last executing test programs: 3m16.067423714s ago: executing program 4 (id=1736): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0xfff, 0x5fc}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r2, @ANYBLOB="0108000007500500580012800b0001006272696467650000480002800500190002000000050017"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x0, 0x0, 0x0, 0xccd21cca, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='h'], 0x68}, 0x9}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002a40)=@delchain={0x714, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x1, 0x2}, {0x0, 0x1}, {0x5, 0xc}}, [@filter_kind_options=@f_bpf={{0x8}, {0x6e8, 0x2, [@TCA_BPF_ACT={0x6e4, 0x1, [@m_bpf={0xfc, 0x11, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_NAME={0x5, 0x6, '\x00'}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0xffffffff, 0x3, 0xffffffffffffffff, 0x10001, 0x6}}]}, {0x9e, 0x6, "a41f25d22b1bae1b6bfb4a42ad5ba9db462fca41280c331f630e2c9f0be1093117392575082305ebc27660464ef802792ce06133244235023f0f4882fc0a47f4d5e499a8857cd81b0e6fda422cbc53ad098872214190756df6bbd0e760248aa97e200702fd569bd27d4a70df1d4a123ffc42d2592c81751e15e260622f14aeaaca5dc8acab93651fdd1d5614d98f28fc76d402e1028d91028270"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_xt={0x114, 0x5, 0x0, 0x0, {{0x7}, {0x4}, {0xe9, 0x6, "a5fd64840366fd7ad44f3f053221ded9ced495590e2bc8690a2765e56ded8425cb3eb0e04bbcfec50e639bf373167e617b24eccd260f28bb850873b1e2154b158987d6e585e10ffeaba32641bae47de041e1169d8e4a65b8ce3633a4469c93c5228320c572237d92a9ae6bbc2d2bd3a2d1e27de283017ecf9fca6b2cd8a119dee59702830717b694625f60f5c81f688775c5e292f76a0ffa39e1d2cabd639d1c111c01e0d2f9faa220154db33399242bca9f4fac65c74cb6264c28ac7a50037564c7b417fb61d617d212ab3243c30e0e82d9a12651b74553d539b991a302489af94626e5aa"}, {0xc, 0x7, {0x0, 0xeb0757422c733451}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_bpf={0xbc, 0x8, 0x0, 0x0, {{0x8}, {0x14, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x3}]}, {0x81, 0x6, "5d3aee85a6264cff4a2163adaec321e008985cfa435b8922eeb16f1932265618158a3fe72c442a68b182e8f673f9251a03dc831c5947be17ca906c3dcb99adb55bc5f0ad8886f235f45d7e29bb727715f2e7a3200ac63eb79f7a023835874514b60b0177c40370157c0c21b37875e7e4a2e75b3cc54be7d719fa695469"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_tunnel_key={0xfc, 0x8, 0x0, 0x0, {{0xf}, {0x48, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @mcast1}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private0}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @local}]}, {0x85, 0x6, "51719d53a2b05eda58a80a40d29b01394b8749d7d9ef9f47cce75187b6f333f4bfe797fa4227bf38cf0b71e1b4888d8d1ed410a788c182ba498076ca9ab3d63a8f29175d44a2e8364296c34ac0cdb8972288ecf6515bec4861a53e1e18e54679f5666b0536d0a008aa9b3be1f5e00c4c72460249c372de16eb2cfc15714543d6f3"}, {0xc}, {0xc, 0x8, {0x3, 0xddc47d017e85c037}}}}, @m_xt={0x318, 0x13, 0x0, 0x0, {{0x7}, {0x1dc, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xc2, 0x6, {0x9, 'nat\x00', 0xef, 0x7, "859b467c76be5255b2d4f6101cf6d6cb72c6b46512ecba82df24523b07075e859fd68154d7171a2ca3415ec79cc8ff85b058dae9f1d49e867787957d80637320c0378f6dd94a52c2fc850929bb787aaf6e604a1f57d44fa7775cf7a4a456f808f135c349fb4aefe7e2bc180a4665f5c90321659b9d7722c18c63d8c5ac244a1245b6673adcb794eced4f5288970c153c5b1cd1be29cd924c"}}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_TARG={0xa5, 0x6, {0x5, 'filter\x00', 0xd, 0x6ccd, "51100666dd78f1337c421065ba00caa97aaa8e1aa207a78c6d7e2a3e620334de1a64a8d40af7536c5a07a1997c6fd28e7ed1f866f9454e1014a5129fbeaf1a76cb7b54d80907f7d86c39ff782b12b0422666997d539a25e55b0591b44929ef0dcea5434727f1d8aa8d1ec3a7d56965dae69f90f152f907a0ab28fc"}}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}]}, {0x115, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x714}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r5) sendmsg$NLBL_MGMT_C_ADD(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000a00)={0x130, r6, 0x200, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0xce, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcs\xe1\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x17]\xd5\xd0\xf0\xa8\xeb\xd2g\x92\x04\x02\v\x00od\xe6,\xd3@I\x17\xf3\xbees0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93U6\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\x8fs\xbf6\xe8\xe3Xg3&\xe2 \xd6\n\x9d=~<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4\x8fK=E0\xe8R\x83'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}]}, 0x130}}, 0x0) r7 = socket(0x11, 0x3, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'gre0\x00', 0x0}) bind$packet(r7, &(0x7f0000000180)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r7, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000003ec0)=[{0x0, 0x494}], 0x1, 0x0, 0x0, 0x8811}, 0x0) r10 = socket(0x10, 0x803, 0x0) sendto(r10, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r10, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000140)) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x20, 0x26, 0x9, 0x70bd26, 0x25dfdbfd, {0x8}, [@typed={0xb, 0x1, 0x0, 0x0, @str='autofs\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000780)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TESTMODE(r4, &(0x7f0000000f00)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="68030000", @ANYRES16=0x0, @ANYBLOB="00022abd7000fddbdf252d00000008000300", @ANYRES32=r13, @ANYBLOB="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"], 0x368}, 0x1, 0x0, 0x0, 0x1}, 0x4040000) write$tun(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="000060030280697608000600010000c800193d45ff01df2d0bea3c38e430b6baff68aae7e7a589fb6bdfee274a2bf12188ba5ccc4d422c566ca59a5939ada75d665460ed480ac231299c2118550b9d57e348ac8c45f9c1960f370d9c9cc7d5760e2b5f7a2c086d"], 0x6e) ioctl$sock_inet_SIOCRTMSG(r0, 0x890d, &(0x7f0000000200)={0x0, {0x2, 0x4e23, @rand_addr=0x64010100}, {0x2, 0x4e23, @multicast1}, {0x2, 0x4e24, @private=0xa010102}, 0x24, 0x0, 0x0, 0x0, 0xffff, &(0x7f00000001c0)='dummy0\x00', 0x8, 0xb42, 0x9}) sendmsg$NFT_MSG_GETCHAIN(r12, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, 0x4, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_CHAIN_ID={0x8}, @NFTA_CHAIN_COUNTERS={0x34, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x68}}, 0x0) 3m15.405085009s ago: executing program 4 (id=1741): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$pppl2tp(0x18, 0x1, 0x1) getsockopt(r1, 0x1, 0x29, 0x0, &(0x7f0000000080)) sendmsg$nl_xfrm(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000600)=@getsa={0x34, 0x12, 0x1, 0x0, 0x0, {@in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x0, 0xa, 0x6c}, [@mark={0xc, 0x15, {0x0, 0x7}}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x8, 'macsec0\x00', {'netpci0\x00'}}) r2 = socket$inet(0x2, 0x3, 0x30) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x0, 0x8, 0x9, 0x0, 0x4040c, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000440)={r3, &(0x7f0000000300)="cd541e230a16e7d3f03c750294d8ed6bb009a41eff547b7c0b00"/39, &(0x7f0000000340)=""/152}, 0x20) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x4020940d, 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000000)=0x6, 0x4) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000080)=0x2c) r5 = socket$netlink(0x10, 0x3, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x8, 0x1, 0x7, 0x850, 0x25, 0x7, 0x7}, &(0x7f00000001c0)=0x9c) setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000240)=@assoc_value={r6, 0x3}, 0x8) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="1b0000001d0001000000000004086aa42d"], 0x30}, 0x1, 0x0, 0x0, 0x40800}, 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r5, 0x84, 0x1e, &(0x7f0000000040)=0x9, 0x4) 3m15.124083117s ago: executing program 4 (id=1743): r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f000042a000/0x800000)=nil, 0x800000, 0x0, 0x11, r0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb0}, 0x1, 0x0, 0x0, 0x20004014}, 0x0) mmap$xdp(&(0x7f0000791000/0x4000)=nil, 0x4000, 0x0, 0x4188031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) 3m14.795998541s ago: executing program 4 (id=1747): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x3, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket(0x2000000015, 0x80005, 0x0) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback, 0xffffff81}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) close(0x3) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, &(0x7f0000000540)="93f9bd121e96c6325f40d67459268925b0f412c106ecfe5a030ffc98e38bce1a0fca45e0712a7d357924a0b15e151243d004d7f2919fa43efaf94c382f164d05a176620726c08f51c8ce0633fa93c84a3a7e5e827d45714bc578986868b7efb46f0e4d723f0d79c50228c505532ba74e36a96651bd5eb222e47542c26fd888993c74d05816610361a860d4c76a8c3c5c9fa0f450b893979dbc1bb4e20ce8cfa0fee4acbec1870a36caf12a66bf5262536fcf65497a7e2cfcb2fcf87d", 0x0}, 0xffffffffffffff76) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_PROTOCOL(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x1, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x3, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket(0x2000000015, 0x80005, 0x0) (async) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback, 0xffffff81}, 0x1c) (async) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) close(0x3) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, &(0x7f0000000540)="93f9bd121e96c6325f40d67459268925b0f412c106ecfe5a030ffc98e38bce1a0fca45e0712a7d357924a0b15e151243d004d7f2919fa43efaf94c382f164d05a176620726c08f51c8ce0633fa93c84a3a7e5e827d45714bc578986868b7efb46f0e4d723f0d79c50228c505532ba74e36a96651bd5eb222e47542c26fd888993c74d05816610361a860d4c76a8c3c5c9fa0f450b893979dbc1bb4e20ce8cfa0fee4acbec1870a36caf12a66bf5262536fcf65497a7e2cfcb2fcf87d", 0x0}, 0xffffffffffffff76) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_PROTOCOL(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x1, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x80) (async) 3m14.440131395s ago: executing program 4 (id=1750): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fdffffee0000000000000000850000002c00000095"], &(0x7f0000000040)='GPL\x00'}, 0x94) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r2, &(0x7f00000009c0)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}}], 0x1, 0x4000000) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000180)={r4, 0x5}, 0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000000c0)={r4, 0xfff7, 0x6, [0x1000, 0x92, 0xfff7, 0x3696, 0xfff, 0x100]}, &(0x7f0000000100)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r0}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) 3m13.785179657s ago: executing program 4 (id=1755): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f00000007c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000800)=0x14) sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x1c, r2, 0x1}, 0x1c}}, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r2, 0x300, 0x70bd2c, 0x25dfdbff, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x41}, 0x20000800) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r3, &(0x7f0000000780)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x80, 0x6, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}]}, 0x80}}, 0x11) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r5, &(0x7f00000000c0)="800034ca269bb73c", 0x8, 0x2004c080, &(0x7f0000000040)={0xa, 0xfffd, 0xc9, @mcast2}, 0x1c) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r4) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="090300000000000000002e"], 0x14}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000540)={'sit0\x00', &(0x7f0000000440)={'syztnl1\x00', 0x0, 0x7800, 0x700, 0x2, 0x2, {{0x33, 0x4, 0x3, 0xc, 0xcc, 0x68, 0x0, 0x9, 0x4, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x41}, {[@timestamp_addr={0x44, 0x1c, 0x48, 0x1, 0x9, [{@dev={0xac, 0x14, 0x14, 0x40}, 0x8000}, {@empty, 0x10}, {@empty, 0x3}]}, @lsrr={0x83, 0x7, 0xb8, [@dev={0xac, 0x14, 0x14, 0x2a}]}, @timestamp_addr={0x44, 0x24, 0x4d, 0x1, 0x8, [{@broadcast, 0x4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@dev={0xac, 0x14, 0x14, 0x16}, 0x792}, {@remote, 0x1b48}]}, @timestamp_addr={0x44, 0x3c, 0xf6, 0x1, 0x4, [{@local, 0x3}, {@empty, 0x1400}, {@local, 0x59f}, {@loopback, 0xa}, {@private=0xa010100, 0xfffffff7}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3800}, {@loopback, 0xe5e}]}, @rr={0x7, 0x23, 0x9b, [@multicast2, @dev={0xac, 0x14, 0x14, 0x1e}, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @local, @broadcast, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @ssrr={0x89, 0xf, 0x97, [@rand_addr=0x64010102, @local, @remote]}]}}}}}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000680)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x84, r6, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_DEBUG_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_DEBUG_HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x40844}, 0x4000) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x4, 0x80000000, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xffe0}, {0x0, 0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x5}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r12 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r12, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x2c, r9, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_ENABLED={0x5, 0x29, 0x4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x805}, 0x80) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)={0x14, 0x27, 0x9, 0x70bd24, 0x25dfdc00, {0x6}}, 0x14}}, 0x4040080) 2m58.616807202s ago: executing program 32 (id=1755): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f00000007c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000800)=0x14) sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x1c, r2, 0x1}, 0x1c}}, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r2, 0x300, 0x70bd2c, 0x25dfdbff, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x41}, 0x20000800) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r3, &(0x7f0000000780)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x80, 0x6, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}]}, 0x80}}, 0x11) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r5, &(0x7f00000000c0)="800034ca269bb73c", 0x8, 0x2004c080, &(0x7f0000000040)={0xa, 0xfffd, 0xc9, @mcast2}, 0x1c) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r4) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="090300000000000000002e"], 0x14}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000540)={'sit0\x00', &(0x7f0000000440)={'syztnl1\x00', 0x0, 0x7800, 0x700, 0x2, 0x2, {{0x33, 0x4, 0x3, 0xc, 0xcc, 0x68, 0x0, 0x9, 0x4, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x41}, {[@timestamp_addr={0x44, 0x1c, 0x48, 0x1, 0x9, [{@dev={0xac, 0x14, 0x14, 0x40}, 0x8000}, {@empty, 0x10}, {@empty, 0x3}]}, @lsrr={0x83, 0x7, 0xb8, [@dev={0xac, 0x14, 0x14, 0x2a}]}, @timestamp_addr={0x44, 0x24, 0x4d, 0x1, 0x8, [{@broadcast, 0x4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@dev={0xac, 0x14, 0x14, 0x16}, 0x792}, {@remote, 0x1b48}]}, @timestamp_addr={0x44, 0x3c, 0xf6, 0x1, 0x4, [{@local, 0x3}, {@empty, 0x1400}, {@local, 0x59f}, {@loopback, 0xa}, {@private=0xa010100, 0xfffffff7}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3800}, {@loopback, 0xe5e}]}, @rr={0x7, 0x23, 0x9b, [@multicast2, @dev={0xac, 0x14, 0x14, 0x1e}, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @local, @broadcast, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @ssrr={0x89, 0xf, 0x97, [@rand_addr=0x64010102, @local, @remote]}]}}}}}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000680)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x84, r6, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_DEBUG_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_DEBUG_HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x40844}, 0x4000) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x4, 0x80000000, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xffe0}, {0x0, 0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x5}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r12 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r12, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x2c, r9, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_ENABLED={0x5, 0x29, 0x4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x805}, 0x80) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)={0x14, 0x27, 0x9, 0x70bd24, 0x25dfdc00, {0x6}}, 0x14}}, 0x4040080) 2m34.868147715s ago: executing program 0 (id=1926): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r1, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) r2 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r2, 0x800442d4, &(0x7f0000000040)=0x1) 2m34.155929163s ago: executing program 0 (id=1929): sendmsg$inet(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000100)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, 0x0, 0x30}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002a40)=@delchain={0x784, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x1, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x758, 0x2, [@TCA_BPF_ACT={0x754, 0x1, [@m_bpf={0xfc, 0x11, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_NAME={0x5, 0x6, '\x00'}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0xffffffff, 0x3, 0xffffffffffffffff, 0x10001, 0x6}}]}, {0x9d, 0x6, "a41f25d22b1bae1b6bfb4a42ad5ba9db462fca41280c331f630e2c9f0be1093117392575082305ebc27660464ef802792ce06133244235023f0f4882fc0a47f4d5e499a8857cd81b0e6fda422cbc53ad098872214190756df6bbd0e760248aa97e200702fd569bd27d4a70df1d4a123ffc42d2592c81751e15e260622f14aeaaca5dc8acab93651fdd1d5614d98f28fc76d402e1028d910282"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_xt={0x110, 0x5, 0x0, 0x0, {{0x7}, {0x4}, {0xe8, 0x6, "a5fd64840366fd7ad44f3f053221ded9ced495590e2bc8690a2765e56ded8425cb3eb0e04bbcfec50e639bf373167e617b24eccd260f28bb850873b1e2154b158987d6e585e10ffeaba32641bae47de041e1169d8e4a65b8ce3633a4469c93c5228320c572237d92a9ae6bbc2d2bd3a2d1e27de283017ecf9fca6b2cd8a119dee59702830717b694625f60f5c81f688775c5e292f76a0ffa39e1d2cabd639d1c111c01e0d2f9faa220154db33399242bca9f4fac65c74cb6264c28ac7a50037564c7b417fb61d617d212ab3243c30e0e82d9a12651b74553d539b991a302489af94626e5"}, {0xc, 0x7, {0x0, 0xeb0757422c733451}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_bpf={0xbc, 0x8, 0x0, 0x0, {{0x8}, {0x14, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x3}]}, {0x81, 0x6, "5d3aee85a6264cff4a2163adaec321e008985cfa435b8922eeb16f1932265618158a3fe72c442a68b182e8f673f9251a03dc831c5947be17ca906c3dcb99adb55bc5f0ad8886f235f45d7e29bb727715f2e7a3200ac63eb79f7a023835874514b60b0177c40370157c0c21b37875e7e4a2e75b3cc54be7d719fa695469"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_tunnel_key={0xf8, 0x8, 0x0, 0x0, {{0xf}, {0x48, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @mcast1}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private0}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @local}]}, {0x81, 0x6, "51719d53a2b05eda58a80a40d29b01394b8749d7d9ef9f47cce75187b6f333f4bfe797fa4227bf38cf0b71e1b4888d8d1ed410a788c182ba498076ca9ab3d63a8f29175d44a2e8364296c34ac0cdb8972288ecf6515bec4861a53e1e18e54679f5666b0536d0a008aa9b3be1f5e00c4c72460249c372de16eb2cfc1571"}, {0xc}, {0xc, 0x8, {0x3, 0xddc47d017e85c037}}}}, @m_xt={0x390, 0x13, 0x0, 0x0, {{0x7}, {0x254, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xc1, 0x6, {0x9, 'nat\x00', 0xef, 0x7, "859b467c76be5255b2d4f6101cf6d6cb72c6b46512ecba82df24523b07075e859fd68154d7171a2ca3415ec79cc8ff85b058dae9f1d49e867787957d80637320c0378f6dd94a52c2fc850929bb787aaf6e604a1f57d44fa7775cf7a4a456f808f135c349fb4aefe7e2bc180a4665f5c90321659b9d7722c18c63d8c5ac244a1245b6673adcb794eced4f5288970c153c5b1cd1be29cd92"}}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_TARG={0xaf, 0x6, {0x800, 'security\x00', 0x1, 0x7, "d5e486c3628c9e8c7a111651b758fe819fd071b9b7f85b09d69fe633753b56c91ebb716bda7cbe3f10db8feb7bc1aa6f7814145a0e3654c9f2b23521e6b910aa4c428134bb648bffc21f0a74a340b278cc3949b549385a407cd95c5697ed222bd3d4e4c2a0bf56c7937d87120b4f89a05bbde47670503d8a27ee2823502a90679b7fb497e2"}}, @TCA_IPT_TARG={0x93, 0x6, {0x8, 'filter\x00', 0xd, 0x6ccd, "51100666dd78f1337c421065ba00caa97aaa8e1aa207a78c6d7e2a3e620334de1a64a8d40af7536c5a07a1997c6fd28e7ed1f866f9454e1014a5129fbeaf1a76cb7b54d80907f7d86c39ff782b12b0422666997d539a25e55b0591b44929ef0dcea5434727f1d8aa8d"}}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}]}, {0x115, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}]}]}}]}, 0x784}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) (async) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)={0x18, 0x52, 0x1, 0x0, 0x0, {0x2, 0x3}, [@typed={0x4, 0x1, 0x0, 0x0, @binary}]}, 0x18}}, 0x0) (async) socket$phonet(0x23, 0x2, 0x1) (async, rerun: 64) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) (rerun: 64) 2m32.252463924s ago: executing program 0 (id=1936): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff) getsockopt$IP_SET_OP_GET_BYINDEX(r0, 0x1, 0x53, 0x0, &(0x7f0000000040)) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef91", 0x12) sendmsg$IEEE802154_LLSEC_SETPARAMS(r2, 0x0, 0x40000) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r3, 0x10e, 0x8, &(0x7f0000000000)=0x2, 0x4) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={0x0}}, 0x810) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@gettfilter={0x3c, 0x2e, 0x800, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x1d, 0x5}, {0x0, 0xc}, {0x3, 0x8}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x10000}, {0x8, 0xb, 0xffff4bbd}]}, 0x3c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) r6 = socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, r7) recvmmsg(r7, 0x0, 0x0, 0x2062, 0x0) sendmsg$netlink(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000010000000000000000002c00000020000000ff0f00000000000008001c00c9"], 0x3c}], 0x1, 0x0, 0x0, 0xb305e06d8ab48273}, 0x48800) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) socket(0x26, 0x80000, 0xfffffff7) 2m30.882970301s ago: executing program 0 (id=1940): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x16}]}, @NFT_MSG_NEWSETELEM={0x50, 0xc, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x20, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1a, 0x1, "10c4e3257eaa66a5725a38cd58d26115453baa910be0"}]}]}]}]}], {0x14, 0x10}}, 0xd4}}, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"/1664], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffffe}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r2, 0x702, 0x64, 0x0, &(0x7f0000000380)="e460334470b8d480eb00c1520800", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000040), 0x4) connect$llc(r1, &(0x7f0000000000)={0x1a, 0x0, 0x1, 0x1, 0x0, 0x0, @remote}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x600, 0x4000000}, 0x28) 2m29.623894919s ago: executing program 0 (id=1944): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006080)=@delchain={0x24, 0x66, 0x1, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0x5}, {}, {0xb, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x8048}, 0x20004800) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$AUTOFS_IOC_PROTOVER(r7, 0x80049363, &(0x7f0000000000)) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="a80000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa1408040000000000000000000000ffffffffffff0c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000cbff0740000000001400188008000240000000030800014000000005"], 0xa8}}, 0x0) 2m28.732105039s ago: executing program 0 (id=1949): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="650a000000000000611180000000000018000000000000000000000000000000950000"], &(0x7f0000000000)='GPL\x00'}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000e40)={0x30, 0x0, 0x8, 0x5, 0x0, 0x0, {0x3, 0x0, 0x7}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8809}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048041}, 0x40084) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000002700090025bd5cb881f28a200fd400000800010003"], 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000001c0)={'wpan0\x00'}) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000ac0)={{r0, &(0x7f0000000080)='&\x00', 0x404000, &(0x7f00000000c0)={@_ha_fsid={[0xc428, 0x8]}, {0x1, 0x1, 0x6, 0xd4}}, 0x5, &(0x7f0000000140), &(0x7f0000000400)=0x400}, 0x6, &(0x7f0000000a00)=[{0x2, 0xbc, &(0x7f0000000440)='\x9co\\.Y\x00', &(0x7f0000000480)="87", 0x1, 0x20}, {0x2, 0x2000, &(0x7f00000004c0)='GPL\x00', &(0x7f0000000500)="f85db8025dc91abea9dcf4a0ad9998723139d7c4f8d0ac2ecc6afdda57b0220c233752d5055fc32c7fc954037b96bf9e421814a9e35ecba0db8b3d2c1c701916441f7e6e8d78a24a5f88b0837e7a0eda54e417ebee4415da0d43f9d386e0448435c62f7ac4815a568e57641de36b54ffe5f43894a121eb324882677151c20891ad0fee5926d186931a9830c648f6b715ccdf393b61f2", 0x96, 0x10}, {0x0, 0x9, &(0x7f00000005c0)='GPL\x00', &(0x7f0000000640)="dbae705e6adcfca582384139604f2b3729333bbf9d78ba274376bce1f9db123a3d80fdb7651f59f4c1679025e4937b3f9d8b6ce915f98be526c0eee9c615a6d36b4db8a598488f9587c660de274059946c199544fe478895f65f9de8ea16b201f06a470da54422476ff3b51fd7cdd0be9bc5cab99b41ab212dc438cfdb7322fb8803dd1ed11ecfb297fef71447eb3b230a752056ebbcb943b6d8334f47752a2c385afe0a0002229e7accd75fad", 0xad, 0x24}, {0x1, 0x9, &(0x7f0000000700)=']\x00', &(0x7f00000007c0)="bde51e0268c32034d8162f1b3583f3fd97c441b2854cae311469f5ccb83680b0e74e495f01bd1eaee4ea1d7d38875574c51765e2801d946c020822bcd6bb5f5037bf266d3143f6ea670e24837be9", 0x4e, 0x38}, {0x2, 0x97f, &(0x7f0000000840)='\x00', &(0x7f0000000880)="c10432e2dcbf12988be78df5b007aa005971f1955cabd1a3e37fa86b4aa7329999991c6600b5d05eff9f283aa6c6ac209e7e793c760b9d91133a9849033d9fa8525eb13d3a7d632e673d4ac4041947dd3a5737ebe1d72b22bee0083e5f65208cc752145aee16f3367a1324e5211269854337b8beca", 0x75, 0x3a}, {0x3, 0x951, &(0x7f0000000900)='/,&\xae\x00', &(0x7f0000000940)="f6a3c061b4c20606384981f98de7d55e7f3ac4e1b1cc9c90cdaf83f66d6e029609606accc46ddb1103c6d0d962931394986e989d462704535a9c7ccda4172c49b6b555a292c13029ea22fbb0456fad32433e4c1476d040a4246563ed568536d2cfc43097e01a4cb7a237204bd7fe222f4cde91f08bdef824b27ecc736fc0e85aa5839e700a1c300dbf7c4ded83e86bfae9c4538f33f190fc775a4f7e1d838d197990b47af70854f632948c0a6acdc48ce5daf0da", 0xb4, 0x22}]}) sendmsg$AUDIT_GET_FEATURE(r5, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x10, 0x3fb, 0x2, 0x70bd2c, 0x25dfdbfc, "", ["", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x2800}, 0x40001000) sendmsg$NL802154_CMD_NEW_SEC_KEY(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000e80)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r3, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="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"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r6 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f0000000200)={0x9, {{0x2, 0x4e23, @remote}}}, 0x88) 2m19.226257953s ago: executing program 3 (id=1973): mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x8000000000000000, 0x7f}) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000040), &(0x7f0000000080)=0x4) r1 = socket$igmp6(0xa, 0x3, 0x2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r3) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000006c0)={0x48, r4, 0x1, 0x70bd2c, 0x1000, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0x18, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x128}]}, 0x48}}, 0x4) setsockopt$inet6_int(r1, 0x29, 0x7, &(0x7f00000003c0)=0x80000001, 0x4) 2m18.629594581s ago: executing program 3 (id=1974): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="020600000200"], 0x10}}, 0x0) (async) r1 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8916, &(0x7f0000000000)={r1}) (async) r3 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8916, &(0x7f0000000000)={r3}) (async) ioctl$XFS_IOC_FSGEOMETRY_V1(r1, 0x80705864, &(0x7f00000001c0)) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r4, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f0000000180)={0x14, 0x17, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4000881}, 0x100089c0) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r6, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x38, 0x10, 0x439, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r7, 0x9801, 0x20005}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r7}]}}}]}, 0x38}}, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0x439, 0x0, 0x3, {0x0, 0x0, 0x0, r7, 0x9801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @local}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c801}, 0x4) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newlink={0x130, 0x10, 0x20, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, 0x20000, 0xc00}, [@IFLA_PROTO_DOWN={0x5, 0x27, 0x4}, @IFLA_LINK={0x8, 0x5, r10}, @IFLA_PROMISCUITY={0x8, 0x1e, 0xfffffff0}, @IFLA_IFALIASn={0x4}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0xba1f}, @IFLA_LINK_NETNSID={0x8, 0x25, 0x1}, @IFLA_LINKINFO={0xe4, 0x12, 0x0, 0x1, @ip6vti={{0xb}, {0xd4, 0x2, 0x0, 0x1, [@IFLA_VTI_REMOTE={0x14, 0x5, @mcast1}, @IFLA_VTI_LOCAL={0x14, 0x4, @mcast2}, @IFLA_VTI_REMOTE={0x14, 0x5, @local}, @IFLA_VTI_LOCAL={0x14, 0x4, @local}, @vti_common_policy=[@IFLA_VTI_IKEY={0x8, 0x2, 0x7}, @IFLA_VTI_FWMARK={0x8}, @IFLA_VTI_IKEY={0x8, 0x2, 0x7ad}], @IFLA_VTI_LOCAL={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @IFLA_VTI_REMOTE={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IFLA_VTI_LOCAL={0x14, 0x4, @loopback}, @IFLA_VTI_REMOTE={0x14, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}}, @vti_common_policy=[@IFLA_VTI_OKEY={0x8, 0x3, 0x7fffffff}, @IFLA_VTI_IKEY={0x8, 0x2, 0xfffffff5}, @IFLA_VTI_FWMARK={0x8}]]}}}]}, 0x130}}, 0x0) 2m17.600211356s ago: executing program 3 (id=1978): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e7, 0x0) 2m17.205222888s ago: executing program 3 (id=1982): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r0, 0x40786e88, &(0x7f0000000400)={{&(0x7f0000000080)=[{0x4, 0x6, 0x8, {0xfffffffffffffffa, 0x4}, 0x5, 0x2, 0x400}, {0x1, 0xa5, 0x10000, {0xdf67, 0x7070ae1}, 0xffff, 0x3, 0x10001}, {0x9, 0x9, 0x6, {0x1, 0x4}, 0x91, 0x0, 0x8}, {0xff, 0xffffffff, 0x2, {0x40, 0x6}, 0x14000000000000, 0x10000, 0x2}, {0x9, 0x3ff, 0x8, {0x4, 0x100000001}, 0x10000000000, 0x1, 0x4}, {0xfffffffffffffff8, 0x0, 0x8, {0x5, 0x9}, 0x8, 0x81, 0x7f}], 0x6, 0x40, 0x6, 0x8}, {&(0x7f0000000200)=[{0x3}, {0x0, 0xdad1bb6}, {0x42, 0xc5}, {0x0, 0x8000000000000000}], 0x4, 0x10, 0x4, 0x8000000000000001}, {&(0x7f0000000240)=[0x4, 0x0, 0x3], 0x3, 0x8, 0x101, 0x1}, {&(0x7f0000000280)=[{0x9, 0x9c23, 0x1, 0x7, 0x8}, {0xd, 0x7, 0xfc, 0x3, 0xf}, {0xb4, 0x8, 0xfffffffffffffffe, 0x8, 0x2}, {0x9, 0x3, 0xd2a6, 0xc, 0x7}, {0x4, 0x2, 0x3, 0x81, 0x6}, {0x8, 0x7, 0x5, 0x7, 0x1}, {0xb3b4, 0x80000001, 0x200, 0xc1d, 0x2}, {0x3, 0xffff, 0x4, 0x3, 0x7}], 0x8, 0x28, 0x8001, 0x8}, {&(0x7f00000003c0)=[0x7fffffffffffffff, 0x73f, 0x644], 0x3, 0x8, 0x3, 0x9}}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001a40)=@newqdisc={0x154, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffffffe, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa}, {0xffffffffffffffbb, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x3c}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x400, 0x80000000, 0x55, 0x9, 0x3, 0x12, 0x1}}]}}]}, 0x154}}, 0x0) 2m15.939975459s ago: executing program 3 (id=1984): r0 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000000)={'filter\x00', 0x0, 0x0, 0x0, [0x2, 0x2, 0x6, 0xd77, 0x9]}, &(0x7f0000000080)=0x78) r1 = socket$inet(0x10, 0x3, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) syz_emit_ethernet(0x81, &(0x7f0000000680)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x47, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x6c, 0x0, @private1, @private2, [], "532dd31cd4c036c409c1563e75b460d12fda2cb837d6d7"}}}}}}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000500)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="280000001d000100000000000400000007000000", @ANYRES32=r6, @ANYBLOB="800002000a0002"], 0x28}}, 0x0) r7 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r7) getsockname$packet(r7, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x1}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@gettclass={0x24, 0x2a, 0x129, 0x870bd2c, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x3}, {}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x44}, 0x40004) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)=0x10000011) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000540)={'ip_vti0\x00', &(0x7f0000000500)=@ethtool_cmd={0x27, 0x0, 0xf, 0xd1cd, 0x9, 0x9, 0x7, 0x6, 0x5, 0x2, 0xa, 0x6, 0x3, 0x2, 0x6, 0x20000000, [0x9, 0x45de]}}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r9, {0x0, 0xf}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc, 0x1, 0x0, 0x4], 0x0, [0x5, 0x6, 0x2, 0x0, 0x8, 0x0, 0x9, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x8001]}}]}}]}, 0x8c}}, 0x0) 2m14.288711602s ago: executing program 3 (id=1988): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0500000005020000000700000000400000000000", @ANYRES32=0x1, @ANYBLOB="00000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r0}, &(0x7f0000000140), &(0x7f0000000380)}, 0x20) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x12, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffff8}, 0x50) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r2, &(0x7f0000001ac0)="07914f64920333e970d8a43b50d268f016489aea42b3", 0x16, 0x8080, &(0x7f0000000280)={0xa, 0x0, 0xfffffffe, @mcast1}, 0x1c) shutdown(r2, 0x1) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7c, &(0x7f00000000c0), &(0x7f0000000180)=0x8) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x19, 0x2, &(0x7f0000000440)=@raw=[@btf_id={0x18, 0x5, 0x3, 0x0, 0x3}], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000003c0)={r1, &(0x7f0000000280)="c80d8d45a0888b7d31ccf43640608ad9fcc8ebbc2502b957c4636109028d089a4e259ea16375e207a8349f77c4d308fe03a09635dfb598995851c7e24c66ecf267de5b6081278a15c7e5f7007ff198ced3a8d05197d57b4c50f2d7af836ff1d3700cf216ea77d794fcf8fb2933dbd6db4e818f4e25ba23cd9ecfdc7180b44ec07a360b418755176b9da960e5929bba51a95582a5b9768e7699542926eef3dcdb3eb49e3c6f5069c9f6e1e38386f4d65ea3d8a268ff122f1e8f7b9a08f07a5d1dbb4d4a"}, 0x20) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f00000006c0)={{r0, &(0x7f0000000000)=')(.\x00', 0x2000, &(0x7f0000000040)={@align=0x4, {0x800, 0x2, 0xff, 0x9}}, 0xf, &(0x7f0000000080)={@_ha_fsid}, &(0x7f0000000400)=0x3cf}, {[0x0, 0x100, 0x401, 0xe]}, 0x4, 0x7a, &(0x7f0000000640)=""/122}) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000018c0), r3) sendmsg$TIPC_CMD_SHOW_PORTS(r3, &(0x7f0000002040)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x1c, r4, 0x901, 0x70bd2b, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000000) openat$nci(0xffffffffffffff9c, &(0x7f0000001b40), 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001b80), &(0x7f0000001bc0)=0xc) getuid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001c00), &(0x7f0000001c40)=0xc) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r5, 0x84, 0x74, 0x0, &(0x7f0000000000)=0x43) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000001c80)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000001cc0)={{{@in=@private, @in6=@ipv4={""/10, ""/2, @multicast1}}}, {{@in=@loopback}, 0x0, @in6=@private2}}, &(0x7f0000001dc0)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001e00), &(0x7f0000001e40)=0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x9, @ipv4={'\x00', '\xff\xff', @local}, 0x800001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f5d937e5523", "4705a7b6113b967d7314f7201eb2babf", "1d1cbe23", "fdffffffffffffff"}, 0x28) sendmsg$inet(r6, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[], 0xb}, 0x40) 2m13.313449233s ago: executing program 33 (id=1949): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="650a000000000000611180000000000018000000000000000000000000000000950000"], &(0x7f0000000000)='GPL\x00'}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000e40)={0x30, 0x0, 0x8, 0x5, 0x0, 0x0, {0x3, 0x0, 0x7}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8809}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048041}, 0x40084) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000002700090025bd5cb881f28a200fd400000800010003"], 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000001c0)={'wpan0\x00'}) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000ac0)={{r0, &(0x7f0000000080)='&\x00', 0x404000, &(0x7f00000000c0)={@_ha_fsid={[0xc428, 0x8]}, {0x1, 0x1, 0x6, 0xd4}}, 0x5, &(0x7f0000000140), &(0x7f0000000400)=0x400}, 0x6, &(0x7f0000000a00)=[{0x2, 0xbc, &(0x7f0000000440)='\x9co\\.Y\x00', &(0x7f0000000480)="87", 0x1, 0x20}, {0x2, 0x2000, &(0x7f00000004c0)='GPL\x00', &(0x7f0000000500)="f85db8025dc91abea9dcf4a0ad9998723139d7c4f8d0ac2ecc6afdda57b0220c233752d5055fc32c7fc954037b96bf9e421814a9e35ecba0db8b3d2c1c701916441f7e6e8d78a24a5f88b0837e7a0eda54e417ebee4415da0d43f9d386e0448435c62f7ac4815a568e57641de36b54ffe5f43894a121eb324882677151c20891ad0fee5926d186931a9830c648f6b715ccdf393b61f2", 0x96, 0x10}, {0x0, 0x9, &(0x7f00000005c0)='GPL\x00', &(0x7f0000000640)="dbae705e6adcfca582384139604f2b3729333bbf9d78ba274376bce1f9db123a3d80fdb7651f59f4c1679025e4937b3f9d8b6ce915f98be526c0eee9c615a6d36b4db8a598488f9587c660de274059946c199544fe478895f65f9de8ea16b201f06a470da54422476ff3b51fd7cdd0be9bc5cab99b41ab212dc438cfdb7322fb8803dd1ed11ecfb297fef71447eb3b230a752056ebbcb943b6d8334f47752a2c385afe0a0002229e7accd75fad", 0xad, 0x24}, {0x1, 0x9, &(0x7f0000000700)=']\x00', &(0x7f00000007c0)="bde51e0268c32034d8162f1b3583f3fd97c441b2854cae311469f5ccb83680b0e74e495f01bd1eaee4ea1d7d38875574c51765e2801d946c020822bcd6bb5f5037bf266d3143f6ea670e24837be9", 0x4e, 0x38}, {0x2, 0x97f, &(0x7f0000000840)='\x00', &(0x7f0000000880)="c10432e2dcbf12988be78df5b007aa005971f1955cabd1a3e37fa86b4aa7329999991c6600b5d05eff9f283aa6c6ac209e7e793c760b9d91133a9849033d9fa8525eb13d3a7d632e673d4ac4041947dd3a5737ebe1d72b22bee0083e5f65208cc752145aee16f3367a1324e5211269854337b8beca", 0x75, 0x3a}, {0x3, 0x951, &(0x7f0000000900)='/,&\xae\x00', &(0x7f0000000940)="f6a3c061b4c20606384981f98de7d55e7f3ac4e1b1cc9c90cdaf83f66d6e029609606accc46ddb1103c6d0d962931394986e989d462704535a9c7ccda4172c49b6b555a292c13029ea22fbb0456fad32433e4c1476d040a4246563ed568536d2cfc43097e01a4cb7a237204bd7fe222f4cde91f08bdef824b27ecc736fc0e85aa5839e700a1c300dbf7c4ded83e86bfae9c4538f33f190fc775a4f7e1d838d197990b47af70854f632948c0a6acdc48ce5daf0da", 0xb4, 0x22}]}) sendmsg$AUDIT_GET_FEATURE(r5, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x10, 0x3fb, 0x2, 0x70bd2c, 0x25dfdbfc, "", ["", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x2800}, 0x40001000) sendmsg$NL802154_CMD_NEW_SEC_KEY(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000e80)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r3, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="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"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r6 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f0000000200)={0x9, {{0x2, 0x4e23, @remote}}}, 0x88) 1m58.014617272s ago: executing program 34 (id=1988): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0500000005020000000700000000400000000000", @ANYRES32=0x1, @ANYBLOB="00000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r0}, &(0x7f0000000140), &(0x7f0000000380)}, 0x20) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x12, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffff8}, 0x50) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r2, &(0x7f0000001ac0)="07914f64920333e970d8a43b50d268f016489aea42b3", 0x16, 0x8080, &(0x7f0000000280)={0xa, 0x0, 0xfffffffe, @mcast1}, 0x1c) shutdown(r2, 0x1) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7c, &(0x7f00000000c0), &(0x7f0000000180)=0x8) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x19, 0x2, &(0x7f0000000440)=@raw=[@btf_id={0x18, 0x5, 0x3, 0x0, 0x3}], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000003c0)={r1, &(0x7f0000000280)="c80d8d45a0888b7d31ccf43640608ad9fcc8ebbc2502b957c4636109028d089a4e259ea16375e207a8349f77c4d308fe03a09635dfb598995851c7e24c66ecf267de5b6081278a15c7e5f7007ff198ced3a8d05197d57b4c50f2d7af836ff1d3700cf216ea77d794fcf8fb2933dbd6db4e818f4e25ba23cd9ecfdc7180b44ec07a360b418755176b9da960e5929bba51a95582a5b9768e7699542926eef3dcdb3eb49e3c6f5069c9f6e1e38386f4d65ea3d8a268ff122f1e8f7b9a08f07a5d1dbb4d4a"}, 0x20) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f00000006c0)={{r0, &(0x7f0000000000)=')(.\x00', 0x2000, &(0x7f0000000040)={@align=0x4, {0x800, 0x2, 0xff, 0x9}}, 0xf, &(0x7f0000000080)={@_ha_fsid}, &(0x7f0000000400)=0x3cf}, {[0x0, 0x100, 0x401, 0xe]}, 0x4, 0x7a, &(0x7f0000000640)=""/122}) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000018c0), r3) sendmsg$TIPC_CMD_SHOW_PORTS(r3, &(0x7f0000002040)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x1c, r4, 0x901, 0x70bd2b, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000000) openat$nci(0xffffffffffffff9c, &(0x7f0000001b40), 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001b80), &(0x7f0000001bc0)=0xc) getuid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001c00), &(0x7f0000001c40)=0xc) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r5, 0x84, 0x74, 0x0, &(0x7f0000000000)=0x43) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000001c80)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000001cc0)={{{@in=@private, @in6=@ipv4={""/10, ""/2, @multicast1}}}, {{@in=@loopback}, 0x0, @in6=@private2}}, &(0x7f0000001dc0)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001e00), &(0x7f0000001e40)=0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x9, @ipv4={'\x00', '\xff\xff', @local}, 0x800001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f5d937e5523", "4705a7b6113b967d7314f7201eb2babf", "1d1cbe23", "fdffffffffffffff"}, 0x28) sendmsg$inet(r6, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[], 0xb}, 0x40) 43.721741516s ago: executing program 5 (id=2131): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002780)={0x48, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x3}, @CTA_MARK={0x8}]}, 0x48}}, 0x0) sendto$inet6(r0, &(0x7f00000003c0)='\x00', 0x1, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x20, @loopback, 0x1}, 0x1c) sendmmsg$sock(r0, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000640)="89", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="c9", 0x1}], 0x1}}], 0x2, 0x0) shutdown(r0, 0x1) 42.80824835s ago: executing program 5 (id=2132): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000740)=@newtaction={0xec, 0x30, 0x0, 0x0, 0x0, {}, [{0xd8, 0x1, [@m_police={0x80, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x53, 0x6, "fb97564f8f470910dd75fcd24a81607f5323d13806d7a349d6c55ebc78f02f1a38c9a920041c793cca89ef5c00000000000000002c032f52f86e65b25b12aa602e7f75b45f0a50ece7857ea7587dd2"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_gact={0x3e, 0x2, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0xe7b}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1d46, 0x20000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xec}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r3) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000000c0)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_KEY(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="290e29bd7000fbdbdf0527960000050031000e0000001400300053e0e85290ceb080fb816d3cdadf198b08000200", @ANYRES32=r5, @ANYBLOB='$\x00'], 0x5c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_DEV(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r2, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}]}, 0x34}, 0x1, 0x0, 0x0, 0x40005}, 0x0) 41.528961122s ago: executing program 5 (id=2133): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000028c0)={0x94, 0x0, 0x5, 0x70bd28, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x48, 0xe, {{{}, {0x8}, @broadcast, @device_a, @from_mac=@broadcast}, 0x0, @random=0x6, 0x8858, @void, @void, @val={0x3, 0x1, 0x68}, @val={0x4, 0x6, {0x2, 0x0, 0x7, 0x3}}, @val={0x6, 0x2, 0x10}, @void, @val={0x25, 0x3, {0x1, 0x6c, 0x9}}, @val={0x2a, 0x1, {0x1, 0x0, 0x1}}, @void, @void, @void, @val={0x71, 0x7, {0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x54, 0x60}}, @void}}], @crypto_settings=[@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xfffffffd}, @NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x969, 0xa, 0x100, 0x1, 0xe00, 0x40b7, 0x8]}}]}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x10}, 0x40) 40.58698801s ago: executing program 5 (id=2134): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c0002800500010004002000080020"], 0x4c}}, 0x0) 35.150904763s ago: executing program 5 (id=2135): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000003c0)={r3, 0x5}, &(0x7f0000000400)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000640)={r3, @in={{0x2, 0x4e20, @empty}}}, &(0x7f0000000080)=0x84) r4 = epoll_create(0x9) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000000)={0xffffffffffffffff}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) getsockopt$inet6_tcp_int(r6, 0x6, 0x2, 0x0, &(0x7f0000000480)) r7 = socket$packet(0x11, 0x2, 0x300) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r8, 0xffffffffffffffff}, &(0x7f0000000440), &(0x7f0000000500)=r5}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x25, &(0x7f0000000700)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @jmp={0x5, 0x0, 0xb, 0xb, 0x9, 0x8, 0xffffffffffffffff}, @map_idx={0x18, 0x5, 0x5, 0x0, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r9}}, @btf_id={0x18, 0xd89aaa08f4970288, 0x3, 0x0, 0x5}]}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000240)={'macvtap0\x00'}) r10 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000030000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{r11}, &(0x7f0000000100), &(0x7f0000000140)='%pB \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r11, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r12, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x10, 0x1, 0x5) ppoll(&(0x7f00000000c0)=[{r0, 0x6a4}, {r4, 0x100}, {r5, 0x2012}, {r7, 0x8000}, {r10, 0x8000}], 0x5, &(0x7f0000000100)={0x0, 0x989680}, &(0x7f0000000140)={[0x8]}, 0x8) socket$nl_generic(0x10, 0x3, 0x10) 32.783496748s ago: executing program 5 (id=2138): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r2) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x4c, r3, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x82}]}]}, 0x4c}}, 0x40080) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001800dd8d000000000000000002000000000000060000000006001500010000001800168014000100000000000000000000003000000011"], 0x3c}}, 0x8000) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0xc8, 0x6, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_USERDATA={0xa7, 0x7, 0x1, 0x0, "72651235d8309b487c08d3fdf66585058785130448856ec215fcbf5c74d327249edbb5bd285d7838f1868fe8a185adc4c32d58a8dd122742de4e4c412a7b1721d92da90aa34dc584666bda3ea56daeccaad8fb6b71b13f1b3d0c0b8863c7d130261eeaf6565b9cbf07084a556ca8e59fc6e66284f2feb5a7c6ba8fb96ba4f3de2034624a659897f7e1cefec71d32401c44e5fc00f99a9a8ad78eb39899de9063d36233"}]}, @NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_COMPAT={0x1c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x89}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x88}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x14c}}, 0x8040) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x18, 0x1404, 0x1, 0x70bd27, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x20040004) socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/ipc\x00') socket$nl_rdma(0x10, 0x3, 0x14) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r2) (async) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x4c, r3, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x82}]}]}, 0x4c}}, 0x40080) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001800dd8d000000000000000002000000000000060000000006001500010000001800168014000100000000000000000000003000000011"], 0x3c}}, 0x8000) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0xc8, 0x6, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_USERDATA={0xa7, 0x7, 0x1, 0x0, "72651235d8309b487c08d3fdf66585058785130448856ec215fcbf5c74d327249edbb5bd285d7838f1868fe8a185adc4c32d58a8dd122742de4e4c412a7b1721d92da90aa34dc584666bda3ea56daeccaad8fb6b71b13f1b3d0c0b8863c7d130261eeaf6565b9cbf07084a556ca8e59fc6e66284f2feb5a7c6ba8fb96ba4f3de2034624a659897f7e1cefec71d32401c44e5fc00f99a9a8ad78eb39899de9063d36233"}]}, @NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_COMPAT={0x1c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x89}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x88}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x14c}}, 0x8040) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x18, 0x1404, 0x1, 0x70bd27, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x20040004) (async) socket$nl_route(0x10, 0x3, 0x0) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/ipc\x00') (async) 16.931423727s ago: executing program 35 (id=2138): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r2) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x4c, r3, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x82}]}]}, 0x4c}}, 0x40080) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001800dd8d000000000000000002000000000000060000000006001500010000001800168014000100000000000000000000003000000011"], 0x3c}}, 0x8000) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0xc8, 0x6, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_USERDATA={0xa7, 0x7, 0x1, 0x0, "72651235d8309b487c08d3fdf66585058785130448856ec215fcbf5c74d327249edbb5bd285d7838f1868fe8a185adc4c32d58a8dd122742de4e4c412a7b1721d92da90aa34dc584666bda3ea56daeccaad8fb6b71b13f1b3d0c0b8863c7d130261eeaf6565b9cbf07084a556ca8e59fc6e66284f2feb5a7c6ba8fb96ba4f3de2034624a659897f7e1cefec71d32401c44e5fc00f99a9a8ad78eb39899de9063d36233"}]}, @NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_COMPAT={0x1c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x89}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x88}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x14c}}, 0x8040) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x18, 0x1404, 0x1, 0x70bd27, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x20040004) socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/ipc\x00') socket$nl_rdma(0x10, 0x3, 0x14) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r2) (async) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x4c, r3, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x82}]}]}, 0x4c}}, 0x40080) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001800dd8d000000000000000002000000000000060000000006001500010000001800168014000100000000000000000000003000000011"], 0x3c}}, 0x8000) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0xc8, 0x6, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_USERDATA={0xa7, 0x7, 0x1, 0x0, "72651235d8309b487c08d3fdf66585058785130448856ec215fcbf5c74d327249edbb5bd285d7838f1868fe8a185adc4c32d58a8dd122742de4e4c412a7b1721d92da90aa34dc584666bda3ea56daeccaad8fb6b71b13f1b3d0c0b8863c7d130261eeaf6565b9cbf07084a556ca8e59fc6e66284f2feb5a7c6ba8fb96ba4f3de2034624a659897f7e1cefec71d32401c44e5fc00f99a9a8ad78eb39899de9063d36233"}]}, @NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_COMPAT={0x1c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x89}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x88}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x14c}}, 0x8040) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x18, 0x1404, 0x1, 0x70bd27, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x20040004) (async) socket$nl_route(0x10, 0x3, 0x0) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/ipc\x00') (async) 16.339462472s ago: executing program 1 (id=2156): r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000180)={0x18, 0x0, {0x3, @broadcast, 'ip_vti0\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000040)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl(r2, 0x40047438, &(0x7f0000000040)) close(0x3) write$ppp(r2, &(0x7f00000001c0)="ab29", 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000080)=0x8) writev(r4, &(0x7f00000006c0)=[{&(0x7f0000000200)="48c50b2f0e9d6fc9c1d7e1a6cb1a07e9b36f66b81c7ff7236d002f8ddd3e6209af920e111080090d79b4aa0702c85070a5ced26185888f2d35eb1c31ad79453b306da4503c9ef569ead4e3f8fef3fc2d5203386be7897994c5cc6f9ac6b6a7635cbb2d92d6aa7f571937f14cccd977cfd1581717cb9fd0f3d4fbe578c710c4ba6e1fea716dcbacd8fe6bc0d6da615a1412e60c9fb43b88603696768a857bdbae3ccea6412b234e4e51a1ab57698caa34b19af615c98eef35b0a3", 0xba}, {&(0x7f00000002c0)="1542462d8b85b4451c843084281230b58cb6eaf311d081fc2ce6b4b37292d215a79974abc18310385ff127a54508f620058c1b31b2394958674a9eacf12d2421c43de44dddbd5ab9a97ec840b38da9b7f3", 0x51}, {&(0x7f0000000340)="d9447c36268a1b8dac6cd0b3da364e995460d88a64330abd93eaeeed306d7859ecf5133c13bc3ce61e8297b2bb9998997763d0fc4dab35c9f1152a1d14364680703fdc86a87194757052ad46ac2970898b5aa5b23e2e9d3e35b75570b02ce3826f32467f64cd3a1defefe27e", 0x6c}, {&(0x7f00000003c0)="2fd04d6ec6cb4afc15f2a5f43b5bf6a9106f020833663f484f9c209e1e08c044a03593a8ddbf7325608fafe55a34e84d950b88d24b32244d52b9d3df76fc0f10bfbe9e872ac75c1d285e9735457ae0a12e006798eaa35d306828f923af74129da1e6c08f71d7361276bd5b67b981142d7f6b1bd5fb5c250b259f4d6776b452fe8b0b2dfdc81c91c8e98bb2cc2c6bdba403e353a89df6248c16e365983b2125f6ad1234bf64602c18e93a864cb4a200925a569427a77bc67ab8afbff199ac1658cacf7250f4ea8512ced9d2e1cd0843bf6c4138b7227bed", 0xd7}, {&(0x7f00000005c0)="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", 0xfa}], 0x5) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xfc}]}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYRES64=r5], 0x58}, 0x1, 0x0, 0x0, 0x520c4}, 0x20044010) 14.374671914s ago: executing program 1 (id=2158): ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f00000001c0)={{0xffffffffffffffff, &(0x7f0000000000)='\'\x00', 0x200040, &(0x7f0000000040)={@_ha_fsid={[0x7, 0x7]}, {0x9, 0x1, 0xc4, 0xa000}}, 0x1, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0xfffff000}, 0x1, &(0x7f0000000180)=[{0x2, 0x3ff, &(0x7f0000000100)='c\x00', &(0x7f0000000140)="a296a8ec6ce0c9be991793360c90b6a6c067ae0fa3b881110b7a53c3eb1ae2acb95f721c4b825da56007bccac5c1c1813d", 0x31, 0x20}]}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r1, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x1a}}}}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x51}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x1) sendmsg$NL80211_CMD_DEL_TX_TS(r0, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, r1, 0x8, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x6}]}, 0x34}}, 0x54) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000480)=0x3, 0x4) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000004c0)=0x0) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000500)=r2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x13, 0x4, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, [@jmp={0x5, 0x1, 0x2, 0x3, 0x9, 0x100}]}, &(0x7f0000000580)='syzkaller\x00', 0xfffffff9, 0x1b, &(0x7f00000005c0)=""/27, 0x40f00, 0x44, '\x00', 0x0, @fallback=0x38, r0, 0x8, &(0x7f0000000600)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000640)={0x2, 0xe, 0xa99c, 0x7}, 0x10, 0x0, 0xffffffffffffffff, 0x6, &(0x7f0000000680)=[r0], &(0x7f00000006c0)=[{0x1, 0x5, 0xb, 0x6}, {0x1, 0x2, 0x10, 0x5}, {0x0, 0x3, 0x8}, {0x4, 0x1, 0x1, 0x2}, {0x5, 0x4, 0x8}, {0x3, 0x2, 0x8, 0xb}], 0x10, 0x1}, 0x94) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000900)={&(0x7f0000000840)={0xbc, r1, 0x2, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xaff4, 0x3}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}], @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4004885}, 0x4000) r4 = accept$phonet_pipe(r0, &(0x7f0000000980), &(0x7f00000009c0)=0x10) ioctl$SIOCGSTAMP(r4, 0x8906, &(0x7f0000000a00)) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000a40)=r0, 0x4) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000b80)={'erspan0\x00', &(0x7f0000000ac0)={'tunl0\x00', 0x0, 0x8000, 0x80, 0x6, 0x8, {{0x26, 0x4, 0x0, 0x5, 0x98, 0x66, 0x0, 0x0, 0x4, 0x0, @remote, @loopback, {[@timestamp_addr={0x44, 0x4c, 0x86, 0x1, 0x8, [{@multicast2, 0x6c}, {@empty, 0x800}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xf}, {@local, 0xfffffffd}, {@empty, 0xc4ab}, {@multicast2, 0x80}, {@broadcast, 0x81}, {@local, 0x8}, {@rand_addr=0x64010102, 0x7}]}, @timestamp_prespec={0x44, 0x2c, 0x86, 0x3, 0xd, [{@remote, 0x6}, {@multicast2, 0x7}, {@private=0xa010100, 0x2}, {@multicast1, 0x4c6}, {@multicast2, 0x1}]}, @rr={0x7, 0xb, 0x29, [@private=0xa010102, @dev={0xac, 0x14, 0x14, 0x1c}]}]}}}}}) sendmsg$nl_route_sched(r0, &(0x7f0000000c40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)=@deltclass={0x2c, 0x29, 0x400, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xf, 0x2}, {0xb, 0xc}, {0x7, 0xfff2}}, [@TCA_RATE={0x6, 0x5, {0x4, 0x9}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40080}, 0x0) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000cc0), r0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x28, r6, 0xec3be2be3ddfa427, 0x70bd28, 0x25dfdbfd, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xb4}, @L2TP_ATTR_MRU={0x6, 0x1d, 0xb}]}, 0x28}, 0x1, 0x0, 0x0, 0x24004800}, 0x800) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x40522}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x28, r1, 0x12, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x50}, @void, @val={0xc, 0x99, {0x1, 0x6d}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x40008}, 0x24044010) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000ec0)={0x0, @in6={{0xa, 0x4e20, 0x2, @mcast1, 0x9}}, 0x4, 0xbd0, 0x9, 0x3, 0x52, 0x6, 0xc2}, &(0x7f0000000f80)=0x9c) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000fc0)={r7, 0x88, "0a36513e05a6f63394df9e46258ee06f6e4bac45bb02eddd86fc3ec8ffecaa00ea3cea35c3d7061d9f986540bb9d74a48850c620617eb1f2cd221d0681c0a6395dcab6b5c8657a123fd39d84a1b54160ce6c8d9e01d29157c3d89a2809c032f086dc7e5527c316aa9fa5fca2cdd245803631f37331978c253c5211e8d72a1a81d16a9f378df655ce"}, &(0x7f0000001080)=0x90) r8 = socket(0x29, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CHANNEL(r8, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x30, r1, 0x800, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x1, 0x59}}}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16d5}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x8010) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000001200), &(0x7f0000001240)=0x4) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r8, 0x89f8, &(0x7f0000001380)={'erspan0\x00', &(0x7f0000001280)={'sit0\x00', r5, 0x7, 0x700, 0x0, 0x7, {{0x36, 0x4, 0x3, 0x4, 0xd8, 0x68, 0x0, 0x4, 0x4, 0x0, @local, @loopback, {[@timestamp_prespec={0x44, 0x54, 0x8, 0x3, 0x8, [{@multicast1, 0x7fff}, {@multicast2, 0x8}, {@private=0xa010101, 0x1c000}, {@dev={0xac, 0x14, 0x14, 0xd}, 0xe}, {@multicast2, 0x8}, {@broadcast}, {@empty, 0x8}, {@rand_addr=0x64010101, 0x4}, {@private=0xa010101, 0x2}, {@private=0xa010102, 0x5}]}, @rr={0x7, 0x2b, 0x57, [@rand_addr=0x64010100, @rand_addr=0x64010102, @empty, @rand_addr=0x64010101, @private=0xa010102, @rand_addr=0x64010101, @broadcast, @dev={0xac, 0x14, 0x14, 0xa}, @multicast2, @multicast1]}, @ssrr={0x89, 0x17, 0xf2, [@local, @remote, @local, @empty, @multicast2]}, @timestamp={0x44, 0x18, 0x97, 0x0, 0x4, [0x5, 0x4, 0x9, 0x8, 0x100]}, @generic={0x5434a45f14c5bda9, 0xe, "4bfbe890446b7a8dae27b569"}, @noop, @ra={0x94, 0x4}]}}}}}) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000013c0)={@broadcast, @broadcast, 0x0, 0x8, [@dev={0xac, 0x14, 0x14, 0x23}, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @private=0xa010100, @multicast1]}, 0x30) ppoll(&(0x7f0000001400)=[{r3, 0x400}, {}, {r3, 0xc0}], 0x3, &(0x7f0000001440)={0x0, 0x3938700}, &(0x7f0000001480), 0x8) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000001500), r8) sendmsg$DEVLINK_CMD_RATE_DEL(r10, &(0x7f0000001780)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001740)={&(0x7f0000001540)={0x1dc, r11, 0x800, 0x70bd2d, 0x25dfdbfc, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_RATE_NODE_NAME={0x5f, 0xa8, @random="9ba4a8883d0a14893a24663d777b33684d88f8a10c4b3153c0d8b9e9d782eeab897809de1ad43a2858efac0dbf5745bcabfa069ca3f654f0e65c1430ea143daec6b2bfa5c331ae37575dcc2bdb9a764219b61d86c7d23cad99fc48"}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_RATE_NODE_NAME={0x7b, 0xa8, @random="a0aac8b7c6c0855b6fda406533506185c17bb5e1b4dd1157e75fb17cc08a59f1eeda114a9299fc9e50abb6fc3b0195a14ea411b963259cdf5c574d99fed5c80418c96507b6a2dac48e4718c21cc8788226c97a443d772b3770a80dd5e45d8638ae5787ab2d48bd430a98e1c6ab209c158c895f0de54994"}, @DEVLINK_ATTR_RATE_NODE_NAME={0xa6, 0xa8, @random="11c8a4266583cf67e26321d502033c382bc7e7bc43b76e39a0b38fd00b76c33f414eb98d6c06f2f94721f068317a081a977857c4e9492f5353fee2defcc1b03510b13a86270bc441ddbc3e96726fe6ee8ce14e6930688c12f0aab28fbd79295d5a58d8916bf29652f1ffbf26955ed25e22981476f9f216257210a975808e6c14b84af468986deec0390d8a4fdaeeed363a523a0927905abf29e73b53f05476591b8f"}]}, 0x1dc}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$NL802154_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000001940)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001900)={&(0x7f0000001880)={0x60, 0x0, 0xa02, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x4004840}, 0x4000) 12.704198807s ago: executing program 1 (id=2160): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001300)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r4, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x1, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x7, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xffffe4f5, 0xd6, 0x4, 0xfffb, 0x7, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x44, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0x3, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0x12, 0x8003, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0x101, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x3, 0x1001, 0x4, 0x401, 0x8002, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x3, 0x1966f9ad, 0x200, 0x20200, 0xb0fd, 0xfffffc00, 0x6, 0x4, 0x3, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0x1, 0x5, 0x3, 0x2, 0x5, 0x8, 0x3, 0x0, 0x6, 0x80000001, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x5, 0x2, 0x4d15, 0x1ff, 0xfffff060, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x6, 0x3, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x3, 0x2c310b18, 0xfff, 0x0, 0x400000, 0xcd34, 0x9, 0x81, 0xdf5, 0x2, 0x1, 0x8, 0x40fff, 0xfffff6ac, 0x8000, 0x3, 0x8, 0x80, 0x6, 0x9a9, 0xe4cb, 0x402, 0x1, 0x1ff, 0x5, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xffffff01, 0x6, 0x6, 0x100000c, 0x10001000, 0x9, 0x9, 0xe6, 0xab, 0x2, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x7, 0x8f, 0x0, 0xfffffbff, 0x5, 0x10000, 0x401, 0x3, 0x5, 0x140c, 0x3ff, 0xc08, 0x800, 0x0, 0x1, 0x2, 0xff, 0x9, 0x80000000, 0x4, 0x7, 0x4, 0x7, 0xfff, 0x40, 0xce, 0x8, 0x200, 0x7, 0x100, 0x7, 0x6, 0x2, 0x3cf, 0x0, 0x3, 0x1, 0x2f, 0xffffffc0, 0x4, 0x7, 0x6, 0x2, 0x7, 0x8, 0x7, 0x0, 0x1, 0x401, 0x10000, 0x9, 0x1, 0x3, 0x0, 0x9, 0xfff, 0x5, 0xed71, 0x65b4, 0xfffff248, 0x1, 0x3ff, 0x7, 0x0, 0xa, 0x9, 0x8, 0x7f, 0x267, 0x0, 0x8, 0x5, 0x1, 0xfffffffb, 0x0, 0x9, 0x800, 0x9, 0x9, 0x8001, 0x9, 0x7ff, 0xfffffff9, 0xfffffff7, 0x3, 0x4, 0x401, 0x8, 0x8, 0x9, 0x1, 0x3, 0x3ff, 0x5, 0x7, 0x4, 0x3, 0x62b, 0xc, 0x5, 0xa60, 0xb4f0, 0x6, 0x9, 0xffff, 0x8, 0x5, 0x5, 0xfb, 0x0, 0x9, 0xfffff0d0, 0x1, 0x3cfd, 0x10, 0x23, 0xfffffff9, 0xffffffff, 0x639, 0xffff, 0x81, 0x0, 0x10001, 0x10, 0x81, 0x0, 0x1, 0x3, 0x6, 0xffffffff, 0x200, 0x91b0, 0x0, 0x1, 0xfffffffb, 0x10000, 0x7, 0x8, 0x6, 0xa63, 0x3ff, 0x7, 0x4, 0x7fff, 0x9, 0xff, 0x401, 0x726d, 0x11, 0x9, 0x8, 0x1, 0x3, 0xffff8000, 0x0, 0xdb, 0xace, 0xb, 0x549a, 0x1e, 0x5, 0x4, 0x1ff, 0x38, 0x6, 0x8, 0x4, 0x1, 0x5, 0x7, 0x10, 0xd48d, 0x1, 0x1, 0x10, 0x5, 0xe3, 0x6, 0x3, 0x7, 0x9, 0x9, 0x9, 0xffffffff, 0x4, 0x8b01, 0xbf19, 0x7, 0xfffbff57, 0x80, 0x6, 0xff, 0x6, 0x5, 0x6, 0x423, 0x1, 0x80000001, 0x9, 0x80, 0xa0, 0x4, 0xb, 0x46, 0xa, 0x7033, 0x3, 0x2, 0x5a2, 0x2, 0xa6, 0x7, 0xffffffff, 0x3, 0x6, 0x3, 0x8cff, 0x7, 0x6, 0x2, 0x7, 0x6, 0x0, 0x2, 0x0, 0x7, 0x8, 0x1000, 0x5b, 0x8, 0x3, 0xfffffffc, 0x3285b265, 0x7, 0x2a, 0xa883acfe, 0x8, 0x7, 0xfffff000, 0x7, 0x10001, 0x9, 0x1c, 0xe, 0x400, 0x3, 0x2, 0x80, 0x15, 0xf, 0x403, 0x6, 0x9, 0xfffff800, 0x1, 0x25]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket$packet(0x11, 0x3, 0x300) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0x7, 0x0, 0x0) r6 = socket(0x10, 0x803, 0x0) r7 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000100)={'lo\x00', &(0x7f0000000140)=@ethtool_rxnfc={0x30, 0x11, 0x4, {0x8, @tcp_ip4_spec={@remote, @empty, 0x4e21, 0x4e22, 0x4}, {0x0, @empty, 0xa7, 0x0, [0x40, 0x56c]}, @udp_ip6_spec={@mcast1, @private2, 0x4e20, 0x4e23, 0x4}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0x0, 0x2, [0x1c00]}, 0x6, 0x7}}}) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)={0x70, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x4c, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x40005}, 0x40) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="180100003000010003000000fbdbdf2506"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e23, 0x5b732541, @dev={0xfe, 0x80, '\x00', 0xf}, 0x4}}, 0x0, 0x0, 0x237, 0x0, "bb02a3c364ca41d6357e544524474004000b42a21d7214bf92494925208a0e2f964e0000c534a6324d6193fcf19b2df3ee818afaa4ff1f56c54dc46d8b6d2ccd008aa0cc1dc2767bbe00"}, 0xd8) r9 = socket$kcm(0x23, 0x5, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(r9, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) listen(r9, 0x800) accept4(r9, 0x0, 0x0, 0x80000) r11 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 12.192621098s ago: executing program 2 (id=2161): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000200)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x9, &(0x7f0000000280)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffc0, 0x0, 0x0, 0x0, 0xa}, [@call={0x85, 0x0, 0x0, 0x28}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0xa0900}, 0x94) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000006800010000000000000000000a00000000000000080006000100000004000b"], 0x24}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a28000000000a010200000000000000000200000908000240000000030900010073797a300000000098000000160a030000000000000000000200000a6c000380180003801400010064756d6d7930000000000000000000000800014000000000400003801400010073797a6b616c6c65723100000000000014000100697036677265746170edffadf3000000140001006970366772657461703000000000000008000240000000020900020073797a31000000000900010073797a300000000014000000110001"], 0xe8}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r4, &(0x7f0000000c80)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x5, 0x8, 0x14}, @mpls={[], @ipv6=@tcp={0x0, 0x6, "d04ac0", 0x14, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00', {[], {{0xce20, 0x4e24, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x4, 0x2, 0x0, 0x9}}}}}}, 0x4a) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYRESHEX=0x0], 0x38}, 0x1, 0x0, 0x0, 0x4002}, 0xc000) 8.577409754s ago: executing program 2 (id=2162): r0 = socket$nl_crypto(0x10, 0x3, 0x15) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000030500000000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000090280500140012800b0001006c6f7770616e00000400028008000500", @ANYRES32=r3], 0x44}}, 0x0) sendmsg$netlink(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000600)={0xe0, 0x10, 0x50b, 0x0, 0x0, "", [@generic="6f6d8864d22a3f2ffaa46c88bc", @typed={0xbd, 0x0, 0x0, 0x0, @binary="2b0e13e735a3184f1b3d6da2f1acfac0ee50d2b184b27db1f302de337c0004060000000000bf852c89867f6691b01b2d44e4ff2d285f29882fbd9423debbb86f9dba4a2dba4dbe076c02262600c43443efd6f5091dfbd56183a567de243ab0d67683f7bb11c9cab3b3eed8a8bef4ff1631aa78acefca03c1a66db4424a8ba100022db228bb7b5eb5100100000000000000a0912086d9e4606d2e4cc898739222c5d3a83c00341c5ae846a60cf93ab48d68e8e9467d1ccadc42"}]}, 0xe0}], 0x1}, 0x0) 6.215747623s ago: executing program 2 (id=2163): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x100, 0x70bd29, 0x25dfdbfc, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x4800) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DISCONNECT(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r1, 0x8, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x22}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x17}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x10}, @NL80211_ATTR_REASON_CODE={0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x11}, 0x40) (async) sendmsg$NL80211_CMD_DISCONNECT(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r1, 0x8, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x22}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x17}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x10}, @NL80211_ATTR_REASON_CODE={0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x11}, 0x40) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r2) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r2, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x5c, r3, 0x4, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x5c}}, 0x800) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r2) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x4c, r5, 0x1, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_COALESCE_TX_MAX_FRAMES_LOW={0x8, 0x11, 0x8000}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0x8}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8, 0x7, 0x35}, @ETHTOOL_A_COALESCE_TX_USECS_LOW={0x8, 0x10, 0xd}, @ETHTOOL_A_COALESCE_TX_USECS_HIGH={0x8}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_HIGH={0x8, 0x14, 0x1}, @ETHTOOL_A_COALESCE_RX_USECS_IRQ={0x8, 0x4, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000040) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), r0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000005c0)={0x0, @multicast2, @remote}, &(0x7f0000000600)=0xc) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000005c0)={0x0, @multicast2, @remote}, &(0x7f0000000600)=0xc) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000640)={@broadcast, @initdev, 0x0}, &(0x7f0000000680)=0xc) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000006c0)={0x0, @remote, @dev}, &(0x7f0000000700)=0xc) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000780)={'erspan0\x00', &(0x7f0000000740)={'ip_vti0\x00', 0x0, 0x20, 0x8000, 0x0, 0x8, {{0x6, 0x4, 0x0, 0x20, 0x18, 0x67, 0x0, 0x2, 0xcb53467eeeff617b, 0x0, @private=0xa010100, @multicast2, {[@end, @end]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000840)={'syztnl2\x00', &(0x7f00000007c0)={'ip6tnl0\x00', 0x0, 0x4, 0xf, 0xf, 0x9, 0x10, @mcast2, @rand_addr=' \x01\x00', 0x40, 0x40, 0x4, 0x5}}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000840)={'syztnl2\x00', &(0x7f00000007c0)={'ip6tnl0\x00', 0x0, 0x4, 0xf, 0xf, 0x9, 0x10, @mcast2, @rand_addr=' \x01\x00', 0x40, 0x40, 0x4, 0x5}}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f00000009c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000980)={&(0x7f0000000880)={0xf8, r6, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x34, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x21, 0x5, "60404316079a638af547b318a141462721db0e63500b1ee7a3eef103f3"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x4004000}, 0x48000) sendmsg$IPCTNL_MSG_CT_GET_STATS(r4, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x14, 0x5, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0x3}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10000001}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x3c, r1, 0x4, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0x7f}}}}, [@NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x1, 0xd6}}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20080) accept4(r2, &(0x7f0000000c00)=@phonet, &(0x7f0000000c80)=0x80, 0x80000) (async) r12 = accept4(r2, &(0x7f0000000c00)=@phonet, &(0x7f0000000c80)=0x80, 0x80000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r12, 0x89f2, &(0x7f0000000d40)={'ip6_vti0\x00', &(0x7f0000000cc0)={'ip6gre0\x00', r7, 0x4, 0xa, 0x9, 0x1b5, 0x6, @mcast1, @ipv4={'\x00', '\xff\xff', @loopback}, 0x10, 0x80, 0x5, 0x7}}) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r13 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) listen(r13, 0xff) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r12, 0x84, 0x70, &(0x7f0000000d80)={0x0, @in6={{0xa, 0x4e24, 0x40, @dev={0xfe, 0x80, '\x00', 0x29}, 0x101}}, [0x1, 0x80, 0x10000, 0x477, 0x5, 0x3, 0x800, 0x6, 0x4, 0x100, 0x40, 0xa, 0x1f, 0x9c, 0x2dca8e0a]}, &(0x7f0000000e80)=0x100) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r12, 0x84, 0x6, &(0x7f0000000ec0)={r14, @in={{0x2, 0x4e20, @local}}}, 0x84) (async) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r12, 0x84, 0x6, &(0x7f0000000ec0)={r14, @in={{0x2, 0x4e20, @local}}}, 0x84) close(r12) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r2, &(0x7f0000001040)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x20, r1, 0x8, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x5a}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$AUDIT_TTY_GET(r12, &(0x7f0000001140)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x10, 0x3f8, 0x300, 0x70bd2a, 0x25dfdbfd, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000}, 0x20040135) (async) sendmsg$AUDIT_TTY_GET(r12, &(0x7f0000001140)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x10, 0x3f8, 0x300, 0x70bd2a, 0x25dfdbfd, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000}, 0x20040135) syz_genetlink_get_family_id$gtp(&(0x7f0000001180), r12) 5.330813201s ago: executing program 2 (id=2164): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040), 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r1, @ANYBLOB="0000000000000000040000000000000095"], &(0x7f0000000d40)='syzkaller\x00'}, 0x94) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x4001, 0x3, 0x9f8, 0x0, 0xb, 0x148, 0x0, 0x148, 0x960, 0x230, 0x242, 0x960, 0x215, 0x3, 0x0, {[{{@ip={@local, @remote, 0x0, 0x0, 'batadv_slave_0\x00', 'macvtap0\x00', {}, {}, 0x73}, 0x0, 0x880, 0x8a0, 0x0, {0xff0f000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x0, 0x8}}, @common=@unspec=@u32={{0x7e0}, {[{[{0x200, 0x2}, {0x6, 0x3}, {0x2, 0x1}, {0x9de}, {0x0, 0x1}, {0x0, 0x2}, {0x8, 0x1}, {0x3, 0x2}, {0x2, 0x1}, {0xfffffff1, 0x3}, {0x4, 0x3}], [{0x4}, {0x9, 0xffffff9b}, {0x8}, {0x8, 0x6}, {0xffff, 0x7bf9}, {0x8, 0x101}, {0x8000, 0x1}, {0x2, 0x3}, {0x400000, 0x401}, {0x5, 0xf}, {0x7, 0x4}], 0x6, 0x2}, {[{0x3, 0x2}, {0xb9c}, {0x3, 0x2}, {0x3, 0x3}, {0x5, 0x2}, {0x8954, 0x3}, {0x4}, {0x8}, {0x2, 0x3}, {0x8, 0xab5a42f7f6b5a56c}, {0xfffffff7, 0x1}], [{0x9, 0x2}, {0x0, 0x1}, {0x8451, 0x2}, {0x94a, 0x2}, {0x97, 0x7}, {0x3, 0x3}, {0x7b3, 0x7ff}, {0x9bae1c6e, 0xfffffeff}, {0x1, 0x4}, {0x5, 0x7}, {0x3, 0x6}], 0x3, 0x8}, {[{0x3, 0x1}, {0x8, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0xe, 0x3}, {0x1b4caf9d, 0x1}, {0xd4b, 0x1}, {0x7fff}, {0xa04, 0x1}, {0x9, 0x3}, {0x6, 0x2}], [{0x100, 0x4}, {0x1, 0x9}, {0x7, 0x9}, {0x3, 0xd4}, {0x1, 0xf1c5}, {0x8, 0x6}, {0x1, 0x6}, {0x4, 0x5}, {0xfffffff8, 0xffff8000}, {0xe, 0x5}, {0x0, 0x4}], 0x9, 0x4}, {[{}, {0x2}, {0x8, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x9, 0x1}, {0x3, 0x2}, {0x8}, {0x2, 0x1}, {0x4, 0x3}], [{0x2, 0x7}, {0x9, 0xfff}, {0x0, 0x7f}, {0x7f8, 0x1}, {0x7f, 0x1}, {0x5, 0x1}, {0x6, 0x2}, {0x3ff, 0x2}, {0x4, 0x2}, {0x3b0, 0x4800}, {0x8, 0x6}], 0x8, 0x6}, {[{0x9}, {0x5, 0x5f0be302ef1773e0}, {0x0, 0x3}, {0x7, 0x2}, {0xfff}, {0x3, 0x3}, {0x358d, 0x1}, {}, {0x5, 0x1}, {0x9, 0x3}, {0x8, 0x2}], [{0x29, 0x2}, {0x2, 0x7f}, {0x0, 0x8a4}, {0x98, 0x2}, {0x303e46e8, 0x4}, {0x8, 0x1}, {0x0, 0x76ed}, {0x4e24f7e6, 0x679}, {0x40, 0x8}, {0xffffffff, 0xd}, {0x3}], 0x0, 0x1}, {[{0x5, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x401, 0x1}, {0xd}, {0xd0ac, 0x1}, {0x1000, 0x3}, {0x93, 0x1}, {0x4}, {0x4, 0x1}, {0x6, 0x2}], [{0x0, 0x7}, {0x0, 0x9}, {0xac, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x0, 0x9}, {0x7ff, 0x101}, {0xffffff01, 0x9}, {0x6, 0x2}, {0x88a, 0x272}, {0x2, 0x1}], 0x2, 0x6}, {[{0x5}, {0x401, 0x3}, {0x5, 0x1}, {0x80000001, 0x2}, {0x5, 0x2}, {0xab9}, {0x10, 0x2}, {0x6, 0x2}, {0x2, 0x1}, {0xffff, 0x2}, {0x3, 0x3}], [{0x8, 0x2}, {0x100, 0x4}, {0x31b, 0x4}, {0xffff, 0x8}, {0x7a, 0x98a}, {0x2, 0x4}, {0xb, 0xaf4f}, {0x926e}, {0x4a}, {0x3, 0x5}, {0x3, 0xb}], 0x4, 0x5}, {[{0x800, 0x2}, {0x7, 0x3}, {0x1d80000, 0x2}, {0x4}, {0x7, 0x1}, {0x4, 0x3}, {0x8}, {0xff}, {0x6, 0x2}, {0x9}, {0xfffffffe, 0x3}], [{0x2}, {0x9, 0x101}, {0x7, 0x1}, {0xffffff5e, 0x3}, {0xb, 0x1ff}, {0x40, 0x3}, {0x10000, 0x1ff}, {0xdc, 0x80}, {0x4, 0x6}, {0x5, 0x2}, {0x5, 0x3}], 0x2, 0x3}, {[{0x1, 0x3}, {0x3, 0x2}, {0x8}, {0x401}, {0x4}, {0x2, 0x3}, {0x4, 0x3}, {0x3, 0x1}, {0x2afa, 0x3}, {0x0, 0x1}, {0x0, 0x1}], [{0x3, 0xde}, {0xa2, 0x4}, {0x51ae, 0xcad}, {0x0, 0x200}, {0x1, 0x1000}, {0x40, 0x7}, {0x7fff, 0x7f}, {0x1, 0x10}, {0x4, 0x2}, {0xf}, {0x3, 0x6}], 0x5, 0x5}, {[{0x3, 0x3}, {0x1, 0x3}, {0x6, 0x2}, {0x40000010, 0x1}, {0x1}, {0x2, 0x3}, {0x9, 0x3}, {0x8, 0x2}, {0x6, 0x2}, {0x163f}, {0x9}], [{0x8001, 0xfff}, {0x4, 0x6}, {0x0, 0xb9}, {0x0, 0x6}, {0x95ecce8c, 0xcb6}, {0x0, 0x2}, {0xf60, 0x4}, {0x4, 0xffff}, {0x9, 0x2}, {0x1, 0x7}, {0x4, 0x7}], 0x7, 0x1}, {[{0x7d0f, 0x3}, {0x8, 0x3}, {0x2}, {0xff}, {0x1ed7, 0x2}, {0x8000, 0x1}, {0x4, 0x2}, {0x81, 0x3}, {0x5ab, 0x1}, {0x8000}, {0x8, 0x1}], [{0x1, 0x89}, {0x8, 0x8}, {0x1}, {0xab, 0xfffffff3}, {0x2, 0x1ee}, {0x81, 0x1}, {0x1, 0x14}, {0x1, 0x7}, {0x9, 0x7}, {0x0, 0x8}, {0x80, 0x209}], 0x6, 0x2}], 0x5}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0xec010000, 0xa0, 0xc0, 0x0, {}, [@common=@ah={{0x30}, {[0x0, 0xa]}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xa58) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000c00)={r1, &(0x7f0000000000)='ah\x00', 0x800, &(0x7f00000000c0)={@_ha_fsid={[0x9, 0x2]}, {0x9, 0xc, 0x6829, 0x6}}, 0x5, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000140)=0x3}) write$tun(r2, &(0x7f0000000c40)={@val={0x0, 0x88a8}, @val={0x0, 0x80, 0x3, 0x3, 0x2, 0xc1e5}, @mpls={[{}, {0xdcbcb}, {0x6, 0x0, 0x1}, {0x4a1}, {0x0, 0x0, 0x1}, {0x2}, {0x800}], @llc={@snap={0xaa, 0x0, '8', "5e0fe4", 0x884c, "483c77bcb983392260274c5b085d34bdae0b7da21b1a82c59344f27f9a3132e5ec1d20c0971d6ec289e2f50d06b0fca254f014e0d42118d1a7f327198e480bf89b5aab388802ecc139363d9ed1c9bb041c74b934a10aaa56d5513d56e6e2a3dc648e7d83cf4453a7ef5fb8fc4a472bf0466bad43bace39c58cb867bed3e282858bcc3802a2f69dfc994edfb05c49a0505d448a5d549e150c42e67382e8ad9ec41916c0aaeeebc864aa38a4363cb8cf2813e2b4f5fcf3a43f845ee3672c41c8168552780b667de1ab"}}}}, 0xfa) 5.054680651s ago: executing program 1 (id=2165): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x64}, 0x1, 0x0, 0x0, 0x4080}, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0xffffffffffffff35, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x0, 0x0, 0x2}}]}}]}, 0x44}}, 0x0) 4.00797116s ago: executing program 2 (id=2166): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000440), 0x8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000500)={'syzkaller1\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@bloom_filter={0x1e, 0x9, 0x2, 0x3, 0x18, r0, 0x2, '\x00', r1, r0, 0x5, 0x3, 0x5, 0x8}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r2, &(0x7f0000000080), 0x0}, 0x20) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040), 0x4) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) (async) writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000300)='0', 0x1}], 0x1) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa8, 0xa8, 0x4, [@typedef={0xa, 0x0, 0x0, 0x8, 0x5}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x4, 0x1}, {0x5, 0x3}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0xfffffffb}}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x3, 0xf0}}, @fwd={0x6}, @decl_tag={0x5, 0x0, 0x0, 0x11, 0x5, 0x9}, @volatile={0x5, 0x0, 0x0, 0x9, 0x4}, @restrict={0xe}, @func={0x9, 0x0, 0x0, 0xc, 0x4}, @decl_tag={0xd, 0x0, 0x0, 0x11, 0x2, 0x7}]}, {0x0, [0x2e, 0x0]}}, &(0x7f0000000740)=""/88, 0xc4, 0x58, 0x1, 0xff, 0x10000, @value=r0}, 0x28) (async) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) accept4$llc(r3, 0x0, 0x0, 0x80800) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x4}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0xb6) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) close(r2) (async) bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r4}, 0x8) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xe, 0x9, &(0x7f0000000240)=@framed={{0x5, 0x0, 0x0, 0x0, 0x2, 0x71, 0x11, 0x97}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @map_idx={0x18, 0x2, 0x5, 0x0, 0x9}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xbd, &(0x7f000000cf3d)=""/189, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r5}, 0x94) 2.448666563s ago: executing program 1 (id=2167): socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000600)=ANY=[@ANYBLOB], 0xe8}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) socket(0x11, 0x3, 0x300) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x17}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x9801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0xbf}]}}}]}, 0x40}}, 0x0) sendto$packet(r0, &(0x7f0000000240)="3f031c000302140006001e0089e9aa", 0xf, 0x40, &(0x7f0000000540)={0xc9, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) 2.005230846s ago: executing program 2 (id=2168): syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) (async) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) bind$unix(r2, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r1, &(0x7f0000fce000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) (async) connect$unix(r1, &(0x7f0000fce000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x9, 0xfffffffffffffffe, &(0x7f0000000000)) r3 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000180)={{0x2, 0x4e23, @remote}, {0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}}, 0x4, {0x2, 0x4e20, @broadcast}}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) r6 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r7, @ANYBLOB="0100000002"], 0x40) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000280)=@base={0x6, 0x4, 0x70be, 0x5c, 0x1048, r6, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newlink={0x7c, 0x10, 0xffffffffffffffff, 0x170bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x1ba20, 0x20}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x44, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}, @IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3, 0x100}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x6, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x190ad186}}]}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0xffffff57}}, 0x8000002) (async) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newlink={0x7c, 0x10, 0xffffffffffffffff, 0x170bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x1ba20, 0x20}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x44, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}, @IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3, 0x100}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x6, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x190ad186}}]}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0xffffff57}}, 0x8000002) 0s ago: executing program 1 (id=2169): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @private0}, 0xb5) getsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000280), &(0x7f0000000140)=0xffffffffffffffd2) r1 = socket$netlink(0x10, 0x3, 0xb) r2 = socket(0x10, 0x3, 0x1) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x240000d1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r3) ioctl$EXT4_IOC_SETFSUUID(r2, 0x4008662c, &(0x7f00000001c0)={0x0, 0x0, "c33660b6b9aa8cbb89939af6c78b8165"}) syz_emit_ethernet(0x3a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0008004600002c00000000d90690780a210104ac1414aa2404040300000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c80000090780000"], 0x0) sendmsg$NLBL_CIPSOV4_C_LISTALL(r3, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000000300)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010f2bbd7000fddbdf2504000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x20008004) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@private=0xa010101, @in=@multicast1}, {@in=@multicast2, 0x4d6, 0x32}, @in=@dev, {0x0, 0x0, 0xfffffffffffffffc}, {}, {}, 0x0, 0x2, 0x2}, [@algo_auth={0x48, 0x1, {{'sha384-avx\x00'}}}]}, 0x138}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r5, @ANYBLOB="00001000252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x9}]}}]}, 0x38}}, 0x0) r11 = socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r12 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r12, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x8, 0x70bd28, 0x12, {0x0, 0x0, 0x0, r13, {0x0, 0x9}, {0xffff, 0xffff}, {0x10, 0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x1}]}}]}, 0x38}}, 0x0) socket$netlink(0x10, 0x3, 0x8) r14 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r14, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) kernel console output (not intermixed with test programs): ibutes in process `syz.2.833'. [ 190.318338][ T8865] netlink: 'syz.3.836': attribute type 3 has an invalid length. [ 193.175187][ T8855] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 194.110000][ T8908] team0: Cannot enslave team device to itself [ 194.168264][ T8923] netlink: 9 bytes leftover after parsing attributes in process `syz.4.845'. [ 194.234369][ T8924] netlink: 5 bytes leftover after parsing attributes in process `syz.4.845'. [ 194.252771][ T8925] netlink: 5 bytes leftover after parsing attributes in process `syz.4.845'. [ 194.267228][ T8927] netlink: 'syz.2.847': attribute type 1 has an invalid length. [ 194.275778][ T8927] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.847'. [ 194.287047][ T8927] netlink: 'syz.2.847': attribute type 1 has an invalid length. [ 194.296758][ T8927] netlink: 2016 bytes leftover after parsing attributes in process `syz.2.847'. [ 194.325989][ T8923] gretap0: entered promiscuous mode [ 194.359281][ T8924] 0{X功: renamed from gretap0 [ 194.370890][ T8924] 0{X功: left promiscuous mode [ 194.377284][ T8924] 0{X功: entered allmulticast mode [ 194.385888][ T8924] A link change request failed with some changes committed already. Interface 30{X功 may have been left with an inconsistent configuration, please check. [ 194.408015][ T8925] 1{X功: renamed from 30{X功 (while UP) [ 194.417990][ T8932] netlink: 'syz.0.846': attribute type 1 has an invalid length. [ 194.452950][ T8925] A link change request failed with some changes committed already. Interface 31{X功 may have been left with an inconsistent configuration, please check. [ 194.680597][ T8934] netlink: 1363 bytes leftover after parsing attributes in process `syz.3.848'. [ 194.907080][ T8948] netlink: 36 bytes leftover after parsing attributes in process `syz.1.854'. [ 195.512342][ T8986] netlink: 'syz.4.859': attribute type 2 has an invalid length. [ 197.075777][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 197.830747][ T8960] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 197.846504][ T8946] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 198.100180][ T8999] netlink: 20 bytes leftover after parsing attributes in process `syz.3.863'. [ 198.122533][ T9002] netlink: 'syz.2.864': attribute type 1 has an invalid length. [ 198.155927][ T8999] tipc: Started in network mode [ 198.156007][ T8999] tipc: Node identity 03000000000000002143658721436587, cluster identity 4711 [ 198.341029][ T9016] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 198.476168][ T9026] netlink: 'syz.2.870': attribute type 7 has an invalid length. [ 198.476219][ T9026] netlink: 4 bytes leftover after parsing attributes in process `syz.2.870'. [ 198.538705][ T9026] netlink: 'syz.2.870': attribute type 7 has an invalid length. [ 198.547002][ T9026] netlink: 4 bytes leftover after parsing attributes in process `syz.2.870'. [ 198.558976][ T1003] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 198.559064][ T1003] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 198.559137][ T1003] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 198.559244][ T1003] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 198.856143][ T9039] netlink: 28 bytes leftover after parsing attributes in process `syz.4.874'. [ 198.887691][ T9041] netlink: 8 bytes leftover after parsing attributes in process `syz.3.876'. [ 198.951276][ T9041] netlink: 4 bytes leftover after parsing attributes in process `syz.3.876'. [ 198.992525][ T9046] netlink: 88 bytes leftover after parsing attributes in process `syz.0.878'. [ 199.318864][ T9060] netlink: 8 bytes leftover after parsing attributes in process `syz.3.884'. [ 199.332026][ T9060] netlink: 8 bytes leftover after parsing attributes in process `syz.3.884'. [ 199.531278][ T9067] IPv6: sit1: Disabled Multicast RS [ 200.038541][ T9108] netlink: 4 bytes leftover after parsing attributes in process `syz.1.893'. [ 200.072200][ T9111] netlink: 'syz.2.895': attribute type 1 has an invalid length. [ 200.167513][ T9111] veth3: entered allmulticast mode [ 200.178554][ T9111] bond1: (slave veth3): Enslaving as an active interface with a down link [ 200.250777][ T9117] netlink: 'syz.2.895': attribute type 1 has an invalid length. [ 200.258846][ T9111] bond1: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 201.239491][ T9128] batman_adv: batadv0: Adding interface: dummy0 [ 201.239539][ T9128] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 201.241006][ T9128] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 202.390474][ T9066] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 202.586951][ T9145] IPVS: set_ctl: invalid protocol: 51 224.0.0.1:20002 [ 203.002336][ T9168] netlink: 'syz.2.913': attribute type 32 has an invalid length. [ 203.083344][ T9178] netlink: 'syz.2.913': attribute type 32 has an invalid length. [ 203.122605][ T9168] bond2: option coupled_control: invalid value (192) [ 203.137638][ T9168] bond2 (unregistering): Released all slaves [ 203.262248][ T9178] bond2: option coupled_control: invalid value (192) [ 203.279390][ T9178] bond2 (unregistering): Released all slaves [ 204.283957][ T9232] syzkaller1: entered promiscuous mode [ 204.284006][ T9232] syzkaller1: entered allmulticast mode [ 204.688561][ T9255] __nla_validate_parse: 69 callbacks suppressed [ 204.696263][ T9255] netlink: 516 bytes leftover after parsing attributes in process `syz.3.935'. [ 204.814669][ T9260] netlink: 4 bytes leftover after parsing attributes in process `syz.1.940'. [ 204.815485][ T9257] netlink: 'syz.0.937': attribute type 1 has an invalid length. [ 204.985093][ T9268] ip_tables: iptables: counters copy to user failed while replacing table [ 205.014372][ T9268] netlink: 'syz.3.941': attribute type 1 has an invalid length. [ 205.024043][ T9268] netlink: 72 bytes leftover after parsing attributes in process `syz.3.941'. [ 205.065405][ T9257] bond1: entered promiscuous mode [ 205.070145][ T9257] bond1: entered allmulticast mode [ 205.087141][ T9257] 8021q: adding VLAN 0 to HW filter on device bond1 [ 205.145813][ T9264] erspan2: entered allmulticast mode [ 205.166462][ T9264] bond1: (slave erspan2): making interface the new active one [ 205.166520][ T9264] erspan2: entered promiscuous mode [ 205.182389][ T9264] bond1: (slave erspan2): Enslaving as an active interface with an up link [ 205.212012][ T9272] batadv0: entered promiscuous mode [ 205.256467][ T9272] macsec1: entered promiscuous mode [ 205.270976][ T9274] netlink: 20 bytes leftover after parsing attributes in process `syz.4.942'. [ 205.289586][ T9272] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 205.298262][ T9272] batadv0: left promiscuous mode [ 205.485619][ T9274] bond_slave_0: entered promiscuous mode [ 205.491521][ T9274] bond_slave_0: entered allmulticast mode [ 205.911868][ T9299] netlink: 'syz.1.952': attribute type 2 has an invalid length. [ 206.210122][ T9299] : entered promiscuous mode [ 206.469755][ T9329] netlink: 28 bytes leftover after parsing attributes in process `syz.1.958'. [ 206.469823][ T9329] netlink: 28 bytes leftover after parsing attributes in process `syz.1.958'. [ 206.794608][ T9346] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 206.885772][ T9350] netlink: 27 bytes leftover after parsing attributes in process `syz.0.965'. [ 207.668205][ T9375] netlink: 'syz.0.969': attribute type 10 has an invalid length. [ 207.676227][ T9375] netlink: 'syz.0.969': attribute type 21 has an invalid length. [ 207.681243][ T9375] syzkaller1: entered promiscuous mode [ 207.681314][ T9375] syzkaller1: entered allmulticast mode [ 208.098819][ T9391] syzkaller0: entered promiscuous mode [ 208.098876][ T9391] syzkaller0: entered allmulticast mode [ 208.157715][ T9395] netlink: 60 bytes leftover after parsing attributes in process `syz.2.972'. [ 211.268985][ T9413] IPVS: Unknown mcast interface: nr0 [ 211.597117][ T9420] team0: Device ipvlan0 failed to register rx_handler [ 211.997320][ T9446] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 212.020796][ T9446] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 212.561366][ T9467] netlink: 8 bytes leftover after parsing attributes in process `syz.1.987'. [ 212.907683][ T9482] IPv6: NLM_F_CREATE should be specified when creating new route [ 213.073480][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 213.183138][ T9490] netlink: 16 bytes leftover after parsing attributes in process `syz.2.992'. [ 213.192693][ T9490] netlink: 88 bytes leftover after parsing attributes in process `syz.2.992'. [ 213.202056][ T9490] netlink: 16 bytes leftover after parsing attributes in process `syz.2.992'. [ 214.063332][ T9520] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1003'. [ 214.128159][ T8478] IPVS: starting estimator thread 0... [ 214.214263][ T9527] IPVS: using max 25 ests per chain, 60000 per kthread [ 214.336826][ T9531] netlink: 'syz.4.1005': attribute type 1 has an invalid length. [ 214.930374][ T9565] bridge1: entered allmulticast mode [ 214.986749][ T9572] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 215.027214][ T9564] bridge2: entered allmulticast mode [ 215.104722][ T9575] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1016'. [ 215.387430][ T9594] netlink: 'syz.2.1021': attribute type 2 has an invalid length. [ 215.396901][ T9594] xt_TPROXY: Can be used only with -p tcp or -p udp [ 215.398214][ T9594] netlink: 'syz.2.1021': attribute type 11 has an invalid length. [ 215.476831][ T9597] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1022'. [ 215.515659][ T9597] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1022'. [ 216.060340][ T9623] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.1027'. [ 216.094886][ T9623] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.1027'. [ 216.565855][ T9629] netlink: Failed to add  helper -22 [ 216.565944][ T9629] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 216.827029][ T9647] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 216.891915][ T9652] syzkaller1: entered promiscuous mode [ 216.898389][ T9652] syzkaller1: entered allmulticast mode [ 217.479817][ T9682] FAULT_INJECTION: forcing a failure. [ 217.479817][ T9682] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 217.495761][ T9682] CPU: 1 UID: 0 PID: 9682 Comm: syz.2.1045 Not tainted syzkaller #0 PREEMPT(full) [ 217.495792][ T9682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 217.495805][ T9682] Call Trace: [ 217.495831][ T9682] [ 217.495842][ T9682] dump_stack_lvl+0xe8/0x150 [ 217.495883][ T9682] should_fail_ex+0x410/0x560 [ 217.495925][ T9682] _copy_from_iter+0x1d3/0x1660 [ 217.495961][ T9682] ? __alloc_skb+0x27a/0x7a0 [ 217.495999][ T9682] ? __alloc_skb+0x27a/0x7a0 [ 217.496034][ T9682] ? __alloc_skb+0x27a/0x7a0 [ 217.496068][ T9682] ? __pfx__copy_from_iter+0x10/0x10 [ 217.496100][ T9682] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 217.496134][ T9682] ? __alloc_skb+0x27a/0x7a0 [ 217.496165][ T9682] ? __alloc_skb+0x27a/0x7a0 [ 217.496205][ T9682] ? netlink_sendmsg+0x650/0xb40 [ 217.496234][ T9682] ? skb_put+0x112/0x210 [ 217.496258][ T9682] netlink_sendmsg+0x6c0/0xb40 [ 217.496296][ T9682] ? __pfx_netlink_sendmsg+0x10/0x10 [ 217.496330][ T9682] ? apparmor_socket_sendmsg+0x98/0x360 [ 217.496369][ T9682] ? __pfx_netlink_sendmsg+0x10/0x10 [ 217.496395][ T9682] sock_sendmsg_nosec+0x13a/0x180 [ 217.496434][ T9682] ____sys_sendmsg+0x54e/0x850 [ 217.496464][ T9682] ? __pfx_____sys_sendmsg+0x10/0x10 [ 217.496499][ T9682] ? import_iovec+0x73/0xa0 [ 217.496525][ T9682] ___sys_sendmsg+0x2a5/0x360 [ 217.496548][ T9682] ? __lock_acquire+0x6df/0x2e50 [ 217.496576][ T9682] ? __pfx____sys_sendmsg+0x10/0x10 [ 217.496638][ T9682] ? __fget_files+0x2a/0x420 [ 217.496675][ T9682] ? __fget_files+0x3a2/0x420 [ 217.496716][ T9682] __x64_sys_sendmsg+0x1b1/0x290 [ 217.496744][ T9682] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 217.496791][ T9682] do_syscall_64+0x166/0x520 [ 217.496824][ T9682] ? trace_irq_disable+0x3b/0x140 [ 217.496846][ T9682] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.496869][ T9682] ? clear_bhb_loop+0x70/0xc0 [ 217.496897][ T9682] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.496919][ T9682] RIP: 0033:0x7f6733b9e159 [ 217.496941][ T9682] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 217.496959][ T9682] RSP: 002b:00007f6734a9d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 217.496984][ T9682] RAX: ffffffffffffffda RBX: 00007f6733e25fa0 RCX: 00007f6733b9e159 [ 217.497000][ T9682] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000003 [ 217.497014][ T9682] RBP: 00007f6734a9d090 R08: 0000000000000000 R09: 0000000000000000 [ 217.497027][ T9682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 217.497040][ T9682] R13: 00007f6733e26038 R14: 00007f6733e25fa0 R15: 00007fffc687f5c8 [ 217.497076][ T9682] [ 218.078304][ T9695] __nla_validate_parse: 4 callbacks suppressed [ 218.078359][ T9695] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1049'. [ 218.090634][ T9695] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 218.112448][ T9698] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 218.143796][ T9692] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1049'. [ 218.312419][ T9709] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1055'. [ 218.468840][ T9714] ip6t_hbh: unknown flags 38 [ 218.619215][ T9719] FAULT_INJECTION: forcing a failure. [ 218.619215][ T9719] name failslab, interval 1, probability 0, space 0, times 1 [ 218.619308][ T9719] CPU: 0 UID: 0 PID: 9719 Comm: syz.2.1059 Not tainted syzkaller #0 PREEMPT(full) [ 218.619333][ T9719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 218.619344][ T9719] Call Trace: [ 218.619403][ T9719] [ 218.619445][ T9719] dump_stack_lvl+0xe8/0x150 [ 218.619570][ T9719] should_fail_ex+0x410/0x560 [ 218.619655][ T9719] should_failslab+0xa8/0x100 [ 218.619720][ T9719] __kmalloc_noprof+0xfe/0x720 [ 218.619806][ T9719] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 218.619899][ T9719] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 218.620015][ T9719] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 218.620141][ T9719] genl_family_rcv_msg_doit+0xda/0x340 [ 218.620245][ T9719] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 218.620358][ T9719] ? apparmor_capable+0x126/0x170 [ 218.620442][ T9719] ? bpf_lsm_capable+0x9/0x20 [ 218.620529][ T9719] ? security_capable+0x7e/0x2c0 [ 218.620673][ T9719] genl_rcv_msg+0x614/0x7a0 [ 218.620779][ T9719] ? __pfx_genl_rcv_msg+0x10/0x10 [ 218.620863][ T9719] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 218.620940][ T9719] ? __pfx_nl80211_new_station+0x10/0x10 [ 218.621018][ T9719] ? __pfx_nl80211_post_doit+0x10/0x10 [ 218.621083][ T9719] ? __pfx_ref_tracker_free+0x10/0x10 [ 218.621194][ T9719] netlink_rcv_skb+0x226/0x4a0 [ 218.621276][ T9719] ? __pfx_genl_rcv_msg+0x10/0x10 [ 218.621362][ T9719] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 218.621463][ T9719] ? down_read+0x2be/0x330 [ 218.621536][ T9719] genl_rcv+0x28/0x40 [ 218.621612][ T9719] netlink_unicast+0x7bd/0x940 [ 218.621704][ T9719] netlink_sendmsg+0x813/0xb40 [ 218.621805][ T9719] ? __pfx_netlink_sendmsg+0x10/0x10 [ 218.621902][ T9719] ? apparmor_socket_sendmsg+0x98/0x360 [ 218.621989][ T9719] ? __pfx_netlink_sendmsg+0x10/0x10 [ 218.622055][ T9719] sock_sendmsg_nosec+0x13a/0x180 [ 218.622141][ T9719] ____sys_sendmsg+0x54e/0x850 [ 218.622224][ T9719] ? __pfx_____sys_sendmsg+0x10/0x10 [ 218.622326][ T9719] ? import_iovec+0x73/0xa0 [ 218.622413][ T9719] ___sys_sendmsg+0x2a5/0x360 [ 218.622467][ T9719] ? __lock_acquire+0x6df/0x2e50 [ 218.622540][ T9719] ? __pfx____sys_sendmsg+0x10/0x10 [ 218.622614][ T9719] ? __schedule+0x17f1/0x58f0 [ 218.622773][ T9719] ? __fget_files+0x2a/0x420 [ 218.622849][ T9719] ? __fget_files+0x3a2/0x420 [ 218.622947][ T9719] __x64_sys_sendmsg+0x1b1/0x290 [ 218.623023][ T9719] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 218.623152][ T9719] do_syscall_64+0x166/0x520 [ 218.623236][ T9719] ? trace_irq_disable+0x3b/0x140 [ 218.623291][ T9719] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.623343][ T9719] ? clear_bhb_loop+0x70/0xc0 [ 218.623397][ T9719] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.623452][ T9719] RIP: 0033:0x7f6733b9e159 [ 218.623515][ T9719] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 218.623558][ T9719] RSP: 002b:00007f6734a9d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 218.623617][ T9719] RAX: ffffffffffffffda RBX: 00007f6733e25fa0 RCX: 00007f6733b9e159 [ 218.623659][ T9719] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000003 [ 218.623701][ T9719] RBP: 00007f6734a9d090 R08: 0000000000000000 R09: 0000000000000000 [ 218.623741][ T9719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 218.623781][ T9719] R13: 00007f6733e26038 R14: 00007f6733e25fa0 R15: 00007fffc687f5c8 [ 218.623881][ T9719] [ 218.818020][ T9723] netlink: 6024 bytes leftover after parsing attributes in process `syz.0.1058'. [ 218.896956][ T9727] tls_set_device_offload_rx: netdev not found [ 219.390678][ T9743] FAULT_INJECTION: forcing a failure. [ 219.390678][ T9743] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 219.390735][ T9743] CPU: 1 UID: 0 PID: 9743 Comm: syz.4.1063 Not tainted syzkaller #0 PREEMPT(full) [ 219.390760][ T9743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 219.390772][ T9743] Call Trace: [ 219.390780][ T9743] [ 219.390789][ T9743] dump_stack_lvl+0xe8/0x150 [ 219.390827][ T9743] should_fail_ex+0x410/0x560 [ 219.390865][ T9743] _copy_from_user+0x2d/0xb0 [ 219.390890][ T9743] ___sys_sendmsg+0x1c6/0x360 [ 219.390927][ T9743] ? __lock_acquire+0x6df/0x2e50 [ 219.390954][ T9743] ? __pfx____sys_sendmsg+0x10/0x10 [ 219.391015][ T9743] ? __fget_files+0x2a/0x420 [ 219.391044][ T9743] ? __fget_files+0x3a2/0x420 [ 219.391083][ T9743] __x64_sys_sendmsg+0x1b1/0x290 [ 219.391112][ T9743] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 219.391158][ T9743] do_syscall_64+0x166/0x520 [ 219.391194][ T9743] ? trace_irq_disable+0x3b/0x140 [ 219.391216][ T9743] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.391239][ T9743] ? clear_bhb_loop+0x70/0xc0 [ 219.391265][ T9743] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.391287][ T9743] RIP: 0033:0x7fadaff9e159 [ 219.391308][ T9743] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 219.391326][ T9743] RSP: 002b:00007fadb0eb4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 219.391350][ T9743] RAX: ffffffffffffffda RBX: 00007fadb0225fa0 RCX: 00007fadaff9e159 [ 219.391365][ T9743] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000003 [ 219.391379][ T9743] RBP: 00007fadb0eb4090 R08: 0000000000000000 R09: 0000000000000000 [ 219.391392][ T9743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 219.391404][ T9743] R13: 00007fadb0226038 R14: 00007fadb0225fa0 R15: 00007ffc6fb93d78 [ 219.391521][ T9743] [ 219.646269][ T5636] Bluetooth: hci0: command 0x0406 tx timeout [ 219.646333][ T5636] Bluetooth: hci3: command 0x0406 tx timeout [ 219.646620][ T5636] Bluetooth: hci2: command 0x0406 tx timeout [ 219.652790][ T5625] Bluetooth: hci1: command 0x0406 tx timeout [ 220.208937][ T9770] FAULT_INJECTION: forcing a failure. [ 220.208937][ T9770] name failslab, interval 1, probability 0, space 0, times 0 [ 220.223646][ T9770] CPU: 1 UID: 0 PID: 9770 Comm: syz.3.1070 Not tainted syzkaller #0 PREEMPT(full) [ 220.223677][ T9770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 220.223690][ T9770] Call Trace: [ 220.223700][ T9770] [ 220.223710][ T9770] dump_stack_lvl+0xe8/0x150 [ 220.223750][ T9770] should_fail_ex+0x410/0x560 [ 220.223792][ T9770] should_failslab+0xa8/0x100 [ 220.223822][ T9770] __kmalloc_noprof+0xfe/0x720 [ 220.223857][ T9770] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 220.223893][ T9770] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 220.223940][ T9770] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 220.223994][ T9770] genl_family_rcv_msg_doit+0xda/0x340 [ 220.224036][ T9770] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 220.224080][ T9770] ? apparmor_capable+0x126/0x170 [ 220.224112][ T9770] ? bpf_lsm_capable+0x9/0x20 [ 220.224142][ T9770] ? security_capable+0x7e/0x2c0 [ 220.224172][ T9770] genl_rcv_msg+0x614/0x7a0 [ 220.224213][ T9770] ? __pfx_genl_rcv_msg+0x10/0x10 [ 220.224244][ T9770] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 220.224267][ T9770] ? __pfx_nl80211_new_station+0x10/0x10 [ 220.224293][ T9770] ? __pfx_nl80211_post_doit+0x10/0x10 [ 220.224317][ T9770] ? __pfx_ref_tracker_free+0x10/0x10 [ 220.224352][ T9770] netlink_rcv_skb+0x226/0x4a0 [ 220.224381][ T9770] ? __pfx_genl_rcv_msg+0x10/0x10 [ 220.224416][ T9770] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 220.224460][ T9770] ? down_read+0x2be/0x330 [ 220.224484][ T9770] genl_rcv+0x28/0x40 [ 220.224515][ T9770] netlink_unicast+0x7bd/0x940 [ 220.224550][ T9770] netlink_sendmsg+0x813/0xb40 [ 220.224586][ T9770] ? __pfx_netlink_sendmsg+0x10/0x10 [ 220.224622][ T9770] ? apparmor_socket_sendmsg+0x98/0x360 [ 220.224657][ T9770] ? __pfx_netlink_sendmsg+0x10/0x10 [ 220.224682][ T9770] sock_sendmsg_nosec+0x13a/0x180 [ 220.224713][ T9770] ____sys_sendmsg+0x54e/0x850 [ 220.224742][ T9770] ? __pfx_____sys_sendmsg+0x10/0x10 [ 220.224775][ T9770] ? import_iovec+0x73/0xa0 [ 220.224799][ T9770] ___sys_sendmsg+0x2a5/0x360 [ 220.224820][ T9770] ? __lock_acquire+0x6df/0x2e50 [ 220.224847][ T9770] ? __pfx____sys_sendmsg+0x10/0x10 [ 220.224907][ T9770] ? __fget_files+0x2a/0x420 [ 220.224934][ T9770] ? __fget_files+0x3a2/0x420 [ 220.224981][ T9770] __x64_sys_sendmsg+0x1b1/0x290 [ 220.225024][ T9770] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 220.225071][ T9770] do_syscall_64+0x166/0x520 [ 220.225103][ T9770] ? trace_irq_disable+0x3b/0x140 [ 220.225125][ T9770] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.225147][ T9770] ? clear_bhb_loop+0x70/0xc0 [ 220.225174][ T9770] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.225195][ T9770] RIP: 0033:0x7fe171b9e159 [ 220.225217][ T9770] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 220.225235][ T9770] RSP: 002b:00007fe172ae9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 220.225259][ T9770] RAX: ffffffffffffffda RBX: 00007fe171e25fa0 RCX: 00007fe171b9e159 [ 220.225274][ T9770] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000003 [ 220.225288][ T9770] RBP: 00007fe172ae9090 R08: 0000000000000000 R09: 0000000000000000 [ 220.225301][ T9770] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 220.225315][ T9770] R13: 00007fe171e26038 R14: 00007fe171e25fa0 R15: 00007ffffcbe36a8 [ 220.225350][ T9770] [ 220.377558][ T9771] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1069'. [ 220.878772][ T9783] Bluetooth: hci0: unsupported parameter 5135 [ 220.878843][ T9783] Bluetooth: hci0: unsupported parameter 8192 [ 220.880022][ T9783] Bluetooth: hci0: unsupported parameter 5135 [ 220.880074][ T9783] Bluetooth: hci0: unsupported parameter 8192 [ 221.200255][ T9797] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1078'. [ 221.211206][ T9797] nft_compat: unsupported protocol 0 [ 221.288924][ T9799] netlink: 'syz.1.1080': attribute type 4 has an invalid length. [ 221.426269][ T9803] netlink: 'syz.4.1082': attribute type 4 has an invalid length. [ 221.444296][ T9805] ovs-system: entered promiscuous mode [ 221.478017][ T9808] netlink: 'syz.4.1082': attribute type 4 has an invalid length. [ 221.562061][ T9810] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1084'. [ 221.697896][ T9814] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048) [ 221.711987][ T9815] netlink: 'syz.4.1085': attribute type 4 has an invalid length. [ 221.990346][ T9820] bond4: Unable to set peer notification delay as MII monitoring is disabled [ 222.006963][ T9820] bond4 (unregistering): Released all slaves [ 222.032061][ T9824] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 222.416241][ T9852] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1093'. [ 222.725497][ T9865] FAULT_INJECTION: forcing a failure. [ 222.725497][ T9865] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 222.725588][ T9865] CPU: 0 UID: 0 PID: 9865 Comm: syz.4.1099 Not tainted syzkaller #0 PREEMPT(full) [ 222.725633][ T9865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 222.725647][ T9865] Call Trace: [ 222.725656][ T9865] [ 222.725678][ T9865] dump_stack_lvl+0xe8/0x150 [ 222.725718][ T9865] should_fail_ex+0x410/0x560 [ 222.725758][ T9865] _copy_from_iter+0x1d3/0x1660 [ 222.725795][ T9865] ? __alloc_skb+0x27a/0x7a0 [ 222.725831][ T9865] ? __alloc_skb+0x27a/0x7a0 [ 222.725865][ T9865] ? __alloc_skb+0x27a/0x7a0 [ 222.725899][ T9865] ? __pfx__copy_from_iter+0x10/0x10 [ 222.725930][ T9865] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 222.725968][ T9865] ? __alloc_skb+0x27a/0x7a0 [ 222.725998][ T9865] ? __alloc_skb+0x27a/0x7a0 [ 222.726037][ T9865] ? netlink_sendmsg+0x650/0xb40 [ 222.726066][ T9865] ? skb_put+0x112/0x210 [ 222.726089][ T9865] netlink_sendmsg+0x6c0/0xb40 [ 222.726127][ T9865] ? __pfx_netlink_sendmsg+0x10/0x10 [ 222.726163][ T9865] ? apparmor_socket_sendmsg+0x98/0x360 [ 222.726200][ T9865] ? __pfx_netlink_sendmsg+0x10/0x10 [ 222.726226][ T9865] sock_sendmsg_nosec+0x13a/0x180 [ 222.726259][ T9865] ____sys_sendmsg+0x54e/0x850 [ 222.726289][ T9865] ? __pfx_____sys_sendmsg+0x10/0x10 [ 222.726320][ T9865] ? import_iovec+0x73/0xa0 [ 222.726348][ T9865] ___sys_sendmsg+0x2a5/0x360 [ 222.726370][ T9865] ? __lock_acquire+0x6df/0x2e50 [ 222.726396][ T9865] ? __pfx____sys_sendmsg+0x10/0x10 [ 222.726457][ T9865] ? __fget_files+0x2a/0x420 [ 222.726485][ T9865] ? __fget_files+0x3a2/0x420 [ 222.726524][ T9865] __x64_sys_sendmsg+0x1b1/0x290 [ 222.726552][ T9865] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 222.726598][ T9865] do_syscall_64+0x166/0x520 [ 222.726631][ T9865] ? trace_irq_disable+0x3b/0x140 [ 222.726652][ T9865] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.726681][ T9865] ? clear_bhb_loop+0x70/0xc0 [ 222.726708][ T9865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.726730][ T9865] RIP: 0033:0x7fadaff9e159 [ 222.726751][ T9865] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 222.726769][ T9865] RSP: 002b:00007fadb0eb4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 222.726794][ T9865] RAX: ffffffffffffffda RBX: 00007fadb0225fa0 RCX: 00007fadaff9e159 [ 222.726810][ T9865] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000003 [ 222.726824][ T9865] RBP: 00007fadb0eb4090 R08: 0000000000000000 R09: 0000000000000000 [ 222.726837][ T9865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 222.726850][ T9865] R13: 00007fadb0226038 R14: 00007fadb0225fa0 R15: 00007ffc6fb93d78 [ 222.726885][ T9865] [ 226.457662][ T9888] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 226.485418][ T9881] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 226.495397][ T9900] netlink: 'syz.4.1110': attribute type 1 has an invalid length. [ 226.495433][ T9900] netlink: 'syz.4.1110': attribute type 3 has an invalid length. [ 226.495462][ T9900] netlink: 172 bytes leftover after parsing attributes in process `syz.4.1110'. [ 226.495482][ T9900] NCSI netlink: No device for ifindex 813332851 [ 226.548025][ T9904] netlink: 'syz.4.1110': attribute type 1 has an invalid length. [ 226.548177][ T9904] netlink: 'syz.4.1110': attribute type 1 has an invalid length. [ 226.744307][ T9941] FAULT_INJECTION: forcing a failure. [ 226.744307][ T9941] name failslab, interval 1, probability 0, space 0, times 0 [ 226.744368][ T9941] CPU: 0 UID: 0 PID: 9941 Comm: syz.3.1111 Not tainted syzkaller #0 PREEMPT(full) [ 226.744393][ T9941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 226.744485][ T9941] Call Trace: [ 226.744496][ T9941] [ 226.744506][ T9941] dump_stack_lvl+0xe8/0x150 [ 226.744558][ T9941] should_fail_ex+0x410/0x560 [ 226.744601][ T9941] should_failslab+0xa8/0x100 [ 226.744639][ T9941] __kmalloc_noprof+0xfe/0x720 [ 226.744673][ T9941] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 226.744710][ T9941] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 226.744752][ T9941] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 226.744796][ T9941] genl_family_rcv_msg_doit+0xda/0x340 [ 226.744838][ T9941] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 226.744882][ T9941] ? apparmor_capable+0x126/0x170 [ 226.744919][ T9941] ? bpf_lsm_capable+0x9/0x20 [ 226.744953][ T9941] ? security_capable+0x7e/0x2c0 [ 226.744983][ T9941] genl_rcv_msg+0x614/0x7a0 [ 226.745024][ T9941] ? __pfx_genl_rcv_msg+0x10/0x10 [ 226.745056][ T9941] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 226.745080][ T9941] ? __pfx_nl80211_new_station+0x10/0x10 [ 226.745106][ T9941] ? __pfx_nl80211_post_doit+0x10/0x10 [ 226.745129][ T9941] ? __pfx_ref_tracker_free+0x10/0x10 [ 226.745165][ T9941] netlink_rcv_skb+0x226/0x4a0 [ 226.745195][ T9941] ? __pfx_genl_rcv_msg+0x10/0x10 [ 226.745230][ T9941] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 226.745275][ T9941] ? down_read+0x2be/0x330 [ 226.745301][ T9941] genl_rcv+0x28/0x40 [ 226.745331][ T9941] netlink_unicast+0x7bd/0x940 [ 226.745366][ T9941] netlink_sendmsg+0x813/0xb40 [ 226.745403][ T9941] ? __pfx_netlink_sendmsg+0x10/0x10 [ 226.745439][ T9941] ? apparmor_socket_sendmsg+0x98/0x360 [ 226.745475][ T9941] ? __pfx_netlink_sendmsg+0x10/0x10 [ 226.745501][ T9941] sock_sendmsg_nosec+0x13a/0x180 [ 226.745535][ T9941] ____sys_sendmsg+0x54e/0x850 [ 226.745563][ T9941] ? __pfx_____sys_sendmsg+0x10/0x10 [ 226.745595][ T9941] ? import_iovec+0x73/0xa0 [ 226.745696][ T9941] ___sys_sendmsg+0x2a5/0x360 [ 226.745774][ T9941] ? __lock_acquire+0x6df/0x2e50 [ 226.745851][ T9941] ? __pfx____sys_sendmsg+0x10/0x10 [ 226.746011][ T9941] ? __fget_files+0x2a/0x420 [ 226.746086][ T9941] ? __fget_files+0x3a2/0x420 [ 226.746172][ T9941] __x64_sys_sendmsg+0x1b1/0x290 [ 226.746246][ T9941] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 226.746363][ T9941] do_syscall_64+0x166/0x520 [ 226.746446][ T9941] ? trace_irq_disable+0x3b/0x140 [ 226.746501][ T9941] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.746564][ T9941] ? clear_bhb_loop+0x70/0xc0 [ 226.746633][ T9941] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.746697][ T9941] RIP: 0033:0x7fe171b9e159 [ 226.746760][ T9941] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 226.746806][ T9941] RSP: 002b:00007fe172ae9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 226.746955][ T9941] RAX: ffffffffffffffda RBX: 00007fe171e25fa0 RCX: 00007fe171b9e159 [ 226.746990][ T9941] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000003 [ 226.747032][ T9941] RBP: 00007fe172ae9090 R08: 0000000000000000 R09: 0000000000000000 [ 226.747066][ T9941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 226.747100][ T9941] R13: 00007fe171e26038 R14: 00007fe171e25fa0 R15: 00007ffffcbe36a8 [ 226.747191][ T9941] [ 227.506099][ T9969] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1120'. [ 227.542721][ T8475] IPVS: starting estimator thread 0... [ 227.623725][ T9971] IPVS: using max 26 ests per chain, 62400 per kthread [ 227.743836][ T9977] netlink: 'syz.4.1122': attribute type 1 has an invalid length. [ 228.114590][ T9981] wireguard0: entered promiscuous mode [ 228.133616][ T9981] bond4: (slave wireguard0): The slave device specified does not support setting the MAC address [ 228.147316][ T9981] bond4: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 228.260410][ T9981] bond4: (slave wireguard0): making interface the new active one [ 228.271081][ T9981] bond4: (slave wireguard0): Enslaving as an active interface with an up link [ 228.324674][ T9977] wireguard1: entered promiscuous mode [ 228.331858][ T9977] bond4: (slave wireguard1): The slave device specified does not support setting the MAC address [ 228.365321][ T9977] bond4: (slave wireguard1): Enslaving as a backup interface with an up link [ 229.331667][T10054] FAULT_INJECTION: forcing a failure. [ 229.331667][T10054] name failslab, interval 1, probability 0, space 0, times 0 [ 229.349373][T10054] CPU: 0 UID: 0 PID: 10054 Comm: syz.2.1141 Not tainted syzkaller #0 PREEMPT(full) [ 229.349402][T10054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 229.349494][T10054] Call Trace: [ 229.349505][T10054] [ 229.349514][T10054] dump_stack_lvl+0xe8/0x150 [ 229.349555][T10054] should_fail_ex+0x410/0x560 [ 229.349595][T10054] should_failslab+0xa8/0x100 [ 229.349621][T10054] ? skb_clone+0x212/0x3a0 [ 229.349646][T10054] kmem_cache_alloc_noprof+0xa1/0x600 [ 229.349683][T10054] ? skb_clone+0x212/0x3a0 [ 229.349712][T10054] skb_clone+0x212/0x3a0 [ 229.349741][T10054] __netlink_deliver_tap+0x413/0x860 [ 229.349783][T10054] ? netlink_deliver_tap+0x2e/0x1b0 [ 229.349814][T10054] netlink_deliver_tap+0x19c/0x1b0 [ 229.349843][T10054] netlink_sendskb+0x68/0x140 [ 229.349871][T10054] netlink_rcv_skb+0x2a4/0x4a0 [ 229.349897][T10054] ? __pfx_genl_rcv_msg+0x10/0x10 [ 229.349930][T10054] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 229.349973][T10054] ? down_read+0x2be/0x330 [ 229.350010][T10054] genl_rcv+0x28/0x40 [ 229.350041][T10054] netlink_unicast+0x7bd/0x940 [ 229.350077][T10054] netlink_sendmsg+0x813/0xb40 [ 229.350113][T10054] ? __pfx_netlink_sendmsg+0x10/0x10 [ 229.350148][T10054] ? apparmor_socket_sendmsg+0x98/0x360 [ 229.350185][T10054] ? __pfx_netlink_sendmsg+0x10/0x10 [ 229.350212][T10054] sock_sendmsg_nosec+0x13a/0x180 [ 229.350246][T10054] ____sys_sendmsg+0x54e/0x850 [ 229.350278][T10054] ? __pfx_____sys_sendmsg+0x10/0x10 [ 229.350321][T10054] ? ___sys_sendmsg+0x28a/0x360 [ 229.350352][T10054] ___sys_sendmsg+0x2a5/0x360 [ 229.350380][T10054] ? __lock_acquire+0x6df/0x2e50 [ 229.350408][T10054] ? __pfx____sys_sendmsg+0x10/0x10 [ 229.350473][T10054] ? __fget_files+0x2a/0x420 [ 229.350501][T10054] ? __fget_files+0x3a2/0x420 [ 229.350541][T10054] __x64_sys_sendmsg+0x1b1/0x290 [ 229.350568][T10054] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 229.350617][T10054] do_syscall_64+0x166/0x520 [ 229.350649][T10054] ? trace_irq_disable+0x3b/0x140 [ 229.350671][T10054] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.350693][T10054] ? clear_bhb_loop+0x70/0xc0 [ 229.350721][T10054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.350743][T10054] RIP: 0033:0x7f6733b9e159 [ 229.350765][T10054] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 229.350783][T10054] RSP: 002b:00007f6734a9d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 229.350807][T10054] RAX: ffffffffffffffda RBX: 00007f6733e25fa0 RCX: 00007f6733b9e159 [ 229.350823][T10054] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000003 [ 229.350837][T10054] RBP: 00007f6734a9d090 R08: 0000000000000000 R09: 0000000000000000 [ 229.350850][T10054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 229.350872][T10054] R13: 00007f6733e26038 R14: 00007f6733e25fa0 R15: 00007fffc687f5c8 [ 229.350909][T10054] [ 229.868504][T10066] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1147'. [ 229.931501][T10073] Bluetooth: hci0: unsupported parameter 5134 [ 229.931554][T10073] Bluetooth: hci0: unsupported parameter 8192 [ 229.931587][T10073] Bluetooth: hci0: unsupported parameter 5134 [ 229.931650][T10073] Bluetooth: hci0: unsupported parameter 8192 [ 229.973506][T10076] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1143'. [ 230.019006][T10074] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1145'. [ 230.064719][T10073] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1145'. [ 230.160415][T10082] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1148'. [ 230.191402][T10066] geneve3: entered allmulticast mode [ 230.420054][T10089] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1151'. [ 230.599614][T10100] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1154'. [ 230.620899][T10102] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 230.758792][T10107] FAULT_INJECTION: forcing a failure. [ 230.758792][T10107] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 230.781432][T10107] CPU: 0 UID: 0 PID: 10107 Comm: syz.1.1157 Not tainted syzkaller #0 PREEMPT(full) [ 230.781466][T10107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 230.781481][T10107] Call Trace: [ 230.781491][T10107] [ 230.781502][T10107] dump_stack_lvl+0xe8/0x150 [ 230.781543][T10107] should_fail_ex+0x410/0x560 [ 230.781583][T10107] _copy_to_user+0x31/0xb0 [ 230.781611][T10107] simple_read_from_buffer+0xe1/0x170 [ 230.781648][T10107] proc_fail_nth_read+0x1bb/0x230 [ 230.781682][T10107] ? common_file_perm+0x20e/0x2b0 [ 230.781708][T10107] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 230.781769][T10107] ? rw_verify_area+0x24a/0x4c0 [ 230.781810][T10107] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 230.781911][T10107] vfs_read+0x213/0xa80 [ 230.781950][T10107] ? __pfx___mutex_lock+0x10/0x10 [ 230.781985][T10107] ? __pfx_vfs_read+0x10/0x10 [ 230.782017][T10107] ? __fget_files+0x2a/0x420 [ 230.782049][T10107] ? __fget_files+0x3a2/0x420 [ 230.782076][T10107] ? __fget_files+0x2a/0x420 [ 230.782112][T10107] ksys_read+0x150/0x270 [ 230.782144][T10107] ? __pfx_ksys_read+0x10/0x10 [ 230.782188][T10107] do_syscall_64+0x166/0x520 [ 230.782221][T10107] ? trace_irq_disable+0x3b/0x140 [ 230.782243][T10107] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.782265][T10107] ? clear_bhb_loop+0x70/0xc0 [ 230.782293][T10107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.782315][T10107] RIP: 0033:0x7f54eaf5e98e [ 230.782337][T10107] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 230.782356][T10107] RSP: 002b:00007f54e91f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 230.782380][T10107] RAX: ffffffffffffffda RBX: 00007f54e91f66c0 RCX: 00007f54eaf5e98e [ 230.782396][T10107] RDX: 000000000000000f RSI: 00007f54e91f60a0 RDI: 0000000000000004 [ 230.782409][T10107] RBP: 00007f54e91f6090 R08: 0000000000000000 R09: 0000000000000000 [ 230.782423][T10107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 230.782436][T10107] R13: 00007f54eb226038 R14: 00007f54eb225fa0 R15: 00007ffdc40fc968 [ 230.782471][T10107] [ 231.142948][T10113] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1161'. [ 231.370053][T10122] bond4 (unregistering): Released all slaves [ 231.686706][T10132] __nla_validate_parse: 2 callbacks suppressed [ 231.688677][T10132] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1165'. [ 231.708573][T10115] syzkaller0: entered promiscuous mode [ 231.714491][T10115] syzkaller0: entered allmulticast mode [ 231.730950][T10115] tipc: Enabled bearer , priority 0 [ 231.799251][T10135] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1167'. [ 231.832162][T10114] tipc: Resetting bearer [ 232.015666][T10114] tipc: Disabling bearer [ 232.088330][T10135] nbd2: detected capacity change from 0 to 63 [ 232.100747][T10135] block nbd2: NBD_DISCONNECT [ 232.261896][T10135] block nbd2: Disconnected due to user request. [ 232.265163][T10135] block nbd2: shutting down sockets [ 232.281724][ T1653] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 232.282445][ T1653] Buffer I/O error on dev nbd2, logical block 0, async page read [ 232.282705][ T1653] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 3 prio class 2 [ 232.282778][ T1653] Buffer I/O error on dev nbd2, logical block 1, async page read [ 232.282821][ T1653] Buffer I/O error on dev nbd2, logical block 2, async page read [ 232.282865][ T1653] Buffer I/O error on dev nbd2, logical block 3, async page read [ 232.301601][ T1653] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 232.301644][ T1653] Buffer I/O error on dev nbd2, logical block 0, async page read [ 232.301674][ T1653] Buffer I/O error on dev nbd2, logical block 1, async page read [ 232.301690][ T1653] Buffer I/O error on dev nbd2, logical block 2, async page read [ 232.302935][ T1653] Buffer I/O error on dev nbd2, logical block 3, async page read [ 232.305737][ T1653] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 232.305831][ T1653] Buffer I/O error on dev nbd2, logical block 0, async page read [ 232.305875][ T1653] Buffer I/O error on dev nbd2, logical block 1, async page read [ 232.306443][ T1653] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 232.306737][ T1653] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 232.307080][ T1653] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 232.307392][ T1653] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 232.307821][ T1653] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 232.308159][ T1653] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 232.323144][ T5644] ldm_validate_partition_table(): Disk read failed. [ 232.362886][ T5644] Dev nbd2: unable to read RDB block 0 [ 232.367524][ T5644] nbd2: unable to read partition table [ 232.546535][ T5644] ldm_validate_partition_table(): Disk read failed. [ 232.547174][ T5644] Dev nbd2: unable to read RDB block 0 [ 232.547975][ T5644] nbd2: unable to read partition table [ 232.687843][T10156] netlink: 'syz.4.1171': attribute type 10 has an invalid length. [ 232.796439][T10165] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1173'. [ 232.796572][T10165] openvswitch: netlink: Missing key (keys=c0, expected=880) [ 232.810063][T10158] ksmbd: Unknown IPC event: 1, ignore. [ 232.824282][T10156] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 232.940000][T10169] openvswitch: netlink: IP tunnel attribute has 5413 unknown bytes. [ 232.940700][T10169] openvswitch: netlink: IP tunnel attribute has 5413 unknown bytes. [ 232.950486][T10167] netlink: 'syz.2.1176': attribute type 2 has an invalid length. [ 232.951120][T10167] netlink: 'syz.2.1176': attribute type 2 has an invalid length. [ 232.960292][T10169] openvswitch: netlink: IP tunnel attribute has 5413 unknown bytes. [ 232.961241][T10169] openvswitch: netlink: IP tunnel attribute has 5413 unknown bytes. [ 232.976490][T10167] netlink: 'syz.2.1176': attribute type 2 has an invalid length. [ 232.977386][T10167] netlink: 'syz.2.1176': attribute type 2 has an invalid length. [ 232.977938][T10167] netlink: 'syz.2.1176': attribute type 2 has an invalid length. [ 232.983134][T10169] openvswitch: netlink: IP tunnel attribute has 5413 unknown bytes. [ 233.007148][T10167] netlink: 'syz.2.1176': attribute type 2 has an invalid length. [ 233.007856][T10167] netlink: 'syz.2.1176': attribute type 2 has an invalid length. [ 233.042878][T10167] netlink: 'syz.2.1176': attribute type 2 has an invalid length. [ 233.043848][T10167] netlink: 'syz.2.1176': attribute type 2 has an invalid length. [ 233.057935][T10169] openvswitch: netlink: IP tunnel attribute has 5413 unknown bytes. [ 233.058727][T10169] openvswitch: netlink: IP tunnel attribute has 5413 unknown bytes. [ 233.087234][T10169] openvswitch: netlink: IP tunnel attribute has 5413 unknown bytes. [ 233.088664][T10169] openvswitch: netlink: IP tunnel attribute has 5413 unknown bytes. [ 233.728301][T10193] wlan0 speed is unknown, defaulting to 1000 [ 233.728816][T10193] wlan0 speed is unknown, defaulting to 1000 [ 233.790730][T10193] wlan0 speed is unknown, defaulting to 1000 [ 233.872166][T10193] smbdirect: ib_dev[syq0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 233.887722][T10193] smbdirect: ib_dev[syq0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 233.908377][T10193] smbdirect: ib_dev[syq0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 233.925890][T10193] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 233.952401][T10193] infiniband syq0: RDMA CMA: cma_listen_on_dev, error -98 [ 234.019723][T10193] wlan0 speed is unknown, defaulting to 1000 [ 234.029071][T10193] wlan0 speed is unknown, defaulting to 1000 [ 234.039675][T10193] wlan0 speed is unknown, defaulting to 1000 [ 234.048916][T10193] wlan0 speed is unknown, defaulting to 1000 [ 234.057226][T10193] wlan0 speed is unknown, defaulting to 1000 [ 234.280391][T10209] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1195'. [ 234.289614][T10209] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1195'. [ 234.364716][T10213] bond5 (unregistering): Released all slaves [ 234.464496][T10209] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1195'. [ 234.464560][T10209] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1195'. [ 234.504821][ T8474] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 234.534050][ T8474] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 234.544621][ T13] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 234.546254][ T13] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 234.832479][T10245] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1201'. [ 234.962156][T10233] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1199'. [ 235.140660][T10233] hsr_slave_1 (unregistering): left promiscuous mode [ 235.321770][T10261] dvmrp8: entered allmulticast mode [ 235.521682][T10280] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1208'. [ 235.870100][T10287] bridge3: entered promiscuous mode [ 235.889130][T10287] bridge3: entered allmulticast mode [ 237.321434][T10354] __nla_validate_parse: 6 callbacks suppressed [ 237.321533][T10354] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1228'. [ 237.774116][T10359] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1230'. [ 237.794885][T10360] bond4: option lacp_active: mode dependency failed, not supported in mode active-backup(1) [ 237.811170][T10360] bond4 (unregistering): Released all slaves [ 238.436915][T10388] net_ratelimit: 56 callbacks suppressed [ 238.436976][T10388] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 238.570038][T10387] bond5 (unregistering): Released all slaves [ 239.438680][T10429] validate_nla: 60 callbacks suppressed [ 239.438741][T10429] netlink: 'syz.4.1246': attribute type 8 has an invalid length. [ 239.775906][T10442] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1250'. [ 239.850785][T10444] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 239.850829][T10444] IPv6: NLM_F_CREATE should be set when creating new route [ 239.851809][T10444] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1252'. [ 240.077734][T10451] veth1_macvtap: entered allmulticast mode [ 240.196988][T10453] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 240.565119][T10445] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 241.000873][T10473] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 241.443016][T10495] ip6tnl3: entered promiscuous mode [ 241.457871][T10495] ip6tnl3: entered allmulticast mode [ 241.522733][T10504] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1268'. [ 241.571089][T10495] netlink: Unknown conntrack attr (type=2822, max=9) [ 241.571195][T10495] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 241.640962][T10507] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1268'. [ 241.902215][T10525] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1271'. [ 241.971964][T10530] ip6t_hbh: Not strict - not implemented [ 241.982563][T10530] Cannot find set identified by id 4 to match [ 241.990835][T10530] x_tables: duplicate underflow at hook 2 [ 241.998380][T10530] netlink: 45349 bytes leftover after parsing attributes in process `syz.1.1273'. [ 241.998563][T10530] 0猉功D龌: renamed from 30{X功 (while UP) [ 242.238702][T10540] netlink: 'syz.3.1275': attribute type 3 has an invalid length. [ 242.238756][T10540] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1275'. [ 242.239581][T10542] netlink: 'syz.3.1275': attribute type 3 has an invalid length. [ 242.239633][T10542] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1275'. [ 242.327862][T10542] netlink: 198796 bytes leftover after parsing attributes in process `syz.3.1275'. [ 242.339963][T10542] netlink: 'syz.3.1275': attribute type 2 has an invalid length. [ 242.347416][T10540] netlink: 198796 bytes leftover after parsing attributes in process `syz.3.1275'. [ 242.347488][T10540] netlink: 'syz.3.1275': attribute type 2 has an invalid length. [ 242.406718][T10532] bond5 (unregistering): Released all slaves [ 242.692067][ T5631] block nbd2: Receive control failed (result -32) [ 242.775161][T10569] tipc: Enabled bearer , priority 10 [ 242.792577][T10564] netlink: Failed to add  helper -22 [ 242.794362][T10564] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 242.901974][T10574] tipc: Enabling of bearer rejected, already enabled [ 242.968499][T10561] netlink: Failed to add  helper -22 [ 242.975036][T10561] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 243.080342][T10580] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1283'. [ 243.090548][T10580] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1283'. [ 243.781569][T10601] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 鐤絤%AAZ鳽磾酀I徠亥 帏% [ 243.906798][ T5755] tipc: Node number set to 50331648 [ 243.994613][T10615] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1290'. [ 243.994668][T10615] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1290'. [ 244.578161][T10641] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1298'. [ 244.710469][T10650] netlink: 'syz.1.1300': attribute type 2 has an invalid length. [ 244.874346][T10658] gtp0: entered promiscuous mode [ 244.874402][T10658] gtp0: entered allmulticast mode [ 245.277249][T10676] netlink: 'syz.4.1308': attribute type 15 has an invalid length. [ 245.317494][T10679] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1309'. [ 245.364280][T10676] netlink: 'syz.4.1308': attribute type 15 has an invalid length. [ 245.464337][ T8475] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 245.488255][ T8475] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 245.488395][ T8475] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 245.488525][ T8475] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 245.490864][T10686] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1310'. [ 245.724914][T10684] block nbd1: NBD_DISCONNECT [ 245.724978][T10684] block nbd1: Send disconnect failed -32 [ 245.724997][T10684] block nbd1: shutting down sockets [ 246.377065][T10732] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1320'. [ 248.217493][T10801] bond2: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 248.242165][T10801] bond2 (unregistering): Released all slaves [ 248.703901][T10827] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1345'. [ 248.780846][T10829] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1346'. [ 248.902984][T10829] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1346'. [ 249.055193][T10828] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 249.066381][T10835] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1347'. [ 249.066415][T10835] netlink: 176 bytes leftover after parsing attributes in process `syz.2.1347'. [ 249.066476][T10835] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1347'. [ 249.242292][T10847] netlink: 1371 bytes leftover after parsing attributes in process `syz.2.1349'. [ 249.424827][T10855] netlink: 'syz.2.1351': attribute type 83 has an invalid length. [ 249.802108][T10857] syz.4.1352 (10857) used greatest stack depth: 18088 bytes left [ 249.816462][T10862] syzkaller1: entered promiscuous mode [ 249.819281][T10865] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1355'. [ 249.832153][T10862] syzkaller1: entered allmulticast mode [ 250.538778][T10895] netlink: 'syz.0.1365': attribute type 3 has an invalid length. [ 279.003654][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 308.940425][T10922] netlink: 'syz.0.1369': attribute type 11 has an invalid length. [ 308.940486][T10922] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1369'. [ 308.965967][T10925] openvswitch: netlink: Duplicate or invalid key (type 0). [ 308.978385][T10928] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1371'. [ 309.005261][T10928] netlink: 65011 bytes leftover after parsing attributes in process `syz.2.1371'. [ 309.019022][T10928] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1371'. [ 309.312191][T10939] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1377'. [ 309.352238][T10941] netlink: 'syz.3.1378': attribute type 75 has an invalid length. [ 309.642004][T10958] xt_hashlimit: size too large, truncated to 1048576 [ 309.953106][T10973] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 309.970598][T10965] tap0: tun_chr_ioctl cmd 2148553947 [ 309.987651][T10970] netlink: 'syz.1.1385': attribute type 30 has an invalid length. [ 310.143916][T10970] bond4: option arp_missed_max: invalid value (0) [ 310.143977][T10970] bond4: option arp_missed_max: allowed values 1 - 255 [ 310.162101][T10970] bond4 (unregistering): Released all slaves [ 310.485602][T10982] syzkaller1: entered allmulticast mode [ 310.582665][T10993] netlink: 'syz.4.1392': attribute type 29 has an invalid length. [ 310.704941][ T3377] netdevsim netdevsim4 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0 [ 310.705051][ T3377] netdevsim netdevsim4 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0 [ 310.705112][ T3377] netdevsim netdevsim4 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0 [ 310.705155][ T3377] netdevsim netdevsim4 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0 [ 310.769042][T10998] bond0: entered promiscuous mode [ 310.769108][T10998] bond0: entered allmulticast mode [ 310.791285][T10998] 8021q: adding VLAN 0 to HW filter on device bond0 [ 311.075945][T11008] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1398'. [ 311.075994][T11008] openvswitch: netlink: Flow key attr not present in new flow. [ 311.196819][T11019] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1399'. [ 311.277646][T11031] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1399'. [ 311.399095][T11034] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1404'. [ 311.806836][T11061] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1409'. [ 311.806901][T11061] netlink: 'syz.2.1409': attribute type 7 has an invalid length. [ 311.806938][T11061] netlink: 'syz.2.1409': attribute type 8 has an invalid length. [ 311.894075][T11059] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 312.199402][T11071] netlink: 'syz.1.1410': attribute type 3 has an invalid length. [ 312.428863][T11076] netlink: 'syz.2.1411': attribute type 25 has an invalid length. [ 312.591354][T11077] openvswitch: netlink: Unexpected mask (mask=4000010, allowed=10058) [ 312.951459][T11103] bond0: Removing last arp target with arp_interval on [ 313.113591][T11114] rB簱: renamed from lo (while UP) [ 313.208059][T11114] A link change request failed with some changes committed already. Interface 04rB簱 may have been left with an inconsistent configuration, please check. [ 313.343362][T11122] netlink: 'syz.2.1426': attribute type 1 has an invalid length. [ 313.367426][T11122] syzkaller0: entered promiscuous mode [ 313.373638][T11122] syzkaller0: entered allmulticast mode [ 313.835391][T11142] netlink: 'syz.1.1434': attribute type 2 has an invalid length. [ 313.978978][T11150] __nla_validate_parse: 6 callbacks suppressed [ 313.986147][T11150] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1435'. [ 314.436893][T11174] openvswitch: netlink: Duplicate or invalid key (type 0). [ 314.532805][T11182] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1447'. [ 314.587974][T11186] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1447'. [ 314.611702][T11185] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1447'. [ 314.638292][T11188] syzkaller1: entered promiscuous mode [ 314.638351][T11188] syzkaller1: entered allmulticast mode [ 314.886711][T11193] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1450'. [ 315.590074][T11221] xt_hashlimit: size too large, truncated to 1048576 [ 315.893498][T11222] C: renamed from lo [ 315.929781][T11222] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 316.208511][T11242] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1461'. [ 316.274839][T11244] Bluetooth: hci0: unsupported parameter 5135 [ 316.281780][T11244] Bluetooth: hci0: unsupported parameter 8192 [ 316.288614][T11244] Bluetooth: hci0: unsupported parameter 5135 [ 316.295353][T11244] Bluetooth: hci0: unsupported parameter 8192 [ 316.612098][T11237] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1461'. [ 317.135803][T11266] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1464'. [ 317.394598][T11276] syzkaller0: entered promiscuous mode [ 317.394978][T11276] syzkaller0: entered allmulticast mode [ 317.518041][T11273] netlink: 'syz.2.1468': attribute type 4 has an invalid length. [ 317.522645][T11277] netlink: 'syz.2.1468': attribute type 4 has an invalid length. [ 317.570048][T11287] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1471'. [ 317.572141][T11287] openvswitch: netlink: Missing key (keys=c0, expected=880) [ 317.671366][T11287] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1471'. [ 317.881446][T11286] Cannot find add_set index 4 as target [ 318.535551][T11310] syzkaller1: entered promiscuous mode [ 318.541531][T11310] syzkaller1: entered allmulticast mode [ 319.840389][T11268] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 319.853314][T11257] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 320.841602][T11331] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1478'. [ 321.210876][T11339] Bluetooth: hci0: unsupported parameter 5135 [ 321.210935][T11339] Bluetooth: hci0: unsupported parameter 8192 [ 321.210975][T11339] Bluetooth: hci0: unsupported parameter 5135 [ 321.210998][T11339] Bluetooth: hci0: unsupported parameter 8192 [ 321.526884][T11339] 8021q: adding VLAN 0 to HW filter on device bond4 [ 321.721934][T11357] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 322.046936][T11370] vlan2: entered allmulticast mode [ 322.052568][T11370] bond0: entered allmulticast mode [ 322.113432][T11367] netlink: 'syz.3.1488': attribute type 1 has an invalid length. [ 322.118643][T11367] netlink: 'syz.3.1488': attribute type 2 has an invalid length. [ 322.572891][T11387] netlink: 'syz.0.1491': attribute type 13 has an invalid length. [ 322.573265][T11387] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1491'. [ 322.693046][T11387] netlink: 'syz.0.1491': attribute type 13 has an invalid length. [ 322.700321][T11387] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1491'. [ 322.701348][ T8476] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 322.701437][ T3377] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 322.701489][ T3377] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 322.701525][ T3377] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 322.701934][T11382] netlink: 'syz.0.1491': attribute type 13 has an invalid length. [ 322.701952][T11382] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1491'. [ 322.739352][T11382] netlink: 'syz.0.1491': attribute type 13 has an invalid length. [ 322.739391][T11382] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1491'. [ 323.181013][T11403] netlink: 'syz.4.1497': attribute type 1 has an invalid length. [ 323.225166][T11403] bond5: entered promiscuous mode [ 323.231807][T11403] bond5: entered allmulticast mode [ 323.232372][T11403] 8021q: adding VLAN 0 to HW filter on device bond5 [ 324.802191][T11374] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 324.822334][T11360] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 324.834905][T11396] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1495'. [ 325.148657][T11416] xt_limit: Overflow, try lower: 536871034/0 [ 325.230744][T11413] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1498'. [ 325.424449][T11423] syzkaller1: entered promiscuous mode [ 325.425409][T11423] syzkaller1: entered allmulticast mode [ 325.505303][T11413] netlink: 344 bytes leftover after parsing attributes in process `syz.2.1498'. [ 325.770056][T11427] syzkaller0: entered promiscuous mode [ 325.834194][T11427] syzkaller0: entered allmulticast mode [ 325.952089][T11454] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1505'. [ 331.316870][T11442] syz_tun: entered promiscuous mode [ 331.324240][T11441] A link change request failed with some changes committed already. Interface 04rB簱 may have been left with an inconsistent configuration, please check. [ 331.387265][T11466] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 331.920980][T11482] netlink: 'syz.3.1510': attribute type 29 has an invalid length. [ 331.985831][T11482] netlink: 'syz.3.1510': attribute type 29 has an invalid length. [ 332.002892][T11482] netlink: 'syz.3.1510': attribute type 29 has an invalid length. [ 332.070315][T11499] netlink: 'syz.3.1510': attribute type 4 has an invalid length. [ 332.095901][T11499] netlink: 'syz.3.1510': attribute type 4 has an invalid length. [ 332.927661][ T5631] Bluetooth: hci4: link tx timeout [ 332.928244][ T5631] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 334.784252][T11509] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 334.844224][T11478] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 334.993403][ T5628] Bluetooth: hci4: command 0x0405 tx timeout [ 335.278731][T11536] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1517'. [ 335.278960][T11536] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1517'. [ 335.358542][T11538] netlink: 'syz.0.1517': attribute type 4 has an invalid length. [ 335.368491][T11538] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1517'. [ 335.526450][T11528] 8021q: adding VLAN 0 to HW filter on device bond2 [ 335.636140][T11545] netlink: 'syz.3.1521': attribute type 58 has an invalid length. [ 335.644912][T11545] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1521'. [ 335.858638][T11536] 8021q: adding VLAN 0 to HW filter on device bond0 [ 335.875187][T11536] bond2: (slave bond0): Enslaving as an active interface with a down link [ 335.892952][T11538] .`: renamed from bond0 (while UP) [ 335.906855][T11540] tipc: Resetting bearer [ 335.912647][T11540] team0: entered promiscuous mode [ 335.913683][T11540] team_slave_0: entered promiscuous mode [ 335.916166][T11540] team_slave_1: entered promiscuous mode [ 335.918023][T11540] dummy0: entered promiscuous mode [ 336.074668][T11550] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1522'. [ 336.074903][T11550] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1522'. [ 336.075297][T11550] netlink: 31 bytes leftover after parsing attributes in process `syz.2.1522'. [ 336.436006][T11554] A link change request failed with some changes committed already. Interface 04rB簱 may have been left with an inconsistent configuration, please check. [ 336.514620][T11555] A link change request failed with some changes committed already. Interface 04rB簱 may have been left with an inconsistent configuration, please check. [ 336.991823][T11582] bond5: option packets_per_slave: mode dependency failed, not supported in mode balance-xor(2) [ 337.074254][T11582] bond5 (unregistering): Released all slaves [ 337.189466][T11586] netlink: 'syz.4.1531': attribute type 1 has an invalid length. [ 337.189534][T11586] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1531'. [ 337.464622][T11592] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1534'. [ 337.464857][T11592] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1534'. [ 338.341314][T11621] macsec1: entered promiscuous mode [ 338.484969][T11623] netlink: NAT attribute has 5 unknown bytes [ 338.485051][T11623] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 339.294990][T11649] netlink: 'syz.2.1552': attribute type 11 has an invalid length. [ 340.339355][T11678] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1560'. [ 340.340214][T11678] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 340.360702][T11678] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1560'. [ 340.467472][T11678] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1560'. [ 340.540288][T11685] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1561'. [ 340.545993][T11678] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1560'. [ 340.551553][T11686] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1560'. [ 340.619748][T11691] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1562'. [ 340.711979][T11678] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1560'. [ 340.799944][T11685] netlink: 260 bytes leftover after parsing attributes in process `syz.4.1561'. [ 340.902614][T11695] xt_hashlimit: size too large, truncated to 1048576 [ 341.646725][T11717] netlink: NAT flags may be given only when NAT range (SRC or DST) is also specified. [ 341.646789][T11717] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 342.132570][T11724] netlink: 'syz.4.1569': attribute type 1 has an invalid length. [ 342.305133][T11733] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1569'. [ 342.460235][T11726] bond6: (slave veth3): Enslaving as an active interface with a down link [ 342.510019][T11732] syzkaller0: mtu less than device minimum [ 342.536864][T11732] syzkaller0: entered promiscuous mode [ 342.538160][T11732] syzkaller0: entered allmulticast mode [ 343.324900][T11766] vlan4: entered promiscuous mode [ 343.331612][T11766] hsr0: entered promiscuous mode [ 343.345984][T11766] vlan4: entered allmulticast mode [ 343.351853][T11766] hsr0: entered allmulticast mode [ 343.361554][T11766] hsr_slave_0: entered allmulticast mode [ 343.369168][T11766] hsr_slave_1: entered allmulticast mode [ 343.380205][T11774] hsr_slave_0: left promiscuous mode [ 343.399295][T11774] hsr_slave_1: left promiscuous mode [ 343.674102][T11786] xt_cgroup: no path or classid specified [ 344.672131][T11821] x_tables: duplicate underflow at hook 2 [ 344.823496][T11827] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 345.926857][T11860] IPVS: set_ctl: invalid protocol: 58 172.20.20.187:20001 [ 346.210596][T11871] __nla_validate_parse: 8 callbacks suppressed [ 346.220405][T11871] netlink: 272 bytes leftover after parsing attributes in process `syz.2.1603'. [ 346.282144][T11871] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1603'. [ 347.352546][T11915] FAULT_INJECTION: forcing a failure. [ 347.352546][T11915] name failslab, interval 1, probability 0, space 0, times 0 [ 347.384629][T11915] CPU: 1 UID: 0 PID: 11915 Comm: syz.2.1614 Not tainted syzkaller #0 PREEMPT(full) [ 347.384681][T11915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 347.384707][T11915] Call Trace: [ 347.384731][T11915] [ 347.384743][T11915] dump_stack_lvl+0xe8/0x150 [ 347.384814][T11915] should_fail_ex+0x410/0x560 [ 347.384878][T11915] ? __alloc_skb+0x1db/0x7a0 [ 347.384967][T11915] should_failslab+0xa8/0x100 [ 347.385081][T11915] ? __alloc_skb+0x1db/0x7a0 [ 347.385150][T11915] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 347.385195][T11915] ? __alloc_skb+0x18d/0x7a0 [ 347.385236][T11915] ? __alloc_skb+0x1db/0x7a0 [ 347.385282][T11915] __alloc_skb+0x1db/0x7a0 [ 347.385325][T11915] netlink_sendmsg+0x5d4/0xb40 [ 347.385380][T11915] ? __pfx_netlink_sendmsg+0x10/0x10 [ 347.385437][T11915] ? apparmor_socket_sendmsg+0x98/0x360 [ 347.385506][T11915] ? __pfx_netlink_sendmsg+0x10/0x10 [ 347.385555][T11915] sock_sendmsg_nosec+0x13a/0x180 [ 347.385612][T11915] ____sys_sendmsg+0x54e/0x850 [ 347.385654][T11915] ? __pfx_____sys_sendmsg+0x10/0x10 [ 347.385698][T11915] ? import_iovec+0x73/0xa0 [ 347.385730][T11915] ___sys_sendmsg+0x2a5/0x360 [ 347.385756][T11915] ? __lock_acquire+0x6df/0x2e50 [ 347.385798][T11915] ? __pfx____sys_sendmsg+0x10/0x10 [ 347.385855][T11915] ? __lock_acquire+0x6df/0x2e50 [ 347.386039][T11915] ? __fget_files+0x2a/0x420 [ 347.386076][T11915] ? __fget_files+0x3a2/0x420 [ 347.386142][T11915] __x64_sys_sendmsg+0x1b1/0x290 [ 347.386182][T11915] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 347.386247][T11915] do_syscall_64+0x166/0x520 [ 347.386302][T11915] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.386333][T11915] ? clear_bhb_loop+0x70/0xc0 [ 347.386373][T11915] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.386402][T11915] RIP: 0033:0x7f6733b9e159 [ 347.386430][T11915] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 347.386456][T11915] RSP: 002b:00007f6734a7c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 347.386485][T11915] RAX: ffffffffffffffda RBX: 00007f6733e26090 RCX: 00007f6733b9e159 [ 347.386511][T11915] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000004 [ 347.386552][T11915] RBP: 00007f6734a7c090 R08: 0000000000000000 R09: 0000000000000000 [ 347.386567][T11915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 347.386587][T11915] R13: 00007f6733e26128 R14: 00007f6733e26090 R15: 00007fffc687f5c8 [ 347.386639][T11915] [ 347.846173][T11921] lo speed is unknown, defaulting to 1000 [ 347.846917][T11921] lo speed is unknown, defaulting to 1000 [ 347.885769][T11921] lo speed is unknown, defaulting to 1000 [ 347.889264][T11921] smbdirect: ib_dev[syz_device_name_32_chars_1234567]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 347.889378][T11921] smbdirect: ib_dev[syz_device_name_32_chars_1234567]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 347.889508][T11921] smbdirect: ib_dev[syz_device_name_32_chars_1234567]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 347.965180][T11921] infiniband syz_device_name_32_chars_1234567: RDMA CMA: cma_listen_on_dev, error -22 [ 348.027869][T11921] lo speed is unknown, defaulting to 1000 [ 348.053589][T11921] lo speed is unknown, defaulting to 1000 [ 348.074512][T11921] lo speed is unknown, defaulting to 1000 [ 348.105569][T11921] lo speed is unknown, defaulting to 1000 [ 348.116963][T11921] lo speed is unknown, defaulting to 1000 [ 349.598050][T11889] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 350.041974][ T5631] block nbd1: Receive control failed (result -32) [ 350.042182][ T5628] block nbd3: Receive control failed (result -32) [ 350.047695][T11933] netlink: 220 bytes leftover after parsing attributes in process `syz.3.1620'. [ 350.049523][T11931] netlink: 220 bytes leftover after parsing attributes in process `syz.3.1620'. [ 350.236921][T11939] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1617'. [ 350.247419][T11939] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1617'. [ 351.056021][T11964] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1629'. [ 351.056265][T11964] netlink: 'syz.0.1629': attribute type 30 has an invalid length. [ 351.060025][T11964] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1629'. [ 351.125253][T11965] netlink: 292 bytes leftover after parsing attributes in process `syz.4.1628'. [ 351.278498][T11970] syzkaller0: left promiscuous mode [ 351.290300][T11970] syzkaller0: left allmulticast mode [ 351.453028][T11978] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1634'. [ 351.462554][T11978] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1634'. [ 351.639330][T11983] xfrm2: entered promiscuous mode [ 351.783630][T11988] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 351.948789][T11988] netlink: 'syz.3.1635': attribute type 12 has an invalid length. [ 351.959981][T11994] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1639'. [ 352.108439][T12000] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1641'. [ 352.737899][T12028] x_tables: unsorted underflow at hook 1 [ 352.791150][T12029] vlan3: entered allmulticast mode [ 352.797031][T12029] bond0: entered allmulticast mode [ 352.803023][T12029] bond_slave_0: entered allmulticast mode [ 352.810699][T12029] bond_slave_1: entered allmulticast mode [ 352.867348][T12034] netlink: 464 bytes leftover after parsing attributes in process `syz.3.1647'. [ 353.049033][T12007] syzkaller1: entered promiscuous mode [ 353.049999][T12007] syzkaller1: entered allmulticast mode [ 353.251156][T12041] C: renamed from lo (while UP) [ 353.268770][T12041] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 353.399922][T12049] netlink: 'syz.4.1652': attribute type 11 has an invalid length. [ 353.419927][T12049] netlink: 'syz.4.1652': attribute type 11 has an invalid length. [ 353.429999][T12049] netlink: 'syz.4.1652': attribute type 11 has an invalid length. [ 353.439114][T12049] netlink: 'syz.4.1652': attribute type 11 has an invalid length. [ 353.451756][T12049] netlink: 'syz.4.1652': attribute type 11 has an invalid length. [ 353.468955][T12049] netlink: 'syz.4.1652': attribute type 11 has an invalid length. [ 353.479515][T12049] netlink: 'syz.4.1652': attribute type 11 has an invalid length. [ 353.489473][T12049] netlink: 'syz.4.1652': attribute type 11 has an invalid length. [ 353.498090][T12049] netlink: 'syz.4.1652': attribute type 11 has an invalid length. [ 353.507030][T12049] netlink: 'syz.4.1652': attribute type 11 has an invalid length. [ 353.714761][T12056] netlink: 'syz.3.1653': attribute type 1 has an invalid length. [ 353.937376][T12056] 8021q: adding VLAN 0 to HW filter on device bond4 [ 354.016960][T12057] bond4: (slave veth0_to_bond): making interface the new active one [ 354.041878][T12057] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 354.202778][T12061] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1654'. [ 354.269983][T12064] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1656'. [ 354.279421][T12064] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1656'. [ 354.608204][T12078] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1658'. [ 354.618566][T12078] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1658'. [ 354.857410][T12078] veth9: entered promiscuous mode [ 355.223719][T12092] netlink: Unknown conntrack attr (type=1030, max=9) [ 355.247450][T12092] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 355.350531][T12094] openvswitch: netlink: Missing key (keys=c0, expected=880) [ 356.293079][T12122] 8021q: adding VLAN 0 to HW filter on device bond0 [ 356.616742][T12141] __nla_validate_parse: 9 callbacks suppressed [ 356.624821][T12141] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1675'. [ 356.634699][T12141] hsr_slave_0: left promiscuous mode [ 356.641797][T12141] hsr_slave_1: left promiscuous mode [ 357.054909][T12149] bond5: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 357.099700][T12149] bond5 (unregistering): Released all slaves [ 357.132665][T12152] IPVS: sed: TCP 127.0.0.1:21 - no destination available [ 357.181227][T12163] netlink: 'syz.1.1677': attribute type 1 has an invalid length. [ 357.231394][T12158] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1677'. [ 357.245930][T12166] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1677'. [ 357.269597][T12163] 8021q: adding VLAN 0 to HW filter on device bond5 [ 357.331857][T12163] bond5: (slave geneve2): making interface the new active one [ 357.352663][T12163] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 359.479301][T12130] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 360.394023][T12229] netlink: 'syz.2.1691': attribute type 58 has an invalid length. [ 360.394074][T12229] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1691'. [ 361.084582][T12244] openvswitch: netlink: Key type 170 is out of range max 32 [ 361.416398][T12259] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1699'. [ 361.543030][T12253] geneve2: entered allmulticast mode [ 361.635706][T12269] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1702'. [ 361.688926][T12271] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1702'. [ 361.716068][T12269] 8021q: adding VLAN 0 to HW filter on device team1 [ 361.760753][T12269] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1702'. [ 362.192688][T12283] bond5: option resend_igmp: invalid value (32767) [ 362.199946][T12283] bond5: option resend_igmp: allowed values 0 - 255 [ 362.307096][T12283] bond5 (unregistering): Released all slaves [ 363.409181][T12314] netlink: 'syz.0.1710': attribute type 23 has an invalid length. [ 363.834612][T12337] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1715'. [ 364.278703][T12349] lo: entered promiscuous mode [ 364.307283][T12349] netlink: 'syz.0.1718': attribute type 2 has an invalid length. [ 364.315637][T12349] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 364.344949][T12352] netlink: 'syz.3.1719': attribute type 97 has an invalid length. [ 364.345428][T12352] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1719'. [ 364.345491][T12352] netlink: 'syz.3.1719': attribute type 97 has an invalid length. [ 364.345534][T12352] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1719'. [ 364.646261][T12355] tipc: Enabled bearer , priority 10 [ 365.120466][T12368] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1726'. [ 365.120975][T12368] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1726'. [ 365.356390][T12375] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1727'. [ 365.510204][T12381] batadv_slave_0: entered promiscuous mode [ 365.516969][T12379] netlink: 'syz.3.1728': attribute type 7 has an invalid length. [ 365.517050][T12379] netlink: 'syz.3.1728': attribute type 8 has an invalid length. [ 365.643065][T12378] batadv_slave_0: left promiscuous mode [ 365.661910][T12388] netlink: 'syz.3.1728': attribute type 21 has an invalid length. [ 365.662582][T12388] netlink: 'syz.3.1728': attribute type 6 has an invalid length. [ 365.662676][T12388] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1728'. [ 366.397397][T12398] wireguard0: entered promiscuous mode [ 366.417064][T12398] bond5: (slave wireguard0): The slave device specified does not support setting the MAC address [ 366.431643][T12398] bond5: (slave wireguard0): Error -95 calling set_mac_address [ 366.660262][T12412] __nla_validate_parse: 8 callbacks suppressed [ 366.660351][T12412] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1736'. [ 366.872903][T12412] netlink: 'syz.4.1736': attribute type 1 has an invalid length. [ 367.008730][T12424] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1738'. [ 367.206766][T12428] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1740'. [ 367.207161][T12424] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1738'. [ 367.607018][T12435] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1742'. [ 367.674477][T12439] openvswitch: netlink: Tunnel attr 2 has unexpected len 0 expected 4 [ 367.842287][T12441] netlink: 112 bytes leftover after parsing attributes in process `syz.3.1745'. [ 368.414692][T12462] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 368.466701][ T987] C speed is unknown, defaulting to 1000 [ 369.130420][T12487] bridge0: port 2(bridge_slave_1) entered blocking state [ 369.130756][T12487] bridge0: port 2(bridge_slave_1) entered forwarding state [ 370.120673][T12517] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 370.141120][T12517] xt_hashlimit: max too large, truncated to 1048576 [ 370.180265][T12517] No such timeout policy "syz1" [ 370.395453][T12528] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 370.605007][T12534] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 370.967901][T12543] netlink: 'syz.3.1770': attribute type 39 has an invalid length. [ 371.022429][T12548] netlink: 'syz.3.1770': attribute type 39 has an invalid length. [ 371.129147][T12546] netlink: 'syz.2.1771': attribute type 10 has an invalid length. [ 371.273505][T12546] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1771'. [ 371.396173][T12555] bond0 (unregistering): Released all slaves [ 371.734122][T12570] netlink: 45 bytes leftover after parsing attributes in process `syz.3.1776'. [ 372.901090][T12597] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1787'. [ 373.368496][T12609] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1790'. [ 373.384294][T12609] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1790'. [ 373.394596][T12610] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1790'. [ 373.410535][T12610] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1790'. [ 373.891179][T12617] xt_hashlimit: size too large, truncated to 1048576 [ 373.998071][T12628] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1794'. [ 374.135342][ T13] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 374.144858][ T8471] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 374.158403][ T13] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 374.165175][ T8471] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 374.279135][T12626] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1795'. [ 375.325084][T12658] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1803'. [ 376.009462][T12681] openvswitch: netlink: Missing key (keys=40, expected=100) [ 376.116657][T12684] netlink: 'syz.2.1810': attribute type 1 has an invalid length. [ 376.178533][T12687] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1812'. [ 376.964639][T12705] 8021q: adding VLAN 0 to HW filter on device bond6 [ 376.976944][T12705] bridge0: port 3(bond6) entered blocking state [ 376.984023][T12705] bridge0: port 3(bond6) entered disabled state [ 376.991213][T12705] bond6: entered allmulticast mode [ 377.003736][T12705] bond6: entered promiscuous mode [ 377.010769][T12705] bridge0: port 3(bond6) entered blocking state [ 377.011041][T12705] bridge0: port 3(bond6) entered forwarding state [ 377.029683][T12710] netlink: 'syz.3.1819': attribute type 2 has an invalid length. [ 377.045705][ T8478] bridge0: port 3(bond6) entered disabled state [ 377.364428][T12729] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 377.464855][T12730] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 378.165707][T12754] __nla_validate_parse: 1 callbacks suppressed [ 378.165772][T12754] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1828'. [ 378.351170][T12762] bond7: (slave C): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 378.431862][T12762] bond7: (slave C): Enslaving as an active interface with an up link [ 378.481784][T12762] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 378.707439][T12771] netlink: 'syz.2.1833': attribute type 2 has an invalid length. [ 378.738013][T12771] Bluetooth: MGMT ver 1.23 [ 378.831616][T12773] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 379.210234][T12789] openvswitch: netlink: Key 10 has unexpected len 12 expected 4 [ 379.231717][T12789] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 380.321138][T12812] tc_dump_action: action bad kind [ 381.022738][T12819] netlink: set zone limit has 4 unknown bytes [ 381.582244][T12832] netlink: 'syz.2.1848': attribute type 1 has an invalid length. [ 381.623182][T12831] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1848'. [ 381.992634][T12836] nfnetlink_queue: nf_queue: full at 0 entries, dropping packets(s) [ 382.239666][T12840] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40 [ 382.416748][T12846] 8021q: VLANs not supported on ip6gre0 [ 385.126509][ T5631] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 385.139784][ T5631] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 385.146707][ T5631] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 385.156579][ T5631] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 385.167372][ T5631] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 385.955702][T12895] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1859'. [ 386.316030][T12905] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1862'. [ 386.353380][T12901] openvswitch: netlink: Unexpected mask (mask=10000010, allowed=10058) [ 386.779683][T12914] macvlan0: entered promiscuous mode [ 387.314594][ T5628] Bluetooth: hci5: command tx timeout [ 387.600186][T12934] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 389.393478][ T5628] Bluetooth: hci5: command tx timeout [ 390.102971][T12888] wlan0 speed is unknown, defaulting to 1000 [ 390.139484][T12888] C speed is unknown, defaulting to 1000 [ 390.755025][T12966] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1877'. [ 391.114092][T12974] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1879'. [ 391.441011][T12986] SET target dimension over the limit! [ 391.472795][T12986] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1880'. [ 391.473662][ T5628] Bluetooth: hci5: command tx timeout [ 392.797846][T12991] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 393.328002][T13006] openvswitch: netlink: VXLAN extension message has 2 unknown bytes. [ 393.553497][ T5628] Bluetooth: hci5: command tx timeout [ 395.091525][T12888] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.108409][T12888] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.109056][T12888] bridge_slave_0: entered allmulticast mode [ 395.149422][T12888] bridge_slave_0: entered promiscuous mode [ 395.171737][T12888] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.182834][T12888] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.188255][T12888] bridge_slave_1: entered allmulticast mode [ 395.258259][T12888] bridge_slave_1: entered promiscuous mode [ 395.568845][T13029] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 395.572644][T13029] netlink: 'syz.1.1888': attribute type 21 has an invalid length. [ 395.604927][T13029] IPv6: NLM_F_CREATE should be specified when creating new route [ 395.617402][T13029] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 395.617439][T13029] IPv6: NLM_F_CREATE should be set when creating new route [ 395.617612][T13029] IPv6: NLM_F_CREATE should be set when creating new route [ 395.617645][T13029] IPv6: NLM_F_CREATE should be set when creating new route [ 395.869576][T12888] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 395.897578][T12888] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 396.115298][T12888] team0: Port device team_slave_0 added [ 396.146374][T12888] team0: Port device team_slave_1 added [ 396.410565][T13036] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1890'. [ 396.530387][ T31] audit: type=1804 audit(1789052124.577:4): pid=13035 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1891" name="/newroot/388/cgroup.controllers" dev="tmpfs" ino=1997 res=1 errno=0 [ 396.550893][ T31] audit: type=1800 audit(1789052124.577:5): pid=13035 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1891" name="cgroup.controllers" dev="tmpfs" ino=1997 res=0 errno=0 [ 396.605590][T13035] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1891'. [ 396.630247][T13036] macsec1: entered promiscuous mode [ 396.630758][T13036] bridge0: entered promiscuous mode [ 396.648206][T13036] macsec1: entered allmulticast mode [ 396.656429][T13036] bridge0: entered allmulticast mode [ 396.704885][T13036] bridge0: port 4(macsec1) entered blocking state [ 396.712255][T13036] bridge0: port 4(macsec1) entered disabled state [ 396.818260][T13036] bridge0: left allmulticast mode [ 397.098503][T12888] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 397.098985][T12888] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 397.099071][T12888] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 397.124664][T12888] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 397.124742][T12888] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 397.124814][T12888] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 397.129983][ T5755] bridge0: left promiscuous mode [ 397.522362][T13048] netlink: 45349 bytes leftover after parsing attributes in process `syz.3.1894'. [ 397.553047][T13048] 0猉功D龌: renamed from gretap0 (while UP) [ 397.617170][T13048] 0猉功D龌: entered allmulticast mode [ 397.724703][T12888] hsr_slave_0: entered promiscuous mode [ 397.736443][T12888] hsr_slave_1: entered promiscuous mode [ 397.748765][T12888] debugfs: 'hsr0' already exists in 'hsr' [ 397.749105][T12888] Cannot create hsr debugfs directory [ 397.993968][T13054] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1896'. [ 400.573822][T13094] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 401.338378][T13114] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 402.634760][T13135] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 402.636242][T12888] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 402.719178][T12888] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 402.782753][T13139] geneve2: entered promiscuous mode [ 402.795376][T13139] geneve2: entered allmulticast mode [ 402.817728][T12888] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 402.927650][T12888] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 403.026563][T12888] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 403.073086][T12888] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 403.122416][T12888] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 403.267489][T12888] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 405.467040][T13166] netlink: 'syz.3.1917': attribute type 3 has an invalid length. [ 405.651636][T12888] 8021q: adding VLAN 0 to HW filter on device bond0 [ 405.697221][T13173] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 405.741767][T13173] sctp: [Deprecated]: syz.1.1919 (pid 13173) Use of struct sctp_assoc_value in delayed_ack socket option. [ 405.741767][T13173] Use struct sctp_sack_info instead [ 406.361763][T12888] 8021q: adding VLAN 0 to HW filter on device team0 [ 406.566415][ T8478] bridge0: port 1(bridge_slave_0) entered blocking state [ 406.566557][ T8478] bridge0: port 1(bridge_slave_0) entered forwarding state [ 406.779805][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 406.779970][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 406.993438][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 407.293630][T13188] Cannot find add_set index 4 as target [ 407.714180][T13198] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1924'. [ 408.521626][T13216] IPv6: Can't replace route, no match found [ 409.405919][T13232] netlink: 3648 bytes leftover after parsing attributes in process `syz.2.1930'. [ 409.406393][T13232] netlink: 3648 bytes leftover after parsing attributes in process `syz.2.1930'. [ 411.006262][T13259] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1936'. [ 411.079477][T13269] xt_l2tp: missing protocol rule (udp|l2tpip) [ 411.333545][T12888] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 412.840398][T13287] h: entered promiscuous mode [ 413.294541][T13294] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1944'. [ 413.294768][T13294] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1944'. [ 413.486746][T13301] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1947'. [ 414.436602][T13312] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1951'. [ 414.656361][T12888] veth0_vlan: entered promiscuous mode [ 415.212446][T12888] veth1_vlan: entered promiscuous mode [ 415.977825][T12888] veth0_macvtap: entered promiscuous mode [ 416.190333][T12888] veth1_macvtap: entered promiscuous mode [ 416.480196][T12888] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 416.670341][T12888] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 416.806697][ T60] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.812729][ T60] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.813004][ T60] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.813169][ T60] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.107706][T13338] netlink: NAT attributes may be specified only when CT COMMIT flag is also specified. [ 417.122355][T13338] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 417.153022][T13337] netlink: 'syz.1.1956': attribute type 24 has an invalid length. [ 417.878777][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 417.879028][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 417.992204][T13343] Bluetooth: hci0: unsupported parameter 5134 [ 417.992534][T13343] Bluetooth: hci0: unsupported parameter 8192 [ 417.992624][T13343] Bluetooth: hci0: unsupported parameter 5134 [ 417.992673][T13343] Bluetooth: hci0: unsupported parameter 8192 [ 418.229710][T13236] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 418.253339][T13236] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 419.064062][T13357] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1961'. [ 419.149791][T13359] netlink: 'syz.3.1961': attribute type 29 has an invalid length. [ 419.522744][T13365] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1964'. [ 419.552253][T13365] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1964'. [ 419.697272][T13368] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1964'. [ 420.424995][T13373] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1966'. [ 423.729058][T13396] nla_validate_range_unsigned: 38 callbacks suppressed [ 423.729480][T13396] netlink: 'syz.2.1972': attribute type 11 has an invalid length. [ 425.206279][T13416] netlink: 4384 bytes leftover after parsing attributes in process `syz.5.1979'. [ 425.310663][T13420] sch_tbf: peakrate 8 is lower than or equals to rate 7508080445633888606 ! [ 425.601225][T13429] netlink: 'syz.2.1981': attribute type 10 has an invalid length. [ 425.786877][T13425] netlink: 292 bytes leftover after parsing attributes in process `syz.3.1982'. [ 425.986012][T13429] bond1: (slave veth0_to_bond): Releasing active interface [ 426.517438][T13429] : (slave veth0_to_bond): Enslaving as an active interface with an up link [ 427.462492][T13441] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1984'. [ 429.983827][ T5631] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 429.998829][ T5631] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 430.023470][ T5631] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 430.053886][ T5631] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 430.070762][ T5631] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 431.451653][T13497] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 431.451699][T13497] IPv6: NLM_F_CREATE should be set when creating new route [ 432.134030][ T5631] Bluetooth: hci6: command tx timeout [ 432.799748][T13510] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2000'. [ 432.812767][T13510] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2000'. [ 432.856277][T13509] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2003'. [ 432.881747][T13235] IPVS: starting estimator thread 0... [ 433.006212][T13513] IPVS: using max 26 ests per chain, 62400 per kthread [ 434.199718][ T5631] Bluetooth: hci6: command tx timeout [ 434.713939][T13534] netlink: 'syz.5.2007': attribute type 21 has an invalid length. [ 434.714327][T13534] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2007'. [ 435.527906][T13544] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2010'. [ 435.555895][T13545] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2010'. [ 435.608490][T13478] wlan0 speed is unknown, defaulting to 1000 [ 435.642713][T13478] C speed is unknown, defaulting to 1000 [ 436.284918][ T5631] Bluetooth: hci6: command tx timeout [ 436.649357][T13555] netlink: 'syz.1.2014': attribute type 4 has an invalid length. [ 438.277427][T13567] IPVS: sync thread started: state = MASTER, mcast_ifn = macvlan0, syncid = 0, id = 0 [ 438.354862][ T5631] Bluetooth: hci6: command tx timeout [ 438.953686][T13569] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2018'. [ 439.705658][T13478] bridge0: port 1(bridge_slave_0) entered blocking state [ 439.714496][T13478] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.723891][T13478] bridge_slave_0: entered allmulticast mode [ 439.736283][T13478] bridge_slave_0: entered promiscuous mode [ 439.815883][T13478] bridge0: port 2(bridge_slave_1) entered blocking state [ 439.822989][T13478] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.836597][T13478] bridge_slave_1: entered allmulticast mode [ 439.883062][T13478] bridge_slave_1: entered promiscuous mode [ 440.605262][T13478] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 440.637163][T13478] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 440.858776][T13478] team0: Port device team_slave_0 added [ 440.902509][T13478] team0: Port device team_slave_1 added [ 441.290997][T13594] netlink: 37 bytes leftover after parsing attributes in process `syz.5.2024'. [ 441.318310][T13478] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 441.334319][T13478] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 441.334594][T13478] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 441.392185][T13478] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 441.401079][T13478] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 441.401214][T13478] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 442.291806][T13599] netlink: 'syz.2.2025': attribute type 1 has an invalid length. [ 442.682477][T13601] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 443.274923][T13599] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 443.357598][T13478] hsr_slave_0: entered promiscuous mode [ 443.405542][T13478] hsr_slave_1: entered promiscuous mode [ 443.442714][T13478] debugfs: 'hsr0' already exists in 'hsr' [ 443.442968][T13478] Cannot create hsr debugfs directory [ 444.900045][T13606] x_tables: unsorted entry at hook 4 [ 445.874626][T13627] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2030'. [ 445.979927][T13629] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2031'. [ 446.064152][T13626] batadv_slave_0: entered promiscuous mode [ 446.872868][ T5628] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 446.889265][ T5628] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 446.897845][ T5628] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 446.923220][ T5628] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 446.939145][ T5628] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 448.997246][ T5631] Bluetooth: hci7: command tx timeout [ 448.997639][T13478] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 449.098039][T13478] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 449.119425][T13478] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 449.230909][T13478] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 449.321239][T13478] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 449.488423][T13478] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 449.537299][T13478] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 449.722194][T13478] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 450.984233][T13678] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2038'. [ 451.077783][ T5631] Bluetooth: hci7: command tx timeout [ 451.946875][T13478] 8021q: adding VLAN 0 to HW filter on device bond0 [ 452.159588][T13478] 8021q: adding VLAN 0 to HW filter on device team0 [ 452.310819][T13236] bridge0: port 1(bridge_slave_0) entered blocking state [ 452.310969][T13236] bridge0: port 1(bridge_slave_0) entered forwarding state [ 452.520891][T13236] bridge0: port 2(bridge_slave_1) entered blocking state [ 452.521066][T13236] bridge0: port 2(bridge_slave_1) entered forwarding state [ 453.153584][ T5631] Bluetooth: hci7: command tx timeout [ 453.712387][T13708] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 453.945212][T13707] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 4009 [ 454.550793][T13710] bridge0: port 4(batadv0) entered blocking state [ 454.571981][T13710] bridge0: port 4(batadv0) entered disabled state [ 454.579731][T13710] batadv0: entered allmulticast mode [ 454.608223][T13710] batadv0: entered promiscuous mode [ 454.736655][T13211] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 454.737169][T13211] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 455.233878][ T5631] Bluetooth: hci7: command tx timeout [ 455.345950][T13721] netlink: 9 bytes leftover after parsing attributes in process `syz.5.2047'. [ 455.359008][T13722] netlink: 5 bytes leftover after parsing attributes in process `syz.5.2047'. [ 455.363061][T13723] netlink: 5 bytes leftover after parsing attributes in process `syz.5.2047'. [ 455.388482][T13721] gretap0: entered promiscuous mode [ 455.490345][T13722] 0{X功: renamed from gretap0 [ 455.552503][T13722] 0{X功: left promiscuous mode [ 455.558493][T13722] 0{X功: entered allmulticast mode [ 455.605660][T13722] A link change request failed with some changes committed already. Interface 30{X功 may have been left with an inconsistent configuration, please check. [ 455.663601][T13723] 1{X功: renamed from 30{X功 (while UP) [ 455.775859][T13723] A link change request failed with some changes committed already. Interface 31{X功 may have been left with an inconsistent configuration, please check. [ 455.824648][T13634] wlan0 speed is unknown, defaulting to 1000 [ 455.923175][T13634] C speed is unknown, defaulting to 1000 [ 460.362109][T13781] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2053'. [ 460.661118][T13778] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2053'. [ 461.751834][T13478] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 462.606713][T13634] bridge0: port 1(bridge_slave_0) entered blocking state [ 462.607437][T13634] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.608054][T13634] bridge_slave_0: entered allmulticast mode [ 462.649789][T13634] bridge_slave_0: entered promiscuous mode [ 462.727514][T13634] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.728963][T13634] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.730198][T13634] bridge_slave_1: entered allmulticast mode [ 462.766940][T13634] bridge_slave_1: entered promiscuous mode [ 463.230446][T13634] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 463.263921][T13634] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 463.383016][T13634] team0: Port device team_slave_0 added [ 463.401781][T13634] team0: Port device team_slave_1 added [ 464.014621][T13818] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2057'. [ 464.185030][T13799] geneve3: entered promiscuous mode [ 464.253732][T13235] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 55668 - 0 [ 464.266565][T13211] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 55668 - 0 [ 464.266846][T13211] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 55668 - 0 [ 464.267126][T13211] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 55668 - 0 [ 464.660363][T13634] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 464.660615][T13634] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 464.660869][T13634] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 465.676361][T13634] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 465.682741][T13634] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 465.682853][T13634] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 466.827063][T13634] hsr_slave_0: entered promiscuous mode [ 466.881050][T13634] hsr_slave_1: entered promiscuous mode [ 466.890843][T13634] debugfs: 'hsr0' already exists in 'hsr' [ 466.891293][T13634] Cannot create hsr debugfs directory [ 467.462656][T13837] xt_hashlimit: max too large, truncated to 1048576 [ 467.617232][T13836] geneve3: entered promiscuous mode [ 467.710126][ T5999] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 54675 - 0 [ 467.757766][T13837] No such timeout policy "syz1" [ 468.416198][ T5999] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 54675 - 0 [ 468.426267][T13211] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 54675 - 0 [ 468.426536][T13211] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 54675 - 0 [ 468.782924][T13856] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 470.884542][T13867] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2068'. [ 470.922797][T13478] veth0_vlan: entered promiscuous mode [ 472.790903][T13478] veth1_vlan: entered promiscuous mode [ 473.665730][T13908] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 473.910916][T13910] netlink: 300 bytes leftover after parsing attributes in process `syz.2.2075'. [ 473.914074][T13911] netlink: 300 bytes leftover after parsing attributes in process `syz.2.2075'. [ 474.510070][T13634] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 474.577612][T13634] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 474.587757][T13634] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 474.632655][T13634] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 476.323002][T13214] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 476.323152][T13214] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.771740][T13634] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 477.009018][T13634] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 477.031432][T13634] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 477.161322][T13634] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 477.372162][T13478] veth0_macvtap: entered promiscuous mode [ 477.468452][T13478] veth1_macvtap: entered promiscuous mode [ 478.645683][T13214] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 478.661419][T13214] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.028216][T13935] bridge1: entered promiscuous mode [ 479.029217][T13935] bridge1: entered allmulticast mode [ 479.259247][T13478] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 479.570548][T13478] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 480.008676][T13214] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 480.008935][T13214] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.204167][ T5999] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.423976][ T5999] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.477512][T13214] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 481.478034][T13214] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.373176][T13211] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.600845][ T5999] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.715702][T13968] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2089'. [ 485.253612][ T1175] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 485.253851][ T1175] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 485.580865][T13988] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2094'. [ 486.141270][T13990] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2094'. [ 486.142732][T13980] syzkaller0: entered promiscuous mode [ 486.143106][T13980] syzkaller0: entered allmulticast mode [ 486.436537][T13214] bridge_slave_1: left allmulticast mode [ 486.437213][T13214] bridge_slave_1: left promiscuous mode [ 486.442926][T13214] bridge0: port 2(bridge_slave_1) entered disabled state [ 486.648929][T13214] bridge_slave_0: left allmulticast mode [ 486.716263][T13214] bridge_slave_0: left promiscuous mode [ 486.886895][T13214] bridge0: port 1(bridge_slave_0) entered disabled state [ 487.200743][T13214] dvmrp0: left allmulticast mode [ 487.209315][T13214] dvmrp8: left allmulticast mode [ 487.551693][T14009] netlink: 'syz.2.2097': attribute type 2 has an invalid length. [ 487.552066][T14009] netlink: 'syz.2.2097': attribute type 2 has an invalid length. [ 491.942847][ T5628] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 491.981093][ T5628] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 491.996945][ T5628] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 492.020678][ T5628] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 492.029802][ T5628] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 494.113376][ T5631] Bluetooth: hci0: command tx timeout [ 496.193953][ T5631] Bluetooth: hci0: command tx timeout [ 497.175312][T13214] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 497.391918][T13214] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 497.517734][T13214] bond0 (unregistering): Released all slaves [ 497.612927][T13214] bond1 (unregistering): Released all slaves [ 497.730433][T13214] bond2 (unregistering): Released all slaves [ 497.900879][T13214] bond3 (unregistering): Released all slaves [ 498.262551][T13214] bond4 (unregistering): (slave veth0_to_bond): Releasing active interface [ 498.273819][ T5631] Bluetooth: hci0: command tx timeout [ 498.416301][T13214] bond4 (unregistering): Released all slaves [ 498.635543][T13214] bond5 (unregistering): Released all slaves [ 499.576338][T13214] tipc: Disabling bearer [ 499.577470][T13214] tipc: Left network mode [ 500.349452][T13634] 8021q: adding VLAN 0 to HW filter on device bond0 [ 500.357688][ T5631] Bluetooth: hci0: command tx timeout [ 500.421856][T13214] IPVS: stopping master sync thread 7647 ... [ 501.674274][T14049] tipc: Enabling of bearer rejected, failed to enable media [ 501.687720][T13634] 8021q: adding VLAN 0 to HW filter on device team0 [ 501.943225][T13236] bridge0: port 1(bridge_slave_0) entered blocking state [ 501.943368][T13236] bridge0: port 1(bridge_slave_0) entered forwarding state [ 502.140892][ T1014] bridge0: port 2(bridge_slave_1) entered blocking state [ 502.141052][ T1014] bridge0: port 2(bridge_slave_1) entered forwarding state [ 503.579284][T14066] netlink: 'syz.1.2109': attribute type 11 has an invalid length. [ 504.700487][T14078] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2111'. [ 507.272115][ T5628] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 507.297960][ T5628] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 507.316766][ T5628] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 507.341392][ T5628] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 507.362587][ T5628] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 509.177519][ T5281] 8021q: adding VLAN 0 to HW filter on device eth1 [ 509.477019][ T5628] Bluetooth: hci6: command tx timeout [ 510.352661][T14119] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2119'. [ 510.584918][T14126] x_tables: duplicate underflow at hook 2 [ 510.615178][T14125] netlink: 'syz.2.2119': attribute type 8 has an invalid length. [ 511.134842][T14131] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2120'. [ 511.135309][T14131] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2120'. [ 511.478684][ T5628] Bluetooth: hci5: command 0x0406 tx timeout [ 511.553496][ T5628] Bluetooth: hci6: command tx timeout [ 511.811701][T14119] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 512.415837][T14026] wlan0 speed is unknown, defaulting to 1000 [ 512.903468][T14026] C speed is unknown, defaulting to 1000 [ 513.639528][ T5631] Bluetooth: hci6: command tx timeout [ 513.817891][T14153] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2124'. [ 514.533992][T13214] hsr_slave_0: left promiscuous mode [ 514.601032][T13214] hsr_slave_1: left promiscuous mode [ 514.665873][T13214] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 514.666351][T13214] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 514.751956][T13214] batman_adv: batadv0: Removing interface: dummy0 [ 515.225264][T13214] veth1_macvtap: left promiscuous mode [ 515.232358][T13214] veth0_macvtap: left promiscuous mode [ 515.713266][ T5631] Bluetooth: hci6: command tx timeout [ 516.310334][T14170] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2127'. [ 522.254140][T14194] netlink: 'syz.5.2134': attribute type 32 has an invalid length. [ 522.254397][T14194] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2134'. [ 522.906810][T13214] team0 (unregistering): Port device team_slave_1 removed [ 523.470476][T13214] team0 (unregistering): Port device team_slave_0 removed [ 527.117282][ T5281] 8021q: adding VLAN 0 to HW filter on device eth2 [ 527.141541][T14194] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 530.602536][T13214] IPVS: stop unused estimator thread 0... [ 532.171275][T14246] xt_hashlimit: size too large, truncated to 1048576 [ 532.629356][T14249] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 532.651756][T14248] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 532.692382][T14250] C: renamed from 04rB簱 (while UP) [ 532.707893][T14250] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 532.906380][T14026] bridge0: port 1(bridge_slave_0) entered blocking state [ 532.907329][T14026] bridge0: port 1(bridge_slave_0) entered disabled state [ 532.908287][T14026] bridge_slave_0: entered allmulticast mode [ 532.938392][T14026] bridge_slave_0: entered promiscuous mode [ 533.014051][T14098] wlan0 speed is unknown, defaulting to 1000 [ 533.023257][T14026] bridge0: port 2(bridge_slave_1) entered blocking state [ 533.024438][T14026] bridge0: port 2(bridge_slave_1) entered disabled state [ 533.024803][T14026] bridge_slave_1: entered allmulticast mode [ 533.064546][T14026] bridge_slave_1: entered promiscuous mode [ 534.128004][T14098] C speed is unknown, defaulting to 1000 [ 534.156648][T14232] smc: removing ib device syz0 [ 534.638402][T14026] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 534.750616][T14026] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 534.948051][T14232] smbdirect: ib_dev[syz0] removed [ 536.849134][T14282] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2147'. [ 537.328229][T14278] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 537.507628][ T5281] 8021q: adding VLAN 0 to HW filter on device eth3 [ 537.890399][T14026] team0: Port device team_slave_0 added [ 538.721482][T14026] team0: Port device team_slave_1 added [ 539.785106][T14026] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 539.785349][T14026] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 539.785592][T14026] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 540.209160][T14026] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 540.209399][T14026] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 540.209649][T14026] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 543.119012][T14026] hsr_slave_0: entered promiscuous mode [ 543.151574][T14026] hsr_slave_1: entered promiscuous mode [ 546.808518][T14344] netlink: 'syz.2.2157': attribute type 2 has an invalid length. [ 547.457256][T14349] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 547.471589][T14349] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 547.480806][T14349] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 547.503046][T14349] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 547.505266][T14349] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 549.453181][ T5281] 8021q: adding VLAN 0 to HW filter on device eth4 [ 549.553710][T14349] Bluetooth: hci7: command tx timeout [ 550.936510][T14380] netlink: 'syz.1.2160': attribute type 1 has an invalid length. [ 550.936766][T14380] netlink: 232 bytes leftover after parsing attributes in process `syz.1.2160'. [ 550.937014][T14380] netlink: 'syz.1.2160': attribute type 1 has an invalid length. [ 551.643763][T14349] Bluetooth: hci7: command tx timeout [ 553.522505][ T5631] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 553.551606][ T5631] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 553.577018][ T5631] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 553.612821][ T5631] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 553.714476][ T5631] Bluetooth: hci7: command tx timeout [ 553.764413][ T5631] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 554.751497][T13214] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.793469][ T5631] Bluetooth: hci7: command tx timeout [ 555.878319][ T5631] Bluetooth: hci8: command tx timeout [ 556.394496][T14098] bridge0: port 1(bridge_slave_0) entered blocking state [ 556.396235][T14098] bridge0: port 1(bridge_slave_0) entered disabled state [ 556.397293][T14098] bridge_slave_0: entered allmulticast mode [ 556.440872][T14098] bridge_slave_0: entered promiscuous mode [ 557.245872][T14098] bridge0: port 2(bridge_slave_1) entered blocking state [ 557.246599][T14098] bridge0: port 2(bridge_slave_1) entered disabled state [ 557.247250][T14098] bridge_slave_1: entered allmulticast mode [ 557.330128][T14098] bridge_slave_1: entered promiscuous mode [ 557.806583][T14411] xt_l2tp: v2 doesn't support IP mode [ 557.953550][ T5631] Bluetooth: hci8: command tx timeout [ 558.935878][T13214] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.361696][T14410] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2165'. [ 559.690852][T14348] wlan0 speed is unknown, defaulting to 1000 [ 559.930380][T14098] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 560.033468][ T5631] Bluetooth: hci8: command tx timeout [ 560.920201][T13214] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.019268][T14348] C speed is unknown, defaulting to 1000 [ 561.130389][T14098] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 562.125237][ T5631] Bluetooth: hci8: command tx timeout [ 562.514356][ T32] INFO: task syz.0.1949:13310 blocked for more than 143 seconds. [ 562.514718][ T32] Not tainted syzkaller #0 [ 562.514962][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 562.515170][ T32] task:syz.0.1949 state:D stack:25664 pid:13310 tgid:13309 ppid:5624 task_flags:0x400140 flags:0x00080002 [ 562.515636][ T32] Call Trace: [ 562.515771][ T32] [ 562.516056][ T32] __schedule+0x17db/0x58f0 [ 562.516490][ T32] ? __pfx___schedule+0x10/0x10 [ 562.516765][ T32] ? schedule+0x90/0x2b0 [ 562.517000][ T32] schedule+0x164/0x2b0 [ 562.517231][ T32] schedule_preempt_disabled+0x13/0x30 [ 562.517459][ T32] __mutex_lock+0x7c1/0x1550 [ 562.517725][ T32] ? __mutex_lock+0x5d4/0x1550 [ 562.517966][ T32] ? nfsd_nl_cache_flush_doit+0xb5/0x1b0 [ 562.518560][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 562.518646][ T32] ? net_generic+0x1e/0x240 [ 562.518722][ T32] ? net_generic+0x1e/0x240 [ 562.518776][ T32] ? net_generic+0x1e/0x240 [ 562.518839][ T32] ? net_generic+0x1e/0x240 [ 562.518914][ T32] nfsd_nl_cache_flush_doit+0xb5/0x1b0 [ 562.519003][ T32] genl_family_rcv_msg_doit+0x233/0x340 [ 562.519221][ T32] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 562.519335][ T32] ? bpf_lsm_capable+0x9/0x20 [ 562.519518][ T32] ? security_capable+0x7e/0x2c0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 562.519689][ T32] genl_rcv_msg+0x614/0x7a0 [ 562.519816][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 562.519938][ T32] ? __pfx_nfsd_nl_cache_flush_doit+0x10/0x10 [ 562.520004][ T32] ? __pfx_ref_tracker_free+0x10/0x10 [ 562.520197][ T32] netlink_rcv_skb+0x226/0x4a0 [ 562.520272][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 562.520355][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 562.520471][ T32] ? down_read+0x2be/0x330 [ 562.520537][ T32] genl_rcv+0x28/0x40 [ 562.520627][ T32] netlink_unicast+0x7bd/0x940 [ 562.520745][ T32] netlink_sendmsg+0x813/0xb40 [ 562.520866][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 562.520963][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 562.521120][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 562.521217][ T32] sock_sendmsg_nosec+0x13a/0x180 [ 562.521388][ T32] ____sys_sendmsg+0x54e/0x850 [ 562.521469][ T32] ? __pfx_____sys_sendmsg+0x10/0x10 [ 562.521579][ T32] ? import_iovec+0x73/0xa0 [ 562.521708][ T32] ___sys_sendmsg+0x2a5/0x360 [ 562.521770][ T32] ? __lock_acquire+0x6df/0x2e50 [ 562.521920][ T32] ? __pfx____sys_sendmsg+0x10/0x10 [ 562.521995][ T32] ? futex_wait+0x2a2/0x390 [ 562.522232][ T32] ? __fget_files+0x2a/0x420 [ 562.522376][ T32] ? __fget_files+0x3a2/0x420 [ 562.522498][ T32] __x64_sys_sendmsg+0x1b1/0x290 [ 562.522587][ T32] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 562.522723][ T32] do_syscall_64+0x166/0x520 [ 562.522864][ T32] ? trace_irq_disable+0x3b/0x140 [ 562.522944][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 562.699885][ T32] ? clear_bhb_loop+0x70/0xc0 [ 562.700106][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 562.700169][ T32] RIP: 0033:0x7fc56559e159 [ 562.700261][ T32] RSP: 002b:00007fc5664ba028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 562.700357][ T32] RAX: ffffffffffffffda RBX: 00007fc565825fa0 RCX: 00007fc56559e159 [ 562.700413][ T32] RDX: 0000000004000080 RSI: 0000200000000100 RDI: 0000000000000005 [ 562.700463][ T32] RBP: 00007fc56563503b R08: 0000000000000000 R09: 0000000000000000 [ 562.700497][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 562.700531][ T32] R13: 00007fc565826038 R14: 00007fc565825fa0 R15: 00007ffea78133f8 [ 562.700624][ T32] [ 562.700901][ T32] [ 562.700901][ T32] Showing all locks held in the system: [ 562.700945][ T32] locks held by pr/ttyS0/16: 2, last CPU#0: [ 562.701050][ T32] #0: ffffffff8ec362b8 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60 [ 562.701364][ T32] #1: ffffffff9ad32098 (&port_lock_key){-.-.}-{3:3}, at: univ8250_console_device_lock+0x67/0xc0 [ 562.701619][ T32] locks held by khungtaskd/32: 1, last CPU#1: [ 562.701661][ T32] #0: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 562.701921][ T32] locks held by kworker/u8:7/1003: 4, last CPU#1: [ 562.701963][ T32] #0: ffff8880796e4140 ((wq_completion)wg-kex-wg2#9){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 562.702230][ T32] #1: ffffc90004e9fc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 562.702401][ T32] #2: ffff88807d81d440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 562.702636][ T32] #3: ffff88807ff2d270 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 562.702937][ T32] locks held by kworker/1:3/5352: 2, last CPU#1: [ 562.702978][ T32] #0: ffff8880453df540 ((wq_completion)wg-crypt-wg2#7){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 562.879953][ T32] #1: ffffc900035e7c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 562.880046][ T32] locks held by getty/5376: 2, on CPU#1: [ 562.880064][ T32] #0: ffff8880357440a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 562.880212][ T32] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 562.880302][ T32] locks held by syz-executor/5607: 2, last CPU#1: [ 562.880320][ T32] #0: ffff888032e029f8 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 562.880450][ T32] #1: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: page_ext_get+0x22/0x2e0 [ 562.880570][ T32] locks held by syz-executor/5633: 4, last CPU#1: [ 562.880587][ T32] #0: ffffffff8ee35c10 (dup_mmap_sem){++++}-{0:0}, at: copy_mm+0x10f/0x480 [ 562.880713][ T32] #1: ffff888032e069b8 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x195/0x1dc0 [ 562.880777][ T32] #2: ffff888032e036b8 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x221/0x1dc0 [ 562.880881][ T32] #3: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 562.880982][ T32] locks held by kworker/u8:14/5999: 3, last CPU#1: [ 562.880999][ T32] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 562.881063][ T32] #1: ffffc90004fbfc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 562.881129][ T32] #2: ffff8880595e07a0 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 562.881250][ T32] locks held by kworker/u8:20/8475: 3, on CPU#0: [ 562.881266][ T32] #0: ffff88803108f940 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 562.881338][ T32] #1: ffffc90003747c40 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 562.881402][ T32] #2: ffffffff90250dc0 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x116/0x15c0 [ 562.881549][ T32] locks held by syz.4.1755/12497: 2, on CPU#0: [ 562.881567][ T32] #0: ffffffff902c1c68 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 562.881632][ T32] #1: ffffffff8f09e400 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 562.881700][ T32] locks held by kworker/u8:31/13214: 7, on CPU#1: [ 562.881717][ T32] #0: ffff88801c2d6140 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 562.881780][ T32] #1: ffffc900049f7c40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 562.881842][ T32] #2: ffffffff90242568 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810 [ 563.103526][ T32] #3: ffff8880340ac128 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x129/0x420 [ 563.103917][ T32] #4: ffff88802ba47258 (&devlink->lock_key#7){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x142/0x420 [ 563.104153][ T32] #5: ffffffff90250dc0 (rtnl_mutex){+.+.}-{4:4}, at: nsim_destroy+0x173/0x800 [ 563.104407][ T32] #6: ffffffff8ed62aa8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 563.104638][ T32] locks held by kworker/u8:35/13236: 5, last CPU#0: [ 563.104684][ T32] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 563.104857][ T32] #1: ffffc90004977c40 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 563.105016][ T32] #2: ffffffff8ebe98f0 (cpu_hotplug_lock){++++}-{0:0}, at: static_key_enable+0x12/0x20 [ 563.105198][ T32] #3: ffffffff8ee38180 (jump_label_mutex){+.+.}-{4:4}, at: static_key_enable_cpuslocked+0xcb/0x240 [ 563.105359][ T32] #4: ffffffff8ebff620 (text_mutex){+.+.}-{4:4}, at: arch_jump_label_transform_apply+0x17/0x30 [ 563.105590][ T32] locks held by kworker/u8:37/13238: 2, last CPU#0: [ 563.105633][ T32] #0: ffff88803108d140 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 563.105794][ T32] #1: ffffc900044d7c40 ((work_completion)(&(&bat_priv->dat.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 563.105966][ T32] locks held by syz.0.1949/13310: 2, on CPU#0: [ 563.106008][ T32] #0: ffffffff902c1c68 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 563.106169][ T32] #1: ffffffff8f09e400 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_cache_flush_doit+0xb5/0x1b0 [ 563.106357][ T32] locks held by syz-executor/14098: 1, on CPU#0: [ 563.106400][ T32] #0: ffffffff90250dc0 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc10/0x1c30 [ 563.106556][ T32] locks held by syz.5.2138/14232: 1, last CPU#0: [ 563.106571][ T32] #0: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 563.393732][ T32] locks held by syz-executor/14348: 2, on CPU#1: [ 563.393762][ T32] #0: ffffffff90242568 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x524/0x780 [ 563.393840][ T32] #1: ffffffff90250dc0 (rtnl_mutex){+.+.}-{4:4}, at: register_netdev+0x18/0x60 [ 563.394022][ T32] locks held by syz-executor/14390: 1, on CPU#1: [ 563.394039][ T32] #0: ffffffff90250dc0 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc10/0x1c30 [ 563.394095][ T32] locks held by syz.2.2168/14429: 1, on CPU#1: [ 563.394112][ T32] #0: ffff88807f991078 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1dd/0x4e0 [ 563.394207][ T32] locks held by syz.2.2168/14434: 1, last CPU#0: [ 563.394224][ T32] #0: ffff88807f991078 (&mm->mmap_lock){++++}-{4:4}, at: __mm_populate+0x182/0x390 [ 563.394319][ T32] locks held by rm/14443: 1, last CPU#0: [ 563.394335][ T32] #0: ffff888032e01d38 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1dd/0x4e0 [ 563.394425][ T32] [ 563.394489][ T32] ============================================= [ 563.394489][ T32] [ 563.394537][ T32] NMI backtrace for cpu 1 [ 563.394555][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 563.394587][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 563.394604][ T32] Call Trace: [ 563.394616][ T32] [ 563.394628][ T32] dump_stack_lvl+0xe8/0x150 [ 563.394709][ T32] nmi_cpu_backtrace+0x274/0x2d0 [ 563.394766][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 563.394860][ T32] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 563.394888][ T32] sys_info+0x135/0x170 [ 563.394908][ T32] watchdog+0xfd7/0x1030 [ 563.394974][ T32] ? watchdog+0x1c7/0x1030 [ 563.395000][ T32] kthread+0x38b/0x480 [ 563.395045][ T32] ? __pfx_watchdog+0x10/0x10 [ 563.395063][ T32] ? __pfx_kthread+0x10/0x10 [ 563.395084][ T32] ret_from_fork+0x514/0xb70 [ 563.395134][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 563.395169][ T32] ? __switch_to+0xc89/0x1420 [ 563.395260][ T32] ? __pfx_kthread+0x10/0x10 [ 563.395282][ T32] ret_from_fork_asm+0x1a/0x30 [ 563.395355][ T32] [ 563.395611][ T32] Sending NMI from CPU 1 to CPUs 0: [ 563.395802][ C0] NMI backtrace for cpu 0 [ 563.395820][ C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted syzkaller #0 PREEMPT(full) [ 563.395841][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 563.395853][ C0] RIP: 0010:__lock_acquire+0xa80/0x2e50 [ 563.395890][ C0] Code: 59 8e 67 48 0f b9 3a 90 31 c0 48 8b 3c 24 48 83 78 40 00 0f 84 2f 1e 00 00 49 8b 46 20 25 ff 1f 00 00 48 0f a3 05 60 fd f6 12 <73> 10 48 69 c0 c8 00 00 00 48 8d 80 d0 24 3b 94 eb 3a 83 3d 27 8d [ 563.395958][ C0] RSP: 0018:ffffc90000007c10 EFLAGS: 00000003 [ 563.395975][ C0] RAX: 0000000000000057 RBX: 000000002c1a6901 RCX: 00000000e2c3d410 [ 563.396007][ C0] RDX: 00000000f5af8a02 RSI: 000000006388e149 RDI: ffff88801e299f40 [ 563.396020][ C0] RBP: 177a6bdc00000000 R08: e300000000000000 R09: 0000000000080000 [ 563.396034][ C0] R10: 0000000000000000 R11: ffffffff9aa1f748 R12: 0000000000004000 [ 563.396046][ C0] R13: ffff88801e29aaf0 R14: ffff88801e29ab18 R15: 0000000000000001 [ 563.396059][ C0] FS: 0000000000000000(0000) GS:ffff888124cd9000(0000) knlGS:0000000000000000 [ 563.396075][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 563.396093][ C0] CR2: 00007ff022e5a6c8 CR3: 000000006311e000 CR4: 00000000003526f0 [ 563.396109][ C0] Call Trace: [ 563.396117][ C0] [ 563.396131][ C0] ? __lock_acquire+0x6df/0x2e50 [ 563.396152][ C0] ? __lock_acquire+0x6df/0x2e50 [ 563.396173][ C0] lock_acquire+0x115/0x350 [ 563.396189][ C0] ? ktime_get_update_offsets_now+0x5d/0x3e0 [ 563.396265][ C0] ? ktime_get_update_offsets_now+0x5d/0x3e0 [ 563.396288][ C0] ? ktime_get_update_offsets_now+0x5d/0x3e0 [ 563.396310][ C0] seqcount_lockdep_reader_access+0x55/0x100 [ 563.396338][ C0] ? ktime_get_update_offsets_now+0x5d/0x3e0 [ 563.396390][ C0] ktime_get_update_offsets_now+0x5d/0x3e0 [ 563.396416][ C0] hrtimer_interrupt+0x543/0xaa0 [ 563.396457][ C0] __sysvec_apic_timer_interrupt+0x102/0x430 [ 563.396488][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 563.396516][ C0] [ 563.396522][ C0] [ 563.396530][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 563.396550][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80 [ 563.396576][ C0] Code: f7 e8 5d f5 bc f5 f7 c3 00 02 00 00 74 05 e8 50 32 e9 f5 9c 58 a9 00 02 00 00 75 29 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 f4 0e ae f5 65 48 8b 05 9c a1 ad 07 48 85 c0 74 18 5b 41 5e c3 [ 563.396593][ C0] RSP: 0018:ffffc90000147cc8 EFLAGS: 00000206 [ 563.396608][ C0] RAX: 0000000000000002 RBX: 0000000000000283 RCX: 8000000000000101 [ 563.396621][ C0] RDX: 0000000000000000 RSI: ffffffff8e4749e3 RDI: 0000000000000001 [ 563.396632][ C0] RBP: 0000000000000005 R08: ffffffff907a177f R09: 1ffffffff20f42ef [ 563.396645][ C0] R10: dffffc0000000000 R11: fffffbfff20f42f0 R12: 0000000000000009 [ 563.396659][ C0] R13: 0000000000000008 R14: ffff8880b8628280 R15: 0000000000000100 [ 563.396681][ C0] handle_softirqs+0x226/0x860 [ 563.396757][ C0] ? run_ksoftirqd+0x36/0x60 [ 563.396787][ C0] ? smpboot_thread_fn+0x4e/0xa70 [ 563.396858][ C0] run_ksoftirqd+0x36/0x60 [ 563.396884][ C0] smpboot_thread_fn+0x565/0xa70 [ 563.396912][ C0] ? smpboot_thread_fn+0x4e/0xa70 [ 563.396943][ C0] kthread+0x38b/0x480 [ 563.396960][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 563.396986][ C0] ? __pfx_kthread+0x10/0x10 [ 563.397004][ C0] ret_from_fork+0x514/0xb70 [ 563.397023][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 563.397052][ C0] ? __switch_to+0xc89/0x1420 [ 563.397078][ C0] ? __pfx_kthread+0x10/0x10 [ 563.397095][ C0] ret_from_fork_asm+0x1a/0x30 [ 563.397132][ C0] [ 563.796582][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 564.234841][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 564.243985][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 564.254065][ T32] Call Trace: [ 564.257373][ T32] [ 564.260332][ T32] vpanic+0x56d/0xa60 [ 564.264468][ T32] ? __pfx___schedule+0x10/0x10 [ 564.269361][ T32] ? __pfx_vpanic+0x10/0x10 [ 564.273918][ T32] panic+0xc5/0xd0 [ 564.277687][ T32] ? __pfx_panic+0x10/0x10 [ 564.282140][ T32] ? preempt_schedule_common+0x7f/0xd0 [ 564.287656][ T32] ? preempt_schedule_thunk+0x16/0x40 [ 564.293069][ T32] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 564.299270][ T32] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 564.305467][ T32] watchdog+0x1030/0x1030 [ 564.309846][ T32] ? watchdog+0x1c7/0x1030 [ 564.314310][ T32] kthread+0x38b/0x480 [ 564.318419][ T32] ? __pfx_watchdog+0x10/0x10 [ 564.323140][ T32] ? __pfx_kthread+0x10/0x10 [ 564.327777][ T32] ret_from_fork+0x514/0xb70 [ 564.332419][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 564.337585][ T32] ? __switch_to+0xc89/0x1420 [ 564.342314][ T32] ? __pfx_kthread+0x10/0x10 [ 564.346952][ T32] ret_from_fork_asm+0x1a/0x30 [ 564.351785][ T32] [ 564.355817][ T32] Kernel Offset: disabled [ 564.360182][ T32] Rebooting in 86400 seconds..