_DATA_VALUE={0x52, 0x1, "cd3c85f559b5d642b037f65c39a88f645ed4a5beb443219ac241bfa2299d876b116c046924a68dc7009a5e880a31dd68ffe6fb87c6d8aee22a7b771697601a4fd13508e5b63c78c8fe73008e07ab"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x74, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x64, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x80000000}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}]}, {0x20, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x1c, 0x7, 0x0, 0x1, @payload={{0xc}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x6a}]}}}]}, {0x15c8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_KEY={0x18c, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xb4, 0x1, "b55c0624c330f14cd08a1298e53206c41a4405fb7f55a9dd707757668ac62b35db739b02f62505ba857953b670fc02042e02b4f631c25d0b01c8e0f878390a608c2292991ef3ff635dbdc2210921faeee9d791edd403e293c5ceeec64d6cb9322d87b63ac3d0d36decf66a471308bd858a5ca29dc8d8f226b159b4835821bebcb6019a7aa56fc780ee58788c4b1b3cb63ef2ad4a997537a8f317af2c5f2a6ae260a2c1e5aff03bec82f2f8ee70bd7968"}, @NFTA_DATA_VALUE={0x5d, 0x1, "a689b0fbeef98455ec28b7ce6fbb4f2900365e55ec9dd2092a013d9fe42856530a1b0981690f6c69382e1aecd62cfffe013919ecd7229a7883367f202ed1b0105abd367433b99a6c34b7dccdaf606eda871175d7a5b8d291e1"}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_KEY={0x32c, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x36, 0x1, "fbb920c5c7b20c933a40762315f503771b20a689731c50d2e80bfe35ccada219447ce19e7a53f98efa5e1283cacb40128c58"}, @NFTA_DATA_VALUE={0xf8, 0x1, "e73ad238e8da343b129222eb6d2229158ea66474bdd0955dac24202f83202ac4ce2aeb0d1e2725e133951dfbe2f3278ace30a0f5b37b7f7150aa38fce9ab96e7daf1d83f5410ea522e5794b5b8bf5c750002610ad8bcc390843641340063a02e57a759c919ce155da063fd2b52d9dbc56e8d8b6f0ef10a182c70f363a4667dfe1200115ca1cb6f2c321cbe26413bccfc9193f8ed8ea86f7f0e39b3fc3c7a84ac060b9f524207201551cf00107659f6621ac1d5c4e915722b055e2b4964d2c4673a174000170d3b699cf7dfae0045d70fb473b68ef97f6e2ff84825d9f7f43ac3cefe104a9102eb6dbe2f28630ffd78f270b0e3f0"}, @NFTA_DATA_VALUE={0xa1, 0x1, "9e9f5a31549308a0cdd903b924b99fd773b5abdd6b413f81b009e0dbf2e46771bc8dcdcec5ebfa3e979f6140c38e4b1ce19a971621d36632849196ce2214dab8ea09249ac297451e5aa02c12d06c0f23b362fe274a7a0f3144e25a5e9153629ac1cce4d3ab33a100016343f2a99bb21fafc46b7f83ce0007b7b4864f4249163acf32e22ea78b25dd67128083c9afd0fe01d4704ce23c5305ffc7444752"}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0xcd, 0x1, "50c4ea08f94f3d1c8692f1539d4a71cca15357bd210805d78ef799a68bed48dca1e3412fd24de10a537d56aa33127853e9cfb429a30af3ebe769a9210eee9d88378340da62ff2b7061ad9565b7deaef1a655b6e7e90ade6467513f38e76791bc56655c1d28bdf558a1246c6d255cc5881751db921b32b4e1692cbc8f99a4e585852fef0ee83ada0675be34d94f55c0d34e32e5954452f9eb14d6dbab3175de3336b2250ab976bcc6d31b8d00f5195a09fbeb800633bd2d2b4454d72e9980281630f2a6e6b4ffa3c8f6"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}, @NFTA_SET_ELEM_EXPR={0x38, 0x7, 0x0, 0x1, @connlimit={{0xe}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x7f}]}}}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x8000}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_SET_ELEM_KEY_END={0x10b4, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x9f, 0x1, "780d0cd2904b742505b506960c65210a6a8a9113d0095702e9148b38587daa79e1e918500736c3622f787b9d31fd3cbaf3af81d2760dd754b5522fda59bac255c3cf468f85042f5bb196b1b1315dc231a4de9027c434393dc32f47d35bb464eb4a08af730016a11353fdb4f9e27871a5d6fef7679a72a16ee6480669ab847e7daaa4fec00b2ec83d5b4ce8a1ff941667ff2d5e6d043c0d6bf912cb"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7000000000}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELCHAIN={0x60, 0x5, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}, @NFTA_CHAIN_HOOK={0x3c, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_DEV={0x14, 0x3, 'wg0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6390ce98}, @NFTA_HOOK_DEV={0x14, 0x3, 'macsec0\x00'}]}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}]}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x1c40}, 0x1, 0x0, 0x0, 0x40000}, 0x82f35271e6bedb24) 1m56.87095384s ago: executing program 5 (id=4677): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000018c0)={'bond0\x00', 0x0}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000001280)=@nat={'nat\x00', 0x2, 0x5, 0x4b0, 0xf0, 0x220, 0xffffffff, 0x0, 0x220, 0x3e0, 0x3e0, 0xffffffff, 0x3e0, 0x3e0, 0x5, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x2, @ipv4=@multicast1, @ipv6=@empty, @icmp_id=0x65, @gre_key=0x732}}}, {{@uncond, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}, {[], 0x0, 0x2}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv6=@private0, @icmp_id, @port=0x4e22}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @private0, [0xffffffff, 0xff000000, 0xffffff00, 0xffffff00], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], 'syzkaller1\x00', 'pim6reg1\x00', {0xff}, {0xff}, 0x33, 0x2, 0x5, 0x20}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key, @gre_key}}}, {{@ipv6={@remote, @mcast1, [], [0x0, 0xffffffff], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x510) socket$inet(0x2, 0x6, 0x3) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000022780)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0xc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90c1, 0x5c81}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x40}}, 0x48010) 1m56.34553304s ago: executing program 5 (id=4679): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x804}, 0x0) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x11883}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2404c0c5}, 0x0) write$tun(r0, &(0x7f0000002380)=ANY=[@ANYBLOB="0a000e00bbbbbbbbbbbbaaaaaaaaaa2988a80c0081"], 0x104a) 1m55.626676236s ago: executing program 5 (id=4687): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRES64], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000c40)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000060000850000001b000000b70000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b0000000000357213000000100d000000000000", @ANYRES32=r0, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000010000000100"/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x13, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000020000000000000083ad000018110000c9664c41aa6aef4ed8464cba58ae57dba2a6792ffd277a7f8d8c5ce5064cba9cdd76f147145adcac5c156e6fa8a7df5179cbfba231040143904feabcd67da88af2b971da8840a883eef03feb286525360df8ffd13b09dda35d9e836816aa006590f05495f80194a1f26626a9b536302837041efbb700ca3069151aa2158d986014c054a36faeb2ef4b", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r2, @ANYBLOB="000000000000000085100000f9ffffff8520000001000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) readv(r4, &(0x7f00000005c0)=[{&(0x7f0000000100)=""/69, 0xe56}], 0x10000000000000b7) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7001}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=@newqdisc={0x3c, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x5}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000081}, 0x84) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$nl_route(r9, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000000b0)={&(0x7f0000000280)=ANY=[@ANYBLOB="2000000013000100"/20, @ANYRES32=r10, @ANYBLOB='A'], 0x20}}, 0x0) r11 = socket$packet(0x11, 0x3, 0x300) bind$packet(r11, &(0x7f0000000700)={0x11, 0x300, r10}, 0x14) sendto$llc(0xffffffffffffffff, 0x0, 0x0, 0x24000804, 0x0, 0x0) write(r11, &(0x7f0000000600)='\x00', 0x1) setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000080)={0x0, 0xba}, 0x8) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000280)={r0, &(0x7f0000000240)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001c80)=ANY=[@ANYBLOB="61157c000000000061134c0000000000bfa000000000000007000000080000002d03010000000000870500000000000069163e0000000000bf07000000000000550607000fff0720670600003f000000160300000ee60060bf500000000000002f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3897f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45d4e3b9e41c74a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8e545dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f020000361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932fb3bba54b3a6aa57f1ad2e99e0e67ab9ff16d20000009f0f53acbb40b4f8e2738270001562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e75b99f9632b6ce78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d0000002100000000000020fbce0e69cc9c4e6b2816a5f31f0000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34a3c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000020000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c69396289549e7806e9cc54db6c7205a6b068fff496d2da7d6327f31d7c8cc5d325c5379b0363ce8bd1fff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf48903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f3b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db80300c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0453b65586f65c7943d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2cc17dc4a294ccba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da20000d9ef418cf19e7a8c4c328be0ce91798a9c2dca871073f6bd61940aabc86b94f8cbde4dc70667bee722a6a2af483ad0d3415ed0f9db009acaba9eaea93f811d434e00000000000000000000d1542c882e672fea96aedf346279ec000000020000000000000000c6427829b65ee55eef70520871b2a26df69559b5a06ad06d3d0183ae3b317478fff42cc48b461c56baea65a66700000000d5559a5bfd8035e0df99b775a2a49e648dc63b496680bfa8e6979f3e2d9c31083ac3af4e5eff4e8a4e4b6d3855939fbe54014e2e367cfd3872ed8831e709538ed1e61be4778839864f88faa8f4453046eb59b6eea0d1538ccbd86cdfd389ef5bb6d49a66ed8b8915eb8e4315437c54f88eac0c74981dfe8c1239af27e714497f475ead5933f66b7f66b15663adbd804c07a4a10d5283a2fd3a0f50c9d1c0b69aa4911b409b6dda3421dbab8302ff09338f815331e3f3dbf7c119cca600b2248e530fe46f66bd8daec3ac4120ca9e23e1bbbfca76c146397b2006c7186da1065746e1641a44c8d9577617bb9f1bc769861624824565774ea1c0e5c75acb7255bc3b6ebf7beba910830877ddc82be039d33dc3742bef24c290e52af147ce4665e9d23caeceb297c3957335103f6fc2fae34f7e12864311a898ead68e5f8238103301acb7bdd9972359aaa4c3cc3021507e79df0dd0183eb1f2f2379451f556bbd4e695f481a7de7659ade66efb5b09b13c6da24dffd88a0162528ea4962ecea6fe6ad61f64606eb79f87ce8bd3834bafc0cb43f3387a7cd63a84bc7915e63b24ee4388607ba11f80b5100f4c74d0f0f34f22b765ba1fd700e0056a1c48cd53f901e006cb078fb56fc0e293b341a3f61310e85e99527ef084025f058b45d271de774905bb20"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x14, 0x27, 0x1, 0x70bd27, 0x4000, {0xe}}, 0x14}}, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0x20, &(0x7f0000000600)={&(0x7f00000003c0)=""/232, 0xe8, 0x0, &(0x7f0000000540)=""/99, 0x63}}, 0x10) 1m40.480116185s ago: executing program 34 (id=4687): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRES64], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000c40)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000060000850000001b000000b70000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b0000000000357213000000100d000000000000", @ANYRES32=r0, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000010000000100"/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x13, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000020000000000000083ad000018110000c9664c41aa6aef4ed8464cba58ae57dba2a6792ffd277a7f8d8c5ce5064cba9cdd76f147145adcac5c156e6fa8a7df5179cbfba231040143904feabcd67da88af2b971da8840a883eef03feb286525360df8ffd13b09dda35d9e836816aa006590f05495f80194a1f26626a9b536302837041efbb700ca3069151aa2158d986014c054a36faeb2ef4b", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r2, @ANYBLOB="000000000000000085100000f9ffffff8520000001000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) readv(r4, &(0x7f00000005c0)=[{&(0x7f0000000100)=""/69, 0xe56}], 0x10000000000000b7) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7001}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=@newqdisc={0x3c, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x5}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000081}, 0x84) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$nl_route(r9, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000000b0)={&(0x7f0000000280)=ANY=[@ANYBLOB="2000000013000100"/20, @ANYRES32=r10, @ANYBLOB='A'], 0x20}}, 0x0) r11 = socket$packet(0x11, 0x3, 0x300) bind$packet(r11, &(0x7f0000000700)={0x11, 0x300, r10}, 0x14) sendto$llc(0xffffffffffffffff, 0x0, 0x0, 0x24000804, 0x0, 0x0) write(r11, &(0x7f0000000600)='\x00', 0x1) setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000080)={0x0, 0xba}, 0x8) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000280)={r0, &(0x7f0000000240)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x14, 0x27, 0x1, 0x70bd27, 0x4000, {0xe}}, 0x14}}, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0x20, &(0x7f0000000600)={&(0x7f00000003c0)=""/232, 0xe8, 0x0, &(0x7f0000000540)=""/99, 0x63}}, 0x10) 50.994308566s ago: executing program 3 (id=5212): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1e, 0x1, 0x0, 0x0, {0x7}, [@NDA_LLADDR={0xc}]}, 0x28}}, 0x0) (async) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3f0, 0x1f8, 0xe8, 0x0, 0x308, 0x308, 0x308, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xe8}}, {{@uncond, 0xc0, 0x110, 0x0, {0x0, 0x1e03}}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x2, 0xffffffff}}}, {{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x9}, 0x0, 0x0, 0xf, 0x6, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}}, {}, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 'wlan1\x00', 'netpci0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="24e42909e863", @empty, @dev={0xac, 0x14, 0x14, 0x18}, @empty, 0x18}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) (async) r2 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000400)="8907040400", 0x5) (async) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000000)=ANY=[], 0xfc}}, 0x4048814) (async) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async, rerun: 32) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000100)=0x0) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'veth1_vlan\x00'}) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000009, 0x12, r5, 0x0) (async) r6 = gettid() sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)=@RTM_NEWNSID={0x2c, 0x58, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@NETNSA_PID={0x8, 0x2, r4}, @NETNSA_FD={0x8, 0x3, r5}, @NETNSA_PID={0x8, 0x2, r6}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc100}, 0x20000000) (async, rerun: 32) ioctl$INCFS_IOC_FILL_BLOCKS(r3, 0x80106720, &(0x7f0000000340)={0x3, &(0x7f00000002c0)=[{0x6, 0x101, &(0x7f0000000600)="8b7fb3dfbab6fe64236eca2555fb12ac1f4751c6f66e000020599ae8b825b228f0097127130992a09e6b2ba5299e7764fafe6845e3bfed422db0ad94e020255b94eb3a5c6a2d4937978f891f3dadd617f84a9ed26baba7e09415347e8e8a7db3a6cf508c1b5792e9e7f24eef69f2083bb2e9861977e24f32ba36022c22a7f0cb9001d6babfcdb10b9248f7d56293f60001c2d7db44e49c18aab8ce681f5ac90cfd09fab333bc1f626d511a4106d8afe1027347c2843078cc48f17af38a967054a44f7c62de64be518b996b4569a69250502c67223753d2c0650248f83f84c4150f659551056f11e06acd2ba2f8edfe70cbf88f07ba79ffccd37f1eb949b229e482"}, {0x40000006, 0x131, &(0x7f00000004c0)="1b25422af1267300e8a6e0b826feed7e27d3045b322fe45c62933293058ec8eb2cfbed8caa8503e5c3c7cdb05f6df9793c19c8bdb8a27b2d450142bb8859e8433acf4cccc7b0974b81767975177f8fd8c7bef82c5b7c7f21609ba9cc116e72ca28f2b09d2b73080000008b7f18e0779356171329a3bd1b222bda0791120954ec3bd08b172b23c66435f2c4fdd1a363d23bb6777e4c1ccb4bffa83cd0429712f75b1c97e9250f0ca9982a793f22e975473f6990aad33473cf3fa361a535e622ba290aa6d5ebb63d48de27323a2b8af8546f90f2091a1fb5c1a106a2a253147bd12f2689a461bb13da0ca1a1e69e8cc226939d2278838ce18298a061593428fb773867b1971fa8e3ccc796228cc2ebaa7772b2fa07eb6842562c163f8d68a6066310a12e7eff0d1101eb4b2b88500229a1ad", 0x1}, {0x400, 0x0, &(0x7f0000000280), 0x1}]}) (async, rerun: 32) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) (async) r9 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r9, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) (async, rerun: 32) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) (rerun: 32) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0xb, 0xfff7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x80}}, 0x0) (async) write$tun(r7, &(0x7f00000018c0)=ANY=[@ANYBLOB="000086dd0000110000080000000060ec970000382c0000000000aaff0200000000000000000000000000013a000000000000000200907800000800"], 0x6e) (async) getsockopt$inet6_tcp_buf(r3, 0x6, 0x1c, &(0x7f0000001f80)=""/4096, &(0x7f0000002f80)=0x1000) (async) sendmmsg$inet(r2, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) 49.907529015s ago: executing program 3 (id=5222): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f0000000280)={0x8, {{0xa, 0x4e22, 0xf33, @mcast2, 0x9}}}, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff002, {0x0, 0x0, 0x0, r6, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0x8}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) close(0x3) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)={0xa8, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x3}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x5}]}]}, 0xa8}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000801000000000000004000000850000008800000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) socket$inet(0x2, 0x5, 0x0) 49.487259494s ago: executing program 3 (id=5226): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(r0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="5400c602a4929a1300000779daf40e5793babc68881460eb1e54ce4a33531fed5cc5ffc9e1666793c6a29f2358fecccac1481232ee064088fc558ddafd71219a99f58635e1bd2f0370fb437930605e44959dcf3f5635", @ANYRES32=r3, @ANYBLOB="000000000000000034001a0006000106506c125b818a2b03f5000002"], 0x54}}, 0x1004c050) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xc, 0x5}, {0xf, 0xffff}, {0xfff2, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000810) (async) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) syz_open_procfs$namespace(r4, &(0x7f0000000000)='ns/cgroup\x00') (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, r0, 0xf60e1000) (async) socket$kcm(0x10, 0x400000002, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="38080000100001040000000000000000000000c37c0f530091ae15f6b9952ac2dfbd86bd1e30de8b742e69371c9495d1183ef986264b2cf4b114ed799a39df7fb7b524bb3f57a6afa6f9fbd6009f48a4eeb6f63588c073ddbdce1fd7af652e9ebb38fe1f11abc7e96fa33a86ebc9db8710c681e4f27cc0aad928de6e2c32e3d0c098f096bb603dfd4e37e59a34e09db5d6cef7ae7cace247d9f83b6e9853e44968f1b07011291a883bef352622125599b8d912cc77b76e44f7a170f85cc2008669d451065848e8e6d6", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800b00010067656e65766500000800028004000600"], 0x38}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1100000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="00000000000000000000100000000000000000008fb9385c105250f38e6bde97db9fc45beb5b28998dffebc3bc6995327791c28dc65beffdb3ae2c97cb5cfcc036eba953cf0652951e814da38082e77dfa450652b97705ffdfaa571f1ae1f8d8fba0c6fa305f618cf0924dcc999ecaeba84a0ad0743ebf809b0c06076627dfdaf9e32237e792b107b4bc03c8d93edea7e4d82ebfc37134333cee5f4be3bc9cfecba069ab2a70959351ae697a39d298fd0560bb1f8c0adf35ff9bb22cd75ddb4b551268c31e795562e63cd2362bff6e0f0684b3f225fbf3507af344e89c85e3bc1cc6a4866554f95fdea6bfacb5a9dfa0f477c2e03dc726eb346f22cdbd61579ad98c73df1bf4e449014f9cc964c0f9ec", @ANYRES32=r4, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000cb1152f97227a47fad5e79cd22afabd6408e2adf2965e8de9cdea67780c0430d549107cc6eccb683c7d5732206932cff5fe2c8186a3ae9265e77d205300c952724af3144d1c3f9bdff7e47f43f1af5776153525eb15b47a04da18c3afe9bbb4badf5ba113a3008267476f66c3c9c1d5d655731202a7b90917b32227adc3ea92465f59632dd6f34c8b1d03e863962c7b96d1f32d26ee08e"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r6, &(0x7f0000000300), &(0x7f00000003c0)=""/174}, 0x20) (async) socket(0x2a, 0x2, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r8, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000000e0601020000090000000005a26436b3f854553d6f0009"], 0x14}}, 0x2c004000) setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x39}, 0x1c) r9 = socket(0x11, 0x3, 0x0) setsockopt(r9, 0x107, 0x200f, &(0x7f0000000100)="00008634", 0x4) r10 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r10, 0x107, 0xa, &(0x7f0000000300)=0x2, 0x4) (async) setsockopt$packet_rx_ring(r10, 0x107, 0x5, &(0x7f0000000040)=@req={0x0, 0x7, 0x5, 0xd}, 0x10) (async) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000180)={'geneve0\x00'}) 48.105830918s ago: executing program 3 (id=5239): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) close(0x3) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000080)={0x1c, r4, 0x303, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20044080}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1002000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, r4, 0x100, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x5}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xd}]}, 0x2c}, 0x1, 0x0, 0x0, 0x60080c0}, 0xc800) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) sendmmsg$inet(r8, &(0x7f0000005bc0)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f0000003180)="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", 0x1000}, {&(0x7f0000000440)="8fa3c1461384cc858dc7a07fce5b67a2c536af36638bfed278bb4b92fecac25a7e2c49448fded5a11f27ff49a768b7cb6edb1c3736dc44520cb72d0a63961a9f5eaecd00178a328aaaffdcb4a6065610ea94200f2c0202983f7c875d4e1cd17c7d1890db2e976f5f79b71692870e81bc2ca33765a7073641e5fa821be5fdb3fb92365bd2597f27a12d5a059aa96ff5dc5626e5", 0x93}, {&(0x7f0000004240)="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", 0xbb5}], 0x3}}], 0x1, 0x40) r9 = socket$inet_tcp(0x2, 0x1, 0x6) setsockopt$inet_tcp_buf(r9, 0x6, 0x1f, &(0x7f0000000400)='espintcp', 0x8) setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001800dd8d00000000000000000200000000000006000000000600150001000000180016"], 0x3c}}, 0x0) r10 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r10, &(0x7f0000000080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) 42.799332812s ago: executing program 3 (id=5242): syz_emit_ethernet(0x2b, &(0x7f0000000000)={@link_local, @dev, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0xff, 0x0}, @multicast1}, {0x11, 0x0, 0x0, @private=0xa010100, '\x00'}}}}}, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000540)=@newqdisc={0x3c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {0x0, 0xa}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xc, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x3}]}}]}, 0x3c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}, [@jmp={0x4, 0x0, 0xc}]}, &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x12, &(0x7f0000000200)={@mcast2, r1}, 0x14) r3 = socket(0x15, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x2720, 0x0, &(0x7f0000000000)) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$MRT6_INIT(r3, 0x29, 0xc8, &(0x7f0000000100), 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x8) setsockopt$inet6_tcp_int(r5, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r4) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) close(r2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/syz1\x00', 0x1ff) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000000c0)) sendmsg$NFC_CMD_DEP_LINK_UP(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={0x14, r6, 0x1, 0x4000}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000024c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002480)={&(0x7f0000000800)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x4}, @NFT_OBJECT_SECMARK=@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}}, @NFT_MSG_NEWTABLE={0x134, 0x0, 0xa, 0x701, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_USERDATA={0x3c, 0x6, "26aff74cb838bd46fcc52cfae7537d1b257b46b6bc29d8288faaaf67ae2887a3c47f8ccbcc0bfd080038fb3dfc3e9e52f6fa1f4d1afd6149"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0xc8, 0x6, "97869c27c002f2ed7fb15baf1ad8310556c95694c05dc3c3576c05847617b197861f13b54d5e8985a7cdefca34f64fc6314d989c91c383b222e653f7048d93a6a55dc9993929d8af52f68c3d4f5fbbbf0b5c912666548114aa3fc025cc170160c2df25cbdeebfd4d7b653fa8a9ccc88a70c02f80c3d65fc8fa1c9e9f0859fbed634abd74a2f86b2623d61f5f8bd8a1d1f39c852a89da85a72484809f2d26bd9da25f534f509a535810d253fd031bb540782b317638e30eded93c607ee358252b5b913f20"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWFLOWTABLE={0x154, 0x16, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_FLOWTABLE_HOOK={0x40, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x40}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_team\x00'}, {0x14, 0x1, 'bridge_slave_0\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7fff}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0xbc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0xb8, 0x3, 0x0, 0x1, [{0x14, 0x1, 'netdevsim0\x00'}, {0x14, 0x1, 'caif0\x00'}, {0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'geneve1\x00'}, {0x14, 0x1, 'ip6tnl0\x00'}, {0x14, 0x1, 'ip_vti0\x00'}, {0x14, 0x1, 'vlan1\x00'}, {0x14, 0x1, 'macvlan0\x00'}, {0x14, 0x1, 'ip6_vti0\x00'}]}]}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'virt_wifi0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x71b6d440}]}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x8}, @NFT_OBJECT_SYNPROXY=@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}}, @NFT_MSG_NEWSETELEM={0x1898, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1858, 0x3, 0x0, 0x1, [{0x250, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x1bc, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x7e, 0x1, "0f389d7f794a4d15343e456ec3a9e12017c8a55c5c6c6a07511ab5fe4f434453ff3c62c285a9c8217aa91cbc2b6a61f3f5d4a5ff0907633ca60bcb8b5cfe5194f5c612bc9cebfc4fb5683e79af274078551d089c9573dcd228a914ca6527fe82c7816556876962c4cb903f8c072c5142f9c73b5352ebe0046cd4"}, @NFTA_DATA_VALUE={0x9b, 0x1, "543e529b191093d6a3919ac9a27980704c4d8d6ed814ae6094a8a41a93511f8cc75e4796face0157635cb8c5eb0c210377c4249baab06f7bd38864b55db55d8c2ca22f864ec5f388c7400fff0c4da7bfaf85617ea15904abd7e5d65ae9f82185cfb3276663c473f9c07f56ddb5c1d00a89942b7c23c9db332b4b425b01d264080780cf8d3a260f5143944f5faa602d18977fa380728098"}, @NFTA_DATA_VALUE={0x52, 0x1, "cd3c85f559b5d642b037f65c39a88f645ed4a5beb443219ac241bfa2299d876b116c046924a68dc7009a5e880a31dd68ffe6fb87c6d8aee22a7b771697601a4fd13508e5b63c78c8fe73008e07ab"}, @NFTA_DATA_VALUE={0x18, 0x1, "bf40299f3415b86789d1fa69496c620d1c7a23ab"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x74, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x64, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x80000000}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}]}, {0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x14, 0x7, 0x0, 0x1, @payload={{0xc}, @val={0x4}}}]}, {0x15dc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_KEY={0x18c, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xb4, 0x1, "b55c0624c330f14cd08a1298e53206c41a4405fb7f55a9dd707757668ac62b35db739b02f62505ba857953b670fc02042e02b4f631c25d0b01c8e0f878390a608c2292991ef3ff635dbdc2210921faeee9d791edd403e293c5ceeec64d6cb9322d87b63ac3d0d36decf66a471308bd858a5ca29dc8d8f226b159b4835821bebcb6019a7aa56fc780ee58788c4b1b3cb63ef2ad4a997537a8f317af2c5f2a6ae260a2c1e5aff03bec82f2f8ee70bd7968"}, @NFTA_DATA_VALUE={0x5d, 0x1, "a689b0fbeef98455ec28b7ce6fbb4f2900365e55ec9dd2092a013d9fe42856530a1b0981690f6c69382e1aecd62cfffe013919ecd7229a7883367f202ed1b0105abd367433b99a6c34b7dccdaf606eda871175d7a5b8d291e1"}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_KEY={0x32c, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x36, 0x1, "fbb920c5c7b20c933a40762315f503771b20a689731c50d2e80bfe35ccada219447ce19e7a53f98efa5e1283cacb40128c58"}, @NFTA_DATA_VALUE={0xf8, 0x1, "e73ad238e8da343b129222eb6d2229158ea66474bdd0955dac24202f83202ac4ce2aeb0d1e2725e133951dfbe2f3278ace30a0f5b37b7f7150aa38fce9ab96e7daf1d83f5410ea522e5794b5b8bf5c750002610ad8bcc390843641340063a02e57a759c919ce155da063fd2b52d9dbc56e8d8b6f0ef10a182c70f363a4667dfe1200115ca1cb6f2c321cbe26413bccfc9193f8ed8ea86f7f0e39b3fc3c7a84ac060b9f524207201551cf00107659f6621ac1d5c4e915722b055e2b4964d2c4673a174000170d3b699cf7dfae0045d70fb473b68ef97f6e2ff84825d9f7f43ac3cefe104a9102eb6dbe2f28630ffd78f270b0e3f0"}, @NFTA_DATA_VALUE={0xa1, 0x1, "9e9f5a31549308a0cdd903b924b99fd773b5abdd6b413f81b009e0dbf2e46771bc8dcdcec5ebfa3e979f6140c38e4b1ce19a971621d36632849196ce2214dab8ea09249ac297451e5aa02c12d06c0f23b362fe274a7a0f3144e25a5e9153629ac1cce4d3ab33a100016343f2a99bb21fafc46b7f83ce0007b7b4864f4249163acf32e22ea78b25dd67128083c9afd0fe01d4704ce23c5305ffc7444752"}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0xcd, 0x1, "50c4ea08f94f3d1c8692f1539d4a71cca15357bd210805d78ef799a68bed48dca1e3412fd24de10a537d56aa33127853e9cfb429a30af3ebe769a9210eee9d88378340da62ff2b7061ad9565b7deaef1a655b6e7e90ade6467513f38e76791bc56655c1d28bdf558a1246c6d255cc5881751db921b32b4e1692cbc8f99a4e585852fef0ee83ada0675be34d94f55c0d34e32e5954452f9eb14d6dbab3175de3336b2250ab976bcc6d31b8d00f5195a09fbeb800633bd2d2b4454d72e9980281630f2a6e6b4ffa3c8f6"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}, @NFTA_SET_ELEM_EXPR={0x38, 0x7, 0x0, 0x1, @connlimit={{0xe}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x7f}]}}}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x8000}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_KEY_END={0x10c8, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xb1, 0x1, "780d0cd2904b742505b506960c65210a6a8a9113d0095702e9148b38587daa79e1e9185007080000002e3cf9a7fd3cbaf3af81d2760dd754b5522fda59bac255c3cf468f85042f5bb196b1b1315dc231a4de9027c434393dc32f47d35bb4b66810ed89e13fb964eb4a08af730016a11353fd3f5b4ef79e90a23a461cb4f9e27871a5d6fef7679a72a16ee6480669ab847e7daaa4fec00b2ec83d5b4ce8a1ff941667ff2d5e6d043c0d6bf912cb"}, @NFTA_DATA_VALUE={0x1004, 0x1, "b26981fc1be9e314c6521a56ffa52c39b159b46401ef77d8862238ca51e0c169d8da20940f5960165bdc037005cb1c006b4d62a41a5bb6fd432524aed7002246545a25e054c7996df43ba45859659f3ad4f4ff136c5e0a902830f0681acaa630e9ce3899f7f4cc799d67249f4ca46d4434fcf5c0ba9e508f627507dfb2d15ef09b3203078c7d5739dfef76eb50a299ff030f366dd087874d3872cadb4d84ceac464dcc4342ae2bac737438df3049b9ef6a5a33d761a6139de169ff923bb03f884f12a39f181d08f2ecd352c7479cce956b179d10894e25532e5fb42453da1e3b3bb6d5168c18f725ce3110470feccfbce38c6551c8842e9a7975a69657353ad36c52ba328c545f478b2efd3624599fcb2e4b0e6681a018d322ae8df55c7564601201ae74384f215c6eca7432b666b69c150950fec8460c86201453bf37d8e7aa006067bcad1647360477e352da1c55fa75eedb4df784ba4054a83a48204f254f5385d63ec6d864a8faf37a1974fd523e0767a3c2c82b2002f1e88f88aacb8bf2f708184fa247959377be480839b5df6645f90c91b96f31943cd25cf597355630f5a6448f3d9614c5bded7225b8bb4d68bdaf3ce6b51fc6d9f993b003bacbc2c6fb3ceb7f4c87abc8a4787564b4461aca1a62e2adf61a061d7d252bd071c07eb7aebc1ed4d3eb7d9ecfcb91b2610ecdcebc0e2ce3eee1ce4955a88bcb0965b09f0372116a802335c44b2aa6035989da18649417ef6bca178e8e5f8ab29b10a3a87aa14c240894f416881b910566024c63577a9b2116a6366963d775f9b033115a9ad6157ec705a1586fc214e8d59ed814086d65a3ca190f590186bad2c5e9bb0764f6ebf637db9980926fff3aed4d88d7a907ead72e3db1eacb33bdccf935672b1827fcb31c29427cdff4589454c6cbf73f5aac32ab5945d9b99c6d20085cfb34c16ada605953dd25cfe12bb55a36702a24f4b9b0ed48263df6ad558cef5eec3636f64934da829963401e33fca7280ff6c3f1fca51e9c160e3eab5728361337b6fd1e696e2a4e53e60df4117b720bbf82c7e529ee5b5a39b51099a6de362fba141b88526f92198d41be8d88bb14c3551af9364a731093c1162d4bbde2b49911292a08332f0c73bc0461e026d14f69a60fbf17b2d6732ee822763c40e5e0843d87192d9028390dcc049b741e85e67ff0f4e60027dd02f5a01bcd15596b1d10724567c3a0f1f829619b87ffbcde2c64b5e953725d6c9750aebb2f1f645bb052ad9bd8587c22274f9a1fb43f657333b0d27d356826c5f928af639032b4906d3b71cc57a6165a49f38f4a509cee483c5d5671239db8d1e5139332ce0a2a4c058086c3b0fb33808951f1213071c6ca8a429df39edab81260fb848a4bcfa7ddc8321a06fedb419fecb3308ecd87b391dd157a7caf09b023de5ce290b969eaa8b0c93bb5280b7467857020f6a383bf5f9a839878c4586e078f59f387d46e904387d68a5057e5b696fabc5c658ea3b07229cf632c8b0db52a4912903a298cb19891cd2154ccddeb86c1f0cdb7ee07efa1f3ad53f99646117f09075721ac263f28ea961ff366f86aa80138baeb457419b2f4f829d7d97eb20bbc10b7effa11b257efd00c2f8aa09765018b6636d7c025ca5efcb50516747992c85db9fef62a3816a7440b6d534ae6edcb9b811f25a41a8a2e4550793abd4ae174584c91d00a6fb331f765ba670e93efac7e9426a1ce4518998d5730cb9ad261be3a3cbc55ee3dc000f26db51a9b8dd53ba277637fa464fba494295a60ab0eedf8328cea2a3ba7bbedd94a3be789690976bb82b271e41f45df20f360a9e1bc62b0acae16a3f80faebe86bacf6e0e8d498928bc33a5086b376c96cd4e42538ad43311cb9b10e6cbe6856085604af57be0789cf99d2e3a0723a3514fe93af5cc47e0fba6de5195e625d1aec16e82e9b6a499974915ae35e154ec3fb1182ab16b7b3cc34fe8360357cd4c062254e00caebe7f781418d021e201c195dfcc473d760a94eaaedd7318a6054f9b83cf33a79cb39f9561547215af1e969739f16d7b28e9e36bb64e347e10389aa18ab73ddbaf420ad5f4d4918ce99b18e6e0b92dc47a2a405b3ac345052af56a46292f8848bcfab05859f1fcbb627070d26fa31d416086fdeb0608963334d23715618101770657e0887cdc871983e319444a6dd89f5b4f1d09ee51bc9c3024c565e4a35bdc6146b3a1cedf876ac299f05b7a59a92720ed450eb308034ce5336a879dcb2a84f37788649f9822c477a9fcffdc356afa185a3d5b2cb20719e3b8ecdf0677f5af5d52b801f1496110f480a86a2686c7f1f046fd8c1e1d843f78692b779008fee04766379828de8ce776809caf32ae619536f7d10fb23ea581ba74cfe3eaacaa33c338fb61a29ce462ba99b3a2951a154526a6baf7b60e7bb13d99b5b58a9fead8232a229e56fcc34d310431c4796436efe66b53c1c5efe643e3d86c25166b5ac42a7cb6a69212836bd088f11f4c3fa302da85576956501b35d109b57b3fc3ed042e2b227e0a2badb0bd6318878f9c3f4c587ab02d1a4ce7f6cdb5db7ffeb17b6c8f08ceb1308f1f01b4c9b21c96b03d2e3d2080f05e23cdc52bc38b5e1095f436fc5c90bd7132ad684889c794e1fe763972eba9154ecad3ca7f6582463bc4bfd3048f16bf0d9e96275ec2d8e03faf59b1110dfe6617954270bfb20763399594543a7a6ebac0c426ef77e4fff8c5d35c89b57b77023439c558cdfbe022107da3dd76af94cbade179aca55dc51ecc25a2777aa433a240f431ca888b4874111703cce9bf3d030c65435d0529d967ceb55156535fed71868d001a1b7d0a53195970e5ae65e368da9510c845a46e4cf15ea8d0cfbf666483062b2a71202375ee7fe640b57a1ab9bec965ca5367a0ee6dad3e16ee1296d8cd3faabde95805a33fcc77ee8f634fa401abd8d092e69cbc382c76f696cf630874769549f61e10dc4b1ef8fa28ee78dae15ade2f369c95fb012ed655bdfa4896c50766e13b7f9f2916e3767d90527425f2d5e456ad99a9cdb314641a2321980411ca3ac74c2328bd849b8cbbf7c5afcd459e00050aaf0e81bce3bdb442808922c2c3110b23e16b9dc3ef574f003ddf179b57fd3c01cafbbd587a77bc37b30bc17db5fa5c64923ccc96c1d4ffc932a525eca104254b31f56ffad908f412e64b5c2190a4bcc630a16a6fcc9598bc8bf816501274769bb82d3d027befa7dc807595a67f17ca3d148758f89b916c09ca2109006868e5c324c3b98f04c40ce67071d0c8397aa264091c2b8e5885624110b0edd5918ddbc21b1d7e0776bc5d59e2241594e7efbca8fe0bb22792f0a1724d76f51bf8e166d1e73e5d1cef21d27f8057cf2afd8fb039eb18d5bfef330580df7852c173b8244553072fc5552fcff741808e72d9ccb20c8918a87f2f80f323f1d3c99330cbef91ff3fbe6dc2c9c9db78b50ef013632bc8960d1e16b019ba11d23dfa546f2c5a95eb754d9c3a28c93baa532de26e217da284103781174e7b4b4d73195f14dd581f3d737c7cef73e50dc899bcba2e12c3d853942f058f2d436f81a00b2047801ba1c629663dcb554b14348d2c50156b42717cda3ebaa6586557714b2376202cbd280332547e9a130c103d6d61fd3133f1710c99d5d093d1aecc24747e350c9680cc3e70eae0dfaed9c22e82377bd5aca959cc6e36d7785b6bc23d4affaba4b03460174bfd11d063c061d9b1fafb46225286f55d2ddd032fd64d993a16998fc8e318dad98582fe06211717b846926c30a27d4bf646fc3c43be3247e681394aa95f98a84551d4f52517c386fa483f297ac20ea2db8bdd65bcf2b754539768cf439ac75e920f4dec05d7b459680302bb5167d935148b3112b7b91cb0d04503c7c5cf174c51c44be532729de45184e39adc297b47faf71708ab6baabd95df5bba331d73e6d45012c2446fc4f8a363cf3253a3fd0d63ed56941b5689f34c29834e526c0c6d3932b9316290186232c9d9717d914f65cfc916529adc3fb562590202577f22667b94aed987e3941780960fdac85cb16da8e0b776786b64ba45d34af04b4761870a71b2c62038ec38d2f17fc26fed48e8704398a23d6d8a82e2b163642be6774aaeec32a1101547bf6a034f13322ced350668de08604732c8058ed72047f2bd9ac9febdb8999da1575c7a692906525ea45b6de4c59798643a7b1540208f4caa4cfff87aff383b730f247d94f8807c85df3351fe81f186b72dac2a76badf97bbe164d9e060e2affb9c3e421ecf79d15830f5d0f3ccd9556371ade5b5af8a6d29bb0668b9e0d186e460cb86f2bfe5fcb48105eb012c7c554101f2f8d2fc8ce98f735a00287e5e5700dc212f97a5ccf4f01da4bb4a08adaedd8c7b92deb6c99ccec3e14bb98a38a7a4d8721d8815c52fd2b6968023db1df6653523a1de8ff66a22dad4e5ac0cc28ca0f2e795e8b533bdc33bc5c4170a2c77a9385b4911ac8098f07b3ceeddabae4daaf8e3e0e396559cf2101f7f7f0350dc39bb3da00fe594fe6a5d1fe7478ce12376b4ff816383c9a1bf2cd1a17618245cdaeb57071f195d6769a9a16c3e4785f8711535775c63731642077adcfba9d586d5ae25bd0d5ddc98575f65b64f04a2099e6f733e96a75c5ce2b2286015241f15f7e11d788cc82e127a9e81c9c619e39ddb5db9ec0e2f71980f0546e4ce75d389db37f834563659ad5a469053d7070330aeaa05f5b32464661ea3fe8b13e0387a07d02124f65d74e34142e2f0a17c7a4b922f105e2dbae045e4c9baf85364f5e2643ab7ced7bb323916a606a942674be1ef0998f3d33133f37786c72a79c7624b7fed1b6be43b223f2afd6e7ef6799a45dadc0134bb8f3dd0fdc04453407788ed030d51e6e23a1577036ea4cd5907e7e5f4ba514c7bd842456c133ed75ebff845ddbb874972afca2a28c99d836896511094adddd6ca8f07a650d9ec3a0f7bb4107a54c798db8749ea60f0f4ac7e0bbe1c4540b175d13f89c9cd5dc743beb04bd4d1a4fe4b5fde9919f7acb0e519afc1c06c535c86a1931b8db6d50b658f5db148d75773f90d9d7c1ce40ffdc0e306b14698ffb58d2dd6b3df8d8d988fd4c98dba5e5ad57baf93bb1f47827ddfecf58f3316461240f46f2fcc133612d5bc7bd2ddbc4015c60eb7280901eb3173d925ebda4330c0aa8dbdb8e6ba1b9207d5bfbc8de3e2016bf0601ac266d286efa8d71f6328a01cb210b02f135dcfb9b986a42778d1556ee0eb852b0c93de0bfedd781f2dc6752ad9fca86ae72d9aeec7a976fe4c1a185b2fdc7142652040f8eae3204c9837c55170ffa56c8e66ed8eb48e940efb48f0f7ef824a27f7228dc7cae6bdc85f085e34ab2e31243cfa7f7073afcee7f8d882e1c05b653df427ed450fd0a0d3c189d02661ce28805946c94d26fe3d0b9cabc45b7ba0fffb8436574249ad1556225e0ccfcf5d81b3be235febf869b98d87f4bebdc2ea096f0a3ef244e89376d22c2ad1996c230cf09ed16fe392040b0a861434bf9f092382a96a9500d8eea018ae3b762d23f67f4f380e47cf00e9acaec6113b6517e1e76b122d4b6f690ed9f06b38e8d7b59054c63966655e99cfe05227334ac51210859370553fbf5b3501f0baa8e1b49b9bcbcb10d64dd75f62d35b84687e4402952ee1818e3443312ff458ed55b30b2f600f65b9ebe86a72b1466ccb86523135ab21e5978cd56c842e29d9e8d74a24b27ec01a24b767e008426eabcc6d5a4517e544a827aa9f4cc97b96b3dbb229cf5c989dabaa0765c4a3cfc8"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELCHAIN={0x60, 0x5, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}, @NFTA_CHAIN_HOOK={0x3c, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_DEV={0x14, 0x3, 'wg0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6390ce98}, @NFTA_HOOK_DEV={0x14, 0x3, 'macsec0\x00'}]}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}]}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x1c4c}, 0x1, 0x0, 0x0, 0x40000}, 0x82f35271e6bedb24) 42.138452818s ago: executing program 3 (id=5251): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3000000027000100000000ddfcdbdf460c0000001c00018017000200636c69214bcc51b172af5be4b75bd271"], 0x30}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'macvlan0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd"], 0xfdef) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000340)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x1c, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0xc, 0x0, 0x0, {[@generic={0x4, 0x7, "5eee37d22a"}]}}}}}}}}, 0x0) 26.94347275s ago: executing program 35 (id=5251): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3000000027000100000000ddfcdbdf460c0000001c00018017000200636c69214bcc51b172af5be4b75bd271"], 0x30}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'macvlan0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd"], 0xfdef) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000340)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x1c, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0xc, 0x0, 0x0, {[@generic={0x4, 0x7, "5eee37d22a"}]}}}}}}}}, 0x0) 6.225359518s ago: executing program 4 (id=5499): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000020c0)={&(0x7f0000000540)=@newchain={0x3c, 0x64, 0x300, 0x70bc28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0x8}, {0xffff}, {0xffff, 0x9}}, [@TCA_CHAIN={0x8, 0xb, 0x9}, @TCA_CHAIN={0x8, 0xb, 0x959}, @TCA_CHAIN={0x8, 0xb, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8848}, 0x80) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) (async) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000080)={0x0, 0xe8b}, 0x8) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fbdbdf25270000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'macvlan0\x00', 0x7101}) (async) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x4c, 0x0, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x80}]}]}, 0x4c}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001480)={0x70, 0x0, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@loopback}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x5000}, @IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4806}, 0x0) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000880)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000840)={&(0x7f0000000700)={0x140, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1000}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xc}]}, @IPVS_CMD_ATTR_DAEMON={0x70, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xe}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010102}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_batadv\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@empty}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_team\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e25}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x24008800}, 0x841) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x9, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfffa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x8000003, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc06, {0x0, 0x0, 0x0, r6, {0x0, 0xc}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x9}, @TCA_TBF_PRATE64={0xc, 0x5, 0x68dfd154f25572bf}, @TCA_TBF_PARMS={0x28, 0x1, {{0x8, 0x1, 0x2, 0x400, 0x5, 0x6}, {0x8, 0xcb90bac837b45659, 0x81, 0xa, 0x0, 0x5}, 0x8, 0xc, 0x9c8}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x240040a1}, 0x400c898) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r9 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r9, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r8, 0x109}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000140)="9a", 0x1}], 0x1}, 0x24048001) (async) r10 = socket(0x8, 0x800, 0x200) setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f0000000100)={0x80000000, 0xffffffff, 0xfffffffc}, 0x10) write(r10, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe0000000000000008000f00fd000000", 0x24) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r11, 0x0, 0x0) (async) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="280000006800010002000000fcffff7f00000600000000000c000200010000000500000004000b00694635eea163476dbf837671021f18b00b1fd9219fe793ba15c6b8d400c1022ac4710a40c3cfa9f90bafd588bb975aceec17321e49e71f706fb4d8976bd6f916dd759cfb655352c61fe57608c31bdb49b0c7eb5907525f81e86f51e9815b587f1e918cc2"], 0x28}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) 6.001248658s ago: executing program 7 (id=5500): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x19}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) syz_emit_ethernet(0x4e, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd6087fb7e00000000fe880000000000000000000000000001fc020000000000000000000000000000000200000000000004010001010031"], 0x0) 5.834666823s ago: executing program 7 (id=5502): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001300)=@newtaction={0x2bc, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x20000000}}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x9}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}, {0x244, 0x1, [@m_ctinfo={0x118, 0xa, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x80000000}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x8}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x6}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x10}]}, {0xc1, 0x6, "a6d329d3a40394cbf0b710c9cbd01886153951a881b61bd5f018099169c566a9a0c891698dbe9e519c11fdd387bf57f499b0e7d296210370e4ff7c349a32e61c1b3aaa1dfbf058ade6a5ea8898054d9209cee781514ccf3c9ee977e77a3f8539bd59fde2b659a4161efaa6bdbaf9f6974efc403c8d16521763d8ff30787ccfd85d5b99721bf3b4a9b69c0e6a01032ebc71e6a0fe924970f491794f5f38d666a07a4037a12a2c0d8419322a506078d5b7e9fe0d6e8021475e26417acdc5"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_mirred={0x5c, 0x1f, 0x0, 0x0, {{0xb}, {0x4}, {0x2d, 0x6, "5c48320a685ed977d576beb22fd12d6cfea7c3fc213298b22f77fe00275117445263ea05b872a3b390"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_nat={0xcc, 0xc, 0x0, 0x0, {{0x8}, {0xa4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x8000, 0x7, 0x20000000, 0xf, 0x4}, @rand_addr=0x64010101, @loopback, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xfffffffd, 0x4757f2d1, 0x5, 0xfffffde3, 0x1f9800}, @remote, @multicast1, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xffffff81, 0x5ecacb68, 0x4, 0x8, 0xc}, @broadcast, @dev={0xac, 0x14, 0x14, 0x2a}, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7ff, 0x6, 0x0, 0x5, 0x4}, @rand_addr=0x64010100, @local, 0x6d31829d4b3555cb}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x2bc}, 0x1, 0x0, 0x0, 0x4080}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="8025000041000701fefffffffeffffff017c0000040042800c00018006000600800a00005a250280bc1c1480b61318"], 0x2580}, 0x1, 0x0, 0x0, 0x4048011}, 0x4000000) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000e80), 0xffffffffffffffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) socket(0x2d, 0x3, 0x5) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000001c00)="b7", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5000009, 0x10012, r5, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000040), r5) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000002240)={0x0, 0x0, &(0x7f0000002200)={&(0x7f0000000ec0)={0x30, r4, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0xb}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000080}, 0x4004080) sendmsg$nl_xfrm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV6_HTHRESH={0x6, 0x4, {0xe9}}]}, 0x1c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3f}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}]}, 0x34}}, 0x1) 5.708146907s ago: executing program 2 (id=5503): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x5, 0x1a0ebf72, 0xc}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x700}, 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000005f00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001800)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010a29bd7010334085828c679b0008000300", @ANYRES32=r4], 0x24}, 0x1, 0x0, 0x0, 0x200000d0}, 0x20004000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f0000000200)={0x8, 'batadv0\x00', {'veth1_to_hsr\x00'}, 0x6}) r6 = getpid() ioctl$sock_FIOSETOWN(r5, 0x8901, &(0x7f0000000380)=r6) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@ipv4_newroute={0x34, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x7}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0xc, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0x8, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_DATA={0x4}}}}]}, 0x34}}, 0x0) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f00000003c0)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x64, r2, 0x0, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x27}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x73}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x0) r9 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newqdisc={0x158, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0x6, 0x4}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xd13a}]}}, @TCA_STAB={0x4}, @TCA_STAB={0x118, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x3, 0x0, 0xffff, 0x2, 0xffffffff, 0x0, 0x2}}, {0x8, 0x2, [0xb7, 0x7]}}, {{0x1c, 0x1, {0xfc, 0x7, 0x7, 0x5, 0x1, 0x2, 0xfff, 0x9}}, {0x16, 0x2, [0x94a, 0x8, 0x8, 0x41a2, 0xf, 0xfff, 0xc2f0, 0x7, 0x0]}}, {{0x1c, 0x1, {0x7, 0x8, 0x3, 0x1, 0x2, 0x800, 0x6, 0x8}}, {0x14, 0x2, [0x8, 0x3, 0x7, 0x5, 0x5, 0x2, 0x0, 0x2]}}, {{0x1c, 0x1, {0x8, 0x35, 0x2, 0x6, 0x0, 0x9, 0x388c}}, {0x4}}, {{0x1c, 0x1, {0xc, 0x54, 0xffff, 0x6, 0x1, 0x3, 0x6, 0x4}}, {0xc, 0x2, [0x8, 0xff1d, 0x420, 0x6]}}, {{0x1c, 0x1, {0x40, 0x5, 0x8, 0x4f3, 0x0, 0x6, 0x3}}, {0x4}}, {{0x1c, 0x1, {0x75, 0x78, 0x1, 0x3, 0x0, 0x3, 0x3, 0x1}}, {0x6, 0x2, [0x8]}}]}]}, 0x158}, 0x1, 0x0, 0x0, 0x20048882}, 0x2000400c) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="580000000102010800000000000000000a000000440002802c00018014000300fe8000000000000000000000000000bb14000400fc010000000000000008000000000000100002800500010006000000040003"], 0x58}}, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$devlink(&(0x7f0000000740), r12) sendmsg$DEVLINK_CMD_SB_GET(r12, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000002540)=ANY=[@ANYBLOB="14000000", @ANYRES16=r13, @ANYBLOB="f7c7ced72c81ee29023f2a"], 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x4000010) 5.642143759s ago: executing program 4 (id=5505): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) socket$l2tp6(0xa, 0x2, 0x73) (async, rerun: 32) r1 = socket$l2tp6(0xa, 0x2, 0x73) (rerun: 32) bind$l2tp6(r1, &(0x7f0000000280)={0xa, 0x0, 0xb6, @empty, 0x0, 0x2}, 0x20) (async) r2 = socket$kcm(0xa, 0x2, 0x0) (async, rerun: 32) r3 = socket(0x2, 0x80002, 0x0) (rerun: 32) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000080)={0x84, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0x3, 'lblcr\x00', 0x8, 0x42, 0x6f}, 0x2c) r4 = socket$inet_sctp(0x2, 0x1, 0x84) accept4$unix(r3, &(0x7f0000000200)=@abs, &(0x7f00000002c0)=0x6e, 0x791a21e85c6d7ab4) (async) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) (async, rerun: 32) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010103, 0x4e21, 0x3, 'lblcr\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x0, 0x6, 0x1}}, 0x44) (async, rerun: 32) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x15, 0x0, @dev={0xfe, 0x80, '\x00', 0x4}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x5c, 0x2f, 0x9, 0x70bd2a, 0x0, {0x4}, [@nested={0x45, 0x11, 0x0, 0x1, [@generic="e796bd6dd42541affac6ff415af85ab494e09d498fc605baa5fe20e0f8a725f9f47392b70f555def59af", @generic="68eb7e22475186e591e23ad38a08862df02baf33ef122e"]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x42804}, 0x84) 5.529338256s ago: executing program 8 (id=5507): syz_emit_ethernet(0x3a, &(0x7f0000000000)={@local, @broadcast, @val={@void, {0x8100, 0x2}}, {@ipv6={0x86dd, @generic={0x6, 0x6, "43bf5b", 0x0, 0x67, 0x1, @mcast1, @loopback}}}}, 0x0) 5.426856354s ago: executing program 7 (id=5508): r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f00000002c0)={0x0, 0x21, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="030700000000000000000800000068000480040007801300010062726f6164636173742d6c696e6b00001900078008000300000000000800020000000000080003000000000008000200000000000800030000000007040004"], 0x7c}}, 0x4) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x4004000) 4.976393244s ago: executing program 8 (id=5509): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x15, &(0x7f0000000000)=@framed={{}, [@printk={@i, {0x3, 0x3, 0x3, 0xa, 0x1, 0xfe00}}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @printk={@x}]}, &(0x7f0000000100)='GPL\x00'}, 0x90) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01010000000000000000020000000900010073797a3000000000080002400000000354000000120a01010000000000000000020000000900010073797a30000000000900020073797a3000000000080003400000000320000480060001"], 0xa4}}, 0x20000000) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={0x0, 0x2, 0x10}, &(0x7f0000000180)=0xc) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000240)={r2, @in6={{0xa, 0x4e21, 0xa74f42bc, @private0, 0x3}}, 0x4, 0x101}, &(0x7f0000000300)=0x90) (async) socket$inet_udp(0x2, 0x2, 0x0) 4.899971771s ago: executing program 7 (id=5510): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x8a77, @none}, 0xe) (async, rerun: 64) r2 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000500)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_KEY={0x8, 0x50, 0x0, 0x1, [@NL80211_KEY_SEQ={0x4}]}]}, 0x24}}, 0x0) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = socket$unix(0x1, 0x2, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) (rerun: 32) sendmsg$NL80211_CMD_NEW_INTERFACE(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x44, r10, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x10001, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'dvmrp1\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4090}, 0x24044804) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x28, r5, 0x300, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_IE={0xc, 0x2a, [@cf={0x4, 0x6, {0x4, 0x94, 0x0, 0xa}}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x20004005) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="4a00ffff11003ee0b4fdddd685986a49e00588f1ba6f01"], 0x17) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) (async) sendmsg$NFT_BATCH(r12, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a310000000014000480080002403cb140bb0800014000000003080005400000000014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) (async) sendmsg$NFT_BATCH(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELCHAIN={0x30, 0x5, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x4}]}], {0x14}}, 0x58}, 0x1, 0x0, 0x0, 0x80b0}, 0x20008890) (async, rerun: 64) nanosleep(&(0x7f0000000200)={0x0, 0x10000000}, 0x0) (async, rerun: 64) r13 = syz_init_net_socket$bt_hci(0x1f, 0x5, 0x8) bind(r13, &(0x7f0000000300)=@generic={0x1f, "0000000000000100"}, 0x9) (async) listen(r13, 0x1) 4.706522123s ago: executing program 2 (id=5511): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000"], 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100008}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000001800010400000000000000000a400000fe0200010000000014000500fe80000000000000000000000000000208000400", @ANYRES32=0x2, @ANYBLOB="0600150008000000200016801c00010000020101"], 0x60}, 0x1, 0x0, 0x0, 0x40001}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd63"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x48) 4.679134977s ago: executing program 6 (id=5512): r0 = socket$netlink(0x10, 0x3, 0x13) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a300000000040000000030a01040000000000000000020000000900010073797a30000000000900030073797a3000000000140004800800014000000003080002400000000098000000060a01040000000000000000020000000900010073797a30000000000900020073797a30000000036c000480680001800a0001006d61746368000000580002800e000100686173686c696d697400000008000240000000013c000300", @ANYRESHEX], 0x120}}, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0) (async) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000000), 0x4) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x20, 0xdfdfdddf9570a1bc, 0x1, 0x6, {{0x5, 0x4, 0x2, 0x30, 0x14, 0xe8, 0x0, 0x3, 0x29, 0x0, @rand_addr=0x64010102, @private=0xa010102}}}}) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) (async) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001600010a"], 0x14}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000380)={'syztnl2\x00', &(0x7f0000000300)={'ip6gre0\x00', r1, 0x4, 0x1, 0x1, 0x1, 0x0, @empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1, 0x7818, 0x203, 0x8000200}}) (async) socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x82, 0x0, 0x0) (async) r3 = socket(0xa, 0x3, 0x3a) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff}) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) (async) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r6, 0x400448c9, 0x0) (async) bind$bt_hci(r6, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r7, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r8, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) r9 = openat$cgroup_ro(r4, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r9, 0x6612) (async) setsockopt$MRT6_INIT(r3, 0x29, 0xc8, &(0x7f0000000040), 0x4) (async) setsockopt$inet6_buf(r3, 0x29, 0xcc, &(0x7f0000000100)="0a00000000000000fe8000000000000000000000000000bb000000000a00000000000000ff0e000000000000000000000000123400000000000000000200"/92, 0x5c) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)=@ipv6_getmulticast={0x14, 0x3a, 0x200, 0x70bd28, 0x25dfdbfd, {}, [""]}, 0x14}}, 0x0) 4.651465303s ago: executing program 8 (id=5513): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x804}, 0x0) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x11883}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2404c0c5}, 0x0) write$tun(r0, &(0x7f0000002380)=ANY=[@ANYBLOB="0a000070bbbbbbbbbbbbaaaaaaaaaa2988a80c0081"], 0x104a) 4.37433807s ago: executing program 4 (id=5514): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000000)=@ethtool_cmd={0x15, 0x6, 0xfffffffd, 0x389, 0x8, 0x2, 0x4, 0x6, 0x0, 0x1, 0x5, 0x7ff, 0xfffb, 0x8, 0x5, 0x3, [0xe, 0xff]}}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x605, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x2, 0x0, 0x1}}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)=@newqdisc={0x178, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x148, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x1000, 0xd, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}, @TCA_GRED_MAX_P={0x8, 0x4, 0x5}]}}]}, 0x178}}, 0x0) 4.373634268s ago: executing program 2 (id=5515): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_AG_GEOMETRY(0xffffffffffffffff, 0xc080583d, &(0x7f0000000340)={0x3, 0x1, 0xc, 0xfffffffa, 0xfffffffd, 0x5, 0x7, 0x470}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x14, 0x27, 0x9, 0x70bd25, 0x25dfdbfd, {0x11}}, 0x14}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r3 = socket$kcm(0x29, 0x7, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000080)) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010000700"/20, @ANYRES32=0x0, @ANYBLOB="0401017866726d30000000000000000000001c08000a00230000000000000000ea1e39d55a69fc5f8500d20762ecaa5db7b73b94d1e837d598496d348ea5f4e48ce0dc8c26ddac662cfbc19c03884acece4fbc845bb579b7f4e921a949d9a6b177ba414c25eb44a6847f46f9c1b6fc26adbd43ce18f63c5f77a1cc0e32c21c5e4e870e10eea37accf73e24fc87774c9578340d89f8ae0b049bfa78c2e4471fa9828c1f8961f383e5b17867", @ANYRES32=r2, @ANYBLOB], 0x3c}}, 0x0) 4.188554501s ago: executing program 2 (id=5516): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000002f00090025bd70005acb880239121511000100049734d79ca82edfbf8526bf2baaac0c393952d76ad31f1e511a6239fa888a400cc45cd3a6b517ad5bf2dc6e0bc0844956482bd4ebcc18c7809336a6b03586ecb8716175920455ab55d888f5b7a37cbdc60cba4ba3c952c1c711d1962fb7327f75a8178ec829ba59d633a16f083a5442a01a2350c2360e42a76d745eebbb", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x4000080) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080", 0x2b}], 0x1) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000001800050000000000000000002d00000000000000010100000500010008000000080004"], 0x2c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000001800050000000000000000002d00000000000000010100000500010008000000080004"], 0x2c}}, 0x0) 4.083955613s ago: executing program 6 (id=5517): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a20000000000a01432eb63400000000000500000a0900010073797a30000000005c000000030a010400000000000000000700000a0900010073797a30000000000900030073797a30000000002800048008000140000000000800024000000001140003006e657464657673696d3000000000000008000a4000000002b0000000060a010400000000000000000500000a0900010073797a30000000000900020073797a30000000008400048024000180090001006d6574610000000014000280080001400000000108000240000000012c00018008000100636d700020000280080001400000000108000240000000030c0003800500010000000000300001800e000100696d6d6564696174650000001c0002800800014000000000100002800c000280080001"], 0x154}}, 0x0) 4.045522548s ago: executing program 4 (id=5518): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="84000000100003042bbd70000000000000000400", @ANYRES32=0x0, @ANYBLOB="00030000000000005c00128009000100766c616e000000004c00028006000100020000000c0002000d00000000000000340004800a00000000000000060000000c000100ba8500000a0000000c00010001000100962b00000c000100090000000004000008000500", @ANYRES32=r1], 0x84}}, 0x0) (async, rerun: 64) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x3ff, 0x9, 0x9}) (async, rerun: 64) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001840)={0x1c, r5, 0x5, 0x0, 0x3, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}}, 0x39db77225c63fa4c) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newtaction={0x6c, 0x30, 0xeaa3ef926154ef0f, 0x0, 0x0, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x20000000}, 0x2}}, @TCA_VLAN_PUSH_VLAN_ID={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) (async, rerun: 32) sendmsg$NL80211_CMD_JOIN_OCB(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, r3, 0x8, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x1, 0x4}}}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x26}]}, 0x38}, 0x1, 0x0, 0x0, 0x48000}, 0x40) (rerun: 32) 3.970748462s ago: executing program 2 (id=5519): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x400, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETLINK(r1, 0x400454cd, 0x30b) (async) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe5, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xfffd}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {}, {0x8, 0x6}}, [@filter_kind_options=@f_flow={{0x9}, {0x58, 0x2, [@TCA_FLOW_ACT={0x54, 0x9, 0x0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x4000000, 0x20000001, 0x4, 0x2}, 0x1, r3}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x88}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={r0, 0x5, 0xfffffffffffffff8, 0xfffffffffffffff9}) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000d00)=@nat={'nat\x00', 0x19, 0x1, 0x21e, [0x7fffffffffffffff, 0x0, 0x0, 0x2000000024be, 0x2000000024ee], 0x0, 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff010000001f0000006b0000000016636169663000000000000000e3ff00007665746831000000000000000000000073797a5f74756e0039da0000f8ff0000000076657468310000000000000000001000aaaaaaaaaa3d000000ff00000180c2000003ff00ffffff00ae000000560100008e0100006f776e6572000000000000000000000000000000000000000000000000000000180000000000", @ANYRES32=r5, @ANYRES32, @ANYRES32=0xee00, @ANYRES32=r5, @ANYBLOB="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"]}, 0x296) r6 = socket(0x840000000002, 0x3, 0x100) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x50, &(0x7f00000000c0)={0x0, 0x0}, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000000c0)={@cgroup, 0xffffffffffffffff, 0x11}, 0x20) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xc000, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x2}, 0x50) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000100)={0x0, @dev, @dev}, &(0x7f0000000140)=0xc) sendmsg$nl_route(r7, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@bridge_getlink={0x28, 0x12, 0x400, 0x70bd26, 0x25dfdbff, {0x7, 0x0, 0x0, r8, 0x8020, 0x804}, [@IFLA_NET_NS_FD={0x8, 0x1c, r4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000800}, 0xc08c0) r9 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r9, 0x8935, &(0x7f00000016c0)={'batadv_slave_0\x00'}) (async) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYBLOB="9b060000000000001c00128009000100626f6e64000000000c0002800500010004000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x4000050) 3.829303163s ago: executing program 6 (id=5520): r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f00000002c0)={0x0, 0x21, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="030700000000000000000800000068000480040007801300010062726f6164636173742d6c696e6b00001900078008000300000000000800020000000000080003000000000008000200000000000800030000000700040004"], 0x7c}}, 0x4) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x4004000) 3.72437983s ago: executing program 7 (id=5521): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000001c0)={0x8, 0x4, 0x0, 0x5, 0x2, 0x5775d27c, 0x6800000, 0xba5}, 0x20) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r3, 0x0, 0xf, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000780)=[@in6={0xa, 0x0, 0x0, @mcast2, 0x7}], 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000380)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "000005", 0x14, 0x6, 0x0, @private0, @mcast1={0xff, 0x10}, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x700}, 0x50) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ATM={0x8, 0x4, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r2, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r5, 0x200, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1, 0x3a}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x20000007) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f000001910040001400020010000c000c0006"], 0x48}, 0x1, 0x0, 0x0, 0x2c048040}, 0xe800) sendto$inet6(r0, &(0x7f0000000180)="e7", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e24, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000340)={0x0, 0x2c, &(0x7f0000000240)=[@in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e24, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}]}, &(0x7f0000000380)=0x10) socket$inet6_sctp(0xa, 0x1, 0x84) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000001c0)={0x8, 0x4, 0x0, 0x5, 0x2, 0x5775d27c, 0x6800000, 0xba5}, 0x20) (async) socket(0x400000000010, 0x3, 0x0) (async) socket$inet6(0xa, 0x5, 0x0) (async) setsockopt$inet_int(r3, 0x0, 0xf, 0x0, 0x0) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000780)=[@in6={0xa, 0x0, 0x0, @mcast2, 0x7}], 0x1c) (async) syz_emit_ethernet(0x4a, &(0x7f0000000380)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "000005", 0x14, 0x6, 0x0, @private0, @mcast1={0xff, 0x10}, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x700}, 0x50) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ATM={0x8, 0x4, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) (async) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r2, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r5, 0x200, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1, 0x3a}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x20000007) (async) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f000001910040001400020010000c000c0006"], 0x48}, 0x1, 0x0, 0x0, 0x2c048040}, 0xe800) (async) sendto$inet6(r0, &(0x7f0000000180)="e7", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e24, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000340)={0x0, 0x2c, &(0x7f0000000240)=[@in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e24, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}]}, &(0x7f0000000380)=0x10) (async) 3.537854245s ago: executing program 8 (id=5522): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbe, &(0x7f0000000840)=[{}], 0x8, 0x0, 0x0, 0x0, 0x0, 0x72, 0x8, 0x0, 0x0}}, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x48, 0x24, 0xf0b, 0x70bd2e, 0x400000, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0xf}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x298c, 0x2, 0x0, 0x401}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000000)=[@timestamp], 0x1) r3 = socket(0x6, 0xa, 0x7) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1003}, 0x38) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002fc0)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff48700000020000005c0000000000000095000000000000002ba728041598d6fbd307ce99e83d24a3aa81d36bb3019c13bd23212fb56fa54f2641d8b02c3815e79c1414eb07eae6f071326bd9174842fa9e09000000000000000a0e168c1884d005d94f204e345c652fbc1626e3a2a2ad35806150ae0209e62f51ee988e6e0dc84e974a42a550d6f97181980400003e05df3ceb9f1feae5737ecaa81d666963c474c2a175e04ad6ee1cbf9b0a4def23d410f6296b32ae343881dcc7b1b85f3c3d44aeaced3641110bec4e90a634196508000000000000f0f4ab3e89cf6c662ed4048d3b3e22278d00031e5388ee5c867ddd58211d4dcecb0c005d2a1bcf9436c101040000f73902ebcf0200822775985b231f000000ccb0ecf31b715f5888b2a858ab3f11afc9bd08c676d2b89432fb465b3dad9d2aa7f1521b3ebb0cc52f49129b204eb99b6150e320c9901de2eb879a15943b6dc8ea15aab9dd6968698e3095c4c5c7a156cec33a7bb727667d81ff2757ca1e6bfdd4c968dacf81e65998b9091957d1d11a5730baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba165d876defd3541772f26e27c44cfd7bb5097379cf1756869cebc7b0b2d85d6d29983e830a9cdd1d0a017c100344c52a6f387a1340a1c8889464f90c284a4db539621fbb70f01a2c02dec4cd1f570dd39877dfb2ff1ae66e1ce917474b2e650ae610afd01409d9a337ac5d58bcb5e5fc231514952c5255f22bd8b325d9b76e57f041b665ab0249886c0a65cc99d5893521372c8d8b7bacac24000020a4a24d8dbd75062e1daef9dead619cc6e7baa72706287793c3d2a2661edcd3545236c204682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b993508000000e480cd9d4850a049ee19b67d17ef0477aeb12b1d255be1ed66d9051f22614d1f62734d6780393e783df8b8a17e3aa9fe9c502f9acee4f1b56e1f231200743792cead3c058a5b700d64d160abe33df726608510136ce8bf239414a1d98ea93e3d35dbb6c23b90cf36e83b8a4309b402d264b09f2779a0bcd7cd6dfc06b02e69d384146056d125cf4aadd80800000000000000e88d10acd06864eac44c42fbe334bdc3e9768fc360b130dc6111fe3293e8e02f819a2aa34dba1c25be27945507a3477b437525b81aef2f0b4c4f63483026b5e34d44705b76ef29f7f6e0a2be625eae975e02069fbff63a06578d6d184f5de7bfb6aa800016996d536256c02294cb1d3a6fb8eae87691fae365a70c3f15871565bba8dd8a8ca049f798abe646f738bebdfc9d8a5edd7a19ca6a42bc3f1db37c17f22a287c6d31a13db5dfef409eb1d3c91c6e6f80d215c9e16e0c4736c81936315418f26770cca4e2f89800d18c89d7f46f679df6c9e7005f209dda94302a30003b952ae1ebfd0ca88368ee6ce139e8b5822422cf4c9dde943d34c432e1001171792c65986146666a549092398af45ba38c41df7e0fffeac41824ca1fd0eb68aa243c9035c788d5480e5aee9c9e5f2e5a3628995b1531bd20360d33d8f9ffffff5f4bf6ea8a1850c4f83306dbca02ee3686da707b6d85db491ba0cc33f6be92c55969a2b52a25419d1476c73132ca7ca26ce8a7e3ffb700f09e157f9bc31f09834b4788be2a442aa81b259e9eb1bf5314844051f3a642aca9ff98c9036471ccff0522903e7bcf62e18f7796bbc280b95e8e0d6fd5644b0ebde3885b06548862de809d3dae3cccf109f7c78e8479a345e805e47dfa82caed44b11a443c5ba92a326dd10921aa79c62800844c7a59f55ee205a11ab50fb402e7da6ada561ec1117cc186b01fd5c2061d22156b1bfeb51f5c65a907f2217d5f80c580dc31b0963ff953ce09148e8dfe3a61bbd2bb173518507a3cd0e37c4da0a71eee31071d5d642498181c69cee3b2e414ddd6a12ff4bdf6e97c247b6025d4376067e25357d3b521a5b927d3392a7503718aea24179528f6a0c6de4e61b49cad1e4d6b000000000000005b2d16877299acefc0655bc1422c3d425d988eedebcf242b780a687c9acae2a5a71c2a16a32ceb377f5d54f9b2fa90b2905925e611be56e9ebe20cab20ab2b5baa1b07b16e81f278e54a479f1a068658e3656cfa196d6c050000000000000000814955c62a7d72b317399e572a7f6a4657b741eb66c9179ffd097d61fcfd0fa1d46cfb110e3e8cff5579e83f2820f95eaa0c609f666950c24311740e36de8f65708cfffce798c99ef8f62fd2398e999b220125da8eb07947512365abbc5b84ef524bdf184727c67910051f204662264607d548dbdffe14b41dd0843cf3d85bb820656a88a9e52a4cd7b3eeadfe00007267f226019ef0a25bc15da71e893856a2182c3167d8ba73f7c6294b159a426ce44cd73f000000a66fc501eae0c3504c1400697ba69fd9b7eaf49aff6a6aea529610db8dfef86c3cc698e9fddf1b13287615b972281a90c3a4cf415df25fbcdd35cf8368f068c4481844bdd0dda553e1cb0966d5686013d382956d50055dce0d1bc225c1d77612b1ec52e743dbc51f25cc07a202b704577316913cf067fa65e476f688de2d6c54ea192a569eed05d0d7536b3205c68d4ee0fe318ed3112c76dcf128a1d5595b773ef4c8a7ba4e10381de8808ff02dd0a7b996ecf1c65e6d9db90c87123d9cb3945330f7a270ee0cca35b1331ca8fec0b2f39f505140751b60f29a83e4bc0ef2ffea443e4aa221cc38a503add16a2c98cb589e1dac1912b4142a3be30f50b2d9479c5bde0beb38030d0c0ce0590000130000000000000000000000554361e1628ee0017ad19ca787f2c078aa260701ce0800000080623902000000000000000000003d118a04fa6a80c4928c01ccab57b5f4eb265ad15004f967543fe6e6ddc2a12165fe3a08bf9475ee0eee3539369b0e566fedbd215a6ddd4fe03dcc7a922e16410d820747b7e806c0f3b6f14c884d150a0ff07f2e0000bfb083c56d3bed0a61fab880f8885c612ebff8523d14cfb12aca274c000000005e5155611969f6e67dd83b20206207cb8b2cd2fab6fa6d7fdaed6a27a2e4db1d5adc80c4014ff11d9dbceba41d8dfce410333a054e82b1d050331c5bc4acb843b94d67f69f49eb4dd3b1b85b018359c32df01db8ebce0dbc36cade09c6b44f6b93d28db8ae4db5624d8a02f7be91bec65e4b3373059587dd6528bbc48e3379d477d482faff738c39c61cac1195043bd5b70cea5fc1083a169a82632ff3a9a48ff805202ae9aec56b9f7795fa27634a7f06359e3058d2dd69c4e5cc11b36d9ed9c4b2867f583de6fc582f789722bd1500e64c495abdb72de2c739d38c72f6f4fb1946081dcc825d5b5b747e9fa1b5226cd31e131263f1fcd7d45a630b46d04af906f0be464d829dd2dfcf7400002b7827f6d957e51bb1f1b44a50200c9dfadfaff2e32baa9c0edaac7144e174dba582a951d2b03c27219cec4fbc7b6e99c3f00188941e3fbf008cbace177ae250fd757a22e21ec05aa45c91e1345ca936184c3fc28153283e13654123cfaf4e661f4b6d430adad1e2116bc385f888405d48f0d386da0cc6747b33395772a68f2ea3fb7e7207000000b24088014c8e64f03d053c4e02ddd08b262e422eff1c9f124b892b0a9462b07d4f88c0693bd9c54ad2ab5227aa59ef2b53ac528c0800000000000000ebfde0c4a37c2d55c176680c4207000000e4aa467f995c9bc99e60441d4dbebead3b436427762618810bac7308c6d3298ea932b66572825e62d18462d3b2342ba48c145ff4674a94fa078cc552d064da2bb69a0d269076f8955076578f44ffb8895f11bd5e06840f8848df72230a28e0304569bfa0350b6dde9e96273de1758505aa1ba89dfb12be7a7c6dae1028d1bc68b6336eb1a5d18f6148354df7e60a489dc543ccdee1fff9d8f8d78844f0c6a77ef1181d5055c2a193a5763ed7749a17296c76818b60426082c86619dacc8a884c4de8572a044faf0c8e4377776c8703ecf2e3f1c3d6410000000000008369f062639e3ddcf725be54f626448fb7bfc74c183b26e31b71a390ccea4be07278dd12fa16848797397b76908fa03613cd961b98b26a0879ccba4a78c82958764bce07a7f70df1cef6d4db1ddbda1db18e4f41c390fd3cb862216ece39a9ec60bd3be5f9329dcaf33bf2c87cc510557460d14421e1d26322ab64388f2cea0d6269ffc8580a01e9acd2ec3ece39f3b4ffdc4dfea3da6ddb002512e2313253801044e751168eabe977c503c30ef7c489e5ea1fff041e54de54cfeb258f2387dad096b72a78d91134927492cfc773c731cca9b13b3f6e7760ab0929c46f51ea5643f3df4f4044f3ad0a6ba739e72d8b8b2835d81534bea8372bc590c111d573e04280659a096eaa495a4154daae7d1800c130d920964845c50c8ba4763b19b6008f6d7a5091895c7a4b7816ab706503be879b18b778b0f61ecfde2f8bbb32cfeb766ec4430ee0ad45a0a263ddc4b2f47680c8d53439f8d388dab87112c83997c83e178be287eb6e8c95bad8f8ed85cd5b03a7352a0fb83398566d1bc133582ce2d95636cd23eba4432180b2d5c3019879cd949a5be1b241b3d0d0d52a3529cc9e704a9d8d54f4f7b776a969a4505e18fe5284985ca7d112c397d776e3baba918b7df456bd970e761e00f3b0efa5ce4246d9f08ba60da3be556c518a1f19504c7cea1491a9eadd27d747ca9cc5f92e30b2ca3cf0b142a8554c87e8026d4e586cf5f7c9d412e6eb4f66a076c8bca6b294305969dabb6c932b57a5dd4234bf1ed3bd095229ee3cbb86883d574c5af4bb78370561de3fbf55bfcd2db3979eb1be120b5795443324023353bdd9fc87c862c247e140379ef098c7b3fa79a6638a245b6a74f14dde9bd4ee48e62cdc70f486ce38641e4e4309aa9f4bd097fa1530db966d9919544ab4890301e51f9525436f5d9591460340f5093161a78a249783945407f2576d6f35a99e3521d7991e3fdfde5ee7f6a8ff8181a68ef15a2ebfe9e22d7c745949ab5cc15b9f5659799b5e00debbf9f623f75bfd4d83c4859ca9b652cea33daeeef47b60c78a21965bcf91919071c7ded19317dc0b7587d9322f8cec9e32675a187465bdfa101bcd9ac680839b375af12c160247dd960e70eb7ee60c52a900440aa9bd9a6b15a4a34dc73c3c4936d8986300fdc264b28537df387e6442c32f5fa2a31d24c1ed888a57fcc50400a084a38a3630ffc465f36a4b770fab0946148161184be39134542e934f3a538bccd48a0325aa9b151855c800000000881d4361e7fbd1fc2331b4e34733480bc497662a8234a7eeab3e65d6b0f5d92edff04416eedcd15b9ddbcb3cf9228afda6b17d44a276b205eabd0069f7e26aea50f537dc77b683ed83d2f9110e00a705f48e9d13378cf09bca22e8f45c4f360d5fff8ba35f21c4513bcc0800000000000000dc5cc7ad7290c60bc609bff9be7cd922f474c3faa78fd42cba7c78d6d912656b6313497625e2f9afaba05b17ca242b7ca8d6556175aee38142a8aac5f677c2f8a6967f2cb5e97aae97a5e5579a706243688ac4d38a4601b4aadb2d319fe7d6bf1272fa3fa701338d7bce390e8bf959081ed39e63a431901d615a26ff95e1620a6c26eda4f92d83499a173e7217001f58ed5406bdb59acbc997e8fd3d53b4c2c2a1b3145bf54a851f3c08931d4c2c32bfe611e5958458af7b3c5319fdb4c40b8d01365fdee93af6fad7c7a8da86460f45c9e99d43264c929e7de4e9620000000000000000000000000000007cf90000008f8a9da7a8a167815c6ffcd1b6863cde9ab45ecd8f06423198bb00cdf76877f407be46b000000000afbb4cb3a8de259a8beb2223f28b855e2bdf4b31b91e5062a42a55bd95e93f77f2499391cf0000000000000000000000000000195007ad27d1d61dc4d5512f117f0ed554c2c88c1713000000000000bb1ff447d6e12da208e9f0422a84f361684861169f498909c4841f4d5a0f5807a3b7d833075fdcd9c1d169b03d7df7f4150fad8b9e92eaf86992adbda360dd91de51c6df335445492608162fb0804dabdeac6fb71042f906eefd37f1d190a1c8a0d9de7f34dcc8cbd7b565fc675f3bf7aac559411808ee703ec3ad461c6ddc571994cb504c46eabbc2ff4b97df394bc75b5e7f45a4450753b5d2b8b8414a7fe6a17661bdb5b1d080cfd974811e1d60763d8d9509c75aa729a334b55ee76b0c2d50270a1deec1a6d7441d0b5b8d7a4d048d156ebcff102e45c15d2a73b40d74807f5182a319d50edbf430f00b1c29a9e4bd92111caacbb1d4541545c2d262646070da42f76e3f3c6d139eed89cc9300000000000000000000000000000000000072d7e605eb8e978d76796d9d3a728c51a3145da8e1ca4973aa8fed855328e9d2509335c5386cac74e862eac50e9ba95b6a2a29e8ef08a9ae29792e77fb9952b1ac5c816db5c23a656db528f81f6a9465d2c94d701ee8646b30650c84b9510a337e82702baf368d29281d3d54b39014756ca5a1be1881000000000000006fbac0b9c9f97c920dfac7e2379ef6bb076118aa9bb24ee12e64aa530f852bf4f970a08a55531934e39fbae483129949a918115571d76740ca6a1cea59df290f2e63675ca30a289775825fe3e5d6f206f3f395346c0738035dc74368bb035fc65a40f8124369b8950ded31af64855c5c95ef5c83b18b23517ca935a0fa1b630d70c4ca4029a90d47701102045fff90675adb3c83983d125ae730b9497c681a912a6bb70300a2d7fba051f82b9d6f710426b5bd0d0bc0b08a0f801276789613da406905011bd6ebbac91ff17a21d1ed0882e73394025772f31dc8a3048789c703f920c55746f6fc955046f9332d72150be23c26cbb08d1b438e84b83fefc6a16958fd46dc7b8cbea1da2d541324e373e9157696d698a0b4bc84d7cc2fdb069db8a5a491a9d2bbc0a61b73f75d81d07d778a1577db3b06d20a21b19ea17e0000815a42318151feaad37f7abf9bfa0bcac3c1934854b3f6dc6de835952ebdda297dd3b29c07c69888cf029271449e035edc8a4459705f222bda537481e66ce3c665129f9829524eca8b5bef27adde96bd3ee95da4a176deff3408da050fe8d512e5a19379b403ee11d010bf86d0af4ac5c2057709b18cff438d0d58810670b222dfeb317bb935f925d2a070e68a701fd4316a677bb513c9476f25969097c165ca1705473341ea03f259dc5bee6a2d2e05176965192941abfae36b3a1e30784e6532c96ab971c5706a88b6f66860e31098b5b788788aad67507ffab2184a950065c1337259b63135fa060fc5ce3e4f6cdfb64f40e1a90351a01fd3d70f9dde03c335a931e58b8570316590ae22c7de567260849049e963ee15db15f592abb24111a219f0d128ceaf19764d92755abc9c313f65e7a220e64bb0d7139ce59da85bc710cea0c6553b336763bd3e39c2374b86885a32cdfae817196a7850257ead09f3e30e676b51062bb9000000000000000000000000000000000000000000000000000000aefb12dd3507c8dd24490bf9de062cd166a4dad6b9f2e53bad342546e546f6dece81d53cf717bd91ad72f4da82018f43259899e53e0b69a92180f1345699045fd23689e66d21d13be1a2d20eb1ce23eda84a63855173ca7f51d436306c"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r4, 0x0, 0xe40, 0xfffffe6d, &(0x7f0000000100)="5c71f91b05c413550230b4c817a628", 0x0, 0x1, 0x0, 0x302, 0x0, &(0x7f0000000180)='\x00', 0x0}, 0x48) r5 = socket$can_raw(0x1d, 0x3, 0x1) r6 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bind$can_raw(r5, &(0x7f00000000c0)={0x1d, r7}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$tipc(r3, &(0x7f0000000140), &(0x7f0000000180)=0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r9, 0x1, 0x0, 0x0, {{}, {}, {0x3, 0x1ec0, 'syz0\x00'}}}, 0x28}}, 0x0) 3.48298492s ago: executing program 6 (id=5523): ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f0000000000)={0x2, 0x6, "51c562f1070f"}) ioctl$BTRFS_IOC_SNAP_DESTROY(0xffffffffffffffff, 0x5000940f, &(0x7f0000000040)={{}, "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"}) sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, &(0x7f0000001100)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x10, 0x3f8, 0x300, 0x70bd2d, 0x25dfdbfe, "", ["", ""]}, 0x10}}, 0x40) ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000001140)={0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000001200), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f00000012c0)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001280)={&(0x7f0000001240)={0x24, r1, 0x800, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0xf}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4004041}, 0x41) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r0, &(0x7f00000013c0)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x14, 0x4, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x2004c805) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000001400)=[@in6={0xa, 0x4e23, 0x7f, @private0, 0x7}, @in6={0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xc6d}, @in6={0xa, 0x4e23, 0x72ee, @local, 0x61e}, @in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e22, @broadcast}, @in={0x2, 0x4e20, @rand_addr=0x64010100}, @in={0x2, 0x4e24, @private=0xa010101}, @in6={0xa, 0x4e24, 0x9, @remote, 0xff}, @in6={0xa, 0x4e22, 0x5, @empty, 0x80}, @in={0x2, 0x4e24, @local}], 0xdc) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r0, 0x111, 0x2, 0x0, 0x4) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f00000015c0)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x2c, 0xd, 0x6, 0x301, 0x0, 0x0, {0x1, 0x0, 0x8}, [@IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x44881) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r2, &(0x7f00000016c0)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001680)={&(0x7f0000001640)={0x14, 0x4, 0x1, 0x301, 0x0, 0x0, {0x7, 0x0, 0x7}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x480c0}, 0x4) r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f0000001700)={'bond_slave_0\x00', 0xff}) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000001740)={0x0, {{0xa, 0x4e21, 0xb24, @mcast2, 0x4}}, {{0xa, 0x4e24, 0xffffafe0, @dev={0xfe, 0x80, '\x00', 0x28}, 0x10}}}, 0x108) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000001900)={'sit0\x00', &(0x7f0000001880)={'tunl0\x00', 0x0, 0x10, 0x7800, 0x2, 0x1, {{0xf, 0x4, 0x1, 0x3, 0x3c, 0x66, 0x0, 0xd0, 0x0, 0x0, @rand_addr=0x64010101, @private=0xa010100, {[@generic={0x0, 0xc, "f2198288a0f0c6c42aee"}, @timestamp_addr={0x44, 0x1c, 0xbc, 0x1, 0x0, [{@private=0xa010100, 0x7fff}, {@local, 0x9b}, {@local, 0x2}]}]}}}}}) ioctl$F2FS_IOC_SEC_TRIM_FILE(r2, 0x4018f514, &(0x7f0000001940)={0x9, 0x7, 0x2}) r5 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_group_source_req(r5, 0x29, 0x2c, &(0x7f0000001980)={0x7, {{0xa, 0x4e21, 0x0, @private1, 0x7c}}, {{0xa, 0x4e21, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}}}, 0x108) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0xcfc12255c5b50f90, &(0x7f0000001ac0)={@empty}, &(0x7f0000001b00)=0x14) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000001b40)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000001b80)) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000001bc0)=0x22f, 0x4) sendmsg$nl_route(r0, &(0x7f0000001cc0)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c40)=@ipv6_newroute={0x24, 0x18, 0x800, 0x70bd28, 0x25dfdbfc, {0xa, 0x20, 0x0, 0x4, 0xfc, 0x4, 0xfe, 0x4, 0x100}, [@RTA_OIF={0x8, 0x4, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4048010}, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001e40)={&(0x7f0000001d00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@typedef={0x6, 0x0, 0x0, 0x8, 0x2}, @volatile={0x6, 0x0, 0x0, 0x9, 0x2}]}, {0x0, [0x30, 0x5f, 0x0]}}, &(0x7f0000001d40)=""/212, 0x35, 0xd4, 0x0, 0x8, 0x10000, @value=r0}, 0x28) ioctl$XFS_IOC_SCRUB_METADATA(r6, 0xc040583c, &(0x7f0000001e80)={0x4, 0x38, 0x9, 0x7, 0x7fffffff}) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000001ec0)=0x4, 0x4) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r6, 0x40189429, &(0x7f0000001f00)={0x0, 0x7f, 0x9}) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001f80), r0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f0000002080)={&(0x7f0000001f40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002040)={&(0x7f0000001fc0)={0x6c, r7, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x800}, 0x24008844) 3.454166582s ago: executing program 4 (id=5524): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000000)) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x2c8, 0x0, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_TABLE_USERDATA={0xbb, 0x6, "0a04c96e306ab350058929d804127b2e4d3f92c0123bb65f9a86d49cc9c7310c0b61b1327e09745c0c94cc1f5d59f56de6cda8b9c7638365e8cf42f8e6da5b1c73db84bbedaf8f1bb6d5b8a3bebc3f4cdef00e3296a65275d756fa5133a679f367c3c50c61a4f28680db8268fb142041a61e51e70a629cbdb1755faeb7800c77e990773fddfacd65944f2663f758e86b7566ec86c4d0322a09e51eb142d5a88cca759d45654f97cfc1c4bee5aff2f40ff6b53bf7ab88ca"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0xd1, 0x6, "3facc274b6f70d8028863bb892fbb6fee0f85b505eaf8f2318456399495a5657b31d476f86be3e5205d0c6b2f7d3a2c444b6184df053f7e5e3e04a6c30d64f1b88db59e57090adbeb89eaa43aff630bedefd31c6b717bd39f61ca16ca5baab27ca0dd1b9dd4c777537ff0fe7cff19b197b297b75dbfa716464a8475acbfc6dcb991dfd86877e4e1909694caf639dd010cf1548e06f077633eee130370b29578a4d7f537b4e7c3593a1e526d566521762f0e46a70da0b177dd7a4e31e4e798b210889926d390632b829ba4b70bf"}, @NFTA_TABLE_USERDATA={0xed, 0x6, "d0e08b30ae8a05b5c991f11c964aba7f15d72e62b6b62db567e5ac23b63b29d8bad06c95bf2eec4ff017aec8e7d3b7bd3b809752c38cc47a6c7729ced65e85bf3c5c70abe6838a3b83b1b2a70ed7c921a239460d0207a4954f065a2fc830d1d1c77eb6dd6c6b641685248d286278ef2a9236da77182c53a7bf2fc63f98e8cc86ff3f56de44fe13c53a22e59d9a5c0e59365c5d9db8cd906f4130764c7cf464e763d7e911e74541d1b79669a2f6442acb1ce1074201b4a43300ef79d94ea421c6f5b7e801690ef2768868b04c3e1c55dba182422c92896805d3d4f0899759e104adcd85aaefad7af3f5"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x2f0}, 0x1, 0x0, 0x0, 0x8890}, 0x20000000) 3.1786381s ago: executing program 8 (id=5525): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000d80)="170000007a006bcd9e3fe3dc6e08170007000054250000", 0x17}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x4, 0x0, 0x0, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x20}, @broadcast}, 0x10) 3.108762022s ago: executing program 4 (id=5526): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x1}, 0x50) (async, rerun: 64) pipe(&(0x7f0000000140)={0xffffffffffffffff}) (async, rerun: 64) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000180)={0x0, 0x0, 0x18}, 0xc) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000015c0), r4) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000001600)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(r4, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000940)={0x2c, r5, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0xa}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x65}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000c1c0}, 0x0) (async, rerun: 64) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000000)={0x0, 0x2cb}, 0x0) (rerun: 64) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000a80)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3a8, 0x0, 0x148, 0x1e0, 0x278, 0x310, 0xb0, 0x148, 0x1e0, 0x278, 0x310, 0x6, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x11}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x408) (async) syz_emit_ethernet(0x2e, &(0x7f00000002c0)={@multicast, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x17c1, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) (async) r8 = socket(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x89e3, &(0x7f0000000000)={r8}) (async) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000040000000a00000080000000", @ANYRES32=0x0, @ANYBLOB="000000000000422c79f0679a137d0000000000f3b2b0efa92c58fc5d80d7f64a5afa41f8216e4496f665a040456b0a8ad48eced0274e96", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000000)=r9, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0xb, &(0x7f0000000300)=@raw=[@map_fd={0x18, 0x1, 0x1, 0x0, r9}, @ldst={0x2, 0x0, 0x3, 0xa, 0x0, 0xc}, @alu={0x7, 0x1, 0xb, 0x2, 0xa}, @alu={0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc}, @call={0x85, 0x0, 0x0, 0x1}, @jmp={0x5, 0x0, 0x5, 0x0, 0x2, 0x1}, @exit, @ldst={0x1, 0x0, 0x3, 0x1}, @alu={0x7, 0x0, 0xb}, @exit], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) (rerun: 64) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0xff, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x6, 0x40, 0xfffd, 0x0, 0x0, {[@mss={0x2, 0x4, 0x7}]}}}}}}}}, 0x0) (async) syz_emit_ethernet(0x19b, &(0x7f0000000780)={@random="9b2eced062cb", @broadcast, @void, {@mpls_uc={0x8847, {[{0x5, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0xff, 0x0, 0x1}], @ipv4=@tcp={{0x1c, 0x4, 0x0, 0x8, 0x181, 0x65, 0x0, 0x4, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, {[@timestamp_addr={0x44, 0x2c, 0x98, 0x1, 0xf, [{@multicast2, 0x5}, {@rand_addr=0x64010100, 0x7fffffff}, {@dev={0xac, 0x14, 0x14, 0x35}, 0xfff}, {@loopback, 0xbf33}, {@local, 0xe4e3}]}, @ra={0x94, 0x4}, @cipso={0x86, 0x16, 0x0, [{0x7, 0x10, "8a1122deb8aebdfc193787f510cd"}]}, @end, @ssrr={0x89, 0x13, 0x6d, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @remote, @local]}]}}, {{0x4e24, 0x4e21, 0x41424344, 0x41424344, 0x1, 0x0, 0xe, 0x20, 0x10, 0x0, 0x7817, {[@window={0x3, 0x3, 0x55}, @md5sig={0x13, 0x12, "c257d95ad0c6266f81d6a38f90899764"}, @exp_smc={0xfe, 0x6}, @exp_smc={0xfe, 0x6}, @window={0x3, 0x3, 0x1}]}}, {"8a55cc923cde9d96cce4b58ccd3fedba8b562533cef9194eee0941bc7dcce9194465d8e65d9013e7b9d32febbe82986bdf5b14b3940756711e3f593ced4ed65ff209140bee7aa07fd2299ff117779828c16f9504fd5192d02851e21f6cf5522553474b65c3e5f7b642186332905fb5431cfe5d3af3a4678e4a24f15a9a96281241414e9b34ea5d675bb652a3ffdf991b89607f17e4a4d8bc099ee956ca829c75cdc1363ead381c5eeb9d9c5baa4e9dbcd400808594522c8b32cdb9a1beda33ef2372549ff9dc498f77c62fea5ef8b89ec3fdaccbbf0cab1e80"}}}}}}}, &(0x7f0000000980)={0x0, 0x4, [0x74e, 0x2bc, 0xc3c, 0x3]}) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r13 = socket(0x10, 0x3, 0x0) (async, rerun: 64) r14 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000500), 0x4) (rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x5, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x10001}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000003c0)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x40f00, 0xc, '\x00', r12, 0x0, r14, 0x8, &(0x7f0000000540)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000580)={0x1, 0x0, 0x3, 0x8}, 0x10, 0x0, 0x0, 0x9, &(0x7f00000005c0)=[r2], &(0x7f0000000600)=[{0x4, 0x1, 0x10, 0x6}, {0x3, 0x1}, {0x1, 0x2, 0xb, 0xc}, {0x5, 0x3, 0x10, 0xa}, {0x4, 0x1, 0x6, 0x8}, {0x3, 0x5, 0x4, 0x1}, {0x1, 0x1, 0x10, 0x5}, {0x3, 0x5, 0x3, 0x1}, {0x5, 0x2, 0x9, 0x9}], 0x10, 0x7f}, 0x94) sendmsg$nl_route_sched(r13, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd09, 0x25dfdbff, {0x0, 0x0, 0x0, r12, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_INGRESS={0x8}]}}]}, 0x3c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x2d, &(0x7f0000000ec0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}, @tail_call, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, @generic={0x1, 0x2, 0x9, 0xe4e, 0x69a5dd96}, @ldst={0x1, 0x0, 0x1, 0x0, 0x4, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r2}, @exit, @map_fd={0x18, 0x9, 0x1, 0x0, r3}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffff9}, @map_val={0x18, 0x2, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x10000}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) 3.08596623s ago: executing program 2 (id=5527): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x800}, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="d5e40000000000000000260000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}}, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, &(0x7f0000000000)=0x10000, 0x4) ioctl$BTRFS_IOC_FS_INFO(r0, 0x8400941f, &(0x7f0000000700)) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x1b, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) shutdown(r5, 0x1) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000300)="240000001a007f0214f9f4070009040802000000000000050002000008000f40fe00000e62e83410d6c0b3bc8a455eac083f5d55a3eca88ee2fba956621a191c20944134822855aacbee7702e0b0014e4f4fdc12c82228104924070b6927f9a4259fa9171984acc258a939e709e26e5dcbd032e1ee7b5123b0e1afe621a3bde422d9198a060c7c5ad8f391cfafdf28965444101a9f2486183f70f4963c36175f1b9f4bb876fc", 0xa6) r9 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000300)={'tunl0\x00', &(0x7f0000000280)=@ethtool_gfeatures}) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000400)={0x0, @in6={{0xa, 0x4e24, 0x6, @ipv4={'\x00', '\xff\xff', @local}, 0x4}}, 0x4, 0x6}, &(0x7f00000004c0)=0x90) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000140)={0x0, r5, 0x8000000000000001, 0xf, 0xe, 0x800}) socket$key(0xf, 0x3, 0x2) sendmsg$NFC_CMD_FW_DOWNLOAD(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01013fb60aebfbdbdf251500000008000100", @ANYRES32=r8, @ANYBLOB="0500140000000000"], 0x6f}, 0x1, 0x0, 0x0, 0x8000}, 0x2400c040) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)=ANY=[@ANYRESHEX], 0x4c}], 0x1, 0x0, 0x0, 0x4040001}, 0x0) 2.883075266s ago: executing program 6 (id=5528): sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000000), 0x4) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x20, 0xdfdfdddf9570a1bc, 0x1, 0x6, {{0xd, 0x4, 0x2, 0x30, 0x34, 0x68, 0x0, 0x3, 0x29, 0x0, @rand_addr=0x64010102, @private=0xa010102, {[@ssrr={0x89, 0x3, 0xed}, @lsrr={0x83, 0xf, 0x44, [@remote, @remote, @loopback]}, @timestamp_addr={0x44, 0x4, 0xc9}, @lsrr={0x83, 0x7, 0x54, [@local]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000380)={'syztnl2\x00', &(0x7f0000000300)={'ip6gre0\x00', 0x0, 0x29, 0x1, 0x1, 0x5, 0x0, @empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1, 0x7818, 0x1ff, 0x200}}) r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000040), 0x4) setsockopt$inet6_buf(r0, 0x29, 0xcc, &(0x7f0000000100)="0a00000000000000fe8020000000000000000000000000bb000000000a00000000000000ff0e000000000000000000000000123400000000000000000200"/92, 0x5c) syz_emit_ethernet(0x46, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x0) 2.882663382s ago: executing program 8 (id=5529): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r0) syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CCA_MODE(r2, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002040)={&(0x7f0000000040)={0x28, r1, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0x37, 0x6, 0x100000001}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x50) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000004c0)=ANY=[@ANYBLOB="840100001900010000000000000000001d0109004d00108025b57e35619bf20cb7f2934efacde0a223b473fe77f3e5ba76fb70fa1f414813a2a20005006f88d6e1db9b2b0000000000000000000000001e010080dd000000fe88000000000000e6"], 0x184}}, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, 0x0, &(0x7f0000000080)=0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x2, &(0x7f0000000240)=ANY=[@ANYRES64=0x0], &(0x7f00000008c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) 877.682492ms ago: executing program 7 (id=5530): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448c9, 0x0) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x12c}}, 0x0) recvmmsg(r0, &(0x7f0000005f80)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000180)=""/192, 0xc0}, {&(0x7f0000000600)=""/86, 0x56}, {&(0x7f0000000300)=""/203, 0xcb}, {&(0x7f0000000400)=""/6, 0x6}, {&(0x7f0000000440)=""/16, 0x10}, {&(0x7f0000000540)=""/159, 0x9f}, {&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f00000016c0)=""/220, 0xdc}, {0x0}], 0x9}, 0x257a}, {{0x0, 0x0, 0x0}, 0xffffffff}, {{&(0x7f0000001ac0)=@in={0x2, 0x0, @remote}, 0x80, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x7}], 0x5, 0x20, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @loopback, 0x5}, 0x1c) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000180), &(0x7f00000001c0)=0x14) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0x1d0, 0x2a0, 0xffffffff, 0xffffffff, 0x100, 0x1d0, 0x2a0, 0xffffffff, 0xff03, 0x0, {[{{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000540), 0x3c) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r6}, 0xc) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="e400000000000000000000000700000094040000865400000003051005c3e45b3e088e6f722b0df22b3c00126eacb1ceb7f260dab33486c73af20b59020788c2fdffc9060c47629611bad4427b49310104076002042a03051106b63d39a9a516678325f283800b5d83237b00000000ac1414aaac1414bbe0000002ffffffff00000000ac14142de0000002890327440c7b302e7dc6a00000000807174bac1414aae00000027f0000017f000001ac1e10018317eaac1e0101ac1414aaffffffff64010101e0000001831b0b640101017f00000164010102ffffffffac1414aae0000001000000000014000000000000001a01000001"], 0x110}, 0x0) recvmmsg(r0, &(0x7f0000004680)=[{{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x800008}, {{0x0, 0x0, 0x0}, 0x2}], 0x3, 0x100, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710425000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x20000040) socket(0x10, 0x3, 0x0) 0s ago: executing program 6 (id=5531): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0xd, 0x1, 0x0, [{0x0, 0x2}]}]}}, &(0x7f0000000180)=""/198, 0x32, 0xc6, 0x1}, 0x20) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x58) (async, rerun: 32) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x2201, 0x0) (rerun: 32) ioctl$PPPIOCSMRRU(r3, 0x4004743b, &(0x7f0000000040)=0x271e) r4 = socket$phonet(0x23, 0x2, 0x1) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r5, 0x6, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) (async) ioctl$SIOCPNDELRESOURCE(r4, 0x89ef, &(0x7f0000000000)) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="40000000130005002cbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="020100000000f50014000300776c616e3100000000000000000000000a000100"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x42) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r3, 0xf501, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000000056d1f112b974953993bfffa62a5ed22c88f4ef4a1c2cbb7e93ae93a431ceb532d63d5bbcb2b2a82132ac750dd39b5ebd8ee41d49faa0cf558737996b450a5d89f0ccc04f9a7b5d8f66626c2777f2fbfa694919b3ec8ec51d86055b143956a9fca0ee660e87ac951bf29e4bf71b6ce1b6d47e84ace56ff2c0d5b29402ccd6fe14bf9d137ffd75d0c893e22969632f05e3b04dffc6cacecb44faa2a74bd8add908c0b1cc280305dcde0c77f4fa6b4b866a", @ANYRES32=r7, @ANYBLOB="08000100e0000001"], 0x20}, 0x1, 0x0, 0x0, 0x4008000}, 0x804) (async) socket$igmp(0x2, 0x3, 0x2) kernel console output (not intermixed with test programs): . [ 648.992490][T21567] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4222'. [ 649.018664][T21568] netlink: 116 bytes leftover after parsing attributes in process `syz.2.4223'. [ 649.146032][T21570] 8021q: VLANs not supported on bond0 [ 649.190335][T21578] openvswitch: netlink: Invalid VLAN frame [ 649.377963][T21589] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4229'. [ 649.715510][T21602] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4233'. [ 649.715538][T21602] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4233'. [ 649.816501][ T8019] wlan0: Trigger new scan to find an IBSS to join [ 650.635765][T21611] bond1: left promiscuous mode [ 650.685031][T21611] geneve2: left promiscuous mode [ 650.685252][T21611] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 650.723114][ T151] wlan0: Creating new IBSS network, BSSID d2:1e:dd:e7:c1:93 [ 650.749917][T21621] netlink: 84 bytes leftover after parsing attributes in process `syz.0.4238'. [ 650.749941][T21621] openvswitch: netlink: Flow actions attr not present in new flow. [ 650.903605][T21626] syzkaller0: entered promiscuous mode [ 650.903627][T21626] syzkaller0: entered allmulticast mode [ 650.994124][T21627] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4239'. [ 651.583212][T21642] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4244'. [ 651.670696][T21642] netlink: 'syz.0.4244': attribute type 10 has an invalid length. [ 651.671938][T21642] veth0_vlan: entered allmulticast mode [ 651.976539][ T4932] Bluetooth: hci4: command 0x0406 tx timeout [ 652.361238][T21667] tipc: Enabling of bearer rejected, already enabled [ 652.576560][T21673] lo: left promiscuous mode [ 652.992410][T21673] veth0_vlan: left promiscuous mode [ 653.007296][T21673] veth0_vlan: entered promiscuous mode [ 653.215523][T21683] netlink: 'syz.2.4258': attribute type 1 has an invalid length. [ 653.337888][T21683] 8021q: adding VLAN 0 to HW filter on device bond5 [ 653.469656][T21684] bond5: (slave geneve3): making interface the new active one [ 653.491234][T21684] bond5: (slave geneve3): Enslaving as an active interface with an up link [ 653.927091][T21692] bridge0: port 4(batadv1) entered blocking state [ 653.927249][T21692] bridge0: port 4(batadv1) entered disabled state [ 653.927421][T21692] batadv1: entered allmulticast mode [ 653.950246][T21692] batadv1: entered promiscuous mode [ 653.961093][T21702] lo: Caught tx_queue_len zero misconfig [ 654.181045][T21714] __nla_validate_parse: 3 callbacks suppressed [ 654.181066][T21714] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4265'. [ 654.392253][ T8019] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 654.392273][ T8019] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 654.663598][T21739] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4271'. [ 654.664768][T21739] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4271'. [ 654.806342][T21741] erspan0: left promiscuous mode [ 655.154568][T21752] netlink: 4412 bytes leftover after parsing attributes in process `syz.4.4272'. [ 655.290380][T21741] mac80211_hwsim hwsim23 wlan0: left promiscuous mode [ 655.405718][T21741] 8021q: adding VLAN 0 to HW filter on device bond1 [ 655.439465][T21741] 8021q: adding VLAN 0 to HW filter on device bond2 [ 655.469099][T21741] geneve2: left promiscuous mode [ 655.471914][T21741] ip6gre1: left promiscuous mode [ 655.487826][T21741] gre1: left promiscuous mode [ 655.591150][T21745] veth0_macvtap: Caught tx_queue_len zero misconfig [ 655.594590][T21751] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4273'. [ 655.626122][T20194] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 657.314298][T21722] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 657.649529][T21784] syzkaller1: entered promiscuous mode [ 657.649551][T21784] syzkaller1: entered allmulticast mode [ 657.823661][ T8019] wlan0: Trigger new scan to find an IBSS to join [ 657.863416][T21794] xt_bpf: check failed: parse error [ 658.188977][T21806] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 658.309688][T21810] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 658.356895][T21806] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 658.910922][T21818] bridge0: port 4(batadv1) entered blocking state [ 658.911239][T21818] bridge0: port 4(batadv1) entered forwarding state [ 658.911493][T21818] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 658.947522][T21819] syzkaller0: entered promiscuous mode [ 658.947711][T21819] syzkaller0: entered allmulticast mode [ 658.968883][T21823] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4296'. [ 659.162914][T21823] netlink: 'syz.2.4296': attribute type 1 has an invalid length. [ 659.162936][T21823] netlink: 'syz.2.4296': attribute type 2 has an invalid length. [ 659.444358][T21827] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4297'. [ 659.444392][T21827] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4297'. [ 659.453687][T21828] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4297'. [ 659.453722][T21828] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4297'. [ 659.656592][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 659.725063][T21837] syzkaller1: entered promiscuous mode [ 659.725243][T21837] syzkaller1: entered allmulticast mode [ 659.831066][T21840] netlink: 'syz.0.4301': attribute type 29 has an invalid length. [ 659.831091][T21840] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4301'. [ 659.983056][T21840] netlink: 'syz.0.4301': attribute type 29 has an invalid length. [ 659.983080][T21840] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4301'. [ 660.085343][T21847] syzkaller0: entered promiscuous mode [ 660.085365][T21847] syzkaller0: entered allmulticast mode [ 660.414433][T21855] tipc: Enabling of bearer rejected, already enabled [ 660.552715][T21859] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4309'. [ 660.575729][T21860] sock: sock_set_timeout: `syz.2.4308' (pid 21860) tries to set negative timeout [ 660.668342][T21865] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4310'. [ 660.696853][T21864] syzkaller0: entered promiscuous mode [ 660.696876][T21864] syzkaller0: entered allmulticast mode [ 660.777390][ T8020] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 660.777489][ T8020] wlan0: Trigger new scan to find an IBSS to join [ 661.043520][T21873] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4311'. [ 661.043557][T21873] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4311'. [ 661.101272][T21876] syzkaller1: entered promiscuous mode [ 661.101305][T21876] syzkaller1: entered allmulticast mode [ 661.287122][T21883] netlink: 'syz.3.4316': attribute type 1 has an invalid length. [ 661.394475][T21891] tipc: Started in network mode [ 661.394506][T21891] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 661.394678][T21891] tipc: Enabled bearer , priority 10 [ 661.775655][T21903] ip_tables: iptables: counters copy to user failed while replacing table [ 661.798799][T21899] tipc: Enabled bearer , priority 0 [ 662.447206][T21924] netlink: 'syz.3.4325': attribute type 1 has an invalid length. [ 662.819764][ T987] tipc: Node number set to 10136234 [ 662.958022][T21934] syzkaller1: entered promiscuous mode [ 662.958117][T21934] syzkaller1: entered allmulticast mode [ 663.781064][T21953] ieee802154 phy0 wpan0: encryption failed: -22 [ 663.828060][ T151] wlan0: Trigger new scan to find an IBSS to join [ 664.708331][ T8022] wlan0: Creating new IBSS network, BSSID 56:33:8b:26:b3:a0 [ 665.478307][T21928] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 665.576934][T21958] __nla_validate_parse: 7 callbacks suppressed [ 665.576960][T21958] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4337'. [ 665.764256][T21962] syzkaller1: entered promiscuous mode [ 665.764279][T21962] syzkaller1: entered allmulticast mode [ 666.206931][T21979] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4346'. [ 666.250426][T21981] xt_TCPMSS: Only works on TCP SYN packets [ 666.335185][ T4932] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 666.352623][ T4932] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 666.366468][ T4932] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 666.367408][ T4932] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 666.367980][ T4932] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 666.439438][T21986] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4348'. [ 667.196569][T22010] syzkaller1: entered promiscuous mode [ 667.202709][T22010] syzkaller1: entered allmulticast mode [ 667.395719][T22024] netlink: 'syz.4.4358': attribute type 3 has an invalid length. [ 667.395743][T22024] netlink: 666 bytes leftover after parsing attributes in process `syz.4.4358'. [ 667.466770][T22014] macsec1: entered promiscuous mode [ 667.508283][T22024] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4358'. [ 667.800611][T22029] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4359'. [ 667.816619][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 667.836425][T22036] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4363'. [ 667.867393][T22036] vlan0: entered promiscuous mode [ 668.456774][ T4932] Bluetooth: hci2: command tx timeout [ 668.515022][T22062] syzkaller1: entered promiscuous mode [ 668.515047][T22062] syzkaller1: entered allmulticast mode [ 668.764086][T22065] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 668.846487][T22072] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4373'. [ 668.932482][T20194] IPVS: starting estimator thread 0... [ 668.948925][T22074] IPVS: set_ctl: invalid protocol: 58 172.20.20.187:20005 [ 668.975816][T21982] bridge0: port 1(bridge_slave_0) entered blocking state [ 668.976068][T21982] bridge0: port 1(bridge_slave_0) entered disabled state [ 668.992132][T21982] bridge_slave_0: entered allmulticast mode [ 668.994038][T21982] bridge_slave_0: entered promiscuous mode [ 669.010604][T21982] bridge0: port 2(bridge_slave_1) entered blocking state [ 669.010849][T21982] bridge0: port 2(bridge_slave_1) entered disabled state [ 669.011267][T21982] bridge_slave_1: entered allmulticast mode [ 669.013417][T21982] bridge_slave_1: entered promiscuous mode [ 669.042878][T22075] IPVS: using max 27 ests per chain, 64800 per kthread [ 669.086350][T21982] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 669.111289][T21982] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 669.179009][T21982] team0: Port device team_slave_0 added [ 669.182282][T21982] team0: Port device team_slave_1 added [ 669.228488][T21982] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 669.228507][T21982] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 669.228530][T21982] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 669.258305][T21982] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 669.258324][T21982] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 669.258348][T21982] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 669.332767][T22085] ip6t_rt: address list match requested but addrnr is 0 [ 669.398043][T21982] hsr_slave_0: entered promiscuous mode [ 669.399210][T21982] hsr_slave_1: entered promiscuous mode [ 669.400014][T21982] debugfs: 'hsr0' already exists in 'hsr' [ 669.400035][T21982] Cannot create hsr debugfs directory [ 669.403395][T22079] netlink: 'syz.0.4375': attribute type 1 has an invalid length. [ 669.635450][T22088] netlink: 'syz.4.4378': attribute type 1 has an invalid length. [ 669.803482][T22088] bond3: entered promiscuous mode [ 669.818473][T22088] 8021q: adding VLAN 0 to HW filter on device bond3 [ 669.898303][T22101] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4380'. [ 670.106099][T22090] 8021q: adding VLAN 0 to HW filter on device bond3 [ 670.116675][T22090] bond3: (slave xfrm1): The slave device specified does not support setting the MAC address [ 670.116696][T22090] bond3: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 670.155502][T22090] bond3: (slave xfrm1): making interface the new active one [ 670.155526][T22090] xfrm1: entered promiscuous mode [ 670.174122][T22090] bond3: (slave xfrm1): Enslaving as an active interface with an up link [ 670.174349][T22099] ip6tnl0: Caught tx_queue_len zero misconfig [ 670.482562][T22119] syzkaller1: entered promiscuous mode [ 670.482585][T22119] syzkaller1: entered allmulticast mode [ 670.546797][ T4932] Bluetooth: hci2: command tx timeout [ 670.601231][T22123] gretap3: entered promiscuous mode [ 670.602165][T22123] batman_adv: batadv0: Adding interface: gretap3 [ 670.602179][T22123] batman_adv: batadv0: The MTU of interface gretap3 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500. [ 670.602203][T22123] batman_adv: batadv0: Not using interface gretap3 (retrying later): interface not active [ 670.771534][T22129] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4385'. [ 671.223348][T22134] bond4: Removing last ns target with arp_interval on [ 671.266098][T22140] bridge3: entered allmulticast mode [ 671.475687][ T8020] IPVS: starting estimator thread 0... [ 671.556283][T22150] IPVS: using max 29 ests per chain, 69600 per kthread [ 671.564180][T22149] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4391'. [ 671.564217][T22149] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4391'. [ 671.663608][T22155] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4393'. [ 671.663635][T22155] netlink: 'syz.2.4393': attribute type 1 has an invalid length. [ 671.753320][T21982] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 671.754839][T22158] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4393'. [ 671.776614][T21982] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 671.777568][T21982] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 671.782241][T21982] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 671.910159][T22158] bond6: Invalid ad_actor_system MAC address. [ 671.910190][T22158] bond6: option ad_actor_system: invalid value (1) [ 672.001252][T22158] bond6 (unregistering): Released all slaves [ 672.053120][T22166] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4395'. [ 672.071762][T21982] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 672.104549][T21982] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 672.105451][T21982] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 672.190664][T21982] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 672.231491][T22169] netlink: 'syz.4.4400': attribute type 6 has an invalid length. [ 672.285254][T22174] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4400'. [ 672.616632][ T4932] Bluetooth: hci2: command tx timeout [ 672.675358][T22171] syzkaller1: entered promiscuous mode [ 672.675384][T22171] syzkaller1: entered allmulticast mode [ 672.918777][T22183] ip_tables: iptables: counters copy to user failed while replacing table [ 673.261150][T22211] netlink: 'syz.2.4403': attribute type 12 has an invalid length. [ 673.261174][T22211] netlink: 'syz.2.4403': attribute type 29 has an invalid length. [ 673.261185][T22211] netlink: 148 bytes leftover after parsing attributes in process `syz.2.4403'. [ 673.261211][T22211] netlink: 'syz.2.4403': attribute type 1 has an invalid length. [ 673.261222][T22211] netlink: 43 bytes leftover after parsing attributes in process `syz.2.4403'. [ 673.490801][T22219] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4407'. [ 673.615189][T21982] 8021q: adding VLAN 0 to HW filter on device bond0 [ 673.664551][T21982] 8021q: adding VLAN 0 to HW filter on device team0 [ 673.690095][ T8022] bridge0: port 1(bridge_slave_0) entered blocking state [ 673.690205][ T8022] bridge0: port 1(bridge_slave_0) entered forwarding state [ 673.759022][T21982] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 673.759047][T21982] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 673.796676][ T151] bridge0: port 2(bridge_slave_1) entered blocking state [ 673.796786][ T151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 674.617767][T22245] syzkaller1: entered promiscuous mode [ 674.617946][T22245] syzkaller1: entered allmulticast mode [ 674.696403][ T4932] Bluetooth: hci2: command tx timeout [ 674.867903][T22249] IPVS: set_ctl: invalid protocol: 46 127.0.0.1:20000 [ 675.285653][T21982] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 675.453136][T22266] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 675.953631][T22284] bond0: Caught tx_queue_len zero misconfig [ 676.160448][T21982] veth0_vlan: entered promiscuous mode [ 676.193775][T21982] veth1_vlan: entered promiscuous mode [ 676.286607][T21982] veth0_macvtap: entered promiscuous mode [ 676.316453][T21982] veth1_macvtap: entered promiscuous mode [ 676.350617][T21982] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 676.421325][T21982] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 676.578278][T22297] __nla_validate_parse: 5 callbacks suppressed [ 676.578298][T22297] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4423'. [ 676.696301][ T8019] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 676.698657][T20194] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 676.698974][T20194] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 676.716302][T20194] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 676.821719][T20193] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 676.821744][T20193] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 676.870584][T22301] tipc: Enabled bearer , priority 0 [ 676.888101][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 676.888124][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 677.128007][T22304] syzkaller1: entered promiscuous mode [ 677.128233][T22304] syzkaller1: entered allmulticast mode [ 677.294707][T22309] lo: Caught tx_queue_len zero misconfig [ 677.390696][T22314] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4429'. [ 677.659011][T22323] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4433'. [ 677.681952][T22323] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4433'. [ 677.682156][T22323] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 677.711856][T22323] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4433'. [ 677.743915][T22323] lo: Caught tx_queue_len zero misconfig [ 677.932979][T22329] openvswitch: netlink: Missing key (keys=c0, expected=20100) [ 677.935173][T22328] tipc: Enabling of bearer rejected, already enabled [ 678.080154][ T31] audit: type=1107 audit(1790897705.238:8): pid=22331 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 678.154798][T22329] team0: Port device wlan0 removed [ 678.483099][T22336] syzkaller1: entered promiscuous mode [ 678.483123][T22336] syzkaller1: entered allmulticast mode [ 678.574100][T22349] netlink: 'syz.5.4442': attribute type 1 has an invalid length. [ 678.605314][T22351] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4441'. [ 678.874220][T22355] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 679.524937][T22393] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4454'. [ 679.698611][T22396] FAULT_INJECTION: forcing a failure. [ 679.698611][T22396] name failslab, interval 1, probability 0, space 0, times 0 [ 679.698643][T22396] CPU: 0 UID: 0 PID: 22396 Comm: syz.2.4457 Not tainted syzkaller #0 PREEMPT(full) [ 679.698664][T22396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 679.698676][T22396] Call Trace: [ 679.698683][T22396] [ 679.698691][T22396] dump_stack_lvl+0xe8/0x150 [ 679.698723][T22396] should_fail_ex+0x410/0x560 [ 679.698752][T22396] should_failslab+0xa8/0x100 [ 679.698775][T22396] ? __inet_hash_connect+0x1631/0x25a0 [ 679.698920][T22396] kmem_cache_alloc_noprof+0xa1/0x600 [ 679.698946][T22396] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 679.698970][T22396] ? __inet_hash_connect+0xe9b/0x25a0 [ 679.698997][T22396] ? __inet_hash_connect+0x1631/0x25a0 [ 679.699034][T22396] __inet_hash_connect+0x1631/0x25a0 [ 679.699077][T22396] ? __inet_hash_connect+0x5ce/0x25a0 [ 679.699110][T22396] ? __pfx___inet_hash_connect+0x10/0x10 [ 679.699136][T22396] ? sk_setup_caps+0x94f/0xbc0 [ 679.699161][T22396] ? inet6_ehashfn+0x2f/0x3b0 [ 679.699211][T22396] ? inet6_hash_connect+0xeb/0x170 [ 679.699261][T22396] tcp_v6_connect+0x1231/0x1cf0 [ 679.699324][T22396] ? __pfx_tcp_v6_connect+0x10/0x10 [ 679.699343][T22396] ? mptcp_connect+0x4a0/0x7f0 [ 679.699425][T22396] ? __local_bh_enable_ip+0xd6/0x140 [ 679.699462][T22396] mptcp_connect+0x527/0x7f0 [ 679.699490][T22396] __inet_stream_connect+0x258/0xe00 [ 679.699548][T22396] ? do_raw_spin_lock+0x12b/0x2f0 [ 679.699577][T22396] ? __pfx___inet_stream_connect+0x10/0x10 [ 679.699600][T22396] ? inet_stream_connect+0x51/0xa0 [ 679.699621][T22396] ? __local_bh_enable_ip+0xd6/0x140 [ 679.699650][T22396] inet_stream_connect+0x66/0xa0 [ 679.699673][T22396] __sys_connect+0x316/0x450 [ 679.699700][T22396] ? __pfx___sys_connect+0x10/0x10 [ 679.699737][T22396] ? __pfx_ksys_write+0x10/0x10 [ 679.699773][T22396] __x64_sys_connect+0x7a/0x90 [ 679.699797][T22396] do_syscall_64+0x166/0x520 [ 679.699821][T22396] ? trace_irq_disable+0x3b/0x140 [ 679.699840][T22396] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 679.699859][T22396] ? clear_bhb_loop+0x70/0xc0 [ 679.699883][T22396] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 679.699902][T22396] RIP: 0033:0x7fc51139e159 [ 679.699921][T22396] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 679.699937][T22396] RSP: 002b:00007fc51229c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 679.699957][T22396] RAX: ffffffffffffffda RBX: 00007fc511625fa0 RCX: 00007fc51139e159 [ 679.699971][T22396] RDX: 000000000000001c RSI: 0000200000000000 RDI: 0000000000000003 [ 679.699983][T22396] RBP: 00007fc51229c090 R08: 0000000000000000 R09: 0000000000000000 [ 679.699995][T22396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 679.700006][T22396] R13: 00007fc511626038 R14: 00007fc511625fa0 R15: 00007fffa859f1f8 [ 679.700038][T22396] [ 680.029805][T22400] syzkaller1: entered promiscuous mode [ 680.029827][T22400] syzkaller1: entered allmulticast mode [ 680.555459][T22416] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4465'. [ 680.793551][ T8020] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 680.923506][T22433] FAULT_INJECTION: forcing a failure. [ 680.923506][T22433] name failslab, interval 1, probability 0, space 0, times 0 [ 680.923539][T22433] CPU: 0 UID: 0 PID: 22433 Comm: syz.3.4469 Not tainted syzkaller #0 PREEMPT(full) [ 680.923559][T22433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 680.923570][T22433] Call Trace: [ 680.923578][T22433] [ 680.923586][T22433] dump_stack_lvl+0xe8/0x150 [ 680.923619][T22433] should_fail_ex+0x410/0x560 [ 680.923645][T22433] should_failslab+0xa8/0x100 [ 680.923669][T22433] ? __inet_hash_connect+0xe9b/0x25a0 [ 680.923693][T22433] kmem_cache_alloc_noprof+0xa1/0x600 [ 680.923716][T22433] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 680.923739][T22433] ? __inet_hash_connect+0xe9b/0x25a0 [ 680.923767][T22433] __inet_hash_connect+0xe9b/0x25a0 [ 680.923794][T22433] ? __pfx___inet6_check_established+0x10/0x10 [ 680.923822][T22433] ? __inet_hash_connect+0x5ce/0x25a0 [ 680.923850][T22433] ? __pfx___inet_hash_connect+0x10/0x10 [ 680.923870][T22433] ? sk_setup_caps+0x94f/0xbc0 [ 680.923888][T22433] ? inet6_ehashfn+0x2f/0x3b0 [ 680.923905][T22433] ? inet6_hash_connect+0xeb/0x170 [ 680.923922][T22433] tcp_v6_connect+0x1231/0x1cf0 [ 680.923949][T22433] ? __pfx_tcp_v6_connect+0x10/0x10 [ 680.923963][T22433] ? mptcp_connect+0x4a0/0x7f0 [ 680.923985][T22433] ? __local_bh_enable_ip+0xd6/0x140 [ 680.924013][T22433] mptcp_connect+0x527/0x7f0 [ 680.924035][T22433] __inet_stream_connect+0x258/0xe00 [ 680.924056][T22433] ? do_raw_spin_lock+0x12b/0x2f0 [ 680.924078][T22433] ? __pfx___inet_stream_connect+0x10/0x10 [ 680.924092][T22433] ? preempt_schedule_thunk+0x16/0x40 [ 680.924110][T22433] ? preempt_schedule_common+0x7f/0xd0 [ 680.924126][T22433] ? inet_stream_connect+0x51/0xa0 [ 680.924140][T22433] ? preempt_schedule_thunk+0x16/0x40 [ 680.924169][T22433] inet_stream_connect+0x66/0xa0 [ 680.924187][T22433] __sys_connect+0x316/0x450 [ 680.924207][T22433] ? __pfx___sys_connect+0x10/0x10 [ 680.924234][T22433] ? __pfx_ksys_write+0x10/0x10 [ 680.924262][T22433] __x64_sys_connect+0x7a/0x90 [ 680.924281][T22433] do_syscall_64+0x166/0x520 [ 680.924298][T22433] ? trace_irq_disable+0x3b/0x140 [ 680.924313][T22433] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 680.924328][T22433] ? clear_bhb_loop+0x70/0xc0 [ 680.924346][T22433] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 680.924360][T22433] RIP: 0033:0x7f95dbd9e159 [ 680.924374][T22433] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 680.924386][T22433] RSP: 002b:00007f95dcc37028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 680.924402][T22433] RAX: ffffffffffffffda RBX: 00007f95dc025fa0 RCX: 00007f95dbd9e159 [ 680.924413][T22433] RDX: 000000000000001c RSI: 0000200000000000 RDI: 0000000000000003 [ 680.924422][T22433] RBP: 00007f95dcc37090 R08: 0000000000000000 R09: 0000000000000000 [ 680.924432][T22433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 680.924440][T22433] R13: 00007f95dc026038 R14: 00007f95dc025fa0 R15: 00007fffb7a6a9d8 [ 680.924465][T22433] [ 681.759468][T22449] syzkaller1: entered promiscuous mode [ 681.759491][T22449] syzkaller1: entered allmulticast mode [ 681.908763][T22458] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4478'. [ 681.945579][T22458] netlink: 'syz.5.4478': attribute type 6 has an invalid length. [ 681.945601][T22458] netlink: 72 bytes leftover after parsing attributes in process `syz.5.4478'. [ 682.495307][T22477] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 682.520119][T22480] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4486'. [ 682.521364][T22480] openvswitch: netlink: Missing key (keys=c0, expected=40300) [ 682.685809][T22485] netlink: 'syz.3.4488': attribute type 3 has an invalid length. [ 682.685831][T22485] netlink: 'syz.3.4488': attribute type 1 has an invalid length. [ 682.685842][T22485] netlink: 204 bytes leftover after parsing attributes in process `syz.3.4488'. [ 682.717891][T22489] netlink: 'syz.3.4488': attribute type 3 has an invalid length. [ 682.717913][T22489] netlink: 'syz.3.4488': attribute type 1 has an invalid length. [ 682.718061][T22489] netlink: 204 bytes leftover after parsing attributes in process `syz.3.4488'. [ 682.853397][T22494] syzkaller1: entered promiscuous mode [ 682.853420][T22494] syzkaller1: entered allmulticast mode [ 683.191743][T22504] FAULT_INJECTION: forcing a failure. [ 683.191743][T22504] name failslab, interval 1, probability 0, space 0, times 0 [ 683.191775][T22504] CPU: 0 UID: 0 PID: 22504 Comm: syz.5.4495 Not tainted syzkaller #0 PREEMPT(full) [ 683.191796][T22504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 683.191807][T22504] Call Trace: [ 683.191815][T22504] [ 683.191823][T22504] dump_stack_lvl+0xe8/0x150 [ 683.191855][T22504] should_fail_ex+0x410/0x560 [ 683.191882][T22504] ? __alloc_skb+0x1db/0x7a0 [ 683.191905][T22504] should_failslab+0xa8/0x100 [ 683.191930][T22504] ? __alloc_skb+0x1db/0x7a0 [ 683.191950][T22504] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 683.191981][T22504] ? lock_acquire+0x115/0x350 [ 683.192008][T22504] ? __alloc_skb+0x1db/0x7a0 [ 683.192038][T22504] __alloc_skb+0x1db/0x7a0 [ 683.192065][T22504] tcp_stream_alloc_skb+0x3f/0x580 [ 683.192088][T22504] ? __asan_memset+0x22/0x50 [ 683.192108][T22504] tcp_connect+0x1646/0x54e0 [ 683.192239][T22504] ? lock_acquire+0x115/0x350 [ 683.192266][T22504] ? __pfx_tcp_connect+0x10/0x10 [ 683.192310][T22504] ? seqcount_lockdep_reader_access+0xa9/0x100 [ 683.192332][T22504] ? lockdep_hardirqs_on+0x7b/0x110 [ 683.192356][T22504] ? ktime_get_with_offset+0x93/0x2d0 [ 683.192377][T22504] ? seqcount_lockdep_reader_access+0xea/0x100 [ 683.192405][T22504] ? __asan_memset+0x22/0x50 [ 683.192429][T22504] ? __pfx_tcp_fastopen_defer_connect+0x10/0x10 [ 683.192499][T22504] ? inet6_hash_connect+0xeb/0x170 [ 683.192524][T22504] tcp_v6_connect+0x14ed/0x1cf0 [ 683.192560][T22504] ? __pfx_tcp_v6_connect+0x10/0x10 [ 683.192579][T22504] ? mptcp_connect+0x4a0/0x7f0 [ 683.192606][T22504] ? __local_bh_enable_ip+0xd6/0x140 [ 683.192636][T22504] mptcp_connect+0x527/0x7f0 [ 683.192664][T22504] __inet_stream_connect+0x258/0xe00 [ 683.192692][T22504] ? do_raw_spin_lock+0x12b/0x2f0 [ 683.192721][T22504] ? __pfx___inet_stream_connect+0x10/0x10 [ 683.192747][T22504] ? inet_stream_connect+0x51/0xa0 [ 683.192769][T22504] ? __local_bh_enable_ip+0xd6/0x140 [ 683.192798][T22504] inet_stream_connect+0x66/0xa0 [ 683.192821][T22504] __sys_connect+0x316/0x450 [ 683.192847][T22504] ? __pfx___sys_connect+0x10/0x10 [ 683.192883][T22504] ? __pfx_ksys_write+0x10/0x10 [ 683.192919][T22504] __x64_sys_connect+0x7a/0x90 [ 683.192944][T22504] do_syscall_64+0x166/0x520 [ 683.192967][T22504] ? trace_irq_disable+0x3b/0x140 [ 683.192986][T22504] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 683.193011][T22504] ? clear_bhb_loop+0x70/0xc0 [ 683.193039][T22504] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 683.193058][T22504] RIP: 0033:0x7f46d519e159 [ 683.193076][T22504] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 683.193091][T22504] RSP: 002b:00007f46d5fdf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 683.193111][T22504] RAX: ffffffffffffffda RBX: 00007f46d5425fa0 RCX: 00007f46d519e159 [ 683.193125][T22504] RDX: 000000000000001c RSI: 0000200000000000 RDI: 0000000000000003 [ 683.193137][T22504] RBP: 00007f46d5fdf090 R08: 0000000000000000 R09: 0000000000000000 [ 683.193149][T22504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 683.193160][T22504] R13: 00007f46d5426038 R14: 00007f46d5425fa0 R15: 00007fff359e4008 [ 683.193193][T22504] [ 683.816380][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 683.949668][T22516] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4499'. [ 683.977254][T22516] netlink: 'syz.2.4499': attribute type 1 has an invalid length. [ 684.110581][T22516] x_tables: duplicate underflow at hook 3 [ 684.221476][T22524] syzkaller1: entered promiscuous mode [ 684.221501][T22524] syzkaller1: entered allmulticast mode [ 685.493602][T22554] lo speed is unknown, defaulting to 1000 [ 685.493664][T22554] lo speed is unknown, defaulting to 1000 [ 685.494470][T22554] lo speed is unknown, defaulting to 1000 [ 685.535340][T22554] smbdirect: ib_dev[syz_device_name_32_chars_1234567]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 685.535377][T22554] smbdirect: ib_dev[syz_device_name_32_chars_1234567]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 685.535412][T22554] smbdirect: ib_dev[syz_device_name_32_chars_1234567]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 685.552712][T22555] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4513'. [ 685.621390][T22554] infiniband syz_device_name_32_chars_1234567: RDMA CMA: cma_listen_on_dev, error -22 [ 685.700535][T22554] lo speed is unknown, defaulting to 1000 [ 685.705681][T22554] lo speed is unknown, defaulting to 1000 [ 685.722552][T22554] lo speed is unknown, defaulting to 1000 [ 685.733594][T22554] lo speed is unknown, defaulting to 1000 [ 685.743677][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.743849][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.766972][T22554] lo speed is unknown, defaulting to 1000 [ 685.769028][T22554] lo speed is unknown, defaulting to 1000 [ 685.770791][T22554] lo speed is unknown, defaulting to 1000 [ 685.892017][T22568] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4516'. [ 685.914998][T22568] netlink: 'syz.4.4516': attribute type 13 has an invalid length. [ 685.925547][T22567] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 686.288000][T22588] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4522'. [ 686.392017][ T151] wlan0: Selected IBSS BSSID 56:33:8b:26:b3:a0 based on configured SSID [ 686.854138][T22599] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4527'. [ 687.823068][ T151] wlan0: Trigger new scan to find an IBSS to join [ 688.045530][T22635] lo: Caught tx_queue_len zero misconfig [ 688.161525][T22636] netlink: 'syz.3.4538': attribute type 1 has an invalid length. [ 688.247754][T22636] 8021q: adding VLAN 0 to HW filter on device bond3 [ 688.254738][T22642] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4541'. [ 688.282362][T22642] vlan0: entered promiscuous mode [ 688.341925][T22636] bond3: entered promiscuous mode [ 688.341949][T22636] bond3: entered allmulticast mode [ 688.500418][T22645] syzkaller1: entered promiscuous mode [ 688.500449][T22645] syzkaller1: entered allmulticast mode [ 688.631978][T22646] syzkaller1: entered promiscuous mode [ 688.632006][T22646] syzkaller1: entered allmulticast mode [ 688.750702][T22649] ip6t_rt: `--rt-type 0' required before `--rt-0-*' [ 688.782581][T22649] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4544'. [ 688.782609][T22649] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4544'. [ 688.893217][T22651] x_tables: duplicate underflow at hook 2 [ 688.989836][ T151] wlan0: Selected IBSS BSSID 56:33:8b:26:b3:a0 based on configured SSID [ 689.323533][T22662] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4549'. [ 689.337903][T22662] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4549'. [ 689.436725][T18874] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 689.445157][T18874] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 689.454830][T18874] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 689.477449][T18874] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 689.481736][T22671] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4552'. [ 689.481977][T18874] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 689.484747][T22671] sit0: Caught tx_queue_len zero misconfig [ 689.779779][T22682] syzkaller1: entered promiscuous mode [ 689.779813][T22682] syzkaller1: entered allmulticast mode [ 690.126974][T22687] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4557'. [ 690.304947][T22687] 8021q: adding VLAN 0 to HW filter on device bond1 [ 690.863480][T22668] lo speed is unknown, defaulting to 1000 [ 690.905526][T22713] netlink: 232 bytes leftover after parsing attributes in process `syz.2.4564'. [ 691.576327][ T4932] Bluetooth: hci6: command tx timeout [ 691.787147][T22738] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 691.917926][T22738] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4569'. [ 692.138452][T20194] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 692.350787][T22668] bridge0: port 1(bridge_slave_0) entered blocking state [ 692.350897][T22668] bridge0: port 1(bridge_slave_0) entered disabled state [ 692.351087][T22668] bridge_slave_0: entered allmulticast mode [ 692.368688][T22668] bridge_slave_0: entered promiscuous mode [ 692.383035][T22668] bridge0: port 2(bridge_slave_1) entered blocking state [ 692.383140][T22668] bridge0: port 2(bridge_slave_1) entered disabled state [ 692.383322][T22668] bridge_slave_1: entered allmulticast mode [ 692.397809][T22668] bridge_slave_1: entered promiscuous mode [ 692.556011][T22759] bond0: Caught tx_queue_len zero misconfig [ 692.574987][T22761] netlink: 'syz.3.4576': attribute type 30 has an invalid length. [ 692.793349][T22668] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 692.810646][T22668] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 692.867710][T20194] wlan0: Trigger new scan to find an IBSS to join [ 693.164367][T22668] team0: Port device team_slave_0 added [ 693.209318][T22668] team0: Port device team_slave_1 added [ 693.453031][T22668] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 693.453049][T22668] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 693.453071][T22668] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 693.461687][T22668] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 693.461705][T22668] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 693.462912][T22668] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 693.551179][T22668] hsr_slave_0: entered promiscuous mode [ 693.552446][T22668] hsr_slave_1: entered promiscuous mode [ 693.553403][T22668] debugfs: 'hsr0' already exists in 'hsr' [ 693.553423][T22668] Cannot create hsr debugfs directory [ 693.656501][ T4932] Bluetooth: hci6: command tx timeout [ 694.049602][T22800] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4586'. [ 694.161638][T22796] netlink: 'syz.2.4585': attribute type 33 has an invalid length. [ 694.235335][T22796] bond6: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 694.273768][T22809] netlink: 144 bytes leftover after parsing attributes in process `syz.3.4589'. [ 694.299167][T22796] bond6 (unregistering): Released all slaves [ 694.333106][T22802] bond0: Caught tx_queue_len zero misconfig [ 694.465563][T22811] IPv6: sit1: Disabled Multicast RS [ 694.832026][T22823] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 694.940729][T22823] netlink: 92 bytes leftover after parsing attributes in process `syz.5.4592'. [ 695.034973][T22668] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 695.050377][T22668] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 695.051547][T22668] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 695.081096][T22668] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 695.081989][T22668] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 695.110998][T22668] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 695.112189][T22668] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 695.187411][T22668] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 695.223616][T22841] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4596'. [ 695.288947][T22840] netlink: 'syz.2.4595': attribute type 58 has an invalid length. [ 695.288970][T22840] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4595'. [ 695.418925][T22855] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4598'. [ 695.703385][T22864] netlink: 14 bytes leftover after parsing attributes in process `syz.5.4599'. [ 695.731817][T22668] 8021q: adding VLAN 0 to HW filter on device bond0 [ 695.732294][T22863] bond0: Caught tx_queue_len zero misconfig [ 695.737008][ T4932] Bluetooth: hci6: command tx timeout [ 695.798140][T22668] 8021q: adding VLAN 0 to HW filter on device team0 [ 695.836656][ T38] wlan0: Trigger new scan to find an IBSS to join [ 695.845947][ T8022] bridge0: port 1(bridge_slave_0) entered blocking state [ 695.846050][ T8022] bridge0: port 1(bridge_slave_0) entered forwarding state [ 695.888037][ T8022] bridge0: port 2(bridge_slave_1) entered blocking state [ 695.888139][ T8022] bridge0: port 2(bridge_slave_1) entered forwarding state [ 695.893562][T22873] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4603'. [ 696.021518][T22668] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 696.364842][T22883] syzkaller1: entered promiscuous mode [ 696.364865][T22883] syzkaller1: entered allmulticast mode [ 696.604991][T22892] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 696.626338][T22892] netlink: NAT flags may be given only when NAT range (SRC or DST) is also specified. [ 696.626373][T22892] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 697.055794][T22904] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4608'. [ 697.403703][T22909] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4609'. [ 697.505592][T22668] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 697.599339][T22911] Bluetooth: hci0: unsupported parameter 5135 [ 697.599360][T22911] Bluetooth: hci0: unsupported parameter 8192 [ 697.599372][T22911] Bluetooth: hci0: unsupported parameter 5135 [ 697.599383][T22911] Bluetooth: hci0: unsupported parameter 8192 [ 697.816553][ T4932] Bluetooth: hci6: command tx timeout [ 698.780124][ T151] wlan0: Creating new IBSS network, BSSID 92:64:1a:36:6c:b4 [ 699.192109][T22668] veth0_vlan: entered promiscuous mode [ 699.221703][T22668] veth1_vlan: entered promiscuous mode [ 699.390641][T22959] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 699.427205][T22959] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci6/hci6:200/input6 [ 699.429913][T22668] veth0_macvtap: entered promiscuous mode [ 699.486844][T22668] veth1_macvtap: entered promiscuous mode [ 699.537375][T22668] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 699.559145][T22668] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 699.697067][ T8022] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 699.697119][ T8022] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 699.697152][ T8022] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 699.697182][ T8022] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 699.747050][T22967] syzkaller1: entered promiscuous mode [ 699.747233][T22967] syzkaller1: entered allmulticast mode [ 700.206066][ T8020] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 700.206088][ T8020] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 700.455699][ T8020] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 700.455722][ T8020] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 700.484141][T22982] __nla_validate_parse: 1 callbacks suppressed [ 700.484161][T22982] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4630'. [ 700.485579][T22982] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4630'. [ 700.511620][T22979] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4629'. [ 700.569993][T22982] openvswitch: netlink: Tunnel attr 13 has unexpected len 2 expected 16 [ 700.570036][T22982] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 700.761338][T22986] netlink: 'syz.3.4632': attribute type 1 has an invalid length. [ 700.902873][T22996] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4635'. [ 700.905905][T22986] bond5: entered promiscuous mode [ 700.923598][T22986] 8021q: adding VLAN 0 to HW filter on device bond5 [ 700.994110][T23003] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4636'. [ 701.079229][T23008] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4637'. [ 701.085762][T23009] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4635'. [ 701.187452][T22993] 8021q: adding VLAN 0 to HW filter on device bond5 [ 701.188499][T22993] bond5: (slave wireguard1): The slave device specified does not support setting the MAC address [ 701.188520][T22993] bond5: (slave wireguard1): Setting fail_over_mac to active for active-backup mode [ 701.296322][T22993] bond5: (slave wireguard1): making interface the new active one [ 701.296346][T22993] wireguard1: entered promiscuous mode [ 701.323858][T22993] bond5: (slave wireguard1): Enslaving as an active interface with an up link [ 701.334377][T22999] veth1_virt_wifi: Caught tx_queue_len zero misconfig [ 701.363193][T22998] wg0: Caught tx_queue_len zero misconfig [ 701.465920][T23021] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4638'. [ 701.798490][T23038] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4642'. [ 701.925812][T23030] openvswitch: netlink: Missing key (keys=c0, expected=20080) [ 702.014336][T23041] bond_slave_0: Caught tx_queue_len zero misconfig [ 702.175451][T23046] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4645'. [ 702.333784][T23052] netlink: 'syz.6.4649': attribute type 1 has an invalid length. [ 702.333810][T23052] netlink: 'syz.6.4649': attribute type 2 has an invalid length. [ 702.712756][T23067] netlink: 'syz.6.4651': attribute type 1 has an invalid length. [ 703.157860][T23081] syzkaller1: entered promiscuous mode [ 703.157885][T23081] syzkaller1: entered allmulticast mode [ 703.986047][T23117] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 704.051979][T23117] h: entered promiscuous mode [ 704.091056][T23117] IPv6: NLM_F_CREATE should be specified when creating new route [ 704.820149][T23148] lo speed is unknown, defaulting to 1000 [ 704.926205][ T31] audit: type=1107 audit(1790897732.078:9): pid=23152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='vÿA5ž÷Œ•%èÍUýAÊ�ÃËÙ ë0ä�™l…t¿Ý•/Öÿ Ž6òЍŠç›' [ 705.730985][T23173] __nla_validate_parse: 6 callbacks suppressed [ 705.731005][T23173] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4680'. [ 705.731019][T23173] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4680'. [ 705.733551][T23176] syzkaller1: entered promiscuous mode [ 705.733740][T23176] syzkaller1: entered allmulticast mode [ 706.110787][T23188] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4685'. [ 706.413240][T23197] sch_tbf: burst 0 is lower than device lo mtu (1296) ! [ 706.633871][T23201] sctp: [Deprecated]: syz.3.4688 (pid 23201) Use of struct sctp_assoc_value in delayed_ack socket option. [ 706.633871][T23201] Use struct sctp_sack_info instead [ 707.101327][T23208] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4693'. [ 707.102418][T23213] ip_tables: iptables: counters copy to user failed while replacing table [ 707.308871][T23216] netlink: 112 bytes leftover after parsing attributes in process `syz.2.4695'. [ 707.711909][T23225] netlink: 'syz.2.4699': attribute type 83 has an invalid length. [ 708.658424][T23253] netlink: 1204 bytes leftover after parsing attributes in process `syz.4.4707'. [ 709.181565][T23268] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4712'. [ 709.457226][T23287] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4716'. [ 710.036820][T23303] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4721'. [ 711.201682][T23338] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 711.296357][T23338] sctp: [Deprecated]: syz.6.4732 (pid 23338) Use of int in max_burst socket option deprecated. [ 711.296357][T23338] Use struct sctp_assoc_value instead [ 711.304025][T23338] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 711.319891][T23339] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 711.338436][T23338] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 711.821612][ T151] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 711.893262][T23361] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4737'. [ 712.287063][T23373] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci6/hci6:200/input7 [ 712.394664][T23376] 8021q: VLANs not supported on ip_vti0 [ 712.611547][T23384] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 712.978947][T23399] netlink: 44 bytes leftover after parsing attributes in process `syz.6.4748'. [ 713.036610][T23403] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4748'. [ 713.040699][T23404] netlink: 44 bytes leftover after parsing attributes in process `syz.6.4748'. [ 713.101511][T23399] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4748'. [ 713.361835][T23410] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4749'. [ 713.722232][T23414] syzkaller0: entered promiscuous mode [ 713.722257][T23414] syzkaller0: entered allmulticast mode [ 717.097101][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 718.276679][T23428] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4753'. [ 718.513874][T23442] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4754'. [ 718.801089][ T4932] Bluetooth: hci1: ACL packet for unknown connection handle 3484 [ 718.991642][ T38] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 719.182462][T23459] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4761'. [ 719.196565][T23459] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4761'. [ 719.197440][T23459] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4761'. [ 719.428540][T23470] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4762'. [ 719.487159][T23472] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4763'. [ 719.730021][T23479] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4765'. [ 720.515946][T23511] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4775'. [ 720.748971][T23519] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4778'. [ 721.015386][T23522] vlan3: entered promiscuous mode [ 721.413579][T23536] FAULT_INJECTION: forcing a failure. [ 721.413579][T23536] name failslab, interval 1, probability 0, space 0, times 0 [ 721.413611][T23536] CPU: 0 UID: 0 PID: 23536 Comm: syz.3.4784 Not tainted syzkaller #0 PREEMPT(full) [ 721.413633][T23536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 721.413644][T23536] Call Trace: [ 721.413652][T23536] [ 721.413660][T23536] dump_stack_lvl+0xe8/0x150 [ 721.413690][T23536] should_fail_ex+0x410/0x560 [ 721.413717][T23536] ? __alloc_skb+0x1db/0x7a0 [ 721.413739][T23536] should_failslab+0xa8/0x100 [ 721.413763][T23536] ? __alloc_skb+0x1db/0x7a0 [ 721.413783][T23536] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 721.413812][T23536] ? __alloc_skb+0x18d/0x7a0 [ 721.413835][T23536] ? __alloc_skb+0x1db/0x7a0 [ 721.413864][T23536] __alloc_skb+0x1db/0x7a0 [ 721.413890][T23536] netlink_sendmsg+0x5d4/0xb40 [ 721.413919][T23536] ? __pfx_netlink_sendmsg+0x10/0x10 [ 721.413947][T23536] ? apparmor_socket_sendmsg+0x98/0x360 [ 721.413971][T23536] ? __pfx_netlink_sendmsg+0x10/0x10 [ 721.413988][T23536] sock_sendmsg_nosec+0x13a/0x180 [ 721.414012][T23536] ____sys_sendmsg+0x54e/0x850 [ 721.414043][T23536] ? __pfx_____sys_sendmsg+0x10/0x10 [ 721.414079][T23536] ? import_iovec+0x73/0xa0 [ 721.414107][T23536] ___sys_sendmsg+0x2a5/0x360 [ 721.414131][T23536] ? __lock_acquire+0x747/0x2de0 [ 721.414155][T23536] ? __pfx____sys_sendmsg+0x10/0x10 [ 721.414225][T23536] ? __fget_files+0x2a/0x420 [ 721.414250][T23536] ? __fget_files+0x3a2/0x420 [ 721.414285][T23536] __x64_sys_sendmsg+0x1b1/0x290 [ 721.414315][T23536] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 721.414362][T23536] do_syscall_64+0x166/0x520 [ 721.414386][T23536] ? trace_irq_disable+0x3b/0x140 [ 721.414424][T23536] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 721.414444][T23536] ? clear_bhb_loop+0x70/0xc0 [ 721.414467][T23536] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 721.414485][T23536] RIP: 0033:0x7f95dbd9e159 [ 721.414505][T23536] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 721.414517][T23536] RSP: 002b:00007f95dcc37028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 721.414537][T23536] RAX: ffffffffffffffda RBX: 00007f95dc025fa0 RCX: 00007f95dbd9e159 [ 721.414550][T23536] RDX: 0000000000000880 RSI: 0000200000000340 RDI: 0000000000000003 [ 721.414562][T23536] RBP: 00007f95dcc37090 R08: 0000000000000000 R09: 0000000000000000 [ 721.414573][T23536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 721.414584][T23536] R13: 00007f95dc026038 R14: 00007f95dc025fa0 R15: 00007fffb7a6a9d8 [ 721.414616][T23536] [ 721.960251][T18874] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 721.978528][T18874] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 721.981018][T18874] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 721.984738][T18874] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 721.997963][T23543] lo: Caught tx_queue_len zero misconfig [ 722.001501][T18874] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 722.201377][T23550] gre0: Caught tx_queue_len zero misconfig [ 722.630247][T23563] Bluetooth: ISO socket layer initialized [ 722.635367][ T4932] Bluetooth: hci1: unexpected event for opcode 0x2003 [ 722.635795][ T4932] Bluetooth: hci1: unexpected event for opcode 0x2003 [ 723.330761][T23591] netlink: 'syz.2.4798': attribute type 1 has an invalid length. [ 723.345338][T23591] x_tables: duplicate underflow at hook 2 [ 723.562469][T23540] lo speed is unknown, defaulting to 1000 [ 723.790273][T23611] openvswitch: netlink: Flow key attribute not present in set flow. [ 723.815102][T23611] ÿÿÿÿÿÿ: renamed from virt_wifi0 (while UP) [ 723.855422][T23612] __nla_validate_parse: 6 callbacks suppressed [ 723.855445][T23612] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4802'. [ 723.855477][T23612] netlink: 'syz.2.4802': attribute type 1 has an invalid length. [ 724.136836][ T4932] Bluetooth: hci7: command tx timeout [ 724.141107][ T151] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 724.224263][T23620] netlink: 'syz.2.4805': attribute type 10 has an invalid length. [ 724.257078][T23616] tipc: Started in network mode [ 724.257110][T23616] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 724.257262][T23616] tipc: Enabled bearer , priority 0 [ 724.353106][T23620] veth0_vlan: entered allmulticast mode [ 724.400782][T23620] team0: Device veth0_vlan failed to register rx_handler [ 724.668453][T23634] netlink: 'syz.6.4807': attribute type 3 has an invalid length. [ 725.043206][T23652] FAULT_INJECTION: forcing a failure. [ 725.043206][T23652] name failslab, interval 1, probability 0, space 0, times 0 [ 725.043239][T23652] CPU: 1 UID: 0 PID: 23652 Comm: syz.4.4814 Not tainted syzkaller #0 PREEMPT(full) [ 725.043259][T23652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 725.043269][T23652] Call Trace: [ 725.043276][T23652] [ 725.043284][T23652] dump_stack_lvl+0xe8/0x150 [ 725.043315][T23652] should_fail_ex+0x410/0x560 [ 725.043341][T23652] ? __alloc_skb+0x1db/0x7a0 [ 725.043363][T23652] should_failslab+0xa8/0x100 [ 725.043385][T23652] ? __alloc_skb+0x1db/0x7a0 [ 725.043403][T23652] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 725.043432][T23652] ? __alloc_skb+0x18d/0x7a0 [ 725.043455][T23652] ? __alloc_skb+0x1db/0x7a0 [ 725.043485][T23652] __alloc_skb+0x1db/0x7a0 [ 725.043513][T23652] netlink_dump+0x1e7/0xee0 [ 725.043711][T23652] ? __pfx_netlink_dump+0x10/0x10 [ 725.043777][T23652] ? genl_start+0x497/0x6d0 [ 725.043808][T23652] __netlink_dump_start+0x589/0x7b0 [ 725.043843][T23652] genl_family_rcv_msg_dumpit+0x213/0x310 [ 725.043871][T23652] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 725.043914][T23652] ? genl_get_cmd+0x6cc/0x960 [ 725.043943][T23652] ? __pfx___mutex_lock+0x10/0x10 [ 725.043970][T23652] ? __pfx_genl_start+0x10/0x10 [ 725.044003][T23652] ? __pfx_genl_dumpit+0x10/0x10 [ 725.044025][T23652] ? __pfx_genl_done+0x10/0x10 [ 725.044088][T23652] genl_rcv_msg+0x5e1/0x7a0 [ 725.044122][T23652] ? __pfx_genl_rcv_msg+0x10/0x10 [ 725.044144][T23652] ? __pfx_tipc_nl_node_dump_link+0x10/0x10 [ 725.044229][T23652] netlink_rcv_skb+0x226/0x4a0 [ 725.044259][T23652] ? __pfx_genl_rcv_msg+0x10/0x10 [ 725.044284][T23652] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 725.044343][T23652] ? down_read+0x2be/0x330 [ 725.044374][T23652] genl_rcv+0x28/0x40 [ 725.044394][T23652] netlink_unicast+0x7bd/0x940 [ 725.044433][T23652] netlink_sendmsg+0x813/0xb40 [ 725.044463][T23652] ? __pfx_netlink_sendmsg+0x10/0x10 [ 725.044491][T23652] ? apparmor_socket_sendmsg+0x98/0x360 [ 725.044516][T23652] ? __pfx_netlink_sendmsg+0x10/0x10 [ 725.044534][T23652] sock_sendmsg_nosec+0x13a/0x180 [ 725.044563][T23652] ____sys_sendmsg+0x54e/0x850 [ 725.044596][T23652] ? __pfx_____sys_sendmsg+0x10/0x10 [ 725.044632][T23652] ? import_iovec+0x73/0xa0 [ 725.044661][T23652] ___sys_sendmsg+0x2a5/0x360 [ 725.044686][T23652] ? __lock_acquire+0x747/0x2de0 [ 725.044711][T23652] ? __pfx____sys_sendmsg+0x10/0x10 [ 725.044777][T23652] ? __fget_files+0x2a/0x420 [ 725.044802][T23652] ? __fget_files+0x3a2/0x420 [ 725.044839][T23652] __x64_sys_sendmsg+0x1b1/0x290 [ 725.044868][T23652] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 725.044924][T23652] do_syscall_64+0x166/0x520 [ 725.044948][T23652] ? trace_irq_disable+0x3b/0x140 [ 725.044966][T23652] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 725.044986][T23652] ? clear_bhb_loop+0x70/0xc0 [ 725.045009][T23652] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 725.045028][T23652] RIP: 0033:0x7fbd99d9e159 [ 725.045046][T23652] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 725.045061][T23652] RSP: 002b:00007fbd9abe3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 725.045079][T23652] RAX: ffffffffffffffda RBX: 00007fbd9a025fa0 RCX: 00007fbd99d9e159 [ 725.045091][T23652] RDX: 0000000000000004 RSI: 00002000000002c0 RDI: 0000000000000003 [ 725.045101][T23652] RBP: 00007fbd9abe3090 R08: 0000000000000000 R09: 0000000000000000 [ 725.045112][T23652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 725.045122][T23652] R13: 00007fbd9a026038 R14: 00007fbd9a025fa0 R15: 00007ffd323ad1b8 [ 725.045152][T23652] [ 725.570307][T16548] tipc: Node number set to 43690 [ 725.685361][T23540] bridge0: port 1(bridge_slave_0) entered blocking state [ 725.685471][T23540] bridge0: port 1(bridge_slave_0) entered disabled state [ 725.685650][T23540] bridge_slave_0: entered allmulticast mode [ 725.719449][T23540] bridge_slave_0: entered promiscuous mode [ 725.742004][T23540] bridge0: port 2(bridge_slave_1) entered blocking state [ 725.742112][T23540] bridge0: port 2(bridge_slave_1) entered disabled state [ 725.742282][T23540] bridge_slave_1: entered allmulticast mode [ 725.782558][T23540] bridge_slave_1: entered promiscuous mode [ 725.914772][T23667] tipc: Enabling of bearer rejected, already enabled [ 725.952366][T23540] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 725.998869][T23540] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 726.170903][T23674] bridge0: port 2(bridge_slave_1) entered disabled state [ 726.171492][T23674] bridge0: port 1(bridge_slave_0) entered disabled state [ 726.183569][T23674] bridge0: entered allmulticast mode [ 726.216486][ T4932] Bluetooth: hci7: command tx timeout [ 726.235590][T23540] team0: Port device team_slave_0 added [ 726.255177][T23540] team0: Port device team_slave_1 added [ 726.303952][T23540] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 726.303970][T23540] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 726.303993][T23540] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 726.305853][T23540] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 726.305868][T23540] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 726.305891][T23540] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 726.447046][T23540] hsr_slave_0: entered promiscuous mode [ 726.448035][T23540] hsr_slave_1: entered promiscuous mode [ 726.448747][T23540] debugfs: 'hsr0' already exists in 'hsr' [ 726.448765][T23540] Cannot create hsr debugfs directory [ 726.694761][T23689] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4826'. [ 726.768005][T23693] FAULT_INJECTION: forcing a failure. [ 726.768005][T23693] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 726.768035][T23693] CPU: 0 UID: 0 PID: 23693 Comm: syz.4.4825 Not tainted syzkaller #0 PREEMPT(full) [ 726.768059][T23693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 726.768070][T23693] Call Trace: [ 726.768077][T23693] [ 726.768085][T23693] dump_stack_lvl+0xe8/0x150 [ 726.768115][T23693] should_fail_ex+0x410/0x560 [ 726.768144][T23693] _copy_to_user+0x31/0xb0 [ 726.768171][T23693] simple_read_from_buffer+0xe1/0x170 [ 726.768203][T23693] proc_fail_nth_read+0x1bb/0x230 [ 726.768221][T23693] ? common_file_perm+0x20e/0x2b0 [ 726.768247][T23693] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 726.768270][T23693] ? rw_verify_area+0x24a/0x4c0 [ 726.768298][T23693] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 726.768315][T23693] vfs_read+0x213/0xa80 [ 726.768347][T23693] ? __pfx___mutex_lock+0x10/0x10 [ 726.768373][T23693] ? __pfx_vfs_read+0x10/0x10 [ 726.768402][T23693] ? __fget_files+0x2a/0x420 [ 726.768431][T23693] ? __fget_files+0x3a2/0x420 [ 726.768455][T23693] ? __fget_files+0x2a/0x420 [ 726.768489][T23693] ksys_read+0x150/0x270 [ 726.768518][T23693] ? __pfx_ksys_read+0x10/0x10 [ 726.768557][T23693] do_syscall_64+0x166/0x520 [ 726.768580][T23693] ? trace_irq_disable+0x3b/0x140 [ 726.768599][T23693] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 726.768618][T23693] ? clear_bhb_loop+0x70/0xc0 [ 726.768640][T23693] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 726.768659][T23693] RIP: 0033:0x7fbd99d5e98e [ 726.768676][T23693] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 726.768691][T23693] RSP: 002b:00007fbd9abc1fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 726.768710][T23693] RAX: ffffffffffffffda RBX: 00007fbd9abc26c0 RCX: 00007fbd99d5e98e [ 726.768724][T23693] RDX: 000000000000000f RSI: 00007fbd9abc20a0 RDI: 0000000000000004 [ 726.768736][T23693] RBP: 00007fbd9abc2090 R08: 0000000000000000 R09: 0000000000000000 [ 726.768748][T23693] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 726.768759][T23693] R13: 00007fbd9a026128 R14: 00007fbd9a026090 R15: 00007ffd323ad1b8 [ 726.768791][T23693] [ 726.882347][T20194] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 727.368359][T23714] tunl0: Caught tx_queue_len zero misconfig [ 727.474537][T23540] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 727.502445][T23540] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 727.505153][T23540] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 727.529589][T23540] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 727.532946][T23540] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 727.555443][T23540] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 727.565013][T23540] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 727.593498][T23540] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 727.782655][T23733] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4832'. [ 727.850731][T23540] 8021q: adding VLAN 0 to HW filter on device bond0 [ 727.911579][T23540] 8021q: adding VLAN 0 to HW filter on device team0 [ 727.975697][T20192] bridge0: port 1(bridge_slave_0) entered blocking state [ 727.975805][T20192] bridge0: port 1(bridge_slave_0) entered forwarding state [ 727.995469][T20192] bridge0: port 2(bridge_slave_1) entered blocking state [ 727.995584][T20192] bridge0: port 2(bridge_slave_1) entered forwarding state [ 728.296495][ T4932] Bluetooth: hci7: command tx timeout [ 728.349799][T23748] virt_wifi0 speed is unknown, defaulting to 1000 [ 728.433733][T23748] virt_wifi0 speed is unknown, defaulting to 1000 [ 728.435114][T23748] virt_wifi0 speed is unknown, defaulting to 1000 [ 728.449087][T23748] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 728.449307][T23748] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 728.449344][T23748] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 728.549590][T23748] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 728.687122][T23748] virt_wifi0 speed is unknown, defaulting to 1000 [ 728.821479][T23748] virt_wifi0 speed is unknown, defaulting to 1000 [ 728.844780][T23748] virt_wifi0 speed is unknown, defaulting to 1000 [ 728.872516][T23748] virt_wifi0 speed is unknown, defaulting to 1000 [ 728.948880][T23748] virt_wifi0 speed is unknown, defaulting to 1000 [ 728.973165][T23748] virt_wifi0 speed is unknown, defaulting to 1000 [ 729.091131][T23748] virt_wifi0 speed is unknown, defaulting to 1000 [ 729.114807][T23748] virt_wifi0 speed is unknown, defaulting to 1000 [ 729.145961][T23748] virt_wifi0 speed is unknown, defaulting to 1000 [ 729.397038][T23773] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 729.397792][T23772] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 730.072958][T23540] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 730.182628][T23782] xt_TCPMSS: Only works on TCP SYN packets [ 730.376561][ T4932] Bluetooth: hci7: command tx timeout [ 730.482565][T23795] netlink: 'syz.6.4845': attribute type 21 has an invalid length. [ 730.482589][T23795] netlink: 156 bytes leftover after parsing attributes in process `syz.6.4845'. [ 731.021998][T23540] veth0_vlan: entered promiscuous mode [ 731.058198][T23540] veth1_vlan: entered promiscuous mode [ 731.372569][T23540] veth0_macvtap: entered promiscuous mode [ 731.393933][T23540] veth1_macvtap: entered promiscuous mode [ 731.607075][T23540] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 731.695985][T23540] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 731.795954][ T8019] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.797240][ T8019] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.851214][T20194] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.857114][ T8019] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.894332][T23829] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4854'. [ 731.966057][T23829] vlan0: entered promiscuous mode [ 732.641757][T23839] syzkaller0: left promiscuous mode [ 732.641780][T23839] syzkaller0: left allmulticast mode [ 732.749806][T23850] netlink: 'syz.4.4860': attribute type 1 has an invalid length. [ 732.749829][T23850] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4860'. [ 732.749841][T23850] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4860'. [ 732.801012][ T151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 732.801025][ T151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 732.983025][T23836] bond1: option mode: invalid value (10) [ 733.037386][T23836] bond1 (unregistering): Released all slaves [ 733.667416][T23851] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4860'. [ 733.797166][ T8022] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 733.797187][ T8022] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 734.082110][T23869] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4864'. [ 734.082241][T23869] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 734.108167][T23872] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4864'. [ 734.171046][T23875] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4866'. [ 734.288215][T23869] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 734.504914][T23875] vlan2: entered promiscuous mode [ 734.504938][T23875] gretap0: entered promiscuous mode [ 734.750824][T23884] syzkaller1: entered promiscuous mode [ 734.750848][T23884] syzkaller1: entered allmulticast mode [ 735.041343][T23905] netlink: 'syz.6.4873': attribute type 1 has an invalid length. [ 735.195118][T23905] bond1: entered promiscuous mode [ 735.195182][T23905] bond1: entered allmulticast mode [ 735.195538][T23905] 8021q: adding VLAN 0 to HW filter on device bond1 [ 735.281388][T23920] netlink: 'syz.3.4876': attribute type 11 has an invalid length. [ 735.284005][T23905] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4873'. [ 735.284026][T23905] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4873'. [ 735.285726][T23909] erspan1: entered allmulticast mode [ 735.321824][T23909] bond1: (slave erspan1): making interface the new active one [ 735.321846][T23909] erspan1: entered promiscuous mode [ 735.324491][T23909] bond1: (slave erspan1): Enslaving as an active interface with an up link [ 735.383198][T23909] netlink: 'syz.6.4873': attribute type 4 has an invalid length. [ 735.554239][T23905] 8021q: adding VLAN 0 to HW filter on device bond0 [ 735.607669][T23905] bond2: (slave bond0): making interface the new active one [ 735.609129][T23905] bond2: (slave bond0): Enslaving as an active interface with an up link [ 735.643306][T23909] .`: renamed from bond0 (while UP) [ 735.766855][T23909] syz.6.4873 (23909) used greatest stack depth: 19104 bytes left [ 735.983098][T23937] __nla_validate_parse: 1 callbacks suppressed [ 735.983119][T23937] netlink: 112 bytes leftover after parsing attributes in process `syz.4.4884'. [ 736.105942][T23943] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4886'. [ 736.420745][T23956] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4888'. [ 736.577907][T23953] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4888'. [ 737.045744][T23978] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4898'. [ 737.045790][T23978] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4898'. [ 737.080534][T23979] tipc: Enabling of bearer rejected, failed to enable media [ 737.262878][T23981] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4899'. [ 737.352710][T23981] bond0: (slave bond_slave_0): Releasing backup interface [ 737.462033][T23981] bond_slave_0: entered promiscuous mode [ 737.462220][T23981] bond_slave_0: entered allmulticast mode [ 737.868948][T24015] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4906'. [ 737.869153][T24018] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4906'. [ 739.446848][T24065] vlan2: entered allmulticast mode [ 739.446871][T24065] veth1_virt_wifi: entered allmulticast mode [ 740.655427][T24123] IPVS: set_ctl: invalid protocol: 47 0.0.0.0:20002 [ 740.843460][T24130] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 741.160355][T20194] IPVS: starting estimator thread 0... [ 741.236593][T24139] team0: No ports can be present during mode change [ 741.254819][T24145] IPVS: using max 29 ests per chain, 69600 per kthread [ 741.415538][T24155] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4938'. [ 741.415562][T24155] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4938'. [ 741.416050][T24155] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4938'. [ 741.416066][T24155] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4938'. [ 741.439647][T24158] ipt_rpfilter: unknown options [ 741.604372][T24163] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4939'. [ 741.787304][T24168] netlink: 'syz.3.4940': attribute type 3 has an invalid length. [ 741.823189][ T59] wlan0: Trigger new scan to find an IBSS to join [ 741.850257][T24163] hsr_slave_1 (unregistering): left promiscuous mode [ 742.381251][T24189] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4946'. [ 742.406609][T24188] tipc: Enabling of bearer rejected, already enabled [ 742.847853][ T8019] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 743.406010][T24232] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4957'. [ 743.447368][T24232] vlan0: entered promiscuous mode [ 743.939959][T24246] netlink: 'syz.6.4962': attribute type 1 has an invalid length. [ 743.939991][T24246] netlink: 'syz.6.4962': attribute type 2 has an invalid length. [ 744.096347][T24255] netlink: NAT attribute has 8 unknown bytes [ 744.096384][T24255] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 744.426518][T24266] openvswitch: netlink: EtherType 548 is less than min 600 [ 744.426803][T24266] openvswitch: netlink: EtherType 548 is less than min 600 [ 744.427053][T24266] openvswitch: netlink: EtherType 548 is less than min 600 [ 744.427303][T24266] openvswitch: netlink: EtherType 548 is less than min 600 [ 744.427556][T24266] openvswitch: netlink: EtherType 548 is less than min 600 [ 744.427806][T24266] openvswitch: netlink: EtherType 548 is less than min 600 [ 744.478375][T24266] openvswitch: netlink: EtherType 548 is less than min 600 [ 744.479104][T24266] openvswitch: netlink: EtherType 548 is less than min 600 [ 744.650240][T24276] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4972'. [ 744.856972][ T151] wlan0: Trigger new scan to find an IBSS to join [ 744.857058][ T151] wlan0: Trigger new scan to find an IBSS to join [ 744.931276][T24286] netlink: 7168 bytes leftover after parsing attributes in process `syz.4.4975'. [ 745.645603][T24305] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4979'. [ 746.575973][T24325] vlan3: entered promiscuous mode [ 746.575998][T24325] geneve1: entered promiscuous mode [ 746.590800][T24325] vlan3: entered allmulticast mode [ 746.590821][T24325] geneve1: entered allmulticast mode [ 747.019590][T24357] tipc: Started in network mode [ 747.019623][T24357] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 747.019933][T24357] tipc: Enabled bearer , priority 0 [ 747.182765][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.182824][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.293992][T24372] IPVS: set_ctl: invalid protocol: 135 224.0.0.2:20002 [ 747.775136][T24384] syzkaller1: entered promiscuous mode [ 747.775171][T24384] syzkaller1: entered allmulticast mode [ 747.818839][T20193] wlan0: Trigger new scan to find an IBSS to join [ 747.818939][T20193] wlan0: Trigger new scan to find an IBSS to join [ 748.101794][T24390] __nla_validate_parse: 1 callbacks suppressed [ 748.101814][T24390] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5011'. [ 748.102105][T24390] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5011'. [ 748.102288][T24390] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5011'. [ 748.102457][T24390] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5011'. [ 748.102622][T24390] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5011'. [ 748.102789][T24390] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5011'. [ 748.102957][T24390] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5011'. [ 748.103120][T24390] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5011'. [ 748.103293][T24390] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5011'. [ 748.151877][ T9553] tipc: Node number set to 43690 [ 748.190705][T24390] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5011'. [ 748.483456][T24395] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 748.571832][T24405] syzkaller1: entered promiscuous mode [ 748.571993][T24405] syzkaller1: entered allmulticast mode [ 748.757580][ T8022] wlan0: Creating new IBSS network, BSSID 02:a6:06:3d:01:86 [ 750.857157][ T8022] wlan0: Trigger new scan to find an IBSS to join [ 750.977630][T24496] ip6t_srh: unknown srh invflags 4000 [ 751.514308][T24510] : renamed from team0 (while UP) [ 751.916640][T20192] wlan0: Creating new IBSS network, BSSID ea:12:6a:2c:02:96 [ 752.129135][T24442] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 752.930327][T24540] netlink: 'syz.7.5043': attribute type 10 has an invalid length. [ 753.067764][T24540] net_ratelimit: 379 callbacks suppressed [ 753.067786][T24540] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 753.451006][T24567] __nla_validate_parse: 59 callbacks suppressed [ 753.451027][T24567] netlink: 144 bytes leftover after parsing attributes in process `syz.2.5050'. [ 753.647315][T24573] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 753.683267][T24576] team0: Device xfrm0 is of different type [ 754.377122][T18874] Bluetooth: hci1: command 0x0405 tx timeout [ 756.137042][T20194] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 756.265283][T24644] netlink: 88 bytes leftover after parsing attributes in process `syz.4.5069'. [ 756.319953][T24562] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 757.248810][T24671] netlink: 'syz.7.5077': attribute type 23 has an invalid length. [ 757.739738][T24691] netlink: 'syz.6.5083': attribute type 12 has an invalid length. [ 757.739759][T24691] netlink: 'syz.6.5083': attribute type 29 has an invalid length. [ 757.739772][T24691] netlink: 148 bytes leftover after parsing attributes in process `syz.6.5083'. [ 757.739790][T24691] netlink: 'syz.6.5083': attribute type 1 has an invalid length. [ 757.739801][T24691] netlink: 47 bytes leftover after parsing attributes in process `syz.6.5083'. [ 757.801429][T20194] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 757.848392][T24695] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5085'. [ 757.848424][T24695] openvswitch: netlink: Missing key (keys=c0, expected=100) [ 759.099268][T24746] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5097'. [ 759.194019][T24753] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5099'. [ 759.239403][T24757] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5101'. [ 759.374426][T24760] bond4: option fail_over_mac: invalid value (16) [ 759.431747][T24760] bond4 (unregistering): Released all slaves [ 759.527522][T24766] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5103'. [ 759.527555][T24766] openvswitch: netlink: Missing key (keys=c0, expected=1100) [ 759.881076][T24777] tipc: Enabling of bearer rejected, already enabled [ 760.283960][T24792] FAULT_INJECTION: forcing a failure. [ 760.283960][T24792] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 760.283991][T24792] CPU: 0 UID: 0 PID: 24792 Comm: syz.4.5110 Not tainted syzkaller #0 PREEMPT(full) [ 760.284012][T24792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 760.284024][T24792] Call Trace: [ 760.284031][T24792] [ 760.284039][T24792] dump_stack_lvl+0xe8/0x150 [ 760.284073][T24792] should_fail_ex+0x410/0x560 [ 760.284100][T24792] _copy_to_user+0x31/0xb0 [ 760.284126][T24792] do_sock_getsockopt+0x6ea/0x7e0 [ 760.284158][T24792] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 760.284200][T24792] ? __fget_files+0x3a2/0x420 [ 760.284224][T24792] ? __fget_files+0x2a/0x420 [ 760.284257][T24792] __x64_sys_getsockopt+0x1a4/0x240 [ 760.284291][T24792] do_syscall_64+0x166/0x520 [ 760.284315][T24792] ? trace_irq_disable+0x3b/0x140 [ 760.284334][T24792] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 760.284353][T24792] ? clear_bhb_loop+0x70/0xc0 [ 760.284375][T24792] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 760.284394][T24792] RIP: 0033:0x7fbd99d9e159 [ 760.284411][T24792] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 760.284426][T24792] RSP: 002b:00007fbd9abc2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 760.284446][T24792] RAX: ffffffffffffffda RBX: 00007fbd9a026090 RCX: 00007fbd99d9e159 [ 760.284460][T24792] RDX: 0000000000002720 RSI: 0000200000000114 RDI: 0000000000000005 [ 760.284472][T24792] RBP: 00007fbd9abc2090 R08: 0000200000000000 R09: 0000000000000000 [ 760.284484][T24792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 760.284495][T24792] R13: 00007fbd9a026128 R14: 00007fbd9a026090 R15: 00007ffd323ad1b8 [ 760.284531][T24792] [ 760.954207][T24821] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5113'. [ 761.038603][T24823] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5116'. [ 761.779404][T24852] tipc: Enabling of bearer rejected, already enabled [ 762.579212][T24884] FAULT_INJECTION: forcing a failure. [ 762.579212][T24884] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 762.579244][T24884] CPU: 0 UID: 0 PID: 24884 Comm: syz.3.5126 Not tainted syzkaller #0 PREEMPT(full) [ 762.579264][T24884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 762.579275][T24884] Call Trace: [ 762.579283][T24884] [ 762.579292][T24884] dump_stack_lvl+0xe8/0x150 [ 762.579323][T24884] should_fail_ex+0x410/0x560 [ 762.579351][T24884] _copy_to_user+0x31/0xb0 [ 762.579378][T24884] simple_read_from_buffer+0xe1/0x170 [ 762.579410][T24884] proc_fail_nth_read+0x1bb/0x230 [ 762.579428][T24884] ? common_file_perm+0x20e/0x2b0 [ 762.579454][T24884] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 762.579476][T24884] ? rw_verify_area+0x24a/0x4c0 [ 762.579505][T24884] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 762.579523][T24884] vfs_read+0x213/0xa80 [ 762.579555][T24884] ? __pfx___mutex_lock+0x10/0x10 [ 762.579582][T24884] ? __pfx_vfs_read+0x10/0x10 [ 762.579610][T24884] ? __fget_files+0x2a/0x420 [ 762.579648][T24884] ? __fget_files+0x3a2/0x420 [ 762.579672][T24884] ? __fget_files+0x2a/0x420 [ 762.579706][T24884] ksys_read+0x150/0x270 [ 762.579735][T24884] ? __pfx_ksys_read+0x10/0x10 [ 762.579760][T24884] ? fput+0xa0/0xd0 [ 762.579793][T24884] do_syscall_64+0x166/0x520 [ 762.579816][T24884] ? trace_irq_disable+0x3b/0x140 [ 762.579835][T24884] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 762.579855][T24884] ? clear_bhb_loop+0x70/0xc0 [ 762.579878][T24884] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 762.579897][T24884] RIP: 0033:0x7f95dbd5e98e [ 762.579914][T24884] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 762.579929][T24884] RSP: 002b:00007f95dcc15fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 762.579949][T24884] RAX: ffffffffffffffda RBX: 00007f95dcc166c0 RCX: 00007f95dbd5e98e [ 762.579963][T24884] RDX: 000000000000000f RSI: 00007f95dcc160a0 RDI: 0000000000000006 [ 762.579977][T24884] RBP: 00007f95dcc16090 R08: 0000000000000000 R09: 0000000000000000 [ 762.579988][T24884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 762.580000][T24884] R13: 00007f95dc026128 R14: 00007f95dc026090 R15: 00007fffb7a6a9d8 [ 762.580032][T24884] [ 762.891475][T24891] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5128'. [ 763.374664][T24899] netlink: 'syz.3.5129': attribute type 2 has an invalid length. [ 763.505102][T24899] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 763.666111][T24907] syzkaller0: entered promiscuous mode [ 763.666619][T24907] syzkaller0: entered allmulticast mode [ 763.889675][T24919] tipc: Enabling of bearer rejected, already enabled [ 763.970448][T24907] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5131'. [ 764.056859][T24923] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 764.063765][T24923] netlink: 'syz.3.5136': attribute type 32 has an invalid length. [ 764.180537][T24924] netlink: 'syz.2.5135': attribute type 1 has an invalid length. [ 764.302241][T24935] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5139'. [ 764.358443][T24935] vlan0: entered promiscuous mode [ 765.474414][T24986] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5153'. [ 765.474442][T24986] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5153'. [ 765.532850][T24986] netlink: 'syz.4.5153': attribute type 1 has an invalid length. [ 765.532872][T24986] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5153'. [ 765.532886][T24986] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5153'. [ 765.675397][T24990] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5158'. [ 765.705375][T24990] netlink: 'syz.7.5158': attribute type 1 has an invalid length. [ 765.734332][T24990] ipvlan2: entered allmulticast mode [ 765.734355][T24990] ip6erspan0: entered allmulticast mode [ 766.285551][T25006] syzkaller1: entered promiscuous mode [ 766.285736][T25006] syzkaller1: entered allmulticast mode [ 766.366152][T25008] tipc: Enabling of bearer rejected, already enabled [ 766.865529][T25028] syz_tun: entered allmulticast mode [ 766.922184][T25026] syz_tun: left allmulticast mode [ 767.329688][T25046] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5174'. [ 767.975318][T25068] syzkaller1: entered promiscuous mode [ 767.975938][T25068] syzkaller1: entered allmulticast mode [ 768.010526][T25071] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5182'. [ 768.230303][T25078] hsr_slave_0: left promiscuous mode [ 768.231363][T25078] hsr_slave_1: left promiscuous mode [ 768.435991][T25084] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5184'. [ 768.475617][T25084] vlan3: entered promiscuous mode [ 768.741946][T25093] ±ÿ: renamed from lo [ 768.926327][T25099] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5191'. [ 768.929658][T25099] netlink: 'syz.6.5191': attribute type 1 has an invalid length. [ 769.152807][T25104] netlink: 'syz.6.5193': attribute type 1 has an invalid length. [ 769.227662][T25104] 8021q: adding VLAN 0 to HW filter on device bond0 [ 769.251150][T25106] netlink: 'syz.2.5194': attribute type 30 has an invalid length. [ 769.346609][T25116] syzkaller1: entered promiscuous mode [ 769.346633][T25116] syzkaller1: entered allmulticast mode [ 769.655622][T25124] netlink: 'syz.6.5200': attribute type 24 has an invalid length. [ 769.694320][T25127] __nla_validate_parse: 1 callbacks suppressed [ 769.694341][T25127] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5201'. [ 769.712144][T25128] netlink: 45349 bytes leftover after parsing attributes in process `syz.3.5202'. [ 769.739823][T25127] vlan0: entered promiscuous mode [ 769.868365][T25128] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 769.895007][T25128] 0ªX¹¦Dö»: entered allmulticast mode [ 770.123534][T25145] netlink: 300 bytes leftover after parsing attributes in process `syz.4.5207'. [ 770.128736][T25145] netlink: 140 bytes leftover after parsing attributes in process `syz.4.5207'. [ 770.213115][T25147] netlink: 'syz.3.5208': attribute type 1 has an invalid length. [ 770.409815][T25147] bond6: entered promiscuous mode [ 770.410907][T25147] 8021q: adding VLAN 0 to HW filter on device bond6 [ 770.442879][T25149] macvtap1: entered allmulticast mode [ 770.525836][T25153] macvtap2: entered allmulticast mode [ 770.566949][T25156] bond6: (slave bridge6): making interface the new active one [ 770.566973][T25156] bridge6: entered promiscuous mode [ 770.569351][T25156] bond6: (slave bridge6): Enslaving as an active interface with an up link [ 770.760685][T25164] syzkaller1: entered promiscuous mode [ 770.760708][T25164] syzkaller1: entered allmulticast mode [ 772.007709][T25213] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5222'. [ 772.055786][T25214] syzkaller1: entered promiscuous mode [ 772.055809][T25214] syzkaller1: entered allmulticast mode [ 772.560251][T25234] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5227'. [ 772.770086][T25246] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5227'. [ 772.955543][T25250] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 772.955629][T25250] gretap1: entered promiscuous mode [ 772.955811][T25250] gretap1: entered allmulticast mode [ 773.067871][T25260] ÿÿÿÿÿÿ: renamed from virt_wifi0 [ 773.094186][T25263] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5234'. [ 773.242587][T25263] vlan4: entered promiscuous mode [ 773.437883][T25277] bond0: invalid NS target :: specified for addition [ 773.437911][T25277] bond0: option ns_ip6_target: invalid value (18446744073709551615) [ 773.742300][T25289] netlink: 'syz.7.5240': attribute type 23 has an invalid length. [ 773.774132][T20190] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 773.823434][T25284] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5237'. [ 778.733389][T25290] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 778.733652][T25297] syzkaller1: entered promiscuous mode [ 778.733671][T25297] syzkaller1: entered allmulticast mode [ 778.796036][T20192] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 778.828460][T25306] macsec1: entered promiscuous mode [ 778.985354][T16548] lo speed is unknown, defaulting to 1000 [ 778.985493][ T9] virt_wifi0 speed is unknown, defaulting to 1000 [ 779.058299][T25319] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5243'. [ 779.452211][T25330] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5246'. [ 779.452399][T25330] block nbd0: server does not support multiple connections per device. [ 779.481528][T25346] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5249'. [ 779.538617][T25330] block nbd0: shutting down sockets [ 779.562903][T25346] vlan3: entered promiscuous mode [ 779.911436][T25355] netlink: 'syz.6.5252': attribute type 3 has an invalid length. [ 780.003046][T25366] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5254'. [ 780.003069][T25366] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5254'. [ 780.218729][T20192] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 780.220458][T20193] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 780.220564][T20193] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 780.220599][T20193] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 780.285613][T25372] IPv6: sit2: Disabled Multicast RS [ 780.442665][T25378] syzkaller1: entered promiscuous mode [ 780.442687][T25378] syzkaller1: entered allmulticast mode [ 780.739459][T25391] IPVS: length: 147 != 24 [ 780.780817][T25389] netdevsim netdevsim4 : renamed from netdevsim0 (while UP) [ 781.175512][T25404] netlink: 672 bytes leftover after parsing attributes in process `syz.4.5264'. [ 781.285440][T25408] openvswitch: netlink: Missing valid actions attribute. [ 781.662360][T25420] team0: Caught tx_queue_len zero misconfig [ 781.965326][T20192] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 781.990093][T25428] sit0: entered promiscuous mode [ 782.034459][T25431] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5272'. [ 782.062409][T25437] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5272'. [ 782.190887][T25441] openvswitch: netlink: IP tunnel attribute has 5393 unknown bytes. [ 783.016809][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 783.529215][T25486] pim6reg: entered allmulticast mode [ 783.534320][T25486] netlink: 'syz.6.5286': attribute type 1 has an invalid length. [ 783.623754][T25493] netlink: 'syz.6.5286': attribute type 1 has an invalid length. [ 783.680385][T25486] pim6reg: left allmulticast mode [ 783.739633][T25492] pim6reg: entered allmulticast mode [ 783.739778][T25491] pim6reg: left allmulticast mode [ 783.797247][T25497] sit0: entered promiscuous mode [ 783.820667][T25502] netlink: set zone limit has 4 unknown bytes [ 783.833713][T25497] netlink: 'syz.7.5287': attribute type 1 has an invalid length. [ 783.833734][T25497] netlink: 1 bytes leftover after parsing attributes in process `syz.7.5287'. [ 784.538200][T25517] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5291'. [ 784.668842][T25527] netlink: 'syz.6.5293': attribute type 1 has an invalid length. [ 784.668865][T25527] netlink: 'syz.6.5293': attribute type 3 has an invalid length. [ 784.668877][T25527] netlink: 172 bytes leftover after parsing attributes in process `syz.6.5293'. [ 784.668893][T25527] NCSI netlink: No device for ifindex 813332851 [ 785.023688][T25546] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5298'. [ 785.074460][T25549] geneve0: entered allmulticast mode [ 785.154583][T25557] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5300'. [ 785.512164][T25574] xt_l2tp: wrong L2TP version: 255 [ 785.729613][T25581] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5305'. [ 785.903313][T25588] bridge0: port 3(veth1_to_bridge) entered blocking state [ 785.903414][T25588] bridge0: port 3(veth1_to_bridge) entered disabled state [ 785.903575][T25588] veth1_to_bridge: entered allmulticast mode [ 785.923563][T25588] veth1_to_bridge: entered promiscuous mode [ 785.923714][T25588] bridge0: adding interface veth1_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 785.954073][T25588] bridge0: port 3(veth1_to_bridge) entered blocking state [ 785.954187][T25588] bridge0: port 3(veth1_to_bridge) entered forwarding state [ 786.403360][T25600] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5309'. [ 786.403595][T25600] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5309'. [ 786.403774][T25600] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5309'. [ 786.403947][T25600] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5309'. [ 786.404134][T25600] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5309'. [ 787.208072][T25623] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 787.444725][T25623] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 788.159045][ T8019] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 788.318176][T25658] vlan0: entered allmulticast mode [ 788.318200][T25658] bond0: entered allmulticast mode [ 788.318213][T25658] bond_slave_0: entered allmulticast mode [ 788.318229][T25658] bond_slave_1: entered allmulticast mode [ 788.723122][T20192] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 789.765966][T25711] __nla_validate_parse: 65 callbacks suppressed [ 789.765989][T25711] netlink: 108 bytes leftover after parsing attributes in process `syz.2.5334'. [ 790.225043][ T4932] Bluetooth: hci2: command 0x0406 tx timeout [ 790.502982][T25740] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5335'. [ 790.503015][T25740] netlink: 54 bytes leftover after parsing attributes in process `syz.4.5335'. [ 790.503032][T25740] netlink: 54 bytes leftover after parsing attributes in process `syz.4.5335'. [ 790.578608][T25743] sctp: [Deprecated]: syz.2.5340 (pid 25743) Use of struct sctp_assoc_value in delayed_ack socket option. [ 790.578608][T25743] Use struct sctp_sack_info instead [ 790.611364][T25745] netlink: 'syz.7.5342': attribute type 1 has an invalid length. [ 790.671971][T25745] 8021q: adding VLAN 0 to HW filter on device bond1 [ 790.764476][T25738] netlink: 80 bytes leftover after parsing attributes in process `syz.2.5340'. [ 791.612748][T25765] netlink: 'syz.6.5346': attribute type 2 has an invalid length. [ 792.056602][T25786] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 792.111957][T25788] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 792.254177][T25790] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5354'. [ 792.307838][T25790] vlan3: entered promiscuous mode [ 792.642159][T18874] Bluetooth: hci7: Malformed Event: 0x13 [ 792.952082][T25800] 8021q: adding VLAN 0 to HW filter on device bond4 [ 793.441703][T25828] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5364'. [ 793.555414][T25827] xt_hashlimit: size too large, truncated to 1048576 [ 794.022490][T25845] sctp: [Deprecated]: syz.7.5368 (pid 25845) Use of struct sctp_assoc_value in delayed_ack socket option. [ 794.022490][T25845] Use struct sctp_sack_info instead [ 794.022535][T25845] sctp: [Deprecated]: syz.7.5368 (pid 25845) Use of struct sctp_assoc_value in delayed_ack socket option. [ 794.022535][T25845] Use struct sctp_sack_info instead [ 794.022565][T25845] sctp: [Deprecated]: syz.7.5368 (pid 25845) Use of struct sctp_assoc_value in delayed_ack socket option. [ 794.022565][T25845] Use struct sctp_sack_info instead [ 794.022594][T25845] sctp: [Deprecated]: syz.7.5368 (pid 25845) Use of struct sctp_assoc_value in delayed_ack socket option. [ 794.022594][T25845] Use struct sctp_sack_info instead [ 794.022623][T25845] sctp: [Deprecated]: syz.7.5368 (pid 25845) Use of struct sctp_assoc_value in delayed_ack socket option. [ 794.022623][T25845] Use struct sctp_sack_info instead [ 794.022651][T25845] sctp: [Deprecated]: syz.7.5368 (pid 25845) Use of struct sctp_assoc_value in delayed_ack socket option. [ 794.022651][T25845] Use struct sctp_sack_info instead [ 794.022681][T25845] sctp: [Deprecated]: syz.7.5368 (pid 25845) Use of struct sctp_assoc_value in delayed_ack socket option. [ 794.022681][T25845] Use struct sctp_sack_info instead [ 794.022709][T25845] sctp: [Deprecated]: syz.7.5368 (pid 25845) Use of struct sctp_assoc_value in delayed_ack socket option. [ 794.022709][T25845] Use struct sctp_sack_info instead [ 794.022739][T25845] sctp: [Deprecated]: syz.7.5368 (pid 25845) Use of struct sctp_assoc_value in delayed_ack socket option. [ 794.022739][T25845] Use struct sctp_sack_info instead [ 794.022768][T25845] sctp: [Deprecated]: syz.7.5368 (pid 25845) Use of struct sctp_assoc_value in delayed_ack socket option. [ 794.022768][T25845] Use struct sctp_sack_info instead [ 794.224891][ T151] bond0: (slave bond_slave_0): interface is now down [ 794.224923][ T151] bond0: (slave bond_slave_1): interface is now down [ 794.334757][T25852] bond9: option lp_interval: invalid value (0) [ 794.334782][T25852] bond9: option lp_interval: allowed values 1 - 2147483647 [ 794.356664][T25852] bond9 (unregistering): Released all slaves [ 794.814916][T25864] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5371'. [ 794.814955][T25864] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5371'. [ 794.928142][T25866] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5371'. [ 794.928194][T25866] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5371'. [ 795.169107][ T4932] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 795.191902][ T4932] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 795.194475][ T4932] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 795.216931][ T4932] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 795.217544][ T4932] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 796.102421][T25871] lo speed is unknown, defaulting to 1000 [ 796.104098][T25871] virt_wifi0 speed is unknown, defaulting to 1000 [ 796.602274][T25835] netlink: 232 bytes leftover after parsing attributes in process `syz.4.5365'. [ 796.778559][ T151] bond0: (slave bond_slave_0): interface is now down [ 796.778583][ T151] bond0: (slave bond_slave_1): interface is now down [ 797.152297][T25871] bridge0: port 1(bridge_slave_0) entered blocking state [ 797.164008][T25871] bridge0: port 1(bridge_slave_0) entered disabled state [ 797.164171][T25871] bridge_slave_0: entered allmulticast mode [ 797.188695][T25871] bridge_slave_0: entered promiscuous mode [ 797.207243][T25871] bridge0: port 2(bridge_slave_1) entered blocking state [ 797.209112][T25871] bridge0: port 2(bridge_slave_1) entered disabled state [ 797.209281][T25871] bridge_slave_1: entered allmulticast mode [ 797.234183][T25871] bridge_slave_1: entered promiscuous mode [ 797.268136][ T4932] Bluetooth: hci8: command tx timeout [ 797.269312][T25899] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5374'. [ 797.382308][T25900] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5375'. [ 797.383238][T25871] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 797.415404][T25900] bridge0: port 3(batadv2) entered blocking state [ 797.415578][T25900] bridge0: port 3(batadv2) entered disabled state [ 797.415734][T25900] batadv2: entered allmulticast mode [ 797.441426][T25900] batadv2: entered promiscuous mode [ 797.452748][T25871] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 797.559781][T25905] syzkaller0: entered promiscuous mode [ 797.559804][T25905] syzkaller0: entered allmulticast mode [ 797.566283][T25871] team0: Port device team_slave_0 added [ 797.744261][T25871] team0: Port device team_slave_1 added [ 797.870645][T25871] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 797.870663][T25871] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 797.870695][T25871] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 797.885008][T25871] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 797.885024][T25871] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 797.885046][T25871] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 797.917434][ T8022] batman_adv: batadv2: IGMP Querier appeared [ 797.917450][ T8022] batman_adv: batadv2: MLD Querier appeared [ 798.190045][T25917] batadv_slave_0: Caught tx_queue_len zero misconfig [ 798.368905][T25871] hsr_slave_0: entered promiscuous mode [ 798.371811][T25871] hsr_slave_1: entered promiscuous mode [ 798.399945][T25871] debugfs: 'hsr0' already exists in 'hsr' [ 798.399970][T25871] Cannot create hsr debugfs directory [ 798.403679][T25934] tipc: Enabling of bearer rejected, failed to enable media [ 798.694271][T25943] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 799.336455][T20194] bond0: (slave bond_slave_0): interface is now down [ 799.336480][T20194] bond0: (slave bond_slave_1): interface is now down [ 799.337208][ T4932] Bluetooth: hci8: command tx timeout [ 799.396617][T20194] bond0: now running without any active interface! [ 799.665490][T25965] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5393'. [ 800.104487][T25975] pim6reg1: entered promiscuous mode [ 800.104511][T25975] pim6reg1: entered allmulticast mode [ 800.303016][T25977] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 800.430182][T25977] 8021q: adding VLAN 0 to HW filter on device bond5 [ 800.433133][T25871] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 800.471585][T25871] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 800.475889][T25871] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 800.534480][T25871] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 800.544319][T25871] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 800.586134][T25871] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 800.597177][T25871] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 800.655723][T25966] openvswitch: netlink: VXLAN extension 317 out of range max 1 [ 800.669785][T25871] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 800.699297][T25966] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 800.813405][T25995] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5401'. [ 801.216513][T26003] netlink: 'syz.7.5404': attribute type 1 has an invalid length. [ 801.219142][T25871] 8021q: adding VLAN 0 to HW filter on device bond0 [ 801.241701][T26003] netlink: 44 bytes leftover after parsing attributes in process `syz.7.5404'. [ 801.288405][T25871] 8021q: adding VLAN 0 to HW filter on device team0 [ 801.346731][T26007] netlink: 'syz.6.5406': attribute type 9 has an invalid length. [ 801.353023][T26007] netlink: 'syz.6.5406': attribute type 1 has an invalid length. [ 801.355571][T20192] bridge0: port 1(bridge_slave_0) entered blocking state [ 801.355695][T20192] bridge0: port 1(bridge_slave_0) entered forwarding state [ 801.389636][T20192] bridge0: port 2(bridge_slave_1) entered blocking state [ 801.389756][T20192] bridge0: port 2(bridge_slave_1) entered forwarding state [ 801.416862][ T4932] Bluetooth: hci8: command tx timeout [ 801.434618][T26011] ip_tables: iptables: counters copy to user failed while replacing table [ 801.577693][T26013] netlink: 108 bytes leftover after parsing attributes in process `syz.6.5406'. [ 801.579069][T26013] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5406'. [ 801.793362][T26025] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5410'. [ 801.908501][T26017] syzkaller0: left promiscuous mode [ 801.908527][T26017] syzkaller0: left allmulticast mode [ 802.254901][T26033] FAULT_INJECTION: forcing a failure. [ 802.254901][T26033] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 802.254933][T26033] CPU: 0 UID: 0 PID: 26033 Comm: syz.2.5411 Not tainted syzkaller #0 PREEMPT(full) [ 802.254958][T26033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 802.254969][T26033] Call Trace: [ 802.254977][T26033] [ 802.254986][T26033] dump_stack_lvl+0xe8/0x150 [ 802.255018][T26033] should_fail_ex+0x410/0x560 [ 802.255046][T26033] _copy_to_user+0x31/0xb0 [ 802.255075][T26033] simple_read_from_buffer+0xe1/0x170 [ 802.255108][T26033] proc_fail_nth_read+0x1bb/0x230 [ 802.255127][T26033] ? common_file_perm+0x20e/0x2b0 [ 802.255153][T26033] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 802.255176][T26033] ? rw_verify_area+0x24a/0x4c0 [ 802.255206][T26033] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 802.255226][T26033] vfs_read+0x213/0xa80 [ 802.255259][T26033] ? __pfx___mutex_lock+0x10/0x10 [ 802.255286][T26033] ? __pfx_vfs_read+0x10/0x10 [ 802.255315][T26033] ? __fget_files+0x2a/0x420 [ 802.255345][T26033] ? __fget_files+0x3a2/0x420 [ 802.255377][T26033] ? __fget_files+0x2a/0x420 [ 802.255412][T26033] ksys_read+0x150/0x270 [ 802.255442][T26033] ? __pfx_ksys_read+0x10/0x10 [ 802.255481][T26033] do_syscall_64+0x166/0x520 [ 802.255505][T26033] ? trace_irq_disable+0x3b/0x140 [ 802.255525][T26033] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 802.255545][T26033] ? clear_bhb_loop+0x70/0xc0 [ 802.255569][T26033] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 802.255588][T26033] RIP: 0033:0x7fc51135e98e [ 802.255607][T26033] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 802.255622][T26033] RSP: 002b:00007fc51229bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 802.255643][T26033] RAX: ffffffffffffffda RBX: 00007fc51229c6c0 RCX: 00007fc51135e98e [ 802.255657][T26033] RDX: 000000000000000f RSI: 00007fc51229c0a0 RDI: 0000000000000004 [ 802.255670][T26033] RBP: 00007fc51229c090 R08: 0000000000000000 R09: 0000000000000000 [ 802.255682][T26033] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 802.255693][T26033] R13: 00007fc511626038 R14: 00007fc511625fa0 R15: 00007fffa859f1f8 [ 802.255726][T26033] [ 802.843050][T26041] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5413'. [ 802.920114][T26041] vlan2: entered promiscuous mode [ 802.920139][T26041] gretap0: entered promiscuous mode [ 803.106833][T26046] bond0: invalid NS target ff00:: specified for addition [ 803.106864][T26046] bond0: option ns_ip6_target: invalid value (18446744073709551615) [ 803.184954][T26050] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5418'. [ 803.204053][T26054] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5419'. [ 803.499969][ T4932] Bluetooth: hci8: command tx timeout [ 803.619593][T26061] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5422'. [ 804.133428][T26093] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5428'. [ 804.215403][T26092] xt_CT: You must specify a L4 protocol and not use inversions on it [ 804.404700][T25871] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 804.697870][ T38] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 804.914953][T25871] veth0_vlan: entered promiscuous mode [ 804.931717][T25871] veth1_vlan: entered promiscuous mode [ 804.990339][T25871] veth0_macvtap: entered promiscuous mode [ 805.005804][T25871] veth1_macvtap: entered promiscuous mode [ 805.033151][T25871] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 805.051992][T25871] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 805.169150][ T8020] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 805.170611][ T8020] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 805.170757][ T8020] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 805.170775][ T8020] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 806.422396][T26061] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 806.501876][T26096] netlink: 'syz.4.5426': attribute type 1 has an invalid length. [ 806.501899][T26096] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5426'. [ 806.501912][T26096] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5426'. [ 806.722920][ T8020] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 806.722944][ T8020] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 806.774438][T26113] netlink: 52 bytes leftover after parsing attributes in process `syz.7.5430'. [ 806.793581][T20190] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 806.793601][T20190] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 807.088285][T26123] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5433'. [ 807.124991][T26126] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5433'. [ 807.532758][T26142] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5439'. [ 808.165593][T26158] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5441'. [ 808.329551][T26160] netlink: 'syz.7.5442': attribute type 2 has an invalid length. [ 808.624009][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.624068][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.704718][T26167] netlink: 9 bytes leftover after parsing attributes in process `syz.6.5445'. [ 808.749588][T26167] netlink: 5 bytes leftover after parsing attributes in process `syz.6.5445'. [ 808.749712][T26167] 0ªî{X¹¦: renamed from gretap0 [ 808.798628][T26167] 0ªî{X¹¦: entered allmulticast mode [ 808.834645][T26167] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 809.134951][T26188] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5452'. [ 809.205462][ T4932] Bluetooth: hci0: unexpected cc 0x2035 length: 2 > 1 [ 809.205495][ T4932] Bluetooth: hci0: unexpected event for opcode 0x2035 [ 809.818766][ T8022] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 810.133134][T26229] dvmrp0: entered allmulticast mode [ 810.519039][T26243] openvswitch: netlink: IP tunnel dst address not specified [ 810.526166][T26243] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 812.454274][T26203] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 812.898873][T26247] syzkaller1: entered promiscuous mode [ 812.899068][T26247] syzkaller1: entered allmulticast mode [ 812.992977][ T59] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 813.151530][T26258] syzkaller1: left promiscuous mode [ 813.151554][T26258] syzkaller1: left allmulticast mode [ 813.345723][T26270] syzkaller1: entered promiscuous mode [ 813.345746][T26270] syzkaller1: entered allmulticast mode [ 813.572648][T26280] __nla_validate_parse: 1 callbacks suppressed [ 813.572671][T26280] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5479'. [ 814.046653][T26290] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5481'. [ 814.046879][T26290] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5481'. [ 814.047324][T26289] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5481'. [ 814.047528][T26289] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5481'. [ 814.194733][T26297] Cannot find add_set index 34 as target [ 814.475228][T26312] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5488'. [ 814.768827][T26319] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5489'. [ 814.912129][T26326] openvswitch: netlink: Unknown key attributes 1 [ 814.988011][T26331] openvswitch: netlink: nsh attr 350 is out of range max 3 [ 815.364645][T26351] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5497'. [ 815.439350][T26351] vlan3: entered promiscuous mode [ 815.697691][T26339] syzkaller1: entered promiscuous mode [ 815.697717][T26339] syzkaller1: entered allmulticast mode [ 815.975427][T26370] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 816.238902][T26378] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 816.238938][T26378] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 816.238963][T26378] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 816.238988][T26378] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 816.239021][T26378] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 816.239072][T26378] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 816.239097][T26378] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 816.239121][T26378] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 816.239144][T26378] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 816.239166][T26378] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 816.239190][T26378] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 816.239213][T26378] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 816.239236][T26378] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 816.239254][T26377] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 816.239269][T26378] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 816.239292][T26378] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 816.239316][T26378] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 816.239338][T26378] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 816.239362][T26378] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 816.239385][T26378] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 816.239408][T26378] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 816.239432][T26378] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 816.239455][T26378] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 816.239479][T26378] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 816.239502][T26378] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 816.239524][T26378] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 816.239548][T26378] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 816.239571][T26378] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 816.239594][T26378] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 816.239613][T26377] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 816.239626][T26378] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 816.239650][T26378] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 816.239673][T26378] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 816.239697][T26378] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 816.239721][T26378] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 816.239951][T26377] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 816.240292][T26377] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 816.240650][T26377] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 816.240994][T26377] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 816.241334][T26377] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 816.241690][T26377] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 816.242029][T26377] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 816.242378][T26377] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 816.242721][T26377] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 816.243116][T26377] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 816.243477][T26377] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 816.243817][T26377] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 816.244166][T26377] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 816.244501][T26377] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 816.244850][T26377] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 816.245206][T26377] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 816.245543][T26377] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 816.245873][T26377] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 816.246547][T26377] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 816.246909][T26377] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 816.247279][T26377] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 816.247634][T26377] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 816.247978][T26377] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 816.248309][T26377] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 816.248640][T26377] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 816.249338][T26377] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 816.249679][T26377] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 816.250020][T26377] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 816.250366][T26377] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 816.250583][T26377] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 816.250918][T26377] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 816.769486][T26389] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5508'. [ 816.818890][T26391] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5509'. [ 816.880429][T26394] netlink: 'syz.7.5510': attribute type 1 has an invalid length. [ 817.332145][T26394] bond3: entered promiscuous mode [ 817.347501][T26394] 8021q: adding VLAN 0 to HW filter on device bond3 [ 817.447028][T26421] syzkaller1: entered promiscuous mode [ 817.447052][T26421] syzkaller1: entered allmulticast mode [ 818.039873][T26438] vlan2: entered promiscuous mode [ 818.039899][T26438] geneve1: entered promiscuous mode [ 818.040098][T26438] vlan2: entered allmulticast mode [ 818.040111][T26438] geneve1: entered allmulticast mode [ 818.254240][T26459] netlink: NAT flags may be given only when NAT range (SRC or DST) is also specified. [ 818.254273][T26459] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 818.717075][T26475] pimreg: entered allmulticast mode [ 818.862789][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 818.864294][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 818.864686][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 818.865062][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 818.865438][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 819.778735][T20192] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 819.916104][ C0] net_ratelimit: 2613 callbacks suppressed [ 819.916128][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 819.916484][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 819.916843][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 819.917209][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 819.917567][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 819.917922][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 819.918328][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 819.918685][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 819.919042][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 819.919425][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 820.344308][T20193] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 822.134757][ T32] INFO: task syz.0.4410:22232 blocked for more than 143 seconds. [ 822.134786][ T32] Not tainted syzkaller #0 [ 822.134796][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 822.134806][ T32] task:syz.0.4410 state:D stack:26200 pid:22232 tgid:22231 ppid:16584 task_flags:0x400040 flags:0x00080002 [ 822.134859][ T32] Call Trace: [ 822.134867][ T32] [ 822.134882][ T32] __schedule+0x17db/0x58f0 [ 822.134940][ T32] ? __pfx___schedule+0x10/0x10 [ 822.134973][ T32] ? schedule+0x90/0x2b0 [ 822.135000][ T32] schedule+0x164/0x2b0 [ 822.135025][ T32] schedule_preempt_disabled+0x13/0x30 [ 822.135048][ T32] __mutex_lock+0x7c1/0x1550 [ 822.135079][ T32] ? __mutex_lock+0x5d4/0x1550 [ 822.135108][ T32] ? nfsd_nl_rpc_status_get_dumpit+0xf0/0x1560 [ 822.135218][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 822.135254][ T32] ? kernel_text_address+0xa5/0xe0 [ 822.135277][ T32] ? __kernel_text_address+0xd/0x30 [ 822.135298][ T32] ? unwind_get_return_address+0x4d/0x90 [ 822.135325][ T32] nfsd_nl_rpc_status_get_dumpit+0xf0/0x1560 [ 822.135369][ T32] ? stack_trace_save+0xa9/0x100 [ 822.135389][ T32] ? __pfx_stack_trace_save+0x10/0x10 [ 822.135411][ T32] ? stack_depot_save_flags+0x33/0x7f0 [ 822.135474][ T32] ? __pfx_nfsd_nl_rpc_status_get_dumpit+0x10/0x10 [ 822.135499][ T32] ? kasan_save_track+0x4f/0x80 [ 822.135518][ T32] ? kasan_save_track+0x3e/0x80 [ 822.135536][ T32] ? __kasan_kmalloc+0x93/0xb0 [ 822.135556][ T32] ? __kmalloc_node_track_caller_noprof+0x4b4/0x720 [ 822.135577][ T32] ? __alloc_skb+0x2c1/0x7a0 [ 822.135599][ T32] ? netlink_dump+0x1e7/0xee0 [ 822.135626][ T32] ? __netlink_dump_start+0x589/0x7b0 [ 822.135652][ T32] ? genl_family_rcv_msg_dumpit+0x213/0x310 [ 822.135676][ T32] ? genl_rcv_msg+0x5e1/0x7a0 [ 822.135697][ T32] ? netlink_rcv_skb+0x226/0x4a0 [ 822.135723][ T32] ? genl_rcv+0x28/0x40 [ 822.135743][ T32] ? netlink_unicast+0x7bd/0x940 [ 822.135767][ T32] ? netlink_sendmsg+0x813/0xb40 [ 822.135785][ T32] ? sock_sendmsg_nosec+0x13a/0x180 [ 822.135804][ T32] ? ____sys_sendmsg+0x54e/0x850 [ 822.135827][ T32] ? ___sys_sendmsg+0x2a5/0x360 [ 822.135850][ T32] ? __x64_sys_sendmsg+0x1b1/0x290 [ 822.135873][ T32] ? do_syscall_64+0x166/0x520 [ 822.135896][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 822.135952][ T32] ? rcu_is_watching+0x16/0xb0 [ 822.135975][ T32] ? trace_kmalloc+0x2a/0xf0 [ 822.135997][ T32] ? __kmalloc_node_track_caller_noprof+0x4d2/0x720 [ 822.136019][ T32] ? __kmalloc_node_track_caller_noprof+0x2eb/0x720 [ 822.136453][ T32] ? netlink_dump+0x1e7/0xee0 [ 822.136483][ T32] ? netlink_dump+0x1e7/0xee0 [ 822.136518][ T32] genl_dumpit+0x10b/0x1b0 [ 822.136547][ T32] netlink_dump+0x711/0xee0 [ 822.136586][ T32] ? __pfx_netlink_dump+0x10/0x10 [ 822.136627][ T32] ? genl_start+0x497/0x6d0 [ 822.136657][ T32] __netlink_dump_start+0x589/0x7b0 [ 822.136693][ T32] genl_family_rcv_msg_dumpit+0x213/0x310 [ 822.136721][ T32] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 822.136745][ T32] ? genl_get_cmd+0x523/0x960 [ 822.136773][ T32] ? __pfx_genl_start+0x10/0x10 [ 822.136793][ T32] ? __pfx_genl_dumpit+0x10/0x10 [ 822.136815][ T32] ? __pfx_genl_done+0x10/0x10 [ 822.136851][ T32] genl_rcv_msg+0x5e1/0x7a0 [ 822.136881][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 822.136904][ T32] ? __pfx_nfsd_nl_rpc_status_get_dumpit+0x10/0x10 [ 822.136944][ T32] netlink_rcv_skb+0x226/0x4a0 [ 822.136975][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 822.137000][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 822.137044][ T32] ? down_read+0x2be/0x330 [ 822.137075][ T32] genl_rcv+0x28/0x40 [ 822.137097][ T32] netlink_unicast+0x7bd/0x940 [ 822.137135][ T32] netlink_sendmsg+0x813/0xb40 [ 822.137165][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 822.137193][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 822.137219][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 822.137237][ T32] sock_sendmsg_nosec+0x13a/0x180 [ 822.137261][ T32] ____sys_sendmsg+0x54e/0x850 [ 822.137294][ T32] ? __pfx_____sys_sendmsg+0x10/0x10 [ 822.137330][ T32] ? import_iovec+0x73/0xa0 [ 822.137366][ T32] ___sys_sendmsg+0x2a5/0x360 [ 822.137391][ T32] ? __lock_acquire+0x747/0x2de0 [ 822.435795][ T32] ? __pfx____sys_sendmsg+0x10/0x10 [ 822.435846][ T32] ? futex_wait+0x2a2/0x390 [ 822.435903][ T32] ? __fget_files+0x2a/0x420 [ 822.435929][ T32] ? __fget_files+0x3a2/0x420 [ 822.435963][ T32] __x64_sys_sendmsg+0x1b1/0x290 [ 822.435992][ T32] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 822.447676][ T32] do_syscall_64+0x166/0x520 [ 822.447719][ T32] ? trace_irq_disable+0x3b/0x140 [ 822.447741][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 822.447764][ T32] ? clear_bhb_loop+0x70/0xc0 [ 822.447788][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 822.447808][ T32] RIP: 0033:0x7f7a3779e159 [ 822.447834][ T32] RSP: 002b:00007f7a386fc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 822.447855][ T32] RAX: ffffffffffffffda RBX: 00007f7a37a25fa0 RCX: 00007f7a3779e159 [ 822.447869][ T32] RDX: 0000000000000080 RSI: 00002000000000c0 RDI: 0000000000000003 [ 822.447882][ T32] RBP: 00007f7a3783506b R08: 0000000000000000 R09: 0000000000000000 [ 822.447894][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 822.447905][ T32] R13: 00007f7a37a26038 R14: 00007f7a37a25fa0 R15: 00007ffd65c32138 [ 822.447933][ T32] [ 822.447993][ T32] [ 822.447993][ T32] Showing all locks held in the system: [ 822.448004][ T32] locks held by kworker/u8:0/12: 3, last CPU#1: [ 822.448019][ T32] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 822.448074][ T32] #1: ffffc90000117c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 822.448124][ T32] #2: ffff8880550d2258 (&devlink->lock_key#13){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb40 [ 822.448298][ T32] locks held by pr/ttyS0/16: 1, last CPU#1: [ 822.448311][ T32] #0: ffffffff8ec36538 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60 [ 822.448359][ T32] locks held by khungtaskd/32: 1, last CPU#0: [ 822.448373][ T32] #0: ffffffff8ed5c920 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 822.448418][ T32] locks held by kworker/u8:2/38: 5, last CPU#1: [ 822.448432][ T32] #0: ffff88802c1eb940 ((wq_completion)wg-kex-wg0#19){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 822.448485][ T32] #1: ffffc90000ae7c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 822.448535][ T32] #2: ffff888053fc5440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 822.448653][ T32] #3: ffff8880402d8d18 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 822.448709][ T32] #4: ffff8880b8728298 (hrtimer_bases.lock){-.-.}-{2:2}, at: __hrtimer_run_queues+0x466/0xa10 [ 822.448764][ T32] locks held by kworker/u8:4/59: 3, last CPU#0: [ 822.448778][ T32] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 822.448835][ T32] #1: ffffc9000200fc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 822.448886][ T32] #2: ffff88807fb12258 (&devlink->lock_key#11){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb40 [ 822.448948][ T32] locks held by kworker/u8:6/151: 4, last CPU#1: [ 822.448962][ T32] #0: ffff8880551ce940 ((wq_completion)krds_cp_wq#0/0){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 822.449012][ T32] #1: ffffc90002e3fc40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 822.449062][ T32] #2: ffff888025a51280 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 822.449171][ T32] #3: ffffffff8ed5c920 (rcu_read_lock){....}-{1:3}, at: __inet_dev_addr_type+0x159/0x560 [ 822.449232][ T32] locks held by kworker/u8:8/1165: 2, last CPU#1: [ 822.449246][ T32] #0: ffff888032c44940 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 822.449296][ T32] #1: ffffc90005567c40 ((work_completion)(&(&bat_priv->tt.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 822.449362][ T32] locks held by getty/5377: 2, on CPU#1: [ 822.449376][ T32] #0: ffff88801c7600a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 822.449487][ T32] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 822.449538][ T32] locks held by kworker/0:5/5721: 2, last CPU#0: [ 822.449551][ T32] #0: ffff888055b92540 ((wq_completion)wg-crypt-wg0#11){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 822.449606][ T32] #1: ffffc900042efc40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 822.449670][ T32] locks held by kworker/1:6/5747: 3, last CPU#1: [ 822.449684][ T32] #0: ffff88801b069d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 822.449734][ T32] #1: ffffc9000445fc40 ((work_completion)(&(&gc_work->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 822.449784][ T32] #2: ffffffff8ed5c920 (rcu_read_lock){....}-{1:3}, at: gc_worker+0x274/0x1890 [ 822.449895][ T32] locks held by kworker/u8:10/8019: 3, last CPU#0: [ 822.449910][ T32] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 822.449960][ T32] #1: ffffc90007377c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 822.450010][ T32] #2: ffff88803b1f0800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 822.450056][ T32] locks held by kworker/u8:11/8020: 3, last CPU#1: [ 822.450069][ T32] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 822.450119][ T32] #1: ffffc9000f977c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 822.450169][ T32] #2: ffff8880552ae258 (&devlink->lock_key#7){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb40 [ 822.450229][ T32] locks held by kworker/u8:13/8022: 6, last CPU#1: [ 822.450242][ T32] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 822.450297][ T32] #1: ffffc9000730fc40 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 822.450346][ T32] #2: ffffffff8ebe9970 (cpu_hotplug_lock){++++}-{0:0}, at: static_key_enable+0x12/0x20 [ 822.450392][ T32] #3: ffffffff8ee38ca0 (jump_label_mutex){+.+.}-{4:4}, at: static_key_enable_cpuslocked+0xcb/0x240 [ 822.450438][ T32] #4: ffffffff8ebff720 (text_mutex){+.+.}-{4:4}, at: arch_jump_label_transform_apply+0x17/0x30 [ 822.450492][ T32] #5: ffffffff8ed5c920 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 822.450556][ T32] locks held by kworker/u8:14/20190: 3, last CPU#1: [ 822.450570][ T32] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 822.450619][ T32] #1: ffffc9000e21fc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 822.450670][ T32] #2: ffff88806a322258 (&devlink->lock_key#14){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb40 [ 822.450727][ T32] locks held by kworker/u8:18/20192: 2, last CPU#1: [ 822.450741][ T32] #0: ffff888035ac9940 ((wq_completion)bond0#19){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 822.450795][ T32] #1: ffffc9000e49fc40 ((work_completion)(&(&bond->ad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 822.450854][ T32] locks held by kworker/u8:19/20193: 3, last CPU#0: [ 822.450868][ T32] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 822.450909][ T32] #1: ffffc9000e587c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 822.450960][ T32] #2: ffff888054b29258 (&devlink->lock_key#9){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb40 [ 822.451018][ T32] locks held by kworker/u8:20/20194: 3, last CPU#1: [ 822.451030][ T32] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 822.451075][ T32] #1: ffffc9000f257c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 822.451125][ T32] #2: ffff888052ed0800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 822.451173][ T32] locks held by syz.1.4241/21626: 2, on CPU#0: [ 822.451187][ T32] #0: ffffffff902c5c88 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 822.451230][ T32] #1: ffffffff8f09f900 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 822.451283][ T32] locks held by syz.0.4410/22232: 3, on CPU#0: [ 822.451297][ T32] #0: ffffffff902c5c88 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 822.451342][ T32] #1: ffff88807bc1d6e8 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0xf4/0x7b0 [ 822.451394][ T32] #2: ffffffff8f09f900 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_rpc_status_get_dumpit+0xf0/0x1560 [ 822.451444][ T32] locks held by syz-executor/22668: 1, last CPU#1: [ 822.451458][ T32] #0: ffffffff8f4f2938 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_check_open_permission+0x1d3/0x470 [ 822.451550][ T32] locks held by syz.5.4687/23187: 2, on CPU#1: [ 822.451564][ T32] #0: ffffffff902c5c88 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 822.451610][ T32] #1: ffffffff8f09f900 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_expkey_set_reqs_doit+0xfe/0xaf0 [ 822.451690][ T32] locks held by syz-executor/23540: 4, last CPU#1: [ 822.451704][ T32] #0: ffffffff8ee36730 (dup_mmap_sem){++++}-{0:0}, at: copy_mm+0x10f/0x480 [ 822.451754][ T32] #1: ffff88802b64c378 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x195/0x1dc0 [ 822.451806][ T32] #2: ffff88802617d038 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x221/0x1dc0 [ 822.451870][ T32] #3: ffffffff8ed5c920 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 822.451921][ T32] locks held by syz.3.5251/25357: 2, on CPU#0: [ 822.451934][ T32] #0: ffffffff902c5c88 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 822.451980][ T32] #1: ffffffff8f09f900 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_svc_export_set_reqs_doit+0x132/0x1480 [ 822.452031][ T32] locks held by syz.4.5526/26479: 2, last CPU#0: [ 822.452045][ T32] #0: ffff88807a815cf8 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 822.452096][ T32] #1: ffffffff8ed5c920 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 822.452146][ T32] locks held by syz.2.5527/26477: 2, on CPU#1: [ 822.452159][ T32] #0: ffff8880564d5880 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x7a/0x1f0 [ 822.452209][ T32] #1: ffffffff8ed62ce8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 822.452261][ T32] [ 822.452267][ T32] ============================================= [ 822.452267][ T32] [ 822.452284][ T32] NMI backtrace for cpu 0 [ 822.452297][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 822.452317][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 822.452328][ T32] Call Trace: [ 822.452336][ T32] [ 822.452344][ T32] dump_stack_lvl+0xe8/0x150 [ 822.452373][ T32] nmi_cpu_backtrace+0x274/0x2d0 [ 822.452427][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 822.452459][ T32] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 822.452483][ T32] sys_info+0x135/0x170 [ 822.452499][ T32] watchdog+0xfd7/0x1030 [ 822.452527][ T32] ? watchdog+0x1c7/0x1030 [ 822.452553][ T32] kthread+0x38b/0x480 [ 822.452572][ T32] ? __pfx_watchdog+0x10/0x10 [ 822.452589][ T32] ? __pfx_kthread+0x10/0x10 [ 822.452609][ T32] ret_from_fork+0x514/0xb70 [ 822.452631][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 822.452650][ T32] ? __switch_to+0xc89/0x1420 [ 822.452677][ T32] ? __pfx_kthread+0x10/0x10 [ 822.452697][ T32] ret_from_fork_asm+0x1a/0x30 [ 822.452740][ T32] [ 822.452747][ T32] Sending NMI from CPU 0 to CPUs 1: [ 822.452816][ C1] NMI backtrace for cpu 1 [ 822.452829][ C1] CPU: 1 UID: 0 PID: 38 Comm: kworker/u8:2 Not tainted syzkaller #0 PREEMPT(full) [ 822.452846][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 822.452857][ C1] Workqueue: wg-kex-wg0 wg_packet_handshake_send_worker [ 822.452913][ C1] RIP: 0010:handle_softirqs+0x226/0x860 [ 822.452941][ C1] Code: 00 00 4c 89 f3 48 c1 eb 03 48 b8 00 00 00 00 00 fc ff df 80 3c 03 00 74 08 4c 89 f7 e8 53 eb ae 00 4d 8b 1e 2e e8 a2 44 77 1e <0f> 1f 44 00 00 65 8b 05 16 6b 0c 12 83 f8 08 73 5e 89 c5 c1 e8 06 [ 822.452958][ C1] RSP: 0018:ffffc90000a18f58 EFLAGS: 00000282 [ 822.452974][ C1] RAX: 8000000000000101 RBX: 1ffffffff1d41420 RCX: ffffffff9a9ea501 [ 822.452990][ C1] RDX: 0000000000000001 RSI: ffffffff8e415dd6 RDI: 00000000ffffffff [ 822.453003][ C1] RBP: 0000000000000005 R08: ffffffff907a607f R09: 1ffffffff20f4c0f [ 822.453018][ C1] R10: dffffc0000000000 R11: fffffbfff20f4c10 R12: 0000000000000009 [ 822.453032][ C1] R13: 0000000000000008 R14: ffffffff8ea0a100 R15: 0000000000000100 [ 822.453045][ C1] FS: 0000000000000000(0000) GS:ffff888124dca000(0000) knlGS:0000000000000000 [ 822.453062][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 822.453076][ C1] CR2: 0000000000000000 CR3: 00000000233a8000 CR4: 00000000003526f0 [ 822.453092][ C1] Call Trace: [ 822.453100][ C1] [ 822.453110][ C1] ? do_softirq+0x77/0xd0 [ 822.453137][ C1] ? wg_index_hashtable_insert+0x107/0x880 [ 822.453163][ C1] do_softirq+0x77/0xd0 [ 822.453186][ C1] [ 822.453193][ C1] [ 822.453200][ C1] __local_bh_enable_ip+0x100/0x140 [ 822.453225][ C1] ? wg_index_hashtable_insert+0x107/0x880 [ 822.453250][ C1] wg_index_hashtable_insert+0x815/0x880 [ 822.453276][ C1] ? wg_index_hashtable_insert+0x107/0x880 [ 822.453303][ C1] wg_noise_handshake_create_initiation+0x638/0x810 [ 822.453347][ C1] ? __pfx_wg_noise_handshake_create_initiation+0x10/0x10 [ 822.453394][ C1] ? lock_acquire+0x115/0x350 [ 822.453416][ C1] ? ktime_get_coarse_with_offset+0x8a/0x150 [ 822.453448][ C1] ? lockdep_hardirqs_on+0x7b/0x110 [ 822.453473][ C1] ? ktime_get_coarse_with_offset+0x8a/0x150 [ 822.453494][ C1] ? ktime_get_coarse_with_offset+0x102/0x150 [ 822.453516][ C1] wg_packet_handshake_send_worker+0x18c/0x370 [ 822.453541][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 822.453567][ C1] ? __pfx_wg_packet_handshake_send_worker+0x10/0x10 [ 822.453607][ C1] ? rcu_is_watching+0x16/0xb0 [ 822.453630][ C1] ? process_scheduled_works+0x97a/0x1630 [ 822.453656][ C1] process_scheduled_works+0xc3d/0x1630 [ 822.453697][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 822.453725][ C1] ? assign_work+0x3cf/0x5d0 [ 822.453752][ C1] worker_thread+0xa47/0xfb0 [ 822.453792][ C1] kthread+0x38b/0x480 [ 822.453809][ C1] ? __pfx_worker_thread+0x10/0x10 [ 822.453834][ C1] ? __pfx_kthread+0x10/0x10 [ 822.453853][ C1] ret_from_fork+0x514/0xb70 [ 822.453872][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 822.453889][ C1] ? __switch_to+0xc89/0x1420 [ 822.453916][ C1] ? __pfx_kthread+0x10/0x10 [ 822.453935][ C1] ret_from_fork_asm+0x1a/0x30 [ 822.453971][ C1] [ 822.454788][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 824.111818][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 824.120932][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 824.130993][ T32] Call Trace: [ 824.134282][ T32] [ 824.137230][ T32] vpanic+0x56d/0xa60 [ 824.141233][ T32] ? __pfx_vpanic+0x10/0x10 [ 824.145736][ T32] ? console_srcu_read_unlock+0x3a/0x60 [ 824.151283][ T32] panic+0xc5/0xd0 [ 824.155020][ T32] ? __pfx_panic+0x10/0x10 [ 824.159447][ T32] ? wq_watchdog_touch+0xf9/0x160 [ 824.164470][ T32] ? nmi_trigger_cpumask_backtrace+0x24d/0x390 [ 824.170627][ T32] watchdog+0x1030/0x1030 [ 824.174973][ T32] ? watchdog+0x1c7/0x1030 [ 824.179401][ T32] kthread+0x38b/0x480 [ 824.183468][ T32] ? __pfx_watchdog+0x10/0x10 [ 824.188141][ T32] ? __pfx_kthread+0x10/0x10 [ 824.192741][ T32] ret_from_fork+0x514/0xb70 [ 824.197342][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 824.202460][ T32] ? __switch_to+0xc89/0x1420 [ 824.207154][ T32] ? __pfx_kthread+0x10/0x10 [ 824.211756][ T32] ret_from_fork_asm+0x1a/0x30 [ 824.216551][ T32] [ 824.219868][ T32] Kernel Offset: disabled [ 824.224189][ T32] Rebooting in 86400 seconds..