last executing test programs: 13m48.36413656s ago: executing program 32 (id=4512): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}, [@call={0x85, 0x0, 0x0, 0x87}, @printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x3, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x3}, 0x50) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000bd20020000000000dbaaf8fff1000000bf8200000000000007080000f8ffffffbfa420000000000007090000f0ffffffc70200000800000018220000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000004608f1ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f0000000700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000740)={r3, 0x20, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=r4, 0x4) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000840)=@o_path={&(0x7f0000000800)='./file0\x00', 0x0, 0x4008, r0}, 0x18) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0x13, &(0x7f00000000c0)=0x6, 0x4) bind$packet(r7, &(0x7f0000000ac0)={0x11, 0x0, 0x1, 0x1, 0x0, 0x6, @random="001122334455"}, 0x14) setsockopt$packet_tx_ring(r7, 0x107, 0xd, &(0x7f0000000d00)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r7, 0x0) write(r7, &(0x7f0000000d40)="01", 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0xa, 0x1c, &(0x7f0000000980)=ANY=[@ANYBLOB="18080000b0ff0011000000000000000118110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0920000000000035080100000040009500000000000000b7020000000000007b9af8fd000000007509fdff030000007baaf0ff00000000bf2700000000000007080000fffdffffbfa400000000000007040000f0ffffff740200000800000018220000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000006e98f0ff000000008d080000000000008500000005110000b70000000000000095"], &(0x7f0000000a80)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000ac0), 0x200002, 0x0) r9 = openat$cgroup_ro(r8, &(0x7f0000000b00)='cpu.stat\x00', 0x275a, 0x0) close(r9) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000b40)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@arena={0x21, 0x0, 0x0, 0x1d, 0x400, r10, 0x8658, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c40)=@bpf_lsm={0x1d, 0x23, &(0x7f0000001000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}, @alu={0x4, 0x1, 0x3, 0x1, 0x9, 0x6, 0x4}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffa}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r11}}]}, &(0x7f0000000600)='GPL\x00', 0xe, 0x4d, &(0x7f0000001140)=""/77, 0x40f00, 0x8, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000680)={0x5, 0xd, 0xa, 0x81}, 0x10, r4, 0x0, 0x4, &(0x7f0000000bc0)=[r5, r6, r11, r5, r0, r10], &(0x7f0000000c00)=[{0x1, 0x2, 0x8}, {0x4, 0x2, 0xb, 0x9}, {0x2, 0x5, 0x6, 0x9}, {0x2, 0x1, 0x8, 0x8}], 0x10, 0x3}, 0x94) r12 = socket(0x2d, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r12, &(0x7f0000000d80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000e00)={0x0}, 0x1, 0x0, 0x0, 0xc0}, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r12, 0x0, 0x83, &(0x7f0000000f40)={'filter\x00', 0x0, 0x3, 0x84, [0x3, 0xfffffffffffffff7, 0x3, 0x1691, 0x8, 0x1], 0x2, &(0x7f0000000e40)=[{}, {}], &(0x7f0000000e80)=""/132}, &(0x7f0000000fc0)=0x78) 9m21.804919143s ago: executing program 5 (id=5789): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0x1, 0x500}, 0x48) mmap(&(0x7f0000fa3000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000100)={0x11c, 0x31, 0x1, 0x0, 0x0, "", [@nested={0x10b, 0x3, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64}, @typed={0x14, 0x4, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348f46c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767fc734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc3f6ae1d023b34cdb85817c8a66c29be82fd3f"]}]}, 0x11c}], 0x1, 0x0, 0x0, 0x1}, 0x20000000) 9m20.939104442s ago: executing program 5 (id=5793): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x70bd29, 0x0, {0x2, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x3100}, [@RTA_OIF={0x8}, @RTA_IP_PROTO={0x5, 0x1b, 0x6}]}, 0x2c}}, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000700)={{{@in6=@remote, @in=@multicast1, 0xfffd, 0x0, 0x4e20, 0x0, 0x11ae7416d3628419, 0x0, 0x0, 0x2c}, {0x0, 0x4, 0x800000000001, 0x0, 0x0, 0x9}, {0x1ff, 0xffffffffe, 0x4053e5, 0x20}, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2}, {{@in=@empty, 0x1, 0x3c}, 0xb, @in6=@private0, 0x3502, 0x1, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000900), 0xfffffffffffffffc) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x9, &(0x7f0000000640)=ANY=[@ANYBLOB="180800000000000000000000000000008510000005000000850000000f0000007c8000000000000018000000fdffffff0000000000000000950000000000000095"], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) write(r1, &(0x7f0000000140)="4c00000011000f14001600020000020002000000200000", 0x17) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x1c, &(0x7f0000000340)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7060000000000008500000005000000bf0900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b5090000000000007baaf0ff00000000ae8900000000000007080000f8ffffffbf8400000000000007040000f0ffffffc70200000800000018260000", @ANYRES32=r5, @ANYBLOB="0000000002000000b7050000080000004608f0ff76000000bf980000000000005608f8ffffff00008500000007000000b70000000000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000480)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter={0x1e, 0x8001, 0xfffff6ca, 0x101, 0x10444, r5, 0x400, '\x00', r4, r7, 0x0, 0x5, 0x1, 0xa, @void, @value, @value=r3}, 0x50) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000540)={r8, 0x2, 0x4, 0x5}) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r10, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000880)={0x68, 0x26, 0x1, 0x0, 0x4, "", [@nested={0x55, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x3}, @generic="971ed308218750518325cac8c266a8c6efe4fbf992916db05a05ae089f966b16abb07a8f70b234f5fec1d34930936f49dfdd8557c4137d225914bb402fb719c9ab65dae93b"]}]}, 0x68}], 0x1}, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x71, 0x1, 0x0, 0x25dfdbff, {0x7, 0x0, 0x0, r4}}, 0x18}}, 0x0) 9m19.193069458s ago: executing program 5 (id=5801): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x6, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0xb, 0x9, 0x0, 0x1, 0x20000000}, {0x66, 0x0, 0x0, 0x256c6c64}}, [@printk={@lld, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x5, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x15}}], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 9m18.932978536s ago: executing program 5 (id=5804): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000d00)=ANY=[@ANYBLOB="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"], 0x118}}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRES16=0xffffffffffffffff, @ANYBLOB="010000000000fcdbdf251200000018000180140002007665746830000000000000000800000008"], 0x3c}, 0x1, 0x0, 0x0, 0x40080}, 0x2004c0a0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x4e23, 0x0, @private2}]}, &(0x7f0000000280)=0x10) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f00000002c0)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000540)={r5, @in6={{0xa, 0x4e21, 0x2, @empty, 0x91f8}}, 0x0, 0x0, 0x0, 0x0, 0xd4, 0x1000}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, &(0x7f0000000600)={r5, @in6={{0xa, 0x4e23, 0x440, @private2, 0x4}}, 0x5b, 0x4}, 0x90) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000340)=@assoc_value={r3, 0x5}, 0x8) r6 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYRESOCT=0x0, @ANYRESHEX=0x0, @ANYRES32=r1, @ANYBLOB="ef367a02242dc3863def093fa538d2e8b00ee9d9b0370fe4a067bb6dcbd72629ada20a916598e6c67ec6b6b6dfc449"], 0x2c}}, 0x0) sendto$inet6(r6, &(0x7f0000000140)='s', 0x1, 0x800, 0x0, 0x0) socket$l2tp(0x2, 0x2, 0x73) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000880)={'syzkaller0\x00', 0x7101}) r9 = socket$unix(0x1, 0x1, 0x0) r10 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000008c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) close(r7) r12 = socket(0x400000000010, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f00000009c0)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000a00)={'syzkaller0\x00', 0x0}) r14 = socket$kcm(0x11, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000ac0)=@newtfilter={0x88, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r13, {0xc}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x8001, 0x0, 0x2, 0x8, 0xffb}, 0x4, r11}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x95}, 0x8080) setsockopt$sock_attach_bpf(r14, 0x107, 0xf, &(0x7f0000000b80), 0x56) sendmsg$kcm(r14, &(0x7f0000000bc0)={&(0x7f0000000c00)=@xdp={0x2c, 0x0, r13, 0x42, 0x4000}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000cc0)="27030200dc0f14000e0003000024c1020000ff1107c2fb7fe0400018534b4f6b3d327db412f40000000000000000", 0x62}], 0x1}, 0x4005) 9m16.379905465s ago: executing program 5 (id=5816): r0 = socket$inet6(0xa, 0x2, 0x0) socket(0x840000000002, 0x3, 0xff) (async) r1 = socket(0x840000000002, 0x3, 0xff) setsockopt$inet_int(r1, 0x0, 0xd, 0x0, 0x0) (async) setsockopt$inet_int(r1, 0x0, 0xd, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3800000010003704ffffffff0000000000000000", @ANYRES32=r3, @ANYBLOB="110003000a0200001800128008000100707070000c00028008000100", @ANYRES32=r0, @ANYBLOB="9595d58f304be98d0affb016a74853561f"], 0x38}, 0x1, 0x0, 0x0, 0x40040000}, 0x4000000) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @local, @multicast1}}}], 0x20}}], 0x1, 0x4880) (async) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @local, @multicast1}}}], 0x20}}], 0x1, 0x4880) 9m15.637337587s ago: executing program 5 (id=5819): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x6) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x1c, 0x26, 0x101, 0x70bd25, 0x25dfdbfb, {0x1}, [@typed={0x5, 0x167, 0x0, 0x0, @str='\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x24008080) poll(&(0x7f0000000040), 0x0, 0x8003) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x6, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000005f000000003b8ee800850000007500000018480000fcffffff00000000000000009500000000"], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r0, 0x0, 0xfffffc3f) r3 = socket(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000380)={'NETMAP\x00'}, &(0x7f00000003c0)=0x1e) socket$can_raw(0x1d, 0x3, 0x1) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000001500010300000000000000000a00000008000200", @ANYRES16=r5], 0x1c}, 0x1, 0x0, 0x0, 0x20000004}, 0x20000080) sendmsg$NLBL_UNLABEL_C_STATICADD(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x8, 0x3000000000002, 0x0, 0x80}, 0x0) unshare(0x44000080) 8m59.679555821s ago: executing program 33 (id=5819): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x6) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x1c, 0x26, 0x101, 0x70bd25, 0x25dfdbfb, {0x1}, [@typed={0x5, 0x167, 0x0, 0x0, @str='\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x24008080) poll(&(0x7f0000000040), 0x0, 0x8003) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x6, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000005f000000003b8ee800850000007500000018480000fcffffff00000000000000009500000000"], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r0, 0x0, 0xfffffc3f) r3 = socket(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000380)={'NETMAP\x00'}, &(0x7f00000003c0)=0x1e) socket$can_raw(0x1d, 0x3, 0x1) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000001500010300000000000000000a00000008000200", @ANYRES16=r5], 0x1c}, 0x1, 0x0, 0x0, 0x20000004}, 0x20000080) sendmsg$NLBL_UNLABEL_C_STATICADD(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x8, 0x3000000000002, 0x0, 0x80}, 0x0) unshare(0x44000080) 8m55.537112412s ago: executing program 3 (id=5875): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000100)=0x1, 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f00000002c0)={0x0, 0x8, 0x0, 0x0, @vifc_lcl_ifindex=0x1, @empty}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendto(r2, &(0x7f0000000300)="340000001a00010001000000000000000220000000000000000000000800030001000000080002000101010108000100e1010203", 0x34, 0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x30, r5, 0x1, 0x70bd2a, 0x1, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params, @NL80211_ATTR_MAC={0xa, 0x6, @random="0313102ed6b6"}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x7}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) syz_emit_ethernet(0x1a, &(0x7f00000004c0)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @val={@void, {0x8100, 0x3, 0x1}}, {@generic={0x8864, "11703067c7e064cc"}}}, 0x0) setsockopt$MRT_ADD_MFC(r3, 0x0, 0xcc, &(0x7f0000000340)={@loopback, @multicast1, 0x0, "4cf9463cf5f78e0c2970455235bc5da3205a45a30af3ae005466bbfe74a4c44a", 0x2, 0x0, 0x9, 0x6}, 0x3c) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080), 0x10, &(0x7f0000000240)={&(0x7f00000001c0)={0x2, 0x21, 0x6, {0x0, 0xea60}, {0x77359400}, {0x1}, 0x1, @canfd={{}, 0xf, 0x0, 0x0, 0x0, "85a1b9de3c9df470e23924ad6c8300e3d7a9e543665cb33accbd099cf19034044ecdaf3c199d18328a6cfb6327c475f20ff9a56414b42450f6b2bb4aaba71b13"}}, 0x80}, 0x1, 0x0, 0x0, 0x1}, 0x14) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x8831}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000004}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x48}, 0x1, 0x0, 0x0, 0x48890}, 0x4000) 8m54.496161681s ago: executing program 3 (id=5880): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=@newsa={0x184, 0x10, 0x633, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@multicast2}, {@in=@dev, 0x0, 0x32}, @in6=@mcast2, {0x0, 0x0, 0x400, 0x0, 0x0, 0x4, 0x10000000000}, {}, {0x1}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb-camellia-asm\x00'}}}, @algo_aead={0x4c, 0x12, @rfc4106_128={'rfc4106(gcm(aes))\x00', 0x0, 0x0, "00000000000000000000000000001a00"}}]}, 0x184}}, 0x10) 8m53.848388974s ago: executing program 3 (id=5882): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x800) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r3, 0x7d4165c9) listen(r2, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xc}}, 0x0, 0x0, 0x20, 0x0, "9c0fe2154aa786d10084ecfbe8e86f7d312fcc8fde38d5823d22fbbb55a7837e5f2329f4d662f2185f18fae43e09d661d12a01669d6eef2e4733c2c29a3c3d16ef45c7c1c8ecfcc76b47d9ab9a573f11"}, 0xd8) listen(r5, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x4e23, 0x102, @remote, 0xe3}}, 0x0, 0x0, 0x26, 0x0, "2b20a1a47cddc63b223be606d7303a4d4d11e10450d766feb63b382d54bab577021cad5de4fe7630a33b6deca160b1267ff02123bc27830000000000ffff40000000000000b5b29049cb65f00300"}, 0xd8) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000240)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a066f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0effeffe809005300fff5dd00000010000100080c10000000050000000000", 0x58}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) r7 = bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) close(r7) 8m53.439263833s ago: executing program 3 (id=5883): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x2, 0x4, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x1}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3490c}]}, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x52, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 8m52.984972956s ago: executing program 3 (id=5884): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x2, 0x4, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3507e}]}, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x52, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 8m52.480398841s ago: executing program 3 (id=5885): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000400)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) close(r5) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f00000002c0)={'syzkaller0\x00', @multicast}) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) r9 = socket$kcm(0x11, 0x3, 0x0) r10 = socket(0x400000000010, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000380)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x88, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xc, 0xfff3}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x4, 0x10000000, 0xb, 0xdc}, 0x3, r11}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x4015}, 0x40488d0) setsockopt$sock_attach_bpf(r9, 0x107, 0xf, &(0x7f0000000540), 0x56) sendmsg$kcm(r9, &(0x7f00000005c0)={&(0x7f0000000600)=@xdp={0x2c, 0x0, r8, 0x3e}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000780)="27030200dc0f14000e0003000024c1020000ff1107c2fb7fe0400018534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8080}, 0x20000000) 8m37.342590964s ago: executing program 34 (id=5885): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000400)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) close(r5) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f00000002c0)={'syzkaller0\x00', @multicast}) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) r9 = socket$kcm(0x11, 0x3, 0x0) r10 = socket(0x400000000010, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000380)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x88, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xc, 0xfff3}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x4, 0x10000000, 0xb, 0xdc}, 0x3, r11}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x4015}, 0x40488d0) setsockopt$sock_attach_bpf(r9, 0x107, 0xf, &(0x7f0000000540), 0x56) sendmsg$kcm(r9, &(0x7f00000005c0)={&(0x7f0000000600)=@xdp={0x2c, 0x0, r8, 0x3e}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000780)="27030200dc0f14000e0003000024c1020000ff1107c2fb7fe0400018534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8080}, 0x20000000) 8m23.229899396s ago: executing program 1 (id=5919): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x1c, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18080000000000003f0000000a00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000045090200000300006e00000000000000b7020000000000007b9af0ff00000000c509feff00000000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f2ff76000000bf9820000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 8m22.545072937s ago: executing program 1 (id=5922): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0x800001, 0x4) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000380)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0xd}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x11, 0x0, 0x2}}}}}}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, &(0x7f0000000200)={r3, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90) sendto$packet(0xffffffffffffffff, &(0x7f0000000400)="fffffaff4cfce911406bfbc851c5808d9db098a90a9d866e57778ff7a6aa6e13237a1812bef048445ff3287a060cd55c0b039565dc1d39a6bba485dde67f2cfce5347ac55bd471d94b3ed20e663c36ad", 0x50, 0x0, 0x0, 0x0) r4 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r4, &(0x7f0000000480)={0x0, 0x5, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={r3, @in6={{0xa, 0x4e23, 0x5, @empty, 0x2800}}, 0x3, 0x0, 0x20000, 0x81, 0x12, 0x0, 0x4}, 0x9c) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x1c, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) ioctl$XFS_IOC_FD_TO_HANDLE(r4, 0xc038586a, &(0x7f0000000640)={r1, &(0x7f0000000540)='\xaa\xaa\xaa\xaa\xaa', 0x2, &(0x7f0000000580)={@align=0x6, {0x1, 0x1, 0xffff, 0x1}}, 0xec, &(0x7f00000005c0)={@_ha_fsid}, &(0x7f0000000600)=0x1}) setsockopt$MRT_ADD_MFC_PROXY(r5, 0x0, 0xd2, &(0x7f0000000680)={@dev={0xac, 0x14, 0x14, 0x38}, @empty, 0x1, "87664e6ab6757ea4b5a4424722268544b6011de5565c3e04eb05d3fce3ea94bd", 0x6, 0x401, 0x9, 0xffffff7f}, 0x3c) 8m22.007207214s ago: executing program 1 (id=5924): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002dc0)={0x14, 0x26, 0x303, 0x70bd28, 0x25dfdbfe, {0x1f}}, 0x14}, 0x1, 0x0, 0x0, 0x4000010}, 0x24000844) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x2, &(0x7f0000000180)=@raw=[@call, @exit], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffff8a}, 0x90) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r0) 8m21.563316919s ago: executing program 1 (id=5926): r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000280)={0x1f, 0xffffffffffffffff}, 0x67) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000002c0)={0x1, &(0x7f0000000300)=[{0xfff7, 0x2, 0x4, 0xed02}]}) bind$bt_hci(r3, &(0x7f0000000340)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r3, &(0x7f0000000380)=ANY=[], 0x6) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r2, 0x4, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xb, 0x6}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x40) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5400000013000500010000000000000007000000", @ANYRES32=r5, @ANYBLOB="000000000000000034001a8008000000020000002800048024000180"], 0x54}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @dev}, 0x14) close(r0) 8m20.404645642s ago: executing program 1 (id=5929): r0 = socket(0x28, 0x1, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000780)={'sit0\x00', &(0x7f00000007c0)={'syztnl1\x00', 0x0, 0x0, 0x1100, 0x0, 0x200000, {{0x5, 0x4, 0x0, 0x1d, 0x14, 0x1, 0x0, 0x0, 0x2f, 0x0, @remote, @multicast1}}}}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$netlink(0x10, 0x3, 0x14) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) r4 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x20000, 0x0, &(0x7f0000000180)) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000001c0)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@gettclass={0x24, 0x2a, 0x2, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xb, 0xb5f2131b6d7f5437}, {0xffe0, 0xffe0}, {0x3, 0xc}}, ["", "", "", ""]}, 0x24}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x80}}, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000030500000400fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="61000100000000001400128009000100626f6e6400000000040002803f250a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x2, 0xb, 0x9, 0x8, 0x6, 0x0, 0x70bd2d, 0x5, [@sadb_lifetime={0x4, 0x3, 0x80, 0x7, 0x8, 0x6ebb}]}, 0x30}}, 0x4040800) getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$kcm(r1, &(0x7f0000000740)={&(0x7f0000000480)=@caif=@dgm={0x25, 0x800, 0x6}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000500)="3019c9de78d1f4a92df3a809938c55b4af919de99691d1757be1d652f9d2f0d565c0e6b2f9993fb1709c3ae5e70f4adbbde28c741a67b45f55daa04c8736637d997b7b8ba1c16a954cb1bc40843f98f04cfa5829ff7cf2ef63266b5768ee1d6fdab2c580ff51b1454d8a696afae0ace01308e9742027029ca503cea974f03f2c60050b04062c08ff7aad987864242f314cfeca7c919d77e8008c7498f90332a92370211d4a6fa1d434db31842db2cf52b7b9828fe79ba6cf6fcda3a4eb65bd69dfd26dd38c50f963d36994d601d2e062bfc7f3fee51df728ac0badaecbf09f680f5e48", 0xe3}, {&(0x7f0000000600)="a831056f1f3e43940eef2e77b3def8b2aa2cd0c9854aa576e7b2a4eccdda9a0026e669463e0a58078572bcb9b0140c5149e03df764b0682c93123df1b714950c017a9f8c7897", 0x46}], 0x2, &(0x7f00000006c0)=[{0x68, 0x112, 0x7, "12a68294ad4b0e5b8d803f2a4f2661e62b913604f703c267d0c535b0868b21e77056866403e457a5e5f539dc0b51f26a655d0519e0352a0b46f5639957b85aa007a860ef70c26b0f9f655b5d6c02177c811156ed208d"}], 0x68}, 0x4000) 8m18.973375548s ago: executing program 1 (id=5932): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000440)=0x1, 0x4) connect$inet(r0, &(0x7f0000000640)={0x2, 0x4e24, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000680)=0xffffffffffffffff, 0x4) sendmmsg(r0, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000800)="e81ac5346b", 0x5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000ac0)="29137114e0fe7f3333fb23fa", 0xc}, {&(0x7f0000000b00)="6422ecff12ced6e89205866d99f6da7a8319becc2c22db5f179d1b6eef857a59804a05084ad44fd35c6e7d66ee42563d72b7c2fd124573f7ac0b27b217b73a69a2e36379330ddaca2e598161198131952f9483dc6006b2ebaef7be4e48a837a1c8c7872f6f1ef45135d2436689d097a0f974c149228a37b49e1bde67945fe83b4095bf564fbce2c396335dc163dee1ddeada7132a6add9b69f60e8a3be2167c6a91d15135ac1a2c03c6b600e6dd98f49a95df499b32519803af5c21aca5471e53d06b49f1ab8663c4b14213c290d4d638e8d30abcdfc386ffe736c66281ad430a001ae1e4cb0e3", 0xe7}], 0x2}}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000c40)="76be548b83950a5f4ea28279b94f8eaeeebd1b388a", 0x15}], 0x11, &(0x7f0000000880)=ANY=[@ANYBLOB="100000000000000016010000010000001000000000000000040100000300000033c4dc5683585e43b2bf8a602baaf95293932bef72d64d7801f663cac054a659e2ecd1aad0ae863556184ee6b4a544861ab34e7b51bd8fea18da3c6477a87d352f7af93aaaf30838f00caeaa4346af7a54523b39bb2fe84cb0197012656527ac1cbea94623f8cad81943e866e21c4a3eba62eef1bed43ff56b29809900c37d5674c75f488735331f0197bce70928b3aea5f28bb6b090b16a6af0d2a8e4a26f18dcdb28f9cb26bf4cdbf6cd4c58aa4fa93bdd56f9ee37086efd2bb6ac5cea27606f270505451aad8c916ad321513b"], 0x20}}, {{0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000d00)="68415417d9ff17c77e03697d5b044b0a13c8d733ab7eb71f26d6f1f41b00405df55af26df539b2a92fef0cdc808a6da46016f6d70a7d4e86e148f86abb5b03b3cfac79846b89b6722e68901345755699226c36ba2bfbc1ed79066f871cdb3b491be5d19ec8dfbc08f9dabc6033f04cc6b67656bb230a0e1930660ca1baefdd544c430472635b5843d728ac44efea8c786761ff1097c58fb0096dafd2c0b298ae8cf1c8aed42491b60ff73d618769a8f5e29a57db9304601fb31a31a0aa846bcb7ee45c0834b76002152d4685bdec8b455a62dc1cc32a3b9b5eceeacc36f17e3162de8c5d77f1c253f58fa0348867c83217127a5e1cbe835905b08a83d6a2bd7ea6123256c0b8", 0x106}], 0x1}}], 0x4, 0x4000045) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a1c000000000a010200000000000000000100ffff08000240000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073017a320000000014000000060a0104000000000000000001"], 0x84}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc020000000000000000000000000000ac1e000100000000000000000000000000000000000000000a00008088000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x23c}}, 0x4004000) r2 = accept$inet6_tcp(0xffffffffffffffff, &(0x7f0000000e40)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000e80)=0x1c) connect$inet6(r2, &(0x7f0000000ec0)={0xa, 0x4e24, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xfff}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="230000000c00000002000000ffff000005"], 0x48) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000fc0)={0x3, 0xc, &(0x7f0000001080)=ANY=[], 0x0}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001100)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x881}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001140)={0x18, 0x11, &(0x7f0000001200)=ANY=[@ANYBLOB], 0x0, 0x2, 0x0, 0x0, 0x0, 0xc}, 0x94) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000001240)={0x40002001}) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000012c0)={&(0x7f0000001300)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x54}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000001400)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) connect$vsock_stream(r1, &(0x7f0000000f00)={0x28, 0x0, 0xffffffff, @hyper, 0x1}, 0x10) sendto$inet(r0, &(0x7f0000000f40)="3b8757fdd2e382b2a91d1ca040130b4058dfd83a10f1b140bd99f8917b697ff1e62e6c02", 0x24, 0x1, &(0x7f0000000f80)={0x2, 0x4e21, @remote}, 0x10) 8m2.995602231s ago: executing program 35 (id=5932): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000440)=0x1, 0x4) connect$inet(r0, &(0x7f0000000640)={0x2, 0x4e24, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000680)=0xffffffffffffffff, 0x4) sendmmsg(r0, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000800)="e81ac5346b", 0x5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000ac0)="29137114e0fe7f3333fb23fa", 0xc}, {&(0x7f0000000b00)="6422ecff12ced6e89205866d99f6da7a8319becc2c22db5f179d1b6eef857a59804a05084ad44fd35c6e7d66ee42563d72b7c2fd124573f7ac0b27b217b73a69a2e36379330ddaca2e598161198131952f9483dc6006b2ebaef7be4e48a837a1c8c7872f6f1ef45135d2436689d097a0f974c149228a37b49e1bde67945fe83b4095bf564fbce2c396335dc163dee1ddeada7132a6add9b69f60e8a3be2167c6a91d15135ac1a2c03c6b600e6dd98f49a95df499b32519803af5c21aca5471e53d06b49f1ab8663c4b14213c290d4d638e8d30abcdfc386ffe736c66281ad430a001ae1e4cb0e3", 0xe7}], 0x2}}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000c40)="76be548b83950a5f4ea28279b94f8eaeeebd1b388a", 0x15}], 0x11, &(0x7f0000000880)=ANY=[@ANYBLOB="100000000000000016010000010000001000000000000000040100000300000033c4dc5683585e43b2bf8a602baaf95293932bef72d64d7801f663cac054a659e2ecd1aad0ae863556184ee6b4a544861ab34e7b51bd8fea18da3c6477a87d352f7af93aaaf30838f00caeaa4346af7a54523b39bb2fe84cb0197012656527ac1cbea94623f8cad81943e866e21c4a3eba62eef1bed43ff56b29809900c37d5674c75f488735331f0197bce70928b3aea5f28bb6b090b16a6af0d2a8e4a26f18dcdb28f9cb26bf4cdbf6cd4c58aa4fa93bdd56f9ee37086efd2bb6ac5cea27606f270505451aad8c916ad321513b"], 0x20}}, {{0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000d00)="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", 0x106}], 0x1}}], 0x4, 0x4000045) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a1c000000000a010200000000000000000100ffff08000240000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073017a320000000014000000060a0104000000000000000001"], 0x84}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc020000000000000000000000000000ac1e000100000000000000000000000000000000000000000a00008088000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x23c}}, 0x4004000) r2 = accept$inet6_tcp(0xffffffffffffffff, &(0x7f0000000e40)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000e80)=0x1c) connect$inet6(r2, &(0x7f0000000ec0)={0xa, 0x4e24, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xfff}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="230000000c00000002000000ffff000005"], 0x48) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000fc0)={0x3, 0xc, &(0x7f0000001080)=ANY=[], 0x0}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001100)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x881}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001140)={0x18, 0x11, &(0x7f0000001200)=ANY=[@ANYBLOB], 0x0, 0x2, 0x0, 0x0, 0x0, 0xc}, 0x94) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000001240)={0x40002001}) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000012c0)={&(0x7f0000001300)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x54}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000001400)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) connect$vsock_stream(r1, &(0x7f0000000f00)={0x28, 0x0, 0xffffffff, @hyper, 0x1}, 0x10) sendto$inet(r0, &(0x7f0000000f40)="3b8757fdd2e382b2a91d1ca040130b4058dfd83a10f1b140bd99f8917b697ff1e62e6c02", 0x24, 0x1, &(0x7f0000000f80)={0x2, 0x4e21, @remote}, 0x10) 5m54.097001862s ago: executing program 4 (id=6076): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000440)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000480)="07000000010000", 0x7) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="180000000210", @ANYRESOCT=r2], 0x18}, 0x1, 0x0, 0x0, 0x4048014}, 0x40) close(r0) 5m49.297419465s ago: executing program 4 (id=6081): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}}}, 0xb8}}, 0x2c000010) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=@updpolicy={0xb8, 0x19, 0x1, 0x3, 0x10000, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x4e24, 0x0, 0xa, 0x20, 0x0, 0x87}, {0x8, 0x10, 0x108000002, 0x0, 0xfff, 0xffffffffffffb473, 0xffffffffffffffff}, {0x1008000000, 0x2000000000000000, 0x2, 0x50a}, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xb8}}, 0x4004) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000003000000000000000000000000000000000000000000a000000870000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000200000000000000000000000000000500000000000000fbff8affffffffff0000000000000000000040000000000000000002000000000000000002000000000000000000000000f8a9"], 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) 5m48.365351209s ago: executing program 4 (id=6083): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x10, 0x4, &(0x7f0000000240)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x47}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x91) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000140)="320003000700000020ff970000", 0xd) 5m47.362395601s ago: executing program 4 (id=6085): r0 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000480)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f00000004c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@iv={0x28, 0x117, 0x2, 0x10, "159e95e98b4d1ed5411a98b279503760"}], 0x28, 0x1}], 0x1, 0x80001) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="b40000000000000079100000000000007b0a00ff000000009500740000000000"], &(0x7f0000000200)='GPL\x00', 0x2, 0xfd90, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000280)="5c00000012006bab9e3fe3d86e6c1d000014a10d00000303003904b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b4cdfd8cdbf93675cdfadb20a64e9f4080003000601000004000200d7", 0x59}, {&(0x7f0000000180)="1ee306", 0x3}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x40804) 5m46.361210063s ago: executing program 4 (id=6088): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000540001002bbd70000000000007000000", @ANYRES32=r1, @ANYBLOB="20000100", @ANYRES32=r1, @ANYBLOB="01010200ff"], 0x38}}, 0x0) (async) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)) 5m45.597011444s ago: executing program 2 (id=6089): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x2) shutdown(r2, 0x0) connect$unix(r1, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000240)=0xffffffffffffffff, 0x4) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f00000000c0)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, 0x0, 0x6, 0x0, 0x100, 0x6, 0x180105, r3}) 5m45.391654142s ago: executing program 4 (id=6090): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0x40, 0x8, 0xfe, 0x9}, {0x6, 0x0, 0x0, 0x8eb6}]}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x7101}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) close(r6) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000380)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x1, 0x4}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x10, 0x5, 0x0, 0x8f}, 0x3, 0x2}, [{0x2, 0x765, 0x801, 0x1, 0x7, 0x3}, {0x9, 0xe237, 0x1, 0x80000003, 0x8, 0x25ad}, {0x1, 0x9, 0x9, 0x2, 0x2, 0x2}, {0x8000, 0xd3, 0x9, 0x2, 0xec, 0x3}, {0x4, 0x9, 0x100, 0xfffffff7, 0x4, 0x7}, {0x5, 0x0, 0xfffffc00, 0x3, 0x5, 0x4}, {0x7, 0x81, 0x5a, 0x2, 0x5, 0x8}, {0xffffff11, 0x5, 0x5, 0x7ff, 0x6, 0x1}, {0x3, 0x6, 0x400, 0x0, 0x5, 0x200}, {0x80, 0x4, 0x61f, 0x1000, 0x5eb, 0xfc}, {0x7, 0x7b9b, 0xfffdfff9, 0x3, 0x1, 0xb}, {0xeef3, 0x101, 0x9, 0x8, 0x4, 0xb2}, {0x3, 0xf82, 0x81, 0x0, 0xa, 0x4000}, {0x5, 0x101, 0x5, 0x3, 0x20000000, 0xfffffeb0}, {0x400, 0xb, 0x4, 0x7ff, 0x20, 0x3}, {0x1, 0xa, 0x7, 0xd, 0x7, 0x13f9}, {0x7, 0xeedf, 0xffffffff, 0x0, 0x2, 0x7ff}, {0x6, 0x8, 0xc, 0xb9d, 0xfffffff9, 0x8}, {0x5, 0x9, 0x40, 0x8, 0x4, 0x2}, {0x8009, 0x58ce, 0x9, 0xc3e1, 0x9, 0xffffffff}, {0x5, 0x160d0ee, 0x3, 0x0, 0x7fff, 0x8}, {0xffffffff, 0xb43a, 0x7, 0x4, 0x6, 0x6}, {0x5, 0x8, 0x2, 0x5, 0x9, 0x8}, {0xfffffbff, 0xdb87, 0x80e, 0x10ba, 0x3, 0x211d}, {0x200, 0x5, 0x4, 0xffffff91, 0x1, 0x7}, {0x40, 0x60b, 0x5, 0xb42d, 0x3241, 0xffffffff}, {0x8001, 0x0, 0x2, 0xc34, 0x6, 0x1}, {0x1, 0x0, 0x5, 0xe, 0x0, 0x3}, {0x8, 0x4, 0x782, 0x7, 0x8, 0xfffffffa}, {0x8, 0x1, 0xc00, 0x3, 0x4, 0x8f24}, {0x8000, 0x0, 0x6e73, 0xa80, 0x6}, {0x80000001, 0x7ff, 0x5, 0x5, 0xe4, 0x5}, {0x8, 0xffff, 0xc, 0x8001, 0xff, 0xfffffffc}, {0x37, 0x4, 0x8, 0x2, 0x2, 0x800}, {0x3, 0x400, 0xffffffff, 0x3263, 0x1e8a, 0x19ee}, {0x800, 0x2, 0x7, 0x81, 0x7, 0x1ff}, {0x6, 0x0, 0x80000000, 0x4, 0x6, 0x5}, {0x0, 0x8, 0x3, 0x8, 0x18f573a, 0x1}, {0x81, 0xca, 0x8, 0xca14, 0x1, 0x10001}, {0x400401, 0x64a1c7de, 0x9, 0x2, 0x17c, 0x8}, {0x5, 0x5e2, 0x7, 0x3d, 0x8, 0x9}, {0x8000, 0x57, 0x10001, 0x1, 0x8000, 0x4}, {0x201, 0x7, 0x5dc2918a, 0x4, 0x81, 0x5}, {0xd, 0x2, 0x3, 0x2, 0x1, 0xcf}, {0x8, 0xdf3, 0x2, 0x7ffffffc, 0x3}, {0xfffffffd, 0x5, 0xff, 0xd7c, 0xffffff7c, 0x80e}, {0xffffffff, 0x40, 0x2, 0x0, 0x401, 0x21}, {0x5, 0x6612, 0xfffffff8, 0x1, 0x2099, 0x1}, {0x241, 0x1, 0x5, 0x5, 0xfffffffd, 0x8000}, {0xfffffff9, 0x5, 0x9, 0x4, 0x47, 0x2}, {0xb5b, 0x81, 0xc4a8, 0x2, 0x5, 0xffffff01}, {0x7, 0x1fe, 0xfffffffe, 0x7a5e, 0x6, 0x1}, {0x2, 0x3, 0x3000000, 0x0, 0x0, 0xa}, {0xffffff79, 0xd2, 0x5, 0x4d, 0x0, 0x9997}, {0x6, 0x8, 0x100, 0xfffff8c0, 0x5, 0xfffffffa}, {0x5, 0x2, 0x5f, 0x7ff, 0x6, 0x2}, {0x0, 0x7ff, 0x7, 0x4, 0x400, 0x2}, {0x24000, 0x0, 0x3, 0x8, 0x100, 0x7}, {0x5, 0x9, 0x101, 0x9, 0x38, 0x6e1e}, {0xe, 0x8001, 0x2, 0x3, 0x9, 0xfffffff8}, {0x9, 0x4, 0x9a87, 0x3}, {0x80000000, 0x0, 0x8, 0x7, 0x4, 0x2}, {0x4500000, 0x8, 0x7, 0x458, 0x0, 0x7fff}, {0x0, 0x2, 0x65e, 0x4, 0x9, 0x8}, {0x1, 0x1, 0x1, 0x757, 0x2, 0xf14}, {0x8001, 0x31b, 0x9, 0x6, 0xdd2, 0x4}, {0xac1, 0xa1, 0xfffffffd, 0x2, 0xb, 0xb2}, {0x6, 0x0, 0x9, 0x7fff, 0x2c, 0xe07}, {0xffffffff, 0x80000001, 0x7, 0xfffff801, 0xd, 0xffffffff}, {0x2, 0x8, 0x2, 0x1, 0x4fb7e326, 0x14}, {0x80, 0xe, 0x6, 0xe, 0x3, 0xb28e}, {0x0, 0xf4, 0x3ecf, 0x3, 0x7, 0x6}, {0x1, 0xde, 0x8, 0x9, 0x8, 0x7}, {0x101, 0x8, 0x5, 0x9, 0x7, 0x5}, {0x80, 0x10, 0x1000, 0x401, 0x5c0c800, 0x8001}, {0x7, 0x9, 0x3, 0xb, 0x8, 0x2}, {0x7fffffff, 0xc22, 0x0, 0x8, 0xfff, 0x1fc}, {0x4, 0x2, 0x7, 0x65, 0x5, 0xff}, {0x401, 0x8, 0x7ec, 0xffffff0d, 0xffff3ba8, 0xc4eb}, {0x9, 0x1, 0x7, 0x0, 0x40, 0x2}, {0x3, 0x7, 0x7f, 0x7f, 0xf, 0x3}, {0x1000, 0x7, 0x1, 0x1, 0x0, 0x4c9c}, {0x2, 0x65cc00, 0x6, 0x2, 0x7, 0x9}, {0x6, 0x6, 0x9, 0x6, 0x7, 0xe}, {0x46, 0x9, 0xfffffffd, 0x1, 0x3, 0x9}, {0x9, 0xb0d, 0x5, 0x6, 0x5, 0x2}, {0x8001, 0x244, 0x2, 0x7, 0x10, 0x5}, {0x1bfd, 0x0, 0x0, 0xdfffffe6, 0x3b1, 0x4}, {0x8, 0x5, 0x6c1, 0x3, 0xffffffdc, 0x1b0}, {0xd4d1, 0x9, 0x3, 0x7, 0xff}, {0x6, 0x663, 0x8, 0x6, 0xffffffff, 0xe}, {0x6, 0x6, 0x87, 0x8, 0x7, 0x5}, {0x1, 0xc0000000, 0x80000000, 0x6, 0x4, 0x5}, {0x0, 0xfffffffb, 0x8, 0x0, 0x800, 0x7}, {0x8, 0x80, 0xfffffffe, 0x4, 0x80000000, 0x8}, {0x6a6, 0xb1b, 0x8, 0x9, 0x66111b0d, 0xfff}, {0x2cb, 0x1000b5, 0x7, 0x2, 0x0, 0x200}, {0x8, 0x81, 0xf24d, 0x9, 0x19567f98, 0x8001}, {0x6, 0x0, 0x1, 0x6, 0x5, 0x7}, {0x3, 0x2, 0x5fe, 0x5, 0xc05, 0x1}, {0xa, 0x0, 0x6, 0x6, 0x200, 0x2}, {0x10, 0x3, 0x9, 0xffff, 0x8, 0x3}, {0xffff, 0x1, 0xfffffffe, 0x104, 0x1e, 0xfff}, {0x40, 0xfff, 0x7, 0x0, 0x10, 0x7f}, {0x1, 0x1cd, 0x4, 0xfffff62d, 0x0, 0x4}, {0x0, 0x7, 0x9, 0xe, 0x80000000, 0x800}, {0x4, 0x8, 0x0, 0x12, 0x6, 0x9}, {0x1fc, 0x0, 0x4, 0xffffffff, 0xa9, 0xfffffffe}, {0x7fff, 0x9, 0x8001, 0x5, 0x800, 0x8}, {0x5, 0xb382, 0x3, 0xffffffff, 0x44, 0x5}, {0x81, 0x2, 0x7, 0x200, 0x0, 0x1800}, {0x0, 0x4, 0x7f, 0x4, 0x0, 0x101}, {0x4, 0x1, 0x400, 0x9, 0x8, 0x4}, {0x7, 0xb, 0x800, 0x2, 0x0, 0x2}, {0x100, 0x0, 0x6, 0x0, 0x1b5, 0x4}, {0x7, 0xb19, 0x4, 0x8, 0x3, 0xfb}, {0x5, 0x1, 0x2, 0xfffffffe, 0x5, 0xfffffffb}, {0x9, 0x5, 0x42a, 0x15, 0x1243, 0x2}, {0x3, 0x7, 0x3, 0x8001, 0xd, 0xdb90}, {0x1, 0xed6, 0x7973, 0xb, 0x9, 0x6}, {0x5e9b300c, 0x10000, 0x7f, 0x7, 0x1c0f76f1, 0x196}, {0x11, 0xab1f, 0x1, 0x2, 0x0, 0xa7}, {0x7ff, 0x6, 0x6, 0x2c67612f, 0x9, 0xc3}, {0x8, 0x3e5, 0xfffffffb, 0xbe, 0x3, 0xffffffff}, {0x36cf, 0x678, 0x200, 0x1, 0x2, 0x7}, {0x4, 0x3, 0xb882, 0xfffffbff, 0x6cf0fe37, 0x1ff}, {0x5, 0xffff, 0xeee1, 0x8, 0x3e6, 0x85c4}, {0x6, 0x10, 0x8, 0x1, 0x40, 0x1}], [{0x3, 0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x3}, {0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {}, {0x3, 0xe1dcf326175bb8c1}, {0x5}, {0x3d37fa9ab3c03abe, 0x1}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x5, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x0, 0x1}, {0x4}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x4}, {0x2}, {0x2}, {0x1, 0x1}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x2}, {0x5, 0x1}, {0x5, 0x1}, {0x3}, {0x1}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x2}, {0x5}, {0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x2}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x2ed0ff2de3ef916, 0x1}, {0x1, 0x3}, {}, {0x5}, {0x2}, {0x3}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x9ca8d040297a0a22}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3}, {0x5, 0x1}, {0x5}, {0x0, 0x1}, {0x5a421c3d54d9c6f2, 0x1}, {}, {0x5, 0x1}, {0x4}, {0x3}, {}, {0x3, 0x1}, {0x3}, {0x2}, {0x4, 0x1}, {0x4, 0x1}, {0x3}, {0x2, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x1}, {0x3, 0x1}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x4, 0x1}, {0x3}, {0x3}, {0x2, 0x1}, {}, {0x5, 0x1}, {0x2}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x4}, {0x2}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}]}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r10 = socket$kcm(0x11, 0x3, 0x0) r11 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000001380)={'syzkaller0\x00', 0x0}) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001580)={&(0x7f00000015c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000058000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d140012801000013084959000727400000400028008000340000001"], 0xa0}}, 0x0) setsockopt$sock_attach_bpf(r10, 0x107, 0xf, &(0x7f00000013c0), 0x56) sendmsg$kcm(r10, &(0x7f0000001400)={&(0x7f0000001440)=@xdp={0x2c, 0x0, r12, 0x3e}, 0x80, &(0x7f00000014c0)=[{&(0x7f0000001500)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r14, 0x0) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000140)={0x3, 0x4}, 0x2) write$ppp(r0, &(0x7f0000000440)='\x00\x00', 0x2) 5m45.334214859s ago: executing program 2 (id=6091): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=@newtaction={0x214, 0x30, 0x51b, 0x0, 0x0, {}, [{0x200, 0x1, [@m_skbmod={0x68, 0x1, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_SMAC={0x0, 0x4, @multicast}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}, @m_ct={0xa8, 0x0, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x68, 0x6, "9f9b3fc2ddc24af6f0e10a015de0eee6fc0900c6e7d94c24ec368c475d7486514b6d2677226afad90c7d6c3ad311a9dee1f031afe3919c34f8636d67f86e3ebd80589ce5f55db46e88a14f002788b194b3ccfdf8c4b86ba094bef19b3a0cddb8831b84bb"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_tunnel_key={0xec, 0x0, 0x0, 0x0, {{0xf}, {0x54, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @mcast2}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x0, 0x8100}}}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6}, @TCA_TUNNEL_KEY_NO_CSUM={0xfffffffffffffede}]}, {0x69, 0x6, "9c52af17f462814d38170f632f883a02e6a90db7e490d2b8bd19fcb7872621f629a33220c9b5f21052aa40bb9616cbe2ae3debc7ea8dcc879c436c50c4b2e001d6b687516d71ee6b27e990693d6b67974963a28a690808e192e0ecf03e7f3535c9492c8e09"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x214}}, 0x0) 5m44.305004088s ago: executing program 2 (id=6092): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="580100001000050495bc7000000000000000000000000000000000000000000000000000001400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000000004d232000000ac1414aa000000000000000000000000eaffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095bc7000ff34000002000400200000000000000060001200726663343130362867636d28ff0f7329290000000000000000000000000000000000000000000000000000000000000000000007000000000000000000000000a000000040"], 0x158}}, 0x0) 5m43.704933398s ago: executing program 2 (id=6093): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000200000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000018000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) 5m43.29480518s ago: executing program 2 (id=6094): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f00000004c0)=0x8001, 0x4) sendmmsg$inet6(r0, &(0x7f0000000540)=[{{&(0x7f0000000580)={0xa, 0x4e23, 0xb, @loopback, 0x1}, 0x1c, &(0x7f00000005c0)=[{&(0x7f0000000600)='2', 0x1}], 0x1, 0x0, 0x0, 0x100000}}], 0x1, 0x8000) 5m43.076910875s ago: executing program 2 (id=6095): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000080)={@broadcast, @multicast1, 0x0, "0c46b2777d6a23786bc6db3e4967cc4fd4e8d46d2b5e3d89a84fcc046a77a8fa", 0xe1e7, 0x8000, 0x4, 0xb}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1e00000000000000ca0000000300000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000004000000000000000000"], 0x50) r2 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r2, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000040), 0xf00) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) bind$can_raw(r2, &(0x7f00000001c0)={0x1d, r3}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x1d, 0x11, &(0x7f00000000c0)=@ringbuf={{0x18, 0x2}, {{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0x2}, {}, {0x85, 0x0, 0x0, 0x39}}, {}, [@map_fd={0x18, 0xa, 0x1, 0x0, r1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x6c}}}, &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x42, '\x00', r3}, 0x94) 5m30.047945429s ago: executing program 36 (id=6090): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0x40, 0x8, 0xfe, 0x9}, {0x6, 0x0, 0x0, 0x8eb6}]}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x7101}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) close(r6) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000380)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x1, 0x4}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x10, 0x5, 0x0, 0x8f}, 0x3, 0x2}, [{0x2, 0x765, 0x801, 0x1, 0x7, 0x3}, {0x9, 0xe237, 0x1, 0x80000003, 0x8, 0x25ad}, {0x1, 0x9, 0x9, 0x2, 0x2, 0x2}, {0x8000, 0xd3, 0x9, 0x2, 0xec, 0x3}, {0x4, 0x9, 0x100, 0xfffffff7, 0x4, 0x7}, {0x5, 0x0, 0xfffffc00, 0x3, 0x5, 0x4}, {0x7, 0x81, 0x5a, 0x2, 0x5, 0x8}, {0xffffff11, 0x5, 0x5, 0x7ff, 0x6, 0x1}, {0x3, 0x6, 0x400, 0x0, 0x5, 0x200}, {0x80, 0x4, 0x61f, 0x1000, 0x5eb, 0xfc}, {0x7, 0x7b9b, 0xfffdfff9, 0x3, 0x1, 0xb}, {0xeef3, 0x101, 0x9, 0x8, 0x4, 0xb2}, {0x3, 0xf82, 0x81, 0x0, 0xa, 0x4000}, {0x5, 0x101, 0x5, 0x3, 0x20000000, 0xfffffeb0}, {0x400, 0xb, 0x4, 0x7ff, 0x20, 0x3}, {0x1, 0xa, 0x7, 0xd, 0x7, 0x13f9}, {0x7, 0xeedf, 0xffffffff, 0x0, 0x2, 0x7ff}, {0x6, 0x8, 0xc, 0xb9d, 0xfffffff9, 0x8}, {0x5, 0x9, 0x40, 0x8, 0x4, 0x2}, {0x8009, 0x58ce, 0x9, 0xc3e1, 0x9, 0xffffffff}, {0x5, 0x160d0ee, 0x3, 0x0, 0x7fff, 0x8}, {0xffffffff, 0xb43a, 0x7, 0x4, 0x6, 0x6}, {0x5, 0x8, 0x2, 0x5, 0x9, 0x8}, {0xfffffbff, 0xdb87, 0x80e, 0x10ba, 0x3, 0x211d}, {0x200, 0x5, 0x4, 0xffffff91, 0x1, 0x7}, {0x40, 0x60b, 0x5, 0xb42d, 0x3241, 0xffffffff}, {0x8001, 0x0, 0x2, 0xc34, 0x6, 0x1}, {0x1, 0x0, 0x5, 0xe, 0x0, 0x3}, {0x8, 0x4, 0x782, 0x7, 0x8, 0xfffffffa}, {0x8, 0x1, 0xc00, 0x3, 0x4, 0x8f24}, {0x8000, 0x0, 0x6e73, 0xa80, 0x6}, {0x80000001, 0x7ff, 0x5, 0x5, 0xe4, 0x5}, {0x8, 0xffff, 0xc, 0x8001, 0xff, 0xfffffffc}, {0x37, 0x4, 0x8, 0x2, 0x2, 0x800}, {0x3, 0x400, 0xffffffff, 0x3263, 0x1e8a, 0x19ee}, {0x800, 0x2, 0x7, 0x81, 0x7, 0x1ff}, {0x6, 0x0, 0x80000000, 0x4, 0x6, 0x5}, {0x0, 0x8, 0x3, 0x8, 0x18f573a, 0x1}, {0x81, 0xca, 0x8, 0xca14, 0x1, 0x10001}, {0x400401, 0x64a1c7de, 0x9, 0x2, 0x17c, 0x8}, {0x5, 0x5e2, 0x7, 0x3d, 0x8, 0x9}, {0x8000, 0x57, 0x10001, 0x1, 0x8000, 0x4}, {0x201, 0x7, 0x5dc2918a, 0x4, 0x81, 0x5}, {0xd, 0x2, 0x3, 0x2, 0x1, 0xcf}, {0x8, 0xdf3, 0x2, 0x7ffffffc, 0x3}, {0xfffffffd, 0x5, 0xff, 0xd7c, 0xffffff7c, 0x80e}, {0xffffffff, 0x40, 0x2, 0x0, 0x401, 0x21}, {0x5, 0x6612, 0xfffffff8, 0x1, 0x2099, 0x1}, {0x241, 0x1, 0x5, 0x5, 0xfffffffd, 0x8000}, {0xfffffff9, 0x5, 0x9, 0x4, 0x47, 0x2}, {0xb5b, 0x81, 0xc4a8, 0x2, 0x5, 0xffffff01}, {0x7, 0x1fe, 0xfffffffe, 0x7a5e, 0x6, 0x1}, {0x2, 0x3, 0x3000000, 0x0, 0x0, 0xa}, {0xffffff79, 0xd2, 0x5, 0x4d, 0x0, 0x9997}, {0x6, 0x8, 0x100, 0xfffff8c0, 0x5, 0xfffffffa}, {0x5, 0x2, 0x5f, 0x7ff, 0x6, 0x2}, {0x0, 0x7ff, 0x7, 0x4, 0x400, 0x2}, {0x24000, 0x0, 0x3, 0x8, 0x100, 0x7}, {0x5, 0x9, 0x101, 0x9, 0x38, 0x6e1e}, {0xe, 0x8001, 0x2, 0x3, 0x9, 0xfffffff8}, {0x9, 0x4, 0x9a87, 0x3}, {0x80000000, 0x0, 0x8, 0x7, 0x4, 0x2}, {0x4500000, 0x8, 0x7, 0x458, 0x0, 0x7fff}, {0x0, 0x2, 0x65e, 0x4, 0x9, 0x8}, {0x1, 0x1, 0x1, 0x757, 0x2, 0xf14}, {0x8001, 0x31b, 0x9, 0x6, 0xdd2, 0x4}, {0xac1, 0xa1, 0xfffffffd, 0x2, 0xb, 0xb2}, {0x6, 0x0, 0x9, 0x7fff, 0x2c, 0xe07}, {0xffffffff, 0x80000001, 0x7, 0xfffff801, 0xd, 0xffffffff}, {0x2, 0x8, 0x2, 0x1, 0x4fb7e326, 0x14}, {0x80, 0xe, 0x6, 0xe, 0x3, 0xb28e}, {0x0, 0xf4, 0x3ecf, 0x3, 0x7, 0x6}, {0x1, 0xde, 0x8, 0x9, 0x8, 0x7}, {0x101, 0x8, 0x5, 0x9, 0x7, 0x5}, {0x80, 0x10, 0x1000, 0x401, 0x5c0c800, 0x8001}, {0x7, 0x9, 0x3, 0xb, 0x8, 0x2}, {0x7fffffff, 0xc22, 0x0, 0x8, 0xfff, 0x1fc}, {0x4, 0x2, 0x7, 0x65, 0x5, 0xff}, {0x401, 0x8, 0x7ec, 0xffffff0d, 0xffff3ba8, 0xc4eb}, {0x9, 0x1, 0x7, 0x0, 0x40, 0x2}, {0x3, 0x7, 0x7f, 0x7f, 0xf, 0x3}, {0x1000, 0x7, 0x1, 0x1, 0x0, 0x4c9c}, {0x2, 0x65cc00, 0x6, 0x2, 0x7, 0x9}, {0x6, 0x6, 0x9, 0x6, 0x7, 0xe}, {0x46, 0x9, 0xfffffffd, 0x1, 0x3, 0x9}, {0x9, 0xb0d, 0x5, 0x6, 0x5, 0x2}, {0x8001, 0x244, 0x2, 0x7, 0x10, 0x5}, {0x1bfd, 0x0, 0x0, 0xdfffffe6, 0x3b1, 0x4}, {0x8, 0x5, 0x6c1, 0x3, 0xffffffdc, 0x1b0}, {0xd4d1, 0x9, 0x3, 0x7, 0xff}, {0x6, 0x663, 0x8, 0x6, 0xffffffff, 0xe}, {0x6, 0x6, 0x87, 0x8, 0x7, 0x5}, {0x1, 0xc0000000, 0x80000000, 0x6, 0x4, 0x5}, {0x0, 0xfffffffb, 0x8, 0x0, 0x800, 0x7}, {0x8, 0x80, 0xfffffffe, 0x4, 0x80000000, 0x8}, {0x6a6, 0xb1b, 0x8, 0x9, 0x66111b0d, 0xfff}, {0x2cb, 0x1000b5, 0x7, 0x2, 0x0, 0x200}, {0x8, 0x81, 0xf24d, 0x9, 0x19567f98, 0x8001}, {0x6, 0x0, 0x1, 0x6, 0x5, 0x7}, {0x3, 0x2, 0x5fe, 0x5, 0xc05, 0x1}, {0xa, 0x0, 0x6, 0x6, 0x200, 0x2}, {0x10, 0x3, 0x9, 0xffff, 0x8, 0x3}, {0xffff, 0x1, 0xfffffffe, 0x104, 0x1e, 0xfff}, {0x40, 0xfff, 0x7, 0x0, 0x10, 0x7f}, {0x1, 0x1cd, 0x4, 0xfffff62d, 0x0, 0x4}, {0x0, 0x7, 0x9, 0xe, 0x80000000, 0x800}, {0x4, 0x8, 0x0, 0x12, 0x6, 0x9}, {0x1fc, 0x0, 0x4, 0xffffffff, 0xa9, 0xfffffffe}, {0x7fff, 0x9, 0x8001, 0x5, 0x800, 0x8}, {0x5, 0xb382, 0x3, 0xffffffff, 0x44, 0x5}, {0x81, 0x2, 0x7, 0x200, 0x0, 0x1800}, {0x0, 0x4, 0x7f, 0x4, 0x0, 0x101}, {0x4, 0x1, 0x400, 0x9, 0x8, 0x4}, {0x7, 0xb, 0x800, 0x2, 0x0, 0x2}, {0x100, 0x0, 0x6, 0x0, 0x1b5, 0x4}, {0x7, 0xb19, 0x4, 0x8, 0x3, 0xfb}, {0x5, 0x1, 0x2, 0xfffffffe, 0x5, 0xfffffffb}, {0x9, 0x5, 0x42a, 0x15, 0x1243, 0x2}, {0x3, 0x7, 0x3, 0x8001, 0xd, 0xdb90}, {0x1, 0xed6, 0x7973, 0xb, 0x9, 0x6}, {0x5e9b300c, 0x10000, 0x7f, 0x7, 0x1c0f76f1, 0x196}, {0x11, 0xab1f, 0x1, 0x2, 0x0, 0xa7}, {0x7ff, 0x6, 0x6, 0x2c67612f, 0x9, 0xc3}, {0x8, 0x3e5, 0xfffffffb, 0xbe, 0x3, 0xffffffff}, {0x36cf, 0x678, 0x200, 0x1, 0x2, 0x7}, {0x4, 0x3, 0xb882, 0xfffffbff, 0x6cf0fe37, 0x1ff}, {0x5, 0xffff, 0xeee1, 0x8, 0x3e6, 0x85c4}, {0x6, 0x10, 0x8, 0x1, 0x40, 0x1}], [{0x3, 0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x3}, {0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {}, {0x3, 0xe1dcf326175bb8c1}, {0x5}, {0x3d37fa9ab3c03abe, 0x1}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x5, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x0, 0x1}, {0x4}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x4}, {0x2}, {0x2}, {0x1, 0x1}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x2}, {0x5, 0x1}, {0x5, 0x1}, {0x3}, {0x1}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x2}, {0x5}, {0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x2}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x2ed0ff2de3ef916, 0x1}, {0x1, 0x3}, {}, {0x5}, {0x2}, {0x3}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x9ca8d040297a0a22}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3}, {0x5, 0x1}, {0x5}, {0x0, 0x1}, {0x5a421c3d54d9c6f2, 0x1}, {}, {0x5, 0x1}, {0x4}, {0x3}, {}, {0x3, 0x1}, {0x3}, {0x2}, {0x4, 0x1}, {0x4, 0x1}, {0x3}, {0x2, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x1}, {0x3, 0x1}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x4, 0x1}, {0x3}, {0x3}, {0x2, 0x1}, {}, {0x5, 0x1}, {0x2}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x4}, {0x2}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}]}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r10 = socket$kcm(0x11, 0x3, 0x0) r11 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000001380)={'syzkaller0\x00', 0x0}) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001580)={&(0x7f00000015c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000058000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d140012801000013084959000727400000400028008000340000001"], 0xa0}}, 0x0) setsockopt$sock_attach_bpf(r10, 0x107, 0xf, &(0x7f00000013c0), 0x56) sendmsg$kcm(r10, &(0x7f0000001400)={&(0x7f0000001440)=@xdp={0x2c, 0x0, r12, 0x3e}, 0x80, &(0x7f00000014c0)=[{&(0x7f0000001500)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r14, 0x0) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000140)={0x3, 0x4}, 0x2) write$ppp(r0, &(0x7f0000000440)='\x00\x00', 0x2) 5m27.035948919s ago: executing program 37 (id=6095): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000080)={@broadcast, @multicast1, 0x0, "0c46b2777d6a23786bc6db3e4967cc4fd4e8d46d2b5e3d89a84fcc046a77a8fa", 0xe1e7, 0x8000, 0x4, 0xb}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1e00000000000000ca0000000300000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000004000000000000000000"], 0x50) r2 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r2, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000040), 0xf00) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) bind$can_raw(r2, &(0x7f00000001c0)={0x1d, r3}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x1d, 0x11, &(0x7f00000000c0)=@ringbuf={{0x18, 0x2}, {{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0x2}, {}, {0x85, 0x0, 0x0, 0x39}}, {}, [@map_fd={0x18, 0xa, 0x1, 0x0, r1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x6c}}}, &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x42, '\x00', r3}, 0x94) 2.840582942s ago: executing program 7 (id=7374): r0 = socket$xdp(0x2c, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0), 0x200002, 0x0) pselect6(0x40, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x300}, 0x0, &(0x7f0000000240)={0x8}, 0x0, 0x0) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x3f, 0xfffffffffffffffd, &(0x7f0000000000)=0x60) syz_emit_ethernet(0x12e, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "010448", 0xf8, 0x3a, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[@routing={0x0, 0xc, 0x0, 0x2, 0x0, [@mcast2, @private2, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, @local]}], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @remote, [{0x2, 0xf, "36dad83aea8df15d20889b6a4b488367e6c6cba5844d6d576950aae4e0af85d7922746edc7abaa7b25516c034d4b8474b922a5df0be178ccb65ae4eaabef5f63a5df9cc8e9b0c9fef787cb50058e6375665a79abec0a2808518db033c86bb7e1be26e4ef08f20bfb122d51786403c40883d6626b35a9"}]}}}}}}, 0x0) 2.699445733s ago: executing program 9 (id=7375): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x2, 0x4, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@kfunc={0x85, 0x0, 0x2, 0x102, 0x350d6}]}, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x52, '\x00', 0x0, @fallback=0x39, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.601583613s ago: executing program 8 (id=7377): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e22, 0x100, @empty, 0x10001}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000003c0)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7d1}, 0x1c) bind$inet6(r2, &(0x7f0000000440)={0xa, 0x4e22}, 0x1c) listen(r2, 0x37) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080)) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000300)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x80000) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[], 0x9c}, 0x1, 0x0, 0x0, 0x20000841}, 0x8000) sendmmsg$unix(r4, &(0x7f0000000400)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4084}}], 0x1, 0x24008890) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f00000000c0)={0x1fffffffffffffa8, &(0x7f0000000100)=[{}, {}]}) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f00000001c0)={0x3, &(0x7f0000000180)=[{0x1, 0x0, 0x2}, {0xffff, 0x0, 0x1, 0x4}, {0x5, 0x5, 0x5, 0x6}]}) ioctl$PPPIOCBRIDGECHAN(r0, 0x40047435, &(0x7f0000000140)=0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000200)=ANY=[@ANYRES64=r4], &(0x7f0000000480)='GPL\x00'}, 0x94) 2.601412204s ago: executing program 6 (id=7378): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x2, 0x4, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3490c}], {0x95, 0x0, 0x0, 0x7b000000}}, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x52, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.530734159s ago: executing program 9 (id=7379): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000400)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) close(r5) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f00000002c0)={'syzkaller0\x00', @multicast}) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) r9 = socket$kcm(0x11, 0x3, 0x0) r10 = socket(0x400000000010, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000380)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x88, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xc, 0xfff3}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x4, 0x10000000, 0xb, 0xdc}, 0x3, r11}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x4015}, 0x40488d0) setsockopt$sock_attach_bpf(r9, 0x107, 0xf, &(0x7f0000000540), 0x56) sendmsg$kcm(r9, &(0x7f00000005c0)={&(0x7f0000000600)=@xdp={0x2c, 0x0, r8, 0x3e}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000780)="27030200dc0f14000e0003000024c1020000ff1107c2fb7fe0400018534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8080}, 0x20000000) 2.488587023s ago: executing program 0 (id=7380): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)={0x178, r1, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x84, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xeec00000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x10000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x63}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfff}]}, @TIPC_NLA_MEDIA={0xe0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xac}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe75a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4390}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x4c080}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x13, 0x7, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000000000000bf160000000000007961a800000000001501020000000000850000008c000000b70000000100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.364777659s ago: executing program 6 (id=7381): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r0, 0x0, 0x90) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(r2, 0x0, 0x2000c890) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) connect$inet6(0xffffffffffffffff, &(0x7f00000003c0)={0xa, 0x4e20, 0x101, @private1={0xfc, 0x1, '\x00', 0x1}, 0x5}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=@ipv6_newrule={0x30, 0x20, 0x2d2c6d60ea1da725, 0x70bd25, 0x25dfdbfb, {0xa, 0x0, 0x0, 0xcd, 0xfe, 0x0, 0x0, 0x1, 0xb}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8, 0x6, 0x7ffe}, @FIB_RULE_POLICY=@FRA_UID_RANGE={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x20008005}, 0x10888) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r5, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x10902, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646, 0x800}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8, 0x9, 0x3}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40e95}, 0x20048040) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r5], 0x5c}}, 0x40) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 2.212065387s ago: executing program 0 (id=7382): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x18, 0x6, 0xa, 0x403, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_EXPRESSIONS={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x40}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="c80000004200010002000000000000000201000042420000500001"], 0xc8}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c0000001600010000000000000000000a0000000400000014000100ff010000001800000000000000000001"], 0x2c}}, 0x0) 2.170758446s ago: executing program 8 (id=7383): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x28, 0x2, [@TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0x7fff}, @TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0x6}, @TCA_RED_FLAGS={0xc, 0x4, {0x8, 0xf}}, @TCA_RED_MARK_BLOCK={0x8, 0x6, 0x6}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x0) r0 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000340)={r0}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000540)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$sock_int(r2, 0x1, 0x800000000f, &(0x7f0000000640)=0x7, 0x4) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000680)=0x800001, 0x4) bind$inet6(r3, &(0x7f00000006c0)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x20) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x11d, 0xf, 0x0, &(0x7f0000000480)) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000240)="68000000000905040000000000000000020000000900010073797a3000000000140002800600010000020000050002000600000008000500000000002c0004800800010000000001200002800c000100706f6c69637930000800020000000002080003000000001e", 0x68}], 0x1}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[@ANYBLOB="5c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b00010067656e657665000018002380140007000000000000000009000000000000000300653100"/65], 0x5c}}, 0x0) sendmsg(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000400)="68000000020905040000000000000000020000000900010073797a3000000000140002800600010000020000050002000600000008000500000000002c0004800800010000000001200002800c000100706f6c69637930000800020005000002080003000000001e", 0x68}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@gettaction={0x15c, 0x32, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}, @action_gd=@TCA_ACT_TAB={0x88, 0x1, [{0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xdd5}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x208}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1000}}, {0x14, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7fff}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}, @action_gd=@TCA_ACT_TAB={0x74, 0x1, [{0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xa46}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x14, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}, @action_gd=@TCA_ACT_TAB={0x4}]}, 0x15c}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400090200000000000000000000000000010c00028005000100000000004700028005000100010000000600040000000000060005"], 0xe4}}, 0x0) 1.917058879s ago: executing program 0 (id=7384): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="040100001a00010000000000000000000a010101000000000000000000000000ac1414aa000000000000000000000000fffc00"/64, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="fe8000000000000000000000000000aa000000013c000000e0000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bfae00000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000014000e"], 0x104}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000900), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000940)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)={0x58, r4, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r5}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x81}}}]}}]}, 0x58}, 0x1, 0x400000000000000, 0x0, 0x4040d25}, 0x4040084) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r6) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x68, r7, 0x1, 0x70bd26, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0xfffffc00, @media='ib\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x840}, 0x800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x15, &(0x7f00000003c0)=ANY=[@ANYBLOB="1802000004000000000000001154d1ff85100000010000009500000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000002300000018010000646c6c2500000000002020200600000000000000bf0600000000000007010000f8ffffffb702000008000000b703000059e70000a50000000600000095"], &(0x7f0000000480)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r8, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)={0x1c, 0x1402, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x62, 'syz1\x00'}]}, 0x1c}}, 0x0) ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000000080)) sendmsg$NL80211_CMD_LEAVE_MESH(r0, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14, 0x0, 0x300, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xc5}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18080000796412000000000010000000851000000600000018000000", @ANYRES64=r0, @ANYRES16=r0], &(0x7f0000000100)='GPL\x00', 0xd, 0xe9, &(0x7f0000000500)=""/233, 0x0, 0x8}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="040100001a00010000000000000000000a010101000000000000000000000000ac1414aa000000000000000000000000fffc00"/64, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="fe8000000000000000000000000000aa000000013c000000e0000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bfae00000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000014000e"], 0x104}}, 0x0) (async) socket$netlink(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$team(&(0x7f0000000900), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000940)) (async) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)={0x58, r4, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r5}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x81}}}]}}]}, 0x58}, 0x1, 0x400000000000000, 0x0, 0x4040d25}, 0x4040084) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r6) (async) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x68, r7, 0x1, 0x70bd26, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0xfffffc00, @media='ib\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x840}, 0x800) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x15, &(0x7f00000003c0)=ANY=[@ANYBLOB="1802000004000000000000001154d1ff85100000010000009500000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000002300000018010000646c6c2500000000002020200600000000000000bf0600000000000007010000f8ffffffb702000008000000b703000059e70000a50000000600000095"], &(0x7f0000000480)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) (async) socket$nl_rdma(0x10, 0x3, 0x14) (async) sendmsg$RDMA_NLDEV_CMD_SET(r8, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)={0x1c, 0x1402, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x62, 'syz1\x00'}]}, 0x1c}}, 0x0) (async) ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000000080)) (async) sendmsg$NL80211_CMD_LEAVE_MESH(r0, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14, 0x0, 0x300, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xc5}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18080000796412000000000010000000851000000600000018000000", @ANYRES64=r0, @ANYRES16=r0], &(0x7f0000000100)='GPL\x00', 0xd, 0xe9, &(0x7f0000000500)=""/233, 0x0, 0x8}, 0x94) (async) 1.877596954s ago: executing program 6 (id=7385): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="0700000076000907000000000000000007020003", @ANYRES32=0x0], 0x18}, 0x1, 0x5502000000000000}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001640)={0x28, r2, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20008080) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000001680)={0xd0, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8bb1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1e7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x10001}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x8050}, 0x28854) r4 = socket$netlink(0x10, 0x3, 0x7) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000380)=0x100000001, 0x76dc) (async) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000380)=0x100000001, 0x76dc) connect$inet6(r5, &(0x7f00000003c0)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000400), 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001780)={0x24, r7, 0x1, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x384}]}, 0x24}, 0x1, 0x0, 0x0, 0x8880}, 0x20000000) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000440)=0x1, 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000440)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000480)=@gcm_128={{0x303}, "750600", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "ffffffffffffffff"}, 0x28) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000017c0), 0x200002, 0x0) openat$cgroup_int(r9, &(0x7f0000001800)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000017c0)='./cgroup/syz0\x00', 0x200002, 0x0) (async) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000017c0)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r10, &(0x7f0000001840)='blkio.bfq.io_queued\x00', 0x275a, 0x0) (async) r11 = openat$cgroup_ro(r10, &(0x7f0000001840)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$tun(r11, &(0x7f0000000500)=ANY=[], 0x141) (async) write$tun(r11, &(0x7f0000000500)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r11, 0x0) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) (async) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) recvfrom(r5, &(0x7f0000000580)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000001580), r5) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000001580), r5) writev(r4, &(0x7f00000002c0)=[{&(0x7f0000000300)="4800000014001d1009074beafd0d8c560a84606080ffe020590000a2bc5603ca00000f7f8907000020008d42188fedc22e47ad8f75edc6d100000101ff0000000309ff5b00000000", 0x48}], 0x1) 1.816087968s ago: executing program 8 (id=7386): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000000)={0x1, 0x788e}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_INTERLEAVING_SUPPORTED(r0, 0x84, 0x7d, &(0x7f0000000080)={r1, 0x2}, 0x8) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f00000000c0)={{0x95, @empty, 0x4e22, 0x3, 'sh\x00', 0xc, 0x4c1, 0x80}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e21, 0x0, 0x1, 0x8, 0x8001}}, 0x44) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e22, @rand_addr=0x64010102}, 0x10) ioctl$F2FS_IOC_DECOMPRESS_FILE(r0, 0xf517, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001800)={'ip6_vti0\x00', &(0x7f0000001780)={'syztnl2\x00', 0x0, 0x4, 0x7, 0x80, 0xf3b, 0x32, @local, @private2, 0x7, 0x1, 0x7ff, 0xce}}) getsockname$packet(0xffffffffffffffff, &(0x7f0000001840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001880)=0x14) getpeername$packet(0xffffffffffffffff, &(0x7f0000002900)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000002940)=0x14) sendmmsg$inet6(r3, &(0x7f0000004900)=[{{&(0x7f0000000180)={0xa, 0x4e21, 0x7fff, @loopback, 0x6}, 0x1c, &(0x7f00000016c0)=[{&(0x7f00000001c0)="a7ce007ef1a7426404594df95bdcee496fe8a0120a4e90ef71be05f2ed83c81cd33c516812c7a3aacf31a76ad13c03ee1af3257e955cb471f06ff49a20e5a77072690871514be67128a4830f6fa8516caa6d30175d7c7168064914738abc08d39e11ab8392ac603f3d919eda51edd5b012ce9b5a4286f8f534a8de8fa45f6b67d5576cba68c2b46faa662b70e971891833190c659e1984e08404ac1f527c228388", 0xa1}, {&(0x7f0000000280)="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", 0x1000}, {&(0x7f0000001280)="ada1e02762c82e03597f9d5a8518766b9dc50ddb3dc3311b9d0cf97a19d4173916a3e78a0a6c33cb5fc78a28ad89ffb2be36b2c3adf68936a782ee0ec91fecb427ba5845c28e2d5a1dd71bed5771ab739bb6ea9d04029f5cf015b0e8655b08d9a785ac20cc55ba7e219e", 0x6a}, {&(0x7f0000001300)="608274e854bfc5abf8fbe0ae93013e053f88ae86d74de53040f878c28c58792a1c8e9d21983c5db734898d85848acaad9ff8d4125c92a506c7633988176c498787d504361f1f6f7af7a46c28f660357f9c3f28fb4f15b51fc7f9779166067d5354dc53a490a87536417972d90420360275114ca9cc12f183c289bd1a6431cdc5943112963a7c5e0b898d9b8121341bf17f364eba65e3a1c4c30f673e418ecd5c3fca1b52fe30357535b0ed2c45b67bc55bb4f206382f5d48a840da82b4e174cc946f3f7ef0e8744c726bd8db5fb53dcdcb5a66fa624b107fcca9f83d5073dc4cb499f57210aca8336e4697925573e6cbb96571", 0xf3}, {&(0x7f0000001400)="28616f789d4ed045a62266be36232e2422f25e2e84dbed904e49b8f17b4199a02c0a040979f65da0102ac657c1e2eea7d6d39fb309e85d8209aed36878e64b6d4c59d740086a00b61c737b591d7cdd21f537fa675ff0da60b4ff36f6383590f181bb692e6b54be165f758988f5c5fb2335e470fb706385e72ed3b5231d2bc8dc1d1710dd5b4f5ef86153a54b0be6847dec3301f5c8100079fd8c1291c5b03237a5a6b8575578618984aaa4087567c4172188a85440b9a034efebf9fce8f7257c6cf182f658f44f0e55df66bbab4087d430031d83457fb4b0840e1a03addc4510a9cd6747d815f8147390617d", 0xec}, {&(0x7f0000001500)="c3b3193068cadbc33602c6d61e469753370f7161719f162fb0f8ff422403371ccc2aec938b16aa484a5e7b3a9fd5d90bb92f8e25298e4b", 0x37}, {&(0x7f0000001540)}, {&(0x7f0000001580)="afb2f45c4e23933bb0fbe56b6a2f177a7f7c3a346a6400f9d1e0034ad97b5946042ed0e8724ef934311d1ae81c787b5500a228fdee4bf17988feacc8541482aade8cf5569c79b64adcff55fc1c9efe370ecd13e05375dde8bdfcbbff114a625344b567269451a19e63df", 0x6a}, {&(0x7f0000001600)="004c795e67792a83b3973a7ee07c4901856117c7e4d0a2b29d4b24804bd9960820e9cc03c57d7a36e9811fe6a7c01e8844c84ca179a09ab2ae6af4cf5d148510caf0b26477527858f38cdb9eaab08175193f2d9ae759a31c325a02c8fa4a1305f2c7b0372695d888772898a60c6a90934190f27145c889ad45214f9ee5cdab7653b3342a3b667915d22d6e0dca8bbc17f2eb791ec5c18005a1fafe05ed01a3e30932af6411", 0xa5}], 0x9, &(0x7f00000018c0)=[@pktinfo={{0x24, 0x29, 0x32, {@mcast1, r4}}}, @rthdr={{0xb8, 0x29, 0x39, {0x2c, 0x14, 0x2, 0x1, 0x0, [@empty, @dev={0xfe, 0x80, '\x00', 0x2c}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, @loopback, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, @mcast2, @remote, @private2={0xfc, 0x2, '\x00', 0x1}]}}}, @rthdr={{0x78, 0x29, 0x39, {0x3c, 0xc, 0x2, 0x2, 0x0, [@private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, @dev={0xfe, 0x80, '\x00', 0x13}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@dev={0xfe, 0x80, '\x00', 0x1c}, r5}}}, @hopopts_2292={{0x138, 0x29, 0x36, {0x29, 0x23, '\x00', [@pad1, @generic={0x0, 0xc7, "3854c94a4baebbd74ce957b7e30271c145e5dd6dde41cb4cc13d45220c8b84e8f6d9167507c1ba8cccd35a77b5b0e1d47b45f4db332b26a50a963f5d763c5431df4eb4ecf9c6d5655840072bb7090a78950279a0c4c7224cb16e17765a0d1f3977ba53f7a3f5d7219546cce25a2641ad71ca1366a9b7cf3b7fd70bcab7aca6df3c283b8fa2ee3e6ba0395390ac9ae090ea0f5361eea51d56fa7625307563121478f24393663568e825346f9f71e9ae6fd29d96f90bfb54c08cefa777fe02947674a0e350b21112"}, @calipso={0x7, 0x30, {0x1, 0xa, 0x3, 0x7, [0x7, 0x49d, 0x1, 0x10e60000, 0xfff]}}, @enc_lim={0x4, 0x1, 0x4}, @hao={0xc9, 0x10, @mcast2}, @jumbo={0xc2, 0x4, 0x2}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x6}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x200}}, @rthdrdstopts={{0xb0, 0x29, 0x37, {0x0, 0x12, '\x00', [@calipso={0x7, 0x10, {0x0, 0x2, 0x7, 0x4, [0x40]}}, @enc_lim={0x4, 0x1, 0x1}, @generic={0xe, 0x7b, "f4c25e70d5060adbc7aee5b1951280543499e85e295f4d4b06653799b8f94c78201ac07aeb21d280ac2403c277ca1023c62ae45733a5c9ef89d46a2ac334ca4b1a84d233a24ccacfd153640e124d42a8e357356262cecbe4b4218f932f502261bc6e031885ed2eca3cbd941157a2fd69523a13f31bd08f26b0ec82"}]}}}], 0x398}}, {{&(0x7f0000001c80)={0xa, 0x4e22, 0x4, @mcast1, 0x2}, 0x1c, &(0x7f0000002280)=[{&(0x7f0000001cc0)="860afdeb47d51a84d5d31ea0005606062b51494848e3376fab68392bcf4bbb0477285dcc06d8c1735efb92404c5179d30f3d5e9faf52c72857ebdb502cceb162380cb957add68ff5b1f770e42c4857f2926b4417a344a5b9ef5dd6249ef129b0fd01952f00670a6c85393c24dd5295aac116a4a8b7515b81a62878f53792b45bf96b779c6004be18a9e88f6c0b70ed6670f28dce9e8b6203", 0x98}, {&(0x7f0000001d80)="f867a9d2a305d4f26e69e8a0e4a852ee12eb219d55b1557371cb4340393b8c06a650a68d19027bb1a5cfa902ee816dce8962cc", 0x33}, {&(0x7f0000001dc0)="0838e600de471c4ae93622c74420b0a437d4b552968af766c48c9fec810b912b9c45ea643dcaeeb13096e10be0fe400a302d7730cae05512054184dd65d9e94f33b0dc27", 0x44}, {&(0x7f0000001e40)="26c4128a413aaa97b3c631da335737995e508590264670eb79da3b7245f81c55da94647a6681c01845f8ecce724ce9c13352409bdd1b7628613ba02fcb4db9dfa8c209d5adcb8e30d184f5768b862ac9c4c6b649288c6cb824d5c8c0978b711960a1d78014075cf43b41c5ac9b54f9ca32738789fc9e8ea9191362edfa894b63414cbb5b37bf896e14c56058431c017bec75769a4508475f86243edd4581fbec5f501f76769f4a5d9683", 0xaa}, {&(0x7f0000001f00)="641755b42f4e641726ac97f5c92a975664bc8342b607b7e78b2cee0c4b6e707fb9d894946b04f69cb365f231515cd778c9609b1b2cef71f71f26d480b471af1427719439cbb56914ae2dc910db849186421823fdf65c77e73f34a4cd0454406f", 0x60}, {&(0x7f0000001f80)="0be33215a2c627d861ef83c5eb8afa3403b08a9883421600122ac7bde83c0556149a0afeacc331ca040fb7ec9b60b536347cb0", 0x33}, {&(0x7f0000001fc0)="b3fd335e26e805e6d28eb3c7630a2bb4d1b9811bcd3d59c3f6d531fdf18594e490e4e182a2cf9858ffd014f2e224d18edb6b329ae175ff637c50b50dc4b358ad01c7b5d26b0fc3897efc5bb131e8a48eb11cd959dc049de8d5f0d8c299148b6fb845601b533e444fee80259b74fdc80b490b733a2c5ac9bbe5be7e2d2586f6cb81a6036c668a9b157d656cd2231328d4f19ce199190dfbe1bc1d8ec7646ba06f566ac723c0c6c018ad08ed093eda929475d72af4263cf35561ac203f72060fa2c72f45c181533b88319991cc7fbf4388ff79ad05ea551fb7730b1c4205f95ac377cc1035a5d65c768260f98f5076198ed4419d57142cfab22ab687ab", 0xfc}, {&(0x7f00000020c0)="ab043bfa3287e7b77cb6c83b76018e3342e50330e43b4e571691f953c551a544d64b847fb3f60195905c5425b78d18cb05cf09bf1cf4e8c7b4aed964786d49a592a621641f6953c1e824b0a3f6a9a1cfcfd662025502375d7d6927bf6487dfb332be83a1cecf678bc7b29ab68e0cc2a1f828dd1a29dbeacab6694e22fc1c89042500854c38e7c7afc385183205b7222484749ab9655a6014e778beb2282e5ad3b242066142f15c29fd5ca8920561a974e8cfdc8f05010547bc040c590c80b47adcf10c5bcc6c86a00baa15dc6fa4892cbb39bcf97058d8b8f70c7350998466", 0xdf}, {&(0x7f00000021c0)="0bc41c75690ef74b08762039a2acbfb5a91e6d0d1d9fbd119d8ce80047963f6355f60f0729546b4764823d1490c40c7514177ec30d2acfa0b4be98ede8cd68e7b2078524aaa618499ddd85dbf46c6cafac740279e28b8fc55f05b04f105ae206e13387dadc24cd0bc2746e771a0dd75cab311b0b05b477", 0x77}, {&(0x7f0000002240)="54c4139d83cc0ac0293e071e2f0c1dee236fb39385eb409e6e0c292b819ce498a814a0a631dc095fbdf87443c9", 0x2d}], 0xa, &(0x7f0000002340)=[@rthdr_2292={{0x78, 0x29, 0x39, {0x3a, 0xc, 0x1, 0x0, 0x0, [@local, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x25}, @private1, @local, @private1]}}}], 0x78}}, {{&(0x7f00000023c0)={0xa, 0x4e24, 0x5, @private2, 0x1ff}, 0x1c, &(0x7f00000025c0)=[{&(0x7f0000002400)="794673adac3a3d0b58a5dd29714acb14dacfdb8cda12032a7ccdde33ce354dc5fea7cbc393dc0c178d491d4bfb7eb51867a3f44323328b3cbad599d1ff965b6932813e583071cde195b8f1db44611a2366dfe27f36b7e438c0e219d8d5", 0x5d}, {&(0x7f0000002480)="bfef5527699e2e24a33948b3d48f4e84936ef08456c6111256ddb803c2816a405bcf2ee2f8568286fdeefb78951daf295fe33fc8b489de0a6bf39570a2ba87d5c29b25c1e0a6763b9b2653a5c028f1a3eaf7af4ec680be01f55289806fcf50dcb732cf9788dfa6874e7f6f5cd29b54baa339f7c3c305a8076fea2fa6d156f89aa4c377eebbe5420a4959d3cc0efcbe835e26c5580e6dc049349e2e4fd5f9c79efc2df9241a1fc9491ba283c00fdb66f30fa174ce805e7d436d9a963a526fa773a7df318401c3e1dfb981cee37a8a3a5a1f0b277f3e70cd18725ab6a3ec0629caf4d6477e70df6c48352b2e7189f6a3cf", 0xf0}, {&(0x7f0000002580)}], 0x3}}, {{&(0x7f0000002600)={0xa, 0x4e22, 0x237, @private0, 0x7}, 0x1c, &(0x7f00000028c0)=[{&(0x7f0000002640)="bea901841bb341720740d6b306d0828148623b252ad5a1c62d92221ffff3bc17b0603e358d8313a61fad674c06e5bf333420398b7f6e6d77fb327fe7da73eb361bc2ac576f220030c98d34b418586ec95b9ddc6932115d8f34e6eea9090cf6e3350babb04878be777a02a771a8c6a8aa5649f1e8a6def758d152f2dc324dd81895ecc14c6906524710d8823cc56347b36feffef26a614c157b010e03", 0x9c}, {&(0x7f0000002700)="09f3406bf3b64016a1aaa2be3a64f3b147b7042d98a3ace02580525ddcdfd3f91e9e2ef111d79bc51438b0c66403ed15703f0257325ffa81ede573d1510df7cce2d31e40a9729426215fbe531c152d79b1dfe0ac417e83daa0a5b54f87f27513f3972f20e85a3461be6cc5586853476b8478cac08fcd38fe3cf1bc593d57fb14a6b3d49ff6fbc3a7a05c89fb54a03d4bed897d41d3ed7f5f570739d1cd2ce964f5ea1859f96e994642cf09223ed62f9b54d54ae75091b8d5d5bf1811c82208ddc4906cb03347eb1420119f26497838eeee39b791a99f44f153952a2b0755e78e5d3435545cdc", 0xe6}, {&(0x7f0000002800)="125927b578580eb8be0b285d72bdab1370017c6d3374b20e332ef0f445f4e2bbe4cbdec535948b6ee89ac8ba73269de93cff5c62745cb7754c600c9c83d253b27b78ec01a056c2b503e0383a6bab68d310f734258ac84624dd004b8cd08e4a56e7ad12ce7f071be6029d685c4bf65435fcc6b263bd89fbf9105c2319dc15be2d0f4c29f76623fa14b6790fda6a2918dc48a71f78747ac7a9f446", 0x9a}], 0x3, &(0x7f0000002980)=[@pktinfo={{0x24, 0x29, 0x32, {@mcast1, r6}}}, @flowinfo={{0x14, 0x29, 0xb, 0x4}}, @dontfrag={{0x14, 0x29, 0x3e, 0xe}}, @dstopts={{0x100, 0x29, 0x37, {0x16, 0x1c, '\x00', [@enc_lim={0x4, 0x1, 0x5}, @generic={0x0, 0x39, "b59fe6c7cc59fdd7ce0203d22add1696cb1898a5892527cb92db09e8b142b233be253d35509f4e78ec1f2cb2ea1001fc7732ec141ac37e6dc1"}, @ra={0x5, 0x2, 0xfff9}, @pad1, @generic={0xfe, 0x6b, "63978072ed75a0a5b694c6a23e0dac10982305a28317a1d375e7d22c78c079944b1033319e18ebe47104281c070dbf3d49b37b7b2a24046e551e4f786f57a2c52da240bef278ac9333f989d27bb513dcf2b6ed1ca4c558f5b1d7c165110e276d911e9c6297ffd7bb011757"}, @enc_lim={0x4, 0x1, 0x7}, @calipso={0x7, 0x10, {0x3, 0x2, 0xd, 0x6, [0x5]}}, @hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}, @pad1, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}]}}}], 0x158}}, {{&(0x7f0000002b00)={0xa, 0x4e23, 0x3, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x5}, 0x1c, &(0x7f0000002e80)=[{&(0x7f0000002b40)="ffe23c4ee0683807c00c3f00e5881c3d842ea208e6524b4524be669c3a020f1c996fd42213ac4b3dfac6c28d9eb0890eccad885e638923d91c904bda9e8c09f24ad2caa31b510905dcd7672f6c118c8354eed01731c4b8647463bbf44f5648ad8eb26dd89da367ce7a5d44df0f1ac394b6c81dee1fc11ab1780b3eea542485", 0x7f}, {&(0x7f0000002bc0)="ebc6ecb77a3b43139a26efca153d7d2c24cd765d302d62", 0x17}, {&(0x7f0000002c00)="5fecd1637a2800676e3be0afe404d038aad0d8899036bbe76b4dd4faa9ef2804453a4bd4ff341d75730ee51c130bda7899196fb6b76c6dc85f8c1545797be2f591df034e47c03496ebacaec807f7d84ad277c1586f71e3ec9d60c884ea0b221485be7d485aa34fdaf7dd93681df3548fe92a8dcbcb28d9a271db7cef80cfe6a929fd6464e4a4a71783aefc408b08f1502016ee523721bde9c18d31d05d179b", 0x9f}, {&(0x7f0000002cc0)="e1210e2562a8044578b14b7278d1f578d59ca7a63e1ee98ae2f55b82888e8e3cd162bd0a8db6defe1db63c4365bfc77a335e445aca067d27c98e9a0c384dc8c15d75c875ee5a236f606929642a6a9d3f35872fba49d8da067bf8a805e66570a214e1cebe2e4d310587ac98c661a3124d62720830bcc60aad488dbf7c28d5da2ee77a5c061e8d13e30e4d8ff4005b36e35237b9703846917a1ca45a5cbe55f3c33e73250d8bbd41cee3b70ba61d23b38458afe17bbabd686762c2a4faaec667763d1a4e2148a552ae6feff17b2abf761dbd5504", 0xd3}, {&(0x7f0000002dc0)="49c79092a612b91a4c24690d37f431a402b374bf970ab55dd9674ef073efc70da16db5a88c054c1fbb92d84d67a4b603ca43dad49626a7042c0267d10d2a9343425c0647ebff47e431b1f7d47fe3f41f872291a2019b836d16aa795591601274092a434275a3e0a0c2d696cdce187ddeb2c965c3555c9ad6fe52cf292351d451e346497cfa753ec9f6a6317f5af95e6429e40b57d010345377fd2569d09fd55f12ea6afc0f54", 0xa6}], 0x5, &(0x7f0000002f00)=[@hoplimit={{0x14, 0x29, 0x34, 0x5}}, @hopopts_2292={{0x28, 0x29, 0x36, {0x3a, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0xa}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}], 0x40}}, {{&(0x7f0000002f40)={0xa, 0x4e20, 0xfffffbff, @private1}, 0x1c, &(0x7f0000002fc0)=[{&(0x7f0000002f80)="1a72", 0x2}], 0x1, &(0x7f0000003000)=[@hoplimit={{0x14, 0x29, 0x34, 0x2}}, @dstopts_2292={{0x80, 0x29, 0x4, {0x8, 0xc, '\x00', [@pad1, @hao={0xc9, 0x10, @mcast2}, @calipso={0x7, 0x18, {0x3, 0x4, 0x8, 0x7, [0x8, 0x3]}}, @calipso={0x7, 0x30, {0x1, 0xa, 0x3, 0x0, [0x303f, 0x2, 0x7, 0x7, 0x3]}}]}}}], 0x98}}, {{&(0x7f00000030c0)={0xa, 0x4e22, 0x0, @private2={0xfc, 0x2, '\x00', 0x7}, 0x9}, 0x1c, &(0x7f0000003100), 0x0, &(0x7f0000003140)=[@hoplimit={{0x14, 0x29, 0x34, 0xce4}}], 0x18}}, {{&(0x7f0000003180)={0xa, 0x4e20, 0x968, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}, 0x1c, &(0x7f00000047c0)=[{&(0x7f00000031c0)="51a9e073de4e85f9d9965cf894ef73473442cc43d825981847ef0cda67da589ec290485fe3735e56b35d2fa1a6407514822b2db83f4bef7b878132ff16cf2252", 0x40}, {&(0x7f0000003200)="148c1331d418adae97bfea83387c94b543454f977d122b78045f649e5af25034eacf79ce970c07a21e950de4d258ca72f7f00394a8edd541d6d6c2ef4b0d877eb95cd46f961c970073380ddf75", 0x4d}, {&(0x7f0000003280)="f9ab2dc26862a9d1d33f005cd67e16712f002e0562fe5f14d00495589cb4cc948b97116b65ef1b1c12dbb74e2bb695d496396a06f0e202d282b9400978b24a80ff4f1d2f034e52b1686b35", 0x4b}, {&(0x7f0000003300)="5578ccb4b82efd88186fc3a91c27461e15b96c834ec2461803d8adf6d49686ae9390fe9172a58fcc8346b930e982f46d5411b18109e1c93c369ca4e394365878e63aa1c2bb1ab89f6981aedb035dc5b56d0a9ef14386d25fdea17216492015d659c2fa8657c8ce2e50e6f6557369f85076c97638dde782b75ff62b9235294d2f23c5349d3faefca7f637d0d46f99f1d2ef769dba6e4f2da9f7729f2eeac895ccb3c5631c650dee125e5104c0da1e273bab4a1cfcd6c8ade44a2d86cc05ec35f57369e1485065e6656e5f318a358209f687172dcf4a09077d715c5a", 0xdb}, {&(0x7f0000003400)="d5ac39b3676379f5935e383163d950eaa7c1f595a2e84372bae208abeb61d4c07971743c3d8870ed5db87d375505ecc1478d973099465a76bf2da0115dfe221d6f82faca4f1e2bd47600683a964d5b23b51d2b7fd9bcdc02f9f25e4a0b99e925afb6169fd326dd0e6cea12fbc0de222367663763fd9e1b417fb2a37b9320c4470b31317d689829ba1cf5654870bd7d3d22cc87838fe91259083a13eaa9d145b4bba230e9a7c5bdd7c01914578b1a057c5e8ffb669e5a3658f5ecb3d09faa2d0d5c811a4f591119c5028bd99819dfa3fe4ac0fa6c04ae0ce1946f45", 0xdb}, {&(0x7f0000003500)="e22d422188c0d72f2daae05b93e2ec71503e69c9aab6af31e0ce7712de72bf962990755a2b72e6a79de1160f1f8ff167360634a01e31a46af722e269a00f0826c99bf72e3faff27657d98f51e27ce4f9414977ccbd6ee86b4ad950078950765561c33f5effc630c84bbc751e417116f256bfd23b178562618991c3911c7b154e9c86da4bf2c2b943c2cce5fbc5e1044ca361d7f93615eef056e15dbe9c7a67f6d37dfebcdf0418b6cd18ca98216624b0470a6520ea9d00b65b70d31fce133f445403ecb65d8514028fa1258b81cc1a925339210fb3e26bb0a68713f6b6b83a1f505df544c99d295974eef75f6d61aca208f3c3ca8bb8409d97eb24e02d4bae6300b8d5a383f4f25c77da10e5563cb3db3ddb7db8eafff8b416b0623f52be75229b9d6d8c8fdf54eedfdd756d4aaf472e301a6264d0c92d55f6cb8b0d81bebddc30cbd2e765824d0a77e53541baa4d0e344f1d7a3795cabc93e05beda7f6949eae5763fea359eb639d0313fbe67bbdbacd76bb9c7752d967ad25339e67b9cc349cd2c6c0bef7fe9db571df0fbc37f5466384348cfe195aafcb67dafeda7b142d80d1cd34b36749e5fdeb499daf5f18053b71b0a96ec784b722c8c466aaa7f6447cdb78d60eb3abb2c8ad1703c5a65619b68092117353641f104889484d68d6503b802f038af870949be127225f176975d42b7c42da8c73c459bf4a19ada018271ea1324f447f4516a57b3e189299d092ba022855c2613de05b67f1523cfff0df88ff97eaea291c4b68bd6ca7696ded87b9ff92c69f32d398a47d4c9283ee959743c8c9c7cb42ada461af95764a69a9e60da7a8ccc536a3059eb0c557a9f2278b31087125f63508bd9731f6051bd6cdb99284e3feaa1e4cf960747441d312651043c4dc6e43a5cd5335ce86259766c04f94f02cc8b3d93eae0fe3a87900bcba51e013072887ed30b02d645cf926a8baa832284e890b91edfe9382ebb232b6c46e216f7790a5d1c41962fa1ab87dcc071bb079ff3a5e64d9b45be4e638db76fb3fd21425513d9ef7904bee9835a65dad908658ffc274d9d785f2a1cd10ea0596c6ada4174a431c17d095d658dc301ffb1ca7c50340e9248aaacda2bd3b09c68e15d2f8cd8e2e13b156da7dc0a97efe9926132b10932910d426b3d9ecd802ed0fd29d8953ef5061c86ae793e333789eb8c6167ff562834f5c772323fda84b055fd9e19b01e0fc146c7a834fcf1acb752feb58e8d3ffc5f5c04a189d65eb30f328e763695dbcecaf5d3af737cb58ecc7855811f9eb296ad67b1cbffe7f6e317344934c522e9320d8a9d62c6337b4134dbaeea0fd9d3ece42a9c4a0794204efbb37590f9626f1e2f7058af1a77ed23de07181e4ed0beee38f39713e9698826249f0a3fe773abe225cf29f362ae4a260c0cd5eb406a1136a983eb2f816dd72b0ca8b2e62438db329becfc5613c4f6c6ff20ac2385e5d7601d7c34aa96a4d0374266477e810ab01f484d75357e4b672d15fe03496650a30e18232d19f53c60e02455ed4a6423e9b8b99a57017eb0c4bff6c52e40e19dc2e7bc426122a21ad90e380b5c76758bf49e1c865f1e2614c90321b9809ec19e0c45229f4c7d274a1fc0acc54b8eaf0d3ce28e23129078534df591e8ad2e7063fecefb04801a833da4f37826ec910ebc1b66c088adccc5564b9d7eb59424af52ef3d9c3ee4896e1cae1b64ac8ebe712138373c6f03106968e6ddbad74c9ddf394c1103ff065ff75f951e49300c546b14b5f84a0d27f3fc4bc2fe9329995941b4fee9760fb0272de93e55f1b22ad71bb3f39009b486c275510041b6b62cd56b0dc995517ad53585cfe722334603c31bfff0357d5e13644c412cacf8b4214e1e74af976ce4933383e2d81f9dc9fb258cbb647dfd9228eb037997c6bbfe5d52da604a375531fa811d4fbf6518633009825541f4a83a4bbf872fdeda0de9d5d8c7a99a86e6c7333a4af9c4666c0316af2a9980ee80370cf35932e10faa3f267e3fb83fcdf0d08f4f2e45d47bc68e1186c3ae5805ea82b2f959b7742ede0488549165e54f5b87fadf0c9fdafcf27b54aed4cd61b08363e6198560c8656e62621d4cb11d979341118de7c81bf60f494d8333ba081607d7ae79dbaced62969fb22cf31daa6360fcd926daf22fda32dc5e5e7c2be60c731471765aa82b7330a09d39b0ef9fd8bba6ff8d57959ffcf42c472537db2bf805a92af0ac72f2c62a4b645194d9ed28281571fdcdd468504b02f309c2ca57d46695d7f5e1cd08e52b72b43c909df10d01e9c2a959daa4a36f6ee5828bb593e62352880e451416bf85c587b6ee5ab65e71dde4e16357672140546857e278c9e3d45bfdb286b127da64704d7d00cea89911ad510230ba13066498898ba12970f96747d20e00f304cb41f4cff323869615474ca4541433c5ad3a3a7bfee0860302d6bba621f3d5a3fbb57319154ce1128450cfe10d64a521742ab9f1112a8894abbba5d28ae134bdacdebc77bde63289031a87f132b6809f66888330c0e80e846beb0dc89e7d268fad8fc7000db06b68834a589ee09308c39020be5e0e5be927dc48beb768f53d725ad341ca265f84ed2ef80b08214f41913cf736a0d06549d2383650086d4990d3fc7ae45c35bdc1b3cee416bc05df2023fa97564ad0ef832efbc287ab37fb591c5b599b43518f544ae461f9870edd2d3749058988a2b5de8f34bd85413023900460d562a387cc920f35c8678f81945ed1c4a35f95d939654ca52b3999547bc781ce04c2ea64ecec60c62a62c9ef5dbf581d2f71fd5149657a3f4f930c2c84f30dd397101342a87a0ceac909f6f11bb83c0fffcc2344aecdcf93bc5dc33b4046b5cbb3513730c96955847c4bf500d0b5b0833bf0423b6c3f387486cd814be92baf7e6a11d8c225ce5ee0f3e6ecd53e57228229e375d5da121cece7307223405b6e31f383dbaac07881bb1e594b9e31103382a321c4fee1679af405a685e4cd3ca428dba96394ee10ac32340f77e360796a05d9d843d861a4cd27e2568d17ad0b94539a348ffac08f5be9a2c11403cd9a551187a1c17a2cbb4d4f8e8ce93481d0f461956ada1d7ca307b8492e830f058ce04f63c96b6551236775cb9f5d714e9d43fc37589c26762b724d8fede3f22f206af03de94476197fd28419b3700f04747edee2b628ecacffc4ec1c34757083ec144e280067f5ba715de146c7bb7ca34293a07f4c4923135766e1410d5ff3f6544c1a633ddcd9593a62bdcc4e59f6f4d480f1780ae366c1025480c02b22967eafd9e9b9e60fb84829d0349c9a07e0abe153d7f543f8c2b6ed966cbcc83ed6c961d098ebe495063354243c61f0e42cd3eebd123e1bdfab306a6bb57cf7d83c656da32dac0c6a4ba2737b9840fdadf409f026f9cddae5f444ca27178080362020719bb412f943eae3e86ba4a8592a0a4040f4285252c720fe19ea455b97ad3876120cec98363a3f664fdb3d08519ccd9fd8885a34c0ff292605f14b8c88a53d917197db5281298ca9a52734d53b25df4c4b7cc48b803ad4cb6364347ea1c14d3d3bbe84676b59ddcb3b3381715e649900884ceab1cc873387caa62548d5484fdb74073700152583885ffc921bda62dbbb772251dc4ea1c8c5ba018d1f953eb7b54cf2af63765c2dcc3c41a413cd57a6898c8370f9cc29b7335513993e928b2298e7f152a41887a78f858153ca7f047e1c7e2d84ea22155e6f89d9a08857f0b4e18472f80281564bea68def182fd43c16814eb0e3e84cf901900536e7f2dd2eb4b2b7250dd42afc00660b60e48f2a4777c8ea38f37eea4046364a389fdf3f85b1b74c298491750a888990df0ece17c7b751a3be896fbcb284f13820f4c7f35fd4609de6133779960cdf42cd4a11a9f524825c53210e27cea1b058fc9f6ea3ef279a15c04654dfb679019b3f3c067d5431e319d54ee4188d680d2f37cb0f46d6a25e1d7b0b31d31d957ef4072c5a64697ec1e703f8f9d3b9caffbad8b80ffcd91fc2568603a21c5bb48973f1a4190a5432b342bd4668b62082c90285ed8893ddb939edbab7061c2e42991365960f90f2e652c88709eee3c9bfef667c2602a73fad3699891c2c6fb6e99d246a6efe14de5896275ea03e6e7184e3fe89f1ca594c17141fea5f44e3d18b9e935ef09870d7dcd9f036893d60465ae9dcd73d786c96dd94c278e73ccf4d75888a10479e120cc49d88700b429c38113f34f8ae8c41ee1e91847e7f400466d9bcbabc20dfa743eed6d03ab3b186bdd2af40cac55d83ac0c4e3dad72b54cd60d286a9372320f47f326ecaaf562d6dfa817a5e0f8a6ea04b552a1e358b2881ef255b10fcce4dc20d42ad3b0c70b24658de493accfa6ae3d80984fac3c1b929e541d63082c6a5de1add78eaf4e075f6901fadccbdbb02dee27eeab8923fc0692d4460129abc3d223d63e0888c77f8954aaecfb77f2fa949eaa26d638986c371c5fafb88839dc3052e71f5ba75df648fc1299a5f663b2e9802327b12d9605f13b45490e4fc6c744b1e4ef4b2f7711d06706dcc83738294aaa665bef1a8801a7e94eb2ff097f2db05e6ec07d111b1882b646032292a5b6a960250bcd189810b74adeaf2e5d2872b8686f6d526866bc390606eef3a2befe0e6bf6a60bde1eeebd9723ee103549ef94fb74f677312c6cf5831c5760fa72a1c7b10f3f40714c7a6d6f5948f6b4bf006e915669013b4305651d102a86b5d7c034a0817200f6f840913134c0a1ddce79abd2bfeceb70ba53da344ebd09f266c059858bc3a7c4f41dcdc86a9d2a08c249046fc141b3ea6d4c896e90037ddc38f29a8471e3b903ca9a9d1ed39ee427c257640360912acf326c26020c0a88708826a540254da55f596a41fd75968b5a1f6e071c4375d4f7865c26840447deebd85a94fdfbc29a0225934022f01a426e46d92c20fd2ed2f9096bdb57d8a53f151c166d5d84f859893d8adf7c536a7d8180ba94f1f64c6a6d4706923c3edd29102771cedf8c8f47a1bd4a8db494aa4df43b2fd5db35f6ec850b7f25087100b54dbdb6867290377f6e6dfbaa7b1b9677b89894ae8c5e97af5bb3d8a28e9e9e31953100fe8d22ead7807b577c3ed9cae6b7957f04237751acc4b87f0e73d0858b673b4225b810fd8a6e25f739e76ca9508c3466184cac686e9d37dafd65e0008e22afac4dc9c273251c9cf55b7bc451034ab105137eaf55a4701eeef01af3673bb3de7084e49bb04d66eac4fa7a1f7f12b4eae6185327b3ece366a8c353e85252670a4d4c3f0aeefef8f39cef0aca05717aafaa8e7b3bf45b5181bef7eb0ffb823568db67c657d3677b5540882b07913d68e14c79547ce09fa77f7686e2060960d1447a4ab819a77a00734841d7853d1cffe76c33a3bec7aecec39da184916ce1761d75ca3c3725016496b36873cb600a247b6e04e5430d589a76f0a1e07e3e291d6f31f4d3881ba0477c7b23812dbceb6a07f9695dea85433e3cb45d832ddd6d95a593eb0ad9732fcba366062251f0cac556c04d9aae982eb6cb2b7a463ecda3c32dfc27277bfce9bb17a53a56aed6c53d231e4da422c3ae6811f2126b964b16db0af5a594e0b05c9cb0b01034eba544fa2d8a5334d17720f7bac509493729717975346b9416cf88e10124713de1025b14a01ead0d70cec96c357cfb8f0e47d1aa7d4a2f006ee50815ec1ecdcb79f413549ccceed867729299d77b4294358001c58f969cae92124ff911c163fc789153704f5b968e3dfeaf005ca9cc462f6428e55a8c6a2f7648d9d46203b091a", 0x1000}, {&(0x7f0000004500)="85f39a6c76b1a1e1ad0621b3118fa75264ae8cb99ed9c868615566d055aebbfa9c80433eb1ff278e75e0eb7626e56dd02dbd6c8f5dd32270078ca78f22d6bc1a8b58b6f20f1c6083b4ad87e7723174e788bed42ddd21df69ca2759685dcb6763c67dc7875bf2b48ad93ba23d8e4e06bf63e21ab708f0a5419bf8e30fc367cf2ac5a0f292cf69d75151bbf23f0ca671c704c433274326be546eee4ac75f287a5a5ef9d71180c856cb0cbfe9a514e7f350ac0fdd", 0xb3}, {&(0x7f00000045c0)="5db666190e8bfe0018", 0x9}, {&(0x7f0000004600)="0c8de56135516f4ec39c132b5a7e1d511b17a88a4d97d6ed1f552034834fcab97e9b4528f05b691e5155c4edaf85dbd9b8aa16d3ce7929d4ba4965b90eed89fd8f79623c1aa5b8359eeb09d21194413b70ffe9ac285735b588d12c256536672c43d488a8d44060c9c38730ecbccf42402bc4d9299f2fc3f9fe63c9f7b46b47f1f7a87bd8bf0ea9e2a5f1a6f1ee1ef2e7fb7a646033a9eeea34c49e73d4bc9e690d295eb2ab87d8d546614c3f5c3e57e6ca000816f72b518b74b4185d04a73ffa77f95f5d23880de1d016ec99402a8303519f2a02659187b21e175f1953c634089edd10c5112b072693aeb33965ad39206c4fd04e6307465f", 0xf8}, {&(0x7f0000004700)="803ac68290ea20b332f0dfd6873fc7f0b06ec9d985525a99eb2a015c71521156677bfd56c285692f1a99c9442782b2c8b84b1ba21173bf083db7006eb1323065ea9ffa86c5aa8fb6036992d0f88dab2ee3d4b5c22ced9567b2be7867a512568b4a075b610f28f67713d6c5cee9dfcb2a2d41be2fd0f62df6ada7665c77098b104523c1c4fba90fa3c319a4f960be605a0b8609", 0x93}], 0xa, &(0x7f0000004880)=[@hopopts_2292={{0x60, 0x29, 0x36, {0x3c, 0x8, '\x00', [@jumbo={0xc2, 0x4, 0xf}, @calipso={0x7, 0x20, {0x1, 0x6, 0xfa, 0x0, [0xffffffff00000001, 0x81, 0x6]}}, @jumbo={0xc2, 0x4, 0x6}, @jumbo={0xc2, 0x4, 0x7}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x2a}}]}}}], 0x60}}], 0x8, 0x61) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000004b00)=[@in={0x2, 0x4e21, @broadcast}, @in={0x2, 0x4e20, @local}], 0x20) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000004b40)={{0x6, @empty, 0x4e20, 0x0, 'nq\x00', 0x1, 0x9, 0x39}, {@multicast2, 0x4e21, 0x10000, 0x2, 0x6, 0x80}}, 0x44) close(r2) setsockopt(r0, 0x537, 0x3f, &(0x7f0000004bc0)="e5c925ad7d26d080c5abadb3ee3fff00ae7c0c77ae6c3b55e6081185adccce78c0caff9a7ca5bfe2723c4379b4a9241a68f91007a286f62b26ae2e3bced0f591f178e6af828c3d1f535c779638e1cb6bb97c2c64adfeab53d7667cd69fc6d687cdd77c3aea5ffea69f5f68660aa0cb924ef174235c5405ad8c90770dbaa517e5dbc7", 0x82) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000004c80)=0x21040a, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000004cc0)={'pimreg\x00'}) socket$inet6_mptcp(0xa, 0x1, 0x106) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000004dc0)={&(0x7f0000004d00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000004d80)={&(0x7f0000004d40)={0x40, 0x2, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0x2}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}]}, 0x40}, 0x1, 0x0, 0x0, 0x5}, 0x1050) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(r3, 0x84, 0x7a, &(0x7f0000004e00)={r1, 0xffffffffffffffff, 0x80000}, &(0x7f0000004e40)=0xc) getsockopt$inet_sctp6_SCTP_PLPMTUD_PROBE_INTERVAL(r9, 0x84, 0x85, &(0x7f0000004e80)={r1, @in={{0x2, 0x4e22, @local}}, 0xffffffff}, &(0x7f0000004f40)=0x90) setsockopt$inet_tcp_int(r2, 0x6, 0x17, &(0x7f0000004f80)=0x7, 0x4) r10 = socket$inet6_sctp(0xa, 0x4, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r10, 0x84, 0x7b, &(0x7f0000004fc0)={r1, 0xfffffff8}, 0x8) setsockopt$inet_sctp6_SCTP_ASCONF_SUPPORTED(r10, 0x84, 0x80, &(0x7f0000005000)={r8}, 0x8) sendmsg$IPCTNL_MSG_EXP_DELETE(r7, &(0x7f0000005200)={&(0x7f0000005040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000051c0)={&(0x7f0000005080)={0x128, 0x2, 0x2, 0x801, 0x0, 0x0, {0x3, 0x0, 0x1}, [@CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_ZONE={0x6}, @CTA_EXPECT_MASK={0xc, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_MASTER={0x84, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @private1}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010100}, {0x8, 0x2, @multicast1}}}]}, @CTA_EXPECT_HELP_NAME={0x9, 0x6, 'snmp\x00'}, @CTA_EXPECT_MASK={0x50, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xa}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @local}}}]}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x49}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x1}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x9}]}, 0x128}, 0x1, 0x0, 0x0, 0x400c051}, 0x40400) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_GETPDP(r11, &(0x7f0000005340)={&(0x7f0000005240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000005300)={&(0x7f0000005280)={0x6c, 0x0, 0x300, 0x70bd2a, 0x25dfdbff, {}, [@GTPA_PEER_ADDR6={0x14, 0xb, @local}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDR6={0x14, 0xc, @private0={0xfc, 0x0, '\x00', 0xf3}}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_FAMILY={0x5, 0xd, 0x25}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_LINK={0x8, 0x1, r6}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8000}, 0x20040050) 1.757123903s ago: executing program 7 (id=7387): setsockopt(0xffffffffffffffff, 0x84, 0x80, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000380)=[@in={0x2, 0x0, @loopback}], 0x10) connect(0xffffffffffffffff, &(0x7f0000000440)=@in={0x2, 0x4e20, @loopback}, 0x80) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, &(0x7f00000004c0)=[@in={0x2, 0x0, @loopback}], 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='dctcp', 0x5) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x811, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r1, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x85}, {{0x0, 0x0, 0x0}, 0xfffffffd}, {{0x0, 0x0, 0x0}, 0xff}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000e80)=""/4097, 0x1001}, {&(0x7f0000001ec0)=""/4104, 0x1008}], 0x2}, 0x900000}, {{0x0, 0x0, 0x0}, 0xb87d}], 0x8, 0x14000, 0x0) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000008c0)={0x0, 0x204}, 0x1, 0x0, 0x0, 0x24004981}, 0x44001) 1.648100807s ago: executing program 9 (id=7388): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000000600)=[{&(0x7f0000000700)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000740)=[{&(0x7f0000000780)="03", 0x1}], 0x1}], 0x1, 0x0) (async, rerun: 64) sendmmsg$inet_sctp(r0, &(0x7f00000007c0)=[{&(0x7f0000000800)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000840), 0x0, &(0x7f0000000880)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xc}}], 0x30}], 0x1, 0x0) (async, rerun: 64) sendmmsg$inet6(r0, &(0x7f0000000c40)=[{{&(0x7f00000008c0)={0xa, 0x4e21, 0x1, @private2, 0x9}, 0x1c, &(0x7f0000000940)=[{&(0x7f0000000900)="81e2376430726aed8e2031b4f6bc968ead445334cce5a7b127fe55509891d954e95f", 0x22}], 0x1, &(0x7f0000000980)=[@rthdr_2292={{0x68, 0x29, 0x39, {0x1, 0xa, 0x1, 0xf, 0x0, [@remote, @local, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x1000}}, @dontfrag={{0x14, 0x29, 0x3e, 0x400000}}, @pktinfo={{0x24, 0x29, 0x32, {@local}}}, @rthdr_2292={{0x98, 0x29, 0x39, {0x32, 0x10, 0x2, 0xeb, 0x0, [@private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, @private1, @ipv4={'\x00', '\xff\xff', @remote}, @mcast2, @local, @private2, @private2={0xfc, 0x2, '\x00', 0x1}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x7}}, @hopopts_2292={{0x128, 0x29, 0x36, {0x16, 0x21, '\x00', [@enc_lim={0x4, 0x1, 0x2}, @hao={0xc9, 0x10, @private0}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @mcast2}, @pad1, @generic={0xa, 0xdd, "6b529402a253b4a617c01e6b542b77c0474c925a7f795bd9d14bb9c459e5a6cdd9e0dfd507ad098ad502685ad8eb286ec1f151597bd5f847ea214cc99ddd6361ae6fd47a93c921b7226437137b3530d86a8d1055e215c1961c015e95c1263130d27bd2541d2053f0a85a70b6261b5a84e6070c7aac50583abe946225bfd266c162ecbf5c85174827c14c9c16f6a350f5f8963e64f17e6226b90a7bfa8481d883111af4c7ced6266f2b5f6d328b143ace8a01e47f968c0176e236ec8532797d8c0eaad4e6636a24d593798e80bc700cb43b2f429a5fa56ad629d2c29982"}]}}}], 0x298}}], 0x1, 0x20000010) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000840)=@nameseq={0x1e, 0x1, 0x1, {0x42}}, 0x10) socket$pppl2tp(0x18, 0x1, 0x1) (async) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) (async) bind$tipc(r2, &(0x7f0000000f00)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000f40)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) (async) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000f80)={0x42, 0x2, 0x1}, 0x10) (async, rerun: 32) bind$tipc(r1, 0x0, 0x0) (async, rerun: 32) close(r1) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c80)={0x3, 0xc, &(0x7f0000000d40)=ANY=[@ANYBLOB="180200000000000000000000000000008500000018000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000dc0)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000e00)={r4, 0x0, 0xe, 0x0, &(0x7f0000000e80)="e0b9547ed387dbe9abc86f5b7de8", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCBRDELBR(r5, 0x89a1, &(0x7f0000000fc0)='wg2\x00') (async) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x48, 0x2, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x8040}, 0x0) (async) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c000000010401020000000000000000020000002800010001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x0) (async) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6}, @NFTA_LOG_SNAPLEN={0x8, 0x3, 0x1, 0x0, 0x100}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xd8}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000500)={r8, &(0x7f0000000540)="ca", &(0x7f0000000580)=""/3, 0x2}, 0x20) (async, rerun: 64) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000005c0)={r8, &(0x7f0000000600), &(0x7f0000000680)=""/6, 0x2}, 0x20) (async, rerun: 64) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000006c0)={r8, &(0x7f0000000700), &(0x7f0000000740), 0x2}, 0x20) (async) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x7c, r7, 0x1, 0x123, 0x800234, {}, [@TIPC_NLA_BEARER={0x68, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'vlan1\x00'}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x24fa3204}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x69fa4a41}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'ib', 0x3a, 'veth1_to_bond\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000}]}]}, 0x7c}}, 0x0) 932.816207ms ago: executing program 7 (id=7389): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a88000000060af90400000000000000000a0000010900010073797a31000000005c000480340001800c0001007061796c6f61640024000280080001400000000a080003400000004f08000440000000370800024000000002240001800b0001007470726f78790000140002800800024000000011080001400000000a0900020073797a3200000000140000001100010000000000000000000200000a13f87eb6bc28d42bd7badc644e6270eabbd062bc5a10af567ad2ca06a50fa0a3bf1e71a69e988347f2cd7120e4db8305993cbee1d33bea07361a77be93f4d0f123e17ab4a81537a6fce1e40e92d10f55a6817facb7c7083f90bba839f86a9db6b44b5bfcf334010000008961fc67a5c383021ecf2d494d0baf045b7e14587c5da9d6a0c301"], 0xb0}, 0x1, 0x0, 0x0, 0x40}, 0x24000840) 841.031535ms ago: executing program 6 (id=7390): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) syz_emit_ethernet(0xa56, &(0x7f0000001300)={@random="61fe71b72b5f", @link_local={0x17, 0x80, 0xc2, 0x2, 0x9, 0x3}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "001958", 0xa20, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x1a}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0, [{0x3, 0xa, "a78ce5400659808000000003004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42c60a5c15b37adac15084dbaf736b41d5af1802"}, {0x0, 0x1, "ffffffffffffff8026000400"}, {0x3, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d036397a0acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x6, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a000023f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000"}, {0x1f, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743474671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68f2d2c6393a9f3becd1a9f51a948b5b303f4f025"}, {0x21, 0x7, "fcc1876d4ec1876d4e6fa3ce2dfdb43a6f021659ff5c2d6b3d9363ed09bd9281c9fe68a3000000006f0000044e43e740e077e1d16212fb"}, {0x5, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1eb91a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d96967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c000000000000000000"}, {0x1f, 0x5, "090000000900000036da018dff16a70b8b1400001600e18e88605aa6be1a02a326a6bce65f81ed"}, {0x1f, 0xb, "d4e77f8854c2b77855807444dd5cbd4b0ddeac8f5280f5d9178b66796b4c15a850e4078c8a61f4a1936bfd2868bfb38d16aa1129954c7c1c102f6eea58a67659ed751b2a1dea57caba3e1ce15024c25eb512471954efdf4de80d7ca3c6"}, {0x0, 0xc8, "fca06311b404bf722cf06364ee49d1d33a69558cc4936aebf2f1a80d6cdb1d0cc17701e6152374fdc4bb7a24209117725839d0ee30d0041ab3b6cf4f16ab09546170b32b4ab35c624c848255416456abe7162b45ec1e8b42d7bba878ec610a8a03778931b49f53519887ee05795451ac3c3ca2d222e1a6fea611cd9f08adbb777e0cd67de188d27c0ee5e8bd2c76cff7ff14a4e249588ab5acd79044c61daf71fb88560d7fb1237c98a0707d84197b5b0605962c7a08f76b5a6f8ca28404a7a23f69aebcbb7ce8a992b52aee42756ba453856d6d187af7f62d4efbea4d1afccd1137e7f445233158ead8173baf8df610197656743854ffd52fa1aab3c5977422aca53d8ce83529638a997d9a9cca7402d939c39dec79ed274a586b69d798fb8649bb92dd78ed08c6518afcb196511b3e111826d4f1ef8e92d1e1c033160160a0dedea1baaed7eaa86adb4cb6c509116d66c5bde183defc33a4f907084ad89b92fea3cf60cce9aefceaa8a251fa5dc57ea1e648bf0a7a5b943f73291001790ccb1397d1b3e526ef30cbcc3204678063ffb9c4c07978b880a44e75a3be56f2029912631a1bc9d2e4f72127292dee3a98b1ebc03941a46475e8cacb75afa0e7d159bf83d925d1ea1849623eb3bc52acbf3f1be85c56ad2ae1c600b0e1124eaad8c21ba91878f9ceb9454352b0fe93856bb52bde7e08d14e5ac49e20e5af020c61de8fa2ca182bb1aa8049747e067011a553ce3bf7bd82c14cb4c90404c9b0451b590966c424918e0d582573c12a1c65aea5987350df5995fd38343be3a227f03f905a3c36102bbca9ccafb331e5f674b773e8f833919afbc0f8250da29a53dc260e0dcad772e542502924075ef5511cacd6fc533093f337d5a1ed93b50f2c186a86f6a2cd5ee37e77204fb99749a219ec6405e3860283ea41a2e69a1c48af70d4c56f6df00a2dd51acd29d1cae523ac9eeaaf3ea806395515bbb2c9a0168ff8c59c2975f2eee1f7b60e6fb9d0ef04f2940d956155fb0777e8be5a30debb690e243d4cf2663ddf7fa6f0ace86d0d881da1d8d7c08c62d08483661cd496771c42f7663d82ebfdb9f4caf2650f9d69c87e6867e426ce4521231d04efd516020b17b4e4bd7df8b33a6a6bdf6af4f2463f1ce96ede77d4dc9f89843ba7205e0e451933c0dc806896028beee7104b7792301e005806b0b06f652b91d96d5966f67d6a97631825851bc6c45f4a91a2a83e65c7df0048d167c4ecd3699b828f71358e4ca3f6918f30a981fcfe262bea444c6148577c9f1c76bf4d7111490110edae4b02b9cb43a79e34d96e93ac7d3351e151c1de3a8b2d4e73e92a08bec730d915bebe3f9c8d7f9e75f0e851ff63551b9b73547766827135fc683d8bf68199cad26910bea7a466153b22f6a7b48b8c34453ccc0ddd010d6cdff56023f5654fa6c3008bb7b33bf1db5634b47ca58e460285b1b4f4e32777c38f622fdd95bedabf3d5199d727ebbd4b9f2f396c7f43a29269afca56cfcd19d3a5dd1b316b8f4b0640f118df0518f6efceaa58cec88d581ff294b0cf5e9e5b8839e45d508c07f5fa7a9f91fd90fad1c9dc2110abda4eec60d60822be669f10e307dd1379284e956c59838020e8660cf5f852f92b8e0f43b98e9b3df23c69e16e8a3e7e3432620e8d6c3ca0d9b1b8d62da27bf73ec0fc32f6e3230375a2c4773838309966b8ba20cda4be78cfeb05629f34b539532cc625252b326b953cf0bd1292adc5893f93196548b3dedb6d0850cf187be05ddbaf19e36ceb5575c38b2b68992564988e4fa7d5e4b610917d4af1179ab4102d4dc73035ca709e7566f2e4f815ab4a702f6e2f5c917d77511d591965a587193e4d4e8ec9c330e5a76c8940b9521718f7c6af215efb77d308a3c23357b325840cdd53fc598e5e93f1b6c5a558c0522dbfeb9d23cf3b348c170ce18a58422eaf4fb59ba55fc3f808f9e1b6c817ea003e159ab064ee6beebc067be398c31d7248f2e31d41dcab766deffe603be89481d734d3af6e51ffa8cefdcfbcd27871162c66447edaa1bd8b3df8e061694592cd0cd1ac1a6329734ebb678ec84993fefd90e3f85a625e326b9d7817bd6c268b071fd5d5bb385bb478d56126cb2166948eabecb529d766c6900a5a7a897f0f1d898d295eeb9dc72e6fa521b86b2a604208b91016c1a08927a5944b1daa996500c4bccff47da146f389b03b02e6905ae8fdfc49d4848acad0e5f4ddd48f8e16cee2120fbfe6196133d4ee8d"}]}}}}}}, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000a00)={0x1, 0x1}, &(0x7f00000010c0)=0xc) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000001100)={r2, 0x80000000}, &(0x7f0000001140)=0x8) recvmmsg(r1, &(0x7f0000000f80)=[{{&(0x7f0000000200)=@xdp, 0x80, &(0x7f0000000400)=[{&(0x7f0000000280)=""/222, 0xde}, {&(0x7f0000000380)=""/4, 0x4}, {&(0x7f00000003c0)=""/33, 0x21}], 0x3, &(0x7f0000000440)=""/224, 0xe0}, 0xc7d}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000540)=""/80, 0x50}, {&(0x7f00000005c0)=""/161, 0xa1}, {&(0x7f0000000680)=""/107, 0x6b}, {&(0x7f0000000700)=""/72, 0x48}, {&(0x7f0000000780)=""/202, 0xca}, {&(0x7f0000000880)=""/110, 0x6e}], 0x6, &(0x7f0000000980)=""/110, 0x6e}, 0x8}, {{&(0x7f0000000a80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000b00)=""/243, 0xf3}], 0x1, &(0x7f0000000c40)=""/78, 0x4e}, 0x9d}, {{&(0x7f0000000cc0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000d40)=""/245, 0xf5}, {&(0x7f0000000e40)=""/217, 0xd9}], 0x2}, 0x2}], 0x4, 0xc0012100, &(0x7f0000001080)={0x0, 0x3938700}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) recvmmsg(r4, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe72}, 0x1}], 0x1, 0xe88e164663c85842, 0x0) syz_emit_ethernet(0x3c, &(0x7f0000001180)={@random="9de05b7bd0c8", @random="2b89a1b7a248", @void, {@ipv6={0x86dd, @generic={0x7, 0x6, "2a85ae", 0x6, 0x73, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, {[], "abf5dd51d434"}}}}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0x3}, {0x0, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001240)=@migrate={0x50, 0x15, 0x1, 0x0, 0x1, {{@in=@multicast1, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x1400000}}, 0x50}}, 0x0) r5 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000001d80), 0x43) setsockopt$sock_attach_bpf(r5, 0x1, 0x21, &(0x7f0000001dc0), 0x4) write$cgroup_subtree(r5, &(0x7f0000001e00)=ANY=[], 0xfdef) r6 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f0000001e40), 0x43) close(r6) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70ad25, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x2, 0x4}, {0x0, 0x9}, {0xf, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x10, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x1}]}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) 840.308776ms ago: executing program 0 (id=7391): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, 0x0, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0xfffffffd, @empty, 0x7}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x28, r3, 0x7, 0x0, 0x241, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) 815.641382ms ago: executing program 9 (id=7392): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_NAME={0xa, 0x1, 'owner\x00'}, @NFTA_MATCH_INFO={0x18, 0x3, "00000000ffff0000000000000000000001000000"}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xf8}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) r1 = socket$inet(0x2, 0x2, 0x11) socketpair(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg$inet6(r2, &(0x7f0000000140)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40016) write$bt_hci(r2, &(0x7f00000001c0)={0x1, @read_local_amp_assoc={{0x140a, 0x5}, {0xc8, 0x4c, 0x4}}}, 0x9) sendto$inet(r1, &(0x7f0000000100)="1234", 0x4, 0x0, &(0x7f0000000200)={0x2, 0x1234, @local}, 0x10) 784.567483ms ago: executing program 8 (id=7393): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) (async) sendmsg$nl_route(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x20000010}, 0x4088800) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={0x5c, 0x41, 0x1, 0x2, 0x0, {0x3, 0x1}, [@generic="0f000000", @typed={0x3c, 0x1, 0x0, 0x0, @binary="00112233445566748899aabb86dd2c00001c00002b0001110000010101010253aa58fe6cbdf0357065ae44132403b1fd606412c3258e2b0d"}, @nested={0x4, 0x8002}, @nested={0x4, 0x8003}]}, 0x5c}}, 0x0) (async) sendmsg(r6, &(0x7f0000000a80)={&(0x7f0000000640)=@ax25={{0x3, @bcast, 0x3}, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @null]}, 0x80, &(0x7f0000000940)=[{&(0x7f00000006c0)="d2b234c5c0f9a7537f06be3fedd1019623ffcc828e9496cac0e79eb37b0197bb29551a001bc9de0b", 0x28}, {&(0x7f0000000700)="ae120d58aff43bf31f1d192001b8eb6ade0eadb61496fdb9079ee58a47", 0x1d}, {&(0x7f0000000740)="9c73e01d75301d729b26b837b30cd26b003fddb4c19562b8bad15fe91ef9da09ad3be6100b65c715af225026a347cfa357ad5d6a58feff918f1a0b97683a121c796d4ae54b90835ecc47c276f8d7415f1340b77bb709a812cfff28088ed8b1a9bd67771c6dee50a9a8f900329d4b500cf9363b39d64c5ffe6b1ca47cf8914339b4ef251876", 0x85}, {&(0x7f0000000800)="e14d05e11fcc40d401fe437008f7480679e6130c2f13468f2f21fcdebb898318523a994ba934a2f2348d3ebc3b9e4573b7fa9c494b8f565beca676312af9af690b979657a147580c0dd8c3c0be21cb704c22fdffc95e78625b6f2cd16663f614e5f0da219f526dd568ca192f593d4388de328ead5bb5f073077004a68e193462c39a0ba7a4c965d6ec6d9ee80634be59c588d36c6b4c5e65225c6ec43caa28de50777cb38b080a49b142f1f2a73e5c02b1c7ae68d6ea91934814200b6b1c708e0e67e22c87", 0xc5}, {&(0x7f0000000900)="9210d026c145e38d7ea60d280e2cab", 0xf}], 0x5, &(0x7f00000009c0)=[{0xb0, 0x113, 0x6, "4fedb490148cf136ea5bcf745ae9a332a1506163f2a91019b2c41f4da9866cc7676cba0194668f0cf82b06b1fd69740494a260875ccd1d002a9026c12c0f5f86b28a89a69574e999132b151596cd4daaa087e18de910ea61f16cf5fa0b175076fae72e12fb8ed9541d5a5f78ee0b8ae79fb292d8c9323488364903ec59602dab552e36bc84731dacfa2f09c85114be58ef678729f99043636eea186e"}], 0xb0}, 0x4048000) (async) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r2) getpeername$packet(0xffffffffffffffff, &(0x7f0000000f80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000fc0)=0x14) (async, rerun: 32) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001640)={'syztnl2\x00', &(0x7f0000001500)={'sit0\x00', r4, 0x20, 0x62fdb5c4a7ca279b, 0x6, 0x6a6, {{0x3b, 0x4, 0x1, 0x23, 0xec, 0x66, 0x0, 0x7, 0x4, 0x0, @multicast1, @remote, {[@end, @noop, @cipso={0x86, 0x3a, 0x3, [{0x5, 0x6, "fdb939f5"}, {0x7, 0xc, "ca33ae4148b913081409"}, {0x6, 0x9, "47097ee9e03401"}, {0x5, 0xa, "e5d54a17e806f774"}, {0x5, 0x5, "f14343"}, {0x5, 0xa, "e486a23a1abd1835"}]}, @timestamp_addr={0x44, 0x24, 0xd5, 0x1, 0x5, [{@rand_addr=0x64010101, 0x10000}, {@empty, 0xd}, {@local}, {@dev={0xac, 0x14, 0x14, 0x11}, 0x9}]}, @rr={0x7, 0xb, 0x20, [@private=0xa010102, @multicast2]}, @ssrr={0x89, 0x7, 0x61, [@rand_addr=0x64010100]}, @noop, @timestamp_addr={0x44, 0x4c, 0x9d, 0x1, 0x0, [{@local, 0x9}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xb}, {@private=0xa010100, 0xffc5}, {@loopback, 0x3}, {@empty, 0x5}, {@empty, 0xfffffffb}, {@loopback, 0x70}, {@private=0xa010101, 0x40}, {@remote, 0x5fb}]}, @lsrr={0x83, 0x17, 0x8, [@local, @rand_addr=0x64010101, @private=0xa010102, @local, @rand_addr=0x64010102]}]}}}}}) (rerun: 32) sendmmsg$inet(r2, &(0x7f0000001b00)=[{{&(0x7f0000000ac0)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000d80)=[{&(0x7f0000000b00)="f5ca35a169d5782cf3f22a59b7813b82732e4556deb87eb336ddc035e198ab9eb01088ce9f242aad273b2a962af662cbfa9dfc9cb2707f96aa10477a70f3b8114f146917b156ae67b41dd5027a89336fdf4bda9c7b8ad3f8bfdf6cdbd60173c81348d409d2a2f6c15417ed5e6333470d0d90578764d5be0f9600eaf5f093dbc32449c1ad516a6116b09449073e20e30120a64ffbe22041c6f4ecaab3df8693d60ca2", 0xa2}, {&(0x7f0000000bc0)="4f7dd26d6c5dbe9cbd65de8052d9357d485c03ea5f678c915abbb6384d7e01b35dd0684918ebe662afb5403bd9512628ab5991b913e3a680b7957d877d2d56d7754d63e55ae8fca5b646810df6598de4a6aa19d43cf5db40488e8376eef4de2a6b10aeae77436511355ce0a69c594ed6cc9813389b97f3bf8e6ea9205c34", 0x7e}, {&(0x7f0000000c40)="7d0786a3490d9447ba080c744d32f67e75a12adbc633a073a8a4bded443bf8b522464512e6310c043ccc315b8085884064164ae1a5d1a18a", 0x38}, {&(0x7f0000000c80)="050c208008087906e8ee988735d3d08f4c854079af6a48cef166db13f348d3fe437bb257d82fa8b3c9a13b57538685d43dfc86cc9e14e78378fcb6c240b549", 0x3f}, {&(0x7f0000000cc0)="7a02931daa3af8804c1467e260f40ccccda7407c8c32f31ee7484253d9c81a65044b93de2a509500ef6e1e43cca1993eebf7ae69e8b9bf13d21474ab441990f7ac86a199651ba0b396385880c7b210b37659c4cfad9190af1733623aba9fbaf18996adf7bfd72d2c5d636a411ec6d95cdef69818e04e0483982faafa0407d3159b9dd0ef555497c2427b64522c1955683a7b5520d82624d09cf8a628dffb36", 0x9f}], 0x5, &(0x7f0000000e00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @multicast1, @local}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @broadcast}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2d}}], 0x58}}, {{&(0x7f0000000e80)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000f40)=[{&(0x7f0000000ec0)="53dd0c9073855cebd8ffbc3e57c71dcf3132d483e1171a2564a35c9283f88890d275bf4370fbdf2d23d66fd9b8fa43122e0f64d6993e55addc7b06c904587a773ff5af94956bca1a04d58cdd89a6d4574d8730f6a9c9159f709d02d0", 0x5c}], 0x1, &(0x7f0000001000)=[@ip_retopts={{0xf4, 0x0, 0x7, {[@generic={0x94, 0xe, "09a3752a3b8af08349e26716"}, @rr={0x7, 0x17, 0x4, [@rand_addr=0x64010102, @local, @rand_addr=0x64010101, @remote, @loopback]}, @cipso={0x86, 0x43, 0x3, [{0x7, 0x5, "40bb0c"}, {0x5, 0x6, "1f3fbabd"}, {0x5, 0x9, "103cc70161f93a"}, {0x5, 0x7, "58fa3d46f7"}, {0x6, 0x10, "10e2daaa46ac40b0c9b806320f21"}, {0x5, 0x12, "c34784a2394cccee8eee82e7dd465532"}]}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x4c, 0xd3, 0x1, 0x6, [{@remote, 0x3}, {@broadcast, 0x10}, {@empty, 0x8000}, {@local, 0xe56}, {@local, 0x401}, {@remote, 0x1da80}, {@rand_addr=0x64010102, 0x4}, {@private=0xa010100, 0x3}, {@multicast2, 0x9}]}, @generic={0x94, 0x7, "3f5b8c2158"}, @ssrr={0x89, 0x13, 0xec, [@dev={0xac, 0x14, 0x14, 0x27}, @private=0xa010101, @local, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @end, @cipso={0x86, 0x11, 0x3, [{0x7, 0xb, "37724263c82f38d598"}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @empty, @private=0xa010101}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @dev={0xac, 0x14, 0x14, 0x31}, @rand_addr=0x64010101}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}], 0x150}}, {{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000001180)="774997e22654d88dfac6f0c7df5af57b621179f84bf158c305a420b2113297ab5e7188e80a8af0d9e76421e28b53a4a54a693cb5e1e35e3eee9f8355e27bc6442e2d67b23dcd573fcb36165b0c42301c6a3d391c838482d4e158da06dca44cb7324ca92048b3ccbe9c74fd2f0420de5b9999c4e6067cf90decad74f68d6449", 0x7f}, {&(0x7f0000001200)="5ae247708e60a539d65d546e32ab6c69c94a9acddb35a7d44b8413f6cf11e36a5282dfa5f2a9df68f6fac0c68e343343a10cf0f87f413dd571c4a5e863fac7fc495a2960f02af5d7edafd62dd5751307e881baf128df89dd29773b5745a625473d0210b272bf620225593a862a83bf2bbde85f00f6cfc1156d52b0d048476ead429dafeb43ca0741847b9083dd9abb9038e62efbec1948063fe036b04da65d815034b6031179", 0xa6}, {&(0x7f00000012c0)="fbc24df9990c57ab73ce5270db0fc5bc1b20d24a054eb3a17bf8dbf4411998e62f9592447f4b603c8828900c7f75a28cd9a391e56969362bc80b056c601b368a16056f236e3a97be05652696290c6a65b303bb14f3018c382de0f13e803bd9557368b1ba50232d472e945e5cc9419d67206ef9497731dab3f5739e47f4b2d989825cf63cedc5cf0a7ed2f610cf3f1183bad8ae071f84deeccb29f154b930d777fc0fc9f6b28d8c7489b5b68148e93806f73e2507bb45d511e3e62f558b2f2ec3fb6fdd61f7fd6313b3e454bb417708140e6d68f069cc51a47672f1a837d5bb9f51e01ebabbeaf48054", 0xe9}, {&(0x7f00000013c0)="71eda17842b303c64063ebc90e7ebd245f221e79bc1c39616aa8d5a17f5c93fefc3b501b19cd81f3a8542e64b87228479adfd69bc19c00b3a68198cf6ff29355ccd604f6a3359a11bbc9e24262dc001d0645656a6b34980d477be22e77ba64c971043be99b489d1a81dfc27fc88f55ff7d8e2e4df007a7605e5c3e411a113f2f2c1fbe2e38ee2ef6e87d8ae084fcec9e280057f974629f15b3b56bf6367af673284c8cdf6627a9ad6f396fef52329fb5ac433d4088dab70aa0b949c4f34822fe4167a4cd046059a94159e76fbcfa43162781c0955b6670d074240e20abb1c265fd5f7ab3d7f23fee446250", 0xeb}], 0x4, &(0x7f0000001680)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xd2}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xcc}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_ttl={{0x14, 0x0, 0x2, 0xf95}}, @ip_tos_u8={{0x11}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0xf}}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @local, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @ip_retopts={{0x7c, 0x0, 0x7, {[@generic={0x58, 0x11, "88e414b3c2f849f50764ac03275650"}, @generic={0x7, 0x6, "5c42a269"}, @cipso={0x86, 0x2c, 0x3, [{0x7, 0x5, "24b97a"}, {0x1, 0x5, "9e16e8"}, {0x2, 0x7, "d56cc88d81"}, {0x2, 0x5, "a5e9b7"}, {0x2, 0x4, 'v^'}, {0x6, 0x7, "eb67ccd005"}, {0x0, 0x5, "d73944"}]}, @timestamp={0x44, 0x28, 0xb5, 0x0, 0xf, [0x7, 0x2, 0x8001, 0x3, 0x5, 0xf9, 0xb, 0x3f800, 0x9]}]}}}], 0x150}}, {{&(0x7f0000001800)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000001ac0)=[{&(0x7f0000001840)="7a0253a8fc3390be9c6c01fc126e6a4a5d0d2a9fccb6994cf37d61c9e12aa8dfb2cd42d23794a93b7aedfb7ab923981d35bfd614e7737d584f78fdd2b9430c3a4901f55d2cb916a582e0d3db04da8889a23ad15d4a9753600402a8028e655d78c9e60ec03a13ed4be06a59391b5bcc4b99e15a628aabe84c7ea1484b64e24e80db479b246fd062a55d985838c921612d916d30f9f13c99aac7e36d71084cbf20d021c140c09383e2f1a382031153ce23a85fb2fee8e9463b3fd06450d9cc30287b449fa5697136", 0xc7}, {&(0x7f0000001940)="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", 0xfd}, {&(0x7f0000001a40)="4eef0efacfd4decb68582008d75ad1e9fee2407120bd219d61d9fb9f06ea8136fa9419c2385590bdffbd597b93b55b6cdfb05463313aeee931e08c6f668d47f9f78d65b6b4df9b3e08635083dcc8", 0x4e}], 0x3}}], 0x4, 0x4040000) (async) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)={0x24, r7, 0x1, 0x70bd28, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x24}}, 0x80) r10 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r10, 0x11e, 0x1, 0x0, &(0x7f0000000040)) sendmsg$nl_route_sched(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x100, {0x0, 0x0, 0x0, r5, {0xffe0, 0x1}, {0xe, 0xfff3}, {0xfff1}}}, 0x24}}, 0x4) (async) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000000c0)={r0, 0x6, 0x7, 0x8}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x12, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r11}}, @jmp={0x5, 0x0, 0x7, 0xb, 0x1, 0xffffffffffffffc0, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @ringbuf_query, @jmp={0x5, 0x1, 0xb, 0x1, 0x8, 0x20}, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @map_idx]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600), 0x0, 0x10, 0x3}, 0x94) 681.153203ms ago: executing program 7 (id=7394): close(0x3) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x1, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0), 0x4) sendto$inet(r0, 0x0, 0x0, 0x4048002, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) close(0x3) 544.993784ms ago: executing program 7 (id=7395): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r0, 0x0, 0x90) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(r2, 0x0, 0x2000c890) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) connect$inet6(0xffffffffffffffff, &(0x7f00000003c0)={0xa, 0x4e20, 0x101, @private1={0xfc, 0x1, '\x00', 0x1}, 0x5}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=@ipv6_newrule={0x30, 0x20, 0x2d2c6d60ea1da725, 0x70bd25, 0x25dfdbfb, {0xa, 0x0, 0x0, 0xcd, 0xfe, 0x0, 0x0, 0x1, 0xb}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8, 0x6, 0x7ffe}, @FIB_RULE_POLICY=@FRA_UID_RANGE={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x20008005}, 0x10888) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r5, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x10902, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646, 0x800}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8, 0x9, 0x3}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40e95}, 0x20048040) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r5], 0x5c}}, 0x40) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 538.802041ms ago: executing program 9 (id=7396): ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000500)={{0xffffffffffffffff, &(0x7f00000003c0)='\x00', 0x3, &(0x7f0000000400)={@align=0x6, {0x401, 0x8, 0x1}}, 0x93, &(0x7f0000000440), &(0x7f0000000480)=0x2}, {[0x2, 0x5, 0x9, 0x5]}, 0x8001, 0x5, &(0x7f00000004c0)=""/5}) (async) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000500)={{0xffffffffffffffff, &(0x7f00000003c0)='\x00', 0x3, &(0x7f0000000400)={@align=0x6, {0x401, 0x8, 0x1}}, 0x93, &(0x7f0000000440), &(0x7f0000000480)=0x2}, {[0x2, 0x5, 0x9, 0x5]}, 0x8001, 0x5, &(0x7f00000004c0)=""/5}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x2, 0x4, 0x1000, 0x1, 0x229, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) socket$key(0xf, 0x3, 0x2) (async) r1 = socket$key(0xf, 0x3, 0x2) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000001c0)={r1, 0x101, 0x3}) socket$nl_rdma(0x10, 0x3, 0x14) (async) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)={0x10, 0x141d, 0xffffffffffffffff, 0x70bd28, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x44080}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000680), r4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000006c0)={'team_slave_0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000006c0)={'team_slave_0\x00', 0x0}) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000700)={@remote, @remote, 0x0}, &(0x7f0000000740)=0xc) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r6, &(0x7f0000000880)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xac, r7, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x48, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010102}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x38}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1b}]}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast1}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r9}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x1}, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000040)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2c, r5, 0x1, 0x0, 0x0, {0x22}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}}, 0x0) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f00000002c0)=0x9, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x3f0}, 0x1, 0x0, 0x0, 0x4008091}, 0x4000004) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x6a, &(0x7f0000000200)=ANY=[@ANYBLOB="b7000000000000006b0afcff1600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000bfa200000000000007020000fcffffff8500000001000000150007000000000007000000cc0f0000bf01000000000000b702000004000000b703000000000000b704000000000000b705000000000000850000001c000000b70000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x6a, &(0x7f0000000200)=ANY=[@ANYBLOB="b7000000000000006b0afcff1600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000bfa200000000000007020000fcffffff8500000001000000150007000000000007000000cc0f0000bf01000000000000b702000004000000b703000000000000b704000000000000b705000000000000850000001c000000b70000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 481.596742ms ago: executing program 0 (id=7397): r0 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000200), &(0x7f0000000280)=0x60) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000300)={'hsr0\x00', &(0x7f00000002c0)=@ethtool_perm_addr={0x20, 0x2b, "95efd3e46b52ff5b211ab866284e177a9698a8094710662cb1f6260390a703870168d85ff98043109ca39f"}}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b405000000000000611068000000000020000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0xa, 0xc4, &(0x7f0000000100)=""/196, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 457.698168ms ago: executing program 6 (id=7398): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="40000000020301010000000000000000020000000800010001000002090002000000000002000000080003"], 0x40}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x32, &(0x7f00000007c0)={@random="e90c610faca2", @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x3, 0x11, 0x0, @empty, @empty}, {0x0, 0xfffe, 0x27, 0x0, @gue={{0x2, 0x0, 0x2, 0x1}}}}}}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x298, 0xffffffff, 0x0, 0xd0, 0x168, 0xffffffff, 0xffffffff, 0xd0, 0x168, 0x200, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x0, 0x7fffffff, 0x0, 0x1517f, 0xffffffff, 0xfe}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffc}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x1000) syz_emit_ethernet(0x2a, &(0x7f0000000300)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x2, 0x8, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f00000003c0)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000400)={'pimreg0\x00', @remote}) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x5c, 0x2, 0x3, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x8f9}}, @NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0x25}}, @NFQA_CFG_FLAGS={0x8}, @NFQA_CFG_CMD={0x8, 0x1, {0x3, 0x0, 0x3d}}, @NFQA_CFG_CMD={0x8, 0x1, {0x4, 0x0, 0x11}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x3, 0x2}}, @NFQA_CFG_MASK={0x8}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x10}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x4040000) 400.917673ms ago: executing program 8 (id=7399): setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) r0 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r0, 0x29, 0x5, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000580)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900182b01fe800000000000000000000000000025fe800000000000000000008dffffffaaff"], 0x0) 265.296086ms ago: executing program 0 (id=7400): socket(0x10, 0x803, 0x0) (async) r0 = socket(0x10, 0x803, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1f, 0xf, &(0x7f00000002c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x8b}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1f, 0xf, &(0x7f00000002c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x8b}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0\x00', 0x0}) socket$pppl2tp(0x18, 0x1, 0x1) (async) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000380)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}, 0x2, 0x1}}, 0x2e) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x6, 0x4, 0x4, 0x4, 0x0, 0x1}, 0x50) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x6, 0x4, 0x4, 0x4, 0x0, 0x1}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1f, 0x14, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000640)={r7, 0x20, &(0x7f0000000680)={0x0, 0x0, 0x0, &(0x7f00000006c0)=""/4096, 0x1000}}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001980)={&(0x7f00000016c0)="9d4ec68eb3817496c514f04dc6a71126b9ee6cdefc4dd403a3a13d4a1e3f0b69a591", &(0x7f0000001700)=""/191, &(0x7f00000017c0)="a7596cea6809bd81f144a689f51307a1f83257b0543ec84fa85cf31fb85dd7c0a1eb544fc81cc457af94596844377e7faf9a208143451a7216b348a160666ffe7deca0cef961ee3ad405e5f9211cf649b1400704f80438f69348c57250670084383a563596ecbf7d6dc0aed5efc6d61cf33856c4328a916a79769fb9bf08dff84555b6f3c22173e7ef5e4c0ae40bb2f238e01c47d6a0e7f477e3f8bff8e130404de44b95ef0725a212f57253bc6d5c131ce959a1bc867afdfca0156282309a63bf93569ad3f2a436948b61f70a608f86e49ac8c74de6add4427c221a694ccaed9808e71dc66593e7e3ca28933f0e374305c74fa3ae94ab", &(0x7f00000018c0)="edf8ccf74b6c7a4a5190f317b5c856a7892c52ac447cff1baa2d6146964f4b0d862eb0ea0a251df4b4250b548717943a544adceec6bc44a0488ccaa6897179ed215255e7b977681acaa60624402c553d5a23d9b5ad11516c0ca0053c517124707e917d7a598634f929e4dfe1558c0a67f69d31af9e151239b158a56e33cbc301f52b9cecf50955c65f4d7df79484", 0x305, r6}, 0x38) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r5, 0x111, 0x2, 0x0, 0x4) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) (async) setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r8, 0x11b, 0x3, &(0x7f0000002d40)=0x1, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r8, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r8, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) (async) setsockopt$XDP_UMEM_FILL_RING(r8, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r8, &(0x7f00000003c0)={0x2c, 0x0, r2, 0x1, 0xffffffff}, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'veth0\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x6, 0x0, 0x0, 0x2, 0x1}}) 206.436834ms ago: executing program 8 (id=7401): r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 64) close(0x3) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r2, &(0x7f0000000000)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x7fff, @loopback, 0x5}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000180)='g', 0x1}], 0x1}}, {{&(0x7f0000000200)={0xa, 0x4e20, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000280)="1b", 0x1}], 0x1}}], 0x2, 0x40) (async) sendto$inet6(r2, &(0x7f00000002c0)="8b", 0x34000, 0x0, &(0x7f0000000300)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r2, 0x1) writev(r1, &(0x7f0000000380)=[{&(0x7f00000003c0)='.', 0x1}], 0x1) (async) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000400)=0xffff1884, 0x4) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, 0x0, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x4}, @IFLA_BOND_UPDELAY={0x8, 0x4, 0x5}]}}}]}, 0x44}}, 0x0) 173.44495ms ago: executing program 6 (id=7402): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r1, 0x411, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x9}, @NL80211_ATTR_PMKID={0x14, 0x55, "dd7721978a201afa0222830bea97d158"}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c8d4}, 0x4000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r3, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}]}, 0x24}}, 0x0) nanosleep(&(0x7f0000000300), &(0x7f0000000340)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000002540)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000a000000080000000240000f"], 0x0, 0x46, 0x0, 0x6}, 0x28) 92.777764ms ago: executing program 9 (id=7403): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) getsockopt$inet_sctp6_SCTP_ECN_SUPPORTED(0xffffffffffffffff, 0x84, 0x82, &(0x7f0000000100)={0x2, 0x8}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000180)=@sack_info={r2, 0x81, 0x2fa}, 0xc) (async) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f00000000c0)='wg0\x00') 0s ago: executing program 7 (id=7404): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x0, 0x80, 0x0, 0x0, 0x1}, 0x28) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x81, '\x00', 0x0, r1, 0x3}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x2, 0x4, 0x8, 0x1, 0x0, r2, 0x0, '\x00', 0x0, r1, 0x1, 0x3}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r3, 0x0, 0x0, 0x4}, 0x20) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x25, 0x5, @val=@tracing={0x0, 0xa}}, 0x20) bpf$LINK_DETACH(0x22, &(0x7f00000001c0)=r4, 0x4) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d2, 0x0) kernel console output (not intermixed with test programs): ting new IBSS network, BSSID 50:50:50:50:50:50 [ 1090.735319][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1090.735429][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1090.851245][ T3371] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1090.851266][ T3371] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1090.898022][T26557] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1091.135131][T26557] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1091.250448][T26614] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1091.312373][T10003] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1091.312395][T10003] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1091.410056][T10003] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1091.410078][T10003] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1091.448445][ T3371] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1091.448494][ T3371] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1091.448530][ T3371] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1091.458147][ T3371] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1092.077245][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1092.077269][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1092.260510][ T7472] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1092.260533][ T7472] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1093.357310][T26889] syzkaller0: entered promiscuous mode [ 1093.357336][T26889] syzkaller0: entered allmulticast mode [ 1093.952003][ C1] vcan0: j1939_tp_rxtimer: 0xffff888059dc5400: rx timeout, send abort [ 1093.964746][ C1] vcan0: j1939_tp_rxtimer: 0xffff888059dc7400: rx timeout, send abort [ 1093.965281][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888059dc7400: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 1094.454576][ C1] vcan0: j1939_tp_rxtimer: 0xffff888059dc5400: abort rx timeout. Force session deactivation [ 1096.717548][T26609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1096.740869][T26614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1097.019272][T26935] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6102'. [ 1097.019306][T26935] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6102'. [ 1097.185119][T26614] veth0_vlan: entered promiscuous mode [ 1097.266691][T26943] openvswitch: netlink: Message has 56 unknown bytes. [ 1097.267901][T26614] veth1_vlan: entered promiscuous mode [ 1097.457199][T26614] veth0_macvtap: entered promiscuous mode [ 1097.510785][T26614] veth1_macvtap: entered promiscuous mode [ 1097.653131][T26614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1097.673916][T26614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1097.812564][T10003] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1097.818007][ T1159] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1097.819988][ T1159] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1097.820765][ T1159] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1098.340497][T26964] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6107'. [ 1098.340522][T26964] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6107'. [ 1098.482123][T26961] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1098.709537][T26970] syzkaller0: entered promiscuous mode [ 1098.709563][T26970] syzkaller0: entered allmulticast mode [ 1102.403839][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1102.403862][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1102.561895][T26609] veth0_vlan: entered promiscuous mode [ 1102.583415][T27022] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6115'. [ 1102.584676][T27022] bridge_slave_1: left allmulticast mode [ 1102.584697][T27022] bridge_slave_1: left promiscuous mode [ 1102.584923][T27022] bridge0: port 2(bridge_slave_1) entered disabled state [ 1102.637788][T27022] bridge_slave_0: left allmulticast mode [ 1102.637817][T27022] bridge_slave_0: left promiscuous mode [ 1102.638097][T27022] bridge0: port 1(bridge_slave_0) entered disabled state [ 1102.861975][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1102.861999][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1103.117564][T26609] veth1_vlan: entered promiscuous mode [ 1103.372072][T26609] veth0_macvtap: entered promiscuous mode [ 1103.411482][T26609] veth1_macvtap: entered promiscuous mode [ 1103.698642][T26609] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1103.763777][T26609] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1103.970231][ T13] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1103.970696][ T13] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1103.970732][ T13] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1103.970764][ T13] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1104.387796][T27066] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6097'. [ 1104.387834][T27066] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6097'. [ 1104.444566][T27067] validate_nla: 2 callbacks suppressed [ 1104.444585][T27067] netlink: 'syz.6.6122': attribute type 12 has an invalid length. [ 1104.444601][T27067] netlink: 132 bytes leftover after parsing attributes in process `syz.6.6122'. [ 1104.454161][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1104.454187][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1104.500165][T27066] erspan0: entered promiscuous mode [ 1104.553986][T27066] gretap0: entered promiscuous mode [ 1104.776552][ T1159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1104.776574][ T1159] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1104.985077][T27084] netlink: 'syz.0.6126': attribute type 13 has an invalid length. [ 1105.636696][T27099] netlink: 404 bytes leftover after parsing attributes in process `syz.6.6127'. [ 1105.636722][T27099] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6127'. [ 1105.636741][T27099] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6127'. [ 1105.636758][T27099] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6127'. [ 1105.947069][ T5633] Bluetooth: hci3: ACL packet too small [ 1106.195349][T27114] netlink: 'syz.0.6131': attribute type 1 has an invalid length. [ 1106.233637][T27116] C: renamed from lo (while UP) [ 1106.247747][T27116] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1106.670525][T27131] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6137'. [ 1106.891065][T27139] netlink: 404 bytes leftover after parsing attributes in process `syz.7.6138'. [ 1107.402788][ T5633] Bluetooth: hci0: unexpected cc 0x1003 length: 67 > 9 [ 1108.187467][T27179] __nla_validate_parse: 4 callbacks suppressed [ 1108.187487][T27179] netlink: 404 bytes leftover after parsing attributes in process `syz.7.6154'. [ 1108.187505][T27179] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6154'. [ 1108.187522][T27179] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6154'. [ 1108.187538][T27179] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6154'. [ 1108.322803][T27181] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6155'. [ 1108.697940][T27194] FAULT_INJECTION: forcing a failure. [ 1108.697940][T27194] name failslab, interval 1, probability 0, space 0, times 0 [ 1108.697969][T27194] CPU: 0 UID: 0 PID: 27194 Comm: syz.0.6157 Not tainted syzkaller #0 PREEMPT(full) [ 1108.697991][T27194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1108.698003][T27194] Call Trace: [ 1108.698011][T27194] [ 1108.698020][T27194] dump_stack_lvl+0xe8/0x150 [ 1108.698057][T27194] should_fail_ex+0x3eb/0x540 [ 1108.698085][T27194] should_failslab+0xa8/0x100 [ 1108.698115][T27194] ? skb_clone+0x212/0x3a0 [ 1108.698137][T27194] kmem_cache_alloc_noprof+0x9c/0x600 [ 1108.698164][T27194] ? skb_clone+0x212/0x3a0 [ 1108.698193][T27194] skb_clone+0x212/0x3a0 [ 1108.698219][T27194] __netlink_deliver_tap+0x355/0x6e0 [ 1108.698260][T27194] ? netlink_deliver_tap+0x2e/0x1b0 [ 1108.698291][T27194] netlink_deliver_tap+0x19c/0x1b0 [ 1108.698320][T27194] netlink_unicast+0x8c1/0xa80 [ 1108.698362][T27194] netlink_sendmsg+0x7f0/0xb20 [ 1108.698395][T27194] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1108.698424][T27194] ? aa_sock_msg_perm+0x144/0x210 [ 1108.698456][T27194] ? apparmor_socket_sendmsg+0x18b/0x360 [ 1108.698485][T27194] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1108.698512][T27194] sock_sendmsg_nosec+0x14e/0x190 [ 1108.698542][T27194] ____sys_sendmsg+0x54e/0x850 [ 1108.698571][T27194] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1108.698603][T27194] ? import_iovec+0x73/0xa0 [ 1108.698631][T27194] ___sys_sendmsg+0x2a5/0x360 [ 1108.698651][T27194] ? __lock_acquire+0x747/0x2de0 [ 1108.698681][T27194] ? __pfx____sys_sendmsg+0x10/0x10 [ 1108.698744][T27194] ? __fget_files+0x3a2/0x420 [ 1108.698768][T27194] ? __fget_files+0x2a/0x420 [ 1108.698802][T27194] __x64_sys_sendmsg+0x1b1/0x290 [ 1108.698828][T27194] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1108.698874][T27194] do_syscall_64+0x166/0x520 [ 1108.698905][T27194] ? trace_irq_disable+0x3b/0x140 [ 1108.698930][T27194] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1108.698948][T27194] ? clear_bhb_loop+0x70/0xc0 [ 1108.698971][T27194] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1108.698989][T27194] RIP: 0033:0x7f93225a8f19 [ 1108.699007][T27194] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1108.699022][T27194] RSP: 002b:00007f93233cc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1108.699042][T27194] RAX: ffffffffffffffda RBX: 00007f9322825fa0 RCX: 00007f93225a8f19 [ 1108.699056][T27194] RDX: 0000000020000844 RSI: 00002000000014c0 RDI: 0000000000000003 [ 1108.699069][T27194] RBP: 00007f93233cc090 R08: 0000000000000000 R09: 0000000000000000 [ 1108.699080][T27194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1108.699091][T27194] R13: 00007f9322826038 R14: 00007f9322825fa0 R15: 00007ffd51ad5e88 [ 1108.699125][T27194] [ 1109.089707][T27209] FAULT_INJECTION: forcing a failure. [ 1109.089707][T27209] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1109.089738][T27209] CPU: 1 UID: 0 PID: 27209 Comm: syz.9.6161 Not tainted syzkaller #0 PREEMPT(full) [ 1109.089760][T27209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1109.089772][T27209] Call Trace: [ 1109.089780][T27209] [ 1109.089789][T27209] dump_stack_lvl+0xe8/0x150 [ 1109.089825][T27209] should_fail_ex+0x3eb/0x540 [ 1109.089855][T27209] _copy_to_user+0x31/0xb0 [ 1109.089882][T27209] simple_read_from_buffer+0xe1/0x170 [ 1109.089911][T27209] proc_fail_nth_read+0x1bb/0x230 [ 1109.089936][T27209] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1109.089961][T27209] ? rw_verify_area+0x24a/0x4c0 [ 1109.089990][T27209] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1109.090009][T27209] vfs_read+0x213/0xa80 [ 1109.090041][T27209] ? __pfx___mutex_lock+0x10/0x10 [ 1109.090068][T27209] ? __pfx_vfs_read+0x10/0x10 [ 1109.090095][T27209] ? __fget_files+0x2a/0x420 [ 1109.090118][T27209] ? __fget_files+0x3a2/0x420 [ 1109.090140][T27209] ? __fget_files+0x2a/0x420 [ 1109.090168][T27209] ? fdget+0x1ac/0x250 [ 1109.090200][T27209] ksys_read+0x150/0x270 [ 1109.090232][T27209] ? __pfx_ksys_read+0x10/0x10 [ 1109.090271][T27209] do_syscall_64+0x166/0x520 [ 1109.090295][T27209] ? trace_irq_disable+0x3b/0x140 [ 1109.090321][T27209] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1109.090340][T27209] ? clear_bhb_loop+0x70/0xc0 [ 1109.090364][T27209] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1109.090390][T27209] RIP: 0033:0x7f9fd776974e [ 1109.090409][T27209] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1109.090427][T27209] RSP: 002b:00007f9fd86b8fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1109.090449][T27209] RAX: ffffffffffffffda RBX: 00007f9fd86b96c0 RCX: 00007f9fd776974e [ 1109.090464][T27209] RDX: 000000000000000f RSI: 00007f9fd86b90a0 RDI: 0000000000000004 [ 1109.090476][T27209] RBP: 00007f9fd86b9090 R08: 0000000000000000 R09: 0000000000000000 [ 1109.090489][T27209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1109.090501][T27209] R13: 00007f9fd7a26128 R14: 00007f9fd7a26090 R15: 00007ffe25cae4a8 [ 1109.090534][T27209] [ 1109.757065][T27218] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6163'. [ 1109.757102][T27218] netlink: 'syz.8.6163': attribute type 6 has an invalid length. [ 1109.757115][T27218] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6163'. [ 1109.793945][T26194] hid_parser_main: 22 callbacks suppressed [ 1109.793968][T26194] hid-generic 0005:0C45:05DF.0009: unknown main item tag 0x0 [ 1109.793999][T26194] hid-generic 0005:0C45:05DF.0009: unknown main item tag 0x0 [ 1109.794026][T26194] hid-generic 0005:0C45:05DF.0009: unknown main item tag 0x0 [ 1109.794052][T26194] hid-generic 0005:0C45:05DF.0009: unknown main item tag 0x0 [ 1109.794077][T26194] hid-generic 0005:0C45:05DF.0009: unknown main item tag 0x0 [ 1109.794103][T26194] hid-generic 0005:0C45:05DF.0009: unknown main item tag 0x0 [ 1109.794129][T26194] hid-generic 0005:0C45:05DF.0009: unknown main item tag 0x0 [ 1109.794155][T26194] hid-generic 0005:0C45:05DF.0009: unknown main item tag 0x0 [ 1109.794180][T26194] hid-generic 0005:0C45:05DF.0009: unknown main item tag 0x0 [ 1109.794205][T26194] hid-generic 0005:0C45:05DF.0009: unknown main item tag 0x0 [ 1109.892428][T26194] hid-generic 0005:0C45:05DF.0009: hidraw0: BLUETOOTH HID v0.05 Device [syz0] on aa:aa:aa:aa:aa:aa [ 1110.406755][T27250] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6170'. [ 1111.166564][T27279] netlink: 9 bytes leftover after parsing attributes in process `syz.7.6177'. [ 1111.193926][T27279] gretap0: entered promiscuous mode [ 1111.269476][T27282] netlink: 5 bytes leftover after parsing attributes in process `syz.7.6177'. [ 1111.286599][T27282] 0ªî{X¹¦: renamed from gretap0 [ 1111.325316][T27282] 0ªî{X¹¦: left promiscuous mode [ 1111.325496][T27282] 0ªî{X¹¦: entered allmulticast mode [ 1111.357216][T27282] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 1111.395711][T27282] 0ªî{X¹¦: entered promiscuous mode [ 1111.395897][T27282] 0ªî{X¹¦: left allmulticast mode [ 1111.565363][T27287] 1ªî{X¹¦: renamed from 30ªî{X¹¦ [ 1111.617157][T27287] 1ªî{X¹¦: left promiscuous mode [ 1111.617181][T27287] 1ªî{X¹¦: entered allmulticast mode [ 1111.658800][T27287] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 1112.554311][T27329] netlink: 'syz.6.6191': attribute type 1 has an invalid length. [ 1113.422718][T27348] __nla_validate_parse: 6 callbacks suppressed [ 1113.422737][T27348] netlink: 48 bytes leftover after parsing attributes in process `syz.9.6192'. [ 1113.738388][T27369] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6194'. [ 1114.090820][T27381] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6200'. [ 1114.236183][T27391] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6203'. [ 1114.595505][T27404] tipc: Enabling of bearer rejected, failed to enable media [ 1114.685549][T27403] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 1115.532699][T27433] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6214'. [ 1115.614896][T27436] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6215'. [ 1115.695229][T27411] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1115.922547][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.922765][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.254794][T27457] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6218'. [ 1116.254830][T27457] netlink: 'syz.0.6218': attribute type 10 has an invalid length. [ 1116.254846][T27457] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6218'. [ 1116.297010][T27457] geneve2: entered promiscuous mode [ 1116.297195][T27457] geneve2: entered allmulticast mode [ 1116.455589][T27468] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6221'. [ 1116.455672][T27468] bridge_slave_1: left allmulticast mode [ 1116.455693][T27468] bridge_slave_1: left promiscuous mode [ 1116.455912][T27468] bridge0: port 2(bridge_slave_1) entered disabled state [ 1116.548933][T27473] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6220'. [ 1116.580225][T27468] bridge_slave_0: left allmulticast mode [ 1116.580569][T27468] bridge_slave_0: left promiscuous mode [ 1116.632411][T27468] bridge0: port 1(bridge_slave_0) entered disabled state [ 1116.709750][T27479] x_tables: ip_tables: osf match: only valid for protocol 6 [ 1116.733170][T27479] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1116.752007][T27474] openvswitch: netlink: Key type 186 is out of range max 32 [ 1117.025003][T27493] netlink: 'syz.8.6228': attribute type 16 has an invalid length. [ 1117.025026][T27493] netlink: 'syz.8.6228': attribute type 3 has an invalid length. [ 1117.118801][ T5633] Bluetooth: hci0: command 0x0c1a tx timeout [ 1117.336660][T27503] netlink: 'syz.9.6229': attribute type 2 has an invalid length. [ 1117.403903][T27518] netlink: 'syz.9.6229': attribute type 2 has an invalid length. [ 1117.789133][T27530] netlink: 'syz.7.6234': attribute type 1 has an invalid length. [ 1117.808515][T27532] netlink: 'syz.0.6237': attribute type 8 has an invalid length. [ 1118.060467][T27535] bridge0: port 2(bridge_slave_1) entered disabled state [ 1118.062066][T27535] bridge0: port 1(bridge_slave_0) entered disabled state [ 1118.539883][T27552] syzkaller0: entered promiscuous mode [ 1118.539906][T27552] syzkaller0: entered allmulticast mode [ 1118.731676][T27563] __nla_validate_parse: 10 callbacks suppressed [ 1118.731698][T27563] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6244'. [ 1119.411087][T27591] netlink: 404 bytes leftover after parsing attributes in process `syz.9.6250'. [ 1119.411114][T27591] netlink: 28 bytes leftover after parsing attributes in process `syz.9.6250'. [ 1119.411133][T27591] netlink: 28 bytes leftover after parsing attributes in process `syz.9.6250'. [ 1119.411149][T27591] netlink: 20 bytes leftover after parsing attributes in process `syz.9.6250'. [ 1120.316750][T27515] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1120.343541][T27583] netlink: 'syz.6.6249': attribute type 1 has an invalid length. [ 1120.343569][T27583] netlink: 'syz.6.6249': attribute type 1 has an invalid length. [ 1120.780686][T27622] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6254'. [ 1120.825105][T27629] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6256'. [ 1120.964586][T27622] bond1: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 1121.005190][T27628] batman_adv: batadv0: Adding interface: syzkaller0 [ 1121.005210][T27628] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1121.005242][T27628] batman_adv: batadv0: Interface activated: syzkaller0 [ 1121.327237][T27648] netlink: 404 bytes leftover after parsing attributes in process `syz.8.6261'. [ 1121.327261][T27648] netlink: 28 bytes leftover after parsing attributes in process `syz.8.6261'. [ 1121.327280][T27648] netlink: 28 bytes leftover after parsing attributes in process `syz.8.6261'. [ 1121.388643][T27650] syzkaller0: entered promiscuous mode [ 1121.388665][T27650] syzkaller0: entered allmulticast mode [ 1121.510312][T27619] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 1121.574572][T27619] batman_adv: batadv0: Removing interface: syzkaller0 [ 1121.664850][T27660] bridge_slave_1: left allmulticast mode [ 1121.664879][T27660] bridge_slave_1: left promiscuous mode [ 1121.665109][T27660] bridge0: port 2(bridge_slave_1) entered disabled state [ 1121.774996][T27660] bridge_slave_0: left allmulticast mode [ 1121.775026][T27660] bridge_slave_0: left promiscuous mode [ 1121.786073][T27660] bridge0: port 1(bridge_slave_0) entered disabled state [ 1121.957751][ T12] IPVS: starting estimator thread 0... [ 1122.003237][T27635] netlink: 'syz.6.6258': attribute type 1 has an invalid length. [ 1122.059417][T27666] IPVS: using max 29 ests per chain, 69600 per kthread [ 1122.268551][T27670] netlink: 'syz.0.6266': attribute type 12 has an invalid length. [ 1123.840099][T27738] FAULT_INJECTION: forcing a failure. [ 1123.840099][T27738] name failslab, interval 1, probability 0, space 0, times 0 [ 1123.840130][T27738] CPU: 0 UID: 0 PID: 27738 Comm: syz.9.6283 Not tainted syzkaller #0 PREEMPT(full) [ 1123.840153][T27738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1123.840164][T27738] Call Trace: [ 1123.840172][T27738] [ 1123.840181][T27738] dump_stack_lvl+0xe8/0x150 [ 1123.840215][T27738] should_fail_ex+0x3eb/0x540 [ 1123.840244][T27738] should_failslab+0xa8/0x100 [ 1123.840274][T27738] __kvmalloc_node_noprof+0x171/0x820 [ 1123.840306][T27738] ? __kvmalloc_node_noprof+0x340/0x820 [ 1123.840330][T27738] ? bpf_compute_scc+0x106/0xdb0 [ 1123.840355][T27738] ? bpf_compute_scc+0x106/0xdb0 [ 1123.840394][T27738] bpf_compute_scc+0x106/0xdb0 [ 1123.840420][T27738] ? sort_subprogs_topo+0xe5f/0x1130 [ 1123.840465][T27738] bpf_check+0x2c70/0x34e0 [ 1123.840496][T27738] ? ktime_get_with_offset+0x93/0x2d0 [ 1123.840523][T27738] ? ktime_get_with_offset+0x93/0x2d0 [ 1123.840549][T27738] ? __pfx_bpf_check+0x10/0x10 [ 1123.840573][T27738] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1123.840601][T27738] bpf_prog_load+0x14da/0x1c60 [ 1123.840631][T27738] ? __pfx_bpf_prog_load+0x10/0x10 [ 1123.840666][T27738] ? __might_fault+0xaf/0x130 [ 1123.840692][T27738] __sys_bpf+0xd86/0xe00 [ 1123.840718][T27738] ? __pfx___sys_bpf+0x10/0x10 [ 1123.840747][T27738] ? __fget_files+0x2a/0x420 [ 1123.840789][T27738] ? ksys_write+0x242/0x270 [ 1123.840814][T27738] ? __pfx_ksys_write+0x10/0x10 [ 1123.840842][T27738] __x64_sys_bpf+0xba/0xd0 [ 1123.840869][T27738] do_syscall_64+0x166/0x520 [ 1123.840891][T27738] ? trace_irq_disable+0x3b/0x140 [ 1123.840914][T27738] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1123.840932][T27738] ? clear_bhb_loop+0x70/0xc0 [ 1123.840954][T27738] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1123.840971][T27738] RIP: 0033:0x7f9fd77a8f19 [ 1123.840989][T27738] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1123.841005][T27738] RSP: 002b:00007f9fd86da028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1123.841026][T27738] RAX: ffffffffffffffda RBX: 00007f9fd7a25fa0 RCX: 00007f9fd77a8f19 [ 1123.841038][T27738] RDX: 0000000000000094 RSI: 00002000000002c0 RDI: 0000000000000005 [ 1123.841051][T27738] RBP: 00007f9fd86da090 R08: 0000000000000000 R09: 0000000000000000 [ 1123.841061][T27738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1123.841072][T27738] R13: 00007f9fd7a26038 R14: 00007f9fd7a25fa0 R15: 00007ffe25cae4a8 [ 1123.841103][T27738] [ 1124.345477][T27751] __nla_validate_parse: 9 callbacks suppressed [ 1124.345498][T27751] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6288'. [ 1124.373642][T27749] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1124.445721][T27752] netlink: 36 bytes leftover after parsing attributes in process `syz.9.6286'. [ 1124.707569][T27757] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1124.828739][T27757] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1125.056157][T27775] netlink: 40 bytes leftover after parsing attributes in process `syz.8.6293'. [ 1125.276841][T27791] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6295'. [ 1125.419881][T27796] netlink: 'syz.6.6297': attribute type 83 has an invalid length. [ 1125.546920][T27803] FAULT_INJECTION: forcing a failure. [ 1125.546920][T27803] name failslab, interval 1, probability 0, space 0, times 0 [ 1125.546953][T27803] CPU: 1 UID: 0 PID: 27803 Comm: syz.9.6296 Not tainted syzkaller #0 PREEMPT(full) [ 1125.546975][T27803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1125.546988][T27803] Call Trace: [ 1125.546996][T27803] [ 1125.547005][T27803] dump_stack_lvl+0xe8/0x150 [ 1125.547042][T27803] should_fail_ex+0x3eb/0x540 [ 1125.547072][T27803] should_failslab+0xa8/0x100 [ 1125.547103][T27803] __kvmalloc_node_noprof+0x171/0x820 [ 1125.547131][T27803] ? __kvmalloc_node_noprof+0x340/0x820 [ 1125.547156][T27803] ? bpf_compute_scc+0x120/0xdb0 [ 1125.547181][T27803] ? bpf_compute_scc+0x120/0xdb0 [ 1125.547213][T27803] bpf_compute_scc+0x120/0xdb0 [ 1125.547239][T27803] ? sort_subprogs_topo+0xe5f/0x1130 [ 1125.547283][T27803] bpf_check+0x2c70/0x34e0 [ 1125.547315][T27803] ? ktime_get_with_offset+0x93/0x2d0 [ 1125.547347][T27803] ? ktime_get_with_offset+0x93/0x2d0 [ 1125.547374][T27803] ? __pfx_bpf_check+0x10/0x10 [ 1125.547398][T27803] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1125.547426][T27803] bpf_prog_load+0x14da/0x1c60 [ 1125.547458][T27803] ? __pfx_bpf_prog_load+0x10/0x10 [ 1125.547498][T27803] ? __might_fault+0xaf/0x130 [ 1125.547526][T27803] __sys_bpf+0xd86/0xe00 [ 1125.547554][T27803] ? __pfx___sys_bpf+0x10/0x10 [ 1125.547585][T27803] ? __fget_files+0x2a/0x420 [ 1125.547627][T27803] ? ksys_write+0x242/0x270 [ 1125.547656][T27803] ? __pfx_ksys_write+0x10/0x10 [ 1125.547693][T27803] __x64_sys_bpf+0xba/0xd0 [ 1125.547724][T27803] do_syscall_64+0x166/0x520 [ 1125.547748][T27803] ? trace_irq_disable+0x3b/0x140 [ 1125.547773][T27803] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1125.547793][T27803] ? clear_bhb_loop+0x70/0xc0 [ 1125.547817][T27803] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1125.547837][T27803] RIP: 0033:0x7f9fd77a8f19 [ 1125.547855][T27803] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1125.547872][T27803] RSP: 002b:00007f9fd86da028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1125.547894][T27803] RAX: ffffffffffffffda RBX: 00007f9fd7a25fa0 RCX: 00007f9fd77a8f19 [ 1125.547909][T27803] RDX: 0000000000000094 RSI: 00002000000002c0 RDI: 0000000000000005 [ 1125.547922][T27803] RBP: 00007f9fd86da090 R08: 0000000000000000 R09: 0000000000000000 [ 1125.547935][T27803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1125.547947][T27803] R13: 00007f9fd7a26038 R14: 00007f9fd7a25fa0 R15: 00007ffe25cae4a8 [ 1125.547980][T27803] [ 1125.893328][T27804] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6298'. [ 1125.893353][T27804] bridge: RTM_NEWNEIGH with invalid ether address [ 1126.285562][T27817] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6300'. [ 1126.307656][T27814] syzkaller0: entered promiscuous mode [ 1126.307679][T27814] syzkaller0: entered allmulticast mode [ 1126.423757][T27819] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6301'. [ 1127.239883][T27844] netlink: 80 bytes leftover after parsing attributes in process `syz.0.6309'. [ 1127.287751][T27845] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6308'. [ 1127.641886][T27858] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6314'. [ 1129.075471][T27904] lo: entered allmulticast mode [ 1129.077249][T27892] lo: left allmulticast mode [ 1129.786467][T27934] __nla_validate_parse: 1 callbacks suppressed [ 1129.786489][T27934] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6337'. [ 1130.041813][T27944] C: entered allmulticast mode [ 1130.133793][T27948] netlink: 'syz.0.6341': attribute type 3 has an invalid length. [ 1130.165614][T27942] C: left allmulticast mode [ 1130.446390][T27959] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6344'. [ 1130.475106][T27959] netlink: zone id is out of range [ 1130.475120][T27959] netlink: zone id is out of range [ 1130.475127][T27959] netlink: zone id is out of range [ 1130.475134][T27959] netlink: zone id is out of range [ 1130.475142][T27959] netlink: zone id is out of range [ 1130.475150][T27959] netlink: zone id is out of range [ 1130.475158][T27959] netlink: zone id is out of range [ 1130.475166][T27959] netlink: zone id is out of range [ 1130.475173][T27959] netlink: zone id is out of range [ 1130.475182][T27959] netlink: zone id is out of range [ 1130.978688][T27972] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6346'. [ 1131.145325][T27981] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6350'. [ 1131.307054][T27991] FAULT_INJECTION: forcing a failure. [ 1131.307054][T27991] name failslab, interval 1, probability 0, space 0, times 0 [ 1131.307085][T27991] CPU: 1 UID: 0 PID: 27991 Comm: syz.7.6351 Not tainted syzkaller #0 PREEMPT(full) [ 1131.307108][T27991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1131.307120][T27991] Call Trace: [ 1131.307128][T27991] [ 1131.307137][T27991] dump_stack_lvl+0xe8/0x150 [ 1131.307171][T27991] should_fail_ex+0x3eb/0x540 [ 1131.307200][T27991] should_failslab+0xa8/0x100 [ 1131.307231][T27991] __kvmalloc_node_noprof+0x171/0x820 [ 1131.307262][T27991] ? bpf_compute_idoms+0xcc/0x1940 [ 1131.307281][T27991] ? bpf_compute_idoms+0xcc/0x1940 [ 1131.307309][T27991] bpf_compute_idoms+0xcc/0x1940 [ 1131.307339][T27991] ? __pfx_bpf_compute_subprog_ret_regs+0x10/0x10 [ 1131.307363][T27991] ? prepare_subprog_args+0x412/0x450 [ 1131.307393][T27991] bpf_check+0x2cc3/0x34e0 [ 1131.307425][T27991] ? ktime_get_with_offset+0x93/0x2d0 [ 1131.307452][T27991] ? ktime_get_with_offset+0x93/0x2d0 [ 1131.307478][T27991] ? __pfx_bpf_check+0x10/0x10 [ 1131.307502][T27991] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1131.307530][T27991] bpf_prog_load+0x14da/0x1c60 [ 1131.307563][T27991] ? __pfx_bpf_prog_load+0x10/0x10 [ 1131.307599][T27991] ? __might_fault+0xaf/0x130 [ 1131.307627][T27991] __sys_bpf+0xd86/0xe00 [ 1131.307655][T27991] ? __pfx___sys_bpf+0x10/0x10 [ 1131.307688][T27991] ? __fget_files+0x2a/0x420 [ 1131.307730][T27991] ? ksys_write+0x242/0x270 [ 1131.307759][T27991] ? __pfx_ksys_write+0x10/0x10 [ 1131.307797][T27991] __x64_sys_bpf+0xba/0xd0 [ 1131.307827][T27991] do_syscall_64+0x166/0x520 [ 1131.307851][T27991] ? trace_irq_disable+0x3b/0x140 [ 1131.307876][T27991] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1131.307896][T27991] ? clear_bhb_loop+0x70/0xc0 [ 1131.307919][T27991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1131.307939][T27991] RIP: 0033:0x7f4fcb7a8f19 [ 1131.307957][T27991] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1131.307974][T27991] RSP: 002b:00007f4fcc5da028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1131.307995][T27991] RAX: ffffffffffffffda RBX: 00007f4fcba25fa0 RCX: 00007f4fcb7a8f19 [ 1131.308009][T27991] RDX: 0000000000000094 RSI: 00002000000002c0 RDI: 0000000000000005 [ 1131.308022][T27991] RBP: 00007f4fcc5da090 R08: 0000000000000000 R09: 0000000000000000 [ 1131.308033][T27991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1131.308042][T27991] R13: 00007f4fcba26038 R14: 00007f4fcba25fa0 R15: 00007fffe36580b8 [ 1131.308071][T27991] [ 1131.396237][T27972] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1131.747939][T27972] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6346'. [ 1132.069962][T28002] lo: entered allmulticast mode [ 1132.134601][T28000] lo: left allmulticast mode [ 1132.222707][ T5633] Bluetooth: hci2: unexpected event 0x13 length: 321 > 255 [ 1132.460442][T27937] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6338'. [ 1132.568972][T28021] netlink: 'syz.6.6359': attribute type 1 has an invalid length. [ 1132.815644][T28031] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6359'. [ 1132.816886][T28031] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1132.971445][T28026] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1133.005636][T28026] bond2: (slave bond3): making interface the new active one [ 1133.007557][T28035] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6363'. [ 1133.046681][T28026] bond2: (slave bond3): Enslaving as an active interface with an up link [ 1133.140045][T28029] bond2: (slave gretap1): Enslaving as a backup interface with an up link [ 1133.596505][T28047] netlink: 'syz.7.6365': attribute type 1 has an invalid length. [ 1133.833266][T28063] Bluetooth: MGMT ver 1.23 [ 1133.892859][T28066] FAULT_INJECTION: forcing a failure. [ 1133.892859][T28066] name failslab, interval 1, probability 0, space 0, times 0 [ 1133.892889][T28066] CPU: 0 UID: 0 PID: 28066 Comm: syz.6.6370 Not tainted syzkaller #0 PREEMPT(full) [ 1133.892911][T28066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1133.892922][T28066] Call Trace: [ 1133.892929][T28066] [ 1133.892938][T28066] dump_stack_lvl+0xe8/0x150 [ 1133.892989][T28066] should_fail_ex+0x3eb/0x540 [ 1133.893018][T28066] should_failslab+0xa8/0x100 [ 1133.893048][T28066] __kvmalloc_node_noprof+0x171/0x820 [ 1133.893077][T28066] ? bpf_compute_idoms+0xb6a/0x1940 [ 1133.893095][T28066] ? bpf_compute_idoms+0xb6a/0x1940 [ 1133.893126][T28066] bpf_compute_idoms+0xb6a/0x1940 [ 1133.893157][T28066] ? prepare_subprog_args+0x412/0x450 [ 1133.893186][T28066] bpf_check+0x2cc3/0x34e0 [ 1133.893216][T28066] ? ktime_get_with_offset+0x93/0x2d0 [ 1133.893240][T28066] ? ktime_get_with_offset+0x93/0x2d0 [ 1133.893265][T28066] ? __pfx_bpf_check+0x10/0x10 [ 1133.893287][T28066] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1133.893314][T28066] bpf_prog_load+0x14da/0x1c60 [ 1133.893345][T28066] ? __pfx_bpf_prog_load+0x10/0x10 [ 1133.893377][T28066] ? __might_fault+0xaf/0x130 [ 1133.893404][T28066] __sys_bpf+0xd86/0xe00 [ 1133.893430][T28066] ? __pfx___sys_bpf+0x10/0x10 [ 1133.893462][T28066] ? __fget_files+0x2a/0x420 [ 1133.893509][T28066] ? ksys_write+0x242/0x270 [ 1133.893538][T28066] ? __pfx_ksys_write+0x10/0x10 [ 1133.893569][T28066] __x64_sys_bpf+0xba/0xd0 [ 1133.893599][T28066] do_syscall_64+0x166/0x520 [ 1133.893622][T28066] ? trace_irq_disable+0x3b/0x140 [ 1133.893644][T28066] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1133.893664][T28066] ? clear_bhb_loop+0x70/0xc0 [ 1133.893687][T28066] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1133.893705][T28066] RIP: 0033:0x7f9e32ba8f19 [ 1133.893723][T28066] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1133.893739][T28066] RSP: 002b:00007f9e33a22028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1133.893759][T28066] RAX: ffffffffffffffda RBX: 00007f9e32e25fa0 RCX: 00007f9e32ba8f19 [ 1133.893773][T28066] RDX: 0000000000000094 RSI: 00002000000002c0 RDI: 0000000000000005 [ 1133.893786][T28066] RBP: 00007f9e33a22090 R08: 0000000000000000 R09: 0000000000000000 [ 1133.893799][T28066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1133.893810][T28066] R13: 00007f9e32e26038 R14: 00007f9e32e25fa0 R15: 00007ffc20ae2dd8 [ 1133.893840][T28066] [ 1134.189122][T28057] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1134.223241][T28057] bond1: (slave bond2): making interface the new active one [ 1134.223743][T28057] bond1: (slave bond2): Enslaving as an active interface with an up link [ 1134.614507][T28081] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6376'. [ 1134.821733][T28092] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6379'. [ 1134.840273][T28088] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6378'. [ 1134.976265][T28101] netlink: 20 bytes leftover after parsing attributes in process `syz.9.6382'. [ 1135.109616][T28100] erspan0: entered promiscuous mode [ 1135.400615][T28119] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6386'. [ 1135.464873][T28115] netlink: 'syz.8.6384': attribute type 1 has an invalid length. [ 1135.560454][T28129] netlink: 'syz.9.6388': attribute type 11 has an invalid length. [ 1135.706242][T28125] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1135.716595][T28125] bond3: (slave bond4): making interface the new active one [ 1135.717069][T28125] bond3: (slave bond4): Enslaving as an active interface with an up link [ 1136.405728][T28143] syzkaller0: entered promiscuous mode [ 1136.405753][T28143] syzkaller0: entered allmulticast mode [ 1137.098562][T28183] netlink: 'syz.7.6401': attribute type 1 has an invalid length. [ 1137.411043][T28190] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6401'. [ 1137.568991][T28185] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1137.576781][T28185] bond3: (slave bond4): making interface the new active one [ 1137.577910][T28185] bond3: (slave bond4): Enslaving as an active interface with an up link [ 1137.651785][T28200] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6404'. [ 1137.716371][ T1015] IPVS: starting estimator thread 0... [ 1137.732418][T28181] bond3: (slave gretap0): Enslaving as a backup interface with an up link [ 1137.739975][T28201] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6405'. [ 1137.741885][T28190] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1137.742681][T28201] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6405'. [ 1137.819148][T28203] IPVS: using max 34 ests per chain, 81600 per kthread [ 1138.078547][ T4955] Bluetooth: hci0: command 0x0c1a tx timeout [ 1138.078649][ T5633] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1138.443140][T28223] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1139.436521][T28246] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6414'. [ 1139.511546][T28247] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6414'. [ 1141.776038][T28255] netlink: 'syz.9.6415': attribute type 1 has an invalid length. [ 1141.812052][T28214] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6408'. [ 1141.834157][T28246] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1141.967694][T28246] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1142.097886][T28255] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1142.115868][T28255] bond1: (slave bond2): making interface the new active one [ 1142.116485][T28255] bond1: (slave bond2): Enslaving as an active interface with an up link [ 1142.218078][T28269] bond4: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 1142.224362][T28272] netlink: 'syz.0.6417': attribute type 1 has an invalid length. [ 1142.442001][T28278] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6417'. [ 1142.465942][T28257] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 1142.722969][T28275] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1142.736247][T28275] bond1: (slave bond2): making interface the new active one [ 1142.737428][T28275] bond1: (slave bond2): Enslaving as an active interface with an up link [ 1142.779144][T28272] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 1142.781413][T28278] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1142.865223][T28285] netlink: 'syz.9.6420': attribute type 1 has an invalid length. [ 1142.865246][T28285] netlink: 'syz.9.6420': attribute type 1 has an invalid length. [ 1142.950298][T28289] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6422'. [ 1143.484593][T28310] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6427'. [ 1143.645593][T28316] netlink: 68 bytes leftover after parsing attributes in process `syz.0.6429'. [ 1143.904496][T28328] netlink: 'syz.7.6430': attribute type 1 has an invalid length. [ 1144.017837][T28328] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6430'. [ 1144.147800][T28337] netlink: 'syz.8.6434': attribute type 1 has an invalid length. [ 1144.176513][T28340] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6436'. [ 1144.341315][T28354] netlink: 28 bytes leftover after parsing attributes in process `syz.8.6434'. [ 1144.345734][T28330] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1144.359701][T28330] bond5: (slave bond6): making interface the new active one [ 1144.377329][T28330] bond5: (slave bond6): Enslaving as an active interface with an up link [ 1144.417543][T28328] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1144.816349][T28341] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1144.833630][T28341] bond5: (slave bond6): making interface the new active one [ 1144.837944][T28341] bond5: (slave bond6): Enslaving as an active interface with an up link [ 1144.881679][T28344] bond5: (slave gretap1): Enslaving as a backup interface with an up link [ 1144.903163][T28354] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1145.167348][T28388] netlink: 36 bytes leftover after parsing attributes in process `syz.9.6443'. [ 1145.611793][T28405] netlink: 24 bytes leftover after parsing attributes in process `syz.9.6448'. [ 1145.662263][T28408] gtp0: entered promiscuous mode [ 1145.662298][T28408] gtp0: entered allmulticast mode [ 1145.979663][T28417] netlink: 'syz.0.6451': attribute type 1 has an invalid length. [ 1146.093993][T28417] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1146.204830][T28423] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1146.206966][T28423] bond3: (slave bond4): making interface the new active one [ 1146.207536][T28423] bond3: (slave bond4): Enslaving as an active interface with an up link [ 1146.625429][T28440] netlink: 'syz.0.6454': attribute type 1 has an invalid length. [ 1146.837659][T28447] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1146.854585][T28447] bond5: (slave bond6): making interface the new active one [ 1146.867684][T28447] bond5: (slave bond6): Enslaving as an active interface with an up link [ 1146.883370][T28442] __nla_validate_parse: 1 callbacks suppressed [ 1146.883390][T28442] netlink: 24 bytes leftover after parsing attributes in process `syz.8.6456'. [ 1146.996316][T28455] Bluetooth: hci0: unsupported parameter 5135 [ 1146.996339][T28455] Bluetooth: hci0: unsupported parameter 8192 [ 1146.996352][T28455] Bluetooth: hci0: unsupported parameter 5135 [ 1146.996365][T28455] Bluetooth: hci0: unsupported parameter 8192 [ 1147.136458][T28463] netlink: 'syz.6.6464': attribute type 1 has an invalid length. [ 1147.206330][T28466] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6466'. [ 1147.206353][T28466] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6466'. [ 1147.402869][T28464] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1147.570461][T28464] bond5: (slave bond6): making interface the new active one [ 1147.570906][T28464] bond5: (slave bond6): Enslaving as an active interface with an up link [ 1147.620243][T28486] ip6t_srh: unknown srh match flags 4000 [ 1147.809509][T28472] syzkaller0: entered promiscuous mode [ 1147.809535][T28472] syzkaller0: entered allmulticast mode [ 1148.652668][T28516] netlink: 'syz.0.6473': attribute type 1 has an invalid length. [ 1149.043420][T28520] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1149.058304][T28520] bond7: (slave bond8): making interface the new active one [ 1149.062641][T28520] bond7: (slave bond8): Enslaving as an active interface with an up link [ 1149.311984][T28534] FAULT_INJECTION: forcing a failure. [ 1149.311984][T28534] name failslab, interval 1, probability 0, space 0, times 0 [ 1149.312018][T28534] CPU: 1 UID: 0 PID: 28534 Comm: syz.7.6478 Not tainted syzkaller #0 PREEMPT(full) [ 1149.312041][T28534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1149.312052][T28534] Call Trace: [ 1149.312060][T28534] [ 1149.312069][T28534] dump_stack_lvl+0xe8/0x150 [ 1149.312105][T28534] should_fail_ex+0x3eb/0x540 [ 1149.312135][T28534] should_failslab+0xa8/0x100 [ 1149.312166][T28534] __kvmalloc_node_noprof+0x171/0x820 [ 1149.312195][T28534] ? __kvmalloc_node_noprof+0x340/0x820 [ 1149.312221][T28534] ? bpf_compute_subprog_arg_access+0x194/0x15c0 [ 1149.312247][T28534] ? bpf_compute_subprog_arg_access+0x194/0x15c0 [ 1149.312281][T28534] bpf_compute_subprog_arg_access+0x194/0x15c0 [ 1149.312334][T28534] ? __pfx_bpf_compute_subprog_arg_access+0x10/0x10 [ 1149.312366][T28534] ? __kvmalloc_node_noprof+0x340/0x820 [ 1149.312392][T28534] ? bpf_compute_live_registers+0x142/0x1df0 [ 1149.312416][T28534] ? bpf_compute_live_registers+0x142/0x1df0 [ 1149.312456][T28534] bpf_compute_live_registers+0x10b0/0x1df0 [ 1149.312507][T28534] ? __pfx_bpf_compute_live_registers+0x10/0x10 [ 1149.312546][T28534] bpf_check+0x2d0b/0x34e0 [ 1149.312580][T28534] ? ktime_get_with_offset+0x93/0x2d0 [ 1149.312608][T28534] ? ktime_get_with_offset+0x93/0x2d0 [ 1149.312635][T28534] ? __pfx_bpf_check+0x10/0x10 [ 1149.312659][T28534] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1149.312688][T28534] bpf_prog_load+0x14da/0x1c60 [ 1149.312722][T28534] ? __pfx_bpf_prog_load+0x10/0x10 [ 1149.312760][T28534] ? __might_fault+0xaf/0x130 [ 1149.312789][T28534] __sys_bpf+0xd86/0xe00 [ 1149.312818][T28534] ? __pfx___sys_bpf+0x10/0x10 [ 1149.312849][T28534] ? __fget_files+0x2a/0x420 [ 1149.312894][T28534] ? ksys_write+0x242/0x270 [ 1149.312923][T28534] ? __pfx_ksys_write+0x10/0x10 [ 1149.312955][T28534] __x64_sys_bpf+0xba/0xd0 [ 1149.312985][T28534] do_syscall_64+0x166/0x520 [ 1149.313009][T28534] ? trace_irq_disable+0x3b/0x140 [ 1149.313035][T28534] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1149.313054][T28534] ? clear_bhb_loop+0x70/0xc0 [ 1149.313078][T28534] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1149.313097][T28534] RIP: 0033:0x7f4fcb7a8f19 [ 1149.313116][T28534] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1149.313132][T28534] RSP: 002b:00007f4fcc5da028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1149.313153][T28534] RAX: ffffffffffffffda RBX: 00007f4fcba25fa0 RCX: 00007f4fcb7a8f19 [ 1149.313167][T28534] RDX: 0000000000000094 RSI: 00002000000002c0 RDI: 0000000000000005 [ 1149.313180][T28534] RBP: 00007f4fcc5da090 R08: 0000000000000000 R09: 0000000000000000 [ 1149.313192][T28534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1149.313203][T28534] R13: 00007f4fcba26038 R14: 00007f4fcba25fa0 R15: 00007fffe36580b8 [ 1149.313237][T28534] [ 1149.882555][T28544] netlink: 404 bytes leftover after parsing attributes in process `syz.6.6482'. [ 1149.882581][T28544] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6482'. [ 1149.882598][T28544] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6482'. [ 1149.882612][T28544] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6482'. [ 1150.534137][T28568] netlink: 'syz.0.6489': attribute type 1 has an invalid length. [ 1150.699262][T28582] FAULT_INJECTION: forcing a failure. [ 1150.699262][T28582] name failslab, interval 1, probability 0, space 0, times 0 [ 1150.699294][T28582] CPU: 1 UID: 0 PID: 28582 Comm: syz.7.6492 Not tainted syzkaller #0 PREEMPT(full) [ 1150.699314][T28582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1150.699325][T28582] Call Trace: [ 1150.699333][T28582] [ 1150.699342][T28582] dump_stack_lvl+0xe8/0x150 [ 1150.699377][T28582] should_fail_ex+0x3eb/0x540 [ 1150.699407][T28582] should_failslab+0xa8/0x100 [ 1150.699437][T28582] __kvmalloc_node_noprof+0x171/0x820 [ 1150.699463][T28582] ? rcu_is_watching+0x16/0xb0 [ 1150.699490][T28582] ? analyze_subprog+0xba9/0xb150 [ 1150.699514][T28582] ? analyze_subprog+0xba9/0xb150 [ 1150.699546][T28582] analyze_subprog+0xba9/0xb150 [ 1150.699579][T28582] ? is_bpf_text_address+0x292/0x2b0 [ 1150.699596][T28582] ? is_bpf_text_address+0x26/0x2b0 [ 1150.699622][T28582] ? __kernel_text_address+0xd/0x30 [ 1150.699645][T28582] ? unwind_get_return_address+0x4d/0x90 [ 1150.699671][T28582] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1150.699695][T28582] ? arch_stack_walk+0xfb/0x150 [ 1150.699747][T28582] ? __pfx_analyze_subprog+0x10/0x10 [ 1150.699771][T28582] ? kasan_save_track+0x4f/0x80 [ 1150.699795][T28582] ? kasan_save_track+0x3e/0x80 [ 1150.699819][T28582] ? __kasan_kmalloc+0x93/0xb0 [ 1150.699843][T28582] ? __kvmalloc_node_noprof+0x50a/0x820 [ 1150.699867][T28582] ? call_instance+0x263/0x560 [ 1150.699896][T28582] ? bpf_compute_subprog_arg_access+0x2cb/0x15c0 [ 1150.699921][T28582] ? bpf_compute_live_registers+0x10b0/0x1df0 [ 1150.699945][T28582] ? bpf_check+0x2d0b/0x34e0 [ 1150.699963][T28582] ? bpf_prog_load+0x14da/0x1c60 [ 1150.699980][T28582] ? __sys_bpf+0xd86/0xe00 [ 1150.699996][T28582] ? __x64_sys_bpf+0xba/0xd0 [ 1150.700020][T28582] ? do_syscall_64+0x166/0x520 [ 1150.700044][T28582] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1150.700103][T28582] ? call_instance+0x263/0x560 [ 1150.700129][T28582] ? rcu_is_watching+0x16/0xb0 [ 1150.700156][T28582] ? call_instance+0x263/0x560 [ 1150.700178][T28582] ? trace_kmalloc+0x2a/0xf0 [ 1150.700203][T28582] ? call_instance+0x263/0x560 [ 1150.700226][T28582] ? __kvmalloc_node_noprof+0x52a/0x820 [ 1150.700253][T28582] ? __kvmalloc_node_noprof+0x340/0x820 [ 1150.700278][T28582] ? call_instance+0x263/0x560 [ 1150.700301][T28582] ? call_instance+0x263/0x560 [ 1150.700332][T28582] ? call_instance+0x42e/0x560 [ 1150.700364][T28582] bpf_compute_subprog_arg_access+0x2f1/0x15c0 [ 1150.700412][T28582] ? __pfx_bpf_compute_subprog_arg_access+0x10/0x10 [ 1150.700445][T28582] ? __kvmalloc_node_noprof+0x340/0x820 [ 1150.700471][T28582] ? bpf_compute_live_registers+0x142/0x1df0 [ 1150.700495][T28582] ? bpf_compute_live_registers+0x142/0x1df0 [ 1150.700528][T28582] bpf_compute_live_registers+0x10b0/0x1df0 [ 1150.700577][T28582] ? __pfx_bpf_compute_live_registers+0x10/0x10 [ 1150.700614][T28582] bpf_check+0x2d0b/0x34e0 [ 1150.700646][T28582] ? ktime_get_with_offset+0x93/0x2d0 [ 1150.700672][T28582] ? ktime_get_with_offset+0x93/0x2d0 [ 1150.700699][T28582] ? __pfx_bpf_check+0x10/0x10 [ 1150.700722][T28582] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1150.700750][T28582] bpf_prog_load+0x14da/0x1c60 [ 1150.700783][T28582] ? __pfx_bpf_prog_load+0x10/0x10 [ 1150.700818][T28582] ? __might_fault+0xaf/0x130 [ 1150.700846][T28582] __sys_bpf+0xd86/0xe00 [ 1150.700874][T28582] ? __pfx___sys_bpf+0x10/0x10 [ 1150.700911][T28582] ? __fget_files+0x2a/0x420 [ 1150.700953][T28582] ? ksys_write+0x242/0x270 [ 1150.700981][T28582] ? __pfx_ksys_write+0x10/0x10 [ 1150.701013][T28582] __x64_sys_bpf+0xba/0xd0 [ 1150.701043][T28582] do_syscall_64+0x166/0x520 [ 1150.701066][T28582] ? trace_irq_disable+0x3b/0x140 [ 1150.701091][T28582] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1150.701111][T28582] ? clear_bhb_loop+0x70/0xc0 [ 1150.701135][T28582] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1150.701154][T28582] RIP: 0033:0x7f4fcb7a8f19 [ 1150.701172][T28582] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1150.701190][T28582] RSP: 002b:00007f4fcc5da028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1150.701210][T28582] RAX: ffffffffffffffda RBX: 00007f4fcba25fa0 RCX: 00007f4fcb7a8f19 [ 1150.701225][T28582] RDX: 0000000000000094 RSI: 00002000000002c0 RDI: 0000000000000005 [ 1150.701238][T28582] RBP: 00007f4fcc5da090 R08: 0000000000000000 R09: 0000000000000000 [ 1150.701250][T28582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1150.701262][T28582] R13: 00007f4fcba26038 R14: 00007f4fcba25fa0 R15: 00007fffe36580b8 [ 1150.701295][T28582] [ 1150.839553][T28576] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1150.896125][T28585] FAULT_INJECTION: forcing a failure. [ 1150.896125][T28585] name failslab, interval 1, probability 0, space 0, times 0 [ 1150.896153][T28585] CPU: 0 UID: 0 PID: 28585 Comm: syz.6.6491 Not tainted syzkaller #0 PREEMPT(full) [ 1150.896175][T28585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1150.896187][T28585] Call Trace: [ 1150.896195][T28585] [ 1150.896203][T28585] dump_stack_lvl+0xe8/0x150 [ 1150.896238][T28585] should_fail_ex+0x3eb/0x540 [ 1150.896266][T28585] should_failslab+0xa8/0x100 [ 1150.896295][T28585] ? skb_clone+0x212/0x3a0 [ 1150.896316][T28585] kmem_cache_alloc_noprof+0x9c/0x600 [ 1150.896342][T28585] ? skb_clone+0x212/0x3a0 [ 1150.896377][T28585] skb_clone+0x212/0x3a0 [ 1150.896409][T28585] __netlink_deliver_tap+0x355/0x6e0 [ 1150.896448][T28585] ? netlink_deliver_tap+0x2e/0x1b0 [ 1150.896477][T28585] netlink_deliver_tap+0x19c/0x1b0 [ 1150.896506][T28585] netlink_unicast+0x8c1/0xa80 [ 1150.896548][T28585] netlink_sendmsg+0x7f0/0xb20 [ 1150.896582][T28585] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1150.896614][T28585] ? aa_sock_msg_perm+0x144/0x210 [ 1150.896649][T28585] ? apparmor_socket_sendmsg+0x98/0x360 [ 1150.896677][T28585] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1150.896704][T28585] sock_sendmsg_nosec+0x14e/0x190 [ 1150.896732][T28585] ____sys_sendmsg+0x54e/0x850 [ 1150.896759][T28585] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1150.896792][T28585] ? import_iovec+0x73/0xa0 [ 1150.896820][T28585] ___sys_sendmsg+0x2a5/0x360 [ 1150.896839][T28585] ? __lock_acquire+0x747/0x2de0 [ 1150.896868][T28585] ? __pfx____sys_sendmsg+0x10/0x10 [ 1150.896926][T28585] ? __fget_files+0x3a2/0x420 [ 1150.896949][T28585] ? __fget_files+0x2a/0x420 [ 1150.896981][T28585] __x64_sys_sendmsg+0x1b1/0x290 [ 1150.897006][T28585] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1150.897049][T28585] do_syscall_64+0x166/0x520 [ 1150.897072][T28585] ? trace_irq_disable+0x3b/0x140 [ 1150.897097][T28585] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1150.897115][T28585] ? clear_bhb_loop+0x70/0xc0 [ 1150.897139][T28585] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1150.897157][T28585] RIP: 0033:0x7f9e32ba8f19 [ 1150.897175][T28585] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1150.897191][T28585] RSP: 002b:00007f9e33a01028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1150.897211][T28585] RAX: ffffffffffffffda RBX: 00007f9e32e26090 RCX: 00007f9e32ba8f19 [ 1150.897224][T28585] RDX: 0000000000000000 RSI: 0000200000003d40 RDI: 0000000000000006 [ 1150.897237][T28585] RBP: 00007f9e33a01090 R08: 0000000000000000 R09: 0000000000000000 [ 1150.897249][T28585] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1150.897260][T28585] R13: 00007f9e32e26128 R14: 00007f9e32e26090 R15: 00007ffc20ae2dd8 [ 1150.897292][T28585] [ 1151.386851][T28576] bond9: (slave bond10): making interface the new active one [ 1151.616521][T28576] bond9: (slave bond10): Enslaving as an active interface with an up link [ 1151.634849][T28589] netlink: 404 bytes leftover after parsing attributes in process `syz.6.6496'. [ 1151.634874][T28589] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6496'. [ 1151.634892][T28589] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6496'. [ 1152.114041][ T5633] Bluetooth: hci6: unexpected event 0x3b length: 11 > 10 [ 1152.116414][T28616] __nla_validate_parse: 1 callbacks suppressed [ 1152.116431][T28616] netlink: 76 bytes leftover after parsing attributes in process `syz.6.6500'. [ 1152.650586][T28644] netlink: 404 bytes leftover after parsing attributes in process `syz.9.6508'. [ 1152.650613][T28644] netlink: 28 bytes leftover after parsing attributes in process `syz.9.6508'. [ 1152.650632][T28644] netlink: 28 bytes leftover after parsing attributes in process `syz.9.6508'. [ 1152.650647][T28644] netlink: 20 bytes leftover after parsing attributes in process `syz.9.6508'. [ 1153.026972][T28658] netlink: 'syz.9.6509': attribute type 1 has an invalid length. [ 1154.956072][T28606] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1155.285328][T28708] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6511'. [ 1155.285361][T28708] net_ratelimit: 23 callbacks suppressed [ 1155.285374][T28708] openvswitch: netlink: EtherType 520 is less than min 600 [ 1155.305436][T28708] netlink: 64 bytes leftover after parsing attributes in process `syz.9.6511'. [ 1155.364511][T28710] veth0_to_bridge: entered promiscuous mode [ 1155.375604][T28707] veth0_to_bridge: left promiscuous mode [ 1156.393919][T28742] netlink: 'syz.0.6521': attribute type 1 has an invalid length. [ 1157.661959][T28779] sctp: [Deprecated]: syz.0.6530 (pid 28779) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1157.661959][T28779] Use struct sctp_sack_info instead [ 1158.054018][T28792] netlink: 'syz.0.6534': attribute type 1 has an invalid length. [ 1158.849563][T28827] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6543'. [ 1158.878585][T28827] syz.9.6543 (28827) used obsolete PPPIOCDETACH ioctl [ 1158.940001][T28834] FAULT_INJECTION: forcing a failure. [ 1158.940001][T28834] name failslab, interval 1, probability 0, space 0, times 0 [ 1158.940032][T28834] CPU: 1 UID: 0 PID: 28834 Comm: syz.7.6546 Not tainted syzkaller #0 PREEMPT(full) [ 1158.940054][T28834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1158.940066][T28834] Call Trace: [ 1158.940074][T28834] [ 1158.940082][T28834] dump_stack_lvl+0xe8/0x150 [ 1158.940118][T28834] should_fail_ex+0x3eb/0x540 [ 1158.940147][T28834] should_failslab+0xa8/0x100 [ 1158.940178][T28834] __kvmalloc_node_noprof+0x171/0x820 [ 1158.940207][T28834] ? bpf_init_scev+0x167/0x460 [ 1158.940227][T28834] ? bpf_init_scev+0x167/0x460 [ 1158.940248][T28834] ? __asan_memcpy+0x40/0x70 [ 1158.940280][T28834] bpf_init_scev+0x167/0x460 [ 1158.940305][T28834] bpf_check+0x2fd8/0x34e0 [ 1158.940338][T28834] ? ktime_get_with_offset+0x93/0x2d0 [ 1158.940364][T28834] ? ktime_get_with_offset+0x93/0x2d0 [ 1158.940390][T28834] ? __pfx_bpf_check+0x10/0x10 [ 1158.940414][T28834] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1158.940442][T28834] bpf_prog_load+0x14da/0x1c60 [ 1158.940472][T28834] ? __pfx_bpf_prog_load+0x10/0x10 [ 1158.940507][T28834] ? __might_fault+0xaf/0x130 [ 1158.940535][T28834] __sys_bpf+0xd86/0xe00 [ 1158.940562][T28834] ? __pfx___sys_bpf+0x10/0x10 [ 1158.940594][T28834] ? __fget_files+0x2a/0x420 [ 1158.940636][T28834] ? ksys_write+0x242/0x270 [ 1158.940664][T28834] ? __pfx_ksys_write+0x10/0x10 [ 1158.940695][T28834] __x64_sys_bpf+0xba/0xd0 [ 1158.940725][T28834] do_syscall_64+0x166/0x520 [ 1158.940749][T28834] ? trace_irq_disable+0x3b/0x140 [ 1158.940773][T28834] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1158.940792][T28834] ? clear_bhb_loop+0x70/0xc0 [ 1158.940816][T28834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1158.940835][T28834] RIP: 0033:0x7f4fcb7a8f19 [ 1158.940853][T28834] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1158.940869][T28834] RSP: 002b:00007f4fcc5da028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1158.940889][T28834] RAX: ffffffffffffffda RBX: 00007f4fcba25fa0 RCX: 00007f4fcb7a8f19 [ 1158.940903][T28834] RDX: 0000000000000094 RSI: 00002000000002c0 RDI: 0000000000000005 [ 1158.940916][T28834] RBP: 00007f4fcc5da090 R08: 0000000000000000 R09: 0000000000000000 [ 1158.940929][T28834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1158.940940][T28834] R13: 00007f4fcba26038 R14: 00007f4fcba25fa0 R15: 00007fffe36580b8 [ 1158.940972][T28834] [ 1159.510738][T28853] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6548'. [ 1159.535227][T28850] netlink: 44 bytes leftover after parsing attributes in process `syz.8.6551'. [ 1159.767742][T28859] ip_tables: iptables: counters copy to user failed while replacing table [ 1160.552337][T28888] FAULT_INJECTION: forcing a failure. [ 1160.552337][T28888] name failslab, interval 1, probability 0, space 0, times 0 [ 1160.552369][T28888] CPU: 1 UID: 0 PID: 28888 Comm: syz.6.6560 Not tainted syzkaller #0 PREEMPT(full) [ 1160.552391][T28888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1160.552404][T28888] Call Trace: [ 1160.552412][T28888] [ 1160.552421][T28888] dump_stack_lvl+0xe8/0x150 [ 1160.552457][T28888] should_fail_ex+0x3eb/0x540 [ 1160.552486][T28888] should_failslab+0xa8/0x100 [ 1160.552520][T28888] __kvmalloc_node_noprof+0x171/0x820 [ 1160.552551][T28888] ? bpf_init_scev+0x167/0x460 [ 1160.552571][T28888] ? bpf_init_scev+0x167/0x460 [ 1160.552592][T28888] ? __asan_memcpy+0x40/0x70 [ 1160.552626][T28888] bpf_init_scev+0x167/0x460 [ 1160.552651][T28888] bpf_check+0x2fd8/0x34e0 [ 1160.552684][T28888] ? ktime_get_with_offset+0x93/0x2d0 [ 1160.552711][T28888] ? ktime_get_with_offset+0x93/0x2d0 [ 1160.552738][T28888] ? __pfx_bpf_check+0x10/0x10 [ 1160.552762][T28888] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1160.552790][T28888] bpf_prog_load+0x14da/0x1c60 [ 1160.552821][T28888] ? __pfx_bpf_prog_load+0x10/0x10 [ 1160.552854][T28888] ? __might_fault+0xaf/0x130 [ 1160.552878][T28888] __sys_bpf+0xd86/0xe00 [ 1160.552903][T28888] ? __pfx___sys_bpf+0x10/0x10 [ 1160.552934][T28888] ? __fget_files+0x2a/0x420 [ 1160.552976][T28888] ? ksys_write+0x242/0x270 [ 1160.553005][T28888] ? __pfx_ksys_write+0x10/0x10 [ 1160.553037][T28888] __x64_sys_bpf+0xba/0xd0 [ 1160.553067][T28888] do_syscall_64+0x166/0x520 [ 1160.553091][T28888] ? trace_irq_disable+0x3b/0x140 [ 1160.553117][T28888] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1160.553136][T28888] ? clear_bhb_loop+0x70/0xc0 [ 1160.553160][T28888] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1160.553179][T28888] RIP: 0033:0x7f9e32ba8f19 [ 1160.553198][T28888] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1160.553215][T28888] RSP: 002b:00007f9e33a22028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1160.553236][T28888] RAX: ffffffffffffffda RBX: 00007f9e32e25fa0 RCX: 00007f9e32ba8f19 [ 1160.553251][T28888] RDX: 0000000000000094 RSI: 00002000000002c0 RDI: 0000000000000005 [ 1160.553264][T28888] RBP: 00007f9e33a22090 R08: 0000000000000000 R09: 0000000000000000 [ 1160.553277][T28888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1160.553289][T28888] R13: 00007f9e32e26038 R14: 00007f9e32e25fa0 R15: 00007ffc20ae2dd8 [ 1160.553322][T28888] [ 1161.213827][T28902] netlink: 24 bytes leftover after parsing attributes in process `syz.8.6563'. [ 1161.457579][T28873] Cannot find add_set index 4 as target [ 1161.605675][T28914] Cannot find add_set index 4 as target [ 1162.095292][T28930] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6568'. [ 1163.183961][T28956] bond7 (unregistering): Released all slaves [ 1163.656830][T28977] xt_l2tp: v2 sid > 0xffff: 4294967294 [ 1163.779629][T28981] netlink: 404 bytes leftover after parsing attributes in process `syz.9.6581'. [ 1163.779654][T28981] netlink: 28 bytes leftover after parsing attributes in process `syz.9.6581'. [ 1163.779672][T28981] netlink: 28 bytes leftover after parsing attributes in process `syz.9.6581'. [ 1163.779688][T28981] netlink: 20 bytes leftover after parsing attributes in process `syz.9.6581'. [ 1164.088876][ T5633] Bluetooth: hci3: command 0x0406 tx timeout [ 1164.778743][T29005] netlink: 212408 bytes leftover after parsing attributes in process `syz.6.6588'. [ 1165.003963][T29013] netlink: 'syz.8.6590': attribute type 1 has an invalid length. [ 1165.123033][T29023] netlink: 24 bytes leftover after parsing attributes in process `syz.8.6590'. [ 1165.183291][T29013] bond7: entered promiscuous mode [ 1165.298294][T29013] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1165.391307][T29029] netlink: 'syz.0.6594': attribute type 1 has an invalid length. [ 1165.504624][T29015] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1165.505026][T29015] bond7: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 1165.505045][T29015] bond7: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 1165.546047][T29015] bond7: (slave ip6gre1): making interface the new active one [ 1165.546073][T29015] ip6gre1: entered promiscuous mode [ 1165.564698][T29015] bond7: (slave ip6gre1): Enslaving as an active interface with an up link [ 1166.117629][T29041] syzkaller0: entered promiscuous mode [ 1166.117657][T29041] syzkaller0: entered allmulticast mode [ 1166.180971][T29058] netlink: 348 bytes leftover after parsing attributes in process `syz.7.6601'. [ 1166.485158][T29072] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6604'. [ 1166.591736][T29069] netlink: 'syz.0.6603': attribute type 1 has an invalid length. [ 1166.893819][T29033] infiniband syz2: set active [ 1166.893841][T29033] infiniband syz2: added bridge_slave_1 [ 1166.897687][T29033] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 1166.929754][T29033] infiniband syz2: Couldn't open port 1 [ 1166.930005][T29033] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 1166.930036][T29033] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 1166.930073][T29033] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 1167.089496][T29033] RDS/IB: syz2: added [ 1167.089548][T29033] smc: adding ib device syz2 with port count 1 [ 1167.089568][T29033] smc: ib device syz2 port 1 has no pnetid [ 1169.207024][ T4955] Bluetooth: hci6: command 0x0406 tx timeout [ 1169.747211][T29073] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1169.767028][T29073] bond13: (slave bond14): making interface the new active one [ 1169.767464][T29073] bond13: (slave bond14): Enslaving as an active interface with an up link [ 1170.184376][T29097] FAULT_INJECTION: forcing a failure. [ 1170.184376][T29097] name failslab, interval 1, probability 0, space 0, times 0 [ 1170.184411][T29097] CPU: 1 UID: 0 PID: 29097 Comm: syz.0.6608 Not tainted syzkaller #0 PREEMPT(full) [ 1170.184447][T29097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1170.184460][T29097] Call Trace: [ 1170.184468][T29097] [ 1170.184477][T29097] dump_stack_lvl+0xe8/0x150 [ 1170.184521][T29097] should_fail_ex+0x3eb/0x540 [ 1170.184551][T29097] should_failslab+0xa8/0x100 [ 1170.184582][T29097] __kvmalloc_node_noprof+0x171/0x820 [ 1170.184611][T29097] ? __kvmalloc_node_noprof+0x340/0x820 [ 1170.184635][T29097] ? bpf_init_scev+0x299/0x460 [ 1170.184655][T29097] ? bpf_init_scev+0x299/0x460 [ 1170.184683][T29097] bpf_init_scev+0x299/0x460 [ 1170.184708][T29097] bpf_check+0x2fd8/0x34e0 [ 1170.184741][T29097] ? ktime_get_with_offset+0x93/0x2d0 [ 1170.184768][T29097] ? ktime_get_with_offset+0x93/0x2d0 [ 1170.184794][T29097] ? __pfx_bpf_check+0x10/0x10 [ 1170.184818][T29097] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1170.184847][T29097] bpf_prog_load+0x14da/0x1c60 [ 1170.184880][T29097] ? __pfx_bpf_prog_load+0x10/0x10 [ 1170.184916][T29097] ? __might_fault+0xaf/0x130 [ 1170.184945][T29097] __sys_bpf+0xd86/0xe00 [ 1170.184973][T29097] ? __pfx___sys_bpf+0x10/0x10 [ 1170.185004][T29097] ? __fget_files+0x2a/0x420 [ 1170.185047][T29097] ? ksys_write+0x242/0x270 [ 1170.185076][T29097] ? __pfx_ksys_write+0x10/0x10 [ 1170.185108][T29097] __x64_sys_bpf+0xba/0xd0 [ 1170.185139][T29097] do_syscall_64+0x166/0x520 [ 1170.185162][T29097] ? trace_irq_disable+0x3b/0x140 [ 1170.185188][T29097] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1170.185207][T29097] ? clear_bhb_loop+0x70/0xc0 [ 1170.185231][T29097] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1170.185250][T29097] RIP: 0033:0x7f93225a8f19 [ 1170.185269][T29097] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1170.185285][T29097] RSP: 002b:00007f93233cc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1170.185307][T29097] RAX: ffffffffffffffda RBX: 00007f9322825fa0 RCX: 00007f93225a8f19 [ 1170.185322][T29097] RDX: 0000000000000094 RSI: 00002000000002c0 RDI: 0000000000000005 [ 1170.185335][T29097] RBP: 00007f93233cc090 R08: 0000000000000000 R09: 0000000000000000 [ 1170.185348][T29097] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1170.185360][T29097] R13: 00007f9322826038 R14: 00007f9322825fa0 R15: 00007ffd51ad5e88 [ 1170.185393][T29097] [ 1170.640400][T29102] netlink: 'syz.8.6609': attribute type 1 has an invalid length. [ 1170.774001][T29109] netlink: 'syz.0.6610': attribute type 1 has an invalid length. [ 1170.774023][T29109] netlink: 'syz.0.6610': attribute type 8 has an invalid length. [ 1170.835794][T29102] bond8: entered promiscuous mode [ 1170.851436][T29102] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1170.997866][T29107] bond8: (slave bridge3): making interface the new active one [ 1170.997892][T29107] bridge3: entered promiscuous mode [ 1171.044940][T29107] bond8: (slave bridge3): Enslaving as an active interface with an up link [ 1171.412512][T29102] bond8: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1171.412538][T29102] bond8: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 1172.008922][T29144] netlink: 'syz.7.6618': attribute type 1 has an invalid length. [ 1172.437127][T29149] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1172.460121][T29149] bond7: (slave bond8): making interface the new active one [ 1172.462100][T29149] bond7: (slave bond8): Enslaving as an active interface with an up link [ 1172.959708][T29174] xt_ipcomp: unknown flags 1D [ 1173.263019][T29180] syzkaller0: entered promiscuous mode [ 1173.263213][T29180] syzkaller0: entered allmulticast mode [ 1173.315971][T29180] netlink: 256 bytes leftover after parsing attributes in process `syz.9.6627'. [ 1173.342832][T29180] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 1173.940150][T29198] netlink: 404 bytes leftover after parsing attributes in process `syz.9.6633'. [ 1173.940178][T29198] netlink: 28 bytes leftover after parsing attributes in process `syz.9.6633'. [ 1173.940195][T29198] netlink: 28 bytes leftover after parsing attributes in process `syz.9.6633'. [ 1173.940211][T29198] netlink: 20 bytes leftover after parsing attributes in process `syz.9.6633'. [ 1174.186495][T29204] netlink: 'syz.7.6634': attribute type 1 has an invalid length. [ 1174.543103][T29210] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1174.545368][T29210] bond9: (slave bond10): making interface the new active one [ 1174.545825][T29210] bond9: (slave bond10): Enslaving as an active interface with an up link [ 1174.574164][T29220] netlink: 'syz.0.6637': attribute type 1 has an invalid length. [ 1174.788885][T29216] vlan2: entered allmulticast mode [ 1174.788909][T29216] veth0_vlan: entered allmulticast mode [ 1175.359523][T29232] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6641'. [ 1176.619337][T29269] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6648'. [ 1176.982752][T29269] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6648'. [ 1177.362238][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.362457][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.477854][T29291] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6654'. [ 1178.737204][T29335] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6667'. [ 1179.123197][T29343] netlink: 16 bytes leftover after parsing attributes in process `syz.9.6668'. [ 1179.634321][T29360] netlink: 84 bytes leftover after parsing attributes in process `syz.8.6675'. [ 1179.634352][T29360] netlink: 84 bytes leftover after parsing attributes in process `syz.8.6675'. [ 1179.637659][T29360] A link change request failed with some changes committed already. Interface vcan0 may have been left with an inconsistent configuration, please check. [ 1179.735641][T29360] netlink: 40 bytes leftover after parsing attributes in process `syz.8.6675'. [ 1180.076414][T29369] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6678'. [ 1180.369826][T29384] ip_tables: iptables: counters copy to user failed while replacing table [ 1180.422531][T29388] netlink: 52 bytes leftover after parsing attributes in process `syz.8.6682'. [ 1180.427498][T29388] netlink: 52 bytes leftover after parsing attributes in process `syz.8.6682'. [ 1180.480678][T29388] netlink: 52 bytes leftover after parsing attributes in process `syz.8.6682'. [ 1180.481528][T29393] netlink: 52 bytes leftover after parsing attributes in process `syz.8.6682'. [ 1181.132817][T29409] netlink: 'syz.8.6688': attribute type 10 has an invalid length. [ 1182.427727][T29452] openvswitch: netlink: Duplicate or invalid key (type 0). [ 1182.427763][T29452] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1183.334023][T29484] xt_cgroup: no path or classid specified [ 1184.011892][T29519] netlink: 'syz.8.6715': attribute type 29 has an invalid length. [ 1184.031437][T29510] xt_hashlimit: size too large, truncated to 1048576 [ 1184.056258][T29522] __nla_validate_parse: 8 callbacks suppressed [ 1184.056277][T29522] netlink: 52 bytes leftover after parsing attributes in process `syz.8.6715'. [ 1184.247005][T10003] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1184.247054][T10003] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1184.247087][T10003] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1184.247119][T10003] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1184.294855][T29530] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6717'. [ 1185.693290][T29571] netlink: 128 bytes leftover after parsing attributes in process `syz.0.6729'. [ 1185.745421][T29575] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6731'. [ 1185.817683][T29579] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6729'. [ 1186.195476][T29592] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6735'. [ 1186.213291][ T5633] block nbd4: Receive control failed (result -107) [ 1187.561327][T29625] syzkaller0: entered promiscuous mode [ 1187.561487][T29625] syzkaller0: entered allmulticast mode [ 1188.410941][T29648] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6754'. [ 1188.593775][T29652] netlink: 'syz.9.6756': attribute type 2 has an invalid length. [ 1188.864934][T29658] Cannot find del_set index 3 as target [ 1189.076594][T29668] netlink: 6024 bytes leftover after parsing attributes in process `syz.0.6761'. [ 1190.171704][T29682] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6767'. [ 1190.242608][T29687] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6767'. [ 1192.426535][T29687] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6767'. [ 1192.872203][T29696] policy can only be matched on NF_INET_PRE_ROUTING [ 1192.872220][T29696] unable to load match [ 1194.005060][T29752] netlink: 'syz.8.6787': attribute type 5 has an invalid length. [ 1194.178520][T29764] netlink: 'syz.9.6790': attribute type 1 has an invalid length. [ 1194.178544][T29764] netlink: 244 bytes leftover after parsing attributes in process `syz.9.6790'. [ 1194.182018][T29764] netlink: 'syz.9.6790': attribute type 6 has an invalid length. [ 1194.460097][T29770] netlink: 36 bytes leftover after parsing attributes in process `syz.7.6791'. [ 1194.555173][T29786] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6795'. [ 1194.653572][T29788] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6793'. [ 1194.653728][T29784] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6793'. [ 1194.807566][ T5633] Bluetooth: hci1: command 0x0406 tx timeout [ 1194.886326][T29786] vlan0: entered promiscuous mode [ 1194.886349][T29786] bond0: entered promiscuous mode [ 1194.886364][T29786] bond_slave_0: entered promiscuous mode [ 1194.887780][T29786] bond_slave_1: entered promiscuous mode [ 1195.685263][T29822] netlink: 260 bytes leftover after parsing attributes in process `syz.0.6801'. [ 1196.112958][T29832] netlink: 'syz.0.6804': attribute type 1 has an invalid length. [ 1196.369460][T29832] 8021q: adding VLAN 0 to HW filter on device bond15 [ 1196.501350][T29832] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6804'. [ 1196.536244][T29832] 8021q: adding VLAN 0 to HW filter on device team0 [ 1196.584518][T29832] bond15: (slave team0): Enslaving as a backup interface with an up link [ 1196.613331][T29837] netlink: 76 bytes leftover after parsing attributes in process `syz.0.6804'. [ 1197.156864][T29849] syzkaller0: entered promiscuous mode [ 1197.157056][T29849] syzkaller0: entered allmulticast mode [ 1197.223555][T29853] macsec1: entered promiscuous mode [ 1197.223579][T29853] bridge0: entered promiscuous mode [ 1197.223762][T29853] macsec1: entered allmulticast mode [ 1197.223775][T29853] bridge0: entered allmulticast mode [ 1197.558438][T29866] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6809'. [ 1197.567632][T29868] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6809'. [ 1198.124632][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888089c5bc00: rx timeout, send abort [ 1198.627770][ C1] vxcan1: j1939_tp_rxtimer: 0xffff8880317f4000: rx timeout, send abort [ 1198.627812][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888089c5bc00: abort rx timeout. Force session deactivation [ 1199.135110][ C1] vxcan1: j1939_tp_rxtimer: 0xffff8880317f4000: abort rx timeout. Force session deactivation [ 1200.740959][T29907] __nla_validate_parse: 3 callbacks suppressed [ 1200.740980][T29907] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6821'. [ 1201.030337][ T51] IPVS: starting estimator thread 0... [ 1201.068416][T29924] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6823'. [ 1201.068440][T29924] tipc: Invalid UDP bearer configuration [ 1201.068482][T29924] tipc: Enabling of bearer rejected, failed to enable media [ 1201.128437][T29925] IPVS: using max 26 ests per chain, 62400 per kthread [ 1202.051685][T29914] netlink: 24 bytes leftover after parsing attributes in process `syz.9.6822'. [ 1202.740178][T29968] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6839'. [ 1202.864495][T29973] netlink: 404 bytes leftover after parsing attributes in process `syz.9.6841'. [ 1202.864549][T29973] netlink: 28 bytes leftover after parsing attributes in process `syz.9.6841'. [ 1202.864569][T29973] netlink: 28 bytes leftover after parsing attributes in process `syz.9.6841'. [ 1202.864584][T29973] netlink: 20 bytes leftover after parsing attributes in process `syz.9.6841'. [ 1203.295235][T29992] netlink: 'syz.6.6848': attribute type 1 has an invalid length. [ 1203.298679][T29993] netlink: 'syz.6.6848': attribute type 1 has an invalid length. [ 1203.425482][T29994] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6848'. [ 1203.427480][T29991] syzkaller0: entered promiscuous mode [ 1203.427500][T29991] syzkaller0: entered allmulticast mode [ 1206.453546][T29992] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1207.153738][T30032] netlink: 14 bytes leftover after parsing attributes in process `syz.6.6858'. [ 1207.213568][T30032] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1207.285775][T30032] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1207.406590][T30032] bond0 (unregistering): Released all slaves [ 1207.535190][T30046] Bluetooth: hci0: Invalid link address type 18 for 00:40:00:00:00:00 [ 1208.191242][T30067] sctp: [Deprecated]: syz.8.6871 (pid 30067) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1208.191242][T30067] Use struct sctp_sack_info instead [ 1208.254291][T30069] syzkaller0: entered promiscuous mode [ 1208.254474][T30069] syzkaller0: entered allmulticast mode [ 1208.603114][T30083] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6876'. [ 1208.940705][T30091] lo speed is unknown, defaulting to 1000 [ 1208.977847][T30091] rxe_eth0 speed is unknown, defaulting to 1000 [ 1209.697000][T30118] netlink: 'syz.0.6886': attribute type 32 has an invalid length. [ 1209.697025][T30118] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6886'. [ 1210.198981][T30118] bond16: Setting coupled_control to off (0) [ 1210.562097][T30128] syzkaller0: entered promiscuous mode [ 1210.562123][T30128] syzkaller0: entered allmulticast mode [ 1210.851241][T30151] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6892'. [ 1213.712827][T30154] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 1215.024608][T30199] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6900'. [ 1215.691054][T30212] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6904'. [ 1215.994569][T30225] IPVS: sync thread started: state = MASTER, mcast_ifn = macvlan0, syncid = 0, id = 0 [ 1216.743960][T30254] netlink: 44 bytes leftover after parsing attributes in process `syz.9.6916'. [ 1217.210744][ T13] IPVS: starting estimator thread 0... [ 1217.302106][T30275] IPVS: using max 30 ests per chain, 72000 per kthread [ 1217.668286][T30279] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6920'. [ 1217.965001][T30291] netlink: 16 bytes leftover after parsing attributes in process `syz.8.6923'. [ 1218.003960][T30305] netlink: 'syz.6.6925': attribute type 1 has an invalid length. [ 1218.127013][T30305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1218.182242][T30302] syzkaller0: entered promiscuous mode [ 1218.182269][T30302] syzkaller0: entered allmulticast mode [ 1218.183706][T30312] netlink: 404 bytes leftover after parsing attributes in process `syz.0.6927'. [ 1218.183730][T30312] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6927'. [ 1218.183747][T30312] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6927'. [ 1218.183763][T30312] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6927'. [ 1218.255885][T30305] netlink: 52 bytes leftover after parsing attributes in process `syz.6.6925'. [ 1218.495187][T30308] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1219.645941][T30346] netlink: 'syz.0.6936': attribute type 1 has an invalid length. [ 1222.412297][T30346] workqueue: Failed to create a rescuer kthread for wq "bond17": -EINTR [ 1222.728031][T30361] __nla_validate_parse: 2 callbacks suppressed [ 1222.728054][T30361] netlink: 404 bytes leftover after parsing attributes in process `syz.6.6938'. [ 1222.728071][T30361] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6938'. [ 1222.728088][T30361] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6938'. [ 1222.728104][T30361] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6938'. [ 1223.085400][T30363] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6941'. [ 1223.269003][T30382] netlink: 'syz.9.6946': attribute type 39 has an invalid length. [ 1223.507460][T30385] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6946'. [ 1223.788336][ T4955] Bluetooth: hci2: link tx timeout [ 1223.788365][ T4955] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1223.901310][T30402] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6950'. [ 1224.336417][T30392] syzkaller0: entered promiscuous mode [ 1224.336467][T30392] syzkaller0: entered allmulticast mode [ 1225.192465][T30434] netlink: 24 bytes leftover after parsing attributes in process `syz.9.6958'. [ 1225.192491][T30434] openvswitch: netlink: Flow key attr not present in new flow. [ 1225.846346][ T5633] Bluetooth: hci2: command 0x0405 tx timeout [ 1227.486946][T30420] netlink: 404 bytes leftover after parsing attributes in process `syz.6.6955'. [ 1227.486973][T30420] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6955'. [ 1228.149822][T30447] __nla_validate_parse: 2 callbacks suppressed [ 1228.149865][T30447] netlink: 20 bytes leftover after parsing attributes in process `syz.9.6964'. [ 1228.450827][T30452] Bluetooth: MGMT ver 1.23 [ 1228.457927][T30452] lo: entered allmulticast mode [ 1228.864230][T30466] syzkaller0: entered promiscuous mode [ 1228.864411][T30466] syzkaller0: entered allmulticast mode [ 1228.916222][T30468] netlink: 44 bytes leftover after parsing attributes in process `syz.9.6971'. [ 1229.090605][T30451] lo: left allmulticast mode [ 1230.237082][T30498] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 1230.466302][T30497] bond11: Unable to set up delay as MII monitoring is disabled [ 1230.530399][T30509] netlink: 'syz.9.6979': attribute type 1 has an invalid length. [ 1230.569236][T30497] bond11 (unregistering): Released all slaves [ 1231.074261][T30522] netlink: 'syz.7.6984': attribute type 21 has an invalid length. [ 1231.105910][ T12] IPVS: starting estimator thread 0... [ 1231.188700][T30527] bridge0: port 1(syz_tun) entered blocking state [ 1231.189373][T30527] bridge0: port 1(syz_tun) entered disabled state [ 1231.189711][T30527] syz_tun: entered allmulticast mode [ 1231.196279][T30527] syz_tun: entered promiscuous mode [ 1231.198837][T30524] IPVS: using max 31 ests per chain, 74400 per kthread [ 1231.688342][T30536] syzkaller0: entered promiscuous mode [ 1231.688525][T30536] syzkaller0: entered allmulticast mode [ 1232.028620][T30548] netlink: 'syz.0.6993': attribute type 11 has an invalid length. [ 1232.147672][T30550] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6993'. [ 1232.734722][T30569] netlink: 'syz.6.7001': attribute type 4 has an invalid length. [ 1232.752114][T30571] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7002'. [ 1232.754745][T30563] netlink: 'syz.7.6998': attribute type 4 has an invalid length. [ 1232.754777][T30563] netlink: 156 bytes leftover after parsing attributes in process `syz.7.6998'. [ 1232.795319][T30563] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1232.999546][T30579] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7005'. [ 1233.360783][T30592] syzkaller0: entered promiscuous mode [ 1233.360806][T30592] syzkaller0: entered allmulticast mode [ 1233.403489][T30592] FAULT_INJECTION: forcing a failure. [ 1233.403489][T30592] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1233.403520][T30592] CPU: 0 UID: 0 PID: 30592 Comm: syz.8.7007 Not tainted syzkaller #0 PREEMPT(full) [ 1233.403541][T30592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1233.403553][T30592] Call Trace: [ 1233.403561][T30592] [ 1233.403570][T30592] dump_stack_lvl+0xe8/0x150 [ 1233.403605][T30592] should_fail_ex+0x3eb/0x540 [ 1233.403634][T30592] _copy_from_user+0x2d/0xb0 [ 1233.403665][T30592] ___sys_sendmsg+0x1c6/0x360 [ 1233.403685][T30592] ? __lock_acquire+0x747/0x2de0 [ 1233.403714][T30592] ? __pfx____sys_sendmsg+0x10/0x10 [ 1233.403774][T30592] ? __fget_files+0x3a2/0x420 [ 1233.403801][T30592] ? __fget_files+0x2a/0x420 [ 1233.403832][T30592] __x64_sys_sendmsg+0x1b1/0x290 [ 1233.403857][T30592] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1233.403901][T30592] do_syscall_64+0x166/0x520 [ 1233.403926][T30592] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1233.403945][T30592] ? clear_bhb_loop+0x70/0xc0 [ 1233.403969][T30592] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1233.403988][T30592] RIP: 0033:0x7fac1c7a8f19 [ 1233.404007][T30592] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1233.404024][T30592] RSP: 002b:00007fac1d6ef028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1233.404046][T30592] RAX: ffffffffffffffda RBX: 00007fac1ca25fa0 RCX: 00007fac1c7a8f19 [ 1233.404061][T30592] RDX: 0000000000004005 RSI: 0000200000000d00 RDI: 0000000000000006 [ 1233.404074][T30592] RBP: 00007fac1d6ef090 R08: 0000000000000000 R09: 0000000000000000 [ 1233.404086][T30592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1233.404097][T30592] R13: 00007fac1ca26038 R14: 00007fac1ca25fa0 R15: 00007ffd4a994448 [ 1233.404129][T30592] [ 1233.794150][T30603] tipc: Can't bind to reserved service type 2 [ 1233.803266][T30600] netlink: 56 bytes leftover after parsing attributes in process `syz.9.7010'. [ 1234.119748][T30612] nbd5: detected capacity change from 0 to 63 [ 1234.136330][ T2013] block nbd5: Send control failed (result -32) [ 1234.136467][ T2013] block nbd5: Request send failed, requeueing [ 1234.140238][ T2013] block nbd5: Dead connection, failed to find a fallback [ 1234.140259][ T2013] block nbd5: shutting down sockets [ 1234.140352][ T2013] I/O error, dev nbd5, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1234.140472][ T2013] Buffer I/O error on dev nbd5, logical block 3, async page read [ 1234.148503][T30619] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7017'. [ 1234.455671][T30630] rdma_rxe: rxe_newlink: failed to add bridge_slave_1 [ 1234.485187][T30622] netlink: 'syz.0.7019': attribute type 7 has an invalid length. [ 1234.494291][T30633] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7023'. [ 1234.516583][T30628] netlink: 40 bytes leftover after parsing attributes in process `syz.7.7022'. [ 1234.551869][T30622] netlink: 'syz.0.7019': attribute type 7 has an invalid length. [ 1234.611307][ T12] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1234.611354][ T12] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1234.611394][ T12] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1234.611427][ T12] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1234.942301][T30648] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7026'. [ 1235.047412][T30649] syzkaller0: entered promiscuous mode [ 1235.047434][T30649] syzkaller0: entered allmulticast mode [ 1235.059401][T30648] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 1235.086205][T30649] FAULT_INJECTION: forcing a failure. [ 1235.086205][T30649] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1235.086235][T30649] CPU: 1 UID: 0 PID: 30649 Comm: syz.6.7027 Not tainted syzkaller #0 PREEMPT(full) [ 1235.086257][T30649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1235.086269][T30649] Call Trace: [ 1235.086277][T30649] [ 1235.086286][T30649] dump_stack_lvl+0xe8/0x150 [ 1235.086322][T30649] should_fail_ex+0x3eb/0x540 [ 1235.086352][T30649] _copy_from_user+0x2d/0xb0 [ 1235.086377][T30649] __copy_msghdr+0x390/0x590 [ 1235.086406][T30649] ___sys_sendmsg+0x213/0x360 [ 1235.086426][T30649] ? __lock_acquire+0x747/0x2de0 [ 1235.086457][T30649] ? __pfx____sys_sendmsg+0x10/0x10 [ 1235.086518][T30649] ? __fget_files+0x3a2/0x420 [ 1235.086541][T30649] ? __fget_files+0x2a/0x420 [ 1235.086575][T30649] __x64_sys_sendmsg+0x1b1/0x290 [ 1235.086600][T30649] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1235.086645][T30649] do_syscall_64+0x166/0x520 [ 1235.086668][T30649] ? trace_irq_disable+0x3b/0x140 [ 1235.086694][T30649] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1235.086714][T30649] ? clear_bhb_loop+0x70/0xc0 [ 1235.086738][T30649] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1235.086757][T30649] RIP: 0033:0x7f9e32ba8f19 [ 1235.086776][T30649] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1235.086792][T30649] RSP: 002b:00007f9e33a22028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1235.086813][T30649] RAX: ffffffffffffffda RBX: 00007f9e32e25fa0 RCX: 00007f9e32ba8f19 [ 1235.086834][T30649] RDX: 0000000000004005 RSI: 0000200000000d00 RDI: 0000000000000006 [ 1235.086849][T30649] RBP: 00007f9e33a22090 R08: 0000000000000000 R09: 0000000000000000 [ 1235.086862][T30649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1235.086874][T30649] R13: 00007f9e32e26038 R14: 00007f9e32e25fa0 R15: 00007ffc20ae2dd8 [ 1235.086908][T30649] [ 1235.209502][T30657] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7029'. [ 1235.325074][T30648] syzkaller0: entered promiscuous mode [ 1235.325098][T30648] syzkaller0: entered allmulticast mode [ 1235.339737][T30665] netlink: 56 bytes leftover after parsing attributes in process `syz.8.7029'. [ 1235.397427][T30668] netlink: 32 bytes leftover after parsing attributes in process `syz.9.7030'. [ 1235.629265][T30674] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7033'. [ 1236.038720][T30688] xt_hashlimit: size too large, truncated to 1048576 [ 1236.092372][T30690] bond9: option lacp_active: mode dependency failed, not supported in mode active-backup(1) [ 1236.100930][T30690] bond9 (unregistering): Released all slaves [ 1236.130661][T30693] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7039'. [ 1236.229592][T30693] bridge0: port 1(bridge_slave_0) entered disabled state [ 1236.348434][T30693] bridge_slave_0 (unregistering): left allmulticast mode [ 1236.348773][T30693] bridge_slave_0 (unregistering): left promiscuous mode [ 1236.349176][T30693] bridge0: port 1(bridge_slave_0) entered disabled state [ 1236.653508][T30721] FAULT_INJECTION: forcing a failure. [ 1236.653508][T30721] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1236.653538][T30721] CPU: 0 UID: 0 PID: 30721 Comm: syz.8.7042 Not tainted syzkaller #0 PREEMPT(full) [ 1236.653560][T30721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1236.653571][T30721] Call Trace: [ 1236.653579][T30721] [ 1236.653588][T30721] dump_stack_lvl+0xe8/0x150 [ 1236.653622][T30721] should_fail_ex+0x3eb/0x540 [ 1236.653716][T30721] _copy_to_user+0x31/0xb0 [ 1236.653743][T30721] simple_read_from_buffer+0xe1/0x170 [ 1236.653771][T30721] proc_fail_nth_read+0x1bb/0x230 [ 1236.653795][T30721] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1236.653817][T30721] ? rw_verify_area+0x24a/0x4c0 [ 1236.653843][T30721] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1236.653862][T30721] vfs_read+0x213/0xa80 [ 1236.653892][T30721] ? __pfx___mutex_lock+0x10/0x10 [ 1236.653918][T30721] ? __pfx_vfs_read+0x10/0x10 [ 1236.653945][T30721] ? __fget_files+0x2a/0x420 [ 1236.653968][T30721] ? __fget_files+0x3a2/0x420 [ 1236.653990][T30721] ? __fget_files+0x2a/0x420 [ 1236.654019][T30721] ? fdget+0x1ac/0x250 [ 1236.654051][T30721] ksys_read+0x150/0x270 [ 1236.654078][T30721] ? __pfx_ksys_read+0x10/0x10 [ 1236.654116][T30721] do_syscall_64+0x166/0x520 [ 1236.654138][T30721] ? trace_irq_disable+0x3b/0x140 [ 1236.654162][T30721] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1236.654182][T30721] ? clear_bhb_loop+0x70/0xc0 [ 1236.654207][T30721] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1236.654224][T30721] RIP: 0033:0x7fac1c76974e [ 1236.654242][T30721] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1236.654257][T30721] RSP: 002b:00007fac1d628fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1236.654278][T30721] RAX: ffffffffffffffda RBX: 00007fac1d6296c0 RCX: 00007fac1c76974e [ 1236.654292][T30721] RDX: 000000000000000f RSI: 00007fac1d6290a0 RDI: 0000000000000007 [ 1236.654304][T30721] RBP: 00007fac1d629090 R08: 0000000000000000 R09: 0000000000000000 [ 1236.654316][T30721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1236.654328][T30721] R13: 00007fac1ca265d8 R14: 00007fac1ca26540 R15: 00007ffd4a994448 [ 1236.654363][T30721] [ 1236.985988][T30710] syzkaller0: entered promiscuous mode [ 1236.986015][T30710] syzkaller0: entered allmulticast mode [ 1237.797094][T30753] netlink: 'syz.6.7053': attribute type 1 has an invalid length. [ 1238.811596][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.811664][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 1241.060226][T30784] ip_tables: iptables: counters copy to user failed while replacing table [ 1241.101654][T30784] __nla_validate_parse: 3 callbacks suppressed [ 1241.101674][T30784] netlink: 5824 bytes leftover after parsing attributes in process `syz.8.7062'. [ 1241.145101][T30784] ip_tables: iptables: counters copy to user failed while replacing table [ 1241.655819][T30806] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1241.655925][T30806] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1241.762405][T30819] netlink: 'syz.9.7071': attribute type 21 has an invalid length. [ 1241.762431][T30819] IPv6: NLM_F_CREATE should be specified when creating new route [ 1241.804498][T30812] netlink: 176 bytes leftover after parsing attributes in process `syz.6.7069'. [ 1241.821557][T30818] netlink: 176 bytes leftover after parsing attributes in process `syz.6.7069'. [ 1242.115354][T30829] tipc: Started in network mode [ 1242.115376][T30829] tipc: Node identity 3, cluster identity 4711 [ 1242.115388][T30829] tipc: Node number set to 3 [ 1242.349601][T30829] netlink: 232 bytes leftover after parsing attributes in process `syz.7.7073'. [ 1242.571855][T30849] ip6t_rt: too many addresses specified [ 1242.582358][T30851] netlink: 'syz.8.7077': attribute type 2 has an invalid length. [ 1242.597354][T30848] ip6gre1: entered promiscuous mode [ 1242.597377][T30848] ip6gre1: entered allmulticast mode [ 1242.927553][T30860] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7078'. [ 1243.049261][T30864] ip_tables: iptables: counters copy to user failed while replacing table [ 1243.100650][T30866] openvswitch: netlink: IPv4 tunnel dst address is zero [ 1243.101600][T30866] openvswitch: netlink: IPv4 tunnel dst address is zero [ 1243.102525][T30866] openvswitch: netlink: IPv4 tunnel dst address is zero [ 1243.108848][T30866] openvswitch: netlink: IPv4 tunnel dst address is zero [ 1243.117708][T30866] openvswitch: netlink: IPv4 tunnel dst address is zero [ 1243.272955][T30873] mac80211_hwsim hwsim87 wlan0: entered promiscuous mode [ 1244.359267][T30916] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7093'. [ 1244.443561][T30923] netlink: 68 bytes leftover after parsing attributes in process `syz.0.7095'. [ 1244.537176][T30919] netlink: 404 bytes leftover after parsing attributes in process `syz.9.7094'. [ 1244.537203][T30919] netlink: 28 bytes leftover after parsing attributes in process `syz.9.7094'. [ 1244.537221][T30919] netlink: 28 bytes leftover after parsing attributes in process `syz.9.7094'. [ 1244.886625][T30936] syzkaller0: entered promiscuous mode [ 1244.886666][T30936] syzkaller0: entered allmulticast mode [ 1244.984925][T30943] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1244.987199][T30939] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1245.015396][T30939] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1245.017616][T30939] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1245.040896][T30939] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1245.042651][T30939] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1245.044298][T30939] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1245.046021][T30939] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1245.047606][T30939] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1245.231534][T30939] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1245.562920][T30939] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1245.580417][T30939] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1245.608382][T30939] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1245.709691][T30939] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1245.762784][T30939] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1245.812306][T30939] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1245.860163][T30939] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1245.864797][T30939] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1245.891187][T30939] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1245.896215][T30939] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1245.923155][T30939] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1245.942025][T30939] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1245.971750][T30939] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1245.994613][T30939] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1246.012401][T30939] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1246.030402][T30939] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1246.035337][T30939] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1246.066642][T30939] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1246.088776][T30939] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1246.097348][T30939] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1246.136758][T30939] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1246.171982][T30939] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1246.191955][T30939] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1246.395873][T30969] __nla_validate_parse: 69 callbacks suppressed [ 1246.395895][T30969] netlink: 16 bytes leftover after parsing attributes in process `syz.9.7109'. [ 1246.409233][T30969] net_ratelimit: 62 callbacks suppressed [ 1246.409251][T30969] ip_tables: iptables: counters copy to user failed while replacing table [ 1246.410802][T30969] nfnetlink_queue: nf_queue: full at 0 entries, dropping packets(s) [ 1246.503932][T30966] netlink: 116 bytes leftover after parsing attributes in process `syz.0.7107'. [ 1246.732764][T30978] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1246.741828][T30981] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7114'. [ 1246.759310][T30978] netlink: 20 bytes leftover after parsing attributes in process `syz.9.7111'. [ 1246.759332][T30978] netlink: 32 bytes leftover after parsing attributes in process `syz.9.7111'. [ 1246.802852][T30981] bond11: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 1247.505183][T30996] netlink: 16 bytes leftover after parsing attributes in process `syz.8.7116'. [ 1247.597793][T30981] bond11 (unregistering): Released all slaves [ 1248.059582][T31010] netlink: 288 bytes leftover after parsing attributes in process `syz.9.7121'. [ 1248.102644][T31018] netlink: 52 bytes leftover after parsing attributes in process `syz.6.7123'. [ 1248.182035][T31007] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7120'. [ 1248.187692][T31016] netlink: 288 bytes leftover after parsing attributes in process `syz.9.7121'. [ 1248.590729][T31029] xt_hashlimit: max too large, truncated to 1048576 [ 1248.595079][T31029] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1249.251173][T31047] FAULT_INJECTION: forcing a failure. [ 1249.251173][T31047] name failslab, interval 1, probability 0, space 0, times 0 [ 1249.251203][T31047] CPU: 0 UID: 0 PID: 31047 Comm: syz.8.7135 Not tainted syzkaller #0 PREEMPT(full) [ 1249.251223][T31047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1249.251238][T31047] Call Trace: [ 1249.251246][T31047] [ 1249.251255][T31047] dump_stack_lvl+0xe8/0x150 [ 1249.251295][T31047] should_fail_ex+0x3eb/0x540 [ 1249.251328][T31047] should_failslab+0xa8/0x100 [ 1249.251359][T31047] __kmalloc_cache_noprof+0x9e/0x600 [ 1249.251386][T31047] ? netdev_alloc_config+0x4f/0xc0 [ 1249.251515][T31047] ? netdev_alloc_config+0x4f/0xc0 [ 1249.251541][T31047] ? alloc_netdev_mqs+0xc4a/0x1240 [ 1249.251599][T31047] netdev_alloc_config+0x4f/0xc0 [ 1249.251627][T31047] alloc_netdev_mqs+0xc84/0x1240 [ 1249.251659][T31047] rtnl_create_link+0x321/0xd70 [ 1249.251722][T31047] rtnl_newlink_create+0x258/0x7b0 [ 1249.251752][T31047] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 1249.251780][T31047] ? __pfx___mutex_lock+0x10/0x10 [ 1249.251824][T31047] ? ns_capable+0x84/0xe0 [ 1249.251853][T31047] rtnl_newlink+0x167a/0x1c30 [ 1249.251891][T31047] ? __pfx_rtnl_newlink+0x10/0x10 [ 1249.251909][T31047] ? __netlink_deliver_tap+0x4f1/0x6e0 [ 1249.251936][T31047] ? netlink_deliver_tap+0x19c/0x1b0 [ 1249.251961][T31047] ? netlink_unicast+0x8c1/0xa80 [ 1249.251984][T31047] ? netlink_sendmsg+0x7f0/0xb20 [ 1249.252009][T31047] ? sock_sendmsg_nosec+0x14e/0x190 [ 1249.252032][T31047] ? ____sys_sendmsg+0x54e/0x850 [ 1249.252051][T31047] ? ___sys_sendmsg+0x2a5/0x360 [ 1249.252069][T31047] ? __x64_sys_sendmsg+0x1b1/0x290 [ 1249.252088][T31047] ? do_syscall_64+0x166/0x520 [ 1249.252110][T31047] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1249.252173][T31047] ? kasan_quarantine_put+0xbb/0x1f0 [ 1249.252198][T31047] ? lockdep_hardirqs_on+0x7b/0x110 [ 1249.252226][T31047] ? nlmon_xmit+0xb0/0x100 [ 1249.252304][T31047] ? kmem_cache_free+0x182/0x650 [ 1249.252336][T31047] ? __lock_acquire+0x747/0x2de0 [ 1249.252368][T31047] ? __pfx_hook_capable+0x10/0x10 [ 1249.252386][T31047] ? __dev_queue_xmit+0x29b/0x3920 [ 1249.252413][T31047] ? __pfx_hook_capable+0x10/0x10 [ 1249.252431][T31047] ? lockdep_hardirqs_on+0x7b/0x110 [ 1249.252483][T31047] ? __pfx_rtnl_newlink+0x10/0x10 [ 1249.252503][T31047] rtnetlink_rcv_msg+0x802/0xc00 [ 1249.252527][T31047] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1249.252548][T31047] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1249.252572][T31047] ? __copy_skb_header+0xa3/0x4a0 [ 1249.252607][T31047] netlink_rcv_skb+0x226/0x4a0 [ 1249.252635][T31047] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1249.252658][T31047] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1249.252700][T31047] ? netlink_deliver_tap+0x2e/0x1b0 [ 1249.252727][T31047] ? netlink_deliver_tap+0x2e/0x1b0 [ 1249.252759][T31047] netlink_unicast+0x8ef/0xa80 [ 1249.252802][T31047] netlink_sendmsg+0x7f0/0xb20 [ 1249.252849][T31047] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1249.252879][T31047] ? aa_sock_msg_perm+0x144/0x210 [ 1249.252912][T31047] ? apparmor_socket_sendmsg+0x98/0x360 [ 1249.252938][T31047] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1249.252962][T31047] sock_sendmsg_nosec+0x14e/0x190 [ 1249.252991][T31047] ____sys_sendmsg+0x54e/0x850 [ 1249.253020][T31047] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1249.253053][T31047] ? import_iovec+0x73/0xa0 [ 1249.253082][T31047] ___sys_sendmsg+0x2a5/0x360 [ 1249.253101][T31047] ? __lock_acquire+0x747/0x2de0 [ 1249.253131][T31047] ? __pfx____sys_sendmsg+0x10/0x10 [ 1249.253196][T31047] ? __fget_files+0x3a2/0x420 [ 1249.253219][T31047] ? __fget_files+0x2a/0x420 [ 1249.253254][T31047] __x64_sys_sendmsg+0x1b1/0x290 [ 1249.253280][T31047] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1249.253326][T31047] do_syscall_64+0x166/0x520 [ 1249.253350][T31047] ? trace_irq_disable+0x3b/0x140 [ 1249.253374][T31047] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1249.253392][T31047] ? clear_bhb_loop+0x70/0xc0 [ 1249.253415][T31047] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1249.253435][T31047] RIP: 0033:0x7fac1c7a8f19 [ 1249.253454][T31047] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1249.253472][T31047] RSP: 002b:00007fac1d6ef028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1249.253494][T31047] RAX: ffffffffffffffda RBX: 00007fac1ca25fa0 RCX: 00007fac1c7a8f19 [ 1249.253508][T31047] RDX: 0000000000000000 RSI: 0000200000001f80 RDI: 0000000000000005 [ 1249.253521][T31047] RBP: 00007fac1d6ef090 R08: 0000000000000000 R09: 0000000000000000 [ 1249.253534][T31047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1249.253546][T31047] R13: 00007fac1ca26038 R14: 00007fac1ca25fa0 R15: 00007ffd4a994448 [ 1249.253581][T31047] [ 1249.921018][ T1171] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1249.925273][ T13] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1249.925400][ T13] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1249.925432][ T13] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1250.287191][T31078] netlink: zone id is out of range [ 1250.680366][T31089] netlink: 'syz.9.7145': attribute type 12 has an invalid length. [ 1250.922268][T31097] Bluetooth: hci0: unsupported parameter 5134 [ 1250.922293][T31097] Bluetooth: hci0: unsupported parameter 8192 [ 1250.922306][T31097] Bluetooth: hci0: unsupported parameter 5134 [ 1250.922318][T31097] Bluetooth: hci0: unsupported parameter 8192 [ 1251.430265][T31121] __nla_validate_parse: 3 callbacks suppressed [ 1251.430285][T31121] netlink: 256 bytes leftover after parsing attributes in process `syz.9.7156'. [ 1251.583058][T31123] netlink: 'syz.8.7157': attribute type 1 has an invalid length. [ 1251.645069][T31123] bond10: entered promiscuous mode [ 1251.645550][T31123] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1251.665707][T31123] netlink: 28 bytes leftover after parsing attributes in process `syz.8.7157'. [ 1251.666651][T31123] bond10: entered allmulticast mode [ 1252.246322][T31144] netlink: 9 bytes leftover after parsing attributes in process `syz.9.7166'. [ 1252.263757][T31144] gretap0: entered promiscuous mode [ 1252.313492][T31150] netlink: 5 bytes leftover after parsing attributes in process `syz.9.7166'. [ 1252.341699][T31150] 0ªî{X¹¦: renamed from gretap0 [ 1252.381590][T31150] 0ªî{X¹¦: left promiscuous mode [ 1252.381616][T31150] 0ªî{X¹¦: entered allmulticast mode [ 1252.396447][T31150] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 1252.495924][T31157] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7170'. [ 1252.782667][T31166] netlink: 20 bytes leftover after parsing attributes in process `syz.9.7172'. [ 1253.103974][T31183] syzkaller0: entered promiscuous mode [ 1253.103997][T31183] syzkaller0: entered allmulticast mode [ 1253.118733][T31184] lo: entered allmulticast mode [ 1253.137361][T31187] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7179'. [ 1253.154948][T31187] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7179'. [ 1253.402049][T31203] netlink: 28 bytes leftover after parsing attributes in process `syz.8.7181'. [ 1253.432570][T31204] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7183'. [ 1253.468817][T31193] bond11 (unregistering): Released all slaves [ 1254.199132][T31243] netlink: 'syz.6.7191': attribute type 16 has an invalid length. [ 1257.280697][T31260] sctp: [Deprecated]: syz.7.7195 (pid 31260) Use of int in maxseg socket option. [ 1257.280697][T31260] Use struct sctp_assoc_value instead [ 1257.602085][T31264] bond4 (unregistering): Released all slaves [ 1257.613168][T31275] __nla_validate_parse: 5 callbacks suppressed [ 1257.613186][T31275] netlink: 28 bytes leftover after parsing attributes in process `syz.9.7198'. [ 1258.099892][T31285] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7204'. [ 1258.246680][T31290] xt_TCPMSS: Only works on TCP SYN packets [ 1258.262589][T31285] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7204'. [ 1258.262612][T31285] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7204'. [ 1258.376131][T31296] veth1_macvtap: left promiscuous mode [ 1258.376169][T31296] macsec0: entered promiscuous mode [ 1258.947444][T31314] netlink: 'syz.0.7210': attribute type 11 has an invalid length. [ 1259.069059][T31312] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7208'. [ 1259.069094][T31312] netlink: 'syz.9.7208': attribute type 6 has an invalid length. [ 1259.069116][T31312] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7208'. [ 1259.537286][T31336] netlink: 28 bytes leftover after parsing attributes in process `syz.8.7212'. [ 1259.565173][T31328] bond11 (unregistering): Released all slaves [ 1259.614226][T31340] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7219'. [ 1259.755487][T31340] netlink: 68 bytes leftover after parsing attributes in process `syz.6.7219'. [ 1259.889142][T31339] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7218'. [ 1260.473394][T31367] netlink: 'syz.0.7225': attribute type 1 has an invalid length. [ 1260.477691][T31369] netlink: 'syz.0.7225': attribute type 1 has an invalid length. [ 1261.014567][T31380] veth0: entered promiscuous mode [ 1261.201369][T31379] veth0: left promiscuous mode [ 1261.578912][T31390] bond4 (unregistering): Released all slaves [ 1262.864275][T31452] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1262.864475][T31452] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1263.015459][T31462] netlink: 'syz.0.7249': attribute type 2 has an invalid length. [ 1263.247561][T31471] Bluetooth: hci0: unsupported parameter 5135 [ 1263.247586][T31471] Bluetooth: hci0: unsupported parameter 8192 [ 1263.247599][T31471] Bluetooth: hci0: unsupported parameter 5135 [ 1263.247612][T31471] Bluetooth: hci0: unsupported parameter 8192 [ 1263.366437][T31476] __nla_validate_parse: 6 callbacks suppressed [ 1263.366457][T31476] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7248'. [ 1263.404385][T31467] bond9 (unregistering): Released all slaves [ 1263.619993][T31481] FAULT_INJECTION: forcing a failure. [ 1263.619993][T31481] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1263.620024][T31481] CPU: 1 UID: 0 PID: 31481 Comm: syz.7.7252 Not tainted syzkaller #0 PREEMPT(full) [ 1263.620051][T31481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1263.620063][T31481] Call Trace: [ 1263.620072][T31481] [ 1263.620081][T31481] dump_stack_lvl+0xe8/0x150 [ 1263.620116][T31481] should_fail_ex+0x3eb/0x540 [ 1263.620146][T31481] _copy_to_user+0x31/0xb0 [ 1263.620174][T31481] simple_read_from_buffer+0xe1/0x170 [ 1263.620204][T31481] proc_fail_nth_read+0x1bb/0x230 [ 1263.620229][T31481] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1263.620253][T31481] ? rw_verify_area+0x24a/0x4c0 [ 1263.620288][T31481] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1263.620308][T31481] vfs_read+0x213/0xa80 [ 1263.620339][T31481] ? __pfx___mutex_lock+0x10/0x10 [ 1263.620365][T31481] ? __pfx_vfs_read+0x10/0x10 [ 1263.620392][T31481] ? __fget_files+0x2a/0x420 [ 1263.620415][T31481] ? __fget_files+0x3a2/0x420 [ 1263.620437][T31481] ? __fget_files+0x2a/0x420 [ 1263.620465][T31481] ? fdget+0x1ac/0x250 [ 1263.620500][T31481] ksys_read+0x150/0x270 [ 1263.620529][T31481] ? __pfx_ksys_read+0x10/0x10 [ 1263.620568][T31481] do_syscall_64+0x166/0x520 [ 1263.620591][T31481] ? trace_irq_disable+0x3b/0x140 [ 1263.620616][T31481] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1263.620635][T31481] ? clear_bhb_loop+0x70/0xc0 [ 1263.620659][T31481] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1263.620677][T31481] RIP: 0033:0x7f4fcb76974e [ 1263.620695][T31481] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1263.620717][T31481] RSP: 002b:00007f4fcc5d9fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1263.620738][T31481] RAX: ffffffffffffffda RBX: 00007f4fcc5da6c0 RCX: 00007f4fcb76974e [ 1263.620752][T31481] RDX: 000000000000000f RSI: 00007f4fcc5da0a0 RDI: 0000000000000003 [ 1263.620764][T31481] RBP: 00007f4fcc5da090 R08: 0000000000000000 R09: 0000000000000000 [ 1263.620777][T31481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1263.620789][T31481] R13: 00007f4fcba26038 R14: 00007f4fcba25fa0 R15: 00007fffe36580b8 [ 1263.620826][T31481] [ 1264.016925][T31489] openvswitch: netlink: Message has 1 unknown bytes. [ 1264.016962][T31489] openvswitch: netlink: Actions may not be safe on all matching packets [ 1264.080082][T31493] netlink: 'syz.7.7258': attribute type 64 has an invalid length. [ 1264.244010][T31491] bond12: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1264.293758][T31491] bond12: (slave lo): Enslaving as an active interface with an up link [ 1264.317083][T31491] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1264.510432][ T2013] block nbd5: Possible stuck request ffff888028ab7000: control (read@0,1024B). Runtime 30 seconds [ 1264.512113][ T2013] block nbd5: Possible stuck request ffff888028ab71c0: control (read@1024,1024B). Runtime 30 seconds [ 1264.512146][ T2013] block nbd5: Possible stuck request ffff888028ab7380: control (read@2048,1024B). Runtime 30 seconds [ 1264.952420][T31513] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7260'. [ 1265.191112][T31526] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7265'. [ 1265.366181][T31531] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7265'. [ 1265.385731][T31526] bond9 (unregistering): Released all slaves [ 1265.928437][T31557] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7269'. [ 1266.251397][T31566] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7273'. [ 1266.350482][T31568] syzkaller0: entered promiscuous mode [ 1266.350505][T31568] syzkaller0: entered allmulticast mode [ 1266.676516][T31575] nbd: must specify an index to disconnect [ 1266.705082][T31584] netlink: 28 bytes leftover after parsing attributes in process `syz.7.7281'. [ 1266.766050][T31585] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7280'. [ 1266.788891][T31591] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7280'. [ 1266.791078][T31584] bond11 (unregistering): Released all slaves [ 1266.838921][T31585] netlink: 'syz.0.7280': attribute type 9 has an invalid length. [ 1266.854943][T31593] netlink: 28 bytes leftover after parsing attributes in process `syz.7.7281'. [ 1268.079966][T31652] netlink: 'syz.0.7294': attribute type 2 has an invalid length. [ 1268.080006][T31652] nbd: couldn't find a device at index -2147221500 [ 1268.182358][T31659] pim6reg: entered allmulticast mode [ 1268.182620][T31658] macvtap0: entered allmulticast mode [ 1268.182636][T31658] veth0_macvtap: entered allmulticast mode [ 1268.224948][T31667] netlink: 'syz.0.7294': attribute type 2 has an invalid length. [ 1268.224974][T31667] nbd: couldn't find a device at index -2147221500 [ 1268.338554][T31675] lo speed is unknown, defaulting to 1000 [ 1268.340640][T31675] rxe_eth0 speed is unknown, defaulting to 1000 [ 1268.949344][T31687] __nla_validate_parse: 6 callbacks suppressed [ 1268.949364][T31687] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7300'. [ 1268.949385][T31687] block nbd6: Unsupported socket: should be TCP or UNIX. [ 1268.967574][T31691] veth0_to_batadv: entered promiscuous mode [ 1268.985170][T31696] netlink: 28 bytes leftover after parsing attributes in process `syz.8.7301'. [ 1269.476308][T31712] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7307'. [ 1270.103440][T31743] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7310'. [ 1270.489860][T31751] netlink: 48 bytes leftover after parsing attributes in process `syz.7.7313'. [ 1270.711856][T31763] xt_TCPMSS: Only works on TCP SYN packets [ 1271.715508][T31785] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1271.987232][T31797] ip6t_rpfilter: unknown options [ 1272.099394][T31805] netlink: 'syz.6.7332': attribute type 1 has an invalid length. [ 1272.496458][T31820] netlink: 'syz.7.7335': attribute type 8 has an invalid length. [ 1272.527086][T31815] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1273.076758][T31848] netlink: 'syz.9.7340': attribute type 8 has an invalid length. [ 1273.077372][T31847] netlink: 40 bytes leftover after parsing attributes in process `syz.8.7341'. [ 1273.078364][T31847] netlink: 40 bytes leftover after parsing attributes in process `syz.8.7341'. [ 1273.079238][T31847] netlink: 40 bytes leftover after parsing attributes in process `syz.8.7341'. [ 1273.085661][T31847] netlink: 40 bytes leftover after parsing attributes in process `syz.8.7341'. [ 1273.086521][T31847] netlink: 40 bytes leftover after parsing attributes in process `syz.8.7341'. [ 1273.593029][T31866] netlink: 'syz.9.7344': attribute type 1 has an invalid length. [ 1273.596341][T31866] netlink: 'syz.9.7344': attribute type 2 has an invalid length. [ 1273.630770][T31866] macvlan0: entered promiscuous mode [ 1273.954211][T31879] x_tables: duplicate underflow at hook 2 [ 1274.075722][T31881] Bluetooth: MGMT ver 1.23 [ 1274.114382][T31883] netlink: 'syz.7.7350': attribute type 1 has an invalid length. [ 1274.292465][T31890] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 1274.353165][T31890] __nla_validate_parse: 28 callbacks suppressed [ 1274.353185][T31890] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7353'. [ 1274.497073][ T4955] block nbd6: Receive control failed (result -32) [ 1274.716538][T31901] netlink: 'syz.8.7356': attribute type 97 has an invalid length. [ 1274.716563][T31901] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7356'. [ 1274.716595][T31901] netlink: 'syz.8.7356': attribute type 97 has an invalid length. [ 1274.716608][T31901] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7356'. [ 1274.843489][T31907] netlink: 16 bytes leftover after parsing attributes in process `syz.8.7356'. [ 1275.376104][T31926] netlink: 'syz.8.7365': attribute type 1 has an invalid length. [ 1275.415856][ T4955] Bluetooth: hci6: SCO packet too small [ 1276.639599][T31985] netlink: 'syz.6.7381': attribute type 1 has an invalid length. [ 1276.746249][T31987] syzkaller0: entered promiscuous mode [ 1276.746274][T31987] syzkaller0: entered allmulticast mode [ 1276.897324][T31995] netlink: 96 bytes leftover after parsing attributes in process `syz.0.7382'. [ 1277.049230][T31998] netlink: 20 bytes leftover after parsing attributes in process `syz.8.7383'. [ 1277.098563][T31998] netlink: 44 bytes leftover after parsing attributes in process `syz.8.7383'. [ 1277.098589][T31998] netlink: 35 bytes leftover after parsing attributes in process `syz.8.7383'. [ 1277.098607][T31998] netlink: 35 bytes leftover after parsing attributes in process `syz.8.7383'. [ 1277.351627][T32003] IPVS: set_ctl: invalid protocol: 149 0.0.0.0:20002 [ 1277.560024][T32029] tipc: Failed to remove unknown binding: 66,0,0/0:4084702327/4084702328 [ 1277.560063][T32029] tipc: Failed to remove unknown binding: 66,0,0/0:4084702327/4084702328 [ 1277.560090][T32029] tipc: Failed to remove unknown binding: 66,0,0/0:4084702327/4084702328 [ 1277.560116][T32029] tipc: Failed to remove unknown binding: 66,0,0/0:4084702327/4084702328 [ 1277.560142][T32029] tipc: Failed to remove unknown binding: 66,0,0/0:4084702327/4084702328 [ 1277.560169][T32029] tipc: Failed to remove unknown binding: 66,0,0/0:4084702327/4084702328 [ 1277.560194][T32029] tipc: Failed to remove unknown binding: 66,0,0/0:4084702327/4084702328 [ 1277.560220][T32029] tipc: Failed to remove unknown binding: 66,0,0/0:4084702327/4084702328 [ 1277.560246][T32029] tipc: Failed to remove unknown binding: 66,0,0/0:4084702327/4084702328 [ 1277.560272][T32029] tipc: Failed to remove unknown binding: 66,0,0/0:4084702327/4084702328 [ 1277.560306][T32029] tipc: Failed to remove unknown binding: 66,0,0/0:4084702327/4084702328 [ 1277.560332][T32029] tipc: Failed to remove unknown binding: 66,0,0/0:4084702327/4084702328 [ 1277.560358][T32029] tipc: Failed to remove unknown binding: 66,0,0/0:4084702327/4084702328 [ 1277.560384][T32029] tipc: Failed to remove unknown binding: 66,0,0/0:4084702327/4084702328 [ 1277.560409][T32029] tipc: Failed to remove unknown binding: 66,0,0/0:4084702327/4084702328 [ 1277.560435][T32029] tipc: Failed to remove unknown binding: 66,0,0/0:4084702327/4084702328 [ 1277.560461][T32029] tipc: Failed to remove unknown binding: 66,0,0/0:4084702327/4084702328 [ 1277.560486][T32029] tipc: Failed to remove unknown binding: 66,0,0/0:4084702327/4084702328 [ 1277.560513][T32029] tipc: Failed to remove unknown binding: 66,0,0/0:4084702327/4084702328 [ 1277.560539][T32029] tipc: Failed to remove unknown binding: 66,0,0/0:4084702327/4084702328 [ 1277.560565][T32029] tipc: Failed to remove unknown binding: 66,0,0/0:4084702327/4084702328 [ 1277.698417][T32029] tipc: Failed to remove unknown binding: 66,0,0/0:4084702327/4084702328 [ 1277.844258][T32026] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7388'. [ 1278.268707][T32041] IPv6: addrconf: prefix option has invalid lifetime [ 1278.620961][T32060] validate_nla: 3 callbacks suppressed [ 1278.620983][T32060] netlink: 'syz.7.7395': attribute type 1 has an invalid length. [ 1278.682081][T32064] ip_tables: iptables: counters copy to user failed while replacing table [ 1278.683035][T32064] nfnetlink_queue: nf_queue: full at 0 entries, dropping packets(s) [ 1279.039434][T32081] [ 1279.041828][T32081] ====================================================== [ 1279.048852][T32081] WARNING: possible circular locking dependency detected [ 1279.055888][T32081] syzkaller #0 Not tainted [ 1279.060309][T32081] ------------------------------------------------------ [ 1279.067331][T32081] syz.6.7402/32081 is trying to acquire lock: [ 1279.073396][T32081] ffff88801d28d210 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_unlink_sibling+0x6d/0x240 [ 1279.083955][T32081] [ 1279.083955][T32081] but task is already holding lock: [ 1279.091312][T32081] ffff88801d28d180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_rename_ns+0xb4/0x9e0 [ 1279.100893][T32081] [ 1279.100893][T32081] which lock already depends on the new lock. [ 1279.100893][T32081] [ 1279.111297][T32081] [ 1279.111297][T32081] the existing dependency chain (in reverse order) is: [ 1279.120303][T32081] [ 1279.120303][T32081] -> #9 (&root->kernfs_rwsem){++++}-{4:4}: [ 1279.128288][T32081] down_write+0x91/0x200 [ 1279.133052][T32081] kernfs_add_one+0x41/0x510 [ 1279.138154][T32081] kernfs_create_dir_ns+0x18c/0x220 [ 1279.143863][T32081] internal_create_group+0x440/0x1180 [ 1279.149784][T32081] cpuhp_invoke_callback+0x434/0x810 [ 1279.155601][T32081] cpuhp_issue_call+0x3f0/0x750 [ 1279.160970][T32081] __cpuhp_setup_state_cpuslocked+0x3f4/0x6f0 [ 1279.167552][T32081] __cpuhp_setup_state+0x3f/0x60 [ 1279.173005][T32081] do_one_initcall+0x250/0x870 [ 1279.178288][T32081] do_initcall_level+0x10a/0x1a0 [ 1279.183736][T32081] do_initcalls+0x59/0xa0 [ 1279.188572][T32081] kernel_init_freeable+0x29d/0x3e0 [ 1279.194280][T32081] kernel_init+0x22/0x1d0 [ 1279.199122][T32081] ret_from_fork+0x514/0xb70 [ 1279.204228][T32081] ret_from_fork_asm+0x1a/0x30 [ 1279.209508][T32081] [ 1279.209508][T32081] -> #8 (cpuhp_state_mutex){+.+.}-{4:4}: [ 1279.217317][T32081] [ 1279.217317][T32081] -> #7 (cpu_hotplug_lock){++++}-{0:0}: [ 1279.225037][T32081] cpus_read_lock+0x3d/0x160 [ 1279.230148][T32081] static_key_slow_inc+0x12/0x30 [ 1279.235608][T32081] nbd_genl_reconnect_sock_cb+0x69a/0xbb0 [ 1279.241924][T32081] nbd_genl_foreach_sock+0x265/0x450 [ 1279.247722][T32081] nbd_genl_reconfigure+0xbbb/0x1040 [ 1279.253519][T32081] genl_family_rcv_msg_doit+0x233/0x340 [ 1279.259583][T32081] genl_rcv_msg+0x614/0x7a0 [ 1279.264603][T32081] netlink_rcv_skb+0x226/0x4a0 [ 1279.269881][T32081] genl_rcv+0x28/0x40 [ 1279.274375][T32081] netlink_unicast+0x8ef/0xa80 [ 1279.279654][T32081] netlink_sendmsg+0x7f0/0xb20 [ 1279.284938][T32081] sock_sendmsg_nosec+0x14e/0x190 [ 1279.290478][T32081] ____sys_sendmsg+0x54e/0x850 [ 1279.295749][T32081] ___sys_sendmsg+0x2a5/0x360 [ 1279.300937][T32081] __x64_sys_sendmsg+0x1b1/0x290 [ 1279.306390][T32081] do_syscall_64+0x166/0x520 [ 1279.311498][T32081] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1279.317930][T32081] [ 1279.317930][T32081] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 1279.325570][T32081] __mutex_lock+0x197/0x15a0 [ 1279.330679][T32081] nbd_queue_rq+0x373/0xff0 [ 1279.335694][T32081] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1279.341865][T32081] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1279.348747][T32081] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1279.355253][T32081] blk_mq_run_work_fn+0x167/0x2f0 [ 1279.360801][T32081] process_scheduled_works+0xc3d/0x1630 [ 1279.366876][T32081] worker_thread+0xa47/0xfb0 [ 1279.371987][T32081] kthread+0x38b/0x480 [ 1279.376568][T32081] ret_from_fork+0x514/0xb70 [ 1279.381669][T32081] ret_from_fork_asm+0x1a/0x30 [ 1279.386949][T32081] [ 1279.386949][T32081] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 1279.394161][T32081] __mutex_lock+0x197/0x15a0 [ 1279.399268][T32081] nbd_queue_rq+0xc1/0xff0 [ 1279.404202][T32081] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1279.410273][T32081] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1279.417119][T32081] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1279.423610][T32081] blk_mq_run_work_fn+0x167/0x2f0 [ 1279.429239][T32081] process_scheduled_works+0xc3d/0x1630 [ 1279.435307][T32081] worker_thread+0xa47/0xfb0 [ 1279.440417][T32081] kthread+0x38b/0x480 [ 1279.444994][T32081] ret_from_fork+0x514/0xb70 [ 1279.450094][T32081] ret_from_fork_asm+0x1a/0x30 [ 1279.455376][T32081] [ 1279.455376][T32081] -> #4 (set->srcu){.+.+}-{0:0}: [ 1279.462496][T32081] __synchronize_srcu+0xca/0x2f0 [ 1279.467998][T32081] elevator_switch+0x1e8/0x7b0 [ 1279.473288][T32081] elevator_change+0x2fa/0x480 [ 1279.478579][T32081] elevator_set_default+0x375/0x440 [ 1279.484298][T32081] blk_register_queue+0x404/0x4f0 [ 1279.489922][T32081] __add_disk+0x6b8/0xdb0 [ 1279.494781][T32081] add_disk_fwnode+0x100/0x3a0 [ 1279.500070][T32081] nbd_dev_add+0x733/0xb60 [ 1279.505004][T32081] nbd_init+0x168/0x1f0 [ 1279.509680][T32081] do_one_initcall+0x250/0x870 [ 1279.514957][T32081] do_initcall_level+0x10a/0x1a0 [ 1279.520415][T32081] do_initcalls+0x59/0xa0 [ 1279.525258][T32081] kernel_init_freeable+0x29d/0x3e0 [ 1279.530971][T32081] kernel_init+0x22/0x1d0 [ 1279.535817][T32081] ret_from_fork+0x514/0xb70 [ 1279.540931][T32081] ret_from_fork_asm+0x1a/0x30 [ 1279.546210][T32081] [ 1279.546210][T32081] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 1279.554020][T32081] __mutex_lock+0x197/0x15a0 [ 1279.559146][T32081] elevator_change+0x1af/0x480 [ 1279.564428][T32081] elevator_set_none+0xb5/0x140 [ 1279.569792][T32081] blk_mq_update_nr_hw_queues+0x60b/0x1b70 [ 1279.576112][T32081] nbd_start_device+0x189/0xb30 [ 1279.581470][T32081] nbd_genl_connect+0x167d/0x1cd0 [ 1279.587006][T32081] genl_family_rcv_msg_doit+0x233/0x340 [ 1279.593072][T32081] genl_rcv_msg+0x614/0x7a0 [ 1279.598099][T32081] netlink_rcv_skb+0x226/0x4a0 [ 1279.603385][T32081] genl_rcv+0x28/0x40 [ 1279.607882][T32081] netlink_unicast+0x8ef/0xa80 [ 1279.613156][T32081] netlink_sendmsg+0x7f0/0xb20 [ 1279.618432][T32081] sock_sendmsg_nosec+0x14e/0x190 [ 1279.623970][T32081] ____sys_sendmsg+0x54e/0x850 [ 1279.629244][T32081] ___sys_sendmsg+0x2a5/0x360 [ 1279.634432][T32081] __x64_sys_sendmsg+0x1b1/0x290 [ 1279.639877][T32081] do_syscall_64+0x166/0x520 [ 1279.644982][T32081] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1279.651383][T32081] [ 1279.651383][T32081] -> #2 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 1279.659980][T32081] blk_alloc_queue+0x544/0x690 [ 1279.665263][T32081] __blk_mq_alloc_disk+0x194/0x390 [ 1279.670887][T32081] nbd_dev_add+0x494/0xb60 [ 1279.675809][T32081] nbd_init+0x168/0x1f0 [ 1279.680481][T32081] do_one_initcall+0x250/0x870 [ 1279.685751][T32081] do_initcall_level+0x10a/0x1a0 [ 1279.691197][T32081] do_initcalls+0x59/0xa0 [ 1279.696033][T32081] kernel_init_freeable+0x29d/0x3e0 [ 1279.701745][T32081] kernel_init+0x22/0x1d0 [ 1279.706587][T32081] ret_from_fork+0x514/0xb70 [ 1279.711689][T32081] ret_from_fork_asm+0x1a/0x30 [ 1279.716966][T32081] [ 1279.716966][T32081] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 1279.724165][T32081] fs_reclaim_acquire+0x71/0x100 [ 1279.729617][T32081] kmem_cache_alloc_noprof+0x5f/0x600 [ 1279.735503][T32081] __kernfs_iattrs+0xdd/0x380 [ 1279.740689][T32081] kernfs_iop_setattr+0xe6/0x3f0 [ 1279.747525][T32081] notify_change+0xbba/0xea0 [ 1279.752623][T32081] do_truncate+0x1c2/0x250 [ 1279.757553][T32081] path_openat+0x18a6/0x20f0 [ 1279.762744][T32081] do_file_open+0x23e/0x4a0 [ 1279.767763][T32081] do_sys_openat2+0x115/0x200 [ 1279.772950][T32081] __x64_sys_openat+0x138/0x170 [ 1279.778309][T32081] do_syscall_64+0x166/0x520 [ 1279.783412][T32081] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1279.789812][T32081] [ 1279.789812][T32081] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 1279.798321][T32081] __lock_acquire+0x164c/0x2de0 [ 1279.803695][T32081] lock_acquire+0x115/0x350 [ 1279.808719][T32081] down_write+0x91/0x200 [ 1279.813476][T32081] kernfs_unlink_sibling+0x6d/0x240 [ 1279.819185][T32081] kernfs_rename_ns+0x575/0x9e0 [ 1279.824545][T32081] sysfs_rename_link_ns+0x16e/0x1b0 [ 1279.830251][T32081] device_rename+0x110/0x210 [ 1279.835423][T32081] cfg80211_dev_rename+0x16f/0x250 [ 1279.841089][T32081] nl80211_set_wiphy+0x63f/0x3430 [ 1279.846634][T32081] genl_family_rcv_msg_doit+0x233/0x340 [ 1279.852695][T32081] genl_rcv_msg+0x614/0x7a0 [ 1279.857712][T32081] netlink_rcv_skb+0x226/0x4a0 [ 1279.862991][T32081] genl_rcv+0x28/0x40 [ 1279.867484][T32081] netlink_unicast+0x8ef/0xa80 [ 1279.872759][T32081] netlink_sendmsg+0x7f0/0xb20 [ 1279.878038][T32081] sock_sendmsg_nosec+0x14e/0x190 [ 1279.883580][T32081] ____sys_sendmsg+0x54e/0x850 [ 1279.888854][T32081] ___sys_sendmsg+0x2a5/0x360 [ 1279.894042][T32081] __x64_sys_sendmsg+0x1b1/0x290 [ 1279.899495][T32081] do_syscall_64+0x166/0x520 [ 1279.904601][T32081] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1279.911008][T32081] [ 1279.911008][T32081] other info that might help us debug this: [ 1279.911008][T32081] [ 1279.921235][T32081] Chain exists of: [ 1279.921235][T32081] &root->kernfs_iattr_rwsem --> cpuhp_state_mutex --> &root->kernfs_rwsem [ 1279.921235][T32081] [ 1279.935661][T32081] Possible unsafe locking scenario: [ 1279.935661][T32081] [ 1279.943109][T32081] CPU0 CPU1 [ 1279.948464][T32081] ---- ---- [ 1279.953819][T32081] lock(&root->kernfs_rwsem); [ 1279.958575][T32081] lock(cpuhp_state_mutex); [ 1279.965670][T32081] lock(&root->kernfs_rwsem); [ 1279.972939][T32081] lock(&root->kernfs_iattr_rwsem); [ 1279.978211][T32081] [ 1279.978211][T32081] *** DEADLOCK *** [ 1279.978211][T32081] [ 1279.986347][T32081] locks held by syz.6.7402/32081: 4, last CPU#0: [ 1279.992670][T32081] #0: ffffffff916f7b28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1280.000863][T32081] #1: ffffffff918dbfe0 (cfg80211_mutex){+.+.}-{4:4}, at: nl80211_set_wiphy+0xaa/0x3430 [ 1280.010611][T32081] #2: ffff8880233e0800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: nl80211_set_wiphy+0x4e8/0x3430 [ 1280.020614][T32081] #3: ffff88801d28d180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_rename_ns+0xb4/0x9e0 [ 1280.030616][T32081] [ 1280.030616][T32081] stack backtrace: [ 1280.036492][T32081] CPU: 0 UID: 0 PID: 32081 Comm: syz.6.7402 Not tainted syzkaller #0 PREEMPT(full) [ 1280.045848][T32081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1280.055896][T32081] Call Trace: [ 1280.059175][T32081] [ 1280.062094][T32081] dump_stack_lvl+0xe8/0x150 [ 1280.066686][T32081] print_circular_bug+0x2e2/0x300 [ 1280.071707][T32081] check_noncircular+0x12f/0x150 [ 1280.076641][T32081] __lock_acquire+0x164c/0x2de0 [ 1280.081487][T32081] ? __lock_acquire+0x747/0x2de0 [ 1280.086415][T32081] ? __lock_acquire+0x747/0x2de0 [ 1280.091351][T32081] lock_acquire+0x115/0x350 [ 1280.095852][T32081] ? kernfs_unlink_sibling+0x6d/0x240 [ 1280.101223][T32081] down_write+0x91/0x200 [ 1280.105466][T32081] ? kernfs_unlink_sibling+0x6d/0x240 [ 1280.110834][T32081] ? __pfx_down_write+0x10/0x10 [ 1280.115684][T32081] ? kernfs_root+0x1c/0x230 [ 1280.120179][T32081] ? kernfs_root+0x1c/0x230 [ 1280.124680][T32081] ? kernfs_root+0x1c/0x230 [ 1280.129186][T32081] ? kernfs_root+0x1ea/0x230 [ 1280.133768][T32081] kernfs_unlink_sibling+0x6d/0x240 [ 1280.138965][T32081] kernfs_rename_ns+0x575/0x9e0 [ 1280.143810][T32081] sysfs_rename_link_ns+0x16e/0x1b0 [ 1280.149004][T32081] device_rename+0x110/0x210 [ 1280.153592][T32081] cfg80211_dev_rename+0x16f/0x250 [ 1280.158700][T32081] nl80211_set_wiphy+0x63f/0x3430 [ 1280.163726][T32081] ? lock_acquire+0x115/0x350 [ 1280.168427][T32081] ? __pfx_nl80211_set_wiphy+0x10/0x10 [ 1280.173882][T32081] ? nl80211_pre_doit+0x543/0xfa0 [ 1280.178913][T32081] ? nl80211_pre_doit+0x86e/0xfa0 [ 1280.183930][T32081] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 1280.190255][T32081] genl_family_rcv_msg_doit+0x233/0x340 [ 1280.195797][T32081] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1280.201870][T32081] ? bpf_lsm_capable+0x9/0x20 [ 1280.206542][T32081] ? security_capable+0x7e/0x2c0 [ 1280.211480][T32081] genl_rcv_msg+0x614/0x7a0 [ 1280.215975][T32081] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1280.220986][T32081] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 1280.226348][T32081] ? __pfx_nl80211_set_wiphy+0x10/0x10 [ 1280.231797][T32081] ? __pfx_nl80211_post_doit+0x10/0x10 [ 1280.237256][T32081] netlink_rcv_skb+0x226/0x4a0 [ 1280.242017][T32081] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1280.247034][T32081] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1280.252371][T32081] ? down_read+0x2b9/0x320 [ 1280.256790][T32081] genl_rcv+0x28/0x40 [ 1280.260765][T32081] netlink_unicast+0x8ef/0xa80 [ 1280.265532][T32081] netlink_sendmsg+0x7f0/0xb20 [ 1280.270296][T32081] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1280.275577][T32081] ? aa_sock_msg_perm+0x144/0x210 [ 1280.280601][T32081] ? apparmor_socket_sendmsg+0x98/0x360 [ 1280.286139][T32081] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1280.291425][T32081] sock_sendmsg_nosec+0x14e/0x190 [ 1280.296445][T32081] ____sys_sendmsg+0x54e/0x850 [ 1280.301201][T32081] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1280.306485][T32081] ? import_iovec+0x73/0xa0 [ 1280.310985][T32081] ___sys_sendmsg+0x2a5/0x360 [ 1280.315656][T32081] ? __lock_acquire+0x747/0x2de0 [ 1280.320587][T32081] ? __pfx____sys_sendmsg+0x10/0x10 [ 1280.325775][T32081] ? futex_wait+0x2a2/0x390 [ 1280.330282][T32081] ? __fget_files+0x3a2/0x420 [ 1280.334954][T32081] ? __fget_files+0x2a/0x420 [ 1280.339543][T32081] __x64_sys_sendmsg+0x1b1/0x290 [ 1280.344473][T32081] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1280.349933][T32081] do_syscall_64+0x166/0x520 [ 1280.354520][T32081] ? trace_irq_disable+0x3b/0x140 [ 1280.359540][T32081] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1280.365598][T32081] ? clear_bhb_loop+0x70/0xc0 [ 1280.370269][T32081] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1280.376151][T32081] RIP: 0033:0x7f9e32ba8f19 [ 1280.380555][T32081] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1280.400156][T32081] RSP: 002b:00007f9e33a22028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1280.408565][T32081] RAX: ffffffffffffffda RBX: 00007f9e32e25fa0 RCX: 00007f9e32ba8f19 [ 1280.416528][T32081] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1280.424578][T32081] RBP: 00007f9e32c37f6d R08: 0000000000000000 R09: 0000000000000000 [ 1280.432549][T32081] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1280.440510][T32081] R13: 00007f9e32e26038 R14: 00007f9e32e25fa0 R15: 00007ffc20ae2dd8 [ 1280.448491][T32081]