last executing test programs: 6.991891923s ago: executing program 4 (id=6934): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000011"], 0x128}, 0x24004004) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x40004240) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket(0x2, 0x80805, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x21}}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f0000000180)=ANY=[@ANYRES32=r6, @ANYBLOB="00000600"], 0x8) setsockopt$inet_sctp_SCTP_NODELAY(r4, 0x84, 0x3, &(0x7f0000000300)=0xc6a, 0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r1, 0x8008f512, &(0x7f0000000340)) sendmsg$nl_route(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=ANY=[@ANYRES16=r4, @ANYRES8=0x0, @ANYRESDEC=r3, @ANYRES64, @ANYRES64=r7, @ANYRESDEC=r6, @ANYRES32, @ANYRES8=0x0, @ANYRES64=r5], 0x44}}, 0x7bc58dfa0bc7dd6a) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18f800000000f38b5f784255a7d7f942dfd17500000029a1aab8e424c114"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r10, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x0, 0xfffffe71, 0x4b5734940ca4ac9e}}, 0x20) sendmsg$DEVLINK_CMD_PORT_GET(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000080000000054000000080001007063690011000200303030303a30303a31302e30000000000800030000000000"], 0x38}, 0x1, 0x0, 0x0, 0x20008040}, 0x0) ioctl$HCIINQUIRY(r3, 0x400448ca, 0x0) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r11 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r11, 0x0, 0x40, &(0x7f00000014c0)=@nat={'nat\x00', 0x62, 0x5, 0x430, 0x0, 0x188, 0xffffffff, 0x2a0, 0x0, 0x398, 0x398, 0xffffffff, 0x398, 0x398, 0x5, 0x0, {[{{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth0_to_bond\x00', 'wg1\x00'}, 0x0, 0xa8, 0xe0, 0x0, {0x22e}, [@common=@unspec=@statistic={{0x38}, {0x0, 0x0, 0x0, 0x0, 0x0, {0x6}}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x15, @empty, @remote, @icmp_id, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @multicast1, @empty, @gre_key=0x85, @icmp_id}}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_hsr\x00', 'ipvlan0\x00'}, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@socket0={{0x20}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @private, @multicast2, @gre_key}}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'veth1_to_batadv\x00', 'pim6reg\x00', {0xff}}, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@ttl={{0x28}}, @common=@inet=@tcpmss={{0x28}, {0xf}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x16, @remote, @broadcast, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x490) write$bt_hci(r3, &(0x7f0000000440)=ANY=[@ANYRES8=r2], 0xa) syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r12 = bpf$ITER_CREATE(0xb, &(0x7f0000000240), 0x8) close(r12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 6.221159426s ago: executing program 4 (id=6946): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r2, &(0x7f0000005cc0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="500000000301010300000000000000000a0000820c0019800800010002000000300001802c000180"], 0x50}, 0x1, 0x0, 0x0, 0xc0}, 0x44012) r3 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="380000005400e50100000000fdffffff07000000", @ANYRES32=r4, @ANYBLOB="200001205b05734a4bfeaf77b42810f25564a9dfa5091e6da0cddbaa", @ANYRES32=r6, @ANYBLOB="01010100ffffffff00000000000000000000000086dd0000"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="7c00000010000108000000000000200000000000", @ANYRES32=0x0, @ANYBLOB="900000000008000008000a00", @ANYRES32=0x0, @ANYBLOB="5400348014003500e5ff000000000000000000db8f622a1adffaf60070696d36726567000000000000000000140035006970766c616e300000000000000000001400350067656e65766531000000000000000000"], 0x7c}}, 0x4000880) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r7) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000218c0000000c0a01030000000000000000070000090900020073797a31000000000900010073797a3000000000600003805c000080080003400000000250000b802c0001800a0001006c696d69740000001c0002800c00024000000000000000000c000140000000000000000320"], 0x110}}, 0x0) r9 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r9, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r11 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x0) write$tun(r10, &(0x7f0000000100)=ANY=[@ANYRESDEC], 0xfdef) (async) recvmmsg(r9, &(0x7f00000060c0)=[{{0x0, 0x0, &(0x7f0000004d40)=[{&(0x7f0000002880)=""/60, 0x3c}], 0x1}}], 0x1, 0x10000, 0x0) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000400), 0x8) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r12, 0x1, 0x2f, &(0x7f0000000400), 0xa5e) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) close(r0) (async) sendmsg$NL80211_CMD_JOIN_MESH(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYRESDEC, @ANYBLOB="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", @ANYBLOB="050000000000000000004400000008000300", @ANYRES32=r13, @ANYRES8], 0x1048}, 0x1, 0x0, 0x0, 0x8004}, 0x10) 6.123518763s ago: executing program 1 (id=6949): r0 = socket$netlink(0x10, 0x3, 0x14) r1 = socket$inet6(0xa, 0x1, 0x4) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x31, &(0x7f0000000000)={0x0, 0x0}, 0x10) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4620, 0x10001, @private1, 0x3}, 0x1c) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYRES64=r0], 0x14}, 0x1, 0x0, 0x0, 0x4040001}, 0x40440c0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha384\x00'}, 0x1a) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r4, &(0x7f0000000000)={0x27}, 0x62) bind$bt_hci(r3, &(0x7f0000000000)={0x27}, 0x74) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000020000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x8000) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x810) socket(0x10, 0x803, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000840)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x4000008}, 0x22040800) recvmmsg(r5, &(0x7f0000008000)=[{{0x0, 0x0, 0x0}, 0x800ac}, {{0x0, 0x0, 0x0}, 0x41}, {{0x0, 0x0, &(0x7f0000003bc0)=[{&(0x7f0000000640)=""/173, 0xad}, {&(0x7f0000001840)=""/4096, 0x1000}, {&(0x7f0000002840)=""/163, 0xa3}, {&(0x7f0000003940)=""/80, 0x50}, {&(0x7f00000039c0)=""/205, 0xcd}, {&(0x7f0000003ac0)=""/199, 0xc7}], 0x6}, 0x7fc}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000003d00)=""/113, 0x71}], 0x1, &(0x7f0000003dc0)=""/4096, 0x1000}, 0x2}, {{0x0, 0x0, &(0x7f0000005100)=[{&(0x7f0000004dc0)=""/173, 0xad}, {&(0x7f0000004e80)=""/156, 0x9c}, {&(0x7f0000004f40)=""/157, 0x9d}, {&(0x7f0000005000)=""/191, 0xbf}, {&(0x7f0000000240)=""/31, 0x1f}], 0x5, &(0x7f0000005180)=""/80, 0x50}, 0xb31}, {{&(0x7f0000005200)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000005300)=[{&(0x7f0000005280)=""/118, 0x76}], 0x1, &(0x7f0000005340)=""/167, 0xa7}, 0x7}, {{0x0, 0x0, &(0x7f0000006900)}, 0xa6df}, {{0x0, 0x0, &(0x7f0000006ac0)=[{&(0x7f00000069c0)=""/169, 0xa9}, {&(0x7f0000006a80)=""/14, 0xe}], 0x2}, 0xdd7}, {{&(0x7f0000006b00)=@nfc_llcp, 0x80, 0x0}, 0x10001}], 0x9, 0x2000, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000002c000000d9ffffff02000000000000000100000d000076000000000000000000000000000100000400000000ffffffff011c0000000000000000"], &(0x7f0000000500)=""/16, 0x46, 0x10, 0x1}, 0x1f) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f0000000200)=0x439a, 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000880)=ANY=[@ANYRES32=r0, @ANYBLOB="5168c567c04db34a32d57c7648ec8260faaa34df94255ae99066668bdda2ad47e82047febe29d60fc5b98f9be7fea4e1929cf6b751176fb04453d9d637decdcbe95702eadd6b12723cfc51cb313f5f26f33805d41c2136195f6e0eca3b2e457e7026ee547d6edd872cddc29a8a922734127c372b9a6834eae4f73604bd290fbb78403f54b9107bfeeefd9e02af7630b5ad65df111fa528507c2d2df620ed1fb6ab8c06c8cbc7164d68018f5be0ac183f04b341179796fdca2de26cd2bebd624bfdf329d1ecd743a764b640aef1feec885804276212e5778734b1d332ab9eef4d25a351c4ca1cc00c3387a92a2604c14b", @ANYRES64=0x0], 0x68}, 0x1, 0x0, 0x0, 0x24000840}, 0x40) close(r6) sendto$inet6(r6, 0x0, 0x0, 0x8001, &(0x7f0000000280)={0xa, 0xe1c, 0xffffffff, @mcast2, 0xbf}, 0xfffffffffffffd53) 5.549095771s ago: executing program 4 (id=6954): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xfff1, 0xfff3}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=@gettclass={0x24, 0x28, 0x1, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xa, 0xffff}, {0x7}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x3c, r1, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x4}}, {0xc, 0x1, 0x0, 0x1, {0x8}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8841}, 0x40040) 5.265943966s ago: executing program 4 (id=6959): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES8=r1], 0x54}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x20) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040), 0x6) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$FITRIM(r3, 0xc0185879, 0x0) ioctl$sock_bt_hci(r2, 0x400448dc, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000580)={{r3, &(0x7f0000000000)='#%#&-#\x00', 0x80002, &(0x7f0000000140)={@align=0x9, {0x400, 0xb9b, 0x3, 0xfffffffffffffff9}}, 0xf, &(0x7f0000000180), &(0x7f00000001c0)=0x9}, 0x3, &(0x7f0000000500)=[{0x2, 0xfffffffa, &(0x7f0000000200)='{\x00', &(0x7f0000000240)="832d10363c3a79785e33f87191ec8a44969f399ef816bbc35b0e1a518b4b0a4d4aa40f27730e182b9630203d5fcf6322a437aeb5b5d9c9e274e940d1fb104bf7acef7b", 0x43, 0x18}, {0xeb2087407253e3e0, 0xf, &(0x7f0000000300)='@\x8e.\\\x00', &(0x7f0000000340)="ac84f5f0438cebc38978649f138b63bd5c488f9b4a67caf8aeba79485bf5a013c70fec976d93022cbf5ae2d616c9f3a99f36e816fcec7d09cd02069eda1210f0cad587a8e3", 0x45, 0x3a}, {0x1, 0x2, &(0x7f00000003c0)='\x00', &(0x7f0000000400)="8a5efb447b076941c27ffe3ee18633c63c42a0d1a9a93a57c85336027464c799e2aca34ed9021be97d42cf506cd0a526ad8d9a2bf32507cd654172c050c71b44f5ad876233f4858365992b60777879aade9f11a7455cedaeecfcbe96f861740d8bf46d2cdca8d2f8269e370214e34a8c65f06a368c9fee69328dc488bc28e6f3a24b3d3420a43726549cffa1a03cac0df9b8bd6ec8e8cc73ab9cd7e669776730ba6e49bf0896e6f6b02d96811a076d5261ed21", 0xb3, 0x8}]}) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$netlink(0x10, 0x3, 0x4) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES8=r1], 0x54}, 0x1, 0x0, 0x0, 0x81}, 0x0) (async) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x20) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r2, &(0x7f0000000040), 0x6) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$FITRIM(r3, 0xc0185879, 0x0) (async) ioctl$sock_bt_hci(r2, 0x400448dc, 0x0) (async) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000580)={{r3, &(0x7f0000000000)='#%#&-#\x00', 0x80002, &(0x7f0000000140)={@align=0x9, {0x400, 0xb9b, 0x3, 0xfffffffffffffff9}}, 0xf, &(0x7f0000000180), &(0x7f00000001c0)=0x9}, 0x3, &(0x7f0000000500)=[{0x2, 0xfffffffa, &(0x7f0000000200)='{\x00', &(0x7f0000000240)="832d10363c3a79785e33f87191ec8a44969f399ef816bbc35b0e1a518b4b0a4d4aa40f27730e182b9630203d5fcf6322a437aeb5b5d9c9e274e940d1fb104bf7acef7b", 0x43, 0x18}, {0xeb2087407253e3e0, 0xf, &(0x7f0000000300)='@\x8e.\\\x00', &(0x7f0000000340)="ac84f5f0438cebc38978649f138b63bd5c488f9b4a67caf8aeba79485bf5a013c70fec976d93022cbf5ae2d616c9f3a99f36e816fcec7d09cd02069eda1210f0cad587a8e3", 0x45, 0x3a}, {0x1, 0x2, &(0x7f00000003c0)='\x00', &(0x7f0000000400)="8a5efb447b076941c27ffe3ee18633c63c42a0d1a9a93a57c85336027464c799e2aca34ed9021be97d42cf506cd0a526ad8d9a2bf32507cd654172c050c71b44f5ad876233f4858365992b60777879aade9f11a7455cedaeecfcbe96f861740d8bf46d2cdca8d2f8269e370214e34a8c65f06a368c9fee69328dc488bc28e6f3a24b3d3420a43726549cffa1a03cac0df9b8bd6ec8e8cc73ab9cd7e669776730ba6e49bf0896e6f6b02d96811a076d5261ed21", 0xb3, 0x8}]}) (async) 5.085253967s ago: executing program 1 (id=6961): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x1070bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x20048884) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004e00)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x4, 0x4}, {}, {0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x0, 0xfff1}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) close(0x3) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r11 = socket(0x1f, 0x2, 0x99cb) r12 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r14 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r14, 0x6, 0xe, &(0x7f0000000440)={@in6={{0xa, 0x4e23, 0x9, @loopback, 0xc}}, 0x0, 0x0, 0x3b, 0x0, "c00866fdc25aca6c451dbae34eeb6cc3904fddf83259e5c4824efa263c1216e193f281611e46f2e5d0c491fd99bb68ec8293d502fcfeafa0dec2fac1fd9b716c8a628631f326f2d8d5f495dec117c4d8"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r14, 0x6, 0x20, &(0x7f0000000000)={@in6={{0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @empty}, 0x7}}, 0x0, 0x0, 0x15, 0x0, "a30b3b28ca4d2f246a016542daa845f387713f4048ff2ece1e75f1fc0100f41e4de6256109383664417165bba0dd5ace522fa788000000000033035551502f07b4001a00000000000000efffffff00"}, 0xd8) connect$inet6(r14, &(0x7f0000000000)={0xa, 0x4e62, 0x1ff, @loopback, 0x23}, 0x1c) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x200, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r13, {0x0, 0xfff7}, {0x4, 0xffff}, {0x4, 0xf}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002240)={&(0x7f0000001380)=@newtfilter={0x2c, 0x2c, 0x4, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xffe0, 0xa}, {0xb, 0x3}, {0xd, 0x14}}, [@TCA_RATE={0x6, 0x5, {0x6, 0x5c}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44085}, 0x20000000) sendmsg$nl_route_sched(r11, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r13, {0xc, 0xc}, {0x0, 0xfff1}, {0x0, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x40000) socket(0x400000000010, 0x3, 0x0) r15 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 4.949037284s ago: executing program 4 (id=6963): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x5b) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, 0x0, 0x1) r1 = accept4(r0, 0x0, 0x0, 0x800) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) sendmmsg$alg(r1, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xffffffa9}, {&(0x7f00000002c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)}, {0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000003c0)="96e6e14d06cd2cd1dc6969313336a9017d94"}, {&(0x7f0000000400)="499b7fee4035c5b8beb1f70453870f0783c185665f5661dc54c5a1a1ad65e127a695fb29eb758e857595e5277fdfcd8246da633a7d6ed7e05fe75f4f36c670e755ca5142914fdc83650da6c01c7a06ebf495fbe36b151a4c207d9347308484a5891ad7c14310bd"}, {&(0x7f0000000640)="7caba4f81ffec1c44c4691773da226d91a54e9721f1f4c8f4d4f19a73292612c8ad72d40ac83e55148f6700815e6d140cfab03adc719caee1f3feed087bc616c3bc19a510350d0befe495457b7d16c139c6e6850f1e32a661bd7cc91e333472aae3e3eb8815a38aa8fea91788c44336c8437a86f885f3546456df377a81b43b22f543cad111ff0d0"}], 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="00000000000000001701000004000000040000000000000000000000000000001701000003000000000000000000000000000000000000001701000002000000000000008db6ba8669d9e3af336c9db7d7b600000000000067ab9dfade50263fca68064513414d4a7812c38b4c70753e9ef9f941ff7c1ebcfd79c64a594b41dd41b329d3cc14c29fa008f5c24363ad52e2bafeba6e55ac24ad2a44cbeacd365353b6541f21789daab56174ca2941b64022d67061ec8e2b1fa1eed6e9d4"], 0x0, 0x40088c0}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0xaed3}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$inet(0x2, 0x800, 0x100) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000500)=0x8, 0x4) bind$inet(r2, &(0x7f0000000000)={0x2, 0xffff, @rand_addr=0x64010100}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) r3 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r3, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) ioctl$sock_proto_private(r3, 0x89e9, &(0x7f0000000540)="2381f48b2b37dd52c9871ce41e807eabf4747e8f40486d7642bd8d970dce57a24b3e") bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r4 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r4, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x4e20, 0x9, @ipv4={'\x00', '\xff\xff', @empty}, 0x1000d}, 0x1c) listen(r3, 0x5) writev(r2, &(0x7f0000000040), 0x1) 4.441619963s ago: executing program 4 (id=6968): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0xe22, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x100, @loopback={0xff00000000000002}}, 0x1c) socket$netlink(0x10, 0x3, 0x8000000004) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0, {0xa, 0xfffe, 0x0, @local}}}, 0x32) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@bloom_filter={0x1e, 0x7, 0x80, 0x4, 0x9822, 0xffffffffffffffff, 0x0, '\x00', 0x0, r3, 0x0, 0x4, 0x0, 0x4, @value=r3}, 0x50) r4 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) sendfile(r4, r3, 0x0, 0x1e2) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000500)={'erspan0\x00', &(0x7f0000000480)={'syztnl1\x00', 0x0, 0x8000, 0x8, 0x80000000, 0x9, {{0xe, 0x4, 0x1, 0x5, 0x38, 0x65, 0x0, 0x3, 0x2f, 0x0, @multicast1, @broadcast, {[@ssrr={0x89, 0xf, 0x7c, [@multicast2, @multicast2, @private=0xa010100]}, @noop, @rr={0x7, 0xb, 0x6f, [@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x35}]}, @ssrr={0x89, 0x7, 0x86, [@multicast1]}]}}}}}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f7ffffffb703000018000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0x4, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x4}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x10, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000003c0)='syzkaller\x00', 0xfffffffc, 0x0, 0x0, 0x41000, 0x82, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000540)={0x4, 0x8, 0x0, 0xee4e}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000600)=[r6, r7], &(0x7f0000000640)=[{0x3, 0x3, 0x1, 0x5}, {0x1, 0x4, 0xf, 0x2}], 0x10, 0x5}, 0x94) close(0x4) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@updpolicy={0xc4, 0x19, 0x1, 0xffffffff, 0x0, {{@in=@multicast1=0xe0000002, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0xfffc, 0x0, 0x3, 0xa, 0x0, 0x20}, {0x20000000, 0x7fffffffffffffff, 0x0, 0xffffffffffff0dac, 0x0, 0x14d, 0x0, 0xfffffffffffffffb}, {0x0, 0xfffffffffffffff7, 0x200000000000000}, 0x0, 0x0, 0x0, 0x1, 0x3, 0x2}, [@mark={0xc, 0x15, {0x35075d, 0x2}}]}, 0xc4}}, 0x2c000010) sendmsg$nl_xfrm(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0xf1f, 0x1, 0x25dfdbfd, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@remote, 0x4e20, 0x0, 0x4e23, 0xfffc, 0xa, 0x10, 0x0, 0x2}, {0x8, 0x1, 0x0, 0x0, 0x100, 0x0, 0xffffffff, 0xffffffffffffffff}, {0x0, 0xfffffffffffffffa, 0x4, 0x3}, 0x4, 0x6e6bb5, 0x0, 0x1, 0x3, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x2000c810}, 0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001ac0)={&(0x7f0000000080)=ANY=[@ANYBLOB], &(0x7f0000000240)=""/194, 0x34, 0xc2}, 0x28) unshare(0x6a040000) socket$inet(0x2, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r9, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB="44000000070603000000000000000000010000090800064000000002080006400000000808000640cabb001005c91ed46d000100070000640d0000400000000408000640000000028a17aadb9b221f5bccfca7fc60fd6d25536a4454072e7afad4c24421741c0e001876407e7ebad6db0bfcebda7deb8e2dcb9504b641af66a8a01dd714d759d81a004727f38bc2043f32181dfc6b4141034fd889be60cb556fd0b535f7ee2ac017454c5326fc4e25612bf9e95fcadd6a216fff8d3e17ecff01d60179efe2d7dc3576714d2669fba4b969d6c8e88d5dce82650af5ae22a11e8f99df74f2a1ff6e9d537f235cd51c30e49c10944a39ca0300000000000000e160602e855dca3d1f2fde56fe1397e7842b4f41c9597d4f74587efd97fbdd78dc8aa26d98c1c56b"], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x800) 4.389563284s ago: executing program 3 (id=6969): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000000301010200000000000000000200000106001240000100"], 0x34}, 0x1, 0x0, 0x0, 0x4000001}, 0x800) sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, 0x0, 0x4000000) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, r2, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy2\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x4c}}, 0x804) 4.101775445s ago: executing program 0 (id=6971): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000800)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELFLOWTABLE={0x70, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_HOOK={0x44, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg2\x00'}, {0x14, 0x1, 'veth1_to_bridge\x00'}, {0x14, 0x1, 'veth0_vlan\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x98}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) 3.120059156s ago: executing program 0 (id=6972): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x40814) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x61, &(0x7f00000027c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x10100) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb01", 0x1d}], 0x1, 0x0, 0x0, 0xc9e}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b00000005000000010001000a00afcb25c4d627079d178e0914050001000000", @ANYRES32, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000005340)=[{&(0x7f0000000040)="890000001200817864060cdc030ec0007f03e3f77e000001", 0x18}], 0x1}, 0x20008000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="110000000000000000000000010000000100000000000000ac0000000000000000000000070000000083078f64010102444c7401ac1e0101000000047f000001000000007f00000100000005ac1414aa000000bcffffffff0000000700000000000000070a01010100000007ac1414aa00000006ffffffff00000007440b45dbd0b8be05dd02c389232364010101ffffffffac1414aaac1e0101ac1e0101e00000027f000001ac1e0101830c92bf5f2199e286a39e5b01830b7f7f0000017f00000100000000000011000000000000000000000001000000000000000000000014"], 0xf8}, 0x1) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000100000000a500000000000018490000fe"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x19, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa7e3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x2e0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x60000000, 0x51, 0x0, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b3114", 0x0, 0x0, 0x3, 0x9}, 0x50) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033d087277b9b108b4ab51c"], 0xfe33) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe000018"], 0xfe33) 3.085548667s ago: executing program 1 (id=6973): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001e14010000000000000000000900020073797a30000000fd07004100727865"], 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x100) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000240), 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x40810}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000000500)=@getqdisc={0x28, 0x26, 0x1, 0xa7, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x4, 0x5}, {0xfff1, 0xd}, {0x3, 0x5}}, [{0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x20040004}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYRES16, @ANYRES32=0x0, @ANYBLOB="fc0f000000ffffff28001b"], 0x44}, 0x1, 0x0, 0x0, 0x84}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = socket(0x1d, 0x2, 0x3) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="1c00000021006bcd210002006e04fcff80000010000000017aa60864", 0x1c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFT_BATCH(r4, &(0x7f0000000700)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xf}}, [@NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) sendmsg(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000540)="c6", 0xffffff39}], 0x1}, 0x0) r7 = socket$inet6(0xa, 0x3, 0x7) r8 = accept$inet6(r7, 0x0, &(0x7f0000000040)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYRESHEX=r1], 0x0, 0x26}, 0x28) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$can_raw(0x1d, 0x3, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1e, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="1802000000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5fffffff}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000780)=ANY=[@ANYRES32, @ANYRESHEX=r6, @ANYRES32=r3, @ANYBLOB="a8c0580bd5c74c00b6151daa4afeef8922090b6bb2ec99fd5795e41e44b6059e6928fef28aa656e2ffb8ed60991a3718a027241f9762778b14373d6caf96e7a77f309a75131d712786faff1687ab4609933b59223f1e202ac2b834aba28c4421defa7a93337fd0152d67afa1a7cf2d11a986474cc9df", @ANYBLOB="04b0c6ca3d1b1d92136428f9e18ca97cfd19ac273004e37aea39374e3895935a93712a83f789803161a3bbc30f86a4a58f2a6cfd47a2f0e7b98f20b92b086ff5cf8245a8facdff822998c86506e3bbe49cda0f24ae3c9dd5e93bfad220212229580d512a", @ANYRES32], 0x48) bpf$MAP_LOOKUP_ELEM(0x5, 0x0, 0x0) setsockopt$inet6_int(r8, 0x29, 0x49, &(0x7f0000000100)=0x4000573c, 0x4) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 3.083210108s ago: executing program 0 (id=6974): recvfrom$packet(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000680)=@base={0xa, 0xf, 0xb4, 0x3}, 0x50) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) writev(r1, &(0x7f00000006c0)=[{&(0x7f0000000440)="2e9b3d0007e03dd65193dfb6c575", 0xe}, {&(0x7f0000000100)="310200", 0x3}, {&(0x7f0000000a80)='h?\x00W', 0x4}], 0x3) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000000)=@newsa={0xf0, 0x10, 0x9d741df904aad753, 0x0, 0x0, {{@in=@multicast2, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0xa0, 0x0, 0x0, 0xffffffffffffffff}, {@in=@broadcast, 0x0, 0x6c}, @in6=@rand_addr=' \x01\x00', {0x0, 0x0, 0x0, 0x6}, {}, {0x0, 0x9}, 0x0, 0x0, 0xa, 0x2}}, 0xf0}}, 0x0) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000100)=@framed={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x1}, @initr0, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xee, &(0x7f0000000340)=""/238}, 0x94) 3.04478824s ago: executing program 3 (id=6975): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43, 0x0, 0x3}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) (async, rerun: 32) r4 = socket$tipc(0x1e, 0x5, 0x0) (async, rerun: 32) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r5, 0x84, 0x17, &(0x7f0000000300)=ANY=[@ANYRES32=r6, @ANYBLOB="7f00d6589007"], 0xa) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x20) (async) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) (async) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) (async, rerun: 64) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 64) r10 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r10, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x28}, 0x9}, 0x1c) (async, rerun: 64) splice(r8, 0x0, r10, 0x0, 0x877f, 0xc) (async, rerun: 64) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ppoll(&(0x7f0000000140)=[{r1, 0x20}, {r10}], 0x2, &(0x7f00000001c0)={r11, r12+10000000}, &(0x7f0000000200)={[0x7fffffffffffffff]}, 0x8) sendmsg$tipc(r2, &(0x7f0000000280)={&(0x7f0000000040), 0x10, 0x0}, 0x0) sendmsg$tipc(r4, &(0x7f00000000c0)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x2, 0x3, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x48001}, 0x20044095) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r13 = accept4(r9, &(0x7f0000000380)=@nfc_llcp, &(0x7f00000004c0)=0x80, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r13, 0x29, 0x40, &(0x7f0000000540)=@security={'security\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x1e8, 0x1e8, 0x118, 0xffffffff, 0xffffffff, 0x2f8, 0x2f8, 0x2f8, 0xffffffff, 0x4, &(0x7f0000000500), {[{{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @mcast1, [0x0, 0xff000000, 0xff, 0x1fe000000], [0x0, 0xffffffff, 0xffffffff, 0xff000000], 'ip6gretap0\x00', 'batadv_slave_0\x00', {}, {}, 0x3c, 0x6, 0x2, 0x40}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@dst={{0x48}, {0x100, 0x2, 0x1, [0x5, 0x5, 0x1, 0x0, 0x0, 0x1, 0x4, 0x100, 0xa0de, 0x6, 0x20, 0xd, 0xfffc, 0x7, 0x80, 0x3], 0x10}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x584, 0xffff}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0xd8, 0x110, 0x0, {}, [@common=@frag={{0x30}, {[0x800], 0x9, 0x0, 0x3}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x1, 0x5, 0x6}, {0xffffffffffffffff, 0x1, 0x4}, {0x2, 0x5, 0x6}, 0xc, 0x100}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) r14 = socket(0x2b, 0x80801, 0x1) poll(&(0x7f00000000c0)=[{r14, 0x1040}, {r1, 0x2187}], 0x2, 0x403) 3.04325301s ago: executing program 2 (id=6977): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r0, 0x29, 0x4e, 0x0, &(0x7f0000000080)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000001500010320000000000000000c0000000800040001"], 0x1c}}, 0x4000000) 3.041890809s ago: executing program 3 (id=6978): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100), &(0x7f00000001c0), 0x10f0, r2}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r2, &(0x7f0000000000), &(0x7f00000000c0)=""/37}, 0x20) r3 = accept(r1, &(0x7f0000000140)=@xdp={0x2c, 0x0, 0x0}, &(0x7f00000001c0)=0x80) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r5, 0x0, 0xc8, &(0x7f0000000080), 0x4) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x4, 0x0, 0x0, @vifc_lcl_ifindex=r4, @dev={0xac, 0x14, 0x14, 0xfd}}, 0x10) close(r5) syz_genetlink_get_family_id$ethtool(0x0, r3) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x6, 0x8000}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x5, 0x14, 0x0, &(0x7f0000000000)="259a53f271a76d2608004c6588a80a3888ca2f15", 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x40}, 0x50) 3.04133674s ago: executing program 2 (id=6979): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000100)={0x2}, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@can={{}, 0x6, 0x0, 0x0, 0x0, "0000000000000003"}, 0x10}}, 0xd209f6d814827b17) syz_emit_ethernet(0x2c, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1e, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xa, 0x0, @opaque='`F'}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r2, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000240)}, 0xb}], 0x1, 0x40000021, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010029bd7000fddbdf250200000008000300", @ANYRES32=r5, @ANYBLOB="0c00990041000000600000000800a0007c030700080026009a03000008009f0008"], 0x40}}, 0x48000) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4000c}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0x9, 0x14, @broadcast}, @IFLA_BR_AGEING_TIME={0x8, 0x9}]}}}]}, 0x48}}, 0x4040) socket$netlink(0x10, 0x3, 0x0) (async) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000080)) (async) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000100)={0x2}, 0x1) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@can={{}, 0x6, 0x0, 0x0, 0x0, "0000000000000003"}, 0x10}}, 0xd209f6d814827b17) (async) syz_emit_ethernet(0x2c, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1e, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xa, 0x0, @opaque='`F'}}}}}, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) recvmmsg(r2, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000240)}, 0xb}], 0x1, 0x40000021, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010029bd7000fddbdf250200000008000300", @ANYRES32=r5, @ANYBLOB="0c00990041000000600000000800a0007c030700080026009a03000008009f0008"], 0x40}}, 0x48000) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4000c}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0x9, 0x14, @broadcast}, @IFLA_BR_AGEING_TIME={0x8, 0x9}]}}}]}, 0x48}}, 0x4040) (async) 2.799210407s ago: executing program 0 (id=6980): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r0) r3 = socket(0x18, 0x0, 0x1) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000007c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}]}, &(0x7f00000005c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r5, &(0x7f0000000440), &(0x7f0000000040)=@udp=r4}, 0x20) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r4, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000800)=""/4096, 0x1000}], 0x12}, 0xb}], 0x12, 0x40000021, 0x0) getsockopt$nfc_llcp(r3, 0x111, 0x0, 0x0, 0x90aa62107f0000) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) write(r9, &(0x7f00000002c0)="b9ba48", 0x3) sendmsg$nl_route_sched(r8, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newtaction={0x4c, 0x1e, 0x109, 0x0, 0x25dfdbfe, {}, [{0x38, 0x1, [@m_mirred={0x34, 0x0, 0x0, 0x0, {{0xb, 0x9}, {0x4, 0xe}, {0x8, 0x6, "6ed00268"}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0x4c}, 0x1, 0x2b1e}, 0x58) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x64, r2, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xfd0e}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @dev={0xac, 0x14, 0x14, 0x18}}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xb1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @empty}]}, 0x64}, 0x1, 0x0, 0x0, 0x8800}, 0x20000040) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001640)={0x3, 0xc, &(0x7f0000002380)=@framed={{0x18, 0x2, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xd}, [@call={0x85, 0x0, 0x0, 0x2f}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1200}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r11, 0x2f, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x4048587b, &(0x7f0000001c00)={{r0, &(0x7f0000000580)='geneve1\x00', 0x280, &(0x7f00000005c0)={@_ha_fsid={[0x0, 0x800]}, {0x7, 0x7, 0x0, 0x3}}, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x9}, 0x7, &(0x7f0000001b00)=[{0x2, 0x10, &(0x7f0000000680)='(\'@:%\x00', &(0x7f00000006c0)="3c258cd171301c000fafd3cca585100c66e7fd4862e6199a7d03843688b7a9293da9a2374f609ca48259bcec7f40027318fb55cb745e65736afbba80", 0x3c, 0x18}, {0x1, 0x0, &(0x7f0000000700)='\x00', &(0x7f0000000740)="0055f575d5582f78b1491285e0c0de3383da7525855cf5a113eb21fb4f31f8e5fffa05bfe168f3595904ba25282210962b3f1e963e36ba43b301f5ed9eba80b665d0484e3085828926db90f28f9b3d98fc271377d1851f88f39a2f1bdcf86e75f177bbf1f417875b1980712331bec08d0c18d1b2958645d63abc22", 0x7b, 0xa}, {0x3, 0x0, &(0x7f00000007c0)='TIPCv2\x00', &(0x7f0000000800)="c3b6474d1bde815b464e0df1cdb71b35ec1f583d54feaf81239822cdb78eb2e8d2a6948809db7f59819dabdf2c4d89d995f612022423a5f2ec91caf167acae8ee34cfa38dd7ecbc06c0921d6211ec5a289aba68769d1fbc8878d17fc676f20541465c734865e12ae6aba71057f", 0x6d}, {0x2, 0x7, &(0x7f0000000880)='+\x00', &(0x7f00000008c0)="f99f5668fd447723bde23543ec04f677f6f4522bf279585d7d9c7d0e986d1ce769217fca4e9d5f970fca501222e29daddb4d883713302c8568b926ff160247b9977cdae604dd7a5f1f7cfe3290d6047dc6a14a4a0f5c566484dcc5e7faa8f0afb046066a6eac036b876abf111d449c0104eec280f651f92de94382e21168144782c62339a2264be55ec608a09a5b1c021682dcfc37670699635ea71447074292e9a8c4c0833f21fa0db3f93e388996ff615ff4fe85947c8e75ee47d9f1443469d415cf583aa1b20514ca5b7d55b352109dca2e435753336202a29fc655ce58c30a2c9e9f02ba2489987ffa2951934e451a9a6ded8e16ee22954534d842bbd4d5d2bae93485eb0508540021dd707e7873355b8670027b48fc59469adf6c29ad98af4655efcf75d31549fddc8081b16872b2de7fe53db8991a177ddfa5436a7ca37405706e88f1da31ddad9261cc687e480f8df2b03e34552ba93201dff36e0987573bc7cfa604fe694fa6d81419f28eefa9b605e8d362055c6f428fe8332edbc741238501b7b194ad2edf31219c911f7a17cb1553bf24b072c0efb8983cd8f3192a29f9ae8257effa33937a830db57d340aa49ab8d70b9a3b7a7ed62afdf916a31833118984ca6bb64a9899a59546e13d3f1a86ecd48e6ca304dc599231cd2016c7e5184a21d8af79b10f946c7e700344e36269f39eb13b4822ba4db2b7047c21ecae2377c80d7070c041256025cb9469cce5bc0d572adef2991ef1898a1f0d5cc02f9463eecd3bb4067a1cbbfe32cc374456cdbec0ca3e5ba261fa43efa2067cd77a120543506704d589825e558c6bc45c8b8a4cc4bd7935cda911aaf2425577e865f5f0f4b557130dde76eee3e9e6007caa66b949ff627b05cdb4718235daf8102980538633f91527bf54b2cad1dbb615c95a9831e336fd6655de4823e44bb6f7f2b119303a84d0eebf21486e4156baba7474090ad8bb74d6f87a742cfd652e7a100f0864db7622a53a8ff46f99fa1b92dbb308da7ef755facd7aaa0daa8d6304625428122073cb690c7cf3ed4dcf3698a3e24fb1287112d75824db74c103ededa722ed33c0ab48fb1cf9853b4d04de80e0ada80c459be55f081a16a55a35697f9b3ef7af0a30f2bcf59c473cdc2fab26ee72ebb722303e57a541718956f6d664e3f6cf79e554d6da9d8a4bd73ee820174567a01b3273fc4a0961c41929623e7f45bf0f38cac5ce36ef8781296bb68ad26ed6f76b3db2b159a7bde21891819646d199362f1d14ab79e24d3622eaa88dd6900fbe0c1f4d11920665981d477450bc8638e28a0c1513abf9b7abb0a12c5a43e9a2ef4e86652d02f09e14b678c9adf682441b0d09420a1aaf0d9367bbed0fe57ff8e26b6a38e6643522c3224a613c3f17dc6ab96f2b26342cee163c2c24a52f19b5134dc29234ba21a5b8cbe166f960925164a6a122a5a551dc3191f2f50d91875ffaf8cefb26c7d246f77f52f11c11926a327277fce57ef8adaf5d86987483058813861bad34cf1687cd145df2f7913e3894c4669be24deb12c0e28d9bd939ced69480b52d7791274f41505360d5cf3abc30ae8ba2333d6f6a878fae932e243c53173a17bd5fed287812a137c776ba66d2c4c5a7f2b82c7663bc15e4c8c5ec13905a016d78b70d73253dd928678007e995530f7324229a1565bb25890bd1dc46d3fda00442e2bdbca3aaee061814c039d997a5a69a730b78df82fe9d7845585c3b8e1a6f8448d8ce208fc942b3fe3966d37f16648060a6b9e8ed94fe01770699af0d4ef06d917b137412fb87e31c98e033e64ed19281f3dc6a13f9219c216ed59b5c3d6215f99e20c6092ff721701ea190c4d66ff1a16057c6b6917a6d83f7c49b44b06acdf6b3f8a3ba5aebe99dd6d72e9a33f9e616414b09751ae4948b9a738deabc3579733b72c78681e67a88805cbb0a542cfe29938bad8b8f5431e1b67de2c8764971023b58860fe2c41713ca623302226a097a558970b5eed1e2ee652c5289e7f5e5495e6ee8ec120bbb2da9e2e30a3f5644535598bffd7cc1497ec56f8ab08582706e2cfcda7ee587c88b179c560bc865d278d2453ecd16a490eb82963045d55857f41bc95bf7137f33bf17f2936bab2f1bfe2a2505427a71cf898e4924df9f637513670c510534094ebdfe3e7c3a1a6304188b33be25b427e227053bd0816cb3ff957192f0218bc3cf92a3b2f0a9657f6c2fa8abb42ec41c0706f01784fb2e0f5556d6831ae900f2b6ac9ad32e54b4dc900123a10fdfe77e9119b78beb7b5dc62ea138e604d55781def51eecd8348bdedb1fc517a3587877f40c0fdf56b4d84f52c5fcda822cdd8070437420af5440722feffae908e3957a399b185276b91dcf9fd890dc568413e1c8732c9ec116f082d83334702ecb79aee5f4fb7f7664bf6dcdd67aa4da0f51dc9619b882a0383c28b6aedd96836a2c78b5ecc76ab3902285c5bfa04a57df04dd1b4a52545bf6ecc710846a7e8671dbdc451fd3a74c94d924e729725063de6be2f1d772239c3453c3861028ccc7768f40db2a04d13c1c3f5c46c2d42eddac2bcc3ca360dfd3752806270b0d5014efbe040828efdf400b19eac745fec83b7e70771a406cc3969a5faf6ffb0fbe70afe7016abc464ae17d45216e0c1597b30a67ca9a2af9ea71394df047227da3fafef7f3a24ccaba481596a0d8793f8c21d2509ae712ada0a32d23caf0b21dc29013a64b0468070f6460bf0d69e2e79da462cf7f170f7247edaab304e6e12499527169a76d62e7ba887d4c69f613a5fbf7b0b1f4366550b78acb90bd976161272f6a6383be4c969b4b1682ad2af20663a5662f448c7f4ffb6dd6fb2cff1a48100046b0e6cc8177a4de42ecd2106ff2526a987d9609ee02b6b18bea1d773cc2314ddfa0b460b746fdd422b6c331b20c024aacfd57cbf2c75adc048211d4180712fbf351bcb8be3a9124a8cd80fa42d56948286ff2c31f1a824aec3a35e8f26a030ab6f04001a88991a335fed5c2d60760c4a5b936bf68fbc285fbe04939f940d3bd67324af2a065c96cdeed4c85b9b46ec486c1c68545feba64ae9503cf8024f4bbe5ef57a0d829319bd23c7820c73638ac91065df79e3c3664193c4f0f8c84f77d8be16198ce9b5ec34b70e2a51fc8296fa9f2479c8c4ec0ef135c2788bc2b49546f27a5004645a76b631be283933be4540debd4c6326d46f08c89b29c25db0f473be068dfa4d2c5b48aa59b058ff79f951328785af91f38bbcec5c40545df211de446628a056e791a71f8b8f4f2e19d419ebc37cd193ae735104b6d710e48906d7725b343935d7aebff8947d175635ff200d16d060a139587116fde0465c05bda2305b51296c766162310225f5a42cde27598e21774cc26c5f7f984e6eaa3cfd753e59461c33a37dfc457270b0e281d80e8346eed527f393f94e51458930ac95d838acaef74253fc57d985d48ce4860722b5d09970d9cc0ccfb81ab742f86a6e7949371193ee91db4a93aab5c24243702e4567b8b92b90d98103bb70423c2c327669c9593664697d586b334a0c8484c1ba4090fb7aee6e9d48e2d0c95a056ccf7fb58ef3cce41d1a7af9af29484c37f7116bbf87852ecbf70688f8c7d2a294910ffbb96db41b3a7b60837bcd7ab41d6d1cfd87dc7dbbcf944ab2e901956191007a4217a8464b485feb8be76607872eef69cbcb132938eca50e72b88621a8663a6a2e69dee7eaff2d873e3804df7b82af457ba0fa3144d79f20141885e218c90ad822af9995e71a0487cba2a37f2edee7bd4abb187281e163b61d62c3f13212411d2a5ec2d27e3a4e10d14df562dfc52f2cc754eea09f76f2b00b3814fb3d15316636c5eb2219e3ff6cad143827c904b4ba0ca52d915016e1994f374a49cf8e19f342e481cf15c26eb855dc170b9918749e92d21db9221aa456b8983b4c5bc03310afbaae7e1e082bb10074dd3cbd9025efe58508e7905a6ebe4ffa97f197c400b527754c713b1af0ae04a35ac455398f2034657222a02a3ba1330c07802f49646f974d9c40c82275c5f8db223553a6e1ef379e8adf1aba411876a5b9b3b87b92ad6049b5605594355f68231185ab91c77ce1b41960db76bc09e38e9c62d18d50f3bba4414128d68eaebb9357a3fbecd2e69b9f812d346a7b193ea2c3980825a65a088ef44e4a30a16c5a9a7a2a3731324e240acf741bd6ab551ec19441688d775f78187e5b2700d923c2212dc9281b4c8ae4584d27e476436ef4fb72e254b679f31352c16134ce03271bcff82ccba79cad3a21b9b9b2a9cbbd09ab5547a82ee0bd4b31c9600d1e728dec9d251fd262f2f8e1493b783a2ac7d3dbc7b7c5a72c096f16f728e7797b94f258f5ccea3507e2461ce03e6812049bf46974f586f097aff8f98d9be68c1d8296e48d088c14e103a50082c87abf556b58a6b23537a22326976e2b5b6efc35254ac7affdf5ebbf8d0e5cf7dee42c4c9abe483005b42a3ca1b3264f6834ab56e73f85b0f940803eaa5e7b88120d00cd213197bd28b9450c67250e43d5cc759445f6f0a4aa4ab6f78f72151bb82d2aff4f1424d0cc2290619b50b802e2aa73396de99d23a11fd417c2e2f07259c322b620fd3c5813368222e36f3a8dee3441f8fe0f11986a91c13c63c4ae2bc54352a8742089efc12a3f0cb4c6fc0cf437e3f0ba9d0b0f0e351cc75bb81229d258d6ffce8db5f188523503c929cedc6b456c398764e813ef70ca5be61614449878fe5b04e439a33f8c784efb252aaeaf443a70ccf1d080808eaf652632cb0736be0130743b3f1fc9645c5801b36faf00e672db167bcd73fef2c7c8030c2c7712fbb95ae365356f9185c9fc64b473a96909ff1cfa9f61a2f46aedb96cd618a862085ed7081a3b8d412899e4ae319c17d8ea2f76831a1cc9e28c5036eb9eb38912f076c6bcbc9caa5852b65994ffcbda7c0dc1505eb747366667c457de7d04c163ce213f4351682996729d251b7e8741b38299a164dc80940c0f2365198f0ebbab229ebd023ca1d53062c767967c43926a1f83f414cebb0419f85b715ae8c1bb81100e9f55d96e9f5076b28426c3c08074f959b02390bed3bab07d719ebd720bf45fbbafa87c606b064437444ef968d5b5dd47017220a421d00b3414ec3546e45861edf63dd69d35d828ad80226174847733cc73be50c8542fabd74f50f30cab274b014abef2338549961ed13729f3455e8c674e5d4c5af249c68dac328194a2017b1e9b1164145739e4f29da25653b49efe25d17dec9744195619ad99aeb46482984f9adf29dc41f194af86ce59ca1ee80f25ac01746c8aa044124357f1e79ace985a5c1ea6e74cfa80a4661b04cc7cf61f15087ed902617a16a147739706a95eb44fbae30c89b94d511b9a8a17c2e48820c6d4a402e14c1ff75a46e9bb87fbcf851ec30839af8726aa59e6c202eba45604497c88e2fd0faf249e857727362a43a7bf8aad6fe8c21a4cd360d0c93b60404648b9aeba14cb0cc780ab08fd152e290875bb220c10654c0f17e8dbd8324b1c4c62a89338d5ab6ae4fff948349b46ed5e339af1645250b654afa0791fcf77e0837488bfa716230613f1f4e75b7e9bce5cd77c2286ef9a8ec20588c16d3043f63bfbdb8ce1e494d5d95a18d06d6d9a72902e9a1cacfc60b865be2b60f95dc54b05636606acadcb34c96ca282fac0dd0aa15a090146d3fe106a4076f7db9b5094cdb554fb7049eba7d84a014c33ad3e8544e61d12ba66439a140b4f791faeef937e3ad2d4ffc67c35ad87f7393da0d5d50ee", 0x1000, 0xa}, {0x2, 0x2, &(0x7f00000018c0)='\x00', &(0x7f0000001900)="6c44f7277339ccdf11c83724c59a9f40e78f9aced4924572df3e4d13da1fcefef84e692def35af6509f553dc43f17174c9f8f4dacfc8a89dd002a5da77", 0x3d, 0x12}, {0x0, 0x1, &(0x7f0000001940)='\x00', &(0x7f0000001980)="0381d0133d63e5deb2bc3c7ac231d0510021c673d5840fe40212469055e599cd6a8bfa5b2d6f1be185188a5d43229a21a17bccd83698c8a44e1d4ce4f13ecead5012c0c8fb50f1e6d9475004c5022683a31e761539a93dc86402f6971ffa7556c392dc49e0673089c8dacdbb358c6b90fd773c09a75ec67afe83c2cab266409ba0e7fa9b3c194fe2d743177e3091a0ca131c800d5245651035c98d50aaaf8f7fdcb6d9db11998e12e30549c53ecf404619c6aa693512d3d2053b", 0xba}, {0x3, 0x5, &(0x7f0000001a40)='\x00', &(0x7f0000001a80)="7bdfca82c20e0e73145ecd83c04a2c40d1759b3a75dd7acaf4c881b18c2af486f045c6004c4396426c4b79e4265ad41e9b7a4a764ab6ef1875ab0a2f04e033318b7ffc1bbb724725259e494a707995b6c0a1065d1d729db0ed3e7d8613e137e4a3ceec07055ad3bf4cebd9ba2c9f0636dd5087cc56287b582a1cd8ca", 0x7c, 0x2}]}) setsockopt$XDP_UMEM_REG(r12, 0x11b, 0x4, &(0x7f0000001d80)={&(0x7f0000001c80)=""/211, 0x8000, 0x0, 0x8, 0x1}, 0x20) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)={0x13c, r10, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xa1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x200}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80}]}, @TIPC_NLA_BEARER={0x5c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @multicast2}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x537, @remote, 0x58bf}}}}]}, @TIPC_NLA_SOCK={0x68, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xad14}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x501}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8001}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffff0ef}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffffa}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x20040000}, 0x4) r13 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000000)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x58}, {{0x18, 0x1, 0x1, 0x0, r13}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x2000}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x40000000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0x7}, {0x18, 0x2, 0x2, 0x0, r13}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x6, 0x1, 0x7, 0x5}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x81}}}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) 1.94922687s ago: executing program 0 (id=6981): socketpair(0x15, 0x80000, 0x800, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_FT_IES(r0, &(0x7f0000002080)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80800000}, 0xc, &(0x7f0000002040)={&(0x7f0000000dc0)={0x1268, r1, 0x20, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x100, 0x26}}}}, [@NL80211_ATTR_IE={0x134, 0x2a, [@channel_switch={0x25, 0x3, {0x0, 0xb7, 0x3}}, @chsw_timing={0x68, 0x4, {0x0, 0xb}}, @preq={0x82, 0x2b, {{0x1, 0x0, 0x1, 0x0, 0x1}, 0x0, 0x90, 0x8, @broadcast, 0x7, @value, 0x49, 0x8, 0x1, [{{0x1, 0x0, 0x1}, @broadcast, 0x8}]}}, @rann={0x7e, 0x15, {{0x1, 0x7f}, 0x4, 0x8, @device_b, 0x3, 0x9, 0x3}}, @preq={0x82, 0x2b, {{0x1, 0x0, 0x1, 0x0, 0x1}, 0x4, 0xd, 0x1, @broadcast, 0x5, @value=@broadcast, 0xa576, 0x81, 0x1, [{{0x1}, @broadcast, 0x2ee4}]}}, @random_vendor={0xdd, 0xb2, "d0313d793649785243fd4d4a1844307cc5d2934003f16bc50ee1f4114df61572ec15547949f1e900127c893804585043e8eba218f31a493d64cae253dd1b6b8076044720059dc7fc32b6f6cbcf62fa86fdbe10a31421a0da81941ecc4a27eae7074b2785e398c6a89f40124db1e777f8c0975cd10100113cd25bfb03605fcf192cc434a1012114c1eafc2f9e6aa3ddcdbdfd22079cb3a55fb1b45c888d42ecfba3aa72b8ed1aec0d683e2159d5338aacafcd"}]}, @NL80211_ATTR_IE={0x18, 0x2a, [@challenge={0x10, 0x1, 0x43}, @channel_switch={0x25, 0x3, {0x0, 0x5, 0x9}}, @gcr_ga={0xbd, 0x6, @broadcast}, @ibss={0x6, 0x2, 0x372b}]}, @NL80211_ATTR_IE={0x1e, 0x2a, [@random={0x8, 0x15, "b1a47a37bfea4ad540acb10c805190415c76a2f9bd"}, @dsss={0x3, 0x1, 0xc4}]}, @NL80211_ATTR_IE={0x91, 0x2a, [@channel_switch={0x25, 0x3, {0x0, 0x2, 0x2}}, @random={0x0, 0x47, "81d4f01ceabfc17729f5f681c63a81dc4132e21119ca3343c18d7b22933b0f9068c34badd8d2020fb85778e560f43304a7eea41e4f0a04dceda9758376c772f92ac58ea966032f"}, @mic={0x8c, 0x10, {0x9d6, "1e38f04237e0", @short="225e70f3cb8d4034"}}, @chsw_timing={0x68, 0x4, {0x8, 0x2}}, @gcr_ga={0xbd, 0x6, @device_b}, @rann={0x7e, 0x15, {{0x1, 0x35}, 0x40, 0x8, @device_b, 0x8, 0x2, 0x8001}}, @mesh_chsw={0x76, 0x6, {0x3, 0x7, 0x3c, 0xffff}}]}, @NL80211_ATTR_IE={0x1b, 0x2a, [@rann={0x7e, 0x15, {{0x0, 0x4}, 0xaf, 0x3, @device_a, 0xf1, 0x1, 0x9}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x1}, @NL80211_ATTR_IE={0x1009, 0x2a, [@measure_req={0x26, 0x1003, {0x5, 0x5, 0x8, "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"}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x5}, @NL80211_ATTR_MDID={0x6, 0xb1, 0xff}]}, 0x1268}, 0x1, 0x0, 0x0, 0x2020}, 0x44040880) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @dev, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x3, @empty, @multicast1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}, @private=0xa010102}}}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x1b, &(0x7f0000000cc0)=ANY=[@ANYBLOB="1800000000000000000000000900000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000068030000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000030000008500000017000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$packet(0x11, 0x2, 0x300) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000140)={'veth0_macvtap\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="3400000011000500000000000300000007000000", @ANYRES32=r9], 0x34}}, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xb, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000080000000000009500000000000000000000000000000013835661c2b771142af9cb0000000000"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r10, 0x0, 0xe, 0x0, &(0x7f0000000340)="348b4d157b8ab1d21f8218e3c736", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newlink={0x34, 0x10, 0x100, 0x0, 0x0, {0x0, 0x0, 0x0, r9}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8, 0x8, r10}, @IFLA_XDP_FLAGS={0x8}]}]}, 0x34}}, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r11, 0x40305828, &(0x7f0000000140)={0x0, 0x0, 0x9, 0xf9}) write$cgroup_int(r11, &(0x7f0000000200)=0xf, 0x12) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r11, 0x15, 0x1, 0x0, &(0x7f0000000300)=[0x0], 0x1, 0x0, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0], &(0x7f0000000440)=[0x0], 0x0}, 0x40) r13 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000540)=@o_path={&(0x7f0000000500)='./file0\x00', 0x0, 0x4000, r8}, 0x18) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000004c0)={@map=r13, r11, 0x2d, 0x18, 0x0, @void, @value=r10, @void, @void, r12}, 0x20) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000180)={@map=r3, r4, 0xc, 0x20, r4, @void, @void, @void, @value=0xffffffffffffffff, r12}, 0x20) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0xc9f844e9d96ae5d1}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x7c}, 0x1, 0x0, 0x0, 0x4008091}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000002c0)={r14, 0x11, 0x6, @random="08d32bfb45c9"}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1.948068396s ago: executing program 1 (id=6982): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x24d00, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = socket(0x10, 0x803, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) recvmsg(0xffffffffffffffff, 0x0, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x5c, 0x2c, 0xd3f, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x2, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x20, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x1c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_LABEL={0xfffffffffffffd45, 0x5, {0x20000, 0x0, 0x1}}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_TC={0x5, 0x4, 0x5}]}}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) r5 = socket(0x400000000010, 0x3, 0x0) (async) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$XFS_IOC_PATH_TO_HANDLE(r6, 0xc0385869, &(0x7f0000000340)={r0, &(0x7f0000000240)='\x00', 0x200, &(0x7f0000000280)={@align=0x3, {0x2, 0xfff9, 0x6f, 0x7f}}, 0x4, &(0x7f00000002c0)={@_ha_fsid}, &(0x7f0000000300)=0x979b}) getsockopt$TIPC_IMPORTANCE(r8, 0x10f, 0x7f, &(0x7f0000000380), &(0x7f00000003c0)=0x4) (async) r9 = socket$igmp(0x2, 0x3, 0x2) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x25dfdbff, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x10000000, 0x0, 0x1000008}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x4c8d0) setsockopt$MRT_ADD_VIF(r9, 0x0, 0xca, &(0x7f00000000c0)={0xffffffffffffffff, 0x1, 0xfc, 0xfffffff4, @vifc_lcl_addr=@remote, @multicast2}, 0x10) (async) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000480)=@generic={&(0x7f0000000440)='./file0\x00', r8}, 0x18) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000400)={'batadv0\x00'}) (async) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newtfilter={0x2c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x4}, {0x0, 0xfff1}, {0x6, 0x8}}, [@TCA_RATE={0x6, 0x5, {0x68, 0x9}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) 1.896999015s ago: executing program 2 (id=6983): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r2 = socket$inet_sctp(0x2, 0xd9eeb220ac5bd464, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000600)={0x0, @in6={{0xa, 0x4e23, 0x4fc, @remote, 0x4}}}, &(0x7f00000006c0)=0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000700)={r3, @in6={{0xa, 0x4e20, 0xfffffffd, @mcast2, 0x9}}, 0x3, 0xb72}, 0x90) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@ipv4_newrule={0x2c, 0x20, 0x1, 0x70bd2d, 0x25dfdbee, {0x2, 0x20, 0x10, 0x8, 0x7, 0x0, 0x0, 0x5, 0x1000e}, [@FRA_SRC={0x8, 0x2, @multicast2}, @FRA_DST={0x8, 0x1, @private=0xa010100}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80640c1}, 0x24040080) (async, rerun: 64) unshare(0x400) (rerun: 64) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r6 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r5, &(0x7f0000005f80)={0x30000002}) (async) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc08, 0x3, 0x438, 0x310, 0x5002004a, 0xb, 0x310, 0xea13, 0x3a0, 0x3c8, 0x3c8, 0x3a0, 0x3c8, 0x3, 0x0, {[{{@ip={@multicast2, @private=0xa010101, 0xff, 0xffffffff, 'bridge0\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x5c, 0x3, 0x2}, 0x0, 0x2c8, 0x310, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{}, {0x16}, {0x4}, {}, {}, {0x0, 0x0, 0x5e}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {0x0, 0x0, 0x4}, {}, {0x4, 0x8}, {}, {}, {0x1}, {0x0, 0x0, 0x0, 0x7f}, {0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x9}, {}, {0xfffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {0x0, 0x0, 0x40}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x80}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfd}]}}, @common=@inet=@socket3={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x498) (async, rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r0, 0x0, 0x10, 0x0, &(0x7f00000005c0)="20040000000000f10e586bda5eb7aa00", 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (rerun: 64) 1.86732636s ago: executing program 3 (id=6984): ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000001a80)={{0xffffffffffffffff, &(0x7f0000000080)='\x00', 0x10001, &(0x7f0000000100)={@align=0x7, {0x4, 0xa77, 0xc}}, 0x10000, &(0x7f0000000140), &(0x7f0000000180)=0x7fff}, 0x8, &(0x7f0000001980)=[{0x1, 0x81, &(0x7f00000001c0)='\x00', &(0x7f0000000200)="beeaed6f1736bfd14edb0b9940ba66c142802615c868332bc0457159118416049cfc80a6677f04ff0507afea6ed7ef3616a4382e66573b1822ee90e563faf9ff6b3e064151409a4737f868c29824f028e6c97413517a899a4a3cf3aa3560e90247d800", 0x63, 0x20}, {0x2, 0xff, &(0x7f0000000280)='wlan0\x00', &(0x7f0000001cc0)="2e981e3421ae87ebc59123f383e759696ce07b87659803c17eba447de960c000e2a868aca7503a5b3c59b3e7ab0f940b4896c014fc697ecefb27bd56ff68e4eb77b86baac3a631e472bf2723b0b15cbec91c70dede017e849e5d0b7aed51779dbfb2ce2d72ecf7c4d11959fc320b4bbeb4cdb55ec8094705b27877e10692041eb2f83f6d0afad30949c2b684b25ced474f94f6ed10c9036ad5f7b5cd1b626d4026a2585105f0e42e7e60404bed8a3d0a8f9825d23910343e398988ba430023b20505e2a1dcfb5ed2b8c9d17ab5cba1dec83b005a", 0xd4, 0x32}, {0x3, 0x1, &(0x7f0000000480)='wlan0\x00', &(0x7f00000004c0)="844322af87c236c5029ae8ab049014b7f8fd3fcb15cd649f4ccb0af4ce5c835633", 0x21, 0x30}, {0x3, 0x0, &(0x7f0000000500)='\\^]@!\\\x00', &(0x7f0000000540)="83c8b05d05a149c27e430d1886bf92d8a9627cbc6455845eff7c4650a9f3c7483ab3bac5f100329599cf71bdacfe5f3f1d0fb0d22799c3080f878742dbd3900a1747b00f932f2dd8f8aa0450ce68e9813a04a6c0efab595f37c34f2d33e30f35e537e470b44c6bbe7644869fbbcba6b349786a6baefb51d60099aeb2f950b89fb4e26659b78877a3102678726c2a9e25d3ddd844d756bd613bedccc639f33887f6517083663902ac094786a1286df0d4f2c9289fc5cddfdd6bb40eb9e63bdfdaf50226a70cda674c4488930998464d", 0xcf, 0x8}, {0x1, 0x6, &(0x7f0000000640)='wlan0\x00', &(0x7f0000000680)="70422335b3be6f564090c4b2a508c3b60b25e396520de6a3c57533298e808566ac234f948dac796e3406f14abfb749175cc8308d6af0839d1aa98b85f08d9151f091092bd926b2f71eb068ff39de8cda5ea73eac4a699e751456d756b0c0def9618d9a", 0x63, 0x2}, {0x1, 0x80, &(0x7f0000000700)='^\x00', &(0x7f0000000740)="040fa5da2211cbe186f65f1856ce5c09e796cc7215872e5423881d406a04bfc465bce34cbb03a52d0c9ba9be22d2f9b01571a5753d45596eee82b971dc169db5e36a49f609b6a1a8f8c699423dfa3e7a04cd71ad8996a3f6574fa49243e889c0e48a0d06f38236bcbaff9d14ba401b41efb1e4166a007217c2a43d22ce070da0bb1c5771f2ba93f963c16f4d76ce8a2f11", 0x91}, {0x683be21923e7c887, 0x2, &(0x7f0000000800)='wlan0\x00', &(0x7f0000000840)="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", 0xfe, 0x18}, {0x3, 0x3, &(0x7f0000000940)='wlan0\x00', &(0x7f0000000980)="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", 0x1000, 0xa}]}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x1c, r4, 0x1, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffffd}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x8000) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001dc0)={0x44, r4, 0x20, 0x400000, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_hsr\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40850}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000072c0004802800018007000100637400001c00028008000140000000107ddd02400000000c05000300010000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000500000a"], 0x80}, 0x1, 0x0, 0x0, 0x840}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) sendmsg$NL80211_CMD_GET_REG(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x14, r6, 0x1, 0x70bd29, 0x25dfdbfd}, 0x14}}, 0x8000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001b40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001c80)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001c40)={&(0x7f0000001b80)={0x90, r6, 0x20, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x1351}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x14, 0xcd, [0xef0, 0x3ff, 0x1, 0x1, 0x0, 0x132, 0x8, 0x0]}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x100}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15f4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x80000000}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xe67}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xf86}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x90}, 0x1, 0x0, 0x0, 0x10}, 0x4000014) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1438a}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x1ff, 0x7ff}}]}]}, @IFLA_IFNAME={0x14, 0x3, 'wlan0\x00'}, @IFLA_LINKMODE={0x5, 0x11, 0x9a}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000880}, 0x0) 1.642718206s ago: executing program 2 (id=6985): ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000001bc0)={{0xffffffffffffffff, &(0x7f0000000040)='\x00', 0x420000, &(0x7f0000000080)={@_ha_fsid={[0x59b, 0xffffffff]}, {0x1, 0xfff9, 0x4d, 0x5}}, 0x3, 0x0, &(0x7f0000000b80)=0x8d}, {[0x6, 0x2, 0x6, 0x93]}, 0x9, 0x1000, &(0x7f0000000bc0)=""/4096}) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000001c40)={0xfb, 0x3}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x3c) 1.540772567s ago: executing program 3 (id=6986): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x439, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21a01, 0x6536d5ef40a93735}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_ERSPAN_DIR={0x5, 0x17, 0x1}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x410c0}, 0x4000020) close(r0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r2, &(0x7f0000002080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0xf, &(0x7f0000000080)=0x4, 0x4) connect$bt_l2cap(r2, &(0x7f00000000c0)={0x1f, 0x80, @any, 0x0, 0x2}, 0xe) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r4}, 0x20) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000580)={'veth1\x00', 0x2}) r9 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r9, 0x10c, 0x3, &(0x7f0000000000)=0x89, 0x4) recvmsg(r3, &(0x7f0000001a40)={&(0x7f0000000140)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000001900)=[{&(0x7f0000000440)=""/52, 0x34}, {&(0x7f0000000480)=""/129, 0x81}, {&(0x7f0000000540)=""/40, 0x28}, {&(0x7f0000000900)=""/4096, 0x1000}], 0x4, &(0x7f0000001940)=""/234, 0xea}, 0x2) close(r8) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r10) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r11, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000008000000bca30000000000002403000020feffff620af0ff0000001f71a4f2ff000000001f03000000000000e5000500000000002604fdffff02000015010000033800001d13fcff000000007a0af0ff0000001f0f14000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61623604000000000000006a89adaf17b0a6041bdeebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564163427afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101a3062cd54f9ff51d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a90144022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab540b8d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb11883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcd857ab15e355713767c536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ced301efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0981000000000000ff0f40b1888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fc08001011e32f80fb60e14b9eee094277bbc170882c8890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e3f753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bb25b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963342aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b6ef9d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec035d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b8074bf7df8b5e783637da740800000000000000c55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a2740000000000000000000000000000000000000000000a0009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4100260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb0000000000000005375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d34d3757b1450fdb0a9a69f432e277f3a0386eb2bd3305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07618b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e040000003c3ffad44d2a376def42e41e9fc31678257e040fa7cf32c221aaac08000000000000001a00000000000000000000173570f0c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d641ef02e4d5295d756e110522a7a945b93fb705b95b6aae27a8fb33732ce1da1c0b1af8eb9222a06e984ab1e6984c8bdc12360627137ab67b6b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481efe46a4ce86be0b1d8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0c6cb4bed8594a39bd76d3ef8a7ab014e787596db796bd93a36c2880423291e3bccc86f66ba792ff4d87b3f80e5908779e51c5e9055fc5b23605cd000c723187ef09dcf4b07b06a9342f3f62ee7acddff292082c1f4d8eb9561f80873a09a1ae0c9af1121175e5600f43a1179484502009759264a5729f07c2b218fa36ba2316a99aaad0130df83d0bda1e711290f78c143ea143967b00adcd77e6ad5e48d839ea61aadb83e4d071c54691924a3830d3e7b5c198bb0ed623153590000000000000000004b985ea1702f34f2f85b168c083e810ed567e3f1979b9ed1a4bf6a10dac825c96a0828b335de445a4880bb6474157efd1a72ca46ae4cbe3ab648c9bc4867a5a4cb87d7d6d55475b34b3cb6aa9e2337d4e04a37e35109752522ac9b186ddd80c47da6a2f4ef7bb909c975520000000000000000000000219cf5c1376ab33786f6b856d354e90a2733f78f2d188057cead3480eade49d55b770fad7fa000d23da6275768810b6b2df91d3a991ea98d929d271696c258d5b735d5db11df434e7dd1b7c1ca05cea3977df564115f4ec6ffab1d2ff8a642ca50934b3fbe44b0abeba9df209566984a29dfc0466e439a94e177b3c4d5f6e92b8176b9d6ddeeeb196fa964217f88e1acc180aaa4"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe8a, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) sendmsg$NFT_BATCH(r10, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r7}, &(0x7f0000000000), &(0x7f00000000c0)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000022c0)={{r7}, &(0x7f0000002240), &(0x7f0000002280)=r0}, 0x20) syz_emit_ethernet(0x8e, &(0x7f0000000000)=ANY=[@ANYRES16], 0x0) 1.53812471s ago: executing program 0 (id=6987): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000c40)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd15, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r2}, 0xc) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000280)={r1, &(0x7f0000000240)}, 0x20) writev(r0, &(0x7f0000019880)=[{&(0x7f0000000080)="fb", 0xffffff5c}, {&(0x7f00000197c0)="1902eb02d5e5f29e59e1a7caec33eb76d2430da474d87e367f6598d026438b65eda8341073b6752abdcee080c8e1e876b25227c37d7dd79886ce33f13e857c8eda1cecf6ac36c03dbf54e3cb5136da5a33fee76fb3113f8b6700e9e5fc006b8eed665fed48738d59395ad07438c3610ae3976aac75caf2facafa21c25be3c2", 0x7f}], 0x1000000000000105) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=ANY=[@ANYBLOB="fc0100001900010025bd700000000000ac14140300000000000000000000000000000000000000000091f6ee000000000300000000000300000000020000200800000006414923f3a80c2f3893b75acd7bf1493bcb623b7719039bec9ae4ef1e65c9dc9c7d07336f4d42c0ae8b14da6fe14f28c98a9aa0ff1d78f0be1d5d8a4370ae1be91d317572b7581aff741c", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001d000000000000000000000000000000faffffffffffffff0000000000000000dd0200000000000000000000c06b6e00000000000000000044010500ac1e00010000000000000000000000000000000033000000000000007f00000100000000000000000000000000000000000001000000000000000000000000007f000001000000000000000000000000000000003200000000000000000000000000000000000000000000000000000002000000000000000000000000000000ff020000000000000000000000000001000000003c00000002000000ac1414bb0000000000000000000000000000000001030000ff070000000000000000000000000000000000000000ffff64010101000000003200000002000000fc020000000000000000000000000000ffffffff0000000003000000000000000000000020010000000000000000000000000001000000002b000000200000007f00000100000000000000000000000000000000040000000000000000000000feffffff"], 0x1fc}}, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r1, 0xc0385869, &(0x7f0000000200)={r2, &(0x7f0000000000)='}(\x00', 0x400400, &(0x7f0000000140)={@align=0xfffffffffffffffc, {0xff, 0x401, 0x8, 0x5}}, 0x2, &(0x7f0000000180)={@_ha_fsid}, &(0x7f00000001c0)=0x5}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000580)=ANY=[@ANYRES32=r1, @ANYRES32=r4, @ANYBLOB="2f00000006000000", @ANYRES32=r2, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="b4dc4bc2a0f50ba2fc16369fb0f83b1c140100a5795332d8a679cd0806ea972fd68ffed0c6010aabb2350f15b95cdb8c8d", @ANYRES64=0x0], 0x20) epoll_create1(0x80000) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="020000000400000008fc230001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r5}, 0x0, 0x0, 0xffffffff00000000}, 0x20) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000400), r7) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000f00)=ANY=[@ANYBLOB="fc000100000000000000000020010000000000000000000000000000fe80000000000000000000000000d396412f40449a6e00000a0000000000000070c57e1b4bff3e76e36842aba6aaee58040000000000000067bb7f9275bd1874884985eb865346cc2e3fb25844c27780ce16167b7faf700000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0d00000000000000a900000000000000000000000000000003000000000000000002000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000fdffffffff7f400000000000000000080000000000000000000000000000000044000500ac1e0101000000000000000000000000000000033c00000000000000ffffffff0000000000000000000000000000000000030000000000000100000000000000"], 0xfc}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000940)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "20c0d1", 0x14, 0x3a, 0x0, @remote, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @mcast1}}}}}}, 0x0) sendmsg$nl_xfrm(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000c80)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x184}, 0x1, 0x0, 0x0, 0x800}, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xa}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x34}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r9, 0x0, 0x0, 0x63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) unshare(0x80) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r10) sendmsg$IEEE802154_LIST_IFACE(r10, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000007c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r11, @ANYBLOB="030725bd7000000000001f0000001e9febd23f69cf300c4d38acb6b8ddc37c5ac4d92d129475e40873fefcc457115758083509ac53774177eb911e3d1a164c1bea94efedab05a2"], 0x14}, 0x1, 0x0, 0x0, 0x2000c094}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), r10) sendmsg$NLBL_MGMT_C_LISTALL(r10, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="bcfe8f0ba9dfe71d6c3f5514792ab09eeab0270543ac958eed6146d0", @ANYRES16=0x0, @ANYBLOB="000127bd7000fddbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x44810) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc080}, 0x40) 1.529966702s ago: executing program 1 (id=6988): r0 = socket(0x1, 0x80000, 0xffffd85d) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000140)={0x4, 0x7f, 0x4, 0x4000000}, 0x18) (async) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000ff110002000200000800040001000000", 0x24) 1.434349572s ago: executing program 2 (id=6989): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x4, 0x0, 0x1, 0xfff, '\x00', 0x0, 0xffffffffffffffff, 0x2}, 0x50) (async, rerun: 32) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000480)={0xffffffffffffffff, &(0x7f0000000380)='*\x00', 0x400000, &(0x7f00000003c0)={@align=0xab, {0x9, 0x800, 0x8, 0x7fffffffffffffff}}, 0xffffffc0, &(0x7f0000000400)={@_ha_fsid}, &(0x7f0000000440)=0xa}) (rerun: 32) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_delroute={0x24, 0x20, 0x901, 0x0, 0x25dfdbff, {0x2, 0x18, 0x0, 0x0, 0xff, 0x0, 0x0, 0x8, 0x2000000}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000480)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140), 0x0, 0x4003c, &(0x7f0000000440), 0x0, 0x10, &(0x7f0000000140), &(0x7f0000000500), 0x8, 0x64, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0xe, &(0x7f0000001080)=ANY=[@ANYBLOB="b702000024000000bfa30000000000000703000000feffff7a0af0fff8bffffd79a4f0ff00000000b7060000ffffffff2d640500000000006502040001001f000404000001007d60b7030000000000006a0a00fefdff00008500000026000000b7000000000000009500000000000000c743a0c8e3ebbadc20e5a7efcc9ac1467fb2ea80dbcf8df265e1b40e4c8afd5c0c000000008da68076774bbcdb2c769937000090af27db5b56024db96bcbbbd2cb2000ce03000000000000007e357754508535766c80114604a86fe569b05614eab9297eb290a248a120c9c6e39f403ff065fd3052aae80675eeba68562eaeaea5fecf298ca20f274233106eab63ecf772de7b265040b6c50b7420b48a93fe94c756108afcd0b2eb78040000005f02a5a6474ae549070004000000001294fba0ed5020e6474ac921fee1f6d8ad6a80c0947cd6d4a561ced21a0b4a902be6af7ec2d1ba002e57f301000000000000000000000000100000aaf25343063e6581f9e6de14ad72e5ad84309f47f96a576cd20cef7ed951a73ea73d7c7f14e306f1f1d1377e57abb19700f0077e9d0000b93eb0f2c6f8141e350dc68147e5958128d22d58625cf9dba211bfff9c3709c9b134625d3d2369f516a49eeeb1a662c8dfb875bdf5c6ba73cccdfacb202994c40d322717faff03323dce8a34ee0ca2cf61efb4b30000642735d6d482ba98d252f36c54333aab1aa736369392b9067665339820f5f1557b0bf7cc06a5a13c714e0b1a1f000000ff3283076cda3d0b1a2905cfc3d04f1db264b530abcbe44bc405f600807970727fb819afa1907228fa9e83433eedb4ac88d0285594ffb0d14c09d5c77f33702822b02488ea570204c8441ced81cacf945dcb2486d65ceec8bcaffbe800a041a378b40dc9e3600e916ae6307bd8325a442095bc9a8b0c95905979f34adddbb26f0d24425c8ab9d937d84b521914f92eed3d3e9de82942a952e86b567aff5bc2e3c1fcc00f618363df5d0d181ee8f4b8fd356c9eb365adc037e443820c05c5db16ff07a9cf471e2ebf91ab00a05f88c1cd55f8c81f5eb1f8d615ca27efb2193bb61665a1ce37f30c2efc9c3b5a4a5d95479fac471ba60fbd0e50225563cd37343d09da72472efc2b2877fbab12a891513e5f0763ae06c0610a2869747c143d75007606000000b2310e19ac58bf29d7f178d09a9f634a3ae492f54649589e3692768a0f3a082c5242c8fa7f01e0873c9c5c604108ad85950d8e08465fa1067ea8f383b3e7a7ddf5977d46f4bc38f914b4a496426d8468f9ba618b6b2218b50c8fc9efbce3ba799cf70de7e13be871aa7eb402e2b11f440361e18d4e334bfc6ae54e62e67a0338c756c544189e4519a029674e2a2bbbc7f6600000000000800000e5e30b70b198246d3a62660600000030a0af132e680510811d3ab71af5d98e2d3d928a749e8b9402d14655612bd58fb40b4625cb69bf6cea97b447f2d970d99100000000086000001b881afb2cc500003a73562af4878f75b4c98274eeb666aa1f5fcf91990cf0dcfef9540057b8a3fff2bc02c5941626d2015f414546e87835ba18e9101734a9e9c6955fc6b9a25fe2a3dd8bab7f21beccba5493a164c663eceed401737c12c65804712236a9a29a43b1e27e9b6816f2328ea8423121f12b7b35aa721fef26934ccafde573bee5c33ef15309f43cbd5d61aa679a9c402d337ebf57a5eacb569401c1df7b9c45b09743c61d1db37f0000000000020000000000de00d23dd63b7761d7d6818db785d8ba13dc577fe61a68eb365de5661f43d4c789bb117a3d208ae44a38e7868dc32e132124ecf52327631b718b3157e218959156ff8e92b7e92bc275d2c9114547351a0d0f2a70d13be0194b6cb68b03000000000000004f153bbc7f52861e4e5df0d19e4e40ac44cfda6f87807e5b5ed7072c04da88afd3d4b79f060e004a0e2f00b9e726ac75d2ac0691314c627e9a8a07bdd607919fd48f01ad6d2f7621d9a75b134f1bc25ed7c33d411a5baa4daa3add16afc502b2b7629541d722e91d631e5ffb9d4beb5aa5a2c4e490a5bd038c1817f0d4652a29353b05b16b3c5cf4538ba310b8cbc221af38ea842d4cb908bcd574f794459fd54b58c6a791e6df625a47bade4ba41ee014184395a479544619f749ff70088b0fd115077f7eff7c5a3315ca604d110df1c54407f191a78d8362e4dc6e1138391c2a65246779bb76c9f1daea4f085f38810edef6dd047937c231cba791a4e7713c5b3b0a0b6ba37db5016e02d114d714459d065a79609fea4efebad04edac11aac0e53dd094827453144fa419ee81823d00a90a9058ba740d2f41253a8d01a8c1a7265a084e30ad10d412aee8170a7111d62473e7bd8f3d64fb7ebdd32aada331900000000000000000000000084ef49dd020000000000000000000000d9dcb285038ec38d5f4969ed0e98a71ac7bf8159a234833a5241722b2d24aa2fa4965d4eb7966fb27d118b6ef3308627e67d42f1041d5e92da28e0a7724ce715854775cbe06c5166f1dac0745f1373156a536cb6394c2c4473e2050cacf693fdf8e305080000001a901ecd90a5f53b8327a485557bc2a147b036477915e600000000034258ebbb6099b597d17ee2fc97ca850b8580b1337016a40566814594c13052b9d2b0741326825f19a244609ac04a0c29691a7c8f7a78c1a7590a293c561f304533c638ae635f5ce026f7fa034d8cfe0e11831d4829692beab26891ef583cfcb713a4d3a2d8b958c0875d7e4bdcf98802db086ebcbb9d82fa569a18f06facc2ffe1ea9ae4231e1e7a5dd7503faa2de7f898c97788c4b9c61c70ff92abdf7476cc351156d11c0ada7614f315f4c6cca119d16827d4e864f5a7a9b690272a510c451dc07f391309d02e31e53b2bf0b5f86e776b1bcfe6c85ccd7ddf8a9559d58bb5603895f265685fdd11263c946f8ef3ccec1b0d45a47a89b8237cbbdab14e4ca6dc76b2c41e071b93a065c0f5aa718e1cfab29beea78a6bd9a3114f0fb92be9a5862627b4bd99db2c08e4636e43f05f33535d5d1f9bb40e1fd8e5125a3d29b31dd94a6744bbc21722222b976089f073a4d3fcafc6d06518cf0c4fc6c8e3da0000000000000000000000007d3b60775243f2143d9f54804b11102cf0e4c641db1ba8bf75e46ab3a8fdece6562e7ebb3e407f3c7504dfa3da3aecbd49af3d1edeea11cc970416fadeedc8423bfdc85041ac4d8243a1130e6f4cb5bbfed9d095e18c98c7d690e4c491a7ddcd5635bc61dbed719ca28e8ca3f1fbbe588913ed057f1d6e34a79f4dc10df54d1993a5bc5f9ef6dbd339ee4b0b5764169f305e284ef82cc23e9366d4bc7eb45c7230b13433e5240657cb8eba33260147be8620b6d98cc48b000000000000000000000000c1ce872b18984f080100000000000000bd3fded92547d41809b398f36749083a147eb09ff1ed601bd36b873d3947fb223da647052528e0466cb917db7800f7c7000b593fca1903991cca1343882e3a1f60044f11c081dae4fc5bcf20efacdd2c577f4bcda2eea6f75a31dc90eebb6135b6fb824052181b0ad8a49ebf03ccf61d7e39bf6b0762d24d19796016301d1415b5110ba9df7f204aedb2a2e4e621c0553d312b309db67192f98ef7800000d629c04e216afc8fc66616bbf304e452373aa927c2ad6f5417f1b9bc322b802c1c42112a92a331cdc113b9ace3ff52ede7a853f9a89002ba070bac2f635a03db3375e5564f1a798bf9c0f8c72725d2eca9b0ec7e453d78ea20eca61530fe574299b393ca144adcb06108dfbb934065a87972739150a8752ac111c4d9062ccb95c54034fbdee131d94dfbaab1854d55665746fb7b47d25e54070b0d14c0a29c57bc4930075e1761913b036d43852c6df9f10e15105b2a18668298a3577943514db0dce953dcec62139ff3f16066efec5d8cbc0600000000007289be5883aab951ea67cf2ff691d05c1ea91dd569ed9897fe8d88a0a6977dc8955be17e8026aff11c61fa5cc76196c1423cd597345253baa1537eb6962a3ce1fe5d5ab46938e8fb23fa7047bc59c4345e912585a9adb5fe2ff51b64a326321b594e3f2d339f4090bdae6b30b62064bacbc155d3c930576f506b093ca7c60957bdfdd6536baaa871cf6a603c736b78761e6463b8ac503e219cc3d98f649602ad24d5667368290ee926fba76ee482a201a03efece3b236f4ee2ffcd5d90d92a2f0c5cfa48c87f27c2f1e92988a6508c12f6b7755cc48eb10edafca92cb0260c72295a27a24846d3a2334bd60e94c0fd07e5db0a4964a7fc4e89f11a300510776934e87bb3c21394f46954a012b2a3b0760f1bad1dbd6b466ed7153bd18ee2c0b2353c38df9e0782eb"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x80000}, 0x10, r3}, 0x94) (async) r4 = socket(0xa, 0x3, 0x87) sendmmsg$unix(r4, &(0x7f000000cc80)=[{{&(0x7f0000001d40)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000003400)=[{&(0x7f0000001dc0)="a5", 0x1}, {0x0, 0xa00}], 0x2}}], 0x1, 0x24040080) (async) pipe(&(0x7f0000000600)={0xffffffffffffffff}) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async, rerun: 32) write$bt_hci(r6, &(0x7f0000000040)=ANY=[], 0x6) (async, rerun: 32) ioctl$INCFS_IOC_CREATE_FILE(r6, 0xc058671e, &(0x7f0000002340)={{'\x00', 0x1}, {0x4}, 0x41, 0x0, 0x0, &(0x7f0000001fc0)='./file0\x00', &(0x7f0000002000)='./file0\x00', &(0x7f0000002040)="8d46a27b22d0f0cf6a992b0aa2464c1f8cbc749d4decc7f72f54a95b1fb3c83fdc42b4105a6657971abc2d688ac9f52f96875b6bd6a4bf2c66c7595a7d229d694c610a4bcb38b4baea7a434b8cb821acb7b02d064fedce78d1521becf3483f2f034df59cd12d3b4ba943f6751a872b554fe7f1d13fdcc5908a0a3ee25dcb20812e78849eb494796182e806a892707a7b33305b83679e5d9b168a10112f4e59", 0x9f, 0x0, &(0x7f0000002100)={0x2, 0x19f, {0x0, 0xc, 0xdc, "d6c5c47f4ec2fea47ee9f76d1dd48f0a1b76571f747e43d88febdf8f0808e6d8793690b115f361d07d192e9ceec69231074faaf05f6daed2ce79c20d15c0ec0e565b95b79e1666ac0cb5f92eba4d530cc17f58ad5c0baf0e1043c66dcd3c0690914a4d41938d8b270475a5ff58032b0f254a54a8724f005a9d543a05a6074f85f7ebc3bb2b5232f2ec334c4145cab4c33c29e383981f5b172dadab95cb3d76452c5382b654e95a0a3b217457f11b6c189d9875a9d8f0ccf90356ce26d1b943d4b6798a89e0455cec7f997b9bb1943cb1b92238e683e3177f4beacc23", 0xb6, "1cecfb2dc11f186043a3e7b29d30f73e9db608bee071014ac3ceac131b2cbcc13b007284759d93b45540300d54cc2d91068c495ab81384fb67499eeaf3d091a5ccda378c901d2e50afb511a3098bb5a6f26db46c59132d41f194fe09c30bffa3f22f91de69254561b4994bb2222fef6c8cf2d1e3a620732a486fa7f128ef01930f43cab2080fb22478898fb938715794b13f77db1330baf975cde013febe5bde3894c3e1e1e9d2486c13ce06b327f135412abda5dc24"}, 0x58, "65ab28b4b8885a1a236a8bbf9bfdbf00ab81d7dec95fe4c26af281a7c0eb6b9908438cc96717d313ec5ce70731a1b47b361919901243c31fa60acce5ce34e400f9242c5bdc30ab0bfa9448d3df664e0dac0dafe172278e81"}, 0x203}) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000001d00)={{0xffffffffffffffff, &(0x7f0000000640)='-.{/{.{)\x00', 0x442280, &(0x7f0000000680)={@_ha_fsid={[0x2, 0x8]}, {0x8000, 0xa1, 0xc66c, 0x8}}, 0x3, &(0x7f00000006c0)={@_ha_fsid}, &(0x7f0000000700)=0x9}, 0x8, &(0x7f0000001c00)=[{0x1, 0x6, &(0x7f0000000740)='#\x00', &(0x7f0000000780)="c2f70e73c670f40cc46205dda55b3ce68ab8aed3a6cb684075ac69833affd755627221c96ad5c17e1480b16c698a29a9ccc92c87e6ac62a56a065c1528d96508364804d49fc63cd07f21266cd4528daf97d0ce63ad50f09fc9ebe7f6d69cf7f0887b59448fcf242898851b", 0x6b, 0x28}, {0x3, 0xe, &(0x7f0000000800)='\x00', &(0x7f0000000840)="9c9f0a5c320fdb46aa74a11bdd5df565f123b5ea4c04e3ddc72b2f237af05c2034ea217d1d5192640974c80b9e38e8f1922123ba9112aba690a4b85e705beb9e3c177a929ffe02cbe9680289694e0a9592651205c027bd03916ae030fba732b6ffe8b4fa797fa2ecff0e2ddc61501278a8dfd1b13ddf9545146fbd404a3da80b8173f1a14b5b9971eb6848e5992e26b8e5611b963e9615ff143da7c6e3a269c29f26cb8aaed3a2ecd41d7b34cdb7cba2f14a37f493af2ab819045df0ea4d8a0fe64ad0c9a395c3e1bcbccec665192f19f0701efeb36047f482fcb3e0376a37954fcc232717dec36e974efab0e62f72a5e5e80bc50af04207c477444ab4b47d1cc9a2a17060301f72c933d6f785e793cfda641d61d42215b4564d7a1d44be3bd9a2a88b43cbc983c7c7564f6af8a6111fe9ab4bfcd58ae30d9628f385f9b90a155f671e55107ff2aad2502eb07d167b177c94948f21135dfb93c97f924389110bd2176496bdb722845e16575de756db893ffc46c6770f42ba5c869035ed5487e0b23780a3b6f9d9fbe8cbcbabd744402c183dbf890114c53f157ee5fd09252d492ebb8050ed72443682f647453049c19983ed6ad02743bc9cb97621cf27b6fd22cfb85c33694ffacbbb0b300de8b5cbf6d2de594390148acfa51fc1ab6cc15516a4a91ef1a57fc8876a2e66361a37428df7c1edec92ec9f428317ff661971591b71ae1592acb753e872cad45a728d19865212a67510266ceff1eb5942cbd8754267aa32810f2413b57e423570f3e0b52c611e02d0d39beeac5f4c717067cf46d5f31cd6aedea56584d9a6d24bd77d04ecead860b2de795b0cd977ce1e2e7ce618b687f1c69ffd59086f35e45cf039ee022f8802b19ba195e9b08e39d14d43771074617964170a734c2e25912f6dd5461902d6f212b662a0699fa0293c07c2e37c4393d05e8804dfafa818074f4b14bbbfae41c04078ab75d6a1622643ed63ffc18237e8e350ca30bcabe752821f3a2ea501a16a9a13ff940f3a784c7b4a91c04c69c47fa49f29867538ee045ada93793b78c0405d88ba7edcc412f44ad983f9e1b3c34b9cc035d9745fff4ccd1ee5134a65a9a3a841d66f6deccfbbbfa8fc9d00d022db4a0bd40729abbfb1bf5bfbf266b385a9e6e1561995b232226ddb2b7505f8844619ae970985fa5afc58a0d9752bbefee2e19e21ad2afc1ef086ff5499ce8e8b49c0e2fdeb253faf6e5406c24bc07cd4e8c5e9b4b1af56e952281b2c1291aabacbcd7b1f695c3ffff931775f6260bbbf5d4feefa170a7521ab8ae977eba681202c0292a80d72bace51a75282d96011d822f171e6ff727927aa4bd85d1f8ed713d87ef89a2fd4edf8c00e9ac8ed3fbdc8fd5ff392858d423b1c3fd7a71be1dd82442193ecfb7cda062423c08abdd98a284d81b865699cf41deb0e8007dca8f6f8112dcfccf001d30c5725939b1d7ccf1d9373e07dd193ea81ce73831c08e202c1dd0df73ca22b791ddca47473f370df29656b5f95a4ad486d6a1d80b111970fd1774e65a9de84c319683da41db96dc6e671d8064ed98d9cf9c116c9f9f4e6dad3918f98f2091ff5d078631319dbebe0350059e74feddc1099f23a2d7b05b26bae55f8eafc6a30f28b5a4609d15873afad8a9f696acbc9a9b1706001bd34567d926d3cf4547ff1b1476d8208ee64d57ee2d20a7ceeb5e6ea89ec8023389a90e7039fc1efcbee6fa75d849b84c75f4e16d9c574208e83df6227ca0d5112d861a0362c156966dfb3b2d36b8a151ec11db8cf95fb8333569b1d04422be6a307016c5a87d685981411b5fc6c36223cc78beab73989d845a39264fa504588925c9fb4b701e33e11397c7a3d04eeaeb2c109846d5cf10d8c4bdca4c598273634c05c345ece0594e60bdc9b4dc845b0faec89574f2fff09e486a396b86342c19dff6c301283320ee0c3398ce9c6e0fcdd435a907e7bd365085ff6efb08f2060b119ac0ebc7f0c2def78999cc1584e361fe2b8381594364e03911c6214f935727fd650f8f6c7393672efc523a50a113976e9f3555f730c5ea27e7b0fa1cd6cd7a1bcf261c7a3b5086713f59659def3426ff91765d0c88876a07b4559fa869fc797580a09e1a7419389eac3df5b59426cb3739420fd861b10817154d55e5e540200c4423de4d228a391a611696fac95aebf0418d98f4cf9bc850b8d386047459342ca9f9fc23532240819908b2408eb0e76d11968b217f476c39e7bb8967ddb95c9939f8cc98eefde090926e2c8e858b1f30d4a8582e0876afe82fff9865c484c8da2e382687cfeccfae55ab0eeddf6dedf1acf8ac48563afdf73adba5a5c4afc04bf461c6e8c730f0833d814cc5504945322f8d67427dfa2d19cc10607dfd9ff48b6f18aaf64fae02c875435cb529d532bec9d376acecd8810008cbfe5bcd30a2e5dc4c6e6ee0bff67c1734c8805e185b38d9d2862218b04f544238e88930b6f482165c5bac8b384e0d16dd1b3408f701f0a07b7948111ab5e52937550bb5a00a109f0278e3a7b6f8f72229b42e1674366d6432510ee4e165878909b56efcfcd4950eb1b78503bc4abf5b3ebbcfbcc0cf391e079653656c0a8e77cb7553159fde6d7725095c7815b5576514f232192fa56e64c6e22c4112335a4272b25f4cefcb8f47aa50d59661f7e0f37fc66bd7f8514198c9abbf255436f8c4955003366893a7ecf878ca7c474e85cedebbf480bfcbd0e44b3785f99ff5be4d79dadf38b3955b05657a479bcc5adae370fce4c90d3ecd10d41b9ae6dde66d01e0d980e143b53971dafba9cddae4b498c7586c5b9b14e89ee4242ba54135e5eb124dca965939f5f9b59a76e4f7a7d8ee0e5e7d6ca2a51005a7a5af117b615fc3482cae9b20e477003fd7ecdb7839a2476397f61f5d0e9945f4f9a9b981dee0b82c468afb808ff58370ac8c5f6b62a4e0eea7a49323ec760b6bce400c7dc3ff14ead715cc36364fe9ac221a6cadfab6bc7d710989e0d707bf86fd6b1d702cca94cafae782393be992430414a67a3ca460d96d7baa28e00d1cd09f10616ec2a0c489744ab51c14fb3b84fd0ee165d5d00176e5dec42dd5b54e7819e811e8713641484689aded4905c9b0d41683da20982c7a08606a57f479f35d9382be3ba47ada7be6b17981e76cf5476beb87b67c4c1800ceb8fecf3562222e1351e4bbc21f804e6d2d1c1be7095a55cceb5c95c4637737d7ae03db8b598350f80871020173f94e7c5c0d612e1428b09df54d1443e6a32ffd4673dddfbe4a86dcc4c55c78327e35bf6536c232ead5b453ea59a00df61570ac94a356b959d80992b53caebfa4edc977e85b97a602d2670859785a8aeacc202ed01cde36e6cb52e43325128323fe117936a98401761a287aa52216775ee448f9015bc896a01bf341e8f61c01b5ae26485a688ecdfeced465a2dcbc1e1ddf8059310b844532f2d1d8626aebe45d9b76da0b7ea28b4cda57c4920dc73fe64b438a5fb9535bbdccbbdd1538b724730aded9454025e73c14443329e4a62c97fa90e7beb9cad37026a106913fbeaf40e1681405218277125aaae89f99234190fe4c32fddcd7fcdb5481ebb68b525411ed42070061993680bf0d9883d4cbecf4f4e63335694c2e4ef8445b84c3338145d78ca0ee8a3917518946209a9faa111109d6a20b004baad1cf09dff93b9f95e908633b32eddd5ca31f628087ace4879da34c46e48b00a7bbaa780629c4e9ba4e22e8ceca0101553716a34fcfab6ec4ca8786079893b82d476b03c23426f0f72f7b3ad3e491ebce2a10c88fa15468c0f2a445caeb7e5504c95a9d14621090ab3308b6a6156741d43eef24ec35006592a0cb1c8053ec45ba4ac3d7c2d2022a91c4a1462b1c88f53cedf0c0d0839f655b955c685a836e3032f41ca3649488a756e1216eebacdacec60ef523afe807159eb0b7c736e822f747b59a64930a781a5982e944c5e0db25edc68c28a86f90bbfa708be5b26158561329ee429056bf7946b770dba7bcc740a91386542fd33b4f7f9956a6359fadcf9b497faca8055661c9a15f76f3be26e754f5278bf53c9efff30d10d0013f1e7926e004077af189be5880ec1fa85455a914d07c486d533e18d06d6e203f42a7e0bf9fbde378152c23a1330046fb4e5ad69302fbcefe2bd424e71c9027cf774b5b459623b38dcc50140daebc2c3e26732467d72062e69ccc9b7b77532796b2f39e38af81d3580157938980c2445339e7edcbc4634e7ce4e88989861d9a5786d51f9558e132b9c6afa12b09bb94c2c3022c2f01d872463140a6c536717a9ff7212001c8d0dd861ac3fb632a2791c2b58abe34120d5ef690d1b7f0a4d663948f3426d3ba72693de116b52ef55f552b02973f92277e117c750cdc113158589a51879ac0dfb48cf56f91ea8050f16abb572214d1e5e4684c31389802c7ed9264d09613b2a9870342709ee301e05f27e072d844f9e5edac8b4fbd66a34d772f45019073e80d14c7cd3086cf5eb7ea1f0ec97bbf3248e5ee8e17cf3d34ab19a251fb9a05a8520cdbb829bb7a1def8fdb6abd5497fe5508b43b2aa0d7b1a0fb0300b9271ad0025f368cbb8676e9ae6021e197c448d54f42d19303701c5e1116d9ece6e2053526c8357293d5efb904b0e18ee9729349a61160e41e3f6093cf5f8680311816f5899efce466d1fbd9cded17900738f55ee0edcd029670669c3e46b7f5bf0b350907f9c03108cb637c91faf1802d747114c48b42eccd56724a8b6da9d89932da33aedae2a5f52c53cd32a033f565204da9c5f36464fc75209b48183842ee5e69da7c5a7762b44b922aec0ca3734ff673da4ed23f62d33c89539dc6019938c8eb7ed8387df34ac9042e24291edc1c5239977e61349b08700668a55e1fbebc8906f8b1f58de3d48998de84120d6078e2fefacfedf2085729be773ecf810a89267b78025c73b5c4e909689db0935756524bfb4c5abc89cac466d457ce9f64898873e88332caf6bf27115f6e58121837bd850820e5c66156b8ccfc493c8068ca34b8397d699f2d34223d1f5feb8dacf3657fee25ec8589a1025d633ce573da83956194e0b445de6a2a09f76e7299e1dd9cc6f97c5666b5299244f99a3c4288654d09d9f60745198c7e717c0620206ceab561dc0c212123f69be18a4ead402b268522068a93897f38e7d85ac2d9eafdcdac828be7cb5118347c4c36f15fa122b776da3e5cb8001089886b8eb2f2f10420785b12fcf9a4f2f026da35767cb37063a723195bfb56a42cf300676a101976d0d16afced2a31cf2c6c8c50bc1686edf69ca59881d32072973a2baed656a003e2de105165aee7c3732b9c46dfcd05a4e7da4a49000417fd108a231ebe76dd58e048baccce71b0e2b5fc5bbc6900aa1db24d65e704fcade02cc0d6bc7c14973dbd62330d322194c9ce1bd3de0a52fc36d41e35823d5c79411017ebfbc35ed70b9edc6ab0e7b247494e76882b1e386f80c3d2d1edc1b1c90a8b094b49aa7bcb3bfb0886bfeb56eb5348fd0230db9ca06174f1bafb7af90587f5f275af77564d47642bd402f447a62fffaf8406a17acf99f902a59a75b80c69d3a7e8ee21f2dfcea7289b9eb9af94dd670bd2e6ec5cdb8a46fabc09eddfaf9a1f43f41cd5ba722890a150e90cb06053195d8e488fa252f7c54abbd757649cf61abe97785d6f99c6d47a76e46ab145f3bf209dc964d7efe8ccce5cf889e392229c7749b07ffe9912072161b8ba44af207d26f2d87cde2589d1f7417cb25c65956c4ecaefde767122f0a14835c5070", 0x1000, 0x10}, {0x3, 0x13e, &(0x7f0000001840)='\xa5[\'{\xc4::\x00', &(0x7f0000001880)="2a906605fc5e6832050a74e58db02d388131fc3580594762ae48570a331f4198a742f75860c522c693993c6f4efd0e80082a68a5355a294eb20d0d", 0x3b}, {0x1, 0x8, &(0x7f00000018c0)=':[$,:]\x00', &(0x7f0000001900)="ba0f281a5fec9214bd887e9070cb9b64fa8d6b82b0f039635f0de32ca15e5a8adc2b7eb8c963fa93ae1b851126a90209457c693a2b87cd16256e588c7fe92414daea8c39c7ac1df8c1aaf40bc55ec105", 0x50, 0x2}, {0x1, 0x0, &(0x7f0000001980)='*!+-\x00', &(0x7f00000019c0)="6555477bfa649ca08e589ac3f358a1e5c1c0101fe749a3fe431895a855f1e443ea442922ce3691995f4e706ce38a5baba97bba3a94edf836fa4956ef2cc1c3ef73d4e02e4a43fe00f71784fe09a0481b91d68a1e7b3b07425be54423b595406b518900db20c871d3d5141a2ce764f290", 0x70, 0x30}, {0x3, 0x1, &(0x7f0000001a40)='\x00', &(0x7f0000001a80), 0x0, 0x50}, {0x2, 0x1, &(0x7f0000001ac0)='\x00', &(0x7f0000001b00)="a9451b130970988aba04589076d49c481d5bc3322b62f48cef859cbe1f4992339f24c4baf2250795b35177b97cd3979d94d6273315838db6f018bad87e0230b1d31bf2981c8f5d64d73828aaf5c0fae2a13476e24640239a1b60dff4b8e1a5117044b9323ea263099610ce6a02c38e2268aa47b5ed948ccdcfefee64c04ddd", 0x7f, 0x18}, {0x2, 0x1, &(0x7f0000001b80)='#\x00', &(0x7f0000001bc0)="fc549f1bdcdbbeaa568503ea42cd9f4f70466822b289f708ee83dbcdac", 0x1d, 0x2a}]}) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=@bloom_filter={0x1e, 0x9, 0x4, 0x8000, 0x200, 0xffffffffffffffff, 0xfffffffc, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x1, 0x4}, 0x50) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001e00)=@base={0x1, 0x1000, 0x6, 0x3, 0x1, 0xffffffffffffffff, 0xfb, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001f00)={0xd, 0x17, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xf93, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_val={0x18, 0x8, 0x2, 0x0, 0x1}, @generic={0x1, 0x2, 0x3, 0x9}, @jmp={0x5, 0x1, 0xd, 0x3, 0xa, 0x10, 0xffffffffffffffff}, @generic={0x0, 0x3, 0x7, 0x24, 0x1ff}, @jmp={0x5, 0x0, 0x8, 0x5, 0x8, 0xc}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000140)='GPL\x00', 0x2, 0xb3, &(0x7f0000000200)=""/179, 0x41000, 0x0, '\x00', 0x0, @fallback=0xf, r1, 0x8, &(0x7f0000000580)={0x0, 0x1}, 0x8, 0x10, &(0x7f00000005c0)={0x0, 0xc, 0x1, 0xa}, 0x10, r3, 0xffffffffffffffff, 0x3, &(0x7f0000001e80)=[r5, r7, r8, r9], &(0x7f0000001ec0)=[{0x3, 0x5, 0x2, 0x7}, {0x3, 0x3, 0xb}, {0x4, 0x2, 0xc, 0x8}], 0x10, 0x3ff}, 0x94) (async) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="2400000076000907020000000000000007020000", @ANYRES32=0x0, @ANYBLOB="08000180fe18dd"], 0x24}, 0x1, 0x5502000000000000}, 0x4000) sendmsg$nl_xfrm(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x1000, 0x0, 0xa, 0x20, 0x0, 0x87}, {0x0, 0x0, 0x4, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000, 0x4}, 0x0, 0x40000000}}, 0xb8}}, 0x2c000010) (async) sendmsg$nl_xfrm(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="b8000000140001000000000004000000e000000200000000000000000000000000000000000000000000000000000000000000000fff00000a00200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00@\x00'], 0xb8}, 0x1, 0x0, 0x0, 0x404c830}, 0x987a3a9f32358a4c) 1.320909902s ago: executing program 1 (id=6990): r0 = gettid() syz_open_procfs$namespace(r0, &(0x7f0000000040)) (async) r1 = syz_open_procfs$namespace(r0, &(0x7f0000000040)) mkdirat$cgroup(r1, &(0x7f0000000000)='syz0\x00', 0x1ff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000ff824a5e0159f66634000000020000000000000000f6050020208000000000000000000000030000000002000000023f4103850213a900"/76], 0x0, 0x4e, 0x0, 0x40001}, 0x28) r2 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000003f80)=ANY=[@ANYBLOB="18020000feffffef00000000000000008500000041000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000010400000850000007500000095"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000003f80)=ANY=[@ANYBLOB="18020000feffffef00000000000000008500000041000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000010400000850000007500000095"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000a00)=@newqdisc={0x144, 0x24, 0xf0b, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x6, 0x2}, {0xffff, 0xffff}, {0xf, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0xa, 0x9, 0x1, 0x10, 0x8f3b, 0x5fc}, [@TCA_NETEM_JITTER64={0xc, 0xb, 0x8}]}}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x2}, @TCA_STAB={0xd4, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x48, 0x9, 0x6, 0x2, 0xffff, 0x4, 0x9}}, {0x16, 0x2, [0x800, 0x5, 0x0, 0x5, 0x7, 0x8, 0x3, 0x4, 0x4b]}}, {{0x1c, 0x1, {0x8, 0x0, 0x7, 0x7, 0x1, 0x9, 0xa2b, 0x4}}, {0xc, 0x2, [0x8, 0x3, 0xd477, 0x8]}}, {{0x1c, 0x1, {0x10, 0x4, 0x8, 0x5, 0x1, 0xfffffffe, 0x9}}, {0x4}}, {{0x1c, 0x1, {0x9, 0x9, 0x40, 0x8, 0x1, 0x583, 0x6}}, {0x4}}, {{0x1c, 0x1, {0xb, 0x7, 0xfffa, 0x1, 0x0, 0x8, 0x1, 0x9}}, {0x16, 0x2, [0xfffc, 0x53eb, 0x4, 0xb0a, 0x8, 0x203, 0x3, 0x7, 0x4]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x800}]}, 0x144}, 0x1, 0x0, 0x0, 0x4000001}, 0x61044) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="380000002e00090027bd700000002100040000002400118031f9e05e2f82591487b094f5cbed0a33ec55488635157213ba426e9c8fe61b5c"], 0x38}, 0x1, 0x0, 0x0, 0x42804}, 0x0) (async) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="380000002e00090027bd700000002100040000002400118031f9e05e2f82591487b094f5cbed0a33ec55488635157213ba426e9c8fe61b5c"], 0x38}, 0x1, 0x0, 0x0, 0x42804}, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000006c0)=ANY=[@ANYBLOB="6400000002020500000000000000000003000005500001800c000280050001003a0000002cef080000000000000000000000000000000000000000001400040200000000000000000000000000000000140001800800538ed71044d833b32b0100e000000108000200ac14142e1100bad915b70f6658770fac62c5f283cc665087e8372dec623b06000c58c7c0721f5f31a210db0ca1a76311fa01f18d64aab4d58fa86a53f3e58def91c1781965b8ed2bec0d23cc24bee2d166634ab39411fda67a411976a31cc55e1037669cdd23"], 0xfffffffffffffff7}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) bind$bt_l2cap(r5, &(0x7f00000005c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x4}, 0x4d) socket$inet(0x2, 0x800, 0xffffffff) (async) socket$inet(0x2, 0x800, 0xffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x2000) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) sendmsg$NL80211_CMD_GET_INTERFACE(r2, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000025bd74006539ec2444b704a21900e06a", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4002000}, 0x800) (async) sendmsg$NL80211_CMD_GET_INTERFACE(r2, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000025bd74006539ec2444b704a21900e06a", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4002000}, 0x800) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) r8 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c00)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010", @ANYRES8=0x0, @ANYBLOB="fe88"], 0x48}}, 0x0) r9 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r9, &(0x7f0000000080)={'some', 0x20, 0x2000000008, 0x20, 0x10000000fffff}, 0x2f) ppoll(&(0x7f0000001080)=[{r9, 0x21}], 0x1, 0x0, 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c1a00010000000000fbdbdf250a808000000000000000000006001d004e20000105001b003a000000000000"], 0x2c}}, 0x0) sendmmsg$alg(r8, &(0x7f00000000c0), 0x492492492492627, 0x0) (async) sendmmsg$alg(r8, &(0x7f00000000c0), 0x492492492492627, 0x0) 1.260626254s ago: executing program 2 (id=6991): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r0) r3 = socket(0x18, 0x0, 0x1) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000007c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}]}, &(0x7f00000005c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r5, &(0x7f0000000440), &(0x7f0000000040)=@udp=r4}, 0x20) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r4, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000800)=""/4096, 0x1000}], 0x12}, 0xb}], 0x12, 0x40000021, 0x0) getsockopt$nfc_llcp(r3, 0x111, 0x0, 0x0, 0x90aa62107f0000) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) write(r9, &(0x7f00000002c0)="b9ba48", 0x3) sendmsg$nl_route_sched(r8, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newtaction={0x4c, 0x1e, 0x109, 0x0, 0x25dfdbfe, {}, [{0x38, 0x1, [@m_mirred={0x34, 0x0, 0x0, 0x0, {{0xb, 0x9}, {0x4, 0xe}, {0x8, 0x6, "6ed00268"}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0x4c}, 0x1, 0x2b1e}, 0x58) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x64, r2, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xfd0e}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @dev={0xac, 0x14, 0x14, 0x18}}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xb1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @empty}]}, 0x64}, 0x1, 0x0, 0x0, 0x8800}, 0x20000040) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001640)={0x3, 0xc, &(0x7f0000002380)=@framed={{0x18, 0x2, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xd}, [@call={0x85, 0x0, 0x0, 0x2f}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1200}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r11, 0x2f, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x4048587b, &(0x7f0000001c00)={{r0, &(0x7f0000000580)='geneve1\x00', 0x280, &(0x7f00000005c0)={@_ha_fsid={[0x0, 0x800]}, {0x7, 0x7, 0x0, 0x3}}, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x9}, 0x7, &(0x7f0000001b00)=[{0x2, 0x10, &(0x7f0000000680)='(\'@:%\x00', &(0x7f00000006c0)="3c258cd171301c000fafd3cca585100c66e7fd4862e6199a7d03843688b7a9293da9a2374f609ca48259bcec7f40027318fb55cb745e65736afbba80", 0x3c, 0x18}, {0x1, 0x0, &(0x7f0000000700)='\x00', &(0x7f0000000740)="0055f575d5582f78b1491285e0c0de3383da7525855cf5a113eb21fb4f31f8e5fffa05bfe168f3595904ba25282210962b3f1e963e36ba43b301f5ed9eba80b665d0484e3085828926db90f28f9b3d98fc271377d1851f88f39a2f1bdcf86e75f177bbf1f417875b1980712331bec08d0c18d1b2958645d63abc22", 0x7b, 0xa}, {0x3, 0x0, &(0x7f00000007c0)='TIPCv2\x00', &(0x7f0000000800)="c3b6474d1bde815b464e0df1cdb71b35ec1f583d54feaf81239822cdb78eb2e8d2a6948809db7f59819dabdf2c4d89d995f612022423a5f2ec91caf167acae8ee34cfa38dd7ecbc06c0921d6211ec5a289aba68769d1fbc8878d17fc676f20541465c734865e12ae6aba71057f", 0x6d}, {0x2, 0x7, &(0x7f0000000880)='+\x00', &(0x7f00000008c0)="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", 0x1000, 0xa}, {0x2, 0x2, &(0x7f00000018c0)='\x00', &(0x7f0000001900)="6c44f7277339ccdf11c83724c59a9f40e78f9aced4924572df3e4d13da1fcefef84e692def35af6509f553dc43f17174c9f8f4dacfc8a89dd002a5da77", 0x3d, 0x12}, {0x0, 0x1, &(0x7f0000001940)='\x00', &(0x7f0000001980)="0381d0133d63e5deb2bc3c7ac231d0510021c673d5840fe40212469055e599cd6a8bfa5b2d6f1be185188a5d43229a21a17bccd83698c8a44e1d4ce4f13ecead5012c0c8fb50f1e6d9475004c5022683a31e761539a93dc86402f6971ffa7556c392dc49e0673089c8dacdbb358c6b90fd773c09a75ec67afe83c2cab266409ba0e7fa9b3c194fe2d743177e3091a0ca131c800d5245651035c98d50aaaf8f7fdcb6d9db11998e12e30549c53ecf404619c6aa693512d3d2053b", 0xba}, {0x3, 0x5, &(0x7f0000001a40)='\x00', &(0x7f0000001a80)="7bdfca82c20e0e73145ecd83c04a2c40d1759b3a75dd7acaf4c881b18c2af486f045c6004c4396426c4b79e4265ad41e9b7a4a764ab6ef1875ab0a2f04e033318b7ffc1bbb724725259e494a707995b6c0a1065d1d729db0ed3e7d8613e137e4a3ceec07055ad3bf4cebd9ba2c9f0636dd5087cc56287b582a1cd8ca", 0x7c, 0x2}]}) setsockopt$XDP_UMEM_REG(r12, 0x11b, 0x4, &(0x7f0000001d80)={&(0x7f0000001c80)=""/211, 0x8000, 0x0, 0x8, 0x1}, 0x20) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)={0x13c, r10, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xa1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x200}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80}]}, @TIPC_NLA_BEARER={0x5c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @multicast2}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x537, @remote, 0x58bf}}}}]}, @TIPC_NLA_SOCK={0x68, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xad14}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x501}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8001}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffff0ef}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffffa}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x20040000}, 0x4) r13 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000000)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x58}, {{0x18, 0x1, 0x1, 0x0, r13}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x4000}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x40000000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0x7}, {0x18, 0x2, 0x2, 0x0, r13}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x6, 0x1, 0x7, 0x5}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x81}}}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) 0s ago: executing program 3 (id=6992): socket$netlink(0x10, 0x3, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[], 0x3c}}, 0x4000000) r2 = socket(0x10, 0x803, 0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000980)={r3, &(0x7f0000000280)="823154d3a71b4ee42d45c12a41d0e1474b8f731875d57f49ee70da233002b1da25c72e510980c896e8485ec6290e4da1c9cc144d967705e4add614da1a1b9652860b580e0bb11d4e53e6a8cbca0335558e5765c060bd61d3304f50cb930df19c3794b761a46d12b66618cdca51e0d7a18024f6342357e9ee07872fe1c4bb125adf36c1e80c48bfbbdb35118b0000", 0x0}, 0x20) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) socket$netlink(0x10, 0x3, 0x0) (async) r5 = socket$netlink(0x10, 0x3, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') (async) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/mnt\x00') (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/mnt\x00') r6 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x66) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="5000000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB="000300000508000a00", @ANYRES32=r7, @ANYBLOB="28001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="0040000040060000"], 0x50}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0x3}, {0x4, 0x9}}}, 0x24}}, 0x0) (async) sendmsg$nl_route_sched(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0x3}, {0x4, 0x9}}}, 0x24}}, 0x0) kernel console output (not intermixed with test programs): 7': attribute type 8 has an invalid length. [ 1032.347722][T32311] xt_hashlimit: max too large, truncated to 1048576 [ 1032.379998][T32311] xt_hashlimit: overflow, try lower: 2/0 [ 1033.095819][T32321] __nla_validate_parse: 152 callbacks suppressed [ 1033.095845][T32321] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6350'. [ 1033.164010][T32321] unsupported nlmsg_type 40 [ 1033.231474][T32325] bond13: option miimon: invalid value (18446744073709551607) [ 1033.239943][T32325] bond13: option miimon: allowed values 0 - 2147483647 [ 1033.260161][T32325] bond13 (unregistering): Released all slaves [ 1033.684852][T32340] mac80211_hwsim hwsim46 ;: renamed from wlan0 (while UP) [ 1033.803530][T32353] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6359'. [ 1033.855950][T32355] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6359'. [ 1033.865671][T32340] net_ratelimit: 15 callbacks suppressed [ 1033.865719][T32340] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1033.879425][T30195] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1033.901953][T30195] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1034.017083][T32355] netlink: 'syz.3.6359': attribute type 1 has an invalid length. [ 1034.056892][T32355] netlink: 96 bytes leftover after parsing attributes in process `syz.3.6359'. [ 1034.069857][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1034.099550][T32355] netlink: 1 bytes leftover after parsing attributes in process `syz.3.6359'. [ 1034.531602][T30195] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1034.546096][T30195] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1034.781478][T32401] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6368'. [ 1034.828924][T32401] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6368'. [ 1034.893938][T32409] netlink: 'syz.1.6370': attribute type 62 has an invalid length. [ 1034.965559][T32401] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6368'. [ 1034.999491][T32401] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6368'. [ 1035.081173][ T13] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1035.095818][ T13] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1035.109442][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1035.501661][T32431] netlink: 'syz.1.6375': attribute type 8 has an invalid length. [ 1035.601470][T32438] syzkaller1: entered promiscuous mode [ 1035.643833][T32438] syzkaller1: entered allmulticast mode [ 1035.720217][T32198] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1035.743160][T32440] xt_TCPMSS: Only works on TCP SYN packets [ 1035.816443][T32440] ip6gre1: left promiscuous mode [ 1035.895431][T32440] netlink: 'syz.2.6378': attribute type 1 has an invalid length. [ 1035.897919][T32452] netlink: 188 bytes leftover after parsing attributes in process `syz.0.6379'. [ 1035.930767][T32443] bridge0: entered allmulticast mode [ 1036.110322][T32443] pim6reg: entered allmulticast mode [ 1036.245249][T32454] gretap1: entered allmulticast mode [ 1036.446264][T32469] netlink: 'syz.1.6381': attribute type 1 has an invalid length. [ 1037.032125][T32496] bridge_slave_1: left allmulticast mode [ 1037.066411][T32496] bridge_slave_1: left promiscuous mode [ 1037.072800][T32496] bridge0: port 2(bridge_slave_1) entered disabled state [ 1037.094385][T32496] bridge_slave_0: left allmulticast mode [ 1037.100518][T32496] bridge_slave_0: left promiscuous mode [ 1037.106856][T32496] bridge0: port 1(bridge_slave_0) entered disabled state [ 1037.217004][T32496] bridge0 (unregistering): left allmulticast mode [ 1037.787705][T32530] syzkaller1: entered promiscuous mode [ 1037.822631][T32530] syzkaller1: entered allmulticast mode [ 1038.407311][T32547] __nla_validate_parse: 4 callbacks suppressed [ 1038.407332][T32547] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6397'. [ 1039.042562][T32563] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6400'. [ 1039.269413][ C0] net_ratelimit: 16 callbacks suppressed [ 1039.269436][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1039.329458][ T13] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1039.344509][ T13] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1039.920250][T30195] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1039.934685][T30195] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1040.136596][T32575] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6404'. [ 1040.148651][T32575] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6404'. [ 1040.309806][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1040.465379][T32604] netlink: 68 bytes leftover after parsing attributes in process `syz.4.6411'. [ 1040.477063][T32597] bond4: invalid ARP target 0.0.0.0 specified for addition [ 1040.497587][T32597] bond4: option arp_ip_target: invalid value (0) [ 1040.514659][T30195] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1040.529606][T30195] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1040.570968][T32597] bond4 (unregistering): Released all slaves [ 1040.583205][T32604] netlink: 'syz.4.6411': attribute type 1 has an invalid length. [ 1040.723392][T32604] bond13: entered promiscuous mode [ 1040.729109][T32604] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1040.957989][T32617] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6414'. [ 1041.129854][ T13] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1041.144328][ T13] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1041.837066][T32621] lo speed is unknown, defaulting to 1000 [ 1041.857322][T32621] lo speed is unknown, defaulting to 1000 [ 1041.891031][T32642] netlink: 'syz.0.6421': attribute type 1 has an invalid length. [ 1041.931331][T32642] netlink: 'syz.0.6421': attribute type 2 has an invalid length. [ 1042.367492][T32673] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6428'. [ 1042.522759][T32676] FAULT_INJECTION: forcing a failure. [ 1042.522759][T32676] name failslab, interval 1, probability 0, space 0, times 0 [ 1042.529906][T32678] netlink: 'syz.4.6432': attribute type 4 has an invalid length. [ 1042.558168][T32676] CPU: 1 UID: 0 PID: 32676 Comm: syz.0.6431 Not tainted syzkaller #0 PREEMPT(full) [ 1042.558197][T32676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1042.558210][T32676] Call Trace: [ 1042.558218][T32676] [ 1042.558228][T32676] dump_stack_lvl+0xe8/0x150 [ 1042.558257][T32676] should_fail_ex+0x412/0x560 [ 1042.558290][T32676] should_failslab+0xa8/0x100 [ 1042.558325][T32676] __kmalloc_cache_noprof+0x88/0x660 [ 1042.558354][T32676] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 1042.558384][T32676] ? sctp_add_bind_addr+0x8c/0x370 [ 1042.558421][T32676] sctp_add_bind_addr+0x8c/0x370 [ 1042.558456][T32676] sctp_copy_local_addr_list+0x314/0x4f0 [ 1042.558490][T32676] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 1042.558520][T32676] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1042.558553][T32676] ? sctp_v6_is_any+0x64/0x80 [ 1042.558585][T32676] ? sctp_copy_one_addr+0x93/0x360 [ 1042.558618][T32676] sctp_bind_addr_copy+0xb3/0x3c0 [ 1042.558650][T32676] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1042.558682][T32676] sctp_connect_new_asoc+0x2ff/0x6b0 [ 1042.558711][T32676] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1042.558753][T32676] ? __local_bh_enable_ip+0xd0/0x130 [ 1042.558775][T32676] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1042.558804][T32676] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1042.558833][T32676] sctp_sendmsg+0x1576/0x2c50 [ 1042.558854][T32676] ? unwind_next_frame+0xa6/0x2550 [ 1042.558899][T32676] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1042.558927][T32676] ? aa_sk_perm+0x6d5/0x900 [ 1042.558965][T32676] ? __pfx_aa_sk_perm+0x10/0x10 [ 1042.558997][T32676] ? sock_rps_record_flow+0x19/0x350 [ 1042.559032][T32676] ? inet_sendmsg+0x2f4/0x370 [ 1042.559068][T32676] ____sys_sendmsg+0x80a/0x9f0 [ 1042.559104][T32676] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1042.559140][T32676] ? import_iovec+0x73/0xa0 [ 1042.559178][T32676] ___sys_sendmsg+0x2a5/0x360 [ 1042.559204][T32676] ? __lock_acquire+0x6b5/0x2cf0 [ 1042.559233][T32676] ? __pfx____sys_sendmsg+0x10/0x10 [ 1042.559299][T32676] ? __fget_files+0x2a/0x420 [ 1042.559326][T32676] ? __fget_files+0x3a0/0x420 [ 1042.559365][T32676] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1042.559393][T32676] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1042.559429][T32676] ? __pfx_ksys_write+0x10/0x10 [ 1042.559470][T32676] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1042.559493][T32676] do_syscall_64+0x15f/0xf80 [ 1042.559512][T32676] ? trace_irq_disable+0x3b/0x140 [ 1042.559540][T32676] ? clear_bhb_loop+0x40/0x90 [ 1042.559566][T32676] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1042.559588][T32676] RIP: 0033:0x7f865a39ce59 [ 1042.559610][T32676] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1042.559629][T32676] RSP: 002b:00007f865b172028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1042.559652][T32676] RAX: ffffffffffffffda RBX: 00007f865a615fa0 RCX: 00007f865a39ce59 [ 1042.559667][T32676] RDX: 000000002600c055 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1042.559681][T32676] RBP: 00007f865b172090 R08: 0000000000000000 R09: 0000000000000000 [ 1042.559694][T32676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1042.559744][T32676] R13: 00007f865a616038 R14: 00007f865a615fa0 R15: 00007ffd3c446988 [ 1042.559779][T32676] [ 1043.078870][T32684] netlink: 'syz.0.6435': attribute type 32 has an invalid length. [ 1043.685040][T32705] netlink: 'syz.2.6440': attribute type 6 has an invalid length. [ 1043.708852][T32705] netlink: 'syz.2.6440': attribute type 7 has an invalid length. [ 1043.751359][T32705] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6440'. [ 1044.068204][T32711] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 1044.102266][T32711] CPU: 1 UID: 0 PID: 32711 Comm: syz.0.6442 Not tainted syzkaller #0 PREEMPT(full) [ 1044.102298][T32711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1044.102312][T32711] Call Trace: [ 1044.102322][T32711] [ 1044.102332][T32711] dump_stack_lvl+0xe8/0x150 [ 1044.102367][T32711] sysfs_warn_dup+0x8e/0xa0 [ 1044.102397][T32711] sysfs_do_create_link_sd+0xc0/0x110 [ 1044.102429][T32711] device_add_class_symlinks+0x1cf/0x240 [ 1044.102464][T32711] device_add+0x475/0xbb0 [ 1044.102498][T32711] wiphy_register+0x1fb1/0x2fe0 [ 1044.102564][T32711] ? __pfx_wiphy_register+0x10/0x10 [ 1044.102599][T32711] ? __pfx_netdev_run_todo+0x10/0x10 [ 1044.102626][T32711] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 1044.102662][T32711] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 1044.102702][T32711] ieee80211_register_hw+0x3c53/0x4910 [ 1044.102742][T32711] ? ieee80211_register_hw+0x1961/0x4910 [ 1044.102800][T32711] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 1044.102828][T32711] ? __asan_memset+0x22/0x50 [ 1044.102856][T32711] ? __hrtimer_setup+0x1b7/0x260 [ 1044.102882][T32711] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1044.102920][T32711] mac80211_hwsim_new_radio+0x3306/0x57b0 [ 1044.102996][T32711] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1044.103034][T32711] ? __asan_memcpy+0x40/0x70 [ 1044.103068][T32711] hwsim_new_radio_nl+0xd96/0xfa0 [ 1044.103121][T32711] genl_family_rcv_msg_doit+0x22a/0x330 [ 1044.103163][T32711] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1044.103213][T32711] ? bpf_lsm_capable+0x9/0x20 [ 1044.103235][T32711] ? security_capable+0x7e/0x2c0 [ 1044.103274][T32711] genl_rcv_msg+0x61c/0x7a0 [ 1044.103314][T32711] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1044.103344][T32711] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1044.103395][T32711] netlink_rcv_skb+0x232/0x4b0 [ 1044.103423][T32711] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1044.103456][T32711] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1044.103511][T32711] ? down_read+0x270/0x2e0 [ 1044.103536][T32711] ? genl_rcv+0xd/0x40 [ 1044.103567][T32711] genl_rcv+0x28/0x40 [ 1044.103597][T32711] netlink_unicast+0x75c/0x8e0 [ 1044.103635][T32711] netlink_sendmsg+0x813/0xb40 [ 1044.103675][T32711] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1044.103705][T32711] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1044.103737][T32711] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1044.103771][T32711] ____sys_sendmsg+0x972/0x9f0 [ 1044.103797][T32711] ? __might_fault+0xaf/0x130 [ 1044.103833][T32711] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1044.103871][T32711] ? import_iovec+0x73/0xa0 [ 1044.103910][T32711] ___sys_sendmsg+0x2a5/0x360 [ 1044.103934][T32711] ? __lock_acquire+0x6b5/0x2cf0 [ 1044.103964][T32711] ? __pfx____sys_sendmsg+0x10/0x10 [ 1044.103997][T32711] ? futex_wait+0x2a2/0x390 [ 1044.104060][T32711] ? __fget_files+0x2a/0x420 [ 1044.104085][T32711] ? __fget_files+0x3a0/0x420 [ 1044.104123][T32711] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1044.104149][T32711] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1044.104184][T32711] ? rcu_is_watching+0x15/0xb0 [ 1044.104223][T32711] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1044.104248][T32711] do_syscall_64+0x15f/0xf80 [ 1044.104270][T32711] ? trace_irq_disable+0x3b/0x140 [ 1044.104303][T32711] ? clear_bhb_loop+0x40/0x90 [ 1044.104332][T32711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1044.104354][T32711] RIP: 0033:0x7f865a39ce59 [ 1044.104377][T32711] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1044.104395][T32711] RSP: 002b:00007f865b172028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1044.104421][T32711] RAX: ffffffffffffffda RBX: 00007f865a615fa0 RCX: 00007f865a39ce59 [ 1044.104437][T32711] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004 [ 1044.104452][T32711] RBP: 00007f865a432d6f R08: 0000000000000000 R09: 0000000000000000 [ 1044.104465][T32711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1044.104479][T32711] R13: 00007f865a616038 R14: 00007f865a615fa0 R15: 00007ffd3c446988 [ 1044.104529][T32711] [ 1044.470232][ C0] net_ratelimit: 14 callbacks suppressed [ 1044.470250][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1044.537821][ T13] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1044.552954][ T13] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1044.711714][T28678] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1044.755574][T28678] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1044.772106][T28678] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1044.790443][T28678] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1044.800210][T28678] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1045.221242][T30206] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1045.235962][T30206] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1045.407313][T32743] FAULT_INJECTION: forcing a failure. [ 1045.407313][T32743] name failslab, interval 1, probability 0, space 0, times 0 [ 1045.445845][T32743] CPU: 1 UID: 0 PID: 32743 Comm: syz.0.6451 Not tainted syzkaller #0 PREEMPT(full) [ 1045.445878][T32743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1045.445891][T32743] Call Trace: [ 1045.445900][T32743] [ 1045.445910][T32743] dump_stack_lvl+0xe8/0x150 [ 1045.445944][T32743] should_fail_ex+0x412/0x560 [ 1045.445980][T32743] should_failslab+0xa8/0x100 [ 1045.446016][T32743] __kmalloc_cache_noprof+0x88/0x660 [ 1045.446046][T32743] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 1045.446076][T32743] ? sctp_add_bind_addr+0x8c/0x370 [ 1045.446120][T32743] sctp_add_bind_addr+0x8c/0x370 [ 1045.446156][T32743] sctp_copy_local_addr_list+0x314/0x4f0 [ 1045.446191][T32743] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 1045.446222][T32743] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1045.446254][T32743] ? sctp_v6_is_any+0x64/0x80 [ 1045.446288][T32743] ? sctp_copy_one_addr+0x93/0x360 [ 1045.446322][T32743] sctp_bind_addr_copy+0xb3/0x3c0 [ 1045.446360][T32743] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1045.446390][T32743] sctp_connect_new_asoc+0x2ff/0x6b0 [ 1045.446420][T32743] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1045.446453][T32743] ? __local_bh_enable_ip+0xd0/0x130 [ 1045.446475][T32743] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1045.446504][T32743] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1045.446534][T32743] sctp_sendmsg+0x1576/0x2c50 [ 1045.446555][T32743] ? unwind_next_frame+0xa6/0x2550 [ 1045.446601][T32743] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1045.446631][T32743] ? aa_sk_perm+0x6d5/0x900 [ 1045.446669][T32743] ? __pfx_aa_sk_perm+0x10/0x10 [ 1045.446702][T32743] ? sock_rps_record_flow+0x19/0x350 [ 1045.446737][T32743] ? inet_sendmsg+0x2f4/0x370 [ 1045.446781][T32743] ____sys_sendmsg+0x80a/0x9f0 [ 1045.446818][T32743] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1045.446855][T32743] ? import_iovec+0x73/0xa0 [ 1045.446891][T32743] ___sys_sendmsg+0x2a5/0x360 [ 1045.446913][T32743] ? __lock_acquire+0x6b5/0x2cf0 [ 1045.446943][T32743] ? __pfx____sys_sendmsg+0x10/0x10 [ 1045.447012][T32743] ? __fget_files+0x2a/0x420 [ 1045.447037][T32743] ? __fget_files+0x3a0/0x420 [ 1045.447076][T32743] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1045.447104][T32743] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1045.447140][T32743] ? __pfx_ksys_write+0x10/0x10 [ 1045.447183][T32743] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1045.447207][T32743] do_syscall_64+0x15f/0xf80 [ 1045.447227][T32743] ? trace_irq_disable+0x3b/0x140 [ 1045.447258][T32743] ? clear_bhb_loop+0x40/0x90 [ 1045.447286][T32743] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1045.447308][T32743] RIP: 0033:0x7f865a39ce59 [ 1045.447329][T32743] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1045.447348][T32743] RSP: 002b:00007f865b172028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1045.447373][T32743] RAX: ffffffffffffffda RBX: 00007f865a615fa0 RCX: 00007f865a39ce59 [ 1045.447389][T32743] RDX: 000000002600c055 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1045.447403][T32743] RBP: 00007f865b172090 R08: 0000000000000000 R09: 0000000000000000 [ 1045.447417][T32743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1045.447431][T32743] R13: 00007f865a616038 R14: 00007f865a615fa0 R15: 00007ffd3c446988 [ 1045.447469][T32743] [ 1045.509512][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1045.851345][T32199] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1045.865842][T32199] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1045.923714][T32754] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 1046.283994][T32717] lo speed is unknown, defaulting to 1000 [ 1046.297775][T32717] lo speed is unknown, defaulting to 1000 [ 1046.413741][ T309] netlink: 'syz.1.6461': attribute type 24 has an invalid length. [ 1046.424485][ T13] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1046.439449][ T13] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1046.476134][ T312] xt_CONNSECMARK: invalid mode: 254 [ 1046.483007][ T312] ip6t_srh: unknown srh invflags 4000 [ 1046.863713][ T325] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6466'. [ 1046.952721][T28678] Bluetooth: hci0: command tx timeout [ 1047.102772][ T336] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6469'. [ 1047.296602][T32717] bridge0: port 1(bridge_slave_0) entered blocking state [ 1047.304232][T32717] bridge0: port 1(bridge_slave_0) entered disabled state [ 1047.312048][T32717] bridge_slave_0: entered allmulticast mode [ 1047.321121][T32717] bridge_slave_0: entered promiscuous mode [ 1047.331674][T32717] bridge0: port 2(bridge_slave_1) entered blocking state [ 1047.339175][T32717] bridge0: port 2(bridge_slave_1) entered disabled state [ 1047.346968][T32717] bridge_slave_1: entered allmulticast mode [ 1047.356115][T32717] bridge_slave_1: entered promiscuous mode [ 1047.404354][T32717] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1047.420859][T32717] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1047.469620][T32717] team0: Port device team_slave_0 added [ 1047.479988][T32717] team0: Port device team_slave_1 added [ 1047.525056][T32717] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1047.532474][T32717] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1047.559023][T32717] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1047.573935][T32717] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1047.593169][T32717] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1047.649597][T32717] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1047.766137][T32717] hsr_slave_0: entered promiscuous mode [ 1047.773805][T32717] hsr_slave_1: entered promiscuous mode [ 1047.781303][T32717] debugfs: 'hsr0' already exists in 'hsr' [ 1047.787360][T32717] Cannot create hsr debugfs directory [ 1048.158073][T32717] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1048.172076][T32717] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1048.184399][T32717] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1048.195697][T32717] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 1048.431513][T32717] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1048.443795][ T351] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6473'. [ 1048.456771][T32717] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1048.480911][T32717] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1048.501662][T32717] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 1048.808999][T32717] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1048.842973][T32717] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1048.867513][T32717] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1048.892321][T32717] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 1049.029843][T28678] Bluetooth: hci0: command tx timeout [ 1049.079588][T32717] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1049.099348][T32717] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1049.123235][T32717] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1049.134118][T32717] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 1049.197305][ T369] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.6478'. [ 1049.226628][ T369] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6478'. [ 1049.249385][ T369] netlink: 7 bytes leftover after parsing attributes in process `syz.0.6478'. [ 1049.529779][T32198] net_ratelimit: 14 callbacks suppressed [ 1049.529802][T32198] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1049.550558][T32198] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1049.625916][T32717] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1049.636559][T32717] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1049.650440][T32717] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1049.669445][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1049.670643][T32717] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1049.685247][T32717] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1049.698864][T32717] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1049.707912][T32717] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1049.719255][T32717] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1049.908680][T32717] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1049.964802][T32717] 8021q: adding VLAN 0 to HW filter on device team0 [ 1050.006524][T30193] bridge0: port 1(bridge_slave_0) entered blocking state [ 1050.013700][T30193] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1050.024675][ T396] IPVS: set_ctl: invalid protocol: 51 100.1.1.0:20002 [ 1050.044048][T30195] bridge0: port 2(bridge_slave_1) entered blocking state [ 1050.051192][T30195] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1050.109555][T32198] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1050.124189][T32198] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1050.131497][T32717] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1050.159518][T32717] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1050.266331][ T399] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1050.364595][ T404] netlink: 'syz.0.6486': attribute type 1 has an invalid length. [ 1050.444704][ T404] bond4: (slave geneve2): making interface the new active one [ 1050.453823][ T404] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 1050.465176][T32199] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1050.468273][ T404] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6486'. [ 1050.487089][T32199] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1050.496360][T32198] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1050.526155][ T404] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1050.537384][T32198] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1050.651057][T30195] bond2: (slave gretap0): link status up again after 0 ms [ 1050.661415][T32198] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1050.676518][T32198] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1050.707178][ T415] netlink: 5 bytes leftover after parsing attributes in process `syz.3.6485'. [ 1050.716683][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1050.749969][ T415] 0{X: renamed from gretap0 (while UP) [ 1050.751682][T32199] bond2: (slave gretap0): link status up again after 0 ms [ 1050.798762][ T415] 0{X: entered allmulticast mode [ 1051.008965][T32717] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1051.109932][T28678] Bluetooth: hci0: command tx timeout [ 1051.150858][ T437] FAULT_INJECTION: forcing a failure. [ 1051.150858][ T437] name failslab, interval 1, probability 0, space 0, times 0 [ 1051.163872][ T437] CPU: 0 UID: 0 PID: 437 Comm: syz.0.6491 Not tainted syzkaller #0 PREEMPT(full) [ 1051.163903][ T437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1051.163916][ T437] Call Trace: [ 1051.163924][ T437] [ 1051.163933][ T437] dump_stack_lvl+0xe8/0x150 [ 1051.163964][ T437] should_fail_ex+0x412/0x560 [ 1051.163997][ T437] should_failslab+0xa8/0x100 [ 1051.164031][ T437] __kmalloc_cache_noprof+0x88/0x660 [ 1051.164060][ T437] ? sctp_add_bind_addr+0x8c/0x370 [ 1051.164096][ T437] sctp_add_bind_addr+0x8c/0x370 [ 1051.164128][ T437] sctp_copy_local_addr_list+0x314/0x4f0 [ 1051.164160][ T437] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 1051.164190][ T437] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1051.164219][ T437] ? sctp_v6_is_any+0x64/0x80 [ 1051.164251][ T437] ? sctp_copy_one_addr+0x93/0x360 [ 1051.164283][ T437] sctp_bind_addr_copy+0xb3/0x3c0 [ 1051.164315][ T437] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1051.164347][ T437] sctp_connect_new_asoc+0x2ff/0x6b0 [ 1051.164374][ T437] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1051.164404][ T437] ? __local_bh_enable_ip+0xd0/0x130 [ 1051.164425][ T437] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1051.164455][ T437] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1051.164484][ T437] sctp_sendmsg+0x1576/0x2c50 [ 1051.164505][ T437] ? unwind_next_frame+0xa6/0x2550 [ 1051.164551][ T437] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1051.164577][ T437] ? aa_sk_perm+0x6d5/0x900 [ 1051.164623][ T437] ? __pfx_aa_sk_perm+0x10/0x10 [ 1051.164654][ T437] ? sock_rps_record_flow+0x19/0x350 [ 1051.164690][ T437] ? inet_sendmsg+0x2f4/0x370 [ 1051.164726][ T437] ____sys_sendmsg+0x80a/0x9f0 [ 1051.164763][ T437] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1051.164799][ T437] ? import_iovec+0x73/0xa0 [ 1051.164836][ T437] ___sys_sendmsg+0x2a5/0x360 [ 1051.164859][ T437] ? __lock_acquire+0x6b5/0x2cf0 [ 1051.164890][ T437] ? __pfx____sys_sendmsg+0x10/0x10 [ 1051.164960][ T437] ? __fget_files+0x2a/0x420 [ 1051.164984][ T437] ? __fget_files+0x3a0/0x420 [ 1051.165022][ T437] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1051.165055][ T437] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1051.165092][ T437] ? __pfx_ksys_write+0x10/0x10 [ 1051.165134][ T437] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1051.165159][ T437] do_syscall_64+0x15f/0xf80 [ 1051.165181][ T437] ? trace_irq_disable+0x3b/0x140 [ 1051.165214][ T437] ? clear_bhb_loop+0x40/0x90 [ 1051.165242][ T437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1051.165263][ T437] RIP: 0033:0x7f865a39ce59 [ 1051.165285][ T437] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1051.165303][ T437] RSP: 002b:00007f865b172028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1051.165328][ T437] RAX: ffffffffffffffda RBX: 00007f865a615fa0 RCX: 00007f865a39ce59 [ 1051.165344][ T437] RDX: 000000002600c055 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1051.165357][ T437] RBP: 00007f865b172090 R08: 0000000000000000 R09: 0000000000000000 [ 1051.165370][ T437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1051.165383][ T437] R13: 00007f865a616038 R14: 00007f865a615fa0 R15: 00007ffd3c446988 [ 1051.165421][ T437] [ 1051.377268][T32717] veth0_vlan: entered promiscuous mode [ 1051.513338][T32717] veth1_vlan: entered promiscuous mode [ 1051.579647][T32717] veth0_macvtap: entered promiscuous mode [ 1051.598896][T32717] veth1_macvtap: entered promiscuous mode [ 1051.623474][T32717] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1051.637613][T32717] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1051.656329][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1051.665364][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1051.677863][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1051.687987][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1052.623655][ T379] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1052.846368][T32198] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1052.877111][T32198] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1052.993891][T30206] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1053.021367][T30206] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1053.065221][ T461] IPVS: set_ctl: invalid protocol: 44 172.20.20.34:20001 [ 1053.106831][ T461] netlink: 244 bytes leftover after parsing attributes in process `syz.2.6497'. [ 1053.147874][ T468] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.6499'. [ 1053.187662][ T472] netlink: 'syz.0.6500': attribute type 10 has an invalid length. [ 1053.190410][T28678] Bluetooth: hci0: command tx timeout [ 1053.202219][ T472] netlink: 16154 bytes leftover after parsing attributes in process `syz.0.6500'. [ 1053.213011][ T465] netlink: 'syz.1.6499': attribute type 2 has an invalid length. [ 1053.234700][ T468] netlink: 'syz.1.6499': attribute type 2 has an invalid length. [ 1053.606201][ T498] IPv6: Can't replace route, no match found [ 1053.741774][ T501] sctp: [Deprecated]: syz.2.6506 (pid 501) Use of int in maxseg socket option. [ 1053.741774][ T501] Use struct sctp_assoc_value instead [ 1054.155638][ T516] tap0: tun_chr_ioctl cmd 1074025681 [ 1054.265205][ T50] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1054.281734][ T50] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1054.298969][ T50] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1054.311964][ T50] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1054.327960][ T50] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1054.540054][T30206] net_ratelimit: 45 callbacks suppressed [ 1054.577024][T30206] bond2: (slave gretap0): failed to get link speed/duplex [ 1054.787931][T20641] bond0: (slave syz_tun): Releasing backup interface [ 1054.801722][T20641] syz_tun (unregistering): left promiscuous mode [ 1054.839359][ T13] bond2: (slave gretap0): failed to get link speed/duplex [ 1054.869441][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1054.892863][T30195] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1054.907489][T30195] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1054.966000][ T536] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6513'. [ 1054.983223][T30195] bond2: (slave gretap0): failed to get link speed/duplex [ 1055.117586][T30195] bond2: (slave gretap0): failed to get link speed/duplex [ 1055.250468][T30193] bond2: (slave gretap0): failed to get link speed/duplex [ 1055.396187][T30206] bond2: (slave gretap0): failed to get link speed/duplex [ 1055.444986][T12469] IPVS: starting estimator thread 0... [ 1055.451427][ T560] IPVS: ip_vs_edit_dest(): server weight less than zero [ 1055.460417][T30192] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1055.550562][ T561] IPVS: using max 26 ests per chain, 62400 per kthread [ 1056.195353][ T521] lo speed is unknown, defaulting to 1000 [ 1056.247691][ T521] lo speed is unknown, defaulting to 1000 [ 1056.311531][ T575] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6523'. [ 1056.391119][ T50] Bluetooth: hci2: command tx timeout [ 1056.425119][ T581] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6524'. [ 1056.951481][ T591] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6526'. [ 1057.025173][ T594] netlink: 'syz.1.6527': attribute type 1 has an invalid length. [ 1057.037803][ T594] netlink: 936 bytes leftover after parsing attributes in process `syz.1.6527'. [ 1057.103327][ T591] bond3: entered promiscuous mode [ 1057.109071][ T591] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1057.225245][ T599] bond1: option min_links: invalid value (18446744073709551612) [ 1057.252671][ T599] bond1: option min_links: allowed values 0 - 2147483647 [ 1057.270756][ T599] bond1 (unregistering): Released all slaves [ 1057.438614][ T604] syzkaller1: entered promiscuous mode [ 1057.465632][ T604] syzkaller1: entered allmulticast mode [ 1057.484217][ T615] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6532'. [ 1057.543538][ T619] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6532'. [ 1058.095798][ T645] Bluetooth: MGMT ver 1.23 [ 1058.366600][ T648] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6540'. [ 1058.471587][ T521] bridge0: port 1(bridge_slave_0) entered blocking state [ 1058.490179][ T50] Bluetooth: hci2: command tx timeout [ 1058.495867][ T521] bridge0: port 1(bridge_slave_0) entered disabled state [ 1058.510155][ T521] bridge_slave_0: entered allmulticast mode [ 1058.528231][ T521] bridge_slave_0: entered promiscuous mode [ 1058.557873][ T521] bridge0: port 2(bridge_slave_1) entered blocking state [ 1058.588205][ T521] bridge0: port 2(bridge_slave_1) entered disabled state [ 1058.607495][ T521] bridge_slave_1: entered allmulticast mode [ 1058.632295][ T521] bridge_slave_1: entered promiscuous mode [ 1058.716598][ T666] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6546'. [ 1058.772328][ T666] tipc: Started in network mode [ 1058.790624][ T666] tipc: Node identity ac14140f, cluster identity 4711 [ 1058.816777][ T666] tipc: New replicast peer: 172.20.20.170 [ 1058.835494][ T666] tipc: Enabled bearer , priority 10 [ 1058.843723][ T674] xt_l2tp: v2 sid > 0xffff: 8388608 [ 1058.863866][ T521] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1058.873894][ T674] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6548'. [ 1058.874327][ T666] netlink: 'syz.4.6546': attribute type 89 has an invalid length. [ 1058.908738][ T521] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1058.931086][ T671] tipc: New replicast peer: ff02:0000:0000:0000:0000:0000:0000:0001 [ 1059.161822][ T521] team0: Port device team_slave_0 added [ 1059.221386][ T521] team0: Port device team_slave_1 added [ 1059.366292][ T521] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1059.381388][ T521] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1059.428976][ T521] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1059.476257][ T521] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1059.495389][ T521] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1059.527637][ T521] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1059.580140][T30192] net_ratelimit: 40 callbacks suppressed [ 1059.580164][T30192] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1059.600519][T30192] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1059.876305][ T521] hsr_slave_0: entered promiscuous mode [ 1059.889665][ T521] hsr_slave_1: entered promiscuous mode [ 1059.896813][ T521] debugfs: 'hsr0' already exists in 'hsr' [ 1059.903734][ T521] Cannot create hsr debugfs directory [ 1059.916710][T30269] tipc: Node number set to 2886997007 [ 1060.069447][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1060.120018][T32199] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1060.134663][T32199] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1060.374143][T30193] bond2: (slave gretap0): failed to get link speed/duplex [ 1060.450279][ T521] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1060.464927][ T521] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1060.492365][ T714] netlink: 68 bytes leftover after parsing attributes in process `syz.2.6561'. [ 1060.523571][ T709] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.6561'. [ 1060.559843][ T50] Bluetooth: hci2: command tx timeout [ 1060.565356][T30193] bond2: (slave gretap0): failed to get link speed/duplex [ 1060.606482][ T521] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1060.649352][ T521] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1060.672630][T30192] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1060.687257][T30192] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1060.723069][T30193] bond2: (slave gretap0): failed to get link speed/duplex [ 1060.838316][ T521] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1060.842504][ T729] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6566'. [ 1060.875039][ T521] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1060.980199][ T521] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1061.002354][ T521] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1061.645289][ T762] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6575'. [ 1061.692660][ T765] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6576'. [ 1061.790931][ T521] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1061.815900][ T521] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1061.832600][ T773] netlink: 92 bytes leftover after parsing attributes in process `syz.0.6578'. [ 1061.843281][ T521] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1061.870521][ T521] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1061.900384][ T521] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1061.926082][ T521] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1061.946397][ T521] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1061.980943][ T521] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1062.270204][ T521] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1062.300263][ T521] 8021q: adding VLAN 0 to HW filter on device team0 [ 1062.337174][T30195] bridge0: port 1(bridge_slave_0) entered blocking state [ 1062.344672][T30195] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1062.400819][ T802] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input16 [ 1062.426882][T30195] bridge0: port 2(bridge_slave_1) entered blocking state [ 1062.434198][T30195] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1062.515539][ T804] team0: Device vlan2 is already an upper device of the team interface [ 1062.535702][ T810] netlink: 'syz.2.6588': attribute type 10 has an invalid length. [ 1062.545348][ T810] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6588'. [ 1062.578330][ T810] team0: Port device geneve1 added [ 1062.592059][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1062.603257][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1062.615823][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1062.628256][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1062.639517][T28678] Bluetooth: hci2: command tx timeout [ 1062.644028][ T810] netlink: 'syz.2.6588': attribute type 10 has an invalid length. [ 1062.663421][ T810] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6588'. [ 1062.739974][ T13] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1062.771321][ T13] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1062.807767][ T13] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1062.826987][ T13] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1063.556889][ T844] netlink: 'syz.0.6595': attribute type 1 has an invalid length. [ 1064.106562][ T853] netlink: 104 bytes leftover after parsing attributes in process `syz.2.6597'. [ 1064.275247][ T521] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1064.467569][ T521] veth0_vlan: entered promiscuous mode [ 1064.535704][ T521] veth1_vlan: entered promiscuous mode [ 1064.609071][ T521] veth0_macvtap: entered promiscuous mode [ 1064.650098][ T13] net_ratelimit: 42 callbacks suppressed [ 1064.650120][ T13] bond2: (slave gretap0): failed to get link speed/duplex [ 1064.696902][ T521] veth1_macvtap: entered promiscuous mode [ 1064.722890][ T865] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6603'. [ 1064.738933][ T870] syzkaller1: entered promiscuous mode [ 1064.745379][ T870] syzkaller1: entered allmulticast mode [ 1064.780764][T32199] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1064.795711][T32199] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1064.818202][T30193] bond2: (slave gretap0): failed to get link speed/duplex [ 1064.969693][T32199] bond2: (slave gretap0): failed to get link speed/duplex [ 1065.042472][ T521] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1065.088735][ T521] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1065.131859][T32199] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1065.145568][T32199] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1065.174059][T32199] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1065.203530][T32199] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1065.269896][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1065.334014][T30192] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1065.348561][T30192] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1065.523115][ T13] bond2: (slave gretap0): failed to get link speed/duplex [ 1065.625248][T30193] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1065.638704][ T882] __nla_validate_parse: 1 callbacks suppressed [ 1065.638725][ T882] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6606'. [ 1065.655650][T30193] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1065.679908][T30206] bond2: (slave gretap0): failed to get link speed/duplex [ 1065.811304][T30192] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1065.839927][T30192] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1065.843069][ T887] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6608'. [ 1065.897401][ T872] lo speed is unknown, defaulting to 1000 [ 1065.921149][ T872] lo speed is unknown, defaulting to 1000 [ 1065.948288][ T891] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 1065.959183][ T891] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 1065.972196][ T891] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 1066.018665][ T893] pim6reg: entered allmulticast mode [ 1066.046275][ T893] pim6reg: left allmulticast mode [ 1066.307248][ T903] netlink: 'syz.1.6612': attribute type 11 has an invalid length. [ 1066.764286][ T921] syzkaller0: entered promiscuous mode [ 1066.799514][ T921] syzkaller0: entered allmulticast mode [ 1066.813947][ T927] FAULT_INJECTION: forcing a failure. [ 1066.813947][ T927] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1066.854479][ T927] CPU: 1 UID: 0 PID: 927 Comm: syz.3.6617 Not tainted syzkaller #0 PREEMPT(full) [ 1066.854507][ T927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1066.854519][ T927] Call Trace: [ 1066.854528][ T927] [ 1066.854536][ T927] dump_stack_lvl+0xe8/0x150 [ 1066.854565][ T927] should_fail_ex+0x412/0x560 [ 1066.854598][ T927] _copy_to_user+0x31/0xb0 [ 1066.854629][ T927] bpf_test_finish+0x1db/0x6b0 [ 1066.854663][ T927] ? __pfx_bpf_test_finish+0x10/0x10 [ 1066.854691][ T927] ? _copy_from_user+0x94/0xb0 [ 1066.854719][ T927] ? bpf_test_init+0x113/0x150 [ 1066.854741][ T927] bpf_prog_test_run_xdp+0x8fa/0x1160 [ 1066.854782][ T927] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1066.854811][ T927] ? __fget_files+0x2a/0x420 [ 1066.854840][ T927] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1066.854862][ T927] bpf_prog_test_run+0x2c7/0x340 [ 1066.854887][ T927] __sys_bpf+0x643/0x950 [ 1066.854918][ T927] ? __pfx___sys_bpf+0x10/0x10 [ 1066.854965][ T927] ? ksys_write+0x242/0x270 [ 1066.854994][ T927] ? __pfx_ksys_write+0x10/0x10 [ 1066.855026][ T927] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1066.855047][ T927] __x64_sys_bpf+0x7c/0x90 [ 1066.855074][ T927] do_syscall_64+0x15f/0xf80 [ 1066.855092][ T927] ? trace_irq_disable+0x3b/0x140 [ 1066.855119][ T927] ? clear_bhb_loop+0x40/0x90 [ 1066.855143][ T927] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1066.855167][ T927] RIP: 0033:0x7f12f739ce59 [ 1066.855187][ T927] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1066.855203][ T927] RSP: 002b:00007f12f817f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1066.855225][ T927] RAX: ffffffffffffffda RBX: 00007f12f7615fa0 RCX: 00007f12f739ce59 [ 1066.855240][ T927] RDX: 0000000000000050 RSI: 0000200000000180 RDI: 000000000000000a [ 1066.855252][ T927] RBP: 00007f12f817f090 R08: 0000000000000000 R09: 0000000000000000 [ 1066.855264][ T927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1066.855275][ T927] R13: 00007f12f7616038 R14: 00007f12f7615fa0 R15: 00007fff221d71f8 [ 1066.855308][ T927] [ 1067.076878][ T929] netlink: 'syz.1.6618': attribute type 3 has an invalid length. [ 1067.084759][ T929] netlink: 'syz.1.6618': attribute type 16 has an invalid length. [ 1067.092710][ T929] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6618'. [ 1067.102678][ T929] netlink: 'syz.1.6618': attribute type 11 has an invalid length. [ 1067.419050][ T937] netlink: 14 bytes leftover after parsing attributes in process `syz.4.6619'. [ 1067.458921][ T946] xt_nfacct: accounting object `syz0' does not exist [ 1067.504836][ T937] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1067.546549][ T937] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1067.586243][ T937] bond0 (unregistering): Released all slaves [ 1067.804550][ T957] IPv6: Can't replace route, no match found [ 1067.850352][ T957] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6623'. [ 1068.057094][ T964] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6626'. [ 1068.115090][ T975] geneve3: entered promiscuous mode [ 1068.158093][T30195] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1068.168961][ T964] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6626'. [ 1068.177839][T30195] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1068.214766][T30195] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1068.255155][T30195] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1068.431455][ T996] IPVS: set_ctl: invalid protocol: 0 10.1.1.0:20001 [ 1068.549624][ T996] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1068.885877][ T1019] netlink: 'syz.0.6638': attribute type 1 has an invalid length. [ 1069.049091][ T1021] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1069.097905][ T1021] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 1069.211398][ T1038] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6639'. [ 1069.317506][ T1024] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1069.355595][ T1024] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 1069.471264][ T1001] lo speed is unknown, defaulting to 1000 [ 1069.535635][ T1032] : entered promiscuous mode [ 1069.554143][ T1001] lo speed is unknown, defaulting to 1000 [ 1069.739537][T32199] net_ratelimit: 40 callbacks suppressed [ 1069.739563][T32199] bond2: (slave gretap0): failed to get link speed/duplex [ 1069.901935][T30206] bond2: (slave gretap0): failed to get link speed/duplex [ 1070.002227][T32198] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1070.016697][T32198] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1070.040445][T30195] bond2: (slave gretap0): failed to get link speed/duplex [ 1070.161614][T30195] bond2: (slave gretap0): failed to get link speed/duplex [ 1070.291977][T32198] bond2: (slave gretap0): failed to get link speed/duplex [ 1070.457680][ T1037] lo speed is unknown, defaulting to 1000 [ 1070.459761][T32198] bond2: (slave gretap0): failed to get link speed/duplex [ 1070.470960][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1070.522429][ T1037] lo speed is unknown, defaulting to 1000 [ 1070.600592][T32198] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1071.395023][ T997] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1071.739145][ T1085] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6648'. [ 1071.763072][ T1085] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6648'. [ 1072.457090][ T1110] netlink: 14 bytes leftover after parsing attributes in process `syz.0.6656'. [ 1072.486194][ T1112] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6656'. [ 1072.539735][ T1116] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6657'. [ 1072.797680][ T1110] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1072.831612][ T1110] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1072.863097][ T1110] bond0 (unregistering): Released all slaves [ 1073.624551][ T1136] bond2: Unable to set up delay as MII monitoring is disabled [ 1073.668582][ T1136] bond2 (unregistering): Released all slaves [ 1073.835806][ T1104] lo speed is unknown, defaulting to 1000 [ 1073.857214][ T1104] lo speed is unknown, defaulting to 1000 [ 1074.056430][ T1148] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6666'. [ 1074.082807][ T1148] netlink: 240 bytes leftover after parsing attributes in process `syz.3.6666'. [ 1074.148007][ T1152] netlink: 'syz.1.6668': attribute type 1 has an invalid length. [ 1074.285805][ T1162] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6668'. [ 1074.332345][ T1152] bond2: entered promiscuous mode [ 1074.340702][ T1152] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1074.588696][ T1122] lo speed is unknown, defaulting to 1000 [ 1074.635130][ T1122] lo speed is unknown, defaulting to 1000 [ 1074.708385][ T1176] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6672'. [ 1074.794239][T30195] net_ratelimit: 45 callbacks suppressed [ 1074.794263][T30195] bond2: (slave gretap0): failed to get link speed/duplex [ 1074.990925][T30193] bond2: (slave gretap0): failed to get link speed/duplex [ 1075.119520][T32198] bond2: (slave gretap0): failed to get link speed/duplex [ 1075.230896][T30195] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1075.245645][T30195] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1075.265372][T30206] bond2: (slave gretap0): failed to get link speed/duplex [ 1075.669608][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1075.709409][T30206] bond2: (slave gretap0): failed to get link speed/duplex [ 1075.863478][T30192] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1075.878336][T30192] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1077.340018][ T1229] netlink: 68 bytes leftover after parsing attributes in process `syz.0.6687'. [ 1077.365770][ T1228] netlink: 68 bytes leftover after parsing attributes in process `syz.0.6687'. [ 1078.108099][ T1249] tipc: Started in network mode [ 1078.132167][ T1249] tipc: Node identity 26bc8dc8a48d, cluster identity 4711 [ 1078.162983][ T1249] tipc: Enabled bearer , priority 0 [ 1078.213807][ T1250] syzkaller0: entered promiscuous mode [ 1078.231462][ T1250] syzkaller0: entered allmulticast mode [ 1078.243073][ T1253] tipc: Started in network mode [ 1078.251027][ T1253] tipc: Node identity 4636e6b4672f, cluster identity 4711 [ 1078.259570][ T1253] tipc: Enabled bearer , priority 0 [ 1078.281075][ T1247] tipc: Resetting bearer [ 1078.371405][ T1247] tipc: Disabling bearer [ 1078.407043][ T1251] tipc: Disabling bearer [ 1078.587855][ T1266] batadv_slave_1: entered promiscuous mode [ 1078.617142][ T1265] batadv_slave_1: left promiscuous mode [ 1078.918626][ T1280] netlink: 'syz.1.6701': attribute type 32 has an invalid length. [ 1078.972073][ T1280] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6701'. [ 1079.054664][ T1287] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6703'. [ 1079.117051][ T1244] lo speed is unknown, defaulting to 1000 [ 1079.141999][ T1244] lo speed is unknown, defaulting to 1000 [ 1079.708455][ T1315] batadv_slave_1: entered promiscuous mode [ 1079.723169][ T1312] batadv_slave_1: left promiscuous mode [ 1079.829436][ C0] net_ratelimit: 43 callbacks suppressed [ 1079.829459][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1079.890850][ T1321] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6712'. [ 1080.003712][ T1321] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6712'. [ 1080.039454][ T13] bond2: (slave gretap0): failed to get link speed/duplex [ 1080.039512][T30192] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1080.061410][T30192] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1080.165792][T30192] bond2: (slave gretap0): failed to get link speed/duplex [ 1080.180360][ T1307] lo speed is unknown, defaulting to 1000 [ 1080.194056][ T1307] lo speed is unknown, defaulting to 1000 [ 1080.290543][ T13] bond2: (slave gretap0): failed to get link speed/duplex [ 1080.437935][ T1328] FAULT_INJECTION: forcing a failure. [ 1080.437935][ T1328] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1080.452004][ T13] bond2: (slave gretap0): failed to get link speed/duplex [ 1080.461693][ T1328] CPU: 0 UID: 0 PID: 1328 Comm: syz.4.6714 Not tainted syzkaller #0 PREEMPT(full) [ 1080.461722][ T1328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1080.461735][ T1328] Call Trace: [ 1080.461743][ T1328] [ 1080.461753][ T1328] dump_stack_lvl+0xe8/0x150 [ 1080.461784][ T1328] should_fail_ex+0x412/0x560 [ 1080.461821][ T1328] _copy_from_user+0x2d/0xb0 [ 1080.461854][ T1328] ___sys_sendmsg+0x1c6/0x360 [ 1080.461877][ T1328] ? __lock_acquire+0x6b5/0x2cf0 [ 1080.461906][ T1328] ? __pfx____sys_sendmsg+0x10/0x10 [ 1080.461968][ T1328] ? __fget_files+0x2a/0x420 [ 1080.461998][ T1328] ? __fget_files+0x3a0/0x420 [ 1080.462036][ T1328] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1080.462064][ T1328] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1080.462097][ T1328] ? __pfx_ksys_write+0x10/0x10 [ 1080.462138][ T1328] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1080.462162][ T1328] do_syscall_64+0x15f/0xf80 [ 1080.462182][ T1328] ? trace_irq_disable+0x3b/0x140 [ 1080.462223][ T1328] ? clear_bhb_loop+0x40/0x90 [ 1080.462249][ T1328] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1080.462270][ T1328] RIP: 0033:0x7fe4edf9ce59 [ 1080.462291][ T1328] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1080.462309][ T1328] RSP: 002b:00007fe4eee42028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1080.462332][ T1328] RAX: ffffffffffffffda RBX: 00007fe4ee215fa0 RCX: 00007fe4edf9ce59 [ 1080.462348][ T1328] RDX: 0000000024004800 RSI: 0000200000000040 RDI: 0000000000000003 [ 1080.462362][ T1328] RBP: 00007fe4eee42090 R08: 0000000000000000 R09: 0000000000000000 [ 1080.462376][ T1328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1080.462389][ T1328] R13: 00007fe4ee216038 R14: 00007fe4ee215fa0 R15: 00007ffdc7d2c338 [ 1080.462425][ T1328] [ 1080.657271][ T13] bond2: (slave gretap0): failed to get link speed/duplex [ 1080.668849][ T13] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1080.683785][ T13] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1082.478106][ T1303] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1082.693690][ T1358] netlink: 'syz.3.6720': attribute type 1 has an invalid length. [ 1082.740469][ T1357] netlink: 16170 bytes leftover after parsing attributes in process `syz.4.6722'. [ 1082.819471][ T1359] syzkaller0: entered promiscuous mode [ 1082.850260][ T1359] syzkaller0: entered allmulticast mode [ 1083.171106][ T1372] FAULT_INJECTION: forcing a failure. [ 1083.171106][ T1372] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1083.224667][ T1372] CPU: 1 UID: 0 PID: 1372 Comm: syz.0.6725 Not tainted syzkaller #0 PREEMPT(full) [ 1083.224696][ T1372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1083.224708][ T1372] Call Trace: [ 1083.224717][ T1372] [ 1083.224726][ T1372] dump_stack_lvl+0xe8/0x150 [ 1083.224755][ T1372] should_fail_ex+0x412/0x560 [ 1083.224787][ T1372] _copy_from_user+0x2d/0xb0 [ 1083.224826][ T1372] __copy_msghdr+0x3c5/0x5b0 [ 1083.224852][ T1372] ___sys_sendmsg+0x213/0x360 [ 1083.224872][ T1372] ? __lock_acquire+0x6b5/0x2cf0 [ 1083.224899][ T1372] ? __pfx____sys_sendmsg+0x10/0x10 [ 1083.224955][ T1372] ? __fget_files+0x2a/0x420 [ 1083.224977][ T1372] ? __fget_files+0x3a0/0x420 [ 1083.225014][ T1372] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1083.225036][ T1372] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1083.225067][ T1372] ? __pfx_ksys_write+0x10/0x10 [ 1083.225105][ T1372] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1083.225127][ T1372] do_syscall_64+0x15f/0xf80 [ 1083.225146][ T1372] ? trace_irq_disable+0x3b/0x140 [ 1083.225175][ T1372] ? clear_bhb_loop+0x40/0x90 [ 1083.225200][ T1372] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1083.225220][ T1372] RIP: 0033:0x7f865a39ce59 [ 1083.225237][ T1372] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1083.225254][ T1372] RSP: 002b:00007f865b172028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1083.225276][ T1372] RAX: ffffffffffffffda RBX: 00007f865a615fa0 RCX: 00007f865a39ce59 [ 1083.225291][ T1372] RDX: 0000000024004800 RSI: 0000200000000040 RDI: 0000000000000003 [ 1083.225304][ T1372] RBP: 00007f865b172090 R08: 0000000000000000 R09: 0000000000000000 [ 1083.225315][ T1372] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1083.225326][ T1372] R13: 00007f865a616038 R14: 00007f865a615fa0 R15: 00007ffd3c446988 [ 1083.225358][ T1372] [ 1083.973245][T30192] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1084.101192][ T1395] xt_connbytes: Forcing CT accounting to be enabled [ 1084.349670][ T1403] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6734'. [ 1084.548488][T30261] IPVS: starting estimator thread 0... [ 1084.630998][ T1419] netlink: 'syz.2.6736': attribute type 1 has an invalid length. [ 1084.638969][ T1419] netlink: 'syz.2.6736': attribute type 1 has an invalid length. [ 1084.651020][ T1410] IPVS: using max 25 ests per chain, 60000 per kthread [ 1084.743281][ T1422] FAULT_INJECTION: forcing a failure. [ 1084.743281][ T1422] name failslab, interval 1, probability 0, space 0, times 0 [ 1084.766408][ T1422] CPU: 1 UID: 0 PID: 1422 Comm: syz.1.6738 Not tainted syzkaller #0 PREEMPT(full) [ 1084.766440][ T1422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1084.766452][ T1422] Call Trace: [ 1084.766461][ T1422] [ 1084.766470][ T1422] dump_stack_lvl+0xe8/0x150 [ 1084.766501][ T1422] should_fail_ex+0x412/0x560 [ 1084.766538][ T1422] should_failslab+0xa8/0x100 [ 1084.766571][ T1422] __kmalloc_noprof+0xe8/0x760 [ 1084.766602][ T1422] ? sock_kmalloc+0xd6/0x160 [ 1084.766632][ T1422] sock_kmalloc+0xd6/0x160 [ 1084.766660][ T1422] ____sys_sendmsg+0x1c2/0x9f0 [ 1084.766692][ T1422] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1084.766726][ T1422] ? import_iovec+0x73/0xa0 [ 1084.766763][ T1422] ___sys_sendmsg+0x2a5/0x360 [ 1084.766790][ T1422] ? __lock_acquire+0x6b5/0x2cf0 [ 1084.766819][ T1422] ? __pfx____sys_sendmsg+0x10/0x10 [ 1084.766884][ T1422] ? __fget_files+0x2a/0x420 [ 1084.766909][ T1422] ? __fget_files+0x3a0/0x420 [ 1084.766946][ T1422] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1084.766974][ T1422] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1084.767009][ T1422] ? __pfx_ksys_write+0x10/0x10 [ 1084.767073][ T1422] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1084.767097][ T1422] do_syscall_64+0x15f/0xf80 [ 1084.767118][ T1422] ? trace_irq_disable+0x3b/0x140 [ 1084.767149][ T1422] ? clear_bhb_loop+0x40/0x90 [ 1084.767176][ T1422] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1084.767197][ T1422] RIP: 0033:0x7fd875f9ce59 [ 1084.767218][ T1422] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1084.767236][ T1422] RSP: 002b:00007fd876dc2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1084.767259][ T1422] RAX: ffffffffffffffda RBX: 00007fd876215fa0 RCX: 00007fd875f9ce59 [ 1084.767274][ T1422] RDX: 0000000024004800 RSI: 0000200000000040 RDI: 0000000000000003 [ 1084.767287][ T1422] RBP: 00007fd876dc2090 R08: 0000000000000000 R09: 0000000000000000 [ 1084.767298][ T1422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1084.767308][ T1422] R13: 00007fd876216038 R14: 00007fd876215fa0 R15: 00007ffe5629a008 [ 1084.767341][ T1422] [ 1085.029387][ C0] net_ratelimit: 43 callbacks suppressed [ 1085.029407][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1085.109022][ T13] bond2: (slave gretap0): failed to get link speed/duplex [ 1085.159971][T30192] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1085.174684][T30192] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1085.240462][T30193] bond2: (slave gretap0): failed to get link speed/duplex [ 1085.411074][ T13] bond2: (slave gretap0): failed to get link speed/duplex [ 1085.423328][ T1405] lo speed is unknown, defaulting to 1000 [ 1085.430567][ C0] ip6_tunnel: ip6tnl7 xmit: Local address not yet configured! [ 1085.445220][ T1405] lo speed is unknown, defaulting to 1000 [ 1085.519548][ T13] bond2: (slave gretap0): failed to get link speed/duplex [ 1085.650234][T30206] bond2: (slave gretap0): failed to get link speed/duplex [ 1085.700443][T30206] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1085.715175][T30206] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1087.253131][ T1407] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1090.039685][ T13] net_ratelimit: 58 callbacks suppressed [ 1090.039712][ T13] bond2: (slave gretap0): failed to get link speed/duplex [ 1090.159541][T30206] bond2: (slave gretap0): failed to get link speed/duplex [ 1090.229489][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1090.269631][ T13] bond2: (slave gretap0): failed to get link speed/duplex [ 1090.350012][T30206] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1090.364405][T30206] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1090.379446][T30193] bond2: (slave gretap0): failed to get link speed/duplex [ 1090.489817][T30193] bond2: (slave gretap0): failed to get link speed/duplex [ 1090.599608][T30206] bond2: (slave gretap0): failed to get link speed/duplex [ 1090.710372][T32199] bond2: (slave gretap0): failed to get link speed/duplex [ 1095.130799][T32199] net_ratelimit: 61 callbacks suppressed [ 1095.130824][T32199] bond2: (slave gretap0): failed to get link speed/duplex [ 1095.249623][ T13] bond2: (slave gretap0): failed to get link speed/duplex [ 1095.359491][ T13] bond2: (slave gretap0): failed to get link speed/duplex [ 1095.429477][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1095.469548][T30195] bond2: (slave gretap0): failed to get link speed/duplex [ 1095.490190][T30195] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1095.504769][T30195] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1095.579411][T30195] bond2: (slave gretap0): failed to get link speed/duplex [ 1095.690561][T32199] bond2: (slave gretap0): failed to get link speed/duplex [ 1095.799634][T32199] bond2: (slave gretap0): failed to get link speed/duplex [ 1100.200907][T30193] net_ratelimit: 61 callbacks suppressed [ 1100.200931][T30193] bond2: (slave gretap0): failed to get link speed/duplex [ 1100.329674][T30206] bond2: (slave gretap0): failed to get link speed/duplex [ 1100.439543][T30195] bond2: (slave gretap0): failed to get link speed/duplex [ 1100.550564][T30195] bond2: (slave gretap0): failed to get link speed/duplex [ 1100.619516][T32199] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1100.634148][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1100.642128][T32199] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1100.669683][T30206] bond2: (slave gretap0): failed to get link speed/duplex [ 1100.779785][T32199] bond2: (slave gretap0): failed to get link speed/duplex [ 1100.889691][T30195] bond2: (slave gretap0): failed to get link speed/duplex [ 1102.875097][T28678] Bluetooth: hci4: command 0x0406 tx timeout [ 1105.210094][ T13] net_ratelimit: 58 callbacks suppressed [ 1105.210120][ T13] bond2: (slave gretap0): failed to get link speed/duplex [ 1105.239456][T32199] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1105.254457][T32199] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1105.329556][T30193] bond2: (slave gretap0): failed to get link speed/duplex [ 1105.439460][T30195] bond2: (slave gretap0): failed to get link speed/duplex [ 1105.549626][T30193] bond2: (slave gretap0): failed to get link speed/duplex [ 1105.659478][T30193] bond2: (slave gretap0): failed to get link speed/duplex [ 1105.769790][T32199] bond2: (slave gretap0): failed to get link speed/duplex [ 1105.780450][T32199] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1105.795028][T32199] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1110.290047][T30192] net_ratelimit: 61 callbacks suppressed [ 1110.290072][T30192] bond2: (slave gretap0): failed to get link speed/duplex [ 1110.400081][T30195] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1110.414812][T30192] bond2: (slave gretap0): failed to get link speed/duplex [ 1110.414826][T30195] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1110.539571][T30193] bond2: (slave gretap0): failed to get link speed/duplex [ 1110.649565][T32199] bond2: (slave gretap0): failed to get link speed/duplex [ 1110.759532][T30206] bond2: (slave gretap0): failed to get link speed/duplex [ 1110.869869][T30193] bond2: (slave gretap0): failed to get link speed/duplex [ 1110.940115][T30192] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1110.957194][T30192] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1115.379392][T32199] net_ratelimit: 61 callbacks suppressed [ 1115.379418][T32199] bond2: (slave gretap0): failed to get link speed/duplex [ 1115.499522][T30193] bond2: (slave gretap0): failed to get link speed/duplex [ 1115.559839][T30206] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1115.574323][T30206] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1115.610098][T30193] bond2: (slave gretap0): failed to get link speed/duplex [ 1115.719642][ T13] bond2: (slave gretap0): failed to get link speed/duplex [ 1115.829531][T30206] bond2: (slave gretap0): failed to get link speed/duplex [ 1115.939525][T30206] bond2: (slave gretap0): failed to get link speed/duplex [ 1116.049672][ T13] bond2: (slave gretap0): failed to get link speed/duplex [ 1116.090108][T30193] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1118.230951][ T50] Bluetooth: hci5: command 0x0405 tx timeout [ 1120.389486][ C0] net_ratelimit: 60 callbacks suppressed [ 1120.389503][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1120.459615][T32199] bond2: (slave gretap0): failed to get link speed/duplex [ 1120.569534][T32199] bond2: (slave gretap0): failed to get link speed/duplex [ 1120.679533][T30206] bond2: (slave gretap0): failed to get link speed/duplex [ 1120.689922][T30192] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1120.704307][T30192] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1120.789929][T30206] bond2: (slave gretap0): failed to get link speed/duplex [ 1120.899394][T30193] bond2: (slave gretap0): failed to get link speed/duplex [ 1121.009433][ T13] bond2: (slave gretap0): failed to get link speed/duplex [ 1121.119516][T30193] bond2: (slave gretap0): failed to get link speed/duplex [ 1125.439653][T32199] net_ratelimit: 60 callbacks suppressed [ 1125.439678][T32199] bond2: (slave gretap0): failed to get link speed/duplex [ 1125.559474][T30193] bond2: (slave gretap0): failed to get link speed/duplex [ 1125.589486][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1125.670374][T32199] bond2: (slave gretap0): failed to get link speed/duplex [ 1125.789438][T30192] bond2: (slave gretap0): failed to get link speed/duplex [ 1125.820137][T32199] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1125.834942][T32199] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1125.899415][T32199] bond2: (slave gretap0): failed to get link speed/duplex [ 1126.009655][T30192] bond2: (slave gretap0): failed to get link speed/duplex [ 1126.119368][T30192] bond2: (slave gretap0): failed to get link speed/duplex [ 1128.469422][T28678] Bluetooth: hci3: command 0x0406 tx timeout [ 1130.405317][ T1450] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6743'. [ 1130.682476][T30192] net_ratelimit: 60 callbacks suppressed [ 1130.682501][T30192] bond2: (slave gretap0): failed to get link speed/duplex [ 1130.742056][ T1465] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 64993 [ 1130.789447][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1130.806244][ T1467] netlink: 'syz.1.6747': attribute type 1 has an invalid length. [ 1130.903223][ T1473] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6749'. [ 1130.913397][ T1473] netlink: 'syz.0.6749': attribute type 26 has an invalid length. [ 1130.922667][ T1473] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6749'. [ 1130.937517][ T1467] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 1130.944537][ T1473] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6749'. [ 1130.960043][T30192] bond2: (slave gretap0): failed to get link speed/duplex [ 1130.983767][T30193] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1130.998234][T30193] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1131.022275][ T1482] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6749'. [ 1131.024178][ T1481] FAULT_INJECTION: forcing a failure. [ 1131.024178][ T1481] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1131.046803][ T1473] netlink: 'syz.0.6749': attribute type 26 has an invalid length. [ 1131.087265][ T1481] CPU: 0 UID: 0 PID: 1481 Comm: syz.4.6752 Not tainted syzkaller #0 PREEMPT(full) [ 1131.087316][ T1481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1131.087329][ T1481] Call Trace: [ 1131.087338][ T1481] [ 1131.087347][ T1481] dump_stack_lvl+0xe8/0x150 [ 1131.087380][ T1481] should_fail_ex+0x412/0x560 [ 1131.087423][ T1481] _copy_from_user+0x2d/0xb0 [ 1131.087454][ T1481] ____sys_sendmsg+0x308/0x9f0 [ 1131.087491][ T1481] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1131.087526][ T1481] ? import_iovec+0x73/0xa0 [ 1131.087561][ T1481] ___sys_sendmsg+0x2a5/0x360 [ 1131.087582][ T1481] ? __lock_acquire+0x6b5/0x2cf0 [ 1131.087611][ T1481] ? __pfx____sys_sendmsg+0x10/0x10 [ 1131.087676][ T1481] ? __fget_files+0x2a/0x420 [ 1131.087701][ T1481] ? __fget_files+0x3a0/0x420 [ 1131.087739][ T1481] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1131.087766][ T1481] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1131.087800][ T1481] ? __pfx_ksys_write+0x10/0x10 [ 1131.087840][ T1481] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1131.087864][ T1481] do_syscall_64+0x15f/0xf80 [ 1131.087885][ T1481] ? trace_irq_disable+0x3b/0x140 [ 1131.087915][ T1481] ? clear_bhb_loop+0x40/0x90 [ 1131.087942][ T1481] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1131.087963][ T1481] RIP: 0033:0x7fe4edf9ce59 [ 1131.087984][ T1481] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1131.088002][ T1481] RSP: 002b:00007fe4eee42028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1131.088025][ T1481] RAX: ffffffffffffffda RBX: 00007fe4ee215fa0 RCX: 00007fe4edf9ce59 [ 1131.088041][ T1481] RDX: 0000000024004800 RSI: 0000200000000040 RDI: 0000000000000003 [ 1131.088054][ T1481] RBP: 00007fe4eee42090 R08: 0000000000000000 R09: 0000000000000000 [ 1131.088067][ T1481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1131.088080][ T1481] R13: 00007fe4ee216038 R14: 00007fe4ee215fa0 R15: 00007ffdc7d2c338 [ 1131.088114][ T1481] [ 1131.122884][ T1473] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6749'. [ 1131.306511][ T1495] netlink: 'syz.1.6753': attribute type 8 has an invalid length. [ 1131.359511][T18841] bond2: (slave gretap0): failed to get link speed/duplex [ 1131.490780][T32199] bond2: (slave gretap0): failed to get link speed/duplex [ 1131.514823][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1131.571812][ T1502] netlink: 'syz.4.6756': attribute type 7 has an invalid length. [ 1131.602147][T32199] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1131.617340][T32199] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1131.952962][ T1517] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6760'. [ 1132.200350][ T1528] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.6762'. [ 1132.318652][ T1528] syzkaller1: entered promiscuous mode [ 1132.345437][ T1528] syzkaller1: entered allmulticast mode [ 1132.381403][ T1479] lo speed is unknown, defaulting to 1000 [ 1132.399058][ T1479] lo speed is unknown, defaulting to 1000 [ 1132.426421][ T1533] FAULT_INJECTION: forcing a failure. [ 1132.426421][ T1533] name failslab, interval 1, probability 0, space 0, times 0 [ 1132.441549][ T1533] CPU: 0 UID: 0 PID: 1533 Comm: syz.4.6765 Not tainted syzkaller #0 PREEMPT(full) [ 1132.441579][ T1533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1132.441594][ T1533] Call Trace: [ 1132.441603][ T1533] [ 1132.441612][ T1533] dump_stack_lvl+0xe8/0x150 [ 1132.441645][ T1533] should_fail_ex+0x412/0x560 [ 1132.441681][ T1533] should_failslab+0xa8/0x100 [ 1132.441713][ T1533] ? dst_alloc+0x105/0x170 [ 1132.441739][ T1533] kmem_cache_alloc_noprof+0x87/0x650 [ 1132.441766][ T1533] ? ip6_pol_route+0x160/0x13d0 [ 1132.441795][ T1533] ? __pfx_ip6_dst_gc+0x10/0x10 [ 1132.441819][ T1533] dst_alloc+0x105/0x170 [ 1132.441852][ T1533] ip6_pol_route+0xafb/0x13d0 [ 1132.441875][ T1533] ? ip6_pol_route+0x160/0x13d0 [ 1132.441905][ T1533] ? __pfx_ip6_pol_route+0x10/0x10 [ 1132.441952][ T1533] fib6_rule_action+0x265/0xc00 [ 1132.441978][ T1533] ? fib_rules_lookup+0x9b/0xea0 [ 1132.442004][ T1533] ? __pfx_fib6_rule_action+0x10/0x10 [ 1132.442030][ T1533] ? __pfx_ip6_compressed_string+0x10/0x10 [ 1132.442058][ T1533] ? fib6_rule_match+0x79a/0xa80 [ 1132.442077][ T1533] ? __pfx_fib6_rule_action+0x10/0x10 [ 1132.442099][ T1533] fib_rules_lookup+0x768/0xea0 [ 1132.442126][ T1533] ? fib_rules_lookup+0x9b/0xea0 [ 1132.442154][ T1533] ? __pfx_fib_rules_lookup+0x10/0x10 [ 1132.442177][ T1533] ? l3mdev_update_flow+0x29/0x640 [ 1132.442201][ T1533] ? l3mdev_update_flow+0x4d1/0x640 [ 1132.442227][ T1533] fib6_rule_lookup+0x1a0/0x730 [ 1132.442249][ T1533] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 1132.442273][ T1533] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 1132.442297][ T1533] ? ip6_route_output_flags+0x2e/0x5d0 [ 1132.442320][ T1533] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 1132.442356][ T1533] ip6_route_output_flags+0x364/0x5d0 [ 1132.442380][ T1533] ? ip6_route_output_flags+0x2e/0x5d0 [ 1132.442417][ T1533] ip6_dst_lookup_tail+0x1c3/0x15a0 [ 1132.442452][ T1533] ? bpf_lsm_capable+0x9/0x20 [ 1132.442473][ T1533] ? security_capable+0x7e/0x2c0 [ 1132.442506][ T1533] ? __pfx_ip6_dst_lookup_tail+0x10/0x10 [ 1132.442534][ T1533] ? ip6_datagram_send_ctl+0x1951/0x1ba0 [ 1132.442585][ T1533] ? __fl6_update_dst+0x116/0x160 [ 1132.442614][ T1533] ip6_dst_lookup_flow+0x89/0x150 [ 1132.442648][ T1533] l2tp_ip6_sendmsg+0x104d/0x18d0 [ 1132.442696][ T1533] ? __pfx_l2tp_ip6_sendmsg+0x10/0x10 [ 1132.442757][ T1533] ? __pfx_aa_sk_perm+0x10/0x10 [ 1132.442783][ T1533] ? tomoyo_socket_sendmsg_permission+0x215/0x300 [ 1132.442822][ T1533] ? inet_sendmsg+0x2f4/0x370 [ 1132.442850][ T1533] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1132.442883][ T1533] ____sys_sendmsg+0x80a/0x9f0 [ 1132.442917][ T1533] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1132.442949][ T1533] ? import_iovec+0x73/0xa0 [ 1132.442984][ T1533] ___sys_sendmsg+0x2a5/0x360 [ 1132.443007][ T1533] ? __lock_acquire+0x6b5/0x2cf0 [ 1132.443037][ T1533] ? __pfx____sys_sendmsg+0x10/0x10 [ 1132.443106][ T1533] ? __fget_files+0x2a/0x420 [ 1132.443132][ T1533] ? __fget_files+0x3a0/0x420 [ 1132.443171][ T1533] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1132.443196][ T1533] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1132.443231][ T1533] ? __pfx_ksys_write+0x10/0x10 [ 1132.443270][ T1533] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1132.443292][ T1533] do_syscall_64+0x15f/0xf80 [ 1132.443310][ T1533] ? trace_irq_disable+0x3b/0x140 [ 1132.443338][ T1533] ? clear_bhb_loop+0x40/0x90 [ 1132.443364][ T1533] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1132.443385][ T1533] RIP: 0033:0x7fe4edf9ce59 [ 1132.443415][ T1533] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1132.443433][ T1533] RSP: 002b:00007fe4eee42028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1132.443455][ T1533] RAX: ffffffffffffffda RBX: 00007fe4ee215fa0 RCX: 00007fe4edf9ce59 [ 1132.443470][ T1533] RDX: 0000000024004800 RSI: 0000200000000040 RDI: 0000000000000003 [ 1132.443483][ T1533] RBP: 00007fe4eee42090 R08: 0000000000000000 R09: 0000000000000000 [ 1132.443495][ T1533] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1132.443507][ T1533] R13: 00007fe4ee216038 R14: 00007fe4ee215fa0 R15: 00007ffdc7d2c338 [ 1132.443542][ T1533] [ 1132.903656][ T1535] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6766'. [ 1132.934993][ T1536] sch_tbf: burst 0 is lower than device tunl0 mtu (1480) ! [ 1133.121186][ T1535] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 1133.272812][ T1542] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6768'. [ 1133.778251][ T1565] netlink: 'syz.4.6774': attribute type 10 has an invalid length. [ 1133.857835][ T1565] team0: Port device dummy0 added [ 1134.046324][ T1558] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1134.056661][ T1558] 8021q: adding VLAN 0 to HW filter on device team0 [ 1134.077526][ T1558] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1134.173702][ T1558] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1134.185158][ T1558] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1134.228100][ T1558] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1134.256226][ T1558] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1134.297772][ T1558] veth1_macvtap: left promiscuous mode [ 1134.317816][ T1558] veth0_macvtap: left promiscuous mode [ 1134.327994][ T1558] veth1_macvtap: entered promiscuous mode [ 1134.365196][ T1558] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1134.376565][ T1558] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1134.386959][ T1558] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1134.397528][ T1558] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1134.417110][ T1558] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1134.663823][ T1580] FAULT_INJECTION: forcing a failure. [ 1134.663823][ T1580] name failslab, interval 1, probability 0, space 0, times 0 [ 1134.677887][ T1580] CPU: 0 UID: 0 PID: 1580 Comm: syz.4.6777 Not tainted syzkaller #0 PREEMPT(full) [ 1134.677920][ T1580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1134.677933][ T1580] Call Trace: [ 1134.677943][ T1580] [ 1134.677953][ T1580] dump_stack_lvl+0xe8/0x150 [ 1134.677985][ T1580] should_fail_ex+0x412/0x560 [ 1134.678023][ T1580] should_failslab+0xa8/0x100 [ 1134.678057][ T1580] __kmalloc_node_track_caller_noprof+0xeb/0x7b0 [ 1134.678091][ T1580] ? ip6_setup_cork+0x70e/0xf30 [ 1134.678112][ T1580] ? __kmalloc_cache_noprof+0x31c/0x660 [ 1134.678145][ T1580] kmemdup_noprof+0x2b/0x70 [ 1134.678171][ T1580] ip6_setup_cork+0x70e/0xf30 [ 1134.678209][ T1580] ip6_append_data+0x181/0x280 [ 1134.678236][ T1580] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 1134.678273][ T1580] l2tp_ip6_sendmsg+0x1393/0x18d0 [ 1134.678350][ T1580] ? __pfx_l2tp_ip6_sendmsg+0x10/0x10 [ 1134.678409][ T1580] ? __pfx_aa_sk_perm+0x10/0x10 [ 1134.678434][ T1580] ? tomoyo_socket_sendmsg_permission+0x215/0x300 [ 1134.678477][ T1580] ? inet_sendmsg+0x2f4/0x370 [ 1134.678505][ T1580] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1134.678539][ T1580] ____sys_sendmsg+0x80a/0x9f0 [ 1134.678574][ T1580] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1134.678610][ T1580] ? import_iovec+0x73/0xa0 [ 1134.678647][ T1580] ___sys_sendmsg+0x2a5/0x360 [ 1134.678668][ T1580] ? __lock_acquire+0x6b5/0x2cf0 [ 1134.678695][ T1580] ? __pfx____sys_sendmsg+0x10/0x10 [ 1134.678770][ T1580] ? __fget_files+0x2a/0x420 [ 1134.678794][ T1580] ? __fget_files+0x3a0/0x420 [ 1134.678828][ T1580] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1134.678852][ T1580] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1134.678885][ T1580] ? __pfx_ksys_write+0x10/0x10 [ 1134.678924][ T1580] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1134.678947][ T1580] do_syscall_64+0x15f/0xf80 [ 1134.678968][ T1580] ? trace_irq_disable+0x3b/0x140 [ 1134.678998][ T1580] ? clear_bhb_loop+0x40/0x90 [ 1134.679026][ T1580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1134.679046][ T1580] RIP: 0033:0x7fe4edf9ce59 [ 1134.679067][ T1580] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1134.679085][ T1580] RSP: 002b:00007fe4eee42028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1134.679108][ T1580] RAX: ffffffffffffffda RBX: 00007fe4ee215fa0 RCX: 00007fe4edf9ce59 [ 1134.679123][ T1580] RDX: 0000000024004800 RSI: 0000200000000040 RDI: 0000000000000003 [ 1134.679137][ T1580] RBP: 00007fe4eee42090 R08: 0000000000000000 R09: 0000000000000000 [ 1134.679158][ T1580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1134.679170][ T1580] R13: 00007fe4ee216038 R14: 00007fe4ee215fa0 R15: 00007ffdc7d2c338 [ 1134.679205][ T1580] [ 1135.007640][T30206] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1135.051703][T30206] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1135.084084][T30206] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1135.155066][ T1548] lo speed is unknown, defaulting to 1000 [ 1135.164713][ T1548] lo speed is unknown, defaulting to 1000 [ 1135.197830][T30206] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1135.455808][ T1594] __nla_validate_parse: 2 callbacks suppressed [ 1135.455832][ T1594] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.6783'. [ 1135.505359][ T1596] batadv_slave_1: entered promiscuous mode [ 1135.536906][ T1595] batadv_slave_1: left promiscuous mode [ 1135.844530][ T1605] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6788'. [ 1135.935623][ T1605] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1135.990564][ C0] net_ratelimit: 35 callbacks suppressed [ 1135.990587][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1136.015884][T30206] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1136.031472][T30206] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1136.252041][T32199] bond2: (slave gretap0): failed to get link speed/duplex [ 1136.326302][ T1624] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6792'. [ 1136.380727][ T64] bond2: (slave gretap0): failed to get link speed/duplex [ 1136.522645][T30193] bond2: (slave gretap0): failed to get link speed/duplex [ 1136.551658][T18841] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1136.566098][T18841] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1136.596306][ T1630] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1136.690336][T30206] bond2: (slave gretap0): failed to get link speed/duplex [ 1136.776813][ T1639] netlink: 'syz.1.6795': attribute type 1 has an invalid length. [ 1136.832803][ T1640] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.6796'. [ 1137.015241][ T1639] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1137.097438][ T1642] bond3: (slave ip6erspan0): making interface the new active one [ 1137.132857][ T1642] bond3: (slave ip6erspan0): Enslaving as an active interface with an up link [ 1137.447136][ T1658] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6800'. [ 1137.637901][ T1658] bond4: option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0) [ 1137.814613][ T1658] bond4 (unregistering): Released all slaves [ 1138.148756][ T1634] lo speed is unknown, defaulting to 1000 [ 1138.185379][ T1634] lo speed is unknown, defaulting to 1000 [ 1138.201560][ T1670] tc action pedit 'at' offset 6 out of bounds [ 1139.066339][ T1660] lo speed is unknown, defaulting to 1000 [ 1139.100129][ T1660] lo speed is unknown, defaulting to 1000 [ 1139.301265][ T1703] debugfs: '1^!Y [ 1139.301265][ T1703] 3UH5rBn\' already exists in 'ieee80211' [ 1139.747310][ T1697] lo speed is unknown, defaulting to 1000 [ 1139.781417][ T1697] lo speed is unknown, defaulting to 1000 [ 1139.885700][ T1709] pimreg: entered allmulticast mode [ 1140.407027][ T1715] netlink: 260 bytes leftover after parsing attributes in process `syz.2.6814'. [ 1140.628450][ T1708] pimreg: left allmulticast mode [ 1141.129636][T30192] net_ratelimit: 40 callbacks suppressed [ 1141.129661][T30192] bond2: (slave gretap0): failed to get link speed/duplex [ 1141.189708][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1141.233345][T30192] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1141.248228][T30192] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1141.273776][T32198] bond2: (slave gretap0): failed to get link speed/duplex [ 1141.470577][ T1735] netlink: 'syz.0.6819': attribute type 1 has an invalid length. [ 1141.576735][ T1735] bond6: entered promiscuous mode [ 1141.582606][ T1735] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1141.642624][ T1735] vlan2: entered allmulticast mode [ 1141.648041][ T1735] bond6: entered allmulticast mode [ 1141.655024][T30206] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1141.698075][ T1735] bond6: (slave bridge5): making interface the new active one [ 1141.705762][ T1735] bridge5: entered promiscuous mode [ 1141.720108][ T1735] bridge5: entered allmulticast mode [ 1141.738213][ T1735] bond6: (slave bridge5): Enslaving as an active interface with an up link [ 1141.752587][T30193] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1141.780872][T30195] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1141.795512][T30193] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1141.795562][T30193] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1141.804859][T30195] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1141.831042][ T1710] lo speed is unknown, defaulting to 1000 [ 1141.857370][ T1710] lo speed is unknown, defaulting to 1000 [ 1141.863445][T30195] bond2: (slave gretap0): failed to get link speed/duplex [ 1141.993397][T30195] bond2: (slave gretap0): failed to get link speed/duplex [ 1142.064010][ T1750] tipc: Enabled bearer , priority 6 [ 1142.114559][T30192] bond2: (slave gretap0): failed to get link speed/duplex [ 1142.125126][ T1750] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 1143.461714][T30261] tipc: Node number set to 555345588 [ 1143.716441][ T1775] netlink: 'syz.0.6827': attribute type 8 has an invalid length. [ 1144.346095][ T1788] bridge0: entered promiscuous mode [ 1144.368319][ T1795] : renamed from dummy0 [ 1144.405318][ T1788] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6831'. [ 1144.561867][ T1800] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6833'. [ 1144.926954][T30260] IPVS: starting estimator thread 0... [ 1145.051339][ T1809] IPVS: using max 24 ests per chain, 57600 per kthread [ 1145.218415][ T1783] lo speed is unknown, defaulting to 1000 [ 1145.239896][ T1783] lo speed is unknown, defaulting to 1000 [ 1145.725229][ T1823] gretap1: left allmulticast mode [ 1145.747214][ T1823] bond3: left promiscuous mode [ 1145.770798][ T1823] geneve3: left promiscuous mode [ 1145.947794][ T1782] lo speed is unknown, defaulting to 1000 [ 1146.008645][ T1782] lo speed is unknown, defaulting to 1000 [ 1146.211889][ T13] net_ratelimit: 48 callbacks suppressed [ 1146.211911][ T13] bond2: (slave gretap0): failed to get link speed/duplex [ 1146.389388][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1146.443494][T30192] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1146.458005][T30192] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1146.624628][T30192] bond2: (slave gretap0): failed to get link speed/duplex [ 1146.744596][ T1849] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6847'. [ 1146.849964][T30192] bond2: (slave gretap0): failed to get link speed/duplex [ 1146.852334][ T1855] netlink: 'syz.3.6850': attribute type 1 has an invalid length. [ 1146.940778][ T1859] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6852'. [ 1146.951331][ T1859] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6852'. [ 1146.965365][ T1859] netlink: 'syz.4.6852': attribute type 25 has an invalid length. [ 1146.973411][ T1859] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6852'. [ 1147.051044][ T1860] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6850'. [ 1147.066465][ T64] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1147.081644][ T64] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1147.135402][ T1862] netlink: 76 bytes leftover after parsing attributes in process `syz.2.6853'. [ 1147.184175][ T1855] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1147.285878][ T1857] bridge0: port 2(bridge_slave_1) entered disabled state [ 1147.293762][ T1857] bridge0: port 1(bridge_slave_0) entered disabled state [ 1147.373274][ T1857] bridge0: port 2(bridge_slave_1) entered blocking state [ 1147.381005][ T1857] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1147.388936][ T1857] bridge0: port 1(bridge_slave_0) entered blocking state [ 1147.396539][ T1857] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1147.429816][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1147.465188][ T1857] bond2: (slave bridge0): Enslaving as a backup interface with an up link [ 1147.520879][ T13] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1147.547644][ T1859] netlink: 'syz.4.6852': attribute type 25 has an invalid length. [ 1147.594814][ T1859] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6852'. [ 1147.704267][ T64] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1147.738155][ T64] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1147.912689][ T64] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1147.954273][ T64] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1147.983857][T25541] IPVS: starting estimator thread 0... [ 1148.099353][ T1890] IPVS: using max 28 ests per chain, 67200 per kthread [ 1148.344375][ T1903] netlink: 'syz.3.6860': attribute type 8 has an invalid length. [ 1148.375306][ T1905] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6861'. [ 1148.481128][ T1905] nbd: must specify an index to disconnect [ 1148.490540][ T1905] nbd: must specify at least one socket [ 1148.588892][ T1905] veth3: entered allmulticast mode [ 1148.651217][ T1905] bond0: (slave veth3): Enslaving as an active interface with an up link [ 1148.690470][ T1909] bond0 (unregistering): (slave veth3): Releasing backup interface [ 1148.712405][ T1909] bond0 (unregistering): Released all slaves [ 1148.743566][ T1875] lo speed is unknown, defaulting to 1000 [ 1148.763112][ T1875] lo speed is unknown, defaulting to 1000 [ 1148.865550][ T1914] x_tables: ip_tables: osf match: only valid for protocol 6 [ 1148.884604][ T1913] x_tables: ip_tables: osf match: only valid for protocol 6 [ 1149.237559][ T1926] atomic_op ffff88803399a998 conn xmit_atomic 0000000000000000 [ 1149.347066][ T1930] FAULT_INJECTION: forcing a failure. [ 1149.347066][ T1930] name failslab, interval 1, probability 0, space 0, times 0 [ 1149.388320][ T1930] CPU: 0 UID: 0 PID: 1930 Comm: syz.2.6868 Not tainted syzkaller #0 PREEMPT(full) [ 1149.388349][ T1930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1149.388362][ T1930] Call Trace: [ 1149.388371][ T1930] [ 1149.388379][ T1930] dump_stack_lvl+0xe8/0x150 [ 1149.388410][ T1930] should_fail_ex+0x412/0x560 [ 1149.388446][ T1930] should_failslab+0xa8/0x100 [ 1149.388480][ T1930] __kmalloc_noprof+0xe8/0x760 [ 1149.388509][ T1930] ? copy_splice_read+0x16f/0xaa0 [ 1149.388542][ T1930] copy_splice_read+0x16f/0xaa0 [ 1149.388583][ T1930] ? __pfx_copy_splice_read+0x10/0x10 [ 1149.388609][ T1930] ? trace_kmalloc+0x2a/0xf0 [ 1149.388636][ T1930] ? look_up_lock_class+0x57/0x110 [ 1149.388658][ T1930] ? register_lock_class+0x31/0x2e0 [ 1149.388683][ T1930] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 1149.388720][ T1930] ? alloc_pipe_info+0x373/0x4d0 [ 1149.388762][ T1930] ? __pfx_copy_splice_read+0x10/0x10 [ 1149.388786][ T1930] splice_direct_to_actor+0x478/0xc70 [ 1149.388827][ T1930] ? __pfx_direct_splice_actor+0x10/0x10 [ 1149.388863][ T1930] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1149.388902][ T1930] do_splice_direct+0x195/0x290 [ 1149.388933][ T1930] ? __pfx_do_splice_direct+0x10/0x10 [ 1149.388962][ T1930] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1149.388993][ T1930] ? bpf_lsm_file_permission+0x9/0x20 [ 1149.389022][ T1930] ? security_file_permission+0x75/0x260 [ 1149.389047][ T1930] ? rw_verify_area+0x255/0x4d0 [ 1149.389081][ T1930] do_sendfile+0x535/0x7d0 [ 1149.389114][ T1930] ? __pfx_vfs_write+0x10/0x10 [ 1149.389150][ T1930] ? __pfx_do_sendfile+0x10/0x10 [ 1149.389172][ T1930] ? __fget_files+0x3a0/0x420 [ 1149.389209][ T1930] __se_sys_sendfile64+0x144/0x1a0 [ 1149.389236][ T1930] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 1149.389270][ T1930] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1149.389293][ T1930] do_syscall_64+0x15f/0xf80 [ 1149.389316][ T1930] ? clear_bhb_loop+0x40/0x90 [ 1149.389343][ T1930] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1149.389365][ T1930] RIP: 0033:0x7f154d59ce59 [ 1149.389386][ T1930] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1149.389405][ T1930] RSP: 002b:00007f154e461028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1149.389429][ T1930] RAX: ffffffffffffffda RBX: 00007f154d816090 RCX: 00007f154d59ce59 [ 1149.389445][ T1930] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000006 [ 1149.389457][ T1930] RBP: 00007f154e461090 R08: 0000000000000000 R09: 0000000000000000 [ 1149.389471][ T1930] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 1149.389483][ T1930] R13: 00007f154d816128 R14: 00007f154d816090 R15: 00007ffc62700ff8 [ 1149.389519][ T1930] [ 1150.247073][ T1947] __nla_validate_parse: 1 callbacks suppressed [ 1150.247094][ T1947] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6873'. [ 1150.275927][ T1947] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6873'. [ 1150.287235][ T1947] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6873'. [ 1150.298802][ T1947] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6873'. [ 1150.314133][ T1947] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6873'. [ 1150.327800][ T1947] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6873'. [ 1150.347978][ T1947] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6873'. [ 1150.358454][ T1947] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6873'. [ 1150.380908][ T1947] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6873'. [ 1150.412204][ T1947] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6873'. [ 1150.651389][ T1952] debugfs: '1^!Y [ 1150.651389][ T1952] 3UH5rBn\' already exists in 'ieee80211' [ 1151.300437][ T64] net_ratelimit: 77 callbacks suppressed [ 1151.300463][ T64] bond2: (slave bridge0): failed to get link speed/duplex [ 1151.350270][T32199] bond2: (slave gretap0): failed to get link speed/duplex [ 1151.471949][T30195] bond2: (slave gretap0): failed to get link speed/duplex [ 1151.521984][ T64] bond2: (slave bridge0): failed to get link speed/duplex [ 1151.610503][T30195] bond2: (slave gretap0): failed to get link speed/duplex [ 1151.650185][ T64] bond2: (slave bridge0): failed to get link speed/duplex [ 1151.709727][T18841] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1151.724401][T18841] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1151.749489][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1151.759286][T32199] bond2: (slave gretap0): failed to get link speed/duplex [ 1151.904281][ T1959] lo speed is unknown, defaulting to 1000 [ 1151.915012][ T1959] lo speed is unknown, defaulting to 1000 [ 1152.615712][ T1976] lo speed is unknown, defaulting to 1000 [ 1152.762509][ T1976] lo speed is unknown, defaulting to 1000 [ 1152.990713][ T2014] FAULT_INJECTION: forcing a failure. [ 1152.990713][ T2014] name failslab, interval 1, probability 0, space 0, times 0 [ 1153.005819][ T2014] CPU: 0 UID: 0 PID: 2014 Comm: syz.4.6895 Not tainted syzkaller #0 PREEMPT(full) [ 1153.005849][ T2014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1153.005868][ T2014] Call Trace: [ 1153.005877][ T2014] [ 1153.005887][ T2014] dump_stack_lvl+0xe8/0x150 [ 1153.005919][ T2014] should_fail_ex+0x412/0x560 [ 1153.005954][ T2014] should_failslab+0xa8/0x100 [ 1153.005988][ T2014] __kvmalloc_node_noprof+0x178/0x8a0 [ 1153.006030][ T2014] ? seq_read_iter+0x202/0xe10 [ 1153.006062][ T2014] seq_read_iter+0x202/0xe10 [ 1153.006084][ T2014] ? alloc_pages_bulk_noprof+0x5ff/0x7c0 [ 1153.006123][ T2014] ? __asan_memset+0x22/0x50 [ 1153.006157][ T2014] copy_splice_read+0x5ff/0xaa0 [ 1153.006200][ T2014] ? __pfx_copy_splice_read+0x10/0x10 [ 1153.006230][ T2014] ? look_up_lock_class+0x57/0x110 [ 1153.006252][ T2014] ? register_lock_class+0x31/0x2e0 [ 1153.006285][ T2014] ? alloc_pipe_info+0x373/0x4d0 [ 1153.006317][ T2014] ? __pfx_copy_splice_read+0x10/0x10 [ 1153.006342][ T2014] splice_direct_to_actor+0x478/0xc70 [ 1153.006382][ T2014] ? __pfx_direct_splice_actor+0x10/0x10 [ 1153.006420][ T2014] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1153.006460][ T2014] do_splice_direct+0x195/0x290 [ 1153.006491][ T2014] ? __pfx_do_splice_direct+0x10/0x10 [ 1153.006520][ T2014] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1153.006551][ T2014] ? bpf_lsm_file_permission+0x9/0x20 [ 1153.006581][ T2014] ? security_file_permission+0x75/0x260 [ 1153.006607][ T2014] ? rw_verify_area+0x255/0x4d0 [ 1153.006642][ T2014] do_sendfile+0x535/0x7d0 [ 1153.006666][ T2014] ? __pfx_vfs_write+0x10/0x10 [ 1153.006704][ T2014] ? __pfx_do_sendfile+0x10/0x10 [ 1153.006728][ T2014] ? __fget_files+0x3a0/0x420 [ 1153.006765][ T2014] __se_sys_sendfile64+0x144/0x1a0 [ 1153.006793][ T2014] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 1153.006827][ T2014] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1153.006850][ T2014] do_syscall_64+0x15f/0xf80 [ 1153.006869][ T2014] ? trace_irq_disable+0x3b/0x140 [ 1153.006897][ T2014] ? clear_bhb_loop+0x40/0x90 [ 1153.006921][ T2014] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1153.006941][ T2014] RIP: 0033:0x7fe4edf9ce59 [ 1153.006963][ T2014] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1153.006982][ T2014] RSP: 002b:00007fe4eee42028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1153.007013][ T2014] RAX: ffffffffffffffda RBX: 00007fe4ee215fa0 RCX: 00007fe4edf9ce59 [ 1153.007028][ T2014] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000006 [ 1153.007041][ T2014] RBP: 00007fe4eee42090 R08: 0000000000000000 R09: 0000000000000000 [ 1153.007053][ T2014] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 1153.007066][ T2014] R13: 00007fe4ee216038 R14: 00007fe4ee215fa0 R15: 00007ffdc7d2c338 [ 1153.007102][ T2014] [ 1154.268149][ T2042] batadv_slave_1: entered promiscuous mode [ 1154.311234][ T2041] batadv_slave_1: left promiscuous mode [ 1154.484435][ T2046] netlink: 'syz.4.6905': attribute type 21 has an invalid length. [ 1154.500094][ T2046] IPv6: NLM_F_CREATE should be specified when creating new route [ 1154.813293][ T2053] sctp: [Deprecated]: syz.4.6906 (pid 2053) Use of int in max_burst socket option. [ 1154.813293][ T2053] Use struct sctp_assoc_value instead [ 1154.845217][ T2059] FAULT_INJECTION: forcing a failure. [ 1154.845217][ T2059] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1154.863125][ T2059] CPU: 1 UID: 0 PID: 2059 Comm: syz.0.6908 Not tainted syzkaller #0 PREEMPT(full) [ 1154.863156][ T2059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1154.863169][ T2059] Call Trace: [ 1154.863179][ T2059] [ 1154.863188][ T2059] dump_stack_lvl+0xe8/0x150 [ 1154.863220][ T2059] should_fail_ex+0x412/0x560 [ 1154.863256][ T2059] _copy_to_user+0x31/0xb0 [ 1154.863292][ T2059] simple_read_from_buffer+0xe1/0x170 [ 1154.863325][ T2059] proc_fail_nth_read+0x1bb/0x230 [ 1154.863357][ T2059] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1154.863389][ T2059] ? rw_verify_area+0x2a6/0x4d0 [ 1154.863418][ T2059] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1154.863447][ T2059] vfs_read+0x20c/0xa70 [ 1154.863483][ T2059] ? __pfx___mutex_lock+0x10/0x10 [ 1154.863507][ T2059] ? __pfx_vfs_read+0x10/0x10 [ 1154.863545][ T2059] ? __fget_files+0x2a/0x420 [ 1154.863576][ T2059] ? __fget_files+0x3a0/0x420 [ 1154.863600][ T2059] ? __fget_files+0x2a/0x420 [ 1154.863637][ T2059] ksys_read+0x150/0x270 [ 1154.863670][ T2059] ? __pfx_ksys_read+0x10/0x10 [ 1154.863710][ T2059] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1154.863733][ T2059] do_syscall_64+0x15f/0xf80 [ 1154.863753][ T2059] ? trace_irq_disable+0x3b/0x140 [ 1154.863785][ T2059] ? clear_bhb_loop+0x40/0x90 [ 1154.863812][ T2059] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1154.863833][ T2059] RIP: 0033:0x7f865a35d68e [ 1154.863854][ T2059] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1154.863871][ T2059] RSP: 002b:00007f865b171fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1154.863894][ T2059] RAX: ffffffffffffffda RBX: 00007f865b1726c0 RCX: 00007f865a35d68e [ 1154.863910][ T2059] RDX: 000000000000000f RSI: 00007f865b1720a0 RDI: 0000000000000008 [ 1154.863923][ T2059] RBP: 00007f865b172090 R08: 0000000000000000 R09: 0000000000000000 [ 1154.863936][ T2059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1154.863949][ T2059] R13: 00007f865a616038 R14: 00007f865a615fa0 R15: 00007ffd3c446988 [ 1154.863986][ T2059] [ 1155.872684][ T2091] __nla_validate_parse: 61 callbacks suppressed [ 1155.872710][ T2091] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.6918'. [ 1155.900868][ T2090] bridge0: port 1(bridge_slave_0) entered disabled state [ 1156.127527][ T2107] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6920'. [ 1156.204337][ T2090] bridge_slave_0 (unregistering): left allmulticast mode [ 1156.211648][ T2090] bridge_slave_0 (unregistering): left promiscuous mode [ 1156.219532][ T2090] bridge0: port 1(bridge_slave_0) entered disabled state [ 1156.304288][ T2110] tipc: Started in network mode [ 1156.345134][ T2110] tipc: Node identity c28c107cb7e2, cluster identity 4711 [ 1156.387581][ T2110] tipc: Enabled bearer , priority 0 [ 1156.396257][T24196] net_ratelimit: 83 callbacks suppressed [ 1156.396279][T24196] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1156.417557][T24196] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1156.420337][ T2104] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6919'. [ 1156.475447][T32198] bond2: (slave gretap0): failed to get link speed/duplex [ 1156.523075][ T2104] tipc: Resetting bearer [ 1156.538137][ T2111] syzkaller0: entered promiscuous mode [ 1156.581622][ T2119] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6922'. [ 1156.585170][ T2111] syzkaller0: entered allmulticast mode [ 1156.613449][ T2122] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6921'. [ 1156.738899][ T2103] tipc: Resetting bearer [ 1156.786981][ T2122] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6921'. [ 1156.868336][ T2103] tipc: Disabling bearer [ 1156.920145][T32199] bond2: (slave bridge0): failed to get link speed/duplex [ 1156.940576][T32199] bond2: (slave gretap0): failed to get link speed/duplex [ 1156.948037][T24196] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1156.948863][ T2139] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6927'. [ 1156.962656][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1156.963582][T24196] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1157.066430][ T2139] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1157.078366][ T2140] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6927'. [ 1157.126863][ T2144] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6927'. [ 1157.161263][T32198] bond2: (slave bridge0): failed to get link speed/duplex [ 1157.191153][T30260] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1157.217035][ T2145] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.6929'. [ 1157.808410][ T2199] mac80211_hwsim hwsim91 ;: renamed from wlan0 (while UP) [ 1157.994275][ T2151] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1158.871599][ T2248] netlink: 'syz.4.6954': attribute type 1 has an invalid length. [ 1158.903118][ T2248] nbd: error processing sock list [ 1159.186538][ T2214] lo speed is unknown, defaulting to 1000 [ 1159.218283][ T2214] lo speed is unknown, defaulting to 1000 [ 1159.464584][ T2280] netlink: 'syz.2.6962': attribute type 1 has an invalid length. [ 1160.528373][ T2324] can: request_module (can-proto-3) failed. [ 1161.070149][ T2303] lo speed is unknown, defaulting to 1000 [ 1161.086672][ T2303] lo speed is unknown, defaulting to 1000 [ 1161.156364][ T2346] pimreg: entered allmulticast mode [ 1161.184748][ T2346] pimreg: left allmulticast mode [ 1161.443758][ T2357] netlink: 'syz.0.6980': attribute type 9 has an invalid length. [ 1161.452014][ T2357] netlink: 'syz.0.6980': attribute type 6 has an invalid length. [ 1161.461021][ T2357] netlink: 'syz.0.6980': attribute type 7 has an invalid length. [ 1161.469080][ T2357] netlink: 'syz.0.6980': attribute type 8 has an invalid length. [ 1161.734693][T24196] net_ratelimit: 74 callbacks suppressed [ 1161.734719][T24196] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1161.755741][T24196] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1162.232780][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1162.290765][T32198] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1162.306100][T32198] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1162.401184][T12469] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1162.526018][ T2371] __nla_validate_parse: 13 callbacks suppressed [ 1162.526040][ T2371] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6984'. [ 1162.711397][T32198] bond2: (slave gretap0): failed to get link speed/duplex [ 1162.731857][T32198] bond2: (slave bridge0): failed to get link speed/duplex [ 1162.841374][ T64] bond2: (slave gretap0): failed to get link speed/duplex [ 1162.849775][T24196] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1162.894587][ T2387] netlink: 324 bytes leftover after parsing attributes in process `syz.0.6987'. [ 1162.925382][ T2387] netlink: 308 bytes leftover after parsing attributes in process `syz.0.6987'. [ 1162.955130][ T2384] erspan1: entered allmulticast mode [ 1163.095846][ T2398] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6986'. [ 1163.128203][ T2398] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6986'. [ 1163.185278][ T2396] debugfs: '1^!Y [ 1163.185278][ T2396] 3UH5rBn\' already exists in 'ieee80211' [ 1163.306546][ T2399] netlink: 'syz.2.6991': attribute type 9 has an invalid length. [ 1163.336518][ T2399] netlink: 'syz.2.6991': attribute type 6 has an invalid length. [ 1163.344892][ T2399] netlink: 'syz.2.6991': attribute type 7 has an invalid length. [ 1163.368794][ T2399] netlink: 'syz.2.6991': attribute type 8 has an invalid length. [ 1163.683397][ T2401] sysfs: cannot create duplicate filename '/class/ieee80211/1^!Y [ 1163.683397][ T2401] 3UH5rBn\' [ 1163.697342][ T2401] CPU: 1 UID: 0 PID: 2401 Comm: syz.1.6990 Not tainted syzkaller #0 PREEMPT(full) [ 1163.697374][ T2401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1163.697387][ T2401] Call Trace: [ 1163.697397][ T2401] [ 1163.697407][ T2401] dump_stack_lvl+0xe8/0x150 [ 1163.697440][ T2401] sysfs_warn_dup+0x8e/0xa0 [ 1163.697468][ T2401] sysfs_do_create_link_sd+0xc0/0x110 [ 1163.697498][ T2401] device_add_class_symlinks+0x1cf/0x240 [ 1163.697531][ T2401] device_add+0x475/0xbb0 [ 1163.697564][ T2401] wiphy_register+0x1fb1/0x2fe0 [ 1163.697625][ T2401] ? __pfx_wiphy_register+0x10/0x10 [ 1163.697655][ T2401] ? __pfx_netdev_run_todo+0x10/0x10 [ 1163.697681][ T2401] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 1163.697717][ T2401] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 1163.697756][ T2401] ieee80211_register_hw+0x3c53/0x4910 [ 1163.697794][ T2401] ? ieee80211_register_hw+0x1961/0x4910 [ 1163.697852][ T2401] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 1163.697879][ T2401] ? __asan_memset+0x22/0x50 [ 1163.697907][ T2401] ? __hrtimer_setup+0x1b7/0x260 [ 1163.697933][ T2401] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1163.697968][ T2401] mac80211_hwsim_new_radio+0x3306/0x57b0 [ 1163.698037][ T2401] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1163.698069][ T2401] ? __asan_memcpy+0x40/0x70 [ 1163.698100][ T2401] hwsim_new_radio_nl+0xd96/0xfa0 [ 1163.698136][ T2401] genl_family_rcv_msg_doit+0x22a/0x330 [ 1163.698160][ T2401] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1163.698187][ T2401] ? bpf_lsm_capable+0x9/0x20 [ 1163.698199][ T2401] ? security_capable+0x7e/0x2c0 [ 1163.698220][ T2401] genl_rcv_msg+0x61c/0x7a0 [ 1163.698242][ T2401] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1163.698259][ T2401] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1163.698277][ T2401] ? __pfx_ref_tracker_free+0x10/0x10 [ 1163.698303][ T2401] netlink_rcv_skb+0x232/0x4b0 [ 1163.698318][ T2401] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1163.698336][ T2401] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1163.698361][ T2401] ? down_read+0x270/0x2e0 [ 1163.698375][ T2401] ? genl_rcv+0xd/0x40 [ 1163.698393][ T2401] genl_rcv+0x28/0x40 [ 1163.698409][ T2401] netlink_unicast+0x75c/0x8e0 [ 1163.698435][ T2401] netlink_sendmsg+0x813/0xb40 [ 1163.698456][ T2401] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1163.698473][ T2401] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1163.698492][ T2401] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1163.698511][ T2401] ____sys_sendmsg+0x972/0x9f0 [ 1163.698526][ T2401] ? __might_fault+0xaf/0x130 [ 1163.698547][ T2401] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1163.698568][ T2401] ? import_iovec+0x73/0xa0 [ 1163.698596][ T2401] ___sys_sendmsg+0x2a5/0x360 [ 1163.698609][ T2401] ? __lock_acquire+0x6b5/0x2cf0 [ 1163.698627][ T2401] ? __pfx____sys_sendmsg+0x10/0x10 [ 1163.698646][ T2401] ? futex_wait+0x2a2/0x390 [ 1163.698682][ T2401] ? __fget_files+0x2a/0x420 [ 1163.698697][ T2401] ? __fget_files+0x3a0/0x420 [ 1163.698727][ T2401] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1163.698753][ T2401] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1163.698788][ T2401] ? rcu_is_watching+0x15/0xb0 [ 1163.698823][ T2401] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1163.698846][ T2401] do_syscall_64+0x15f/0xf80 [ 1163.698864][ T2401] ? trace_irq_disable+0x3b/0x140 [ 1163.698895][ T2401] ? clear_bhb_loop+0x40/0x90 [ 1163.698921][ T2401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1163.698934][ T2401] RIP: 0033:0x7fd875f9ce59 [ 1163.698948][ T2401] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1163.698959][ T2401] RSP: 002b:00007fd876d80028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1163.698976][ T2401] RAX: ffffffffffffffda RBX: 00007fd876216180 RCX: 00007fd875f9ce59 [ 1163.698985][ T2401] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 000000000000000a [ 1163.698994][ T2401] RBP: 00007fd876032d6f R08: 0000000000000000 R09: 0000000000000000 [ 1163.699002][ T2401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1163.699010][ T2401] R13: 00007fd876216218 R14: 00007fd876216180 R15: 00007ffe5629a008 [ 1163.699032][ T2401] [ 1164.301959][ C0] ------------[ cut here ]------------ [ 1164.307933][ C0] sk->sk_forward_alloc [ 1164.307960][ C0] WARNING: net/ipv4/af_inet.c:162 at inet_sock_destruct+0x62d/0x740, CPU#0: kworker/u8:18/24196 [ 1164.324115][ C0] Modules linked in: [ 1164.328597][ C0] CPU: 0 UID: 0 PID: 24196 Comm: kworker/u8:18 Not tainted syzkaller #0 PREEMPT(full) [ 1164.338342][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1164.348479][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 1164.355326][ C0] RIP: 0010:inet_sock_destruct+0x62d/0x740 [ 1164.361229][ C0] Code: 0f 0b 90 e9 58 fe ff ff e8 80 a8 9d f7 90 0f 0b 90 e9 8b fe ff ff e8 72 a8 9d f7 90 0f 0b 90 e9 b1 fe ff ff e8 64 a8 9d f7 90 <0f> 0b 90 e9 d7 fe ff ff 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 95 fc [ 1164.381021][ C0] RSP: 0018:ffffc90000007d40 EFLAGS: 00010246 [ 1164.387142][ C0] RAX: ffffffff8a281c5c RBX: dffffc0000000000 RCX: ffff88801df58000 [ 1164.395244][ C0] RDX: 0000000000000100 RSI: 0000000000000f70 RDI: 0000000000000000 [ 1164.403305][ C0] RBP: 0000000000000f70 R08: ffff888028eff9a7 R09: 1ffff110051dff34 [ 1164.411378][ C0] R10: dffffc0000000000 R11: ffffed10051dff35 R12: ffff888028eff700 [ 1164.419435][ C0] R13: ffff888028effc08 R14: ffff888028eff98c R15: ffffffff8feb2c80 [ 1164.427463][ C0] FS: 0000000000000000(0000) GS:ffff888125276000(0000) knlGS:0000000000000000 [ 1164.436484][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1164.443143][ C0] CR2: 00007f3cb1c00020 CR3: 00000000223ca000 CR4: 00000000003526f0 [ 1164.451278][ C0] Call Trace: [ 1164.454615][ C0] [ 1164.457493][ C0] ? __pfx_udp_destruct_sock+0x10/0x10 [ 1164.463029][ C0] __sk_destruct+0x8d/0x9d0 [ 1164.467572][ C0] ? rcu_core+0x751/0x1070 [ 1164.472065][ C0] ? __pfx___sk_destruct+0x10/0x10 [ 1164.477273][ C0] rcu_core+0x7cd/0x1070 [ 1164.481586][ C0] ? sched_clock+0x3f/0x60 [ 1164.486057][ C0] ? __pfx_rcu_core+0x10/0x10 [ 1164.490934][ C0] handle_softirqs+0x22a/0x840 [ 1164.495834][ C0] ? do_softirq+0x76/0xd0 [ 1164.500253][ C0] ? __alloc_skb+0x186/0x7d0 [ 1164.505048][ C0] ? __alloc_skb+0x186/0x7d0 [ 1164.509980][ C0] do_softirq+0x76/0xd0 [ 1164.514174][ C0] [ 1164.517221][ C0] [ 1164.520208][ C0] __local_bh_enable_ip+0xf8/0x130 [ 1164.525379][ C0] __alloc_skb+0x1aa/0x7d0 [ 1164.529039][ T2414] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6993'. [ 1164.529880][ C0] nsim_dev_trap_report_work+0x29a/0xb90 [ 1164.529927][ C0] ? process_scheduled_works+0xa70/0x1860 [ 1164.529963][ C0] ? process_scheduled_works+0xa70/0x1860 [ 1164.529989][ C0] process_scheduled_works+0xb5d/0x1860 [ 1164.530049][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1164.530081][ C0] ? assign_work+0x3d5/0x5e0 [ 1164.530111][ C0] worker_thread+0xa53/0xfc0 [ 1164.530169][ C0] kthread+0x389/0x470 [ 1164.530199][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1164.530222][ C0] ? __pfx_kthread+0x10/0x10 [ 1164.530252][ C0] ret_from_fork+0x514/0xb70 [ 1164.530282][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1164.530307][ C0] ? __switch_to+0xc79/0x1410 [ 1164.530343][ C0] ? __pfx_kthread+0x10/0x10 [ 1164.530373][ C0] ret_from_fork_asm+0x1a/0x30 [ 1164.530421][ C0] [ 1164.530434][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1164.530451][ C0] CPU: 0 UID: 0 PID: 24196 Comm: kworker/u8:18 Not tainted syzkaller #0 PREEMPT(full) [ 1164.530476][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1164.530490][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 1164.530518][ C0] Call Trace: [ 1164.530528][ C0] [ 1164.530537][ C0] vpanic+0x56c/0xa60 [ 1164.530563][ C0] ? __pfx__printk+0x10/0x10 [ 1164.530591][ C0] ? __pfx_vpanic+0x10/0x10 [ 1164.530613][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 1164.530636][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 1164.530668][ C0] panic+0xc5/0xd0 [ 1164.530692][ C0] ? __pfx_panic+0x10/0x10 [ 1164.530728][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 1164.530760][ C0] __warn+0x315/0x4c0 [ 1164.530781][ C0] ? inet_sock_destruct+0x62d/0x740 [ 1164.530813][ C0] ? inet_sock_destruct+0x62d/0x740 [ 1164.530851][ C0] __report_bug+0x29a/0x540 [ 1164.530878][ C0] ? kasan_save_track+0x3e/0x80 [ 1164.530902][ C0] ? kasan_save_free_info+0x46/0x50 [ 1164.530922][ C0] ? __kasan_slab_free+0x5c/0x80 [ 1164.530950][ C0] ? inet_sock_destruct+0x62d/0x740 [ 1164.530976][ C0] ? __pfx___report_bug+0x10/0x10 [ 1164.531001][ C0] ? ret_from_fork+0x514/0xb70 [ 1164.531019][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 1164.531058][ C0] ? inet_sock_destruct+0x62d/0x740 [ 1164.531083][ C0] report_bug+0x16a/0x220 [ 1164.531110][ C0] ? inet_sock_destruct+0x62d/0x740 [ 1164.531133][ C0] ? inet_sock_destruct+0x62f/0x740 [ 1164.531157][ C0] handle_bug+0x9c/0x200 [ 1164.531179][ C0] exc_invalid_op+0x1a/0x50 [ 1164.531202][ C0] asm_exc_invalid_op+0x1a/0x20 [ 1164.531221][ C0] RIP: 0010:inet_sock_destruct+0x62d/0x740 [ 1164.531247][ C0] Code: 0f 0b 90 e9 58 fe ff ff e8 80 a8 9d f7 90 0f 0b 90 e9 8b fe ff ff e8 72 a8 9d f7 90 0f 0b 90 e9 b1 fe ff ff e8 64 a8 9d f7 90 <0f> 0b 90 e9 d7 fe ff ff 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 95 fc [ 1164.531264][ C0] RSP: 0018:ffffc90000007d40 EFLAGS: 00010246 [ 1164.531282][ C0] RAX: ffffffff8a281c5c RBX: dffffc0000000000 RCX: ffff88801df58000 [ 1164.531297][ C0] RDX: 0000000000000100 RSI: 0000000000000f70 RDI: 0000000000000000 [ 1164.531309][ C0] RBP: 0000000000000f70 R08: ffff888028eff9a7 R09: 1ffff110051dff34 [ 1164.531323][ C0] R10: dffffc0000000000 R11: ffffed10051dff35 R12: ffff888028eff700 [ 1164.531337][ C0] R13: ffff888028effc08 R14: ffff888028eff98c R15: ffffffff8feb2c80 [ 1164.531360][ C0] ? inet_sock_destruct+0x62c/0x740 [ 1164.531396][ C0] ? __pfx_udp_destruct_sock+0x10/0x10 [ 1164.531421][ C0] __sk_destruct+0x8d/0x9d0 [ 1164.531443][ C0] ? rcu_core+0x751/0x1070 [ 1164.531464][ C0] ? __pfx___sk_destruct+0x10/0x10 [ 1164.531484][ C0] rcu_core+0x7cd/0x1070 [ 1164.531503][ C0] ? sched_clock+0x3f/0x60 [ 1164.531544][ C0] ? __pfx_rcu_core+0x10/0x10 [ 1164.531579][ C0] handle_softirqs+0x22a/0x840 [ 1164.531604][ C0] ? do_softirq+0x76/0xd0 [ 1164.531628][ C0] ? __alloc_skb+0x186/0x7d0 [ 1164.531645][ C0] ? __alloc_skb+0x186/0x7d0 [ 1164.531662][ C0] do_softirq+0x76/0xd0 [ 1164.531682][ C0] [ 1164.531689][ C0] [ 1164.531697][ C0] __local_bh_enable_ip+0xf8/0x130 [ 1164.531718][ C0] __alloc_skb+0x1aa/0x7d0 [ 1164.531742][ C0] nsim_dev_trap_report_work+0x29a/0xb90 [ 1164.531770][ C0] ? process_scheduled_works+0xa70/0x1860 [ 1164.531799][ C0] ? process_scheduled_works+0xa70/0x1860 [ 1164.531822][ C0] process_scheduled_works+0xb5d/0x1860 [ 1164.531883][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1164.531910][ C0] ? assign_work+0x3d5/0x5e0 [ 1164.531937][ C0] worker_thread+0xa53/0xfc0 [ 1164.531985][ C0] kthread+0x389/0x470 [ 1164.532009][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1164.532028][ C0] ? __pfx_kthread+0x10/0x10 [ 1164.532054][ C0] ret_from_fork+0x514/0xb70 [ 1164.532077][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1164.532098][ C0] ? __switch_to+0xc79/0x1410 [ 1164.532127][ C0] ? __pfx_kthread+0x10/0x10 [ 1164.532152][ C0] ret_from_fork_asm+0x1a/0x30 [ 1164.532191][ C0] [ 1164.540390][ C0] Kernel Offset: disabled