last executing test programs: 5m59.634170198s ago: executing program 0 (id=4995): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x87}]}, &(0x7f0000000000)='GPL\x00'}, 0x94) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f0000000180), 0x2) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="033f0000ff2100001c0012800c0001006d6163766c616e000c000280080007000800000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x4c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x87}]}, &(0x7f0000000000)='GPL\x00'}, 0x94) (async) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) (async) setsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f0000000180), 0x2) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="033f0000ff2100001c0012800c0001006d6163766c616e000c000280080007000800000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x4c}}, 0x0) (async) 5m59.302491576s ago: executing program 0 (id=4997): r0 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd04, 0x24dfdbff, {0x0, 0x0, 0x0, 0x0, {0x4, 0xa}, {}, {0xfff2, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYRES8=r0], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 5m59.226058031s ago: executing program 0 (id=4998): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x4e, &(0x7f0000000280)=ANY=[@ANYBLOB="96436b7b666f147faaaaaabb86dd60122d9200183a01fe8000000000000000000006000000bbff0200000000000000000000000000b26e86aa45010000907800060000000000000000000000000100000000000f93209c492c53e584313a68368513b55d63d8bf8abdbafd5ed50f0e62fc519221a2608f2de3c79c4515e1961655b9bc61fe0c62ff2d156c8ed944e23b89f8c1b5a0ebe6a6e1ca8da1288a00e2b81335f908ff6c02294765c334ee75833e133b14e4"], 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000850000002a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x1c, r3, 0x1, 0x70bd27, 0x25dfdbff, {}, [@FOU_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000004}, 0x4010) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000080)=r1, 0x4) (async) r4 = socket$inet6(0xa, 0xa, 0x97) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) (async) bind$inet6(r4, 0x0, 0x0) (async) connect$inet6(r4, 0x0, 0x0) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, 0x0, 0x0) (async) r6 = epoll_create1(0x0) (async) r7 = socket$unix(0x1, 0x1, 0x0) close(r7) r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xb, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x74, '\x00', 0x0, @fallback=0x28}, 0x94) close(r8) (async) socket$inet_udp(0x2, 0x2, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1200000003000000040cc153eda1bafcd5000000", @ANYRES32, @ANYBLOB="01f8ffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r9}, &(0x7f00000002c0), &(0x7f00000000c0)=r8}, 0x20) (async) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000040)={0xd002a002}) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000140)={0x0, 0x3}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f00000001c0)={r10, 0x30}, &(0x7f0000000240)=0x8) (async) syz_emit_ethernet(0x1f, 0x0, 0x0) close(0x4) (async) syz_open_procfs$namespace(0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) (async) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) (async) socket$kcm(0xa, 0x2, 0x0) 5m59.086564679s ago: executing program 0 (id=5000): ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)='+@[\x00', 0x1, &(0x7f0000000040)={@align=0x5, {0xfff4, 0x8, 0x401, 0x3}}, 0x6, &(0x7f0000000080), &(0x7f00000000c0)=0x7fff}) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000140), 0x4) r1 = openat$cgroup_ro(r0, &(0x7f0000000180)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_CATATONIC(r1, 0x9362, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) ioctl$EXT4_IOC_GETSTATE(r1, 0x40046629, &(0x7f0000000200)) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000380)=0x0) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f00000003c0)=0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000400)={0x0, 0x0, 0x0}, &(0x7f0000000440)=0xc) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000480)=0x0) r7 = getgid() sendmsg$unix(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000240)="312c6a851156a3ab684a7ed4b48e7bc54cd63a4e3fb688b139054433c6d9b4f1b9450f4e00ea009a1c190b0ec35b4f0bb1bfb36563dba23a150415c83fc4be98c925193c670022bea8269b33ba856539985149762fb94add7dee80679f4f813c1b3a92e23077e7269df72b0097fee0d40398813fec890820e7873c98af68c177c78e9af8ac1863cf7dc3b4ef9d3ba2c879f057b949706e39a54772fc85b091ed26c8fd3cb4362a94bb5d08a930e99d7f2713a801893b9ed48d1b6bdb699cceeac441bf", 0xc3}], 0x1, &(0x7f00000004c0)=[@cred={{0x1c, 0x1, 0x2, {r3, r4, r5}}}, @cred={{0x1c, 0x1, 0x2, {r6, 0xffffffffffffffff, r7}}}, @rights={{0x18, 0x1, 0x1, [r1, r1]}}], 0x58, 0x40000}, 0x984) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000600)={'ip6_vti0\x00', &(0x7f0000000580)={'ip6gre0\x00', 0x0, 0x4, 0x6, 0x0, 0x4, 0x24, @ipv4={'\x00', '\xff\xff', @remote}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x35}}, 0x8, 0x20, 0x7f, 0x2}}) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000640)={0x1, 0x1, 0x9, r8, 0x2c886364}, 0xc) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)=@gettaction={0x20, 0x32, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}]}, 0x20}, 0x1, 0x0, 0x0, 0x48c4}, 0x4) ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(r0, 0x40109441, &(0x7f0000000780)={0x7ff, 0x4, 0x3}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000ac0)={0xffffffffffffffff, 0x0, 0x93, 0x89, &(0x7f00000007c0)="84e6995e77f29bce3a62c747d474b6ddadca330c953be9ffa15ca7c80cc2ef233b43a38bf3c0fe67849bd5013e9efb11b35c83b6274264db3319d5116496114370f042a841f7bccf970561504cd6219b737764c51c22f65db3f0494912b1ec9cb087f4b02bc3d6684875b4f337e38ec2d3099455a6c0c97bf03bb32bbbf26f86025b035e6d1ce91a24e40059ee84e574ca6999", &(0x7f0000000880)=""/137, 0xb, 0x0, 0xa5, 0x87, &(0x7f0000000940)="eb7386470cc845594a0209a3671859b9384f29df9f75490da33d16c4a1c432ef05196e98eddbc9a813b9f9adefcdfd0f8d6c034955f2f7d1bb81283ee7fda74274afea92de3c8e62e1b20d6e4acc38aa72a1cbe47b2de8f51e15303be5d9b1015064eab7bd6b1f63d1940ac32e816d93429fdca0016703eb0c0b2662180613617515a166f575d400bb0fdd57732633ace8ad7683caf4d4e7a6074ca08a038e545b4edbbea1", &(0x7f0000000a00)="da0947e208c636b3fb1cb9fb6eff3ec174893d8547c591c542431900902d60c056176cbcbbbd101bfc071737f19d17780cad145d4a12d67cc5e0bdddc0fab291c3ccbc00bad3820400868dac1f5272f0bd4e0aaac525e74cf48d11b107f8627699cebbdafbfd04b1f2dadf7d440a7d9b15b9e5f2860bda92a7b399c1dc0ea12d9797b56c5336a8", 0x2, 0x0, 0x4000000}, 0x50) ioctl$XFS_IOC_FSGEOMETRY_V4(r0, 0x8070587c, &(0x7f0000000b40)) r9 = accept4$inet6(r1, 0x0, &(0x7f0000000bc0), 0x80000) sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x58, r2, 0x400, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x4, 0x7a}}}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x29}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x28}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x39}]}, 0x58}}, 0x4000101) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000d40)={0x2, 0x4, 0x7, 0xd8, 0x3, 0x8e, 0xffc5}, 0xc) setsockopt$SO_BINDTODEVICE_wg(r9, 0x1, 0x19, &(0x7f0000000d80)='wg1\x00', 0x4) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000e00), r1) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x30, r10, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x9}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x10) writev(r0, &(0x7f0000000fc0)=[{&(0x7f0000000f00)="3891525f1fff08a64bf5d0a73a1491e1e387539c2824cd947f210a2bfd7a5107829baf5ed793cc02dad820a6da1992ec691582b77f764ca718223a698c6d1df18315736c9b6accd26f3f0a325cfd2b95e1ccc37697ff99428649480d19293e6a360bdf05a1a28b39970cbfaa949b04e0e22dec37362dd883ccc547f720886189c5", 0x81}], 0x1) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r1, 0xc0385868, &(0x7f0000001100)={r0, &(0x7f0000001000)='blkio.bfq.io_service_bytes\x00', 0x200, &(0x7f0000001040)={@_ha_fsid={[0x8, 0x7]}, {0x81, 0x3, 0x1, 0xff}}, 0x3a8c, &(0x7f0000001080), &(0x7f00000010c0)=0x6}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001400)={r11, 0xe0, &(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000001140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f0000001180)=[0x0, 0x0, 0x0], &(0x7f00000011c0)=[0x0], 0x0, 0x9, &(0x7f0000001200)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000001240), &(0x7f0000001280), 0x8, 0x52, 0x8, 0x8, &(0x7f00000012c0)}}, 0x10) recvmmsg$unix(r0, &(0x7f0000005100)=[{{&(0x7f0000001440)=@abs, 0x6e, &(0x7f0000001680)=[{&(0x7f00000014c0)=""/89, 0x59}, {&(0x7f0000001540)=""/185, 0xb9}, {&(0x7f0000001600)=""/104, 0x68}], 0x3}}, {{&(0x7f00000016c0), 0x6e, &(0x7f0000001bc0)=[{&(0x7f0000001740)=""/138, 0x8a}, {&(0x7f0000001800)=""/84, 0x54}, {&(0x7f0000001880)=""/209, 0xd1}, {&(0x7f0000001980)=""/51, 0x33}, {&(0x7f00000019c0)=""/199, 0xc7}, {&(0x7f0000001ac0)=""/198, 0xc6}], 0x6, &(0x7f0000001c40)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000001c80)=@abs, 0x6e, &(0x7f0000002d40)=[{&(0x7f0000001d00)=""/37, 0x25}, {&(0x7f0000001d40)=""/4096, 0x1000}], 0x2, &(0x7f0000002d80)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28}}, {{&(0x7f0000002dc0)=@abs, 0x6e, &(0x7f0000002e80)=[{&(0x7f0000002e40)}], 0x1, &(0x7f0000002ec0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x18}}, {{&(0x7f0000002f00)=@abs, 0x6e, &(0x7f0000003200)=[{&(0x7f0000002f80)=""/251, 0xfb}, {&(0x7f0000003080)=""/247, 0xf7}, {&(0x7f0000003180)=""/4, 0x4}, {&(0x7f00000031c0)=""/18, 0x12}], 0x4}}, {{&(0x7f0000003240), 0x6e, &(0x7f00000033c0)=[{&(0x7f00000032c0)=""/203, 0xcb}], 0x1, &(0x7f0000003400)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x120}}, {{&(0x7f0000003540)=@abs, 0x6e, &(0x7f0000004780)=[{&(0x7f00000035c0)=""/88, 0x58}, {&(0x7f0000003640)=""/4096, 0x1000}, {&(0x7f0000004640)=""/61, 0x3d}, {&(0x7f0000004680)=""/194, 0xc2}], 0x4, &(0x7f00000047c0)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x48}}, {{&(0x7f0000004840)=@abs, 0x6e, &(0x7f00000049c0)=[{&(0x7f00000048c0)=""/246, 0xf6}], 0x1}}, {{&(0x7f0000004a00), 0x6e, &(0x7f0000004f40)=[{&(0x7f0000004a80)=""/76, 0x4c}, {&(0x7f0000004b00)=""/204, 0xcc}, {&(0x7f0000004c00)=""/110, 0x6e}, {&(0x7f0000004c80)=""/38, 0x26}, {&(0x7f0000004cc0)=""/220, 0xdc}, {&(0x7f0000004dc0)=""/62, 0x3e}, {&(0x7f0000004e00)=""/21, 0x15}, {&(0x7f0000004e40)=""/162, 0xa2}, {&(0x7f0000004f00)=""/24, 0x18}], 0x9, &(0x7f0000005000)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xf0}}], 0x9, 0x0, &(0x7f0000005340)={0x0, 0x3938700}) sendmsg$nl_route_sched(r15, &(0x7f0000005680)={&(0x7f0000005380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000005640)={&(0x7f00000053c0)=@newqdisc={0x270, 0x24, 0x400, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0xa, 0xe}, {0x3, 0x5}, {0x10}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x2}, @TCA_RATE={0x6, 0x5, {0x7, 0x9}}, @TCA_STAB={0x190, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x4, 0x3, 0xf, 0x0, 0x2, 0x5, 0x1}}, {0x6, 0x2, [0x40]}}, {{0x1c, 0x1, {0xb1, 0xf8, 0x998c, 0x2, 0x0, 0x5, 0x3, 0x4}}, {0xc, 0x2, [0x3, 0x8, 0x3, 0x9]}}, {{0x1c, 0x1, {0xc9, 0x2, 0x2, 0x0, 0x1, 0xc731, 0x1, 0x7}}, {0x12, 0x2, [0x8, 0x1, 0xcb, 0x2, 0x9, 0x4, 0x1]}}, {{0x1c, 0x1, {0x6, 0x8, 0x12a, 0x8b3, 0x1, 0x6, 0x3, 0x3}}, {0xa, 0x2, [0x9, 0x0, 0x810a]}}, {{0x1c, 0x1, {0x10, 0xcc, 0xfffc, 0x772e, 0x1, 0x80000000, 0x3, 0xa}}, {0x18, 0x2, [0x7ff, 0x5, 0x7, 0x7fff, 0x3, 0x6, 0xfff1, 0x101, 0x0, 0x0]}}, {{0x1c, 0x1, {0x3, 0x5, 0x5, 0x100, 0x0, 0x5ae8, 0x6, 0x6}}, {0x10, 0x2, [0x8000, 0x9, 0x6, 0xff, 0x5b, 0x0]}}, {{0x1c, 0x1, {0xf7, 0x1, 0x2, 0x6, 0x1, 0x0, 0xffff, 0x6}}, {0x10, 0x2, [0x3, 0xbbf9, 0x8c, 0x5, 0xf89f, 0x4]}}, {{0x1c, 0x1, {0x9, 0x6, 0x41, 0xfe, 0x0, 0xfffffff7, 0x340, 0x5}}, {0xe, 0x2, [0xfffa, 0xffff, 0x6, 0x155, 0x1f]}}, {{0x1c, 0x1, {0x4, 0x5, 0x9, 0x5, 0x1, 0xea, 0x3, 0x8}}, {0x14, 0x2, [0x90, 0x0, 0x8, 0xffff, 0xb, 0x0, 0xbb1, 0x8001]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xf1}, @qdisc_kind_options=@q_qfg={0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x7fff}, @TCA_STAB={0x84, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xe, 0x9, 0x0, 0x80000000, 0x2, 0x69e2, 0x4, 0x6}}, {0x10, 0x2, [0x7, 0x7f, 0x200, 0xd, 0x6, 0x3ff]}}, {{0x1c, 0x1, {0x2, 0x6, 0x5, 0x3, 0x1, 0x0, 0x81, 0x8}}, {0x14, 0x2, [0x3, 0x81, 0x8001, 0x0, 0xc, 0x7, 0x7, 0x7ff]}}, {{0x1c, 0x1, {0x1, 0x8, 0x7, 0x1, 0x1, 0x6, 0x5, 0x1}}, {0x6, 0x2, [0xe]}}]}, @TCA_RATE={0x6, 0x5, {0x81, 0x80}}]}, 0x270}}, 0x20044094) bpf$PROG_LOAD(0x5, &(0x7f0000005c80)={0xa, 0x30, &(0x7f00000056c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffffffdd, 0x0, 0x0, 0x0, 0xfffff3f1}, {{0x18, 0x1, 0x1, 0x0, r15}}, {}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3a2}}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0xff9e}, @tail_call={{0x18, 0x2, 0x1, 0x0, r18}}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xe}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x39}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r16}}, @jmp={0x5, 0x0, 0x0, 0x7, 0x1, 0x50, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, &(0x7f0000005840)='syzkaller\x00', 0xff, 0x0, 0x0, 0x41100, 0x1, '\x00', r12, @fallback=0x29, r14, 0x8, 0x0, 0x0, 0x10, &(0x7f0000005880)={0x1, 0x1, 0xffffffff, 0x1ff}, 0x10, r13, 0xffffffffffffffff, 0x0, &(0x7f0000005c40)=[r17, r20, r19], 0x0, 0x10, 0xffff457e}, 0x94) 5m58.898208641s ago: executing program 0 (id=5001): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x1f, 0x4}]}}}]}, 0x3c}}, 0x0) (async, rerun: 32) r1 = socket$alg(0x26, 0x5, 0x0) (rerun: 32) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) (async, rerun: 32) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f00000000c0)={0x1, 0x6, 0x1, 0x1, 0x2, [0x5, 0x9e0, 0x7, 0x8]}) (async, rerun: 32) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8) write$tun(r2, &(0x7f0000000200)={@void, @val={0x1, 0x0, 0x0, 0x3fc, 0xf1, 0x9}, @eth={@empty, @broadcast, @void, {@llc={0x4, {@llc={0x8e, 0x80, '/', "dae0d044d7b3589e3a78948b932ad5d5ebb5899b872d3f3277d9e14aaefe0d1ab8eac7957bb0f86fa7d00ca7011820fd6dec663b8099169ca591dd1d2ca7eb61fa27ca24ea9095fa128da9c494f6b6f4abfeeb981b91deeb98eb5689c1304dea7a5b5761964e1bcbf9ddd1d2da58357b6e0eda9d3a3b5648356ec32e4112787ea66363a258acd9911fea1c8a57293f84"}}}}}}, 0xab) r3 = accept4(r1, 0x0, 0x0, 0x80800) setsockopt$sock_int(r3, 0x1, 0x20, &(0x7f0000000940)=0x1000008, 0x4) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r3) getsockopt$netrom_NETROM_IDLE(r3, 0x103, 0x7, &(0x7f0000000040)=0x101, &(0x7f0000000080)=0x4) 5m58.522479158s ago: executing program 0 (id=5003): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000300000001000000000000010000000000000000000000000000000105000000100000000000000000000003000000000100000002"], 0x0, 0x53, 0x0, 0x1}, 0x28) (async) r3 = socket$kcm(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x890b, &(0x7f0000000000)) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6, &(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x7d, &(0x7f0000000300)=[{}, {}], 0x10, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0x20, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x15, 0x8, 0x8, 0x9, 0x40000, 0xffffffffffffffff, 0x3, '\x00', r4}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r5, &(0x7f0000000bc0), &(0x7f0000000c00)=@udp6=r2}, 0x20) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000008f000000000000000100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000054000001b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000c309000001000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0xd}, 0x94) 5m43.496477378s ago: executing program 32 (id=5003): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000300000001000000000000010000000000000000000000000000000105000000100000000000000000000003000000000100000002"], 0x0, 0x53, 0x0, 0x1}, 0x28) (async) r3 = socket$kcm(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x890b, &(0x7f0000000000)) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6, &(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x7d, &(0x7f0000000300)=[{}, {}], 0x10, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0x20, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x15, 0x8, 0x8, 0x9, 0x40000, 0xffffffffffffffff, 0x3, '\x00', r4}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r5, &(0x7f0000000bc0), &(0x7f0000000c00)=@udp6=r2}, 0x20) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000008f000000000000000100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000054000001b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000c309000001000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0xd}, 0x94) 2m5.315627903s ago: executing program 2 (id=7382): r0 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r0, &(0x7f0000000140)={'full'}, 0xfffffdef) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x6, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000000800000000000004000000850000009c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg(r0, &(0x7f00000012c0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000400)="1a", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000600)="526e481e", 0x4}], 0x1}}], 0x2, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r1) ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(r1, 0x40109441, &(0x7f0000000280)={0xfffffffffffffff9, 0x4, 0x8}) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x42, 0x8, 0x2, 0x0, 0x1}, 0x48) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r5 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000080)="ad56b6aff71b62bbb0fe006eea66", 0xe) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r6 = socket(0x14, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x61d0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r6, &(0x7f00000003c0)={0x0, 0xfffffffffffffe69, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYRES32=r6], 0x1c}, 0x1, 0x0, 0x0, 0x20040024}, 0x8040) sendmsg$NFT_BATCH(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYRES32=r4], 0xa4}, 0x1, 0x0, 0x0, 0x48005}, 0x801) r7 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000007c0)={r3, &(0x7f00000004c0), &(0x7f0000000780)=@udp6=r7, 0x2}, 0x20) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="20fa0000", @ANYRES16=r2, @ANYBLOB="10002cbd7000fddbdf250b0000000c00028008000800ff7f0000"], 0x20}, 0x1, 0x0, 0x0, 0xc011}, 0x800) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800ffff2b000701f7ffffffffdbdf25017c000008000180040006000c0002800800028004008e80b6b4d7004f3862c50ed5a8054e6277f180470dc18c38e7cababc0e088d6dfbb0352f310430b7479a2acffbe6e1ba23ccd7e8219d3a"], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0xc010) bpf$MAP_CREATE(0x0, 0x0, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 2m3.676207676s ago: executing program 2 (id=7406): epoll_create1(0x80000) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000580)="3f43c5a2d1f57d912ed2bbcf67b2ebf592e7deb3a0025cde7410156376e6f08e6c856b46b67962e7df1afda986f22b89eb9b49281c43f8", 0x0, 0x8}, 0x38) (async) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40480dc) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)=ANY=[@ANYBLOB="780023e3070a0102000000000000e96db119af190d91d83cf022d771468600000a0000060900020073797a30000000005800048054000180090001006d657461000000004400028008000140000056d60800f80d0000000008000140000000010800014000000009080001400000000b080002"], 0x78}, 0x1, 0x0, 0x0, 0x48055}, 0x1000c080) r0 = socket$kcm(0x2d, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x59, &(0x7f00000002c0)={&(0x7f0000001300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000034000000030a010200000000000000000100fffc0900030073797a32000000000900010073797a300000000008000a40000000042c000000080a01080000000000000000010000000900020073797a32000004000900010073797a30"], 0xa8}}, 0x0) (async) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000080)={r2}) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000a00)={r1}) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r4) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)={0x24, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x6, 0x5b, "8eeb"}]}, 0x24}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) (async) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r13, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r12, @ANYBLOB="05005b0016"], 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_REGISTER_FRAME(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000780)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000005000000003a00000008000300", @ANYRES32=r12, @ANYBLOB="05005b"], 0x24}}, 0x0) (async) sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) 2m3.491113811s ago: executing program 2 (id=7409): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$tipc(r0, 0x0, &(0x7f0000000080)) sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, 0x1407, 0x8, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_NET_NS_FD={0x8}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0xc4}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000240)={@mcast1, 0x0}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, 0x21d62}, [@IFLA_LINKMODE={0x5, 0x11, 0x6}, @IFLA_MTU={0x8, 0x4, 0xd4}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x7ff, 0x80}}]}]}]}, 0x44}}, 0x20084084) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x80, r4, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x12}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'rose0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:fuse_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}]}, 0x80}, 0x1, 0x0, 0x0, 0x4040080}, 0x8000) 2m3.308889626s ago: executing program 2 (id=7412): connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) (async, rerun: 64) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) (rerun: 64) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000006c0)='\x00', 0x1}], 0x1}, 0x0) (async) r0 = socket$rds(0x15, 0x5, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0}}, 0x0) (async) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x84) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@ip_pktinfo={{0x1c, 0x110, 0xd, {0x0, @empty, @rand_addr=0x64010100}}}], 0x20}, 0x0) (async) socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000006180)={0x0, 0x0, &(0x7f0000006140)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16, @ANYBLOB="110026bd7000fddbdf2507002600"/26, @ANYRES32, @ANYBLOB="0c0099"], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x20004014) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x320, 0x18c, 0x203, 0x0, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x100002, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x1000b, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x4}, 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x21) pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$XFS_IOC_GETBMAPX(r0, 0xc0205838, &(0x7f0000000080)={0x10000, 0x7fffffff, 0x5, 0xd, 0x8, 0x20, 0x1}) (async, rerun: 32) close(r4) (async, rerun: 32) splice(r3, 0x0, r4, 0x0, 0x10500, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)=[{&(0x7f00000009c0)=""/4090, 0xffa}], 0x1}, 0x0) 2m3.119472675s ago: executing program 2 (id=7414): r0 = socket$isdn(0x22, 0x2, 0x22) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180200000400000000000000fcffff0185000000bc0000001801000020646c2400000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000f000000850000000600000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x20000000, 0xfe5a, 0x0, &(0x7f0000000200)="32087d1c9cb361397a127acf6646", 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRESHEX=r1], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x200080a5) sendmsg$NFT_BATCH(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000060a030400000000050000000a0000010900010073797a3100000000200004801c0001800b00010065787468640000b0057fc700ffaa5b0c00028008000640000000020900020073797a25ff0f0000140000001100010000000000008672d30084e0c39562fa2d1a6884d6b59dbcc8c5c182cd6a9141e2aa52a835c8710297067a631bd88071a7e3d2b85e5e7292227447105f317ef9dd7d525873bc0d2c84ecc678"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000004b7080000000000007b8af8ff00000000b7080000000000007b8a0000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300"/92, @ANYRES32, @ANYBLOB="0000000000000000b70400000800000085000000950000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r3, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000980), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CCA_MODE(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan1\x00'}) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, 0x0, 0x0) 2m2.867713703s ago: executing program 2 (id=7418): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c9f4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75055df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83766b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b556381768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225c380fac12f8205d182f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42ddd5f393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05bea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d96ee1b84bb64b14aebc6b5194c55dd6890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b07838a3ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8dc0d472672286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8455029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a82a6ef09d0ed9829dec16ab67a4f59a504e09f55ab82bbd405087a17a229a149c53ee9145500db213cb36489a10957739e481a756e65bde579bbbfb404213f661eeaaffacbcfbfd60b1a715c366da2b37ac7e9e3033f8ec04db1c2412e02ccd0617d9fb646c4897750d068c936c3558a94b05d7c65c0d458c0d70d0aa864bc1e324d3f69b1b4061627da875a4b5c2668ab0990623fe6f3b54cd1c79da4baf256f88750c18486330589473e267fa44e220cf40db662b570c2a2fbba9a34a3dd7bbd8368fe506daa62b45797d4b397905a69e58eb436c08cc78963197adb1b16ad83a1a9b420e74c6bcdf1ed0b306141a83bf1268e954ad069257fbfaa1a7ea582badc1a7f2a5b0965f3535872d85c0bc3a233a3ea85df6a8ed76f0f803d54b7bef77d8ea71621f8a78dd17c3b58c5c7476ed6191acbb949e77f7cac81c543f7751e5e1000"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001580)={@fallback, r2, 0x2f, 0x2030, 0x4}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000300000001000000000000010000000000000000000000000000000105000000100000000000000000000003000000000100000002"], 0x0, 0x53, 0x0, 0x1}, 0x28) r3 = socket$kcm(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x890b, &(0x7f0000000000)) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x9}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r4, &(0x7f0000000bc0), &(0x7f0000000c00)=@udp6=r1}, 0x20) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) 1m47.86862071s ago: executing program 33 (id=7418): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001580)={@fallback, r2, 0x2f, 0x2030, 0x4}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000300000001000000000000010000000000000000000000000000000105000000100000000000000000000003000000000100000002"], 0x0, 0x53, 0x0, 0x1}, 0x28) r3 = socket$kcm(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x890b, &(0x7f0000000000)) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x9}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r4, &(0x7f0000000bc0), &(0x7f0000000c00)=@udp6=r1}, 0x20) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) 26.34187867s ago: executing program 4 (id=8479): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002a80)={0x28, 0x2c, 0x107, 0x70bd2b, 0x25dfdbff, {0x18, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@typed={0x4, 0xfd}]}, @nested={0xc, 0x2, 0x0, 0x1, [@nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x8e}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0xc010) 24.306645628s ago: executing program 4 (id=8484): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000001040)={'ip_vti0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0x700, 0x0, 0xc, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x4, 0x0, @broadcast, @loopback}}}}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000600)={'syztnl2\x00', &(0x7f0000000040)={'tunl0\x00', r3, 0x40, 0x8, 0x2, 0x9, {{0x5, 0x4, 0x1, 0x5, 0x14, 0x66, 0x0, 0xea, 0x2f, 0x0, @multicast2, @loopback}}}}) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000040)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000014001080800418e00000b04fcff", 0x58}], 0x1) connect$inet6(r1, &(0x7f0000000000)={0x2, 0x4e23, 0x0, @mcast1, 0x4}, 0x1c) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e22e0000002925aa80020007b00090080007f000001e809000000ff0000f03ac710aa7d0000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0x20}}, 0x24000080) 24.044242844s ago: executing program 4 (id=8489): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000040)="0c210fb85a17eddec4703077f6bf5835174c2a8639d04856f2c588bb009ddf3a20c27d951e6e1c65a256d596f9041acc7d52f92addea9019cd2adbc40d94f8e5a0843ee8473eeb83c819b73ec2efef5a4ec7099c6eaf05cf3f48a5b518b2d16c51dfd30047e073e299b896484ec79641fb0c38e317a1a97fe965feef4b1485f9e0bf073b49098d125ed4b99e3138b015c60a6a49edf1f590ef5d445e7f2ae1d0d000004cb263b38149aa7550ccf7eb439cbb129c82bc5cb2ef26dd1c0052c5fd0cc74461aba08a1f3895c51802f3c4c5c7691777bf0a84c6", 0xd8}, {&(0x7f0000000140)="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", 0xfa}, {&(0x7f0000000240)="66bb2cc131911811db94916caa09a2d1c947c25456d9db25f4167028deec0e4d69339f4ad1e02bed71faa66a5a6b5a307daf5a155410236329a67cb508b2da5c60d33687989b50385cd22d4ee5", 0x4d}, {&(0x7f0000000440)="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", 0xde1}, {&(0x7f00000002c0)="4bfdd12118ef00c6b6690fefed00f52d2cce7de22bd97e972f508f5cef287a52b4501df4d38f", 0x26}, {&(0x7f0000000300)="682b8c11f0c7f9978f0de8f4725ddee99323ff4e68b159fb66e84755c68177da8d40eb17add4d2b8bae83d0ccab8c8830d36fea06db7b1daf14843bff75217ababce5b9e6280dca286cd0bde17e47cc7e83b47f80a057de875afe1f1e13c1c6f536309479e730d638a8b869ec09dec0e0ee382fd0b1efcd96af820d0b21e126473", 0x81}], 0x6) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0xffe, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200060000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 23.336682088s ago: executing program 4 (id=8494): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000300)={0x0, r0}, 0x8) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000580)={r0, 0x58, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x0, &(0x7f0000000300), &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', r1, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffff80}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r2, 0xffffffffffffffff, 0x17, 0x0, @void}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001900)={0x18, 0x43, 0x107, 0xffffdffe, 0x25dfdbfc, {0x2, 0x7c}, [@nested={0x4, 0x145}]}, 0x18}}, 0xc000) (async) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 64) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000540)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) (async) r6 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f0000000180)=@filter={'filter\x00', 0xe, 0x0, 0xc0, [0x0, 0x2000000000c0, 0x2000000000f0, 0x200000000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffffda00000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff00000000"]}, 0x138) (async, rerun: 32) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000100)=0x2, 0x4) (rerun: 32) ioctl$int_in(r5, 0x5421, &(0x7f0000000140)=0x1) (async, rerun: 32) writev(r5, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) (async, rerun: 32) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xc0, r4, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7816}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8eb}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8b21ecbf}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1ff}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x80}, 0x4000001) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 23.099605833s ago: executing program 4 (id=8496): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) (async, rerun: 32) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000002637850000007100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) ioctl$sock_ifreq(0xffffffffffffffff, 0x8917, &(0x7f0000000080)={'dummy0\x00', @ifru_ivalue}) (async) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) (async) r3 = socket(0x2, 0x3, 0xff) sendmmsg$inet(r3, 0x0, 0x0, 0xc050) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r4, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc040}, 0x64004084) (async) r5 = socket$igmp(0x2, 0x3, 0x2) getsockopt$sock_int(r5, 0x1, 0x29, 0x0, &(0x7f0000001a40)) (async, rerun: 32) syz_genetlink_get_family_id$team(&(0x7f0000000000), 0xffffffffffffffff) (rerun: 32) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) pipe(0x0) (async) r6 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000000100)={r6}) (async) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000000080)={r6}) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50) r9 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001240)={r7, r8, 0x5, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0, 0x0, 0x40}}, 0x30) (async) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070001000080000001"], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={r10, &(0x7f0000000f80), 0x0}, 0x20) (async) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000001080)={r9, r2, 0x4, r7}, 0x10) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000005580)={0x6, 0xf, &(0x7f00000012c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001340)='syzkaller\x00', 0x1, 0x1d, &(0x7f0000001380)=""/29, 0x41000, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) (async) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) readv(r11, &(0x7f0000000240)=[{&(0x7f0000000040)=""/81, 0x51}, {&(0x7f0000000200)=""/1, 0x1}], 0x2) (async) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r12, 0x40489}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r12}]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000002040)=@ipv4_getrule={0x1c, 0x22, 0x1, 0x70bd26, 0x25dfdbfb, {0x2, 0x20, 0x10, 0xff, 0x6, 0x0, 0x0, 0x2, 0x18}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0d0}, 0x0) 22.903783874s ago: executing program 4 (id=8499): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080), r1) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r3, &(0x7f00000002c0)={0x2, 0x4e24, @empty}, 0x10) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a) sendfile(r3, r4, 0x0, 0x8) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 7.762865763s ago: executing program 34 (id=8499): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080), r1) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r3, &(0x7f00000002c0)={0x2, 0x4e24, @empty}, 0x10) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a) sendfile(r3, r4, 0x0, 0x8) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 3.903717282s ago: executing program 5 (id=8696): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x7) socketpair(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000005c0)={'ip_vti0\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x40, 0x7, 0x0, 0x2, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x73, 0x0, 0x0, 0x4, 0x0, @private=0xa010102, @empty}}}}) r3 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={'veth1\x00', {0x2, 0x4e24, @private=0xa010100}}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_GET_MPP(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb010018000000000000000cd6f9509d834b8549120000000cddcab933ba57008000020000000000000000"], 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r7, 0x58, &(0x7f0000000040)}, 0x10) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f00000000c0), &(0x7f0000000100)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TLS_RX(r9, 0x11a, 0x2, &(0x7f0000000240)=@gcm_256={{0x303}, "d553a67c89eede0d", "3d11cc35f2ea06aa98f37521a1173eb909be08c50528f21c237339d7e275651e", "e715a3c3", "8262af8f2b54b6a6"}, 0x38) getsockopt$sock_buf(r8, 0x1, 0x19, 0x0, &(0x7f0000000280)) bind$ax25(r0, &(0x7f0000000040)={{0x3, @null, 0x3}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) getsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f00000001c0)=0xf, &(0x7f0000000200)=0x1) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000fb6229ff0000000000000000850000004100000085000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x0, 0xe, 0x0, &(0x7f0000000100)="48e1360d616e8fc9d88ca9005a04", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r11 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r11, &(0x7f00000003c0)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYRES32=r2], 0x60}, 0x1, 0x7}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000005, 0x204031, 0xffffffffffffffff, 0x3000) r12 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r12, 0x6, 0x1, &(0x7f0000000000), &(0x7f0000002000)=0x4) 3.441869861s ago: executing program 5 (id=8697): setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x5, @loopback, 0xa}}, 0x0, 0x0, 0x3d, 0x0, "bb02a3c364ca41d6e5415445244740bd4c0b42a21d7214bf92594925208a0e2f964e654dc534a6324d4993fcf19b2df3ee818a118a7c49462189316d8b6d2ccd00"}, 0xd8) r0 = socket$kcm(0x23, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x10}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) listen(r0, 0x800) r2 = socket(0x0, 0x1, 0x34de) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e1b, 0x2, @private0, 0x1}, 0x58) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @empty, 0x8}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000500)={@in={{0x2, 0x4e23, @private=0xa010101}}, 0x0, 0x0, 0x3e, 0x0, "6e9ea15b53d07ddf6ecb6c2e6bbff6e0c6812aa5b2638975d071f7c9e1b12a9335fdc208e858de7cc8d71feab165bb6074b9d2b9181981aa7407dd3e0d7b29fe411623c4c910a1942da7d608bbae5553"}, 0xd8) r3 = socket$inet6(0xa, 0x3, 0x4) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e23}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x8000000004) r5 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r5, &(0x7f0000000040)={0x2a, 0x1, 0xfffffffe}, 0xc) writev(r4, &(0x7f0000000280)=[{&(0x7f0000000080)="580000001400add405000000000000000a117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ffff0100f5c71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) socket$key(0xf, 0x3, 0x2) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02002000000000000006000d07fbd6d76824fe26"], 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, r6, 0xc, &(0x7f00000000c0)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socket$inet6(0xa, 0x2, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r7, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x2010, r5, 0x29ad3000) r8 = socket$rds(0x15, 0x5, 0x0) bind$rds(r8, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r8, &(0x7f0000000000)={&(0x7f00000002c0)={0x2, 0x0, @private=0xa010102}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@cswp={0x58, 0x114, 0x7, {{0x1, 0x3}, &(0x7f0000000140)=0x400000000000004, 0x0, 0x2, 0x3ff, 0x7, 0x8000000000000000, 0x8, 0x800}}], 0x58}, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) 3.275760322s ago: executing program 5 (id=8700): r0 = socket$inet6(0xa, 0x3, 0xb2) sendto$inet6(r0, 0x0, 0x0, 0x200c8084, &(0x7f0000000280)={0xa, 0xe20, 0x0, @mcast1}, 0x1c) sendto$inet6(r0, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000200)=0x3, 0x4) sendmmsg$inet6(r0, &(0x7f0000004080)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24004890) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000000)={0x4, {{0xa, 0x4e20, 0x9, @mcast2}}}, 0x88) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r2, 0x1, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x24040090}, 0xc0) 3.151374913s ago: executing program 5 (id=8703): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000000)=ANY=[], 0x0}, 0x94) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r1) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f0000000480)={0x0, 0xff5b, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="310428bd7000ffffffff1600000018000180140002006e657464657673696d3000000000600005000200070000000500040001000000050003"], 0x44}}, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000000)=0x201, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x190, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x164, 0x4, 0x0, 0x1, [{0x160, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x150, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xb, 0x1, 'policy\x00'}, @NFTA_MATCH_INFO={0x138, 0x3, "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"}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x1b8}, 0x1, 0x0, 0x0, 0x10}, 0x4000800) close(0x3) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000040c0)=@ipv6_getaddrlabel={0x24, 0x4a, 0x3, 0x70bd29, 0x25dfdbfd, {}, [@IFAL_LABEL={0x4, 0x2, 0xb}]}, 0x24}}, 0x40004040) 3.00386799s ago: executing program 6 (id=8705): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=@ipv4_newroute={0x64, 0x18, 0x10, 0x70bd28, 0x25dfdbfe, {0x2, 0x0, 0x10, 0x8, 0xfd, 0x1, 0x0, 0xa, 0x3000}, [@RTA_DST={0x8, 0x1, @multicast1}, @RTA_DPORT={0x6, 0x1d, 0x4e23}, @RTA_ENCAP_TYPE={0x6, 0x15, 0xc}, @RTA_PREFSRC={0x8, 0x7, @multicast1}, @RTA_SPORT={0x6, 0x1c, 0x4e22}, @RTA_TABLE={0x8, 0xf, 0x101}, @RTA_OIF={0x8, 0x4, r1}, @RTA_PREFSRC={0x8, 0x7, @multicast2}, @RTA_DST={0x8, 0x1, @multicast1}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x2c, 0xa, 0x8f2) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), r2) sendmsg$IPVS_CMD_GET_INFO(r2, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x130, r3, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}]}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xffffff7f}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@rand_addr=0x64010101}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x6c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xf8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x22}}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}]}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'geneve0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x59}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x4000}, 0x40045) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) pipe(&(0x7f0000000000)={0xffffffffffffffff}) connect$802154_dgram(r4, &(0x7f0000000040)={0x24, @short={0x2, 0x3, 0xaaa1}}, 0x14) 2.984306893s ago: executing program 5 (id=8706): r0 = socket(0x1d, 0x2, 0x6) bpf$MAP_CREATE(0x300000000000011, &(0x7f0000000100)=@base={0x20, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x6}, 0x48) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000001180)=ANY=[], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r1 = socket(0xa, 0x6, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv6_newnexthop={0x28, 0x68, 0x200, 0x70bd27, 0x100, {0x2, 0x0, 0x3}, [@NHA_ID={0x8}, @NHA_OIF={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4091}, 0x40000) socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x400000f, 0x4, 0x0, 0x7fffffff}, 0x0, 0x0) sendmsg$inet6(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000001480)="cd", 0x1}], 0x1}, 0x20005850) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r0) 2.812564366s ago: executing program 6 (id=8708): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in=@private=0xa010101, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0x0, 0x4e23, 0x779, 0x2}, {0x2000000000, 0x20000000000, 0x0, 0x186, 0x10000000000000, 0x0, 0xfffffffffffffffd}, {0x3, 0x7fffffffffd, 0x0, 0x1000000000}, 0x0, 0x6e6bb2, 0x1, 0x0, 0x0, 0x2}, {{@in6=@loopback, 0x0, 0x3c}, 0x2, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1001}}, 0xe8) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0xffffffffffffff23, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x63, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x4, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) r1 = socket$inet6(0xa, 0x3, 0x5) sendmmsg$sock(r1, &(0x7f0000000d00)=[{{&(0x7f0000000380)=@un=@abs={0x0, 0x0, 0x4e24}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000580)="b20a5c6503239b28b3861e40693ae90263071f27fffbe57530fbdf8c904890cd0c6d28297bb1b72daed6b05149d02499768e87d05645e2c57c448e7e5ee456d13434f67dfb691ca9e3f2a91f87eb7505b1fcf70940f2a4e73741c49da9cae4d48a4c76044ae555ddc440864914c81acce1263f7b67cd3d957cc1a29375ccad7f24cc66596a9d0fbe3eb6d5ed10661abef807546f2781567daeec9f7a7457c8ec10a432aad527fa5e1a13331ed429e69f27b6a28a8c2e7af8552b7d887419d7d18e217c793dbd0b11604c7b222add3a0f6c2b14026afa29e6034411", 0xdb}], 0x1, &(0x7f00000006c0)=[@mark={{0x14, 0x1, 0x24, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0xb0}}], 0x30}}, {{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000700)="fabba3dca7fb4bcc5bd88adf38e9b302e43c849a6a69dc172384e0ecd777a01afc27a6b20d776c9a17470ce5824a5fd7a66d54d2d91bc898bebdfd17a85da27f06d73df565f67a559a401e66d8f5bd631d0d8063090077ddb9f42ef66ce776a29d6ac8c513cea2a2c80d35452b5d050898f8646d3ad621950704c68f9a7df122f47f8451888ba4e2a334321227f412b415e78b969fa5d7ea", 0x98}, {&(0x7f00000007c0)="920dedb74edfb598a0f9af1e9d1392c23b607bfdb6e59eca97740464f59ff7f589e4444c17f14b2cf691acf709d17269f6ebee332d89637a9ca70edc5ce680ae469b7b9c817fbd0d2295af46ac9fab20f34105da3996abaad04bfd125c372276caeea3f3016bfaa368c6b58d15b7ce914fc6e8d95a095ff22e621349cfcb43c838fe09cb510ea999309227c4aa314b9b15181e04a74c32abc5", 0x99}, {&(0x7f0000000880)="5d7d485560c1e6040bf6c3ae9b5f927f6de19877768864794844292d97faacaabadb395d58b1fcbdc620c3d15d3e451824a881a4fff129c329acf9d0cbe9aff75528e64d9f8014606910b71f64681f4b5291e79057d72b4afd8f1da9000340b952b854857ce24b8e89429cb7e2db826a542f1babf87663beec83d533930916580290bcb24927d581afb3dda80b8a19ec9b3663949f53c818d664685077dbe789bc4958bb7ebe05ba1553c9dee269e4a4591e8813241248fac04ee51677c0a56d85637599305a5cc4d340eb1bd152a17ac149d79dea21b79003a59da47890c113a829eaed6679ac870110ace97f5ddd0b9efa49cb3c", 0xf5}, {&(0x7f0000000980)="59728a22d7ee9e3825f6ad6ec5f2532e71d2603416bf486ff8a18e88dc33f1dae807fc2ce02f17c2472664f8f4f27ffd7403e705d493457906936618964265fea202a55e3cc61b5c3ca9886e7b779244bf5053acdd4355490e9c35cbd0e9dfec07d76589f87f31b80a0f8eff39b47aab50d4cc120ef67d965393d7bb5e71a0afab97c300c0e2535f24495e1217dfec055b574b9b4762abb9200fc602dea72dde19a7184ae2e1acaef3a0fdf32f1c45eb0d56e9b9d9027fc92df07c6ae372d1b9cffcde5f7e8741ce3286b71b2111c997da76e6861027de43801825", 0xdb}, {&(0x7f0000000a80)="5813aa720b8390d6b6961ab83f60812f6ecf824fd193362587cbe51a92e1d854acd911648b48908d393af21ea88f66b7ee575b1780acb886354ad8d116a0b0cbcc8dc41c7c317f13d2a5a71b1859778026f245e3ab65f395bc2d7a16b8b3bedcccda06d4f61568e8dc1545495b9e179f0db60d4b9bd6f1638ac68e88459d879a7b3991f1fb18cb6638b3c657f2958cb7eeeae2ca8600e98bff9e9aa38705879e2ec2ef7901640cbba138718d", 0xac}, {&(0x7f0000000b40)="5b2f66d06e68203f06fb7807a6ee5d0341a315b255281784f65901e1065d6682f20796efd1c67cb3022cfe3fda3154ca5b66427a2a00eabd19bbd2828276f84d2e005afc6cb3c03b00f296fe4d31af9185d0b61ab0a97a90267fe1d33dcb6ed8d02e07c6871a170da9c252cd7d", 0x6d}], 0x6, &(0x7f0000000c40)=[@txtime={{0x18, 0x1, 0x3d, 0x3ff}}, @timestamping={{0x14, 0x1, 0x25, 0xfdcc}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @mark={{0x14}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}], 0xa8}}], 0x2, 0x10) (async) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha512\x00'}, 0x58) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001000), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01072bbd7000ffdbdf25010000000800010002000000"], 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x4000) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) (async) r6 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r6, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x300080c1) (async) getsockopt$IP_VS_SO_GET_INFO(r2, 0x0, 0x481, &(0x7f00000001c0), &(0x7f0000000200)=0xc) (async) r7 = openat$cgroup_subtree(r5, &(0x7f0000000080), 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f00000000c0)={[{0x2b, 'cpuset'}]}, 0x8) 2.711428358s ago: executing program 6 (id=8709): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0xfc}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000001"], 0x0, 0xc}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x10000, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f00000001c0), &(0x7f0000000100)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r1, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000001000000b7080000000001007b8af8ff00000000b7080000020000007b8af0ff00000000080000000000000007010000f8ffffffbfa400000000080000f218230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0xc}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@delchain={0x44, 0x64, 0xf31, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, {0xfff1}, {0x0, 0xffff}, {0xfff3, 0xfff1}}, [@TCA_CHAIN={0x6, 0xb, 0x126}, @filter_kind_options=@f_flower={{0xb}, {0x4}}, @TCA_CHAIN={0x8, 0xb, 0x4000003}]}, 0x44}, 0x1, 0x0, 0x0, 0x20008080}, 0x4008000) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) (async) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0xfc}, 0x8) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000001"], 0x0, 0xc}, 0x94) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x10000, '\x00', 0x0, 0x0}, 0x50) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f00000001c0), &(0x7f0000000100)}, 0x20) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r1}, 0x4) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000001000000b7080000000001007b8af8ff00000000b7080000020000007b8af0ff00000000080000000000000007010000f8ffffffbfa400000000080000f218230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0xc}, 0x94) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@delchain={0x44, 0x64, 0xf31, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, {0xfff1}, {0x0, 0xffff}, {0xfff3, 0xfff1}}, [@TCA_CHAIN={0x6, 0xb, 0x126}, @filter_kind_options=@f_flower={{0xb}, {0x4}}, @TCA_CHAIN={0x8, 0xb, 0x4000003}]}, 0x44}, 0x1, 0x0, 0x0, 0x20008080}, 0x4008000) (async) 2.552819537s ago: executing program 1 (id=8710): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbbb, {0x0, 0x0, 0x0, r2, {0xc, 0x4}, {0x0, 0x9}, {0xf, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x8, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x3}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) getsockopt$inet_buf(r1, 0x0, 0x26, &(0x7f0000000000)=""/65, &(0x7f0000000080)=0x41) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e22, 0xe2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x47f}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @loopback}], 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f00000003c0)=[@in={0x2, 0x0, @loopback}], 0x10) pwritev(r1, &(0x7f0000002400)=[{&(0x7f0000000180)="a529057cd562f5b712b5df7d579de394504ba7f5ecb8abfd2d7e31ae449fa1f1c7f35c53a68cd9bfb7121a2780d58130afd5061d202162ad9ba77693c28915318c7d9c8673303228418d8ea389d0211fdc4284431d8848853177f8", 0x5b}, {&(0x7f00000004c0)="bf500a48e26124d85806a12734cd51f25d3a0c3fd59429bfdafc50366363f3246f51814979c4aed7aa12d2b79404b3866d7e7c0cffb8f65b9f2761b8bde702194b2ccadae5b63fade652396c5d5a2c712571017d621ae4c189986ec443308dfe6312fd9cc3d0a56185b6b32811dca2134e428a300b2d62280737adf738e4779403c8d5e573d88ef776fc65810bed13ad332d4bf71831", 0x96}, {&(0x7f0000000580)="062536d7dde27adb96284a65a1b1f2fe08ccbde4d931e2a06efd448336a5db5598aaeb72c400ae3451dc73708547d473c98b820bad3d5df7e2f8d59a9da65cc9f4631622c04afc85a451592191ba889155067649c3d0ced1975c10e2fca4365565", 0x61}, {&(0x7f0000000600)="a25cb1c2d0a5e9bb66bb47385b9c5f1fac77cfdf39f2ae3f50bd7592944529b64f6c44607a3b127b85b7fc25de994bb27ad546647ee413450b6b1d05b43e253c22cd1daf470c06ce3d3c721476b5e93b89fba3f8fe42c18a3e7592554f99ede3dc5e4be3e4925e7113048db7419d1f8ae1", 0x71}, {&(0x7f0000001300)="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", 0x1000}, {&(0x7f0000002300)="625d0f7ee3a32f2ff9f77edba8d24b6eda3f27dd6d45b617a85786b8f0b9978447efc49199ce91a46a7bd288e4b14dd924e4e1e5c54fb5dc0e8a64cea6e70d763fff7879212a1aec0aa752a74c903bbc26c34571eade37ca34f71b884cd968cf561b1f59f6b64b501f707bef53a615d3ce850db1d233f0f5c140f9ef5e773ba13b81bd83bc09e22f7a97cee085d968eef39605c30d1572171204fc1a1552b10f24e7a1c12d0e99b319e18f691ea5c1ccd7cb815f7a6d16", 0xb7}, {&(0x7f00000023c0)="98f553959c2eada63c29906920df", 0xe}], 0x7, 0xc, 0x3d6) 2.430770787s ago: executing program 6 (id=8712): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$unix(0x1, 0x5, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r8, &(0x7f0000002080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) setsockopt$bt_BT_RCVMTU(r8, 0x112, 0xd, &(0x7f0000000000)=0x3, 0x2) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b705000000000000850000000400000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r10}, 0xc) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@gettfilter={0x24, 0x2e, 0x1, 0x70bf2a, 0x25dfdafd, {0x0, 0x0, 0x0, r6, {0xc, 0xa}, {}, {0xfff3, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000081}, 0x49094) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000180), r12) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r12, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x4c, r13, 0x1, 0x0, 0x0, {0x6, 0x0, 0x900}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}]}, 0x4c}, 0x2, 0x34005}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r2, 0x0, 0x40) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYRES8=r12, @ANYRES16=r11, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002001100000004000100080004"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x24008080) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x80000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0x7, 0x9, 0x0, 0x2, 0x480010}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xe1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x9, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94) 2.265212221s ago: executing program 1 (id=8713): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@dev={0xfe, 0x80, '\x00', 0x16}, 0x1, 0x2, 0x2, 0x6, 0xfffe, 0x4}, 0x20) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl(r2, 0x8b32, &(0x7f0000000040)) sendmmsg$inet6(r1, &(0x7f0000000040)=[{{&(0x7f00000003c0)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00'}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000000)="7f", 0x1}], 0x1}}], 0x1, 0x0) listen(r1, 0xfff) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) listen(r1, 0x10001) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x85, &(0x7f0000000000)={r5, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000080)={r5, 0x4}, 0x8) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$packet(0x11, 0x3, 0x300) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r9, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r9, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r10, 0x9801}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STATS_ENABLED={0x5, 0x2a, 0x1}]}}}]}, 0x3c}}, 0x0) sendto$packet(r7, &(0x7f0000000240)="f3277b60d4e19ea5be6413ec7093", 0xe, 0x44890, &(0x7f0000000200)={0x11, 0x86dd, r10, 0x1, 0x4, 0x6, @local}, 0x14) getsockopt$inet6_mreq(r3, 0x29, 0x1c, &(0x7f0000000b80)={@private0, 0x0}, &(0x7f0000000bc0)=0x14) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="9557743c463947906cb2b670fbe6df666c3b797996422085dbbe8e07202c3159afe56619636bac50b417cb6969f9e6b9c0e7aba8bfac6a22fb41d558710fb9e89992d1d6ef3ba2b28e5d4533c7dfef305a", 0x51}], 0x1}}, {{&(0x7f00000001c0)={0x2, 0x4e20, @broadcast}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000280)="37774b65d02b6e36e1fb29e6c8e8ba056cfb63d4af4cfac5e2e60e8d4d1ec0e6d4e715", 0x23}, {&(0x7f00000002c0)="cfa835a452bb6f68e8fde2bef33758edd389ddd378278b2bd965f67b63d77d20aacb4e927f55a6b3030bfa322e02433aa616d08b991a700c9da01d7f0e16dcf80c59d7b95f2a60f4d39a82786ab71f446ba69628d5f2b5e2fe608365ff5b4e0e0c38b81299cac9892a138a5066cbe4490709a50f8880ec12ccb6924da06f123f50e29711887375cabc16664f1473d32421b00bacbd0f3f7c7fcf84361bc364bb62ca517776dacba038401ed6a075a0616cd62a96cd861154", 0xb8}, {&(0x7f0000000400)="4932ff2206bfdb1c69657ff5def8d95eb8f15a4f9b2dbd2a481fa255cb0a10c6b4c0eeef3f1645a223fac2075855d99b6965b554281893ceb7ff6aa9c66361b72c631fb5", 0x44}], 0x3, &(0x7f00000004c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_retopts={{0x64, 0x0, 0x7, {[@cipso={0x86, 0x37, 0x3, [{0x1, 0x2}, {0x6, 0xe, "f45b9e1c07eedf7c9ca6830a"}, {0x0, 0xf, "36732bac5ad61fb9b100f41b47"}, {0x0, 0x12, "aef299c353778fcd71c14eb3b155cce6"}]}, @ssrr={0x89, 0x1b, 0x41, [@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @broadcast, @remote, @loopback, @multicast2]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_retopts={{0x50, 0x0, 0x7, {[@ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x1c, 0xe7, 0x3, 0x4, [{@private=0xa010100, 0x708}, {@dev={0xac, 0x14, 0x14, 0x22}, 0x5}, {@multicast2, 0x9}]}, @timestamp={0x44, 0x18, 0xd, 0x0, 0xf, [0x3, 0x7, 0x8001, 0x4, 0x1ff]}, @cipso={0x86, 0x6}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}], 0x100}}, {{&(0x7f0000000600)={0x2, 0x4e21, @broadcast}, 0x10, &(0x7f0000000680)=[{&(0x7f0000000640)="e4fd38b1e52469ae0f0976d8cd41b04bdeafd7ae9d20f8aabae83810dd9967a2200f3a040be44545794dc757b223a06e80d8f12952c3c1a742014b62b9b9a4", 0x3f}], 0x1}}, {{&(0x7f00000006c0)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000b00)=[{&(0x7f0000000700)="f082bc7fe7e1145e64b5860d4d6c81fd018af2742ff8958c2b6a2155db3e4663c4d7cb2758d592e90f405f0ac6e19489740120a850f8de19e2182863429ef305d896c20ecc11dbeae785c09fdc3aa6524051c0ce5f37ecf3f38a29be362ac5bfc804bad35fd6cb46d356fccfc9f0b15eb0ab6984b14eb4a7d231a46662143d0314cf33156efbc1b905ebde68472c935e72d464a0db098da19cbc2a17c55d0d6c5990eb346e7c88918bbaa6205b9cd5964e1cc39d1acd54f75c939474767472df697acbbec2390d24f2583c76fad3018b68471556a37b19d20972da935f78c725cc692fdd5ad7ef560c2d0eb547f1", 0xee}, {&(0x7f0000000800)="a3d2b331ab199b42ab6701b6e1d23878c5", 0x11}, {&(0x7f0000000840)="ae06cdbd8d79c9520cfe91548f66f5deffca25a639ef6de792475d7126a7a65fbff35ecb8b1315b17a5a4d51a35467cedce01de90b2aed413a0d40e34b20da5950ecf961ab6bd2a16bac8eb3ca30856244a1a95ba9d4745131068cf2f9114f7bee809821110d", 0x66}, {&(0x7f00000008c0)="10ab12c8d1648de2ef9042079fbdb987", 0x10}, {&(0x7f0000000900)="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", 0xff}, {&(0x7f0000000a00)="2a3920ccfed1a212669e4d108c2220aca5a73dda19b2c99672a8a757f4dfee16f84a2fa3ad4c2c2dc85aa892d57c7fe532dfa6286d2a89610b3a379d58ed0d0f99b6cc9b9fcf8aceff7877de4419d08cb6d7db56e768da5e7372e874f601bd136ab0747eb2974055d4544dd62198cc35895db4cf4e4312c52a708b88203c3f2607ab6faf6a2d878b7f8afea93dfbf6720dcb23df456822b6f7ee7a9d8b31016f38c520f44f6e12aa601b0d8ec0245683e1802fa9b3f8e872aa44cd7401d19c8a858b7afa129bb9482ab77438fa7ef8f7fe51442bc6ce873723c6791d5ddf8d546eb6839214db89d59c7ac76cae2b7865", 0xf0}], 0x6, &(0x7f0000000c00)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x9f}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @remote, @empty}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r11, @remote, @rand_addr=0x64010101}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x10}}], 0x88}}], 0x4, 0x20000000) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x110}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r12, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000340)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000e00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r13, @ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000e00)=ANY=[], &(0x7f0000000dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xe9) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001200)={r14, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f07df33c9f7b986", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) 2.19968516s ago: executing program 3 (id=8714): socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, 0x0) unshare(0x6a040000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r1, &(0x7f0000001c80)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x8000001, @private0, 0x3}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000440)="14", 0x1}], 0x1}}, {{&(0x7f0000000300)={0xa, 0x4e24, 0x1, @dev={0xfe, 0x80, '\x00', 0x28}, 0x8}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000800)='M', 0x1}], 0x1}}], 0x2, 0x931766f6319eed40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x20}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x9b}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x60}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="05000000000000000800000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000006001000000020000c00202005f49"], 0x48}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000000) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRES16=r0], 0x448}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="050000000808"], 0x80}}, 0x0) sendmmsg$inet(r0, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100), 0x2}}], 0x40000000000003a, 0x0) 2.035058337s ago: executing program 6 (id=8715): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) (async) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000040), 0x10) (async) sendmsg$netlink(r2, &(0x7f0000005d80)={&(0x7f0000000440)=@kern={0x1d, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)=[{&(0x7f0000001380)=ANY=[], 0x38}], 0x1, 0x0, 0x0, 0x20000c4}, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f00000016c0)={'bridge0\x00', {0x2, 0x4e24, @remote}}) setsockopt$inet_int(r1, 0x0, 0x33, &(0x7f00000000c0)=0x7fffffff, 0x3) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) write(r3, &(0x7f0000000b00)="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", 0x7f1) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x28, r4, 0x65aebf9dafbebb59, 0x70bd28, 0x1, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x6, 0x112}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x400c080}, 0x24048840) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x28, 0x3, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc0}}, 0x0) (async, rerun: 64) vmsplice(r5, &(0x7f0000001640)=[{&(0x7f0000000100)="377d43c6da4a10d3a8c8c5dc05b462ad5eccb37dd0ab5c07f8fc9f17dbb3eb1312600509fe78da38832ff8654e9bdb56c34b9d0f4eb258303187b7bbfe593e75bd1d5afdd8895ac8c78f92781aa3d75e98e683279064ac99c46803ad85a15c35bb0c511adb3343f7d8eacfb2f2909834fe8ca9db5e178d9d92ff33ce15c98f62166bed7d", 0x84}, {&(0x7f00000001c0)="d89b511fef675a16bad75598d4cbe436582b2251cfc6375e1afb684c84634ee61c0c90f7492cbc5555a458ceacf0c8de2bfda52693954f91fbb2bdfa30668c1ae04110734f8ec03d92a3d10f5b08383d56e56d5cb9851f97f9b4c3a5438637e63573a3934452346ca7", 0x69}, {&(0x7f0000000300)="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", 0x1000}, {&(0x7f0000001300)="bd785d3a6443cf4181b73e2eb4bb2c3fbffcd1fe2a7c9554f980262e433a920f3fdbdc886aa499562f7db943128f64f837a738576566444ace891e94a8d062868cf9e764ee0b3f622018913eb8fe3fe82621ac074c237b461731a6216ceb6b5c9ce81d5bde4ba5e39c1b72eaab", 0x6d}, {&(0x7f0000001380)="3fd1353a70328251b92595cdf7c535e4af5d1b39d0f09f2fd8b16c1917a8d269e30406dc2a98b8ad695c4a0392bfc490d90f7dabdb5115e17f40b41f69372d4ae163c286af34fad5a09820693e5bd3b4d767ac7840ccbd10eba0990e6045ee80bad0ffe2142c8875648a336bfb39289cc63314433f495975e663929be400934f0f51f8e9666ec1fbc0b8d8bc0f17fc69b19213b88036834613491d4397dd75fa030685142a440d4a2954a8", 0xab}, {&(0x7f0000001440)="c395b50f5ffdae9aa517233be89b341103dac9f4111d69dc9dd4774d5effffb446fd52d37e02bf6a510413c71b00dbb30a980ecf421783939d425ed8230dc800acc3d17f2f655c6733136b81a52e545aae6a49b09a055e1bfd4a2ca906fb959ea42dd923b36116e7b707cad79cbaf77b2922fdc5e30a90066c8f6d9dc3ee2613ec5de9c899b70624d42908297ae4f5e4e1cfa4c02ebd54510f394b3a03b04a67d32a475137c86360e3beef494e995d0b70bdba1246814f42c9bd81290de733bb1343975529b82d37cece97832c73a72c169cd150288728d32dfda6671c5ee69619723d2c1f6b1f1314aa114fdcdfd3a9e08203ee", 0xf4}, {&(0x7f0000001540)="fcb0ca474482b81ea0d056d6dfa08d713cdac98a6742bfcd27dd887f540b7b1f", 0x20}, {&(0x7f0000001580)="2c53cd5ae60c27b90f33c5cee9673177e536e7403d0ed528f18e92d1757cf6692cbd302feac620c8116c09a65a52d41efa9d07d7c8f4406cbfa27d5ae1f2bb2d9491b0e969e76aed45263804aaf7722dc8e5ed188af997dcd5117a19c85a318690e86c458a5a01b61ce529d116d0688ca7ffdc7ced66fb137f96d0e6da826bec5aae4be6d061417eb7c11c0d08fa34ac55bd24ae5e0a", 0x96}], 0x8, 0x2) (async, rerun: 64) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001740)=@o_path={&(0x7f0000001700)='./file0\x00', r1, 0x4000, r0}, 0x18) 2.034444605s ago: executing program 5 (id=8716): r0 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x6a040000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) getsockopt$rose(0xffffffffffffffff, 0x104, 0x7, 0x0, 0x0) bind$rds(r1, &(0x7f0000000300)={0x2, 0x4e20, @local}, 0xffffffffffffff9b) sendmsg$rds(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)}, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x6c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x2}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x4}}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x5c}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b7000000", @ANYRESDEC], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x5}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xffffffc1) r6 = socket$inet6(0xa, 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000001580)={0x2, 0xa, 0xe8, 0x5, 0x2, 0x0, 0x70bd25, 0x25dfdbfd}, 0x10}}, 0x810) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r7, 0x0, 0xfdef) ioctl$sock_SIOCETHTOOL(r6, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000100)=@ethtool_coalesce={0xe, 0x0, 0x1000, 0x6, 0x400000, 0x7ff, 0x4, 0xc0000000, 0x402, 0x9, 0x5, 0x5, 0x3, 0x4006, 0x80, 0xfffffffc, 0x0, 0x37e9, 0x80000004, 0x1, 0x6, 0x424f, 0x3}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, r1, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xba0c29e690d41d4b, 0x20000000ec071, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x64, 0x30, 0x871a15abc695fb3d, 0x0, 0x25dfdbfe, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x8a1, 0x2, 0x2, 0x4, 0x7}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f0000000000)=ANY=[], 0xfe33) 1.985220496s ago: executing program 7 (id=8661): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="08000000040000000400000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x14, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r3, 0x0) r4 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r4, 0x400442c8, &(0x7f0000001940)={0xffffffffffffffff, 0x1, 0x3}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000300)="0000ffffffffa000f2710263d2ac", 0x0, 0xe505, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xd}, 0x2e) 1.82963141s ago: executing program 7 (id=8717): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(aes)\x00'}, 0x58) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0xc, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffff6eb, 0x0, 0x0, 0x0, 0xa}, [@generic={0x91, 0x1, 0x1, 0x93}]}, &(0x7f00000003c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x94) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x8800) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x24, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_REDIR_FLAGS={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x94}}, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$inet(r3, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cfdfefdb", 0x1a000}], 0x1}, 0x0) sendmsg$rds(r3, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x488c4}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000880)="00773691", 0x4) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg(r6, &(0x7f0000000540)=[{{&(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x11}, 0x6}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000300)='>', 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000004080)=[{0x10, 0x84, 0x82}], 0x10}}], 0x2, 0xc88c4) ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="5ecb3030168c"}) r7 = socket(0x10, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB="40000000a82aa844653c63df3bddf3f104fdd310", @ANYRES32=0x0, @ANYBLOB="8300040002000000200012800e0001006970366772657461700000000c00028008000100", @ANYRES32=r8, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) 1.631067262s ago: executing program 6 (id=8718): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) unshare(0x6a040000) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[], 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000400000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES8=r2], &(0x7f0000000540)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000580)={r3}, 0xc) syz_genetlink_get_family_id$devlink(&(0x7f0000000340), r2) sendmsg$DEVLINK_CMD_PORT_SET(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01002bbd7000fbdbdf25060000000e0001006e657464657673696d0000001ff89f4c6e6574646576720c4ce96c37ef9f35508717d0c76d696d300000afd6"], 0x44}, 0x1, 0x0, 0x0, 0x4008840}, 0x80) bind$alg(r1, &(0x7f0000000200)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x117, 0x5, 0x0, 0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001800310700000000000000000a002000000000000005000008001700ffffffff"], 0x2c}, 0x1, 0x0, 0x0, 0x41}, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000016000000b30000007f"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018150000", @ANYRES32=r4, @ANYBLOB="ffff400000000e9e"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x29}, 0x94) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0x4, 0x3}, 0x6) write(r5, &(0x7f0000000100)="520005000100b8", 0x7) r6 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r6, 0x114, 0x8, &(0x7f00000008c0), 0x4) close(r6) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x40241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x200}) 1.334020177s ago: executing program 3 (id=8719): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a40), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_TX_POWER(r0, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x44, r1, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x81}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040010}, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xb, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000850000008b00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000005e00000095"], &(0x7f00000044c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.2839134s ago: executing program 1 (id=8720): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="12000000ec000000080000000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000ee86dd6015690900132f00fc020000000000000000000000000000ff02000000000000000000000000000124206558"], 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8982, &(0x7f0000000080)={0x7, 'ip_vti0\x00', {0x3}, 0x6}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r0, &(0x7f0000000480), &(0x7f0000000280)=@udp=r1, 0x1}, 0x20) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000040)={'geneve1\x00', @multicast}) r3 = socket$netlink(0x10, 0x3, 0xc) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x20, 0x10, 0xffffff1f, 0x0, 0x1}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r4, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x7, 0xd2, 0x8, 0x10, 0x5037, r0, 0xf, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x5}, 0x50) poll(&(0x7f0000000240)=[{r1, 0x4140}], 0x1, 0xfffffffe) 1.173541312s ago: executing program 3 (id=8721): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x6, 0x49}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x24008000}, 0x809) r2 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) getpeername$llc(r2, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000180)=0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r2, 0x4048587b, &(0x7f00000017c0)={{r2, &(0x7f0000000200)='TIPCv2\x00', 0x8000, &(0x7f0000000240)={@_ha_fsid={[0x2be, 0xc]}, {0x5, 0x4, 0xe, 0xffffffffffffffff}}, 0x0, &(0x7f0000000280), &(0x7f00000002c0)=0xc}, 0x5, &(0x7f0000001700)=[{0x2, 0x100, &(0x7f0000000300)='wlan1\x00', &(0x7f0000000340)="b01302e76c9e6af781c15dd49ebda11ec8f4b750ee794fb0f4d9a95fa633f22ba08ec90e38541aea5fc76e6f2f7133ef8b07352665fc02ec2a17673807daf240b72e2c500ddacf3751bfba11f1138a80eee96bc938c0f8efb699b72fe8f4405dea", 0x61, 0x12}, {0x3, 0x8, &(0x7f00000003c0)='{\x00', &(0x7f0000000400)="8e6305807aa3a1b2c6e3532370716954f94561a970535a25dc52c292c259dff93e9bd802941a1a62af681f910e67a1cae598c7e171cff053de4ef00df0802f133546e0b13404121ba619625930e7ec2c1f7c6acab6d7e6f84ca81333eaeda4d4e37a0c367fcae01277ca3510d582048ee02de102fea677c5c91b5dd6345bf90be246076b2109858f772bfd14796f72f65a8ecdb5025bc19e8775bc9e56d80d332816260c2f4197f8f61720b1f7e37bb49dd00dbad9fdeb8b726170a0f5a5d601", 0xc0, 0x8}, {0x1, 0x9, &(0x7f00000004c0)='%\\\x00', &(0x7f0000000500)="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", 0x1000, 0x16}, {0x2, 0x6, &(0x7f0000001500)='TIPCv2\x00', &(0x7f0000001540)="fd76183929c0e175674f9c508642022cb1b08086738433493078d36ddbf4de03f4920aa349cfd7e2f69d56046d1b6f30498b1e941fdce8f986d913c8ac15933b108895fe51733414b9a548ed6efe3dad1b0a2c123441", 0x56, 0x8}, {0x2, 0x1006, &(0x7f00000015c0)='\'#\x00', &(0x7f0000001600)="dc4bb0457e8680d1d367742778a43f0dfb083ef35e89ea4f8d3313ff88b25d2ef83623455b069bfdaf6f2b7238664352106a49b8df6bf318e99884b26724b2132ef18fa23371b6d3140f234ecdebc0fa44372e20813dc4106a34d1a11f2d8416d1f31823318dd37e0293874e2a3f1086ddacdac6bf0e0a790ac17713a21cea99806a191672eb6bf86a1ef0b2e9d89b942371054423866e12868e68ae4197ba49dbeb6db060c5c3d712072388cfbd01676bc2d699b54f138e2fbc1ac17ecaa785d7dad21a8d7699cbd6ba31ddba593bdcdade0ee1838259bdcf9b85cf5f12d3106805", 0xe2, 0x8}]}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000001840)={r4}, 0x8) ioctl$F2FS_IOC_COMPRESS_FILE(r5, 0xf518, 0x0) r6 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001900)={r4, 0x0, 0x25, 0x3, @val=@uprobe_multi={&(0x7f0000001880)='./file0\x00', &(0x7f00000018c0)=[0x8, 0xf75, 0x2, 0x50, 0x5, 0x3b8], 0x0, 0x1, 0x6}}, 0x40) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000001940)=0x0) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000001980)={0x4, 0x8, {0x2, @usage=0x4, 0x0, 0x80000001, 0x9, 0x4, 0x4, 0x4, 0x10, @usage=0x5, 0x100, 0x5, [0xa96, 0x8, 0x7, 0xb85, 0x4, 0x6]}, {0x9, @usage=0x8, 0x0, 0x9, 0x80, 0x9e39, 0x5, 0x3, 0x20, @struct={0x6, 0x7}, 0x8000, 0x10001, [0x40, 0x7fff, 0x2, 0x9, 0x7, 0x1]}, {0x1ff, @struct={0xcba, 0x10}, 0x0, 0x1, 0x8, 0xd6, 0x2, 0xfff, 0x10, @usage=0x8, 0xffffbe39, 0x7, [0x8, 0x6, 0x7b, 0x1, 0x2]}, {0xa5, 0x5, 0x9}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r6, 0x50009418, &(0x7f0000001d80)={{r5}, r7, 0x2, @unused=[0x3, 0x65], @devid=r8}) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r4, 0x89f9, &(0x7f0000002dc0)={'sit0\x00', &(0x7f0000002d80)={@private2={0xfc, 0x2, '\x00', 0x1}, @local, 0x20, 0x16}}) ioctl$XFS_IOC_START_COMMIT(r2, 0x80585882, &(0x7f0000002e00)={0xffffffffffffffff}) sendmsg$TIPC_NL_NET_GET(r4, &(0x7f0000003080)={&(0x7f0000002e80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000003040)={&(0x7f0000002ec0)={0x170, r3, 0x4, 0x6, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x74, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x54}, @TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "64051ca48d6f248f5708916aef9047a5adbb1ea3e8dd95f711c1febb74a91a1d"}}, @TIPC_NLA_NODE_ID={0xc, 0x3, "b47916d646c60597"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x6}]}, @TIPC_NLA_NODE={0x20, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_BEARER={0xa8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x3}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7bbe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xcee}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x7ff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}}}}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x170}, 0x1, 0x0, 0x0, 0x48000}, 0x20008004) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000003100)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000003140)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r11, &(0x7f0000003240)={&(0x7f00000030c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000003200)={&(0x7f0000003180)={0x58, 0x0, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r13}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000804}, 0x40811) r14 = socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$tipc(&(0x7f00000032c0), r5) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r14, &(0x7f0000003380)={&(0x7f0000003280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000003340)={&(0x7f0000003300)={0x28, r15, 0x4, 0x70bd25, 0x25dfdbfd, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40008000}, 0x1) r16 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000003400), r11) sendmsg$NLBL_CIPSOV4_C_ADD(r11, &(0x7f0000003840)={&(0x7f00000033c0)={0x10, 0x0, 0x0, 0x1000204}, 0xc, &(0x7f0000003800)={&(0x7f0000003440)={0x3a0, r16, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0xcc, 0xc, 0x0, 0x1, [{0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbe8e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7c98}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6a31d072}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1ddf21c1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x949e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2774c25d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x76e36c4d}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5cee}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4df744fe}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x57659a9e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf82b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb89a}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x26e4b65}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2a44550}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x19f7de3c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1caca914}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xf8a30c0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x71010a2c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x88613e3}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4015728d}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x44e8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa733}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x34, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xcbde26a}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x98}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x71091ab1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x53}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x114, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x31c0cb75}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x489a5e1f}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x60b02d7b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xa92b6ef}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xba}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x59667a28}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x44}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x20f94691}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xba}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x35def9b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x50967f8f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3b644eb1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x20eae1d7}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x69b17944}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x36}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4f57a1ba}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x98}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x73d15822}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xee}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x22}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf6}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x10c, 0x8, 0x0, 0x1, [{0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x48478133}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1cdfbd78}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6cf5ebc1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x379a711f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x43}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x378221f9}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x71c60ad1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x64f61d3b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x54}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x68c1d27f}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2abb2be9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5b95e1ed}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x99}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1c63d4bf}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4970687c}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd9}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7e77da17}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x70a0a769}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4a4f0e8f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2f758d64}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x22c058bc}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x3a0}, 0x1, 0x0, 0x0, 0x24000000}, 0x800) ioctl$IMGETCOUNT(r10, 0x80044943, &(0x7f0000003880)) ioctl$BTRFS_IOC_TREE_SEARCH(r9, 0xd0009411, &(0x7f00000038c0)={{0x0, 0x5, 0x9, 0x38000000, 0x2, 0x3, 0x5, 0xfbb, 0x1, 0x200, 0x3, 0x9, 0x9, 0xd2d, 0x3}}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f00000048c0)={{r17, 0x9, 0x1, 0x7fbd, 0xc56dc8e, 0x26e, 0x3, 0x1, 0x3, 0x5, 0x1ff, 0x4, 0x4, 0x7, 0x4}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r9, 0xd000943d, &(0x7f00000ab600)={0x100000001, [{r17}, {r18}, {r17}, {r18}, {r18}, {}, {r18}, {r17}, {}, {r18}, {r17}, {}, {r17}, {r18}, {r18}, {}, {r17}, {r18}, {r18}, {r18}, {r17}, {r18}, {r18}, {r18}, {r18}, {r18}, {}, {}, {r17}, {}, {r17}, {r17}, {r18}, {r18}, {r18}, {r17}, {r17}, {r17}, {r17}, {r18}, {r18}, {r18}, {r18}, {r17}, {}, {r18}, {r17}, {r17}, {r17}, {}, {r18}, {r18}, {r18}, {}, {r17}, {}, {r17}, {r17}, {r17}, {r17}, {r18}, {r17}, {}, {r17}, {r18}, {r18}, {r18}, {r18}, {r18}, {r17}, {r18}, {}, {r18}, {r17}, {r18}, {}, {r18}, {r18}, {r18}, {r18}, {}, {r17}, {r18}, {}, {r18}, {}, {r18}, {}, {r18}, {r18}, {r18}, {r18}, {}, {r18}, {}, {r17}, {r17}, {}, {r17}, {}, {r17}, {}, {r17}, {}, {r18}, {r18}, {r17}, {r18}, {}, {r18}, {r18}, {}, {r18}, {r17}, {r17}, {r18}, {r18}, {r17}, {r18}, {r17}, {r18}, {r18}, {r18}, {r17}, {r18}, {}, {r18}, {}, {r17}, {r17}, {r17}, {r17}, {r18}, {}, {r18}, {r18}, {r18}, {r17}, {r17}, {r18}, {}, {r18}, {r17}, {r17}, {r17}, {}, {r17}, {r18}, {}, {r17}, {r18}, {}, {r18}, {r17}, {r17}, {r18}, {r18}, {}, {r17}, {r17}, {r18}, {r18}, {r18}, {r18}, {r18}, {r17}, {}, {r17}, {r18}, {r17}, {r18}, {r17}, {r17}, {r18}, {r18}, {r18}, {r18}, {r18}, {r17}, {r18}, {r18}, {r18}, {r18}, {r18}, {r17}, {r18}, {}, {r17}, {r18}, {r18}, {r18}, {r18}, {r18}, {r17}, {}, {r18}, {r17}, {}, {}, {r18}, {}, {r17}, {r17}, {r17}, {r18}, {r18}, {r18}, {r17}, {r18}, {r18}, {r18}, {r17}, {r17}, {r18}, {r18}, {r17}, {r17}, {}, {r17}, {r18}, {r17}, {r17}, {}, {r17}, {}, {r18}, {}, {}, {r17}, {}, {r18}, {r18}, {}, {r18}, {r18}, {r17}, {r17}, {r17}, {r18}, {r17}, {}, {r17}, {r18}, {}, {}, {}, {r18}, {r17}, {}, {}, {r18}, {r18}, {}, {r18}, {r17}], 0x1, "bd5a0d2d9ea8fc"}) 1.050836674s ago: executing program 3 (id=8722): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000680), 0x620801, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x4f8, 0xd0, 0x0, 0xd0, 0x1a0, 0x0, 0x510, 0x510, 0x510, 0x510, 0x510, 0x6, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, [0xff, 0xffffffff, 0x0, 0xff], [0x0, 0xffffff00, 0xff000000, 0xffffff00], 'wlan0\x00', 'veth0_to_bridge\x00', {}, {0xff}, 0x2f, 0x1, 0x5, 0x40}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x6, 0x0, 0x0, 0x51}, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x8}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@remote}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x558) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000240)="800000800000210ee7decd7a000340008100", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @broadcast}, 0x14) socket$xdp(0x2c, 0x3, 0x0) close(0xffffffffffffffff) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r5) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000839626eadcc886d8bfb2974a614a56fb47a882f3208525df8f62b07efbc7428b18751fc70d4a02ff59b9410aa251899f3d6688eeb53a44a518a0011d96ffeb"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000001c0)={0xffffffffffffffff, 0x3, 0x6, 0x7}) r6 = socket(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000380)={'lo\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a400000", @ANYRES32=r8, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c0000140001"], 0x48}}, 0x0) sendmsg$TIPC_NL_LINK_SET(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x20000000) sendmmsg(r6, &(0x7f0000000000), 0x400000000000047, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x1a9380, 0x0) close(0x3) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="640000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="ffc30000000000003c0012800c0001006d6163766c616e002c0002800a000900ffffbfffffff00000a000400aaaaaaaaaabb00000600020001000000440003000000000008000500", @ANYRES8=r9], 0x64}}, 0x0) 977.446021ms ago: executing program 1 (id=8723): r0 = socket(0x2a, 0x2, 0xffffffff) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=@newqdisc={0x24, 0x24, 0x10, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7, 0x1}, {}, {0xb, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x24004001) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0xfffffcb7, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x2, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8, 0xb, 0x2}, @TCA_U32_DIVISOR={0x8, 0x4, 0x10}]}}]}, 0x40}}, 0x40808c4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x1258}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8, 0x1c, 0x2}, @IFLA_BR_MCAST_HASH_ELASTICITY={0x8, 0x1a, 0x80000000}, @IFLA_BR_MCAST_HASH_MAX={0x8, 0x1b, 0xfffffff8}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x14}, 0x8044) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket(0x2a, 0x2, 0xffffffff) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=@newqdisc={0x24, 0x24, 0x10, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7, 0x1}, {}, {0xb, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x24004001) (async) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0xfffffcb7, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x2, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8, 0xb, 0x2}, @TCA_U32_DIVISOR={0x8, 0x4, 0x10}]}}]}, 0x40}}, 0x40808c4) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x1258}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8, 0x1c, 0x2}, @IFLA_BR_MCAST_HASH_ELASTICITY={0x8, 0x1a, 0x80000000}, @IFLA_BR_MCAST_HASH_MAX={0x8, 0x1b, 0xfffffff8}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x14}, 0x8044) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) 795.01554ms ago: executing program 7 (id=8724): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, [@printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x10000000}, {0x85, 0x0, 0x0, 0xca}}]}, &(0x7f0000000040)='GPL\x00', 0xd, 0xfef, &(0x7f00000014c0)=""/4079, 0x0, 0x4, '\x00', 0x0, 0x0, r0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (async) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, [@printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x10000000}, {0x85, 0x0, 0x0, 0xca}}]}, &(0x7f0000000040)='GPL\x00', 0xd, 0xfef, &(0x7f00000014c0)=""/4079, 0x0, 0x4, '\x00', 0x0, 0x0, r0}, 0x94) (async) 713.309722ms ago: executing program 7 (id=8725): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32=r1, @ANYBLOB="40005200060010"], 0x24}, 0x1, 0x0, 0x0, 0x4000014}, 0x40) r2 = socket$rds(0x15, 0x5, 0x0) ioctl$PPPIOCSMRU(0xffffffffffffffff, 0x40047452, &(0x7f0000000040)=0x1) (async) recvmmsg(r2, &(0x7f0000001a80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x10023, 0x0) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x2100, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x403, 0xfffefffc, 0x3d, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e20}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x200440d4}, 0x4804) 536.864261ms ago: executing program 1 (id=8726): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x100, 0x70bd2a, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x5}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x4000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x220080, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000180)={'ip_vti0\x00', @random="439a6e36e561"}) writev(r0, &(0x7f0000000300)=[{&(0x7f00000001c0)="dd81dc15bc5fa7c203dbf4e363f412e9eb92ad564e0d56ac47ceec907add75b38daf93536850b9fdbceca4732b8eb90a564a7048548b79f11b84af1f2ccad1be6cec42cb375bfce4438c9e84fca63ada389253a824c0444448260b0ac01eea038f5e098b81895be197a99d6b63f3922161739b1e89b931eac26790b97c64", 0x7e}, {&(0x7f0000000240)}, {&(0x7f0000000280)="e40efb07f14759733b6282500247c529532ae1a3238570ab9fdf90b0a44f01ce019b5ab4672397399b028c0bf051be2bac5177f1fb034fca2cdd0fc06290f334e19bbde1507577a8bdacb2f11fa6a25da6a451ed78a02c7ad844e501f7d615b0968998f7e1cfdcdba00ebaad89", 0x6d}], 0x3) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), r0) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r3, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8001}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x900c}]}, @TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0xc0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000700)={{r0, &(0x7f0000000480)='-%\xbb&\x00', 0x116000, &(0x7f00000004c0)={@align, {0x7fff, 0x45, 0x10001}}, 0x5789, &(0x7f0000000500)={@_ha_fsid}, &(0x7f0000000540)=0xb60}, 0x1, &(0x7f00000006c0)=[{0x3, 0x101, &(0x7f0000000580), &(0x7f00000005c0)="c11f1fceca2ce1d24f993c12609bd8d43c580c32fb2bd47fd3eb25b199798515d221d5c81f9f986e78d5438a788825ba6f7187d116bd197e17b5c8105aed75962ec9305d881594c81162fe42c6cd4fab529c69f387acc7518dec479b58c0fe0ab86ec42d6eb39ac0cf1db4c9c215f03b81970ccd7a67bdf8f82178cb658940913259e4697ee5cebdf29c8f6f94cccbffbfb850774b839dbfdbe08fdb88cc5866a79bf46de1eef19ae8d583b02869a9b6da063605ec3bf30e28fc2c9b165e65199a6ef180e743c0f3f1bb077738f8b8232dc0d2a718c51fc27957d39df2a84a9821de825561", 0xe5, 0x8}]}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000780)={0x0, 0x1, 0x6}, 0x10) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000980)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000800)={0x128, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x9}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x8c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5, 0x3, 0x9}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private2}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CADT_FLAGS={0x8}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x62}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x83}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz0\x00'}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xfffffffd}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_ADT={0x48, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1000}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0x9, 0x1a, '-%\xbb&\x00'}}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x10}, 0x40) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000a00)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000a40)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x40, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x40}}, 0x1) sendmsg$MPTCP_PM_CMD_REMOVE(r0, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x64, 0x0, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x40}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x38, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}, @MPTCP_PM_ATTR_LOC_ID={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000014) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x5d, &(0x7f0000000c80)=0xd03, 0x4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x34, r1, 0x200, 0x70bd26, 0x25dfdbfc, {{}, {}, {0x18, 0x17, {0xd, 0x6, @udp='udp:syz1\x00'}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r7, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x3c, 0x4, 0x8, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x5}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88ca}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004}, 0x40000) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f00), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000f40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r8, &(0x7f0000001040)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001000)={&(0x7f0000000f80)={0x68, r9, 0x2, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x5, 0x32}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x127f}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xffff}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1ff}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x7}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xc}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x80}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x3ff}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x40}]}, 0x68}, 0x1, 0x0, 0x0, 0x8044080}, 0x1) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_GET(r11, &(0x7f0000001140)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x24, 0x0, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x801) r12 = accept4$netrom(r4, &(0x7f0000001180)={{}, [@default, @remote, @netrom, @rose, @bcast, @null, @netrom, @rose]}, &(0x7f0000001200)=0x48, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000001900)={@local, 0x0}, &(0x7f0000001940)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000001980)={'batadv0\x00', 0x0}) sendmmsg$inet(r12, &(0x7f0000001c00)=[{{&(0x7f0000001240)={0x2, 0x4e24, @private=0xa010102}, 0x10, &(0x7f0000001840)=[{&(0x7f0000001280)="d216a9d8b92c2fe3b7bce7cb124e66b14e63b2b68e8881b540398b23eb345088397a3bf97327a37c8ac7cabaac617c386d4898a3b5d80e12dc7cf2183f28adf7a44209934fa3d8a4538dbf7874fd16a88186ed7f8c2cf1b48e81d9", 0x5b}, {&(0x7f0000001300)="294c39c17978d73510337580760ea040cd28a0f49d777dfc3730950279ff16d69f8138314cd4e8a7228ff3680e6bb5ab3bd9bea61143c47d111010533a948723d951", 0x42}, {&(0x7f0000001380)="1414bd6d28a6cd1eca6ed0b2588eb2b20864f251aa96395d5fedd8726e139aecbcd0ca1989e518ba2844e2ba31a0f2b347b1c523924afe6285d55955b97694ab12275259ed5d7164e3e4b8cd8b9a51e0929a2a28ac1fca3257231e4de56c80725e00eb6b", 0x64}, {&(0x7f0000001400)="8b6b0ca2ee0186200009ae15d3be8c235f93183afe7dbe7c0d996d542c5ae9d674410497b34cc7f1f00e67da0441a0e22c09ee1e0ca6d758bb957f07760ceedeed1f0b6476be0c7331587cedf1ea13b4d054b39f686f43ffbe1a72c01ea6e49090a6d2b223635af53e3080c2f90e24cab8ac", 0x72}, {&(0x7f0000001480)="e422c3bc5da144607e6786013b379a2d1153d79c1ffffcac7b75517f146eae792d5c17b07a51da694c93b7215cb62763acc7d4ec7d7965de9f53ed579cccd050e77e02c3269fa82ac8fcd280730c5e1a9a1aac24fc2a77f2fc30f9deaf12988debaa205612e2e41c80230db83942af814d2fc411a070d36353e9d6ab66300bee9a90ba6d3df0a210f3fc9f2901d7e0bdf638ac178948ad22053eedc5f9e9062583ccd633fa08cfd730bd4a", 0xab}, {&(0x7f0000001540)="5d8fc3581c16f6e60f00ecc2592fef796080bb92311f5a9e84ca03aa6424182488bb010748b4878781cffb229d2f670f73c048d4b54ceb84abd0a9a6fb80e3a31a50b7d2f5b64ca3f4765ee06fb37cda233a5cdd95efb157243e83d5ee84650de4e6192cbb667236b0563dfb5a9f4063e491d1545d6becc2d8a1000934caf4128556fbb349963ca6438ff8cd6d742f9ee0749c6e414dc4b38999541fcafcf8dc99f8f1db1c794022d6d8c0ca76d1964aace052cc66810ca44c07e6643f64945b4e714b92bb641a90f3f52dd45ea1405c1c0143b493d9265edefc092008a11937e3647d4d43c3d230414da72d5aff17da494fd0912469e7", 0xf7}, {&(0x7f0000001640)="081df91609dca338c6757f1de5bf2b61222e1fd0fecc4d170558032f3d483ffd5e5e263d13a746eb1a0d72c3b984c631e9ceddbb483771", 0x37}, {&(0x7f0000001680)="79a6b472f38ec56dae093c09fd754669d5befa00586a5dcc068f981ea1980f33df8f24a1cf4f5f3554b1b8138e70024dcea3578c5b65df6602f773831a8abd71e850e679acbc441be87aaaa5d9a29e4586b5e7dab4c2b5b5da897e947bf499fb716308fcc5e973885e1447e1c143ce92ac71ce86ac98bd1ed87664a6877e1bb497", 0x81}, {&(0x7f0000001740)="83554047ccb1093178bd332a6985800951c87d37e454d342d47bcd624235b6f5f93f89e4f5ba5767c0c8c918a111528b3d7d4ff678a46dea88cbe37f1069627a5b094a7aadce0b75f4e4697cb521935f465e6701fba829a2698fe2e7cc9100cadcac852fe75813ae4d9a46c96aa4a011ab93e734098c6e1f96e17cd57bb0b35c95ba2e88f8", 0x85}, {&(0x7f0000001800)="f468a6d49902ef6195f8cdb333a7f2422e80411c9dd0c6cad88827a8f57886f6ad65f02c4ad57534a1", 0x29}], 0xa, &(0x7f00000019c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x7f}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x10}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r13, @dev={0xac, 0x14, 0x14, 0xd}, @multicast2}}}, @ip_retopts={{0xcc, 0x0, 0x7, {[@lsrr={0x83, 0x17, 0x46, [@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @empty, @private=0xa010100]}, @timestamp={0x44, 0x28, 0x25, 0x0, 0xb, [0x8e1f, 0x7, 0x60, 0x6, 0xb13, 0xe8, 0x9, 0x1, 0x7]}, @generic={0x88, 0xc, "8107e279a6fff9518c39"}, @rr={0x7, 0x1b, 0x10, [@empty, @multicast2, @dev={0xac, 0x14, 0x14, 0x1b}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast]}, @timestamp_addr={0x44, 0xc, 0x9, 0x1, 0x4, [{@dev={0xac, 0x14, 0x14, 0x1d}, 0x8}]}, @timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x8, [{@empty, 0x80}, {@multicast1, 0x858c}, {@broadcast, 0x7}, {@remote, 0x9314}]}, @lsrr={0x83, 0xf, 0x78, [@rand_addr=0x64010102, @remote, @multicast2]}, @lsrr={0x83, 0x13, 0x3b, [@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, @empty]}, @noop]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x80000001}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3302}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4f}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r14, @multicast2, @broadcast}}}, @ip_retopts={{0x6c, 0x0, 0x7, {[@ra={0x94, 0x4}, @end, @timestamp_prespec={0x44, 0x24, 0x81, 0x3, 0x0, [{@rand_addr=0x64010102, 0x400}, {@empty, 0x9}, {@multicast1, 0x10}, {@local, 0x9}]}, @cipso={0x86, 0x29, 0x2, [{0x6, 0xd, "75917589701a547ecc18a9"}, {0x1, 0x4, "f2e2"}, {0x0, 0xc, "49ee769f288f75f778a8"}, {0x2, 0x6, "ab2b9443"}]}, @timestamp={0x44, 0x8, 0xcf, 0x0, 0xf, [0x1ff]}]}}}], 0x210}}], 0x1, 0x4048041) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x24, 0x0, 0x2, 0x70bd2a, 0x1000, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x40080) 339.481294ms ago: executing program 7 (id=8727): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="6c00000010001fff109e00008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000440012800b00010067656e6576650000340002800500030003000000060005004e20000005000400ab000000050009000100000005000a0001000000050009000100000008000a00", @ANYRES32=r4], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r6, @ANYBLOB="01"], 0x3c}}, 0x0) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000240), 0x4) (async) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140100002000010003000000fbdbdf25020117800c00030008ac0f000000000014000100", @ANYRESOCT=0x0], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000009b80)=@newchain={0x24, 0x64, 0x300, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7, 0xfff2}, {0xf}, {0xa, 0x1ffe4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x600, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000004001a80180002"], 0x44}}, 0x0) (async) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="300000001c000104000000000000000002000000", @ANYRES32=r4, @ANYBLOB="000014000a000100aaaaaaaeaaaa000008000f00010000003e11859a3351e595fc6522303ecd2fe041"], 0x30}, 0x1, 0x0, 0x0, 0x20000}, 0x0) 280.723113ms ago: executing program 1 (id=8728): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0xa) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = socket(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, 0x0, 0x90) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x4000000) r4 = socket$inet6(0xa, 0x1, 0xc) sendmmsg$inet6(r4, &(0x7f0000002740)=[{{&(0x7f0000000280)={0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0x29}}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e26, 0x6, @local, 0x19d}, 0x1c, 0x0, 0x0, 0x0, 0x148}}], 0x2, 0x0) close(r1) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000003540)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r5, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r6, 0x84, 0x21, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r6, 0x84, 0x6b, &(0x7f0000000240)=[@in={0x2, 0x4e24, @private=0xa010101}], 0x10) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, 0x0, 0x0) ioctl$sock_proto_private(r5, 0x89dc, &(0x7f0000000600)="271b85f987614a4c4975d9384177de805770184cab8cd6067b193a8ec9c9e4d8137b99655d61deae9c5bb52b1e0e46fd849703722a0694ed2aa6df02f44105590bbfe855a2db9d3f12acb0b6bde3e5aafa6b481386fda319cac470a046a19459635715856c89") connect$inet6(r6, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000080)) recvmsg(r2, &(0x7f0000000300)={0x0, 0x2b, 0x0}, 0x2000) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='net_prio.prioidx\x00', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, r7, 0x2000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) openat$cgroup_int(r7, 0x0, 0x2, 0x0) shutdown(r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000fdffffff000000008800000091117000006c21009500000000000000"], &(0x7f0000000c40)='GPL\x00', 0x80000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, 0x94) recvmmsg(r1, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) pwritev(r0, &(0x7f0000000080)=[{&(0x7f00000003c0)='\x00!G', 0x3}], 0x1, 0x3e42, 0x407ff) 230.499619ms ago: executing program 3 (id=8729): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f00000000c0), 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}}, 0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c000000210a010300000000000000000a0000010900020073797a31000000000900010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) sendmsg$can_bcm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="05000000000000000800000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="000000700100000002007c8e2778dc8bda77f55023645f49"], 0x48}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000000) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4058587a, &(0x7f00000005c0)={{r0, &(0x7f0000000180)='*\x00', 0x123000, &(0x7f0000000240)={@_ha_fsid={[0x9, 0x8]}, {0xd391, 0x9, 0xe995, 0x2}}, 0x1, &(0x7f0000000280), &(0x7f00000002c0)=0x1}, {[0xa764, 0x8, 0x1ff, 0x80000001]}, 0x2, 0xd5, &(0x7f00000004c0)=""/213}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000680)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)=@newneigh={0x40, 0x1c, 0x20, 0x70bd2d, 0x25dfdbfc, {0x1c, 0x0, 0x0, r6, 0x8, 0x1, 0x53d68ef065c17685}, [@NDA_NH_ID={0x8, 0xd, 0xc}, @NDA_FDB_EXT_ATTRS={0x1c, 0xe, 0x0, 0x1, [@NFEA_DONT_REFRESH={0x4}, @NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x1}, @NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x9}, @NFEA_DONT_REFRESH={0x4}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x20000044) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRES16=r2], 0x448}}, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="050000000808"], 0x80}}, 0x0) sendmmsg$inet(r2, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100), 0x2}}], 0x40000000000003a, 0x0) 79.593409ms ago: executing program 3 (id=8730): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000400)={r0, r0, 0x6, 0x0, 0x0, 0x9, 0x0, 0xc48, 0x7f, 0xc6, 0x1, 0x0, 'syz0\x00'}) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (async) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000003c0)={0x30, r3, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) (async) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) syz_emit_ethernet(0x76, &(0x7f0000000200)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x40, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "8bb91d", 0x0, 0x11, 0x0, @local, @empty, [@hopopts={0x2c, 0x0, '\x00', [@pad1, @padn]}]}}}}}}}, 0x0) (async) syz_emit_ethernet(0x76, &(0x7f0000000200)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x40, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "8bb91d", 0x0, 0x11, 0x0, @local, @empty, [@hopopts={0x2c, 0x0, '\x00', [@pad1, @padn]}]}}}}}}}, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x9800040}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xe0, 0x0, 0x24, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}, @TIPC_NLA_SOCK={0x98, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3ff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xf961}]}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffff7f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x49e}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8001}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10001}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x40}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xd}]}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x4001}, 0x8051) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) writev(r5, &(0x7f0000000040)=[{&(0x7f0000001040)="ba", 0x1}, {0x0, 0xea}], 0x2) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@ipv4_getrule={0x1c, 0x22, 0x4, 0x70bd2c, 0x25dfdbfb, {0x2, 0x14, 0x28, 0x2, 0x7, 0x0, 0x0, 0x6, 0xa}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000017}, 0x4048004) (async) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@ipv4_getrule={0x1c, 0x22, 0x4, 0x70bd2c, 0x25dfdbfb, {0x2, 0x14, 0x28, 0x2, 0x7, 0x0, 0x0, 0x6, 0xa}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000017}, 0x4048004) 0s ago: executing program 7 (id=8731): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b28, &(0x7f0000000000)={'wlan1\x00'}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0xc, &(0x7f0000000740)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20, 0x29, 0x1}, 0x20}}, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2688f54c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x0, 0x28, 0x0, &(0x7f0000000140)="c1188e99b95d02ff4284860188a88aa286dd", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): T2294] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7206'. [ 833.428833][ T2294] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7206'. [ 833.449806][ T2294] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7206'. [ 833.495665][ T2299] netlink: 'syz.1.7209': attribute type 1 has an invalid length. [ 833.503762][ T2299] NCSI netlink: No device for ifindex 0 [ 834.002387][ T2324] FAULT_INJECTION: forcing a failure. [ 834.002387][ T2324] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 834.043368][ T2324] CPU: 1 UID: 0 PID: 2324 Comm: syz.1.7218 Not tainted syzkaller #0 PREEMPT(full) [ 834.043414][ T2324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 834.043425][ T2324] Call Trace: [ 834.043433][ T2324] [ 834.043441][ T2324] dump_stack_lvl+0xe8/0x150 [ 834.043476][ T2324] should_fail_ex+0x412/0x560 [ 834.043510][ T2324] _copy_to_user+0x31/0xb0 [ 834.043533][ T2324] simple_read_from_buffer+0xe1/0x170 [ 834.043559][ T2324] proc_fail_nth_read+0x1bb/0x230 [ 834.043582][ T2324] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 834.043603][ T2324] ? rw_verify_area+0x2a6/0x4d0 [ 834.043623][ T2324] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 834.043649][ T2324] vfs_read+0x20c/0xa70 [ 834.043678][ T2324] ? __pfx___mutex_lock+0x10/0x10 [ 834.043702][ T2324] ? __pfx_vfs_read+0x10/0x10 [ 834.043725][ T2324] ? __fget_files+0x2a/0x420 [ 834.043749][ T2324] ? __fget_files+0x3a0/0x420 [ 834.043765][ T2324] ? __fget_files+0x2a/0x420 [ 834.043793][ T2324] ksys_read+0x150/0x270 [ 834.043817][ T2324] ? __pfx_ksys_read+0x10/0x10 [ 834.043848][ T2324] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 834.043869][ T2324] do_syscall_64+0x15f/0xf80 [ 834.043893][ T2324] ? trace_irq_disable+0x3b/0x140 [ 834.043917][ T2324] ? clear_bhb_loop+0x40/0x90 [ 834.043941][ T2324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 834.043959][ T2324] RIP: 0033:0x7f462475d60e [ 834.043977][ T2324] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 834.043992][ T2324] RSP: 002b:00007f4625726fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 834.044010][ T2324] RAX: ffffffffffffffda RBX: 00007f46257276c0 RCX: 00007f462475d60e [ 834.044022][ T2324] RDX: 000000000000000f RSI: 00007f46257270a0 RDI: 0000000000000004 [ 834.044033][ T2324] RBP: 00007f4625727090 R08: 0000000000000000 R09: 0000000000000000 [ 834.044043][ T2324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 834.044053][ T2324] R13: 00007f4624a16038 R14: 00007f4624a15fa0 R15: 00007ffc77e31b08 [ 834.044081][ T2324] [ 834.680908][ T2352] __nla_validate_parse: 63 callbacks suppressed [ 834.680927][ T2352] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7225'. [ 834.972767][ T2372] netlink: 'syz.4.7233': attribute type 30 has an invalid length. [ 835.497678][ T2395] netlink: 'syz.1.7237': attribute type 3 has an invalid length. [ 835.497768][ T2397] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7241'. [ 835.522984][ T2395] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7237'. [ 835.557193][ T2397] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7241'. [ 835.630140][ T2410] netlink: 'syz.2.7243': attribute type 4 has an invalid length. [ 835.646657][ T2406] bond3: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 835.667277][ T2406] bond3 (unregistering): Released all slaves [ 835.755727][ T2397] macvlan2: entered allmulticast mode [ 835.761308][ T2397] hsr0: entered allmulticast mode [ 835.768114][ T2397] hsr_slave_0: entered allmulticast mode [ 835.773894][ T2397] hsr_slave_1: entered allmulticast mode [ 835.789195][ T2422] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 835.936977][ T2428] FAULT_INJECTION: forcing a failure. [ 835.936977][ T2428] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 835.974046][ T2431] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7249'. [ 835.989142][ T2431] netlink: 7 bytes leftover after parsing attributes in process `syz.4.7249'. [ 835.996931][ T2428] CPU: 0 UID: 0 PID: 2428 Comm: syz.3.7246 Not tainted syzkaller #0 PREEMPT(full) [ 835.996955][ T2428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 835.996966][ T2428] Call Trace: [ 835.996974][ T2428] [ 835.996982][ T2428] dump_stack_lvl+0xe8/0x150 [ 835.997017][ T2428] should_fail_ex+0x412/0x560 [ 835.997048][ T2428] _copy_from_user+0x2d/0xb0 [ 835.997070][ T2428] __copy_msghdr+0x3c5/0x5b0 [ 835.997094][ T2428] ___sys_sendmsg+0x213/0x360 [ 835.997112][ T2428] ? __lock_acquire+0x6b5/0x2cf0 [ 835.997141][ T2428] ? __pfx____sys_sendmsg+0x10/0x10 [ 835.997192][ T2428] ? __fget_files+0x2a/0x420 [ 835.997209][ T2428] ? __fget_files+0x3a0/0x420 [ 835.997242][ T2428] __x64_sys_sendmsg+0x1bd/0x2a0 [ 835.997264][ T2428] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 835.997292][ T2428] ? __pfx_ksys_write+0x10/0x10 [ 835.997322][ T2428] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 835.997340][ T2428] do_syscall_64+0x15f/0xf80 [ 835.997363][ T2428] ? trace_irq_disable+0x3b/0x140 [ 835.997386][ T2428] ? clear_bhb_loop+0x40/0x90 [ 835.997408][ T2428] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 835.997425][ T2428] RIP: 0033:0x7fbb0d59cdd9 [ 835.997441][ T2428] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 835.997456][ T2428] RSP: 002b:00007fbb0e48b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 835.997475][ T2428] RAX: ffffffffffffffda RBX: 00007fbb0d815fa0 RCX: 00007fbb0d59cdd9 [ 835.997488][ T2428] RDX: 0000000000000011 RSI: 0000200000000340 RDI: 0000000000000003 [ 835.997499][ T2428] RBP: 00007fbb0e48b090 R08: 0000000000000000 R09: 0000000000000000 [ 835.997511][ T2428] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 835.997521][ T2428] R13: 00007fbb0d816038 R14: 00007fbb0d815fa0 R15: 00007ffe05d66418 [ 835.997549][ T2428] [ 836.621566][ T2479] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 836.803282][ T2500] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7259'. [ 836.840167][ T2447] netlink: 64 bytes leftover after parsing attributes in process `syz.1.7250'. [ 836.890930][ T2488] netlink: 'syz.4.7259': attribute type 1 has an invalid length. [ 836.965280][ T2488] netlink: 'syz.4.7259': attribute type 2 has an invalid length. [ 837.010216][ T2488] netlink: 'syz.4.7259': attribute type 13 has an invalid length. [ 837.053733][ T2488] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7259'. [ 837.103221][ T2518] netlink: 'syz.5.7263': attribute type 1 has an invalid length. [ 837.123925][ T2518] netlink: 'syz.5.7263': attribute type 1 has an invalid length. [ 837.286649][ T2533] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7267'. [ 837.317658][ T2539] openvswitch: netlink: EtherType 0 is less than min 600 [ 837.464418][ T2552] netlink: 'syz.2.7273': attribute type 7 has an invalid length. [ 837.822786][ T2573] netlink: 'syz.3.7278': attribute type 2 has an invalid length. [ 837.994792][ T2596] FAULT_INJECTION: forcing a failure. [ 837.994792][ T2596] name failslab, interval 1, probability 0, space 0, times 0 [ 838.009987][ T2596] CPU: 1 UID: 0 PID: 2596 Comm: syz.4.7282 Not tainted syzkaller #0 PREEMPT(full) [ 838.010012][ T2596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 838.010023][ T2596] Call Trace: [ 838.010030][ T2596] [ 838.010038][ T2596] dump_stack_lvl+0xe8/0x150 [ 838.010071][ T2596] should_fail_ex+0x412/0x560 [ 838.010103][ T2596] should_failslab+0xa8/0x100 [ 838.010126][ T2596] ? skb_ext_add+0x148/0x8f0 [ 838.010143][ T2596] kmem_cache_alloc_noprof+0x87/0x650 [ 838.010172][ T2596] skb_ext_add+0x148/0x8f0 [ 838.010190][ T2596] ? dev_get_by_index+0x22/0x2e0 [ 838.010221][ T2596] raw_sendmsg+0x33a/0xf90 [ 838.010255][ T2596] ? __pfx_raw_sendmsg+0x10/0x10 [ 838.010285][ T2596] ? aa_sock_msg_perm+0xf1/0x1b0 [ 838.010305][ T2596] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 838.010336][ T2596] ____sys_sendmsg+0x972/0x9f0 [ 838.010365][ T2596] ? __pfx_____sys_sendmsg+0x10/0x10 [ 838.010392][ T2596] ? import_iovec+0x73/0xa0 [ 838.010415][ T2596] ___sys_sendmsg+0x2a5/0x360 [ 838.010433][ T2596] ? __lock_acquire+0x6b5/0x2cf0 [ 838.010464][ T2596] ? __pfx____sys_sendmsg+0x10/0x10 [ 838.010515][ T2596] ? __fget_files+0x2a/0x420 [ 838.010533][ T2596] ? __fget_files+0x3a0/0x420 [ 838.010562][ T2596] __x64_sys_sendmsg+0x1bd/0x2a0 [ 838.010586][ T2596] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 838.010615][ T2596] ? __pfx_ksys_write+0x10/0x10 [ 838.010646][ T2596] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 838.010666][ T2596] do_syscall_64+0x15f/0xf80 [ 838.010690][ T2596] ? trace_irq_disable+0x3b/0x140 [ 838.010714][ T2596] ? clear_bhb_loop+0x40/0x90 [ 838.010737][ T2596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 838.010754][ T2596] RIP: 0033:0x7f571b99cdd9 [ 838.010773][ T2596] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 838.010788][ T2596] RSP: 002b:00007f571c812028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 838.010808][ T2596] RAX: ffffffffffffffda RBX: 00007f571bc15fa0 RCX: 00007f571b99cdd9 [ 838.010822][ T2596] RDX: 0000000000000011 RSI: 0000200000000340 RDI: 0000000000000003 [ 838.010833][ T2596] RBP: 00007f571c812090 R08: 0000000000000000 R09: 0000000000000000 [ 838.010844][ T2596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 838.010855][ T2596] R13: 00007f571bc16038 R14: 00007f571bc15fa0 R15: 00007ffc4b220fd8 [ 838.010885][ T2596] [ 838.682412][ T2631] lo speed is unknown, defaulting to 1000 [ 838.696908][ T2631] wg1 speed is unknown, defaulting to 1000 [ 839.911700][ T2718] __nla_validate_parse: 9 callbacks suppressed [ 839.911722][ T2718] netlink: 68 bytes leftover after parsing attributes in process `syz.3.7309'. [ 840.150427][ T2728] netlink: 27 bytes leftover after parsing attributes in process `syz.1.7312'. [ 840.216763][ T2740] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 840.352452][ T2744] macsec1: entered promiscuous mode [ 840.368805][ T2744] dummy0: entered promiscuous mode [ 840.390556][ T2744] macsec1: entered allmulticast mode [ 840.418168][ T2744] dummy0: entered allmulticast mode [ 840.463348][ T2744] dummy0: left allmulticast mode [ 840.472463][ T2744] dummy0: left promiscuous mode [ 840.553157][ T2766] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 840.713226][ T2779] validate_nla: 4 callbacks suppressed [ 840.713246][ T2779] netlink: 'syz.3.7329': attribute type 1 has an invalid length. [ 840.846581][ T2779] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 840.858812][ T2779] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 840.979817][ T2779] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7329'. [ 841.008214][ T2807] sctp: [Deprecated]: syz.2.7330 (pid 2807) Use of int in max_burst socket option. [ 841.008214][ T2807] Use struct sctp_assoc_value instead [ 841.049280][ T2805] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7329'. [ 841.093424][ T2799] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7330'. [ 841.114629][ T2779] bond3: (slave bridge1): Enslaving as an active interface with a down link [ 841.295370][ T2825] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7334'. [ 841.478311][ T2843] FAULT_INJECTION: forcing a failure. [ 841.478311][ T2843] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 841.491781][ T2843] CPU: 0 UID: 0 PID: 2843 Comm: syz.4.7339 Not tainted syzkaller #0 PREEMPT(full) [ 841.491805][ T2843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 841.491816][ T2843] Call Trace: [ 841.491823][ T2843] [ 841.491831][ T2843] dump_stack_lvl+0xe8/0x150 [ 841.491866][ T2843] should_fail_ex+0x412/0x560 [ 841.491899][ T2843] _copy_from_user+0x2d/0xb0 [ 841.491922][ T2843] __sys_sendto+0x2b0/0x710 [ 841.491943][ T2843] ? __pfx___sys_sendto+0x10/0x10 [ 841.491959][ T2843] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 841.492005][ T2843] ? __fget_files+0x3a0/0x420 [ 841.492034][ T2843] ? ksys_write+0x242/0x270 [ 841.492059][ T2843] ? __pfx_ksys_write+0x10/0x10 [ 841.492086][ T2843] __x64_sys_sendto+0xde/0x100 [ 841.492105][ T2843] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 841.492125][ T2843] do_syscall_64+0x15f/0xf80 [ 841.492149][ T2843] ? trace_irq_disable+0x3b/0x140 [ 841.492173][ T2843] ? clear_bhb_loop+0x40/0x90 [ 841.492196][ T2843] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 841.492214][ T2843] RIP: 0033:0x7f571b99cdd9 [ 841.492236][ T2843] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 841.492252][ T2843] RSP: 002b:00007f571c812028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 841.492272][ T2843] RAX: ffffffffffffffda RBX: 00007f571bc15fa0 RCX: 00007f571b99cdd9 [ 841.492286][ T2843] RDX: 0000000000000038 RSI: 0000200000000480 RDI: 0000000000000003 [ 841.492298][ T2843] RBP: 00007f571c812090 R08: 0000200000000280 R09: 000000000000001c [ 841.492310][ T2843] R10: 0000000004000014 R11: 0000000000000246 R12: 0000000000000001 [ 841.492322][ T2843] R13: 00007f571bc16038 R14: 00007f571bc15fa0 R15: 00007ffc4b220fd8 [ 841.492353][ T2843] [ 842.203491][ T2900] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 842.244622][ T2900] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7353'. [ 842.311142][ T2906] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7354'. [ 842.342475][ T2909] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7354'. [ 843.088958][ T2942] netlink: 88 bytes leftover after parsing attributes in process `syz.5.7361'. [ 843.367605][ T2955] xt_hashlimit: max too large, truncated to 1048576 [ 843.572742][ T2969] geneve4: entered promiscuous mode [ 843.585941][ T2969] geneve4: entered allmulticast mode [ 843.663478][ T2977] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 843.842159][ T2977] netlink: 'syz.3.7374': attribute type 1 has an invalid length. [ 844.396053][ T3026] IPVS: set_ctl: invalid protocol: 4 172.30.1.2:20000 [ 844.533180][ T3033] netlink: 'syz.4.7387': attribute type 1 has an invalid length. [ 844.567240][ T3033] netlink: 'syz.4.7387': attribute type 1 has an invalid length. [ 844.984983][ T3062] __nla_validate_parse: 7 callbacks suppressed [ 844.985001][ T3062] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7393'. [ 845.617744][ T3097] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7402'. [ 845.645024][ T3097] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7402'. [ 846.007541][ T3121] macsec1: entered promiscuous mode [ 846.027875][ T3121] erspan0: entered promiscuous mode [ 846.053638][ T3121] erspan0: left promiscuous mode [ 846.149097][ T3118] vlan2: entered allmulticast mode [ 846.163587][ T3118] bridge0: port 3(vlan2) entered blocking state [ 846.188226][ T3118] bridge0: port 3(vlan2) entered disabled state [ 846.214008][ T3137] netlink: 'syz.4.7413': attribute type 1 has an invalid length. [ 846.224356][ T3118] vlan2: entered promiscuous mode [ 846.251074][ T3137] netlink: 224 bytes leftover after parsing attributes in process `syz.4.7413'. [ 846.279170][ T3139] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7414'. [ 846.294893][ T3137] NCSI netlink: No device for ifindex 0 [ 846.309610][ T3139] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7414'. [ 846.352325][ T3138] delete_channel: no stack [ 846.777203][ T3178] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7424'. [ 847.081680][ T3192] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7428'. [ 847.186170][ T3205] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7429'. [ 848.350812][ T3225] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7433'. [ 848.361593][ T3228] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 848.363895][ T3230] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 848.594474][ T3245] netlink: 'syz.5.7436': attribute type 4 has an invalid length. [ 848.631722][ T3245] netlink: 'syz.5.7436': attribute type 4 has an invalid length. [ 848.810218][ T3259] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 849.033442][ T3275] netlink: 'syz.3.7445': attribute type 2 has an invalid length. [ 849.101337][ T3277] xt_l2tp: invalid flags combination: 8 [ 849.126035][ T3277] netlink: 'syz.1.7446': attribute type 13 has an invalid length. [ 850.294606][ T3339] lo speed is unknown, defaulting to 1000 [ 850.306385][ T3339] wg1 speed is unknown, defaulting to 1000 [ 850.369387][ T3346] __nla_validate_parse: 4 callbacks suppressed [ 850.369408][ T3346] netlink: 64 bytes leftover after parsing attributes in process `syz.5.7460'. [ 850.639681][ T3356] vlan0: entered promiscuous mode [ 850.657924][ T3356] erspan0: entered promiscuous mode [ 850.871047][ T3372] netlink: 'syz.5.7469': attribute type 62 has an invalid length. [ 850.884635][ T3372] netlink: 'syz.5.7469': attribute type 1 has an invalid length. [ 850.896235][ T3372] netlink: 244 bytes leftover after parsing attributes in process `syz.5.7469'. [ 851.031132][ T3379] FAULT_INJECTION: forcing a failure. [ 851.031132][ T3379] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 851.051825][ T3379] CPU: 1 UID: 0 PID: 3379 Comm: syz.3.7471 Not tainted syzkaller #0 PREEMPT(full) [ 851.051849][ T3379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 851.051860][ T3379] Call Trace: [ 851.051867][ T3379] [ 851.051875][ T3379] dump_stack_lvl+0xe8/0x150 [ 851.051907][ T3379] should_fail_ex+0x412/0x560 [ 851.051941][ T3379] _copy_from_iter+0x3b0/0x1670 [ 851.051963][ T3379] ? skb_ext_add+0x148/0x8f0 [ 851.051984][ T3379] ? skb_ext_add+0x148/0x8f0 [ 851.052001][ T3379] ? __pfx__copy_from_iter+0x10/0x10 [ 851.052024][ T3379] ? skb_ext_add+0x3b3/0x8f0 [ 851.052042][ T3379] ? dev_get_by_index+0x22/0x2e0 [ 851.052065][ T3379] ? skb_put+0x11b/0x210 [ 851.052086][ T3379] raw_sendmsg+0x3db/0xf90 [ 851.052119][ T3379] ? __pfx_raw_sendmsg+0x10/0x10 [ 851.052146][ T3379] ? aa_sock_msg_perm+0xf1/0x1b0 [ 851.052166][ T3379] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 851.052188][ T3379] ____sys_sendmsg+0x972/0x9f0 [ 851.052211][ T3379] ? __pfx_____sys_sendmsg+0x10/0x10 [ 851.052233][ T3379] ? import_iovec+0x73/0xa0 [ 851.052253][ T3379] ___sys_sendmsg+0x2a5/0x360 [ 851.052268][ T3379] ? __lock_acquire+0x6b5/0x2cf0 [ 851.052292][ T3379] ? __pfx____sys_sendmsg+0x10/0x10 [ 851.052335][ T3379] ? __fget_files+0x2a/0x420 [ 851.052349][ T3379] ? __fget_files+0x3a0/0x420 [ 851.052372][ T3379] __x64_sys_sendmsg+0x1bd/0x2a0 [ 851.052390][ T3379] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 851.052413][ T3379] ? __pfx_ksys_write+0x10/0x10 [ 851.052439][ T3379] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 851.052455][ T3379] do_syscall_64+0x15f/0xf80 [ 851.052475][ T3379] ? trace_irq_disable+0x3b/0x140 [ 851.052494][ T3379] ? clear_bhb_loop+0x40/0x90 [ 851.052512][ T3379] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 851.052526][ T3379] RIP: 0033:0x7fbb0d59cdd9 [ 851.052541][ T3379] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 851.052554][ T3379] RSP: 002b:00007fbb0e48b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 851.052570][ T3379] RAX: ffffffffffffffda RBX: 00007fbb0d815fa0 RCX: 00007fbb0d59cdd9 [ 851.052581][ T3379] RDX: 0000000024004801 RSI: 0000200000000000 RDI: 0000000000000003 [ 851.052590][ T3379] RBP: 00007fbb0e48b090 R08: 0000000000000000 R09: 0000000000000000 [ 851.052599][ T3379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 851.052612][ T3379] R13: 00007fbb0d816038 R14: 00007fbb0d815fa0 R15: 00007ffe05d66418 [ 851.052635][ T3379] [ 851.344452][ T3382] netlink: 'syz.1.7472': attribute type 1 has an invalid length. [ 851.522174][ T3387] netlink: 100 bytes leftover after parsing attributes in process `syz.4.7474'. [ 851.615878][ T3310] Bluetooth: hci6: command 0x0406 tx timeout [ 851.658644][ T3394] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7477'. [ 852.028021][ T3412] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7482'. [ 852.046420][ T3412] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7482'. [ 852.057328][ T3412] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7482'. [ 852.074380][ T3412] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7482'. [ 852.433216][ T3443] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7489'. [ 852.817441][ T3467] bond3: up delay (2) is not a multiple of miimon (80), value rounded to 0 ms [ 852.827333][ T3467] bond3: entered promiscuous mode [ 852.833629][ T3467] 8021q: adding VLAN 0 to HW filter on device bond3 [ 852.964522][ T3481] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7504'. [ 853.614588][ T3513] FAULT_INJECTION: forcing a failure. [ 853.614588][ T3513] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 853.628006][ T3513] CPU: 0 UID: 0 PID: 3513 Comm: syz.5.7514 Not tainted syzkaller #0 PREEMPT(full) [ 853.628031][ T3513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 853.628042][ T3513] Call Trace: [ 853.628050][ T3513] [ 853.628059][ T3513] dump_stack_lvl+0xe8/0x150 [ 853.628091][ T3513] should_fail_ex+0x412/0x560 [ 853.628124][ T3513] _copy_to_user+0x31/0xb0 [ 853.628149][ T3513] simple_read_from_buffer+0xe1/0x170 [ 853.628173][ T3513] proc_fail_nth_read+0x1bb/0x230 [ 853.628198][ T3513] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 853.628222][ T3513] ? rw_verify_area+0x2a6/0x4d0 [ 853.628244][ T3513] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 853.628266][ T3513] vfs_read+0x20c/0xa70 [ 853.628292][ T3513] ? __pfx___mutex_lock+0x10/0x10 [ 853.628319][ T3513] ? __pfx_vfs_read+0x10/0x10 [ 853.628341][ T3513] ? __fget_files+0x2a/0x420 [ 853.628362][ T3513] ? __fget_files+0x3a0/0x420 [ 853.628380][ T3513] ? __fget_files+0x2a/0x420 [ 853.628408][ T3513] ksys_read+0x150/0x270 [ 853.628432][ T3513] ? __pfx_ksys_read+0x10/0x10 [ 853.628463][ T3513] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 853.628484][ T3513] do_syscall_64+0x15f/0xf80 [ 853.628508][ T3513] ? trace_irq_disable+0x3b/0x140 [ 853.628531][ T3513] ? clear_bhb_loop+0x40/0x90 [ 853.628562][ T3513] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 853.628580][ T3513] RIP: 0033:0x7f72c775d60e [ 853.628598][ T3513] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 853.628612][ T3513] RSP: 002b:00007f72c85c5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 853.628632][ T3513] RAX: ffffffffffffffda RBX: 00007f72c85c66c0 RCX: 00007f72c775d60e [ 853.628646][ T3513] RDX: 000000000000000f RSI: 00007f72c85c60a0 RDI: 0000000000000004 [ 853.628658][ T3513] RBP: 00007f72c85c6090 R08: 0000000000000000 R09: 0000000000000000 [ 853.628670][ T3513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 853.628681][ T3513] R13: 00007f72c7a16038 R14: 00007f72c7a15fa0 R15: 00007ffe5bf0b018 [ 853.628712][ T3513] [ 853.902336][ T3515] syzkaller0: entered promiscuous mode [ 853.951187][ T3515] syzkaller0: entered allmulticast mode [ 854.902085][ T3538] Bluetooth: hci1: Opcode 0x080f failed: -4 [ 855.218820][ T3586] xt_hashlimit: size too large, truncated to 1048576 [ 855.484620][ T3599] FAULT_INJECTION: forcing a failure. [ 855.484620][ T3599] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 855.509975][ T3599] CPU: 1 UID: 0 PID: 3599 Comm: syz.3.7539 Not tainted syzkaller #0 PREEMPT(full) [ 855.509997][ T3599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 855.510006][ T3599] Call Trace: [ 855.510012][ T3599] [ 855.510019][ T3599] dump_stack_lvl+0xe8/0x150 [ 855.510046][ T3599] should_fail_ex+0x412/0x560 [ 855.510074][ T3599] _copy_from_user+0x2d/0xb0 [ 855.510092][ T3599] ___sys_sendmsg+0x1c6/0x360 [ 855.510108][ T3599] ? __lock_acquire+0x6b5/0x2cf0 [ 855.510133][ T3599] ? __pfx____sys_sendmsg+0x10/0x10 [ 855.510175][ T3599] ? __fget_files+0x2a/0x420 [ 855.510191][ T3599] ? __fget_files+0x3a0/0x420 [ 855.510213][ T3599] __x64_sys_sendmsg+0x1bd/0x2a0 [ 855.510231][ T3599] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 855.510255][ T3599] ? __pfx_ksys_write+0x10/0x10 [ 855.510280][ T3599] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 855.510296][ T3599] do_syscall_64+0x15f/0xf80 [ 855.510324][ T3599] ? trace_irq_disable+0x3b/0x140 [ 855.510344][ T3599] ? clear_bhb_loop+0x40/0x90 [ 855.510362][ T3599] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 855.510376][ T3599] RIP: 0033:0x7fbb0d59cdd9 [ 855.510390][ T3599] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 855.510403][ T3599] RSP: 002b:00007fbb0e48b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 855.510419][ T3599] RAX: ffffffffffffffda RBX: 00007fbb0d815fa0 RCX: 00007fbb0d59cdd9 [ 855.510430][ T3599] RDX: 0000000004000000 RSI: 0000200000002ac0 RDI: 0000000000000003 [ 855.510440][ T3599] RBP: 00007fbb0e48b090 R08: 0000000000000000 R09: 0000000000000000 [ 855.510449][ T3599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 855.510458][ T3599] R13: 00007fbb0d816038 R14: 00007fbb0d815fa0 R15: 00007ffe05d66418 [ 855.510482][ T3599] [ 855.847613][ T3607] netlink: 'syz.5.7538': attribute type 1 has an invalid length. [ 855.890989][ T3607] __nla_validate_parse: 70 callbacks suppressed [ 855.891008][ T3607] netlink: 224 bytes leftover after parsing attributes in process `syz.5.7538'. [ 855.953226][ T3608] syzkaller1: entered promiscuous mode [ 855.969676][ T3608] syzkaller1: entered allmulticast mode [ 856.165418][ T5851] Bluetooth: hci1: command 0x080f tx timeout [ 856.514043][ T3628] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7547'. [ 856.545272][ T3628] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7547'. [ 856.573027][ T3628] ip6gre2: entered promiscuous mode [ 856.589911][ T3628] ip6gre2: entered allmulticast mode [ 856.726062][ T5851] Bluetooth: hci5: command 0x0406 tx timeout [ 857.180145][ T3650] FAULT_INJECTION: forcing a failure. [ 857.180145][ T3650] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 857.221670][ T3650] CPU: 1 UID: 0 PID: 3650 Comm: syz.4.7552 Not tainted syzkaller #0 PREEMPT(full) [ 857.221696][ T3650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 857.221707][ T3650] Call Trace: [ 857.221715][ T3650] [ 857.221723][ T3650] dump_stack_lvl+0xe8/0x150 [ 857.221757][ T3650] should_fail_ex+0x412/0x560 [ 857.221791][ T3650] _copy_to_user+0x31/0xb0 [ 857.221815][ T3650] simple_read_from_buffer+0xe1/0x170 [ 857.221840][ T3650] proc_fail_nth_read+0x1bb/0x230 [ 857.221865][ T3650] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 857.221889][ T3650] ? rw_verify_area+0x2a6/0x4d0 [ 857.221911][ T3650] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 857.221933][ T3650] vfs_read+0x20c/0xa70 [ 857.221960][ T3650] ? __pfx___mutex_lock+0x10/0x10 [ 857.221986][ T3650] ? __pfx_vfs_read+0x10/0x10 [ 857.222010][ T3650] ? __fget_files+0x2a/0x420 [ 857.222033][ T3650] ? __fget_files+0x3a0/0x420 [ 857.222051][ T3650] ? __fget_files+0x2a/0x420 [ 857.222079][ T3650] ksys_read+0x150/0x270 [ 857.222104][ T3650] ? __pfx_ksys_read+0x10/0x10 [ 857.222135][ T3650] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 857.222156][ T3650] do_syscall_64+0x15f/0xf80 [ 857.222187][ T3650] ? trace_irq_disable+0x3b/0x140 [ 857.222211][ T3650] ? clear_bhb_loop+0x40/0x90 [ 857.222234][ T3650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 857.222253][ T3650] RIP: 0033:0x7f571b95d60e [ 857.222274][ T3650] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 857.222289][ T3650] RSP: 002b:00007f571c7f0fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 857.222308][ T3650] RAX: ffffffffffffffda RBX: 00007f571c7f16c0 RCX: 00007f571b95d60e [ 857.222321][ T3650] RDX: 000000000000000f RSI: 00007f571c7f10a0 RDI: 0000000000000005 [ 857.222333][ T3650] RBP: 00007f571c7f1090 R08: 0000000000000000 R09: 0000000000000000 [ 857.222345][ T3650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 857.222356][ T3650] R13: 00007f571bc16128 R14: 00007f571bc16090 R15: 00007ffc4b220fd8 [ 857.222388][ T3650] [ 857.508157][ T3655] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7554'. [ 857.634581][ T3659] bridge3: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 857.727262][ T3666] syzkaller0: entered promiscuous mode [ 857.734957][ T3666] syzkaller0: entered allmulticast mode [ 857.863658][ T3668] bond4: up delay (2) is not a multiple of miimon (80), value rounded to 0 ms [ 857.879458][ T3668] bond4: entered promiscuous mode [ 857.885674][ T3668] 8021q: adding VLAN 0 to HW filter on device bond4 [ 858.156741][ T3683] FAULT_INJECTION: forcing a failure. [ 858.156741][ T3683] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 858.174283][ T3683] CPU: 1 UID: 0 PID: 3683 Comm: syz.4.7565 Not tainted syzkaller #0 PREEMPT(full) [ 858.174309][ T3683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 858.174321][ T3683] Call Trace: [ 858.174329][ T3683] [ 858.174337][ T3683] dump_stack_lvl+0xe8/0x150 [ 858.174371][ T3683] should_fail_ex+0x412/0x560 [ 858.174404][ T3683] _copy_from_user+0x2d/0xb0 [ 858.174426][ T3683] __sys_bpf+0x229/0x950 [ 858.174452][ T3683] ? __pfx___sys_bpf+0x10/0x10 [ 858.174491][ T3683] ? ksys_write+0x242/0x270 [ 858.174517][ T3683] ? __pfx_ksys_write+0x10/0x10 [ 858.174544][ T3683] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 858.174564][ T3683] __x64_sys_bpf+0x7c/0x90 [ 858.174585][ T3683] do_syscall_64+0x15f/0xf80 [ 858.174609][ T3683] ? trace_irq_disable+0x3b/0x140 [ 858.174632][ T3683] ? clear_bhb_loop+0x40/0x90 [ 858.174652][ T3683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 858.174670][ T3683] RIP: 0033:0x7f571b99cdd9 [ 858.174687][ T3683] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 858.174702][ T3683] RSP: 002b:00007f571c812028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 858.174720][ T3683] RAX: ffffffffffffffda RBX: 00007f571bc15fa0 RCX: 00007f571b99cdd9 [ 858.174733][ T3683] RDX: 0000000000000050 RSI: 00002000000000c0 RDI: 000000000000000a [ 858.174745][ T3683] RBP: 00007f571c812090 R08: 0000000000000000 R09: 0000000000000000 [ 858.174754][ T3683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 858.174765][ T3683] R13: 00007f571bc16038 R14: 00007f571bc15fa0 R15: 00007ffc4b220fd8 [ 858.174796][ T3683] [ 858.392801][ T3691] netlink: 504 bytes leftover after parsing attributes in process `syz.5.7567'. [ 858.848619][ T3716] xfrm0: Caught tx_queue_len zero misconfig [ 859.052443][ T3727] Can't find ip_set type hash:ip,por [ 859.280597][ T3739] lo speed is unknown, defaulting to 1000 [ 859.291319][ T3739] wg1 speed is unknown, defaulting to 1000 [ 860.126988][ T3792] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7597'. [ 860.180189][ T3794] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7597'. [ 860.221260][ T3792] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7597'. [ 860.490223][ T3800] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7601'. [ 860.556397][ T3805] netlink: 5 bytes leftover after parsing attributes in process `syz.5.7603'. [ 860.628934][ T3807] netlink: 'syz.5.7603': attribute type 58 has an invalid length. [ 861.324696][ T3813] netlink: 'syz.3.7604': attribute type 8 has an invalid length. [ 861.453140][ T3815] __nla_validate_parse: 1 callbacks suppressed [ 861.453159][ T3815] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7604'. [ 861.701370][ T5851] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 861.730851][ T5851] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 861.754018][ T5851] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 861.805843][ T5851] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 861.828881][ T5851] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 863.141165][ T3805] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 863.252351][ T3814] veth1_to_bond: entered allmulticast mode [ 863.277174][ T3814] veth1_to_bond: left allmulticast mode [ 863.372400][ T3815] bond0: (slave bond_slave_1): Releasing backup interface [ 863.412119][ T3827] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7607'. [ 863.604533][ T3821] lo speed is unknown, defaulting to 1000 [ 863.653537][ T3821] wg1 speed is unknown, defaulting to 1000 [ 863.758665][ T3847] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7614'. [ 863.997096][ T3863] FAULT_INJECTION: forcing a failure. [ 863.997096][ T3863] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 864.015377][ T3310] Bluetooth: hci2: command tx timeout [ 864.047443][ T3863] CPU: 0 UID: 0 PID: 3863 Comm: syz.4.7617 Not tainted syzkaller #0 PREEMPT(full) [ 864.047468][ T3863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 864.047479][ T3863] Call Trace: [ 864.047487][ T3863] [ 864.047495][ T3863] dump_stack_lvl+0xe8/0x150 [ 864.047529][ T3863] should_fail_ex+0x412/0x560 [ 864.047563][ T3863] _copy_to_user+0x31/0xb0 [ 864.047586][ T3863] simple_read_from_buffer+0xe1/0x170 [ 864.047612][ T3863] proc_fail_nth_read+0x1bb/0x230 [ 864.047637][ T3863] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 864.047660][ T3863] ? rw_verify_area+0x2a6/0x4d0 [ 864.047680][ T3863] ? tun_chr_write_iter+0x18a/0x200 [ 864.047704][ T3863] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 864.047725][ T3863] vfs_read+0x20c/0xa70 [ 864.047758][ T3863] ? __pfx___mutex_lock+0x10/0x10 [ 864.047785][ T3863] ? __pfx_vfs_read+0x10/0x10 [ 864.047807][ T3863] ? __fget_files+0x2a/0x420 [ 864.047829][ T3863] ? __fget_files+0x3a0/0x420 [ 864.047843][ T3863] ? __fget_files+0x2a/0x420 [ 864.047869][ T3863] ksys_read+0x150/0x270 [ 864.047892][ T3863] ? __pfx_ksys_read+0x10/0x10 [ 864.047924][ T3863] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 864.047943][ T3863] do_syscall_64+0x15f/0xf80 [ 864.047967][ T3863] ? clear_bhb_loop+0x40/0x90 [ 864.047989][ T3863] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 864.048006][ T3863] RIP: 0033:0x7f571b95d60e [ 864.048022][ T3863] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 864.048036][ T3863] RSP: 002b:00007f571c811fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 864.048056][ T3863] RAX: ffffffffffffffda RBX: 00007f571c8126c0 RCX: 00007f571b95d60e [ 864.048069][ T3863] RDX: 000000000000000f RSI: 00007f571c8120a0 RDI: 0000000000000003 [ 864.048081][ T3863] RBP: 00007f571c812090 R08: 0000000000000000 R09: 0000000000000000 [ 864.048091][ T3863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 864.048101][ T3863] R13: 00007f571bc16038 R14: 00007f571bc15fa0 R15: 00007ffc4b220fd8 [ 864.048129][ T3863] [ 864.109259][ T3865] lo speed is unknown, defaulting to 1000 [ 864.322196][ T3865] wg1 speed is unknown, defaulting to 1000 [ 864.583245][ T3821] chnl_net:caif_netlink_parms(): no params data found [ 864.739191][ T3892] netlink: 'syz.5.7626': attribute type 21 has an invalid length. [ 864.796511][ T3892] netlink: 132 bytes leftover after parsing attributes in process `syz.5.7626'. [ 864.861831][ T3821] bridge0: port 1(bridge_slave_0) entered blocking state [ 864.870797][ T3821] bridge0: port 1(bridge_slave_0) entered disabled state [ 864.878454][ T3821] bridge_slave_0: entered allmulticast mode [ 864.895530][ T3821] bridge_slave_0: entered promiscuous mode [ 864.923457][ T3821] bridge0: port 2(bridge_slave_1) entered blocking state [ 864.930916][ T3821] bridge0: port 2(bridge_slave_1) entered disabled state [ 864.938702][ T3821] bridge_slave_1: entered allmulticast mode [ 864.946910][ T3821] bridge_slave_1: entered promiscuous mode [ 865.096687][ T3821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 865.115965][ T3821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 865.201332][ T3915] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 865.223950][ T3914] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7632'. [ 865.254324][ T3821] team0: Port device team_slave_0 added [ 865.294212][ T3821] team0: Port device team_slave_1 added [ 865.372256][ T3925] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7634'. [ 865.483924][T31709] IPVS: starting estimator thread 0... [ 865.502171][ T3821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 865.510833][ T3821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 865.539317][ T3821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 865.563223][ T3821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 865.575663][ T3821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 865.601641][ T3930] IPVS: using max 34 ests per chain, 81600 per kthread [ 865.609385][ T3821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 865.720564][ T3821] hsr_slave_0: entered promiscuous mode [ 865.731709][ T3821] hsr_slave_1: entered promiscuous mode [ 865.746602][ T3821] debugfs: 'hsr0' already exists in 'hsr' [ 865.759535][ T3821] Cannot create hsr debugfs directory [ 866.085181][ T3310] Bluetooth: hci2: command tx timeout [ 866.364446][ T3968] netlink: 'syz.5.7648': attribute type 21 has an invalid length. [ 866.379067][ T3968] netlink: 128 bytes leftover after parsing attributes in process `syz.5.7648'. [ 866.416384][ T3968] netlink: 'syz.5.7648': attribute type 4 has an invalid length. [ 866.424411][ T3968] netlink: 'syz.5.7648': attribute type 5 has an invalid length. [ 866.433993][ T3968] netlink: 3 bytes leftover after parsing attributes in process `syz.5.7648'. [ 866.447725][ T3980] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7652'. [ 866.462702][ T3821] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 866.475416][ T3980] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7652'. [ 866.494259][ T3821] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 866.526467][ T3980] bridge0: entered promiscuous mode [ 866.537057][ T3980] bridge0: left promiscuous mode [ 866.562365][ T3821] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 866.586013][ T3821] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 866.667891][ T3821] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 866.693527][ T3821] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 866.713304][ T3988] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7653'. [ 866.714619][ T3821] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 866.746970][ T3821] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 867.031043][ T4004] batadv_slave_1: entered allmulticast mode [ 867.073536][ T4003] dvmrp6: entered allmulticast mode [ 867.102229][ T4002] batadv_slave_1: left allmulticast mode [ 867.273706][ T4017] bridge4: the hash_elasticity option has been deprecated and is always 16 [ 867.296765][ T4017] bridge4: entered allmulticast mode [ 867.310242][ T3821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 867.380130][ T3821] 8021q: adding VLAN 0 to HW filter on device team0 [ 867.419407][T13173] bridge0: port 1(bridge_slave_0) entered blocking state [ 867.426658][T13173] bridge0: port 1(bridge_slave_0) entered forwarding state [ 867.487363][T13177] bridge0: port 2(bridge_slave_1) entered blocking state [ 867.494586][T13177] bridge0: port 2(bridge_slave_1) entered forwarding state [ 867.690188][ T4030] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7663'. [ 867.939922][ T4044] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.7665'. [ 867.990674][ T4044] ksmbd: Unknown IPC event: 1, ignore. [ 868.009895][ T4044] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7665'. [ 868.123732][ T3821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 868.134421][ T4047] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7665'. [ 868.162088][ T4047] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7665'. [ 868.180793][ T3310] Bluetooth: hci2: command tx timeout [ 868.248999][ T4047] ip6gretap0: entered promiscuous mode [ 868.274197][ T4047] syz_tun: entered promiscuous mode [ 868.281087][ T4047] debugfs: 'hsr1' already exists in 'hsr' [ 868.287570][ T4047] Cannot create hsr debugfs directory [ 868.293373][ T4047] hsr1: Slave A (ip6gretap0) is not up; please bring it up to get a fully working HSR network [ 868.308963][ T4047] hsr1: Slave B (syz_tun) is not up; please bring it up to get a fully working HSR network [ 868.381478][ T4064] 5Ò: entered promiscuous mode [ 868.844179][ T4100] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7678'. [ 868.847826][ T3821] veth0_vlan: entered promiscuous mode [ 868.875470][ T4100] netlink: 56 bytes leftover after parsing attributes in process `syz.1.7678'. [ 868.891916][ T3821] veth1_vlan: entered promiscuous mode [ 868.966163][ T3821] veth0_macvtap: entered promiscuous mode [ 868.977665][ T3821] veth1_macvtap: entered promiscuous mode [ 869.002252][ T3821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 869.021881][ T3821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 869.059428][T13186] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 869.073707][T13186] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 869.110706][T13186] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 869.153883][T13186] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 869.393849][ T4122] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7685'. [ 869.551444][ T4130] lo speed is unknown, defaulting to 1000 [ 869.558577][ T4130] wg1 speed is unknown, defaulting to 1000 [ 870.030824][ T1315] lec:lec_start_xmit: lec0:No lecd attached [ 870.245804][ T3310] Bluetooth: hci2: command tx timeout [ 871.651937][ T4081] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 871.733642][ T4139] netlink: 'syz.5.7690': attribute type 1 has an invalid length. [ 871.744592][ T4139] __nla_validate_parse: 2 callbacks suppressed [ 871.744610][ T4139] netlink: 476 bytes leftover after parsing attributes in process `syz.5.7690'. [ 871.758318][T13175] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 871.798062][T13175] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 871.799010][ T4139] netlink: 1041 bytes leftover after parsing attributes in process `syz.5.7690'. [ 871.922068][T13198] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 871.938323][T13198] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 871.952047][ T4144] netlink: 'syz.4.7692': attribute type 1 has an invalid length. [ 871.963680][ T4148] netlink: 'syz.5.7694': attribute type 3 has an invalid length. [ 871.989226][ T4148] netlink: 'syz.5.7694': attribute type 3 has an invalid length. [ 871.994454][ T4144] netlink: 96 bytes leftover after parsing attributes in process `syz.4.7692'. [ 872.025231][ T4144] netlink: 658 bytes leftover after parsing attributes in process `syz.4.7692'. [ 872.046325][ T4148] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7694'. [ 872.095803][ T3310] Bluetooth: hci0: command 0x0405 tx timeout [ 872.135910][ T4159] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7605'. [ 873.212396][ T4205] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 32, id = 0 [ 873.596839][ T4224] syzkaller0: entered promiscuous mode [ 873.604496][ T4224] syzkaller0: entered allmulticast mode [ 873.812892][ T4242] netlink: 'syz.3.7722': attribute type 16 has an invalid length. [ 873.850455][ T4242] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.7722'. [ 873.910897][ T4246] netlink: 'syz.3.7722': attribute type 16 has an invalid length. [ 873.932271][ T4246] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.7722'. [ 874.019739][ T4254] lo speed is unknown, defaulting to 1000 [ 874.028377][ T4254] wg1 speed is unknown, defaulting to 1000 [ 874.046604][ T30] audit: type=1107 audit(1777243066.323:37): pid=4250 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 874.220876][ T4265] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 874.529432][ T4275] netlink: 'syz.5.7732': attribute type 21 has an invalid length. [ 874.718221][ T4280] netlink: get zone limit has 8 unknown bytes [ 874.930163][ T4282] lo speed is unknown, defaulting to 1000 [ 875.022483][ T4282] wg1 speed is unknown, defaulting to 1000 [ 875.057668][ T4286] lo speed is unknown, defaulting to 1000 [ 875.310569][ T4298] netlink: 'syz.6.7741': attribute type 3 has an invalid length. [ 875.326656][ T4298] netlink: 56 bytes leftover after parsing attributes in process `syz.6.7741'. [ 875.345257][ T4298] netlink: 'syz.6.7741': attribute type 3 has an invalid length. [ 875.353158][ T4298] netlink: 56 bytes leftover after parsing attributes in process `syz.6.7741'. [ 875.732766][ T4323] netlink: 'syz.6.7747': attribute type 10 has an invalid length. [ 875.774978][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5740 ms [ 875.783071][ C0] lec:lec_tx_timeout: lec0 [ 876.207394][ T4286] wg1 speed is unknown, defaulting to 1000 [ 876.883010][ T4365] tipc: Enabled bearer , priority 0 [ 876.887463][ T4358] __nla_validate_parse: 7 callbacks suppressed [ 876.887480][ T4358] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7758'. [ 876.946301][ T4365] syzkaller0: entered promiscuous mode [ 876.955983][ T4365] syzkaller0: entered allmulticast mode [ 876.974199][ T4358] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7758'. [ 877.007852][ T4358] validate_nla: 1 callbacks suppressed [ 877.007870][ T4358] netlink: 'syz.5.7758': attribute type 7 has an invalid length. [ 877.061106][ T4358] netlink: 'syz.5.7758': attribute type 7 has an invalid length. [ 877.114162][ T4358] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7758'. [ 877.160379][ T4358] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7758'. [ 877.178803][T13186] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 877.206347][ T4358] netlink: 'syz.5.7758': attribute type 7 has an invalid length. [ 877.223568][ T4358] netlink: 'syz.5.7758': attribute type 7 has an invalid length. [ 877.246996][T13186] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 877.265660][T13186] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 877.722121][ T4356] tipc: Resetting bearer [ 877.814423][ T4356] tipc: Disabling bearer [ 877.835291][T13186] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 878.352991][ T4388] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 878.562996][ T4388] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 878.803212][ T4388] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 879.020321][ T4388] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 879.023436][ T4422] netlink: 'syz.5.7777': attribute type 10 has an invalid length. [ 879.048062][ T4423] netlink: 'syz.3.7776': attribute type 4 has an invalid length. [ 879.097531][ T4422] 8021q: VLANs not supported on syzkaller1 [ 879.115598][ T4422] netlink: 'syz.5.7777': attribute type 2 has an invalid length. [ 879.133467][ T4422] netlink: 36 bytes leftover after parsing attributes in process `syz.5.7777'. [ 879.293255][ T4434] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7781'. [ 879.352087][T13198] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 879.405592][T13198] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 879.508964][T13198] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 879.563098][T13198] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 879.695843][ T4454] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.7788'. [ 879.707667][ T4454] netlink: 80 bytes leftover after parsing attributes in process `syz.5.7788'. [ 879.769262][ T4458] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7790'. [ 880.144673][ T4475] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7796'. [ 880.612880][ T4498] netlink: 'syz.3.7801': attribute type 7 has an invalid length. [ 880.905770][ T4513] openvswitch: netlink: IPv4 frag type 127 is out of range max 2 [ 881.803605][ T4535] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 881.826381][ T4535] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 881.851758][ T4535] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 881.876575][ T4535] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 882.007471][ T4543] __nla_validate_parse: 4 callbacks suppressed [ 882.007489][ T4543] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7810'. [ 882.477444][ T4568] tipc: Enabling of bearer rejected, failed to enable media [ 882.611517][ T4570] netlink: 72 bytes leftover after parsing attributes in process `syz.3.7817'. [ 883.096088][ T4581] lo speed is unknown, defaulting to 1000 [ 883.103566][ T4581] wg1 speed is unknown, defaulting to 1000 [ 883.143071][ T4596] netlink: 'syz.3.7823': attribute type 1 has an invalid length. [ 883.883820][ T4624] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.7829'. [ 883.931636][ T4623] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.7829'. [ 884.481201][ T4642] netlink: 'syz.3.7835': attribute type 1 has an invalid length. [ 884.512597][ T4642] netlink: 240 bytes leftover after parsing attributes in process `syz.3.7835'. [ 884.863978][ T4640] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7831'. [ 884.895308][ T4640] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7831'. [ 885.102053][ T4664] sctp: [Deprecated]: syz.1.7838 (pid 4664) Use of int in maxseg socket option. [ 885.102053][ T4664] Use struct sctp_assoc_value instead [ 885.120349][ T4661] lo speed is unknown, defaulting to 1000 [ 885.125387][ T4663] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7839'. [ 885.141658][ T4661] wg1 speed is unknown, defaulting to 1000 [ 885.461449][T15707] lec:lec_start_xmit: lec0:No lecd attached [ 886.041263][ T4709] FAULT_INJECTION: forcing a failure. [ 886.041263][ T4709] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 886.070816][ T4709] CPU: 1 UID: 0 PID: 4709 Comm: syz.5.7852 Not tainted syzkaller #0 PREEMPT(full) [ 886.070861][ T4709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 886.070885][ T4709] Call Trace: [ 886.070900][ T4709] [ 886.070917][ T4709] dump_stack_lvl+0xe8/0x150 [ 886.070952][ T4709] should_fail_ex+0x412/0x560 [ 886.070984][ T4709] _copy_from_iter+0x1d3/0x1670 [ 886.071006][ T4709] ? sock_alloc_send_pskb+0x896/0x990 [ 886.071033][ T4709] ? __pfx__copy_from_iter+0x10/0x10 [ 886.071059][ T4709] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 886.071081][ T4709] skb_copy_datagram_from_iter+0xf5/0x710 [ 886.071107][ T4709] ? skb_put+0x11b/0x210 [ 886.071128][ T4709] tun_get_user+0xc5e/0x43e0 [ 886.071171][ T4709] ? aa_file_perm+0x192/0x15e0 [ 886.071195][ T4709] ? aa_file_perm+0x50e/0x15e0 [ 886.071215][ T4709] ? __pfx_tun_get_user+0x10/0x10 [ 886.071244][ T4709] ? __lock_acquire+0x6b5/0x2cf0 [ 886.071273][ T4709] ? kstrtoull+0x12f/0x1d0 [ 886.071305][ T4709] ? ref_tracker_alloc+0x35c/0x4c0 [ 886.071328][ T4709] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 886.071349][ T4709] ? tun_get+0x1c/0x2f0 [ 886.071374][ T4709] ? tun_get+0x1c/0x2f0 [ 886.071405][ T4709] ? tun_get+0x1c/0x2f0 [ 886.071430][ T4709] ? tun_get+0x1c/0x2f0 [ 886.071459][ T4709] tun_chr_write_iter+0x113/0x200 [ 886.071488][ T4709] vfs_write+0x61d/0xb90 [ 886.071519][ T4709] ? __pfx_vfs_write+0x10/0x10 [ 886.071549][ T4709] ? __fget_files+0x2a/0x420 [ 886.071576][ T4709] ksys_write+0x150/0x270 [ 886.071607][ T4709] ? __pfx_ksys_write+0x10/0x10 [ 886.071637][ T4709] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 886.071658][ T4709] do_syscall_64+0x15f/0xf80 [ 886.071681][ T4709] ? trace_irq_disable+0x3b/0x140 [ 886.071704][ T4709] ? clear_bhb_loop+0x40/0x90 [ 886.071727][ T4709] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 886.071745][ T4709] RIP: 0033:0x7f72c775d60e [ 886.071762][ T4709] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 886.071781][ T4709] RSP: 002b:00007f72c85a4fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 886.071800][ T4709] RAX: ffffffffffffffda RBX: 00007f72c85a56c0 RCX: 00007f72c775d60e [ 886.071814][ T4709] RDX: 000000000000104a RSI: 00002000000016c0 RDI: 00000000000000c8 [ 886.071826][ T4709] RBP: 00007f72c85a5090 R08: 0000000000000000 R09: 0000000000000000 [ 886.071837][ T4709] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 886.071848][ T4709] R13: 00007f72c7a16128 R14: 00007f72c7a16090 R15: 00007ffe5bf0b018 [ 886.071878][ T4709] [ 886.074232][ T4697] lo speed is unknown, defaulting to 1000 [ 886.338617][ T4697] wg1 speed is unknown, defaulting to 1000 [ 886.498103][ T4711] openvswitch: netlink: Message has 16 unknown bytes. [ 886.516249][ T4711] pim6reg1: entered promiscuous mode [ 886.521662][ T4711] pim6reg1: entered allmulticast mode [ 887.175247][ T4744] netlink: 332 bytes leftover after parsing attributes in process `syz.5.7862'. [ 887.198858][ T4744] netlink: 'syz.5.7862': attribute type 9 has an invalid length. [ 887.227991][ T4744] netlink: 108 bytes leftover after parsing attributes in process `syz.5.7862'. [ 887.248246][ T4744] netlink: 32 bytes leftover after parsing attributes in process `syz.5.7862'. [ 887.529844][ T4753] bond5: option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 887.557608][ T4753] bond5 (unregistering): Released all slaves [ 887.613491][ T4746] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7864'. [ 887.658506][ T4745] lo speed is unknown, defaulting to 1000 [ 887.720320][ T4745] wg1 speed is unknown, defaulting to 1000 [ 888.034175][ T4771] 8021q: adding VLAN 0 to HW filter on device bond5 [ 888.047741][ T4771] bond5: entered promiscuous mode [ 888.053972][ T4771] team0: Failed to send port change of device bond5 via netlink (err -105) [ 888.063109][ T4771] team0: Failed to send options change via netlink (err -105) [ 888.073167][ T4771] team0: Port device bond5 added [ 888.237074][ T4782] netlink: 'syz.1.7874': attribute type 8 has an invalid length. [ 888.334934][ T4791] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7877'. [ 888.677971][ T4806] can: request_module (can-proto-0) failed. [ 889.541525][ T4836] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7887'. [ 890.049122][ T4860] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7896'. [ 890.160578][ T3310] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 890.175562][ T3310] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 890.186922][ T3310] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 890.195815][ T3310] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 890.205805][ T3310] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 890.305979][ T4861] lo speed is unknown, defaulting to 1000 [ 890.329679][ T4861] wg1 speed is unknown, defaulting to 1000 [ 890.373404][ T4871] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7899'. [ 890.401442][ T4872] netlink: 80 bytes leftover after parsing attributes in process `syz.3.7898'. [ 890.698734][ T4879] hsr0: left allmulticast mode [ 890.709968][ T4879] hsr_slave_0: left allmulticast mode [ 890.722903][ T4879] hsr_slave_1: left allmulticast mode [ 890.743124][ T4881] netlink: 'syz.4.7901': attribute type 13 has an invalid length. [ 890.763037][ T4881] netlink: 'syz.4.7901': attribute type 17 has an invalid length. [ 890.771169][ T4876] IPVS: stopping backup sync thread 4205 ... [ 890.807621][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5340 ms [ 890.815725][ C0] lec:lec_tx_timeout: lec0 [ 890.914866][ T4879] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7901'. [ 891.039075][ T4881] 8021q: adding VLAN 0 to HW filter on device bond0 [ 891.050907][ T4881] 8021q: adding VLAN 0 to HW filter on device team0 [ 891.068495][ T4881] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 891.398469][ T4908] xt_nfacct: accounting object `syz0' does not exist [ 891.530935][ T4861] chnl_net:caif_netlink_parms(): no params data found [ 891.689747][ T4861] bridge0: port 1(bridge_slave_0) entered blocking state [ 891.707623][ T4861] bridge0: port 1(bridge_slave_0) entered disabled state [ 891.738461][ T4861] bridge_slave_0: entered allmulticast mode [ 891.755794][ T4861] bridge_slave_0: entered promiscuous mode [ 891.773102][ T4861] bridge0: port 2(bridge_slave_1) entered blocking state [ 891.791526][ T4861] bridge0: port 2(bridge_slave_1) entered disabled state [ 891.811353][ T4861] bridge_slave_1: entered allmulticast mode [ 891.820315][ T4861] bridge_slave_1: entered promiscuous mode [ 891.895828][ T4928] netlink: 'syz.3.7910': attribute type 3 has an invalid length. [ 891.920655][ T4861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 891.947354][ T4861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 892.084663][ T4861] team0: Port device team_slave_0 added [ 892.121459][ T4861] team0: Port device team_slave_1 added [ 892.245117][ T5851] Bluetooth: hci7: command tx timeout [ 892.268083][ T4948] netlink: 'syz.4.7916': attribute type 1 has an invalid length. [ 892.276730][ T4861] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 892.284595][ T4861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 892.338037][ T4861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 892.364172][ T4861] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 892.381775][ T4861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 892.411494][ T4861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 892.502306][ T4954] netlink: 'syz.3.7917': attribute type 5 has an invalid length. [ 892.619455][ T4937] lo speed is unknown, defaulting to 1000 [ 892.679336][ T4937] wg1 speed is unknown, defaulting to 1000 [ 892.700262][ T4861] hsr_slave_0: entered promiscuous mode [ 892.731532][ T4861] hsr_slave_1: entered promiscuous mode [ 892.750517][ T4861] debugfs: 'hsr0' already exists in 'hsr' [ 892.760249][ T4861] Cannot create hsr debugfs directory [ 892.819936][ T4969] __nla_validate_parse: 1 callbacks suppressed [ 892.819955][ T4969] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7920'. [ 892.887109][ T4972] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7922'. [ 892.897185][ T4974] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7922'. [ 892.910161][ T4969] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7920'. [ 893.047859][ T4972] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7922'. [ 893.089652][ T4985] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7924'. [ 893.145546][ T4985] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7924'. [ 893.259329][ T4985] bridge6: port 1(vlan2) entered blocking state [ 893.289070][ T4985] bridge6: port 1(vlan2) entered disabled state [ 893.296064][ T4985] vlan2: entered allmulticast mode [ 893.301433][ T4985] bridge6: entered allmulticast mode [ 893.322805][ T4985] vlan2: left allmulticast mode [ 893.328058][ T4985] bridge6: left allmulticast mode [ 893.472943][ T4861] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 893.670082][ T4861] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 893.780805][ T5001] xt_bpf: check failed: parse error [ 893.931793][ T4861] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 894.091670][ T4861] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 894.222816][ T5027] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7933'. [ 894.284131][ T5029] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7932'. [ 894.326052][ T5851] Bluetooth: hci7: command tx timeout [ 894.343413][ T5031] netlink: 3 bytes leftover after parsing attributes in process `syz.3.7934'. [ 894.435374][ T4861] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 894.455251][ T4861] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 894.464355][ T4861] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 894.487787][ T4861] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 894.496167][ T4861] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 894.510866][ T4861] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 894.527640][ T4861] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 894.593401][ T4861] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 894.774734][ T4861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 894.809746][ T4861] 8021q: adding VLAN 0 to HW filter on device team0 [ 894.832006][ T137] bridge0: port 1(bridge_slave_0) entered blocking state [ 894.839223][ T137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 894.870841][T13175] bridge0: port 2(bridge_slave_1) entered blocking state [ 894.878038][T13175] bridge0: port 2(bridge_slave_1) entered forwarding state [ 894.910292][ T5063] sctp: [Deprecated]: syz.1.7938 (pid 5063) Use of int in max_burst socket option deprecated. [ 894.910292][ T5063] Use struct sctp_assoc_value instead [ 895.341731][ T4861] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 895.700618][ T4861] veth0_vlan: entered promiscuous mode [ 895.729020][ T4861] veth1_vlan: entered promiscuous mode [ 895.751820][ T5102] macsec0: entered promiscuous mode [ 895.762882][ T5102] virt_wifi0: entered promiscuous mode [ 895.842800][ T4861] veth0_macvtap: entered promiscuous mode [ 895.854517][ T4861] veth1_macvtap: entered promiscuous mode [ 895.881060][ T4861] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 895.899748][ T4861] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 895.930890][T13177] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 895.943862][T13177] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 895.958669][T13177] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 895.970244][T13177] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 896.406609][ T5851] Bluetooth: hci7: command tx timeout [ 897.612615][ T5042] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 897.791109][ T5145] sctp: [Deprecated]: syz.1.7951 (pid 5145) Use of int in max_burst socket option. [ 897.791109][ T5145] Use struct sctp_assoc_value instead [ 897.843564][T13183] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 897.892017][T13183] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 897.981356][T13175] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 898.003946][T13175] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 898.140072][ T5165] netlink: 36 bytes leftover after parsing attributes in process `syz.5.7892'. [ 898.271012][ T5170] syzkaller0: entered promiscuous mode [ 898.278408][ T5170] syzkaller0: entered allmulticast mode [ 898.485322][ T5851] Bluetooth: hci7: command tx timeout [ 898.872429][ T5197] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7965'. [ 898.933920][ T5201] netlink: 256 bytes leftover after parsing attributes in process `syz.1.7966'. [ 899.004666][ T5203] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7967'. [ 899.230714][ T5181] lo speed is unknown, defaulting to 1000 [ 899.331911][ T5181] wg1 speed is unknown, defaulting to 1000 [ 899.471882][ T5224] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7974'. [ 899.671848][ T5233] netlink: 11 bytes leftover after parsing attributes in process `syz.6.7978'. [ 899.933198][ T5234] bond1: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 899.948836][ T5234] bond1 (unregistering): Released all slaves [ 900.193866][ T5241] vlan2: entered promiscuous mode [ 900.205828][ T5241] bridge0: entered promiscuous mode [ 900.284330][ T5258] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7985'. [ 900.503977][ T5265] sch_tbf: burst 240 is lower than device lo mtu (65550) ! [ 900.520503][ T5270] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7989'. [ 900.523149][ T5268] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7988'. [ 900.721977][ T5282] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7992'. [ 900.765995][ T5282] netlink: 'syz.3.7992': attribute type 30 has an invalid length. [ 900.831386][ T5280] dvmrp0: entered allmulticast mode [ 900.919540][ T5282] netlink: 'syz.3.7992': attribute type 30 has an invalid length. [ 900.943644][T13175] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 900.968572][T13175] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 901.019472][T13175] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 901.089397][T13175] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 901.264611][ T5304] x_tables: duplicate underflow at hook 1 [ 901.489342][ T5310] nbd: must specify at least one socket [ 901.766946][ T5316] lo speed is unknown, defaulting to 1000 [ 901.812486][ T5316] wg1 speed is unknown, defaulting to 1000 [ 902.061691][ T5333] nbd: must specify an index to disconnect [ 902.097687][ T5333] xt_bpf: check failed: parse error [ 902.144480][ T5339] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 902.213674][ T5342] netlink: 'syz.6.8014': attribute type 12 has an invalid length. [ 902.358870][ T5348] netlink: 'syz.3.8017': attribute type 22 has an invalid length. [ 902.467395][ T5348] netlink: 'syz.3.8017': attribute type 22 has an invalid length. [ 903.078927][ T5369] lo speed is unknown, defaulting to 1000 [ 903.099345][ T5369] wg1 speed is unknown, defaulting to 1000 [ 903.209689][ T5388] openvswitch: netlink: Key type 73 is out of range max 32 [ 903.329950][ T5396] syzkaller0: entered promiscuous mode [ 903.365467][ T5396] syzkaller0: entered allmulticast mode [ 903.921744][ T5422] team0: entered allmulticast mode [ 903.933318][ T5422] team_slave_0: entered allmulticast mode [ 903.941301][ T5422] team_slave_1: entered allmulticast mode [ 904.040093][ T5422] netlink: 'syz.5.8041': attribute type 4 has an invalid length. [ 904.460816][ T5444] __nla_validate_parse: 7 callbacks suppressed [ 904.460842][ T5444] netlink: 240 bytes leftover after parsing attributes in process `syz.4.8045'. [ 904.487546][ T5444] netlink: 56 bytes leftover after parsing attributes in process `syz.4.8045'. [ 904.569402][ T5447] nbd: must specify a size in bytes for the device [ 905.072265][ T5476] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8055'. [ 905.094771][ T5476] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8055'. [ 905.662772][ T5520] : entered promiscuous mode [ 905.719677][ T5524] : entered promiscuous mode [ 905.910739][ T5532] lo speed is unknown, defaulting to 1000 [ 905.939904][ T5532] wg1 speed is unknown, defaulting to 1000 [ 906.444410][ T5569] netlink: 7 bytes leftover after parsing attributes in process `syz.5.8076'. [ 906.479661][ T5572] netlink: 180568 bytes leftover after parsing attributes in process `syz.3.8077'. [ 906.530531][ T5572] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8077'. [ 907.209391][ T30] audit: type=1107 audit(1777243099.493:38): pid=5605 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 907.339688][ T5601] syzkaller0: entered promiscuous mode [ 907.365784][ T5601] syzkaller0: entered allmulticast mode [ 907.411076][ T5601] netlink: 'syz.5.8083': attribute type 1 has an invalid length. [ 907.455476][ T5601] netlink: 224 bytes leftover after parsing attributes in process `syz.5.8083'. [ 908.328327][ T5658] sctp: [Deprecated]: syz.3.8097 (pid 5658) Use of int in maxseg socket option. [ 908.328327][ T5658] Use struct sctp_assoc_value instead [ 908.355392][ T5653] netlink: 52 bytes leftover after parsing attributes in process `syz.4.8096'. [ 908.370577][ T5653] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 908.414047][ T5655] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8096'. [ 909.455968][ T5693] bridge0: port 2(bridge_slave_1) entered disabled state [ 909.465437][ T5693] bridge0: port 1(bridge_slave_0) entered disabled state [ 909.497427][ T5693] team0: left allmulticast mode [ 909.513206][ T5693] team_slave_0: left allmulticast mode [ 909.528667][ T5693] team_slave_1: left allmulticast mode [ 909.807432][ T5693] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 909.843525][ T5693] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 910.217127][ T5718] netlink: 'syz.6.8111': attribute type 12 has an invalid length. [ 910.253572][T13173] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 910.288131][T13173] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 910.322080][T13173] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 910.342322][ T5723] __nla_validate_parse: 3 callbacks suppressed [ 910.342340][ T5723] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8113'. [ 910.362663][T13175] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 910.461074][ T5730] vlan2: entered allmulticast mode [ 910.475881][ T5730] bond0: entered allmulticast mode [ 910.490497][ T5730] bond_slave_0: entered allmulticast mode [ 910.510697][ T5734] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8116'. [ 910.514119][ T5730] bond_slave_1: entered allmulticast mode [ 910.526420][ T5734] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8116'. [ 910.547274][ T5739] bridge0: port 2(bridge_slave_1) entered disabled state [ 910.555055][ T5739] bridge0: port 1(bridge_slave_0) entered disabled state [ 910.692421][ T5734] syzkaller0: entered promiscuous mode [ 910.702240][ T5734] syzkaller0: entered allmulticast mode [ 910.712743][ T5747] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8121'. [ 910.832574][ T5757] netlink: 56 bytes leftover after parsing attributes in process `syz.6.8123'. [ 910.914843][ T5758] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8124'. [ 910.924714][ T5758] netlink: 'syz.5.8124': attribute type 10 has an invalid length. [ 912.678933][ T5851] Bluetooth: hci2: link tx timeout [ 912.701523][ T5851] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 913.596082][ T5758] team0: Port device dummy0 added [ 913.802809][ T5784] lo speed is unknown, defaulting to 1000 [ 913.821719][ T5784] wg1 speed is unknown, defaulting to 1000 [ 914.344335][ T5811] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 914.411822][ T5818] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8137'. [ 914.550042][ T5811] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 914.767999][ T5848] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 914.791697][ T5848] netlink: 'syz.3.8143': attribute type 3 has an invalid length. [ 914.796565][ T5849] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8145'. [ 914.806170][ T3310] Bluetooth: hci2: command 0x0406 tx timeout [ 914.822848][ T5848] netlink: 224 bytes leftover after parsing attributes in process `syz.3.8143'. [ 915.214238][ T5863] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8147'. [ 915.655845][ T5875] netlink: 'syz.6.8151': attribute type 1 has an invalid length. [ 915.779256][ T5882] netlink: 'syz.3.8152': attribute type 13 has an invalid length. [ 915.787501][ T5882] netlink: 'syz.3.8152': attribute type 17 has an invalid length. [ 915.803077][ T5875] 8021q: adding VLAN 0 to HW filter on device bond1 [ 915.876567][ T5882] bridge0: port 2(bridge_slave_1) entered blocking state [ 915.883928][ T5882] bridge0: port 2(bridge_slave_1) entered forwarding state [ 915.891504][ T5882] bridge0: port 1(bridge_slave_0) entered blocking state [ 915.898703][ T5882] bridge0: port 1(bridge_slave_0) entered forwarding state [ 915.962330][ T5882] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 916.014500][ T5875] bond1: (slave dummy0): making interface the new active one [ 916.038598][ T5875] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 916.089609][ T5879] bond1 (unregistering): (slave dummy0): Releasing active interface [ 916.108062][ T5879] bond1 (unregistering): Released all slaves [ 916.343782][ T5896] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8155'. [ 916.443313][ T5903] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 916.458928][ T5900] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 916.458928][ T5900] Please contact the netfilter-devel mailing list or update your nftables rules. [ 916.489643][ T5903] netlink: 'syz.5.8158': attribute type 10 has an invalid length. [ 916.515248][ T5903] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 916.540081][ T5903] netlink: 48 bytes leftover after parsing attributes in process `syz.5.8158'. [ 916.907650][ T5932] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8169'. [ 916.935126][ T5936] tipc: Started in network mode [ 916.947226][ T5936] tipc: Node identity ac14140f, cluster identity 4711 [ 916.971596][ T5941] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 916.986082][ T5936] tipc: New replicast peer: 255.255.255.255 [ 916.993466][ T5940] sctp: [Deprecated]: syz.4.8170 (pid 5940) Use of struct sctp_assoc_value in delayed_ack socket option. [ 916.993466][ T5940] Use struct sctp_sack_info instead [ 917.000819][ T5936] tipc: Enabled bearer , priority 10 [ 917.681771][ T5981] netlink: 104 bytes leftover after parsing attributes in process `syz.3.8183'. [ 917.713811][ T5982] netlink: 104 bytes leftover after parsing attributes in process `syz.3.8183'. [ 917.873741][ T5995] netlink: 'syz.3.8187': attribute type 1 has an invalid length. [ 917.888090][ T5995] netlink: 88 bytes leftover after parsing attributes in process `syz.3.8187'. [ 917.914937][ T5995] netlink: 1 bytes leftover after parsing attributes in process `syz.3.8187'. [ 917.937519][ T5995] netlink: 'syz.3.8187': attribute type 8 has an invalid length. [ 917.955853][ T5995] netlink: 622 bytes leftover after parsing attributes in process `syz.3.8187'. [ 918.137730][T17123] tipc: Node number set to 2886997007 [ 918.244552][ T6004] lo speed is unknown, defaulting to 1000 [ 918.290951][ T6004] wg1 speed is unknown, defaulting to 1000 [ 918.557815][ T6027] netlink: 'syz.5.8197': attribute type 12 has an invalid length. [ 919.276839][ T6058] netlink: 'syz.5.8206': attribute type 1 has an invalid length. [ 919.460424][ T6059] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 919.541388][ T6065] 8021q: adding VLAN 0 to HW filter on device bond1 [ 919.659779][ T6074] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8211'. [ 919.830302][ T6088] netlink: 244 bytes leftover after parsing attributes in process `syz.3.8215'. [ 920.118602][ T6110] netlink: 'syz.3.8226': attribute type 10 has an invalid length. [ 920.158506][ T6110] siw: device registration error -23 [ 920.176950][ T6107] tipc: Enabled bearer , priority 9 [ 920.320338][ T6122] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 920.409979][ T6123] lo speed is unknown, defaulting to 1000 [ 920.472118][ T6123] wg1 speed is unknown, defaulting to 1000 [ 920.607425][ T6142] bond2: Unable to set down delay as MII monitoring is disabled [ 920.627033][ T6142] bond2 (unregistering): Released all slaves [ 920.892760][ T6159] netlink: 'syz.5.8233': attribute type 2 has an invalid length. [ 920.925152][ T6159] tipc: Started in network mode [ 920.956522][ T6159] tipc: Node identity 340008, cluster identity 4711 [ 920.984655][ T6159] tipc: Node number set to 3407880 [ 921.296260][T31712] tipc: Node number set to 2858369984 [ 921.814380][ T6203] __nla_validate_parse: 4 callbacks suppressed [ 921.814401][ T6203] netlink: 28 bytes leftover after parsing attributes in process `syz.6.8247'. [ 921.829114][ T6208] netlink: 'syz.3.8248': attribute type 10 has an invalid length. [ 921.874747][ T6203] netlink: 28 bytes leftover after parsing attributes in process `syz.6.8247'. [ 921.898501][ T6203] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8247'. [ 921.909344][ T6203] netlink: 44 bytes leftover after parsing attributes in process `syz.6.8247'. [ 921.960883][ T6208] 8021q: adding VLAN 0 to HW filter on device team0 [ 921.997942][ T6208] bond0: (slave team0): Enslaving as an active interface with an up link [ 922.044094][ T6212] veth1_macvtap: renamed from veth0_vlan [ 922.258399][ T6225] delete_channel: no stack [ 922.270727][ T6230] netlink: 60 bytes leftover after parsing attributes in process `syz.5.8256'. [ 922.702446][ T6263] siw: device registration error -23 [ 922.721313][ T6263] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8264'. [ 923.035425][ T6260] syzkaller1: entered promiscuous mode [ 923.041196][ T6260] syzkaller1: entered allmulticast mode [ 923.446048][ T6285] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8266'. [ 923.531000][ T5506] veth1_macvtap: left promiscuous mode [ 923.622759][ T5506] veth1_macvtap: entered promiscuous mode [ 923.744693][ T6307] netlink: 'syz.3.8270': attribute type 11 has an invalid length. [ 923.758864][ T6310] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8272'. [ 923.953149][ T6316] bond4: option mode: invalid value (254) [ 923.970256][ T6316] bond4 (unregistering): Released all slaves [ 924.687882][ T6350] IPVS: set_ctl: invalid protocol: 2 172.20.20.170:20004 [ 924.711343][ T6352] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8277'. [ 924.775784][ T6356] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8279'. [ 924.803497][ T6356] 8021q: VLANs not supported on ip6_vti0 [ 924.957714][ T6363] netlink: 'syz.3.8280': attribute type 3 has an invalid length. [ 925.613603][ T6398] openvswitch: netlink: Duplicate or invalid key (type 0). [ 925.642428][ T6398] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 925.711623][ T6401] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 925.779133][ T6411] bond0: (slave team0): Releasing backup interface [ 925.844156][ T6411] bridge_slave_0: left allmulticast mode [ 925.866795][ T6411] bridge_slave_0: left promiscuous mode [ 925.892311][ T6411] bridge0: port 1(bridge_slave_0) entered disabled state [ 926.578193][ T6428] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 926.616411][ T6428] xt_cluster: node mask cannot exceed total number of nodes [ 926.664453][ T6411] bridge_slave_1: left allmulticast mode [ 926.681318][ T6411] bridge_slave_1: left promiscuous mode [ 926.700846][ T6411] bridge0: port 2(bridge_slave_1) entered disabled state [ 926.737740][ T6411] bond0: (slave bond_slave_0): Releasing backup interface [ 926.783002][ T6411] team0: Port device team_slave_0 removed [ 926.806647][ T6411] team0: Port device team_slave_1 removed [ 926.835084][ T6411] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 926.998463][ T6439] FAULT_INJECTION: forcing a failure. [ 926.998463][ T6439] name failslab, interval 1, probability 0, space 0, times 0 [ 927.016696][ T6439] CPU: 1 UID: 0 PID: 6439 Comm: syz.3.8295 Not tainted syzkaller #0 PREEMPT(full) [ 927.016722][ T6439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 927.016733][ T6439] Call Trace: [ 927.016740][ T6439] [ 927.016748][ T6439] dump_stack_lvl+0xe8/0x150 [ 927.016782][ T6439] should_fail_ex+0x412/0x560 [ 927.016816][ T6439] should_failslab+0xa8/0x100 [ 927.016842][ T6439] __kmalloc_noprof+0xe8/0x760 [ 927.016863][ T6439] ? ethnl_default_set_doit+0x16a/0xad0 [ 927.016890][ T6439] ethnl_default_set_doit+0x16a/0xad0 [ 927.016912][ T6439] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 927.016934][ T6439] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 927.016964][ T6439] genl_family_rcv_msg_doit+0x22a/0x330 [ 927.016987][ T6439] ? __asan_memcpy+0x40/0x70 [ 927.017010][ T6439] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 927.017045][ T6439] ? bpf_lsm_capable+0x9/0x20 [ 927.017069][ T6439] ? security_capable+0x7e/0x2c0 [ 927.017102][ T6439] genl_rcv_msg+0x61c/0x7a0 [ 927.017131][ T6439] ? __pfx_genl_rcv_msg+0x10/0x10 [ 927.017151][ T6439] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 927.017173][ T6439] ? __pfx_ref_tracker_free+0x10/0x10 [ 927.017202][ T6439] netlink_rcv_skb+0x232/0x4b0 [ 927.017222][ T6439] ? __pfx_genl_rcv_msg+0x10/0x10 [ 927.017244][ T6439] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 927.017278][ T6439] ? down_read+0x270/0x2e0 [ 927.017302][ T6439] ? genl_rcv+0xd/0x40 [ 927.017326][ T6439] genl_rcv+0x28/0x40 [ 927.017346][ T6439] netlink_unicast+0x75c/0x8e0 [ 927.017383][ T6439] netlink_sendmsg+0x813/0xb40 [ 927.017420][ T6439] ? __pfx_netlink_sendmsg+0x10/0x10 [ 927.017443][ T6439] ? aa_sock_msg_perm+0xf1/0x1b0 [ 927.017463][ T6439] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 927.017487][ T6439] ____sys_sendmsg+0x972/0x9f0 [ 927.017506][ T6439] ? __might_fault+0xaf/0x130 [ 927.017533][ T6439] ? __pfx_____sys_sendmsg+0x10/0x10 [ 927.017562][ T6439] ? import_iovec+0x73/0xa0 [ 927.017586][ T6439] ___sys_sendmsg+0x2a5/0x360 [ 927.017605][ T6439] ? __lock_acquire+0x6b5/0x2cf0 [ 927.017635][ T6439] ? __pfx____sys_sendmsg+0x10/0x10 [ 927.017686][ T6439] ? __fget_files+0x2a/0x420 [ 927.017707][ T6439] ? __fget_files+0x3a0/0x420 [ 927.017735][ T6439] __x64_sys_sendmsg+0x1bd/0x2a0 [ 927.017758][ T6439] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 927.017788][ T6439] ? __pfx_ksys_write+0x10/0x10 [ 927.017817][ T6439] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 927.017834][ T6439] do_syscall_64+0x15f/0xf80 [ 927.017856][ T6439] ? trace_irq_disable+0x3b/0x140 [ 927.017879][ T6439] ? clear_bhb_loop+0x40/0x90 [ 927.017902][ T6439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 927.017920][ T6439] RIP: 0033:0x7fbb0d59cdd9 [ 927.017939][ T6439] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 927.017954][ T6439] RSP: 002b:00007fbb0e48b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 927.017975][ T6439] RAX: ffffffffffffffda RBX: 00007fbb0d815fa0 RCX: 00007fbb0d59cdd9 [ 927.017989][ T6439] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000004 [ 927.018000][ T6439] RBP: 00007fbb0e48b090 R08: 0000000000000000 R09: 0000000000000000 [ 927.018012][ T6439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 927.018022][ T6439] R13: 00007fbb0d816038 R14: 00007fbb0d815fa0 R15: 00007ffe05d66418 [ 927.018053][ T6439] [ 927.776268][ T6460] syzkaller1: entered promiscuous mode [ 927.802201][ T6460] syzkaller1: entered allmulticast mode [ 927.913991][ T6487] FAULT_INJECTION: forcing a failure. [ 927.913991][ T6487] name failslab, interval 1, probability 0, space 0, times 0 [ 927.951354][ T6487] CPU: 0 UID: 0 PID: 6487 Comm: syz.4.8307 Not tainted syzkaller #0 PREEMPT(full) [ 927.951380][ T6487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 927.951390][ T6487] Call Trace: [ 927.951397][ T6487] [ 927.951405][ T6487] dump_stack_lvl+0xe8/0x150 [ 927.951438][ T6487] should_fail_ex+0x412/0x560 [ 927.951469][ T6487] should_failslab+0xa8/0x100 [ 927.951495][ T6487] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 927.951517][ T6487] ? __alloc_skb+0x1d0/0x7d0 [ 927.951532][ T6487] ? __local_bh_enable_ip+0xd0/0x130 [ 927.951558][ T6487] __alloc_skb+0x1d0/0x7d0 [ 927.951575][ T6487] ? netlink_ack_tlv_len+0x6c/0x210 [ 927.951595][ T6487] netlink_ack+0x146/0xa50 [ 927.951610][ T6487] ? __pfx_genl_rcv_msg+0x10/0x10 [ 927.951636][ T6487] ? __pfx_ref_tracker_free+0x10/0x10 [ 927.951663][ T6487] netlink_rcv_skb+0x2b6/0x4b0 [ 927.951681][ T6487] ? __pfx_genl_rcv_msg+0x10/0x10 [ 927.951705][ T6487] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 927.951735][ T6487] ? down_read+0x270/0x2e0 [ 927.951763][ T6487] ? genl_rcv+0xd/0x40 [ 927.951787][ T6487] genl_rcv+0x28/0x40 [ 927.951807][ T6487] netlink_unicast+0x75c/0x8e0 [ 927.951844][ T6487] netlink_sendmsg+0x813/0xb40 [ 927.951874][ T6487] ? __pfx_netlink_sendmsg+0x10/0x10 [ 927.951897][ T6487] ? aa_sock_msg_perm+0xf1/0x1b0 [ 927.951917][ T6487] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 927.951943][ T6487] ____sys_sendmsg+0x972/0x9f0 [ 927.951964][ T6487] ? __might_fault+0xaf/0x130 [ 927.951991][ T6487] ? __pfx_____sys_sendmsg+0x10/0x10 [ 927.952021][ T6487] ? import_iovec+0x73/0xa0 [ 927.952047][ T6487] ___sys_sendmsg+0x2a5/0x360 [ 927.952066][ T6487] ? __lock_acquire+0x6b5/0x2cf0 [ 927.952097][ T6487] ? __pfx____sys_sendmsg+0x10/0x10 [ 927.952154][ T6487] ? __fget_files+0x2a/0x420 [ 927.952172][ T6487] ? __fget_files+0x3a0/0x420 [ 927.952201][ T6487] __x64_sys_sendmsg+0x1bd/0x2a0 [ 927.952225][ T6487] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 927.952256][ T6487] ? __pfx_ksys_write+0x10/0x10 [ 927.952294][ T6487] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 927.952314][ T6487] do_syscall_64+0x15f/0xf80 [ 927.952337][ T6487] ? trace_irq_disable+0x3b/0x140 [ 927.952361][ T6487] ? clear_bhb_loop+0x40/0x90 [ 927.952384][ T6487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 927.952402][ T6487] RIP: 0033:0x7f571b99cdd9 [ 927.952420][ T6487] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 927.952435][ T6487] RSP: 002b:00007f571c812028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 927.952454][ T6487] RAX: ffffffffffffffda RBX: 00007f571bc15fa0 RCX: 00007f571b99cdd9 [ 927.952467][ T6487] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000004 [ 927.952479][ T6487] RBP: 00007f571c812090 R08: 0000000000000000 R09: 0000000000000000 [ 927.952490][ T6487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 927.952501][ T6487] R13: 00007f571bc16038 R14: 00007f571bc15fa0 R15: 00007ffc4b220fd8 [ 927.952532][ T6487] [ 928.046738][ T6489] __nla_validate_parse: 2 callbacks suppressed [ 928.046757][ T6489] netlink: 24 bytes leftover after parsing attributes in process `syz.6.8305'. [ 928.327496][ T6473] netlink: 'syz.5.8304': attribute type 2 has an invalid length. [ 928.345309][ T6473] netlink: 36 bytes leftover after parsing attributes in process `syz.5.8304'. [ 928.533245][ T6510] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8309'. [ 928.617741][ T6518] nbd: socks must be embedded in a SOCK_ITEM attr [ 928.799334][ T6529] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8315'. [ 928.884216][ T6529] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8315'. [ 929.145970][ T6548] FAULT_INJECTION: forcing a failure. [ 929.145970][ T6548] name failslab, interval 1, probability 0, space 0, times 0 [ 929.164715][ T6547] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8319'. [ 929.182603][ T6548] CPU: 0 UID: 0 PID: 6548 Comm: syz.6.8318 Not tainted syzkaller #0 PREEMPT(full) [ 929.182629][ T6548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 929.182640][ T6548] Call Trace: [ 929.182648][ T6548] [ 929.182656][ T6548] dump_stack_lvl+0xe8/0x150 [ 929.182689][ T6548] should_fail_ex+0x412/0x560 [ 929.182723][ T6548] should_failslab+0xa8/0x100 [ 929.182749][ T6548] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 929.182774][ T6548] ? __alloc_skb+0x1d0/0x7d0 [ 929.182790][ T6548] ? __local_bh_enable_ip+0xd0/0x130 [ 929.182820][ T6548] __alloc_skb+0x1d0/0x7d0 [ 929.182837][ T6548] ? netlink_ack_tlv_len+0x6c/0x210 [ 929.182860][ T6548] netlink_ack+0x146/0xa50 [ 929.182876][ T6548] ? __pfx_genl_rcv_msg+0x10/0x10 [ 929.182903][ T6548] ? __pfx_ref_tracker_free+0x10/0x10 [ 929.182933][ T6548] netlink_rcv_skb+0x2b6/0x4b0 [ 929.182956][ T6548] ? __pfx_genl_rcv_msg+0x10/0x10 [ 929.182980][ T6548] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 929.183014][ T6548] ? down_read+0x270/0x2e0 [ 929.183038][ T6548] ? genl_rcv+0xd/0x40 [ 929.183061][ T6548] genl_rcv+0x28/0x40 [ 929.183082][ T6548] netlink_unicast+0x75c/0x8e0 [ 929.183117][ T6548] netlink_sendmsg+0x813/0xb40 [ 929.183145][ T6548] ? __pfx_netlink_sendmsg+0x10/0x10 [ 929.183165][ T6548] ? aa_sock_msg_perm+0xf1/0x1b0 [ 929.183185][ T6548] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 929.183211][ T6548] ____sys_sendmsg+0x972/0x9f0 [ 929.183229][ T6548] ? __might_fault+0xaf/0x130 [ 929.183254][ T6548] ? __pfx_____sys_sendmsg+0x10/0x10 [ 929.183281][ T6548] ? import_iovec+0x73/0xa0 [ 929.183307][ T6548] ___sys_sendmsg+0x2a5/0x360 [ 929.183326][ T6548] ? __lock_acquire+0x6b5/0x2cf0 [ 929.183357][ T6548] ? __pfx____sys_sendmsg+0x10/0x10 [ 929.183417][ T6548] ? __fget_files+0x2a/0x420 [ 929.183436][ T6548] ? __fget_files+0x3a0/0x420 [ 929.183465][ T6548] __x64_sys_sendmsg+0x1bd/0x2a0 [ 929.183489][ T6548] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 929.183516][ T6548] ? __pfx_ksys_write+0x10/0x10 [ 929.183544][ T6548] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 929.183564][ T6548] do_syscall_64+0x15f/0xf80 [ 929.183587][ T6548] ? trace_irq_disable+0x3b/0x140 [ 929.183611][ T6548] ? clear_bhb_loop+0x40/0x90 [ 929.183633][ T6548] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 929.183651][ T6548] RIP: 0033:0x7fe368f9cdd9 [ 929.183668][ T6548] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 929.183683][ T6548] RSP: 002b:00007fe369ecc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 929.183703][ T6548] RAX: ffffffffffffffda RBX: 00007fe369215fa0 RCX: 00007fe368f9cdd9 [ 929.183717][ T6548] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000004 [ 929.183728][ T6548] RBP: 00007fe369ecc090 R08: 0000000000000000 R09: 0000000000000000 [ 929.183739][ T6548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 929.183750][ T6548] R13: 00007fe369216038 R14: 00007fe369215fa0 R15: 00007ffff92ae318 [ 929.183782][ T6548] [ 929.514591][ T6547] netlink: 'syz.1.8319': attribute type 1 has an invalid length. [ 930.203383][ T6591] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8326'. [ 930.598325][ T6608] openvswitch: netlink: IP tunnel attribute has 4460 unknown bytes. [ 930.899680][ T6634] netlink: 76 bytes leftover after parsing attributes in process `syz.3.8333'. [ 930.978236][ T6639] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8334'. [ 931.162512][ T6646] geneve2: entered promiscuous mode [ 931.194709][ T6655] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8339'. [ 931.211389][T13173] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 931.227067][T13173] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 931.242083][T13173] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 931.257871][T13173] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 931.302184][ T6663] sctp: [Deprecated]: syz.3.8338 (pid 6663) Use of struct sctp_assoc_value in delayed_ack socket option. [ 931.302184][ T6663] Use struct sctp_sack_info instead [ 931.455365][ T1315] lec:lec_start_xmit: lec0:No lecd attached [ 931.563910][ T6678] IPVS: set_ctl: invalid protocol: 50 172.20.20.170:20004 [ 931.751370][ T6682] bond0: Unable to set down delay as MII monitoring is disabled [ 931.844466][ T6682] hsr_slave_1 (unregistering): left promiscuous mode [ 931.927781][ T6697] tipc: Started in network mode [ 931.940341][ T6697] tipc: Node identity 1a9bf01ebffc, cluster identity 4711 [ 931.951420][ T6697] tipc: Enabled bearer , priority 0 [ 931.988418][ T6697] syzkaller0: entered promiscuous mode [ 932.007147][ T6697] syzkaller0: entered allmulticast mode [ 932.262731][ T6697] tipc: Resetting bearer [ 932.339097][ T6697] tipc: Disabling bearer [ 932.877324][ T6755] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 933.603551][ T6782] __nla_validate_parse: 10 callbacks suppressed [ 933.603570][ T6782] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8373'. [ 933.648520][ T6787] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 933.981318][ T6805] sctp: [Deprecated]: syz.3.8379 (pid 6805) Use of int in max_burst socket option. [ 933.981318][ T6805] Use struct sctp_assoc_value instead [ 933.998998][ T6799] netlink: 32 bytes leftover after parsing attributes in process `syz.6.8377'. [ 934.031999][ T6799] netlink: 32 bytes leftover after parsing attributes in process `syz.6.8377'. [ 934.054421][ T6809] PKCS7: Unknown OID: [4] (bad) [ 934.065693][ T6809] PKCS7: Only support pkcs7_signedData type [ 934.070210][ T6807] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8380'. [ 934.753219][ T6839] veth1_to_bridge: entered allmulticast mode [ 934.831072][ T6850] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8392'. [ 934.932998][ T6855] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8393'. [ 935.152315][ T6829] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 935.189579][ T6829] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 935.288766][ T6838] lo speed is unknown, defaulting to 1000 [ 935.313375][ T6862] lo speed is unknown, defaulting to 1000 [ 935.321805][ T6838] wg1 speed is unknown, defaulting to 1000 [ 935.508738][ T6829] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 935.590757][ T6829] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 935.848389][ T6829] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 935.868355][ T6829] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 935.969950][ T6878] netlink: 44 bytes leftover after parsing attributes in process `syz.6.8397'. [ 935.988849][ T6874] lo speed is unknown, defaulting to 1000 [ 935.999090][ T6888] netlink: 'syz.4.8401': attribute type 1 has an invalid length. [ 936.103288][ T6829] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 936.117540][ T6829] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 936.160515][ T6888] 8021q: adding VLAN 0 to HW filter on device bond4 [ 936.201936][ T6862] wg1 speed is unknown, defaulting to 1000 [ 936.316269][ T6898] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8403'. [ 936.360603][ T6899] netlink: 9 bytes leftover after parsing attributes in process `syz.5.8403'. [ 936.390824][ T6897] xt_CT: You must specify a L4 protocol and not use inversions on it [ 936.399273][ T6899] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8403'. [ 936.731968][ T6874] wg1 speed is unknown, defaulting to 1000 [ 936.740849][T13177] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 936.769053][T13177] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 936.805028][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5350 ms [ 936.813085][ C0] lec:lec_tx_timeout: lec0 [ 936.899783][T13173] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 936.920063][T13173] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 936.962857][ T6660] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 936.984017][ T6660] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 937.136391][T13175] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 937.144640][T13175] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 937.270811][ T6931] netlink: 'syz.4.8410': attribute type 3 has an invalid length. [ 937.280205][ T6931] netlink: 'syz.4.8410': attribute type 1 has an invalid length. [ 937.297752][ T6931] netlink: 'syz.4.8410': attribute type 2 has an invalid length. [ 937.598399][ T6949] netlink: 'syz.4.8415': attribute type 2 has an invalid length. [ 938.352524][ T6979] lo speed is unknown, defaulting to 1000 [ 938.363915][ T6979] wg1 speed is unknown, defaulting to 1000 [ 938.849917][ T7008] bond7: Unable to set up delay as MII monitoring is disabled [ 938.881106][ T7008] bond7 (unregistering): Released all slaves [ 939.123165][ T7032] netlink: 'syz.3.8434': attribute type 1 has an invalid length. [ 939.218899][ T7032] 8021q: adding VLAN 0 to HW filter on device bond7 [ 939.502298][ T7049] syzkaller1: entered promiscuous mode [ 939.504741][ T7050] __nla_validate_parse: 11 callbacks suppressed [ 939.504758][ T7050] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8438'. [ 939.510154][ T7049] syzkaller1: entered allmulticast mode [ 939.568454][ T7050] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8438'. [ 939.769755][ T7053] netlink: 64 bytes leftover after parsing attributes in process `syz.1.8440'. [ 939.770262][ T7056] netlink: 64 bytes leftover after parsing attributes in process `syz.1.8440'. [ 939.890277][ T7062] netlink: 'syz.1.8442': attribute type 1 has an invalid length. [ 939.905992][ T7062] netlink: 248 bytes leftover after parsing attributes in process `syz.1.8442'. [ 940.247860][ T7068] lo speed is unknown, defaulting to 1000 [ 940.266153][ T7068] wg1 speed is unknown, defaulting to 1000 [ 940.301377][ T7083] tipc: Enabled bearer , priority 0 [ 940.317712][ T7083] syzkaller0: entered promiscuous mode [ 940.337242][ T7083] syzkaller0: entered allmulticast mode [ 940.430862][ T7083] tipc: Resetting bearer [ 940.495747][ T7083] tipc: Disabling bearer [ 940.500501][ T7093] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8449'. [ 940.631298][ T7093] 8021q: adding VLAN 0 to HW filter on device bond5 [ 940.662813][ T7089] tipc: Resetting bearer [ 940.680424][ T7089] bond5: (slave macvlan1): Enslaving as an active interface with an up link [ 940.701453][ T7090] bond5 (unregistering): (slave macvlan1): Releasing backup interface [ 940.713551][ T7090] tipc: Resetting bearer [ 940.723772][ T7090] tipc: Resetting bearer [ 940.736642][ T7090] bond5 (unregistering): Released all slaves [ 940.872000][ T7103] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8453'. [ 940.894026][ T7103] netlink: 52 bytes leftover after parsing attributes in process `syz.4.8453'. [ 941.043627][ T7111] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8456'. [ 941.053794][ T7109] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8455'. [ 941.670545][ T7139] vlan3: entered allmulticast mode [ 941.678398][ T7139] macvtap0: entered allmulticast mode [ 944.864487][ T7151] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 945.731308][ T7255] team0: entered promiscuous mode [ 945.731396][ T7284] __nla_validate_parse: 6 callbacks suppressed [ 945.731409][ T7284] netlink: 165 bytes leftover after parsing attributes in process `syz.6.8491'. [ 945.736717][ T7255] team_slave_0: entered promiscuous mode [ 945.736860][ T7255] team_slave_1: entered promiscuous mode [ 945.736978][ T7255] dummy0: entered promiscuous mode [ 945.738203][ T7255] 8021q: adding VLAN 0 to HW filter on device team0 [ 945.782761][ T7255] netlink: 40 bytes leftover after parsing attributes in process `syz.5.8487'. [ 945.792228][ T7255] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 945.821704][ T7262] gretap0: entered promiscuous mode [ 945.830008][ T7262] vlan4: entered promiscuous mode [ 945.852460][ T7256] syzkaller0: entered promiscuous mode [ 945.858667][ T7256] syzkaller0: entered allmulticast mode [ 945.889253][ T7290] netlink: 140 bytes leftover after parsing attributes in process `syz.5.8493'. [ 945.910963][ T7290] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 945.951609][ T7288] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8492'. [ 945.961704][ T7287] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8492'. [ 946.047862][ T7298] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8493'. [ 946.058650][ T7298] openvswitch: netlink: Flow key attr not present in new flow. [ 946.409894][ T7319] xt_TCPMSS: Only works on TCP SYN packets [ 946.799646][ T7333] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8501'. [ 946.887338][ T7333] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 946.894619][ T7333] IPv6: NLM_F_CREATE should be set when creating new route [ 946.956112][ T7333] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 946.963413][ T7333] IPv6: NLM_F_CREATE should be set when creating new route [ 947.090504][ T7333] bond8: Removing last ns target with arp_interval on [ 947.610818][ T7356] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8507'. [ 947.610866][ T7357] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8507'. [ 947.772181][ T7363] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8510'. [ 948.848444][ T7419] netlink: 'syz.1.8527': attribute type 7 has an invalid length. [ 948.933575][ T7424] xt_limit: Overflow, try lower: 268435456/134217728 [ 948.941425][ T7426] m1Ie5nè‹Ò: entered promiscuous mode [ 948.952214][ T7426] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 948.979753][ T7426] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 948.988163][ T7426] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 949.002506][ T7426] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 949.013777][ T7426] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 949.194195][ T7443] netlink: 'syz.3.8533': attribute type 1 has an invalid length. [ 949.267284][ T7443] 8021q: adding VLAN 0 to HW filter on device bond9 [ 949.323684][ T7443] vlan0: entered allmulticast mode [ 949.335514][ T7443] bond9: entered allmulticast mode [ 949.419515][ T7443] bond9: (slave gretap2): making interface the new active one [ 949.428978][ T7443] gretap2: entered allmulticast mode [ 949.441367][ T7443] bond9: (slave gretap2): Enslaving as an active interface with an up link [ 949.514973][ T7463] netlink: 'syz.6.8537': attribute type 3 has an invalid length. [ 950.029302][T15707] lec:lec_start_xmit: lec0:No lecd attached [ 950.742780][ T7498] tipc: Enabled bearer , priority 0 [ 950.764622][ T7498] sctp: [Deprecated]: syz.3.8547 (pid 7498) Use of struct sctp_assoc_value in delayed_ack socket option. [ 950.764622][ T7498] Use struct sctp_sack_info instead [ 950.816696][ T7500] syzkaller0: entered promiscuous mode [ 950.831588][ T7500] syzkaller0: entered allmulticast mode [ 950.908818][ T7500] sctp: [Deprecated]: syz.3.8547 (pid 7500) Use of struct sctp_assoc_value in delayed_ack socket option. [ 950.908818][ T7500] Use struct sctp_sack_info instead [ 951.117786][ T7517] __nla_validate_parse: 11 callbacks suppressed [ 951.117805][ T7517] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8552'. [ 951.196912][ T7517] bond2: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 951.233062][ T7517] bond2 (unregistering): Released all slaves [ 951.333261][ T7517] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8552'. [ 951.397028][ T7517] bond2: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 951.411030][ T7517] bond2 (unregistering): Released all slaves [ 951.471027][ T7517] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8552'. [ 951.507763][ T7517] bond2: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 951.537685][ T7517] bond2 (unregistering): Released all slaves [ 951.592721][ T7497] tipc: Resetting bearer [ 951.633925][ T7517] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8552'. [ 951.688494][ T7497] tipc: Disabling bearer [ 951.726974][ T7525] lo speed is unknown, defaulting to 1000 [ 951.764087][ T7517] bond2: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 951.816716][ T7517] bond2 (unregistering): Released all slaves [ 951.915497][ T7525] wg1 speed is unknown, defaulting to 1000 [ 952.289449][ T7541] lo speed is unknown, defaulting to 1000 [ 952.346840][ T7542] lo speed is unknown, defaulting to 1000 [ 952.397620][ T7541] wg1 speed is unknown, defaulting to 1000 [ 952.764605][ T7565] ip6gre1: entered promiscuous mode [ 952.775224][ T7565] ip6gre1: entered allmulticast mode [ 952.842131][ T7542] wg1 speed is unknown, defaulting to 1000 [ 952.894407][ T7568] tipc: Enabling of bearer rejected, failed to enable media [ 952.919559][ T7568] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8566'. [ 953.293316][ T7582] syzkaller0: entered promiscuous mode [ 953.299952][ T7582] syzkaller0: entered allmulticast mode [ 953.313233][ T7582] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8570'. [ 953.323076][ T7582] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8570'. [ 953.334732][ T7582] 0: reclassify loop, rule prio 0, protocol 800 [ 954.023553][T17130] hsr0: entered promiscuous mode [ 954.150419][ T7594] netlink: 16 bytes leftover after parsing attributes in process `syz.6.8573'. [ 954.318436][ T7605] netlink: 'syz.1.8576': attribute type 1 has an invalid length. [ 954.373185][ T7609] netlink: 44 bytes leftover after parsing attributes in process `syz.1.8576'. [ 954.438037][ T7605] 8021q: adding VLAN 0 to HW filter on device bond5 [ 954.467794][ T7614] bridge5: entered promiscuous mode [ 954.473130][ T7614] bridge5: entered allmulticast mode [ 954.498794][ T7614] team0: Port device bridge5 added [ 954.544163][ T7614] bridge0: port 1(team0) entered blocking state [ 954.588028][ T7614] bridge0: port 1(team0) entered disabled state [ 954.601562][ T7615] xt_CT: No such helper "snmp_trap" [ 954.613868][ T7614] team0: entered allmulticast mode [ 954.642647][ T7614] team0: entered promiscuous mode [ 954.902838][ T7631] bond1: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 954.928533][ T7631] bond1 (unregistering): Released all slaves [ 954.935547][ T7633] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8584'. [ 955.011205][ T7636] TC_ACT_REPEAT abuse ? [ 955.498736][ T7652] syzkaller0: entered promiscuous mode [ 955.504718][ T7652] syzkaller0: entered allmulticast mode [ 955.765140][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5730 ms [ 955.773215][ C0] lec:lec_tx_timeout: lec0 [ 955.797970][ T7663] netlink: 'syz.1.8595': attribute type 2 has an invalid length. [ 955.977463][T13177] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 955.989706][T13177] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 956.003088][T13177] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 956.023797][T13177] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 956.152514][ T7680] netlink: 'syz.1.8603': attribute type 1 has an invalid length. [ 956.191585][ T7680] bond6: entered promiscuous mode [ 956.199192][ T7680] 8021q: adding VLAN 0 to HW filter on device bond6 [ 956.220421][ T7680] macsec0: entered allmulticast mode [ 956.228965][ T7680] veth1_macvtap: entered allmulticast mode [ 956.237745][ T7680] macsec0: left allmulticast mode [ 956.248279][ T7680] veth1_macvtap: left allmulticast mode [ 956.316812][ T7693] __nla_validate_parse: 7 callbacks suppressed [ 956.316831][ T7693] netlink: 96 bytes leftover after parsing attributes in process `syz.1.8603'. [ 956.360708][ T7692] netlink: 'syz.6.8606': attribute type 4 has an invalid length. [ 956.409591][ T7680] vlan0: entered allmulticast mode [ 956.428971][ T7680] bond6: entered allmulticast mode [ 956.477126][ T7694] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8605'. [ 956.508078][ T7680] bond6: (slave bridge7): making interface the new active one [ 956.525726][ T7680] bridge7: entered promiscuous mode [ 956.531296][ T7680] bridge7: entered allmulticast mode [ 956.547219][ T7680] bond6: (slave bridge7): Enslaving as an active interface with an up link [ 956.840552][ T7715] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8610'. [ 957.032022][ T7723] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8611'. [ 957.044223][ T7723] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8611'. [ 957.123130][ T7723] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8611'. [ 957.156926][ T7723] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8611'. [ 957.324362][ T7740] netlink: 64 bytes leftover after parsing attributes in process `syz.3.8614'. [ 957.416989][ T7723] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8611'. [ 957.443507][ T7723] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8611'. [ 957.676027][ T7754] veth5: entered promiscuous mode [ 957.748075][ T7753] syzkaller1: entered promiscuous mode [ 957.772076][ T7753] syzkaller1: entered allmulticast mode [ 957.804441][ T7767] dvmrp1: entered allmulticast mode [ 957.813336][ T7767] dvmrp1: left allmulticast mode [ 957.869063][ T7767] x_tables: duplicate underflow at hook 2 [ 958.281062][ T7786] netem: change failed [ 958.939882][ T7831] block nbd3: Unsupported socket: should be TCP or UNIX. [ 959.183196][ T7842] tipc: New replicast peer: 255.255.255.255 [ 959.190440][ T7842] tipc: Enabled bearer , priority 10 [ 959.197894][ T7849] tipc: Disabling bearer [ 959.837710][ T7881] netlink: 'syz.1.8645': attribute type 1 has an invalid length. [ 959.900031][ T7881] veth3: entered allmulticast mode [ 959.919624][ T7881] bond7: (slave veth3): Enslaving as a backup interface with a down link [ 959.993734][ T7890] batadv_slave_0: entered promiscuous mode [ 960.069495][ T7888] batadv_slave_0: left promiscuous mode [ 961.342490][ T7934] __nla_validate_parse: 8 callbacks suppressed [ 961.342510][ T7934] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8659'. [ 961.379828][ T7934] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8659'. [ 961.526560][ T7937] FAULT_INJECTION: forcing a failure. [ 961.526560][ T7937] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 961.543219][ T7937] CPU: 0 UID: 0 PID: 7937 Comm: syz.3.8660 Not tainted syzkaller #0 PREEMPT(full) [ 961.543245][ T7937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 961.543256][ T7937] Call Trace: [ 961.543263][ T7937] [ 961.543271][ T7937] dump_stack_lvl+0xe8/0x150 [ 961.543304][ T7937] should_fail_ex+0x412/0x560 [ 961.543341][ T7937] _copy_to_user+0x31/0xb0 [ 961.543363][ T7937] bpf_test_finish+0x53c/0x6b0 [ 961.543384][ T7937] ? slab_build_skb+0x52/0x410 [ 961.543410][ T7937] ? __pfx_bpf_test_finish+0x10/0x10 [ 961.543426][ T7937] ? eth_type_trans+0x348/0x7e0 [ 961.543455][ T7937] bpf_prog_test_run_skb+0x1250/0x2260 [ 961.543497][ T7937] ? __fget_files+0x3a0/0x420 [ 961.543516][ T7937] ? __fget_files+0x2a/0x420 [ 961.543540][ T7937] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 961.543560][ T7937] bpf_prog_test_run+0x2c7/0x340 [ 961.543590][ T7937] __sys_bpf+0x643/0x950 [ 961.543616][ T7937] ? __pfx___sys_bpf+0x10/0x10 [ 961.543655][ T7937] ? ksys_write+0x242/0x270 [ 961.543680][ T7937] ? __pfx_ksys_write+0x10/0x10 [ 961.543708][ T7937] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 961.543727][ T7937] __x64_sys_bpf+0x7c/0x90 [ 961.543749][ T7937] do_syscall_64+0x15f/0xf80 [ 961.543772][ T7937] ? trace_irq_disable+0x3b/0x140 [ 961.543793][ T7937] ? clear_bhb_loop+0x40/0x90 [ 961.543813][ T7937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 961.543830][ T7937] RIP: 0033:0x7fbb0d59cdd9 [ 961.543846][ T7937] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 961.543861][ T7937] RSP: 002b:00007fbb0e48b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 961.543880][ T7937] RAX: ffffffffffffffda RBX: 00007fbb0d815fa0 RCX: 00007fbb0d59cdd9 [ 961.543892][ T7937] RDX: 0000000000000050 RSI: 00002000000000c0 RDI: 000000000000000a [ 961.543902][ T7937] RBP: 00007fbb0e48b090 R08: 0000000000000000 R09: 0000000000000000 [ 961.543912][ T7937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 961.543922][ T7937] R13: 00007fbb0d816038 R14: 00007fbb0d815fa0 R15: 00007ffe05d66418 [ 961.543952][ T7937] [ 961.974718][ T7945] lo speed is unknown, defaulting to 1000 [ 962.007156][ T7945] wg1 speed is unknown, defaulting to 1000 [ 962.019447][ T7947] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 962.097342][ T3310] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 962.114711][ T3310] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 962.128888][ T3310] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 962.148441][ T3310] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 962.157234][ T3310] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 962.228383][ T7954] netlink: 'syz.6.8665': attribute type 3 has an invalid length. [ 962.244406][ T7949] lo speed is unknown, defaulting to 1000 [ 962.270346][ T7954] netlink: 'syz.6.8665': attribute type 3 has an invalid length. [ 962.302219][ T7954] netlink: 16 bytes leftover after parsing attributes in process `syz.6.8665'. [ 962.563814][ T7949] wg1 speed is unknown, defaulting to 1000 [ 962.750648][ T7978] netlink: 248 bytes leftover after parsing attributes in process `syz.6.8670'. [ 962.849263][ T7988] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8674'. [ 963.173221][ T7980] lo speed is unknown, defaulting to 1000 [ 963.243573][ T7980] wg1 speed is unknown, defaulting to 1000 [ 963.666110][ T7949] chnl_net:caif_netlink_parms(): no params data found [ 963.917366][ T8029] netlink: 'syz.6.8683': attribute type 1 has an invalid length. [ 963.948634][ T8029] netlink: 4320 bytes leftover after parsing attributes in process `syz.6.8683'. [ 964.245599][ T5851] Bluetooth: hci3: command tx timeout [ 964.255732][ T7952] Bluetooth: hci1: command 0x080f tx timeout [ 964.309701][ T7949] bridge0: port 1(bridge_slave_0) entered blocking state [ 964.326263][ T7949] bridge0: port 1(bridge_slave_0) entered disabled state [ 964.337539][ T7949] bridge_slave_0: entered allmulticast mode [ 964.349168][ T7949] bridge_slave_0: entered promiscuous mode [ 964.369623][ T7949] bridge0: port 2(bridge_slave_1) entered blocking state [ 964.379021][ T7949] bridge0: port 2(bridge_slave_1) entered disabled state [ 964.389473][ T7949] bridge_slave_1: entered allmulticast mode [ 964.402105][ T7949] bridge_slave_1: entered promiscuous mode [ 964.537505][ T7949] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 964.553635][ T7949] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 964.684144][ T7949] team0: Port device team_slave_0 added [ 964.694153][ T7949] team0: Port device team_slave_1 added [ 964.752508][ T7949] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 964.762693][ T7949] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 964.790531][ T7949] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 964.808061][ T7949] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 964.815838][ T7949] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 964.821055][ T8055] netlink: 'syz.6.8689': attribute type 3 has an invalid length. [ 964.842089][ T7949] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 964.863110][ T8055] netlink: 'syz.6.8689': attribute type 1 has an invalid length. [ 964.876219][ T8055] netlink: 232 bytes leftover after parsing attributes in process `syz.6.8689'. [ 964.931337][ T7949] hsr_slave_0: entered promiscuous mode [ 964.941488][ T7949] hsr_slave_1: entered promiscuous mode [ 964.971988][ T7949] debugfs: 'hsr0' already exists in 'hsr' [ 964.983074][ T7949] Cannot create hsr debugfs directory [ 965.311749][ T7949] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 965.323889][ T7949] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 965.332374][ T7949] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 965.341955][ T7949] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 965.349996][ T7949] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 965.360355][ T7949] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 965.378936][ T7949] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 965.389069][ T7949] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 965.501722][ T7949] 8021q: adding VLAN 0 to HW filter on device bond0 [ 965.526339][ T7949] 8021q: adding VLAN 0 to HW filter on device team0 [ 965.543929][T13198] bridge0: port 1(bridge_slave_0) entered blocking state [ 965.551131][T13198] bridge0: port 1(bridge_slave_0) entered forwarding state [ 965.569930][T13198] bridge0: port 2(bridge_slave_1) entered blocking state [ 965.577157][T13198] bridge0: port 2(bridge_slave_1) entered forwarding state [ 965.874292][ T7949] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 965.984346][ T8097] atomic_op ffff88805e209198 conn xmit_atomic 0000000000000000 [ 966.129988][ T8105] nbd: must specify an index to disconnect [ 966.253541][ T7949] veth0_vlan: entered promiscuous mode [ 966.261178][ C0] vcan0: j1939_tp_rxtimer: 0xffff888056ce0c00: rx timeout, send abort [ 966.270229][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888056ce0c00: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 966.281878][ T7949] veth1_vlan: entered promiscuous mode [ 966.328140][ T3310] Bluetooth: hci3: command tx timeout [ 966.373749][ T7949] veth0_macvtap: entered promiscuous mode [ 966.408585][ T7949] veth1_macvtap: entered promiscuous mode [ 966.471357][ T7949] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 966.502375][ T7949] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 966.530909][ T6660] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 966.549137][ T8125] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8707'. [ 966.559833][ T6660] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 966.574414][ T6660] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 966.587170][ T6660] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 966.596644][ T8125] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8707'. [ 966.606987][ T8125] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8707'. [ 966.619511][ T8125] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8707'. [ 966.780930][ T8132] netlink: 'syz.6.8709': attribute type 11 has an invalid length. [ 966.921250][ T6660] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 966.947485][ T6660] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 966.991900][ T8143] 8021q: adding VLAN 0 to HW filter on device team0 [ 967.009763][ T8143] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 967.087278][T13177] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 967.108074][T13177] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 967.308553][ T8150] lo speed is unknown, defaulting to 1000 [ 967.345914][ T8150] wg1 speed is unknown, defaulting to 1000 [ 967.435747][ T8158] lo speed is unknown, defaulting to 1000 [ 967.796537][ T8168] lo speed is unknown, defaulting to 1000 [ 967.808209][ T8158] wg1 speed is unknown, defaulting to 1000 [ 967.818054][ T8170] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8718'. [ 968.149767][ T8175] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8720'. [ 968.191871][ T8168] wg1 speed is unknown, defaulting to 1000 [ 968.406032][ T3310] Bluetooth: hci3: command tx timeout [ 968.613593][ T8187] bridge9: the hash_elasticity option has been deprecated and is always 16 [ 968.662376][ T8187] bridge9: entered allmulticast mode [ 968.754027][ T8181] netlink: 'syz.3.8722': attribute type 9 has an invalid length. [ 968.768275][ T8181] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8722'. [ 968.788307][ T8200] geneve2: entered promiscuous mode [ 968.993755][ T8212] netlink: 'syz.7.8727': attribute type 1 has an invalid length. [ 969.213279][ T8213] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 969.261522][ T8224] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input10 [ 969.367548][ T8226] Oops: general protection fault, probably for non-canonical address 0xdffffc000000005e: 0000 [#1] SMP KASAN PTI [ 969.379534][ T8226] KASAN: null-ptr-deref in range [0x00000000000002f0-0x00000000000002f7] [ 969.387970][ T8226] CPU: 1 UID: 0 PID: 8226 Comm: syz.3.8730 Not tainted syzkaller #0 PREEMPT(full) [ 969.397264][ T8226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 969.407336][ T8226] RIP: 0010:__mutex_lock+0x14e/0x1550 [ 969.412705][ T8226] Code: e0 33 4c 9a 48 c1 e8 03 42 0f b6 04 30 84 c0 0f 85 3e 12 00 00 83 3d b0 d9 91 0e 00 75 23 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 30 00 74 05 e8 d6 b1 76 f6 4d 39 64 24 58 0f 85 6a 11 00 [ 969.432302][ T8226] RSP: 0000:ffffc9000df5f7c0 EFLAGS: 00010202 [ 969.438364][ T8226] RAX: 000000000000005e RBX: 0000000000000000 RCX: ffffffff9a4c3303 [ 969.446324][ T8226] RDX: 0000000000000000 RSI: ffffffff8e24f3ee RDI: 00000000000002f0 [ 969.454278][ T8226] RBP: ffffc9000df5f980 R08: ffffc9000df5f8e7 R09: 0000000000000000 [ 969.462235][ T8226] R10: ffffc9000df5f8c0 R11: fffff52001bebf1d R12: 0000000000000298 [ 969.470203][ T8226] R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff92001bebf10 [ 969.478196][ T8226] FS: 00007fbb0e46a6c0(0000) GS:ffff888125313000(0000) knlGS:0000000000000000 [ 969.487118][ T8226] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 969.493688][ T8226] CR2: 00007f94921344ac CR3: 0000000089a96000 CR4: 00000000003526f0 [ 969.501649][ T8226] Call Trace: [ 969.504913][ T8226] [ 969.507836][ T8226] ? wake_up_q+0x99/0xd0 [ 969.512066][ T8226] ? preempt_schedule_thunk+0x16/0x30 [ 969.517424][ T8226] ? preempt_schedule_common+0x82/0xd0 [ 969.522875][ T8226] ? l2cap_unregister_user+0x36/0x170 [ 969.528235][ T8226] ? __pfx___mutex_lock+0x10/0x10 [ 969.533268][ T8226] ? __up_read+0x2fe/0x6b0 [ 969.537672][ T8226] ? __pfx___up_read+0x10/0x10 [ 969.542424][ T8226] ? hidp_session_find+0xce/0x100 [ 969.547436][ T8226] l2cap_unregister_user+0x36/0x170 [ 969.552621][ T8226] hidp_connection_del+0xb0/0x170 [ 969.557630][ T8226] hidp_sock_ioctl+0x3ab/0x650 [ 969.562388][ T8226] ? __pfx_hidp_sock_ioctl+0x10/0x10 [ 969.567673][ T8226] ? do_vfs_ioctl+0x1166/0x1530 [ 969.572518][ T8226] sock_do_ioctl+0x101/0x320 [ 969.577098][ T8226] ? __pfx_sock_do_ioctl+0x10/0x10 [ 969.582199][ T8226] ? do_futex+0x395/0x420 [ 969.586516][ T8226] sock_ioctl+0x5c6/0x7f0 [ 969.590836][ T8226] ? __pfx_sock_ioctl+0x10/0x10 [ 969.595676][ T8226] ? __fget_files+0x2a/0x420 [ 969.600258][ T8226] ? __fget_files+0x3a0/0x420 [ 969.604921][ T8226] ? __fget_files+0x2a/0x420 [ 969.609497][ T8226] ? bpf_lsm_file_ioctl+0x9/0x20 [ 969.614420][ T8226] ? __pfx_sock_ioctl+0x10/0x10 [ 969.619259][ T8226] __se_sys_ioctl+0xfc/0x170 [ 969.623835][ T8226] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 969.629891][ T8226] do_syscall_64+0x15f/0xf80 [ 969.634475][ T8226] ? trace_irq_disable+0x3b/0x140 [ 969.639490][ T8226] ? clear_bhb_loop+0x40/0x90 [ 969.644155][ T8226] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 969.650032][ T8226] RIP: 0033:0x7fbb0d59cdd9 [ 969.654435][ T8226] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 969.674028][ T8226] RSP: 002b:00007fbb0e46a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 969.682427][ T8226] RAX: ffffffffffffffda RBX: 00007fbb0d816090 RCX: 00007fbb0d59cdd9 [ 969.690382][ T8226] RDX: 0000200000000000 RSI: 00000000400448c9 RDI: 0000000000000007 [ 969.698337][ T8226] RBP: 00007fbb0d632d69 R08: 0000000000000000 R09: 0000000000000000 [ 969.706291][ T8226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 969.714267][ T8226] R13: 00007fbb0d816128 R14: 00007fbb0d816090 R15: 00007ffe05d66418 [ 969.722235][ T8226] [ 969.725260][ T8226] Modules linked in: [ 969.733235][ T8226] ---[ end trace 0000000000000000 ]--- [ 969.744551][ T8226] RIP: 0010:__mutex_lock+0x14e/0x1550 [ 969.750314][ T8226] Code: e0 33 4c 9a 48 c1 e8 03 42 0f b6 04 30 84 c0 0f 85 3e 12 00 00 83 3d b0 d9 91 0e 00 75 23 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 30 00 74 05 e8 d6 b1 76 f6 4d 39 64 24 58 0f 85 6a 11 00 [ 969.771631][ T8226] RSP: 0000:ffffc9000df5f7c0 EFLAGS: 00010202 [ 969.800221][ T8226] RAX: 000000000000005e RBX: 0000000000000000 RCX: ffffffff9a4c3303 [ 969.809357][ T8226] RDX: 0000000000000000 RSI: ffffffff8e24f3ee RDI: 00000000000002f0 [ 969.813107][T13198] netdevsim netdevsim7 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 969.817588][ T8226] RBP: ffffc9000df5f980 R08: ffffc9000df5f8e7 R09: 0000000000000000 [ 969.817607][ T8226] R10: ffffc9000df5f8c0 R11: fffff52001bebf1d R12: 0000000000000298 [ 969.817621][ T8226] R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff92001bebf10 [ 969.817635][ T8226] FS: 00007fbb0e46a6c0(0000) GS:ffff888125213000(0000) knlGS:0000000000000000 [ 969.817653][ T8226] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 969.817666][ T8226] CR2: 00007f5b3544f0d1 CR3: 0000000089a96000 CR4: 00000000003526f0 [ 969.817698][ T8226] Kernel panic - not syncing: Fatal exception [ 969.818099][ T8226] Kernel Offset: disabled