last executing test programs: 3m33.020601076s ago: executing program 0 (id=1395): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002f80)=[{{&(0x7f0000000a40)=@un=@abs={0x1, 0x0, 0x4e24}, 0x80, &(0x7f0000000600)=[{&(0x7f00000008c0)}, {&(0x7f0000000bc0)="61275006ed747229311198ab94c7e6699587b0d033c2f17d1ccbd45cba520b6888fbad95d4d6ae3cc7172b392f90693e992e52408ba7f1874d1767303d6acb170f216f71908f53a3be1833a25eb1fb2ba3913dcc1de30c5c7e914b13514dea44fb2b964aaa280d5a85512fede48830ca6e", 0x71}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c13deaeff91566b7f1725f3", 0x1b}], 0x3, &(0x7f0000000680)=[@timestamping={{0x14, 0x1, 0x25, 0xb06}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}], 0x90}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000000f00)}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17aa464613c", 0xf}], 0x1}}, {{&(0x7f0000000500)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @multicast2}, 0x3, 0x3, 0x4, 0x1}}, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000740)="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", 0xfa}, {&(0x7f0000000840)="7dd34b22f7ac2079aba5b177eb1430fafaec0be9816f84b51209eab45a37b57cc11518a5519bb656997cec1b72a4879e62f8764c2b7d0053263bcba5f388fbbffd681a78009a2979953948bb1b882076375947531bd1397bee4cd3a74bb39e99eef1345017970f01413b64c8a394b84863f001", 0x73}], 0x2, &(0x7f0000000900)=[@timestamping={{0x14, 0x1, 0x25, 0x3}}, @mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0x1ff}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @mark={{0x14, 0x1, 0x24, 0x10001}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x200}}], 0xc0}}, {{&(0x7f00000009c0)=@tipc=@nameseq={0x1e, 0x1, 0x3, {0x0, 0x3, 0x1}}, 0x80, &(0x7f0000000fc0)=[{&(0x7f0000000ac0)="768d0aa48a08b77d922ab247f9cfb7217078484d8b195275e603a4f31467f74ce385421ab9c740ee5014b3ef79d3e30480f8324b338b50a801b1884cb92a151d5ea9f7dad31700c47ad2a22b99d704544439d266a7cfcf02918660d3e17bf32114478bbaf2b5f725f7297b65f0920bc51204112063a8723f66044dae4fff5932961b611c", 0x84}, {&(0x7f0000000c40)="5c2be873af9121db573d3266b0b36443a84a68f48de07e1f177f6c778ce08095ec7d1972155dbb284736eb0f65a30fbba9b24f40d6ffbb0219f32d9f2c464f1839aaaea5b3084baea09fc16e9a9cdd68e9270693f83877b07adfd7240b6cf60584b7bc89aa9d19017123f4535448f39db3cdc2b6477e74ef1598d6c250b9b9ce157a0d7696d56e1fbfb36886a35e17eaf3abddfcf8f3c34dd8624232d1545827e1b77a459b1fcdd1aa72cd15477202f6ce5d1a2d06180bf3d2309fcdfa0808748f85469f436ad75e9796dd9989dc1725cc24593c", 0xd4}, {&(0x7f0000001540)="71ba6e550f499724bdf21ee40e2e1751b46d5282a2059dab7e57cb00dee63c6ec7175becf15ece5debeda7cd81dca6d0f867a376f9b0d872d606e23e59c8ce428002dc605ec4c11bd543481be720e1aff9744a47a6b7659e79f428b4d4369fb23b973e6a309b06017e00011e61bd3f0cc7260c27d8aacf52bca8a5637899007ed78665508fbfab45e4de5e5162d8", 0x8e}, {0x0}, {&(0x7f0000000e80)="1c4ec596fbe02d9712c82896d62e696a34e5bae4598b40ac373ae3a462e2e47df4335ffa7b00820da5a0c66fc8ae73f26ac13b29", 0x34}, {&(0x7f0000000ec0)="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", 0xfa}], 0x6, &(0x7f0000001040)=[@timestamping={{0x14, 0x1, 0x25, 0x9}}, @mark={{0x14}}, @mark={{0x14, 0x1, 0x24, 0x9}}, @mark={{0x14, 0x1, 0x24, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}, @txtime={{0x18}}, @mark={{0x14, 0x1, 0x24, 0xa}}], 0xa8}}, {{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000001100)="e2e7669d9850708a336901099ad137d594ab66fb12e84dd57031dbbdc99c65b77b31c65669abb7fd31bddc89b004c5a2", 0x30}, {0x0}, {&(0x7f0000000b80)="93dbd946fa4e358f5aacb97521542b8fcab38371fc8f4609ab5eab23388aa274181753b8842d4441e7fcd5a28a73002ea7bfb1159312f6e6", 0x38}], 0x3}}], 0x6, 0x20000044) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x80000) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0xffffffb8, &(0x7f0000000140)={&(0x7f0000000340)=@delchain={0x34, 0x65, 0x20, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x8, 0xfff3}, {0xfff7, 0x3}, {0x6, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x5}}, @TCA_CHAIN={0x8, 0xb, 0x13101c2}]}, 0x34}, 0x1, 0x0, 0x0, 0x8848}, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f00000004c0)={r7, 0x3, 0x6, @remote}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000000)={r7, 0x1, 0x6, @random="790c7edd3d8d"}, 0x10) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0x0, 0x2000001, {0x0, 0x0, 0x0, r7, {0x7}, {0xd, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) 3m32.133685167s ago: executing program 0 (id=1411): r0 = socket(0x400000000010, 0x3, 0x0) connect$inet6(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x4, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x29}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000080009539e0c32992653413ceebeedc319a58b55a851779222172a5f40be8dc7d137433e4b8f88452fbd2e75a3330998295067202999e906169c17d0d6df545bfe7114290497b790c4b0569eecc0effc77c4d01cc6cc7bdfd08d10b953396400bca83ecfc190732d8fa"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3m32.014048161s ago: executing program 0 (id=1414): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000100)=0x8001, 0x4) (async) r1 = socket$inet6(0xa, 0x4, 0xfff) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000000), 0x3) (async) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0xa, @mcast1, 0x1000}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0xb, @loopback, 0x1}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000140)='2', 0x1}], 0x1}}], 0x1, 0x8000) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e23, 0x100002, @ipv4={'\x00', '\xff\xff', @empty}, 0x1e}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000000680)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0xab, @loopback, 0x8}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000900)='2', 0x1}], 0x1}}], 0x1, 0x20000014) 3m31.024361901s ago: executing program 0 (id=1430): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) sendmmsg(r3, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000017c0)=ANY=[@ANYBLOB="880000000000000006000000ffffffffff4846433e69b26eef04f9b7e3d94be89bb28a1145a6e9f463c160c6753347003862bcc01f630aee90e7954160278d4d6e138f95c0a426b3cc98ebbbe6586429a3048f9b1d1c56d8b612fa05932d16bc7e04d10719f3ebf946f5fd6399bd7ffe1101aab1a50f0bc692a5ef77fd39983c510beb9c439d8a9070000000000000000b01000004000000b5d6580de37aa2f80304bac25710bf891b995bd31ecfebbe2b576e97a4fd1685f4b9bd68becc2255f1e53be44794c5c0f25edd9fbc59a94cbb6b5e7266559bae1873ec493ddf8ef3ff69b04be162b016158ad9ce414c7e46b400000000000000101000000000000002010000feffffff63b71ca7e9a131b7049ab4067710a6110864f81875a85a95ec208f8b912de055933f1bd26e2c2c5db931ce1c100c8fad34b75a62459bcbf1a5d50461103a9734e380d3580cc17a6cbf43567e4aa5c30f2dee16f0047f2654feb31d41a6a273951ba54c58be7196f4e39f16cd61442bbd9f301ca835d42de3a1b577b39c84ad23870b7603f42aa9991f405ac1ec2306812f40ff721146e40e7ce7aacc2a72d2c6f340da45c4193f87ba2da83efc6d9900dcb4293809018ab31898e1d0ca57d7dc722d6f255b766d02b872df20ccb1d123c66221e42e554b4a77702149612daed21de9bba9f1bb9591cd1e7456325217651c40484d3af62ccc92445209eca14265cae7124d98306db302bf16afa5367f48da29105cd383685f827f084434cd935a87571e5814b837aafa524f6a8a7f5e56cd72ea01eda4b6cc5885f00eb79488bde4ca40abc7e09cbd4e6210ca357f776db996664a6d1678480535933e99eda18402128045d09097b3fb4f10d471dd56a63f642240f8e91f956ce3e75c119faede2c8e35155f18ad78cb3c6801c4e12b9617ebccd6c9695ef19a57a217810b861070c02794b4716d715cebfb3a62eb17f87ac0d8c501ab71a3b15d3138da1a8af0d892c6243e9c2fa06f979db2d8e44bc2d6b8236c88f533ec00ca7389d272c1ddea5908115c2c8fe486c87b0de5a5cb3962bd1ca7dc578634ef29772a2c8a60fbdfbf384c52f5b884dc52cd6ea247756034b6a53da507c712b018440a68629e3d14fd7f02410f68aff44840fba2116c50b330a4d9c4732b9dff960068dd77c89c355c66ea6a9eef972e089b06999162ca096310f5595f698771f66ffb323875db24d63e50eb9fce7ce3b93b0a4e3fffaae9fa2bf6ee2a2583d48adaa1025132e9e55a37906c2546d8c73b00f868a04ce39586f17ab12b0a534ed09d783c5b160e17ea43d99843d61d34f0d6ecbd451bb4ff87b02c13dbc66b25792ca1dcd581339ec6189737979f5543c82b927d06d82a21f53bfcf86b80d056e74a39368507d2cd4cbc1797328f522c5b8b60acd8f4f01de9cb1a57403b0bcc3195a680b76bbe793d03e1c11cdf416298687498c68b3daf09f8424ddca8d01dbe2297c67a24e78ea3dc01b412097f848f3911bc3a8665a035e1ad578c5adf201691a12951e38a396fda95945904f9bb74ec32bbf5dde5dc7eaaa0e0976a82dc811287a8dbf62db21bb0a925c7126c4687a61531b1814f05343211d354ff51fbecfd6fd8e29a860107523fae25d420d524f4652161a7005bd05b243422f19f5db74ab78cf15e31add631b85b4de958b65e9ad3f7b4c8d0a57d34b1ef108cdb52c72e6fda5ec91dc77fcc80bcab8ec2bb354e9d7e327bc097c0071080562d0c392a243d322be404b8560a9b14a6e44c0cbee90f1b611c1ebe9a228581f52329aacf720d6c33e965b1457d808bc4b297f6c76cf89198b0e67e5102048c33c0909f93d1428f23b663d0762e36df7c7d1868bb70fa7b113cfaa0b11065f6e8ff0a49f8180b847d1770bea9463edae670e1a89b247647f48a46485516b7ec1b8ef422339f19bd1cf0bda415cafc96991c47d5a9f0b4cf1d3c2be4575955b0edd9c2858b920f77d0ef954c843773213c04f3993be79f8144324db6a6e016b3d9c2d4b6d68cd2dce9fddd5cc2bbc6c324ba20a8f9bee349efbc6794becc8b17c4d45a4f265acc0c6d8feca6e3cd2050bd8c6f948ed27dafd908b217f275baabe22f634c95d650efb11c611acf517335c72ef54839238ddd7f0f798aa9d0bcc71ffa321caa37256b327033080173bbc95713581980bc2f5287e8e8ec6172915b5230d711236848cd13cb4eac96e8399c2c880358ca264e48674dd8590c7227a2604cd3ffb2f5a78082e30a465cc8a897853a2c65d558c5e4796e35598ac39d7f16f23c123d42a42eb3b303834b37d7d3cc5df18c8aa837e04859a0c69c5718d93e693a05f741b62ff305cacec0590d68b96d5d52be9d4f49fd358fca2e328fff7b1b240a2add11f064cf6cbc913b7570b7d27e49a30948c7bacfda5c06639c5d2da796a1ba8166bf3f1d6e834567f25229301be2f63b8b7e8dbc9421d9f5a1744f0e885b92feaa5f49600ab96a3224e08003058741faf8b197b1783176f3859627668cad92f1b07f3bb0bd50bc622b09b078b091b77d2fd9340215b03db263cb5532661f48f0968e1ca5af67b9e22e3dea14eb0c5fc1e77b49d3630fb4a76990c939c22e7d08597a2d6c062e64a787cd86ac5992e8c211089ca1a1a469e1499dbbaee5fcd7e2c4f9cddf1f7ad70a4f6131ade9037f36d43dde993255864fc30a945cfc855dcd375b97ac2a17f5d236945656d1f576f2bdc76beea57bdf254ff568c3b6566bca22cd616ef438116c0c76705cc3c02ea124067bab17c2d3482891ffabf5b1e9bdc664b87773ef2602f9357a747c40926f5083fb6a01c5dd9a18df2becb5a67506b35c6d220818594c16dd7843a8c343327fef919717b09a81e5fef6d48caf51283acaaf750e3aed3cb6aa51470e866b753a9f3ba3447b1c4779efde0bc8d6ec83899c6921a9f87d5d032058c5c7f5f1c5a07097cebda2dd748d116c4e6180e3b0b09997abee326027dc30bfbe81fb520be5d889a6f7b0ff206ea6c8b9c903ca0e2d4379cfaaa31824aba0b113c866b807354ce1b5cb81ec6966a19108bf0c6cc804e7092d46c93dbfecef9398b5c7abab159fa86f05368a1c7596e12a5684ea1d7340ab7535014487bdd53094298cae30ae9b3c96c87efcaeeb2368ac6f0102d3cfd8b97e2f63f9ab1bf4eef0387f59209d0fbd583e0f463edb379eb47a7482489e4488c639c21feb03d14c893f7444c450b192fded364ae84c92f89d4ed2a15423e4befe54a8ec10f19dd1219e5de45cdb91b089d1149d899ae451e8e9c807d13479bda9278ae30e9aa320faedbe1277011659fd4382ee1ed1532fe02159f39b25ead1a18828d402540d1472d5a37adb61484b10dd6426e6be03974b6b14ec028a218846f7b3122a2a1e1f784b8081fae862458e7fe7557cf000d3173311574f9551f1911d84631ba651b67d151fce54434dba6c3cfa70a74fb52855c732cf0426420bae9d69dd11e9fb433bbd3f47fb260fe14d1a9ee38e2579841691016f722a7b7a5c119f894b101dd151b0ee37d711ae71ecd3b5b2bcb5b050eb75964c917c34bce76f33e27dd3328e70aaf0673f0f09322e4219e86ee06b9503dfaa3e6691b11f8635fea3575ebceebc5d7c73c65b9e90d6c027f014a1f149c6d3871aabc094092479f71796be1558ce297b37575530e4be6f0424fbedc590d6a062c4c5d36f3962169ccf04fb4a96d7a3658c738ab782e85223a9ba00f762ce4deab752bc11bd594acaa1dd91104ba6d2d78a26a2c5c5cdc213fb8c1a0829e74f37040b975183ef87fc44599c48c69a0d25d7f8c02c1faf34fbf9f12c139f18fdf8cf7eeedbf9a99e9d224dd80f74aa51193db5dcafe9025e9d894bb8b2b50c3f874d743f9fde8bf033c38f2ed68d4d7d4908a4be0c3146ddfe08efeca226905e1db63cbe1adbb7b511759fac494805b32142623024a3c11df94f5813b45ce4f5940eda7fba7e683086a0a5441100bf8f8edbec02ce48e70431ad8f7ac6695ebd6050439e151cc039b9d20c088fe181452da8b7bb7eec4734c036f2cd5dc9d342abc3d59cddf61e818eef28cd394fcf4ae5271476666c269961841b96f4e7e5aa45baaf5849b5d6903e339b57d119012b324693e36d9b8e6de7533cc1e2f8346fd9a8bfa05f6fec57a621952f3b0217a562af0621f04fc671751b16accc28e8f401c1fce292cea8d708fd4dfe408575bb78d331c739ebd60ec584e1516f5ae0be3d1bc8d665f6e0b670c7b36ad72b018dc08236d7852e5e7246afb39002eec05ed4999ef5b09d4fcb411aaf41a31f3baf2c71fa8a798618b226b8c554d59f0f38822668a53bd2412bfb0b395356f019243c9034e9610799071314c61fc82891c0fe0005687c2a5a868e7dbeac4c18194df53761f10f01f075ec7688bc597b571792be24ec77665c7b173d09255bce73c4a9ebd3dfcf0b383769fdd094633d2f7a884bb9c696eca2243cb9e2d885b045611e0b154de81f75fd8152d48ca098ec8946de0727ed921486847d12511ab022b0a631feef841edff17ca10f5bc011a3796a2883755b526663407a166143a4cc4d80744cb3657a20cb81c3fe45610fd35f73ca9042849236a0afa215f19c152db74864bd8d9c32b9f4b1fce2bc94be7b3892cb19885a74b65bb79f4cfc569dfbe636cc5acb1560d14ac43346c2e0bc1d347eab5fd6832225b5d47490d4c980f029753803178e3e31deb547c4eb09632fa171b1d0d4c8edf8cccaa3439dac16a5dbc9a2bf1199c307588f7e6960d3dc77370431f57bcdc7b701eb8b22d2055f2e7859f4ee498f398456cb6f51be8140c408d2836b8d5e373cbfd80f41e29422ccbe55754d870f7df1d4d2cc34a941e46ea5b161a92a6aa8582ed08d5b646e22de1a31fe9a851435c6d4bc774b701aedf3cd737ccddbe6a39f6de0a46f49ab8f5c88a17f9fe9e181ebc8e75c110b49284e120730cd95693b0b5ffe1c1ad05f623b05a606aefedd13ff1df4ec63f8ead184066007041dfd888a5f15462c1dbfab64dde798ed09d821e62c76ce4c18253e91fca732afec9abe38da481232874856779607b07299c25931ea3ab6c5002faa3e2e443d0f680e6ff4a2a669b29b160af1f024a888550326603e7b7e33458b6d747974689870afe98e49723fbf0d800f8ca4a9febc6f02e57adebab1e0f8711497b19fc2992a1cd0657f6204c3a8ae9b640099076dcc95f73e50d39f2e0a0a26e2cbbf5bddcab169047f51907980c15b3164dc1353b92b5b1e44a4584ab4e0c53a70d856ea11eb70b0dd12c69ca73e8eb19cb8465c9ce71fda096bb139d286da09e5d45a4635d583a62881ca3497bb8e8a6c1d1d7eb6b4de398db2d3a8bb684beb81e4ad2d9b90f199849b073d7da80c812b385ef7893bdc79060125a2ec2f6225cf056a0d485c3e8426a68d2f90bcf28c1271f3e61466bb89b99d465893961bb5eb6098f2f72bf8fae18c4fa762155d62879202cbab9bc763a69f8825465a914283bb3d30e3c9b98117dec87b89e38753ab46ce33aed08134537cb902a0c99e430b4f09d43f91279b4e524a86a978623d0de9a2da28694daf1ac626f0cc0bde3dd6b269db35ba8dc409f3173cda20af02ac6e7e6d778db8c294fdbbf14c5d39923596d18e2081e35d0ad0c72a4f140e3e9465c79f7a4b6fc77b4d63841ee80297832024d4bad424deb318ad93cdf453985f5a21e155b2c75778f4b673757b2a333ccec747e85f0d0d091a0d3817de47661d807e3341d057c655fce777586b9cd9f5a8063add2cda4a5aab706e4d7c8bebc64ea454eeca48066b83b89878b80b0494433e884f50721a88d5b817b7f6d2215bf10f96cf0a2b16eecdf04791339a64c28e971fc934252779edcba5e5f2bf6f2a1ca9470804afe5f8e62be0a0c87584faddf5bbcd6c085c7c65ae414af641344abbc2a29798c312d505174bb654b690824bf90be8985def558378c107d6fdce617f3abfde5c1acc4087265dc7489529771406ef1c601c0235d3bdc8725be9dd3c3452419105fbc117bcb0bf9c64abbfde56fff2bb4bb0ef2980100b33ba4c03318b8df069b11274b25246b79ef4d71e57bb38ec92beb646a8086d3635d1ad8e0f4f218073447e52b16265c218dc18b73e746a901eb28135d938000000000000000d010000d40000008670bf2194d9297170708836b74f5406427821b1c1f53d2e89ffcc5c7e738003e25305091faa270010100000000000000100000001"], 0x2260}}], 0x1, 0x0) getsockopt$X25_QBITINCL(r2, 0x106, 0x1, 0x0, &(0x7f0000000280)) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000022780)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0xc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90c1, 0x5c81}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x40}}, 0x48010) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_ext={0x1c, 0x6, &(0x7f0000000040)=@raw=[@map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x9ca}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x54f5f7d3}], &(0x7f0000000080)='syzkaller\x00', 0x8, 0x98, &(0x7f00000000c0)=""/152, 0x41100, 0x44, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x0, 0x5}, 0x8, 0x10, &(0x7f00000001c0)={0x3, 0xb, 0x0, 0x1000}, 0x10, 0x63f9, r0, 0xa, &(0x7f0000000200)=[0xffffffffffffffff], &(0x7f00000002c0)=[{0x4, 0x2, 0x5, 0x7}, {0x2, 0x3, 0x2, 0x3}, {0x5, 0x4, 0x2, 0x1}, {0x4, 0x5, 0x6, 0x5}, {0x2, 0x2, 0x0, 0xb}, {0x2, 0x5, 0xa, 0x3}, {0x2, 0x5, 0x9, 0x4}, {0x4, 0x4, 0x1, 0x9}, {0x0, 0x4, 0xe, 0x6}, {0x3, 0x5, 0x9, 0x3}]}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000440)=r4, 0x4) 3m30.456563319s ago: executing program 0 (id=1436): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x2c}, 0x94) r1 = socket$unix(0x1, 0x5, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'ipvlan1\x00'}) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x20, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TX_RATES={0x4}]}, 0x20}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x28, r7, 0x1, 0x60bd29, 0x0, {{}, {}, {0xc, 0x14, 'syz0\x00'}}}, 0x28}}, 0x0) (async) sendmsg$TIPC_CMD_DISABLE_BEARER(r2, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x30, r7, 0x4, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x14, 0x13, @l2={'eth', 0x3a, 'syzkaller0\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x814}, 0x800) (async) sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000000780)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0xa0, r3, 0x8, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0xffff, 0x72}}}}, [@NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_HIDDEN_SSID={0x1c, 0x7e, @random="ee8c6eb57e38f649d65937d05a30923cd5e8b87a973025b4"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_IE={0x14, 0x2a, [@ssid={0x0, 0x6, @default_ap_ssid}, @cf={0x4, 0x6, {0x4, 0x40, 0xffff, 0x2}}]}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x80, 0x1, 0x5, 0x0, {0x7, 0xe8c, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1}, 0x1, 0x6, 0x6}}, @NL80211_ATTR_PRIVACY={0x4}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4000094}, 0x40800) (async) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05050000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900030073797a32000000000900010073797a3000000000340000001c0a010100000000000000000100000008000940000000000900020073797a323a0000000900010073797a30"], 0xa8}}, 0x0) (async, rerun: 32) sendmsg$MPTCP_PM_CMD_REMOVE(r2, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x38, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1a}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x64}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xb}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) (async, rerun: 32) r8 = socket$inet6(0xa, 0x3, 0x3) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r2) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f0000000980)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000940)={&(0x7f00000007c0)={0x16c, r9, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x2}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x31}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_RULES={0x118, 0x22, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xd29c}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x6}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xce0}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x9}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x2}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xde2}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x81}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x5}, @NL80211_ATTR_REG_RULE_FLAGS={0x8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x81}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x32}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x9}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x5}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x9}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x81}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x4}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x400}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x9}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x3}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x7ff}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x800}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xffff}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x40}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x3}]}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}]}, 0x16c}, 0x1, 0x0, 0x0, 0x4000805}, 0xc000) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r10, 0x117, 0x5, 0x0, 0x7e) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000200)={'bond_slave_1\x00', 0x0}) (rerun: 64) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r0, r11, 0x25, 0x2, @val=@tcx={@void, @value=r0}}, 0x1c) (async) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x38, 0x10, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r0}]}, @IFLA_BROADCAST={0xa, 0x2, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004040}, 0x0) 3m30.298897869s ago: executing program 0 (id=1440): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x26, 0x9, 0x70bd25, 0x25dfdbfa, {0x2}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x80) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 3m15.225982833s ago: executing program 32 (id=1440): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x26, 0x9, 0x70bd25, 0x25dfdbfa, {0x2}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x80) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 2m31.491845669s ago: executing program 2 (id=2139): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYRES16=r1, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}}, 0x20000000) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)={0x3c, r5, 0x1, 0x70ad2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x3c}}, 0x0) 2m31.372084329s ago: executing program 2 (id=2142): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000000c0)=@framed={{0x18, 0x2}, [@cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffffd}]}, &(0x7f0000000000)='GPL\x00'}, 0x94) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, 0x0, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x4ab}]}, 0x20}, 0x1, 0x0, 0x0, 0x4c0c5}, 0xc0) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @ipv4={'\x00', '\xff\xff', @local}, 0x4}, 0x1c) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000180)={r1, &(0x7f0000000040)='\x00', 0x10000, &(0x7f0000000080)={@_ha_fsid={[0x3, 0x1]}, {0x5, 0x3, 0x5b1, 0x4e}}, 0xa30b, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000140)=0x1ff}) 2m31.17749579s ago: executing program 2 (id=2146): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0xffffff95, 0x0, 0xffffffffffffffff, 0xd}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0xe72, 0x10, 0x0, &(0x7f0000000200)="63eced8e46dc3fad77b7b3f7b986edf7", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x4, [@var={0x2, 0x0, 0x0, 0x11}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x2c}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xa, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x5e}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2m30.9962671s ago: executing program 2 (id=2148): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r1, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=@newlink={0x78, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r1, 0x32d26, 0x1cdb5}, [@IFLA_LINKINFO={0x58, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x44, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e22}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}, @IFLA_GRE_ENCAP_LIMIT={0x5, 0xb, 0x93}, @IFLA_GRE_ERSPAN_DIR={0x47, 0x17, 0x1}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000180)={0x48, 0x1402, 0x8, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000011}, 0x40000) 2m30.665692213s ago: executing program 2 (id=2155): r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x3c, r0, 0x100, 0x0, 0x25dfdbff, {0x35}, [{{@nsim={{0x6f}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0xf}}}]}, 0x3c}}, 0x0) 2m30.519713628s ago: executing program 2 (id=2158): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x4, 0xfffff020}, {0x6}]}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @bitwise={{0xc}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$ethtool(&(0x7f0000000600), 0xffffffffffffffff) (async) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000980)={&(0x7f0000000640)={0x340, r7, 0x211, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_EEE_ENABLED={0x5}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0xfffffffc}, @ETHTOOL_A_EEE_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}, @ETHTOOL_A_EEE_ENABLED={0x5}, @ETHTOOL_A_EEE_MODES_OURS={0x2d0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xca, 0x4, "14dfa9437d41b59057658f0e587568580afb1d482de277c06f8cf31b5837fabc8f5ea654e3fbc17370eae92ab95ab4ca4c00b6e8990577501191309ccaec2d86d1a43919b082d9da8e85eabdc1089bd311475ad57647759801b79c006f6a85f0e28f861059d01f3cf7984866109e4c17e5e31fbcb87f7c3b7caf078995e9aac7fd1dca807a23fa62157dfc33a4f74f616de89f4977445b709049df0966d925dffcbb94b5f4e9ab9777400212f6cf8f3dcb9d79a2c95efcd3b66ea5841542001195b25d0ca1e9"}, @ETHTOOL_A_BITSET_MASK={0xc7, 0x5, "e06ffb6b80ba0bae05c84459c6f0b3a62445d3397cb50363a87007ce0053f429b55aa7fbf86cad9445e6faa049bbb8ea099c2f4b6d0bb760ed0ef39a144e3c4bc28eb1f5d142c82e8afe0ef4729c626bda259aa14162fe890f0de7e2e4e0528099886f98c7ef40504d6f997eeb2c713f35322dea92b02fa24a1b63e62203e15522ebf722cd82e24b837a95d37f485963506ea804fd2d66456dd5477b5860aba92193ffd34be1f1d2cb7564d837781a3f202bf9688589fb484e708edf6ae1505c54d6fe"}, @ETHTOOL_A_BITSET_MASK={0x30, 0x5, "4902cc3687c8bca3341167a9aac8a9e78e7bc38fc60c28d9cde7aff82e58f8f057b516827532bca02a36c81d"}, @ETHTOOL_A_BITSET_MASK={0x36, 0x5, "78d8c5c4c2e38ec7dd3fc27c435f0f2d682ecb084ba0e427a7eb2c28aa3382ac2d66b636f207007b627e9928b5b2cdd57f14"}, @ETHTOOL_A_BITSET_BITS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd6bd}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10000}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xca23}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '/&&]&/\':/$\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '*,,\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}, @ETHTOOL_A_BITSET_VALUE={0x2c, 0x4, "df4f59ac8e56c4fb0942f666597243e52bffac42f04695908b75a0ee8ff33d7646bf9ccc2ddf781e"}]}]}, 0x340}, 0x1, 0x0, 0x0, 0x4008004}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000440)={r2, &(0x7f00000002c0)='\xaa\xaa\xaa\xaa\xaa', 0x100, &(0x7f0000000300)={@align=0x7, {0xa651, 0x8, 0x40, 0x1}}, 0x4, &(0x7f00000003c0)={@_ha_fsid}, &(0x7f0000000400)=0x81}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000480)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r11, &(0x7f0000000000)=ANY=[], 0x3261e) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x14, 0x26, 0x301, 0x70bd24, 0x25dfdbfd, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4004004}, 0x4000) (async) sendmsg$nl_generic(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x14, 0x26, 0x301, 0x70bd24, 0x25dfdbfd, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4004004}, 0x4000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r11, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r11, 0x0) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000500)={0x6c, r4, 0x1, 0x3, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xe}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r9}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r10}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r11}}]}]}, 0x6c}}, 0x20000000) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r13 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r13, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000002100)=0x10) setsockopt$inet6_int(r13, 0x29, 0x14, 0x0, 0xfff3) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0x64010101, @local}, @time_exceeded={0x80, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @loopback}}}}}}, 0x0) syz_emit_ethernet(0xbd, &(0x7f00000000c0)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}, @val={@val={0x88a8, 0x1, 0x1, 0x1}, {0x8100, 0x2, 0x0, 0x1}}, {@x25={0x805, {0x1, 0x7, 0x5, "511f5b99c2760530a84913e411d5831b6d073973d3752e0f08d432086cfbe7c50e0a12e4011b5612c2d7d3a91fcfc6d98340f1912a637c360bb5b6e6457a859a879848f0d4cdc2eea2b9182a89a1e3c1801434bfbbe8273072d1602ffcb8529e3f13604e95ed2aba60fecdcfc8897761e7239b27dc1ade31ef18da1defdef596a1d10b0ac13e8c90d0d979280972bf2e3e079dc865447c669348c0d7fa84be5c413f6887"}}}}, &(0x7f0000000180)={0x1, 0x2, [0x8be, 0x8c5, 0x9c5, 0x3c2]}) 2m15.459401784s ago: executing program 33 (id=2158): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x4, 0xfffff020}, {0x6}]}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @bitwise={{0xc}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$ethtool(&(0x7f0000000600), 0xffffffffffffffff) (async) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000980)={&(0x7f0000000640)={0x340, r7, 0x211, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_EEE_ENABLED={0x5}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0xfffffffc}, @ETHTOOL_A_EEE_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}, @ETHTOOL_A_EEE_ENABLED={0x5}, @ETHTOOL_A_EEE_MODES_OURS={0x2d0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xca, 0x4, "14dfa9437d41b59057658f0e587568580afb1d482de277c06f8cf31b5837fabc8f5ea654e3fbc17370eae92ab95ab4ca4c00b6e8990577501191309ccaec2d86d1a43919b082d9da8e85eabdc1089bd311475ad57647759801b79c006f6a85f0e28f861059d01f3cf7984866109e4c17e5e31fbcb87f7c3b7caf078995e9aac7fd1dca807a23fa62157dfc33a4f74f616de89f4977445b709049df0966d925dffcbb94b5f4e9ab9777400212f6cf8f3dcb9d79a2c95efcd3b66ea5841542001195b25d0ca1e9"}, @ETHTOOL_A_BITSET_MASK={0xc7, 0x5, "e06ffb6b80ba0bae05c84459c6f0b3a62445d3397cb50363a87007ce0053f429b55aa7fbf86cad9445e6faa049bbb8ea099c2f4b6d0bb760ed0ef39a144e3c4bc28eb1f5d142c82e8afe0ef4729c626bda259aa14162fe890f0de7e2e4e0528099886f98c7ef40504d6f997eeb2c713f35322dea92b02fa24a1b63e62203e15522ebf722cd82e24b837a95d37f485963506ea804fd2d66456dd5477b5860aba92193ffd34be1f1d2cb7564d837781a3f202bf9688589fb484e708edf6ae1505c54d6fe"}, @ETHTOOL_A_BITSET_MASK={0x30, 0x5, "4902cc3687c8bca3341167a9aac8a9e78e7bc38fc60c28d9cde7aff82e58f8f057b516827532bca02a36c81d"}, @ETHTOOL_A_BITSET_MASK={0x36, 0x5, "78d8c5c4c2e38ec7dd3fc27c435f0f2d682ecb084ba0e427a7eb2c28aa3382ac2d66b636f207007b627e9928b5b2cdd57f14"}, @ETHTOOL_A_BITSET_BITS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd6bd}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10000}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xca23}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '/&&]&/\':/$\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '*,,\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}, @ETHTOOL_A_BITSET_VALUE={0x2c, 0x4, "df4f59ac8e56c4fb0942f666597243e52bffac42f04695908b75a0ee8ff33d7646bf9ccc2ddf781e"}]}]}, 0x340}, 0x1, 0x0, 0x0, 0x4008004}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000440)={r2, &(0x7f00000002c0)='\xaa\xaa\xaa\xaa\xaa', 0x100, &(0x7f0000000300)={@align=0x7, {0xa651, 0x8, 0x40, 0x1}}, 0x4, &(0x7f00000003c0)={@_ha_fsid}, &(0x7f0000000400)=0x81}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000480)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r11, &(0x7f0000000000)=ANY=[], 0x3261e) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x14, 0x26, 0x301, 0x70bd24, 0x25dfdbfd, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4004004}, 0x4000) (async) sendmsg$nl_generic(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x14, 0x26, 0x301, 0x70bd24, 0x25dfdbfd, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4004004}, 0x4000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r11, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r11, 0x0) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000500)={0x6c, r4, 0x1, 0x3, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xe}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r9}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r10}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r11}}]}]}, 0x6c}}, 0x20000000) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r13 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r13, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000002100)=0x10) setsockopt$inet6_int(r13, 0x29, 0x14, 0x0, 0xfff3) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0x64010101, @local}, @time_exceeded={0x80, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @loopback}}}}}}, 0x0) syz_emit_ethernet(0xbd, &(0x7f00000000c0)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}, @val={@val={0x88a8, 0x1, 0x1, 0x1}, {0x8100, 0x2, 0x0, 0x1}}, {@x25={0x805, {0x1, 0x7, 0x5, "511f5b99c2760530a84913e411d5831b6d073973d3752e0f08d432086cfbe7c50e0a12e4011b5612c2d7d3a91fcfc6d98340f1912a637c360bb5b6e6457a859a879848f0d4cdc2eea2b9182a89a1e3c1801434bfbbe8273072d1602ffcb8529e3f13604e95ed2aba60fecdcfc8897761e7239b27dc1ade31ef18da1defdef596a1d10b0ac13e8c90d0d979280972bf2e3e079dc865447c669348c0d7fa84be5c413f6887"}}}}, &(0x7f0000000180)={0x1, 0x2, [0x8be, 0x8c5, 0x9c5, 0x3c2]}) 14.913511789s ago: executing program 4 (id=2951): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x1d, 0x2, 0x8) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f00000001c0)={'vlan1\x00', {0x2, 0x4e24, @remote}}) setsockopt(r2, 0x84, 0x81, &(0x7f00000002c0)="1a00000019000000", 0x8) setsockopt(r2, 0x84, 0x80, &(0x7f0000000040)='\x00\x00\x00{\t\x00\x00\x00', 0x8) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)={0x30, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@nested={0x8, 0x15, 0x0, 0x1, [@typed={0x4, 0x1d, 0x0, 0x0, @binary}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x2f, 0x81, 0x0, 0x3, 0x0, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x8000, 0x2, 0xffffffff}}) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x32, &(0x7f0000000140)={@private1={0xfc, 0x1, '\x00', 0x1}, r3}, 0x14) 14.640450784s ago: executing program 4 (id=2954): r0 = socket$inet6(0xa, 0x2, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x145140, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (rerun: 64) ioctl$TUNSETLINK(r1, 0x400454cd, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@ipv6_delroute={0x24, 0x19, 0x1, 0x70bd66, 0xfffffffe, {0xa, 0x0, 0x14, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1100}, [@RTA_PRIORITY={0x8, 0x6, 0xffffffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008880}, 0x4002050) (async) close(r2) (async) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000240)={'syztnl2\x00', &(0x7f0000000140)={'erspan0\x00', 0x0, 0x7, 0x80, 0x5, 0x6, {{0x37, 0x4, 0x2, 0x6, 0xdc, 0x67, 0x0, 0x5, 0x2, 0x0, @local, @private=0xa010100, {[@generic={0x0, 0x12, "f3f5e0357a1f4c4e6370b546c5793626"}, @timestamp_addr={0x44, 0x2c, 0x22, 0x1, 0x0, [{@multicast2}, {@multicast1, 0x80200000}, {@loopback, 0x1e3e203d}, {@rand_addr=0x64010100, 0x10001}, {@private=0xa010100, 0xfff}]}, @rr={0x7, 0xb, 0x47, [@remote, @rand_addr=0x64010102]}, @timestamp_prespec={0x44, 0x34, 0x38, 0x3, 0xa, [{@dev={0xac, 0x14, 0x14, 0x3c}, 0xff}, {@loopback, 0x1}, {@local, 0x9}, {@remote, 0x9}, {@multicast1, 0x4}, {@rand_addr=0x64010100, 0xf0000000}]}, @rr={0x7, 0x1f, 0x7, [@loopback, @broadcast, @dev={0xac, 0x14, 0x14, 0x29}, @dev={0xac, 0x14, 0x14, 0x35}, @private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1]}, @timestamp_prespec={0x44, 0x2c, 0x79, 0x3, 0x6, [{@loopback, 0x4}, {@loopback, 0x647e}, {@rand_addr=0x64010101, 0x79}, {@remote, 0x7}, {@remote, 0x3}]}]}}}}}) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000280)=r4) (async) r5 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @dev={0xac, 0x14, 0x14, 0x41}, @broadcast}}}], 0x20}}], 0x1, 0x8000004) (async) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000080)={0x300, 0x0, 0x6, 0x9, 0x0}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000300)=@assoc_id=r7, &(0x7f0000000340)=0x4) 5.924635994s ago: executing program 5 (id=3035): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000001a000100000000000000cf0080202000000000000000000008000200ffffffff080001"], 0x2c}}, 0x0) (async) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x40) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f00000000c0), 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000ff0100007b8af8ff00000000bfa200000000000007020000f8ffffffb703000004000000b704000000000000850000001500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0857f9f582f0300000000000500", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.917583577s ago: executing program 5 (id=3042): syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x3) syz_emit_ethernet(0x66, &(0x7f0000001a40)={@random="0f539af21094", @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "1200b0", 0x30, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x4, 0x3, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00', 0x0, 0x2c, 0x0, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}}}}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffffbc, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc8}}, 0x0) 4.788051692s ago: executing program 5 (id=3043): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r1, 0x10, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x804) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001900)=ANY=[@ANYBLOB="240000001e000100000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="0000000006000500"], 0x24}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$kcm(0x29, 0x0, 0x0) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r8) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r10], 0x1c}}, 0x4008054) sendmsg$kcm(r6, &(0x7f0000000d00)={&(0x7f0000000800)=@nfc={0x27, r10, 0x0, 0x5}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000880)="0f131d08c757db91045bbceadc672ed6a938f6ab5d66114751a02a5314ba45d9480d54ada024fdee2734d29284c61d3fe0e674a627886f8336182319f5e8175cafb8bae99ae67b1a9ad5dc471399ffcae490ca58c9a1911182aa", 0x5a}, {&(0x7f0000000900)="427b269329905b5543084e846645335be1ad75813b4150922f619181db736e9dad5edf4242004f1ac3326fa28e6ebde1fadaa6ad5fe536618fc93fd49756393f01ce43690049e9d5fe6133eea5654e4e", 0x50}, {&(0x7f0000000a00)="a77f8d4429c83c22013fcfaf9c59ad2dbfa6ac77d9013c19b2ceec976ca033c32aa380b5d1b7835f855a0597ede718fdc4f47da21dc132021d55ec00db1acc73f7d7d7b425960bc8764ee7e004e673eea48940354f38d7d33abee9a82f90168b56e22ad88899821d5005765a294b51190c9b34560b747fb6959d0e6393f736e2ebb4fa24c0287ce9b1343ba8bd620c8edd99aed853740d38cf862378442982ace2a8c5e1ec239aacb60fbba6df7cc4707472c821453a4d26275be71aa414f3feaf5019ad6c7d7adc14117df8f992e94781d5ff", 0xd3}, {&(0x7f0000000b00)="225c6d2e3725f1c0e00388b2fcbe810ea1baba79b17dfcbcd2a2dec68e69f0d4219a6003c7de1e2c55ab22c08852c699a93bbd36b55c0bd5ca14825d07d08d2621b400fce83ae68a72ad19991f7ef2f80204a659aa9c1d542d298dfe2bf983f0e8bba9dd1306df3c01755bc194b596db7e645f8184152e2091cac84773b34114c5e1bb6cf8a2dd4e7cbe23ad24e0f2a31730", 0x92}, {&(0x7f0000000bc0)="591916ba3f13270d439a4353e49237", 0xf}], 0x5, &(0x7f0000000c80)=[{0x58, 0x1, 0x3, "589a35bf9c82276a016d5c8f5250ff60499a58f11e74fee0c1fe4f9b9f69131179dc08600f4f228391bf00b18d39c7b49f0772f9970e0e536ea96b1d258857829fc752affb"}], 0x58}, 0x20008020) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000980)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x2, 0x2, 0x1, 0x0, 0x7}, {0x3e, 0x2, 0x1, 0xf, 0x81, 0xfffffe01}, 0x7, 0x80000001, 0x482}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) recvmmsg$unix(r4, &(0x7f00000041c0)=[{{&(0x7f0000000300), 0x6e, &(0x7f0000002a00)=[{&(0x7f0000000380)=""/169, 0xa9}, {&(0x7f0000000440)=""/240, 0xf0}, {&(0x7f0000000540)=""/202, 0xca}, {&(0x7f0000000640)=""/204, 0xcc}, {&(0x7f0000000740)=""/169, 0xa9}, {&(0x7f0000000800)}, {&(0x7f0000001940)=""/4096, 0x1000}, {&(0x7f0000002940)=""/169, 0xa9}], 0x8, &(0x7f0000002a80)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}, {{0x0, 0x0, &(0x7f0000002c80)=[{&(0x7f0000002ac0)}, {&(0x7f0000002b00)=""/64, 0x40}, {&(0x7f0000002b40)=""/198, 0xc6}, {&(0x7f0000002c40)=""/44, 0x2c}], 0x4, &(0x7f0000002cc0)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x78}}, {{&(0x7f0000002d40), 0x6e, &(0x7f0000004140)=[{&(0x7f0000002dc0)=""/4096, 0x1000}, {&(0x7f0000003dc0)=""/230, 0xe6}, {&(0x7f0000003ec0)=""/219, 0xdb}, {&(0x7f0000003fc0)=""/182, 0xb6}, {&(0x7f0000004080)=""/131, 0x83}], 0x5}}], 0x3, 0x1, &(0x7f0000004280)={0x0, 0x989680}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@ipv6_newaddr={0x70, 0x14, 0x400, 0x70bd2b, 0x25dfdbfd, {0xa, 0x20, 0x80, 0xfe, r5}, [@IFA_TARGET_NETNSID={0x8, 0xa, 0x1}, @IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}, @IFA_ADDRESS={0x14, 0x1, @local}, @IFA_LOCAL={0x14, 0x2, @loopback}, @IFA_LOCAL={0x14, 0x2, @remote}]}, 0x70}}, 0x41) 4.37279947s ago: executing program 3 (id=3045): ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000680)={0xffffffffffffffff, &(0x7f0000000580)='\x00', 0x20000, &(0x7f00000005c0)={@_ha_fsid={[0x8]}, {0x1, 0x2, 0x8718, 0x4}}, 0x30f, &(0x7f0000000600), &(0x7f0000000640)=0x8}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x1f, 0x4, &(0x7f00000001c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7b}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) getsockopt$bt_hci(r0, 0x0, 0x2, &(0x7f00000007c0)=""/241, &(0x7f00000008c0)=0xf1) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x1e, 0x4, 0x0, 0x0, {0x7}}, 0x14}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="09000000040000000004000008"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000200)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={r3, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f00000001c0)=[0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0], 0x0, 0x4f, &(0x7f0000000280)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000002c0), &(0x7f0000000300), 0x8, 0x6e, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x2b0, 0x118, 0x11, 0x148, 0x118, 0x0, 0x218, 0x2a8, 0x2a8, 0x218, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@addrtype={{0x30}, {0x10, 0xa, 0x3}}, @common=@unspec=@cluster={{0x30}, {0x2, 0xfff, 0x2}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0xfffffffc, 0x19ecd463}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000004c0)=r5, 0x4) connect$can_j1939(r2, &(0x7f0000000780)={0x1d, r4, 0x2, {0x0, 0x0, 0x4}, 0x2}, 0x18) socket$packet(0x11, 0x2, 0x300) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000040)='./file0\x00', 0x0, 0x10}, 0x18) 4.25423805s ago: executing program 3 (id=3046): r0 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x1, &(0x7f0000000200), 0xd) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010025bd7000fbdbdf250100000006000600234e000014000200776730"], 0x30}}, 0x20000880) r3 = syz_init_net_socket$ax25(0x3, 0x3, 0xce) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000000)=@netrom={'nr', 0x0}, 0x10) 1.532836298s ago: executing program 3 (id=3056): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000007c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}]}, &(0x7f00000005c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000440), &(0x7f0000000040)=@udp=r0}, 0x20) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r3 = socket$key(0xf, 0x3, 0x2) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000080)=0xe4e, 0x4) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x1c, 0x2e, 0x1, 0xf0bd26, 0x25dfdbfc, {0x4}, [@typed={0x8, 0xc, 0x0, 0x0, @fd=r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 1.529984753s ago: executing program 5 (id=3057): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000000700)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c9f4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75055df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83766b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b556381768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225c380fac12f8205d182f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42ddd5f393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05bea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d96ee1b84bb64b14aebc6b5194c55dd6890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b07838a3ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8dc0d472672286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8455029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a82a6ef09d0ed9829dec16ab67a4f59a504e09f55ab82bbd405087a17a229a149c53ee9145500db213cb36489a10957739e481a756e65bde579bbbfb404213f661eeaaffacbcfbfd60b1a715c366da2b37ac7e9e3033f8ec04db1c2412e02ccd0617d9fb646c4897750d068c936c3558a94b05d7c65c0d458c0d70d0aa864bc1e324d3f69b1b4061627da875a4b5c2668ab0990623fe6f3b54cd1c79da4baf256f88750c18486330589473e267fa44e220cf40db662b570c2a2fbba9a34a3dd7bbd8368fe506daa62b45797d4b397905a69e58eb436c08cc78963197adb1b16ad83a1a9b420e74c6bcdf1ed0b306141a83bf1268e954ad069257fbfaa1a7ea582badc1a7f2a5b0965f3535872d85c0bc3a233a3ea85df6a8ed76f0f803d54b7bef77d8ea71621f8a78dd17c3b58c5c7476ed6191acbb949e77f7cac81c543f7751e5e10000000000000000000000000000000002a3788ce6cbce247b066b88b554a81c7e46d38514a02ecdab3490a63ab34a56f80456d33605711ed42fa56f0b6324f22e1d98cf4d84773df73bd314ee314c65818c3faf38329f8b3453ab43727ba1d3bec55a52573fadc5dc9104a839e78e2ec73ee4a8cd3d7c5870b4edaffbc53025206074cd1df0a125be1dd07c5e9b0e30d220259c8b7e7fb5b2e8219a1688438c348c3e0cd4e5f2c151fd4634598f8a5aacb5a811f13c208749935ab3ca12e95f0267b3cc1cc315f38b31417a0f94a61e30a673872bca5f1bd4a2bca64"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x14, 0x10, 0x0, 0xfffffd5a}, 0x48) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wg1\x00', &(0x7f0000000000)=@ethtool_cmd={0x4a, 0x81, 0x9, 0x1, 0xc6, 0x5, 0x47, 0x6b, 0x3, 0x5d, 0x2, 0x1202, 0x9, 0x3, 0x9, 0x129, [0x9, 0xfffffffd]}}) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="2f0000001400000004"], 0x20) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x20000000ec071, 0xffffffffffffffff, 0x4000) r1 = socket$tipc(0x1e, 0x2, 0x0) ioctl$SIOCGETLINKNAME(r1, 0x89e0, 0x0) 1.293625307s ago: executing program 1 (id=3060): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008800800030001"], 0x48}}, 0x0) (async) pipe(&(0x7f0000000140)={0xffffffffffffffff}) (async) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x7fff}, &(0x7f0000000140)=0x8) (async) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) (async) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000100)) (async) ioctl$PPPIOCSCOMPRESS(r2, 0x4010744d) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000400)) 1.293307187s ago: executing program 5 (id=3061): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, 0x0, &(0x7f0000000340)=0x4b) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r2, 0x0, 0x2, &(0x7f0000000000)=0x5, 0x4) (async) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e24, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x1}, 0x1c) (async) sendto$l2tp(r2, &(0x7f0000000040)="932b2f6c13622fcc878e5d0e99069baa64d21ead559df88825db6d78bfa137fb718203c5a5d688487533f9f851d6685756a8887a6e06be7ffd95b055d8d5c6c7b7bcea8d38e752f2c85d4db44aa265a6363f93547a37087a5e6391812842c698aef885ad9779f01ffee8439c6900b09d0df5dbd1e69f774bc17c72458f5d4d67e60db71aa33cbd97eee6009b3203e6092173193ec05750fb12f7f20548ae572f08e12bca3041f0eddcd878a523bd1bb93d8822004932a38bce34d008a55a6551d2f2496cf769c4a70bd2989be06c0e598bf7e0c0b7eaa76ff31e57a3ce750009ec522fb11799c299b8", 0xe9, 0x4000000, &(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, 0x10) 1.095130348s ago: executing program 3 (id=3063): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x3a, 0x301, 0x70bd25, 0xfffffffc, {0x10}}, 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x8000000) (async) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x3a, 0x301, 0x70bd25, 0xfffffffc, {0x10}}, 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x8000000) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) socket$kcm(0x29, 0x7, 0x0) 948.903931ms ago: executing program 6 (id=3064): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) socket$netlink(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd26, 0xfffff000, {0x0, 0x0, 0x0, r8, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0x9b}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000002c0)={@val={0x0, 0xf9}, @void, @eth={@broadcast, @local, @void, {@ipv6={0x86dd, @tcp={0x8, 0x6, "9e33e0", 0x14, 0x6, 0x1, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {[], {{0x4e22, 0x4e20, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x2, 0x7, 0x0, 0x8}}}}}}}}, 0x4e) 934.138411ms ago: executing program 3 (id=3065): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002100010000000000000000000a0000000000000000000000050019"], 0x24}}, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='.', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket(0x10, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x4, 0x4, &(0x7f0000000280)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x8c}, [@call={0x85, 0x0, 0x0, 0x6b}]}, &(0x7f0000000000)='syzkaller\x00'}, 0x90) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r10, @ANYBLOB="0c00990000000000000000000800a102ffff0000080026008d03000008009f"], 0x40}}, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r5, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x134, r9, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1, 0x2d}}}}, [@NL80211_ATTR_REKEY_DATA={0x40, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x4}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x4}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="6c5ab04b9ecc6878eef91473fa983e5166d22d39d329d2345eec47eee83be5a9"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x32b10bd4}]}, @NL80211_ATTR_REKEY_DATA={0xbc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "04f2d367325cc63c"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="b3610d5d8eb1391957a330519ddb83e142330204de19dd6ee4cee144960d9969"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="b23881abb9be08bda2921eae6a6ca53f175defc28224a4380b559eb45b40230f"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xb87}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="0c3118d8f6363fb1db78b47842283b20d55339a576aa47d3120670e1bb301d43"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="1e196d445acccbcfd907cb28e6545b584a3b02a23215e7e46bb9920939ce1a83"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="76ebe6ee6df832be7e7ca994aea5e107"}]}, @NL80211_ATTR_REKEY_DATA={0x18, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="f843d8047fbefbdf81ca622d08e63331"}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x44011}, 0xc810) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)={0x34, r6, 0x1, 0x70bd29, 0x4, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xca}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4804}, 0x20040080) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)=@newqdisc={0x90, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x5, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1000]}}}}, @TCA_RATE={0x6, 0x5, {0x81, 0x6}}]}, 0x90}}, 0x20000000) 864.680758ms ago: executing program 4 (id=2958): r0 = socket$packet(0x11, 0x3, 0x300) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000140)=r1, 0x4) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc010) (async) r2 = socket(0x40000000015, 0x5, 0x0) bind$inet(r2, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) r3 = socket(0x15, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x2715, 0x0, &(0x7f0000000000)) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@delpolicy={0x5c, 0x14, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@multicast1}}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x48040}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000005b80)=@delchain={0x24, 0x26, 0xf31, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {0xfff3}}}, 0x24}}, 0x0) (async) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000940)={0x0, 0x3e1, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081084e81f782db44b904021d080006067c09e8fe55a10a0015400a00142603600e120800160000001001a8001600a400014003000000036004fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0x6000}, 0x0) (async) recvmmsg(r4, &(0x7f0000004880)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x2100, 0x0) 748.954801ms ago: executing program 1 (id=3066): syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x3) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_ERSPAN_DIR={0x5, 0x17, 0x4}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x48}}, 0x0) r1 = socket(0x400000000001, 0x5, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={0x1, &(0x7f0000000100)="89e98e0fc365f2f498dabbdd31664d9b1ba22c409401671cdd6d8018198347d9f876f33f2dcd8004a10143f370f34ea8040d3e2b49ee363898792d549f5e87589b9c55d5361ee0f5ad5a7f2a0ecdc96c95f120245c48f7fe887e31fe428a4aee4e990879a2e24792df343be4eef07b9e7cc561f0e9edadcf800e21d95e6c2a15e46d642b613f9f81cfcd5d6058b85e5ccc7f93fd4414106010be0e9e073a285cc2f48d1da27ae9f5ee4a6b13f0ef6adc58d61203cfa31a6a0bdb42a3a13af381c33c636d", &(0x7f0000000200)=@tcp=r1}, 0x20) 727.461778ms ago: executing program 4 (id=3067): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f00000000c0)=0x400001, 0x4) unshare(0xa020480) unshare(0x6020400) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x2, 0x9, 0x0, 0x9, 0x2, 0x0, 0xffffffff, 0x25dfdc01}, 0x10}}, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x1000001, 0x8013, r1, 0xf6690000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e22, 0x8, @ipv4={'\x00', '\xff\xff', @empty}, 0x26}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) writev(r3, &(0x7f0000000080)=[{&(0x7f0000000100)="5514377d925cfac68fa5e905ccd2593d6d0f37d8422f54e9fbc8881033b7e59b0ce2a896d5c195741b964850ca7444d0926630715341d8ef0611e595745d05bb0484b65adfe33ed3639e7722ef74b92df54d886779faf3deee20a0724362221a9fc4a7f86a07042dd5875131ff0d57107a01db1964be5dd15d8d3be6fd3209f87210f2e9de528884797a1c43157c6f56349e263c79cb13df66409f7cd33b9ebb000fd19d5521eab9eb89ad56a45108b1d3179077413d0e16044c0fe0", 0xbc}, {&(0x7f00000003c0)="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", 0xf44}], 0x2) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffa000/0x4000)=nil, 0xc00, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0}, &(0x7f0000000380)=0x40) 713.50614ms ago: executing program 1 (id=3068): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000020000100000000000000000002001400000012000000000008000200e0000002080017004e224e2308000b0000000000"], 0x34}}, 0x0) (async) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) (async) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) (async) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(cast6)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) (async) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000004e40)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000440)=""/135, 0x87}], 0x1}, 0x6}], 0x1, 0x10000, 0x0) sendmmsg$alg(r4, &(0x7f00000000c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)="5cafbb19415082dc2d68ffed07036d0d5efb9b5b4aa4e9a4d27912e19aae487301239d3937561ccd182963aaec4f0da35db9774e343ed1481e4654a186e66f54441b06277fdce96084f808db6c16958d2e26bc2aed9ff05a186dd1275539ebe1290f9fe485bef994029e46888f17e178c7fee7c96eccf5ba47c10a0279e7ca7af27cc9916bd8c60f", 0x88}], 0x1, 0x0, 0x0, 0x8000}], 0x1, 0x8810) (async) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x5c, r2, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xa}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7}, @MPTCP_PM_ATTR_ADDR={0x18, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @empty}}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x20040011) 588.917658ms ago: executing program 6 (id=3069): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r1 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000200)={0x3, 0x4}, 0x4) sendmsg(r0, &(0x7f00000014c0)={&(0x7f0000001100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x2, 0x2, 0x3, {0xa, 0x4e20, 0x7, @mcast2, 0x6}}}, 0x80, 0x0}, 0x20008000) syz_init_net_socket$llc(0x1a, 0x2, 0x0) (async) socket(0x11, 0x800000003, 0x0) (async) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000200)={0x3, 0x4}, 0x4) (async) sendmsg(r0, &(0x7f00000014c0)={&(0x7f0000001100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x2, 0x2, 0x3, {0xa, 0x4e20, 0x7, @mcast2, 0x6}}}, 0x80, 0x0}, 0x20008000) (async) 588.069289ms ago: executing program 3 (id=3070): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) ioctl$AUTOFS_IOC_READY(r0, 0x400442c8, 0x200000f3) (async) r1 = socket$inet_sctp(0x2, 0x5, 0x84) close(r1) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x1574, @private1={0xfc, 0x1, '\x00', 0x1}, 0xc83}]}, &(0x7f0000000080)=0x10) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='F', 0x1}, {0x0, 0xe0}], 0x2, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0xa, 0x4, 0x28, 0x200000b, r3}}], 0x20, 0x2400e044}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x7, 0x8, 0x22}, 0x48) (async) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000005c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) (async) r6 = socket(0x1, 0x3, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r4, &(0x7f0000000380), &(0x7f00000003c0)=@tcp=r6, 0x3}, 0x20) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r6, 0x28, 0x1, &(0x7f0000000000)=0x8, 0x8) 571.420139ms ago: executing program 4 (id=3071): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000380)="416fde28488b6f705d72ed022415b563ce0a7c36c3192f8e5996e5fb20ec21020c49bfac9d408e7544263ae538a28d27b68137ea6d68ed0285d63d31d4bbf9ae3beadc178c7e2b054995fa4e8bc8ab517609f7fa598aa2ec0806aae427f20afb4651e2fef4b936884b7a1dc779e834afd80e9c72badab6811a4fa15e3d81a63ef32fb40d8f465d1825d7c5c28a7d15660e212aa0b88d7cb12863ff9472c747f501a744b75cc05d7d8dd3cae20790f823582e69c7d03390e91c4a2cb2d531a90469a3d9825f4536", 0xc7, 0x20000051, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x12}, 0x1c) (async) setsockopt$inet6_int(r1, 0x29, 0x31, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x1b}}, &(0x7f0000000480)='GPL\x00'}, 0x80) bind$can_j1939(r3, &(0x7f0000000340)={0x1d, r4, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$can_raw(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@can={{0x2, 0x0, 0x1, 0x1}, 0x5, 0x0, 0x0, 0x0, "a40f78cb84bb1874"}, 0x10}, 0x1, 0x0, 0x0, 0x20000004}, 0x80044) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_int(r5, 0x1, 0x25, &(0x7f00000000c0)=0x10001, 0x4) sendmmsg(r3, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000005c0)="e009bc297d2688e0261e51095c9e380c5899e11a13bb", 0x16}], 0x1}}], 0x1, 0x41) bind$can_j1939(r3, &(0x7f00000000c0)={0x1d, r4, 0x3, {0x0, 0x1, 0x1}}, 0x18) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r4, {0xb, 0xfff2}, {0xfff1, 0xffff}, {0x2, 0xe}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000240)=0x80000000, 0x4) 485.089452ms ago: executing program 1 (id=3072): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xcf, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[], 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000001600010a"], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0) recvmmsg(r0, &(0x7f0000002a40)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x40002000, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_addr=@rand_addr=0xc0586300, @private=0xffffffff}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc00000019000d9fb0ca000000000000e0000002000000000000000000000000ac1414aa00000000000000000000000000000005000000000a0010"], 0xfc}}, 0x20000000) sendmsg$nl_xfrm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="cc0000002100010027bd7000fefffffffc020000000000000000000000000000fc020000000000000000000000000001dffc0000000000020a00e00000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="020000000000000050001100fe800000000000000000000000000011ac1414aa000000000000000000000000ac1414aa000000000000000000000000fe8000000000000000000000000000bb3c000000000000000a000a002c001300fe8000000000000000000000000a002bfe880000000000000000000000000101000000000a000000"], 0xcc}, 0x1, 0x0, 0x0, 0x800}, 0x0) recvmmsg(r0, &(0x7f000001ef40)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x12100, 0x0) 388.48923ms ago: executing program 6 (id=3073): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuset.effective_mems\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="030700000000000000000800000068000480040007801300010062726f6164636173742d6c696e6b00001900078008000300000000000800020000000000080003000000000008000200000000000800030000000000040004"], 0x7c}}, 0x4) sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000500)={&(0x7f00000001c0)={0x30c, r1, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x60, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "3d888d17aee2528319346423d77d9d7e3d52c356fa414bc987a32cf45022"}}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xc}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7e}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xd}]}, @TIPC_NLA_NET={0x6c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xb3}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xf3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1ff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffffffffffffff7b}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x400}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xf2}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1f}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x94}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x400}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x810}]}, @TIPC_NLA_LINK={0x84, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x349}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}, @TIPC_NLA_BEARER={0x64, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x75fb}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0xfffffff8, @local, 0x3}}}}, @TIPC_NLA_BEARER_NAME={0x9, 0x1, @l2={'eth', 0x3a, '\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xff}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4e5}]}]}, @TIPC_NLA_MEDIA={0x5c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd427}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}]}]}, 0x30c}, 0x1, 0x0, 0x0, 0x804}, 0x40000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500060008000000050003000500000005000300fd00000008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r4], 0x90}}, 0x0) 338.757741ms ago: executing program 6 (id=3074): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r1, 0x10, 0x70bd29, 0x25dfdbfe, {}, ["", "", "", "", "", "", ""]}, 0x14}}, 0x40000) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="18060000000000000000000000000000711076000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x94) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100fdffffff000000001e00000008000300", @ANYRES32=r5], 0x5c}}, 0x0) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x54, r2, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x28000001}, 0x0) 313.091733ms ago: executing program 5 (id=3075): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000003, 0x1010, 0xffffffffffffffff, 0xe47dc000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x54}}, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000140), 0x3) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079109000000000007b0ae8"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0xfeffff, 0xe80, 0x3f000002, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "2d9421fe8a4c9563", "cf6ff9ff337ed301000100c747fbbfc1", '\x00', "4f9e86d67a8426bd"}, 0x28) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xffffff9b}], 0x1, 0x1) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f5d937e5523", "4705a7b6113b967d7314f7201eb2babf", "1d1cbe23", "ecba06893bcdc493"}, 0x28) recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x1, 0x0, 0x0) sendmsg$AUDIT_DEL_RULE(r3, &(0x7f0000000cc0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000c80)={&(0x7f0000000840)={0x428, 0x3f4, 0x2, 0x70bd29, 0x25dfdbfb, {0x5, 0x2, 0x3e, [0x3e, 0x40000, 0x0, 0x284, 0x5, 0xff3, 0x8, 0xff, 0x1, 0x2, 0x80, 0x0, 0x5, 0x0, 0x4ba2, 0x8, 0xbc, 0x401, 0x14, 0x40, 0x8, 0x904, 0x485d, 0x8, 0x5, 0x1000, 0x9, 0x401, 0x1ff, 0x1, 0x8, 0x9, 0x9, 0xffffffff, 0x4, 0x6b, 0x8000, 0x7, 0x2, 0x1, 0x2, 0xfffff001, 0xb, 0x44, 0xffff, 0x6, 0x4c1, 0x2, 0x2, 0x2, 0xffffff81, 0x9, 0x8, 0x4, 0x9, 0x4, 0xd, 0x1, 0x9, 0x5, 0x0, 0x9, 0x2, 0x9], [0x80000001, 0x9, 0x0, 0x76c9, 0x5, 0x2, 0x5, 0x6, 0xffff, 0x2, 0x5, 0xdc6c, 0x80000001, 0x9, 0xfff, 0x8, 0x1000, 0x9f, 0x3, 0xfffffff8, 0xffff, 0x2, 0x0, 0xfff, 0x3, 0xc, 0x8, 0x0, 0x800, 0x5, 0xabe9, 0x0, 0x8, 0x80, 0x3, 0x7fffffff, 0x7f, 0x101, 0x3, 0x1, 0x0, 0xa, 0x8, 0xffff, 0x4, 0x200, 0x9, 0x3ff, 0x7, 0x1, 0x94, 0x5, 0x581f, 0x4, 0x7, 0x491890ac, 0x5, 0x9, 0x3ff, 0x6, 0x1000, 0x6, 0xb85f, 0x6], [0x3, 0xffffeb41, 0x9, 0x3, 0x9, 0x3, 0x80, 0x4, 0x3, 0x80000001, 0x8, 0x400, 0x5, 0x7, 0x1, 0xc, 0x0, 0x9, 0x0, 0x4, 0x1, 0x5, 0x7c, 0x6, 0x5fa5, 0xc, 0x4, 0x6, 0xb, 0x9, 0xa9, 0x9, 0xa9, 0x1f, 0xfffffffb, 0x8, 0xfffffffd, 0x4, 0x0, 0x8, 0x8, 0x4, 0x200, 0x2, 0xc6, 0x6, 0x2, 0x5, 0x0, 0x10, 0xb, 0x7, 0x6, 0xe4, 0x5, 0x0, 0x9, 0x3000000, 0x1, 0x1, 0x5, 0x7f, 0xe07c, 0xd], [0x9, 0x7, 0x7fffffff, 0xfffffff7, 0x101, 0x8, 0xfffffffc, 0xff, 0x0, 0xb713, 0x44, 0x6, 0xfffffff9, 0x2, 0x515, 0xff, 0x14, 0x7, 0x0, 0x6, 0x8, 0x5, 0x9fd, 0x6, 0x1, 0x0, 0x5, 0x6be8, 0x1, 0x6, 0x51adab5a, 0x49, 0x5, 0x1, 0x6, 0x3, 0xf, 0x1, 0x7, 0x4, 0x0, 0xff, 0x401, 0x800, 0xfff, 0x1, 0x2a9, 0xffff, 0x7, 0x4, 0x7, 0x48b2, 0x10, 0x2, 0x1ce, 0x200, 0x2, 0xfffffffa, 0x6, 0x1ff, 0x0, 0x4, 0xdb, 0x1], 0x7, ['\x00', ')*\\]\x00', '\x00']}, ["", "", ""]}, 0x428}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000085) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f00000000c0)=0x8, 0x4) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000003, 0x1010, 0xffffffffffffffff, 0xe47dc000) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x54}}, 0x0) (async) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000140), 0x3) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079109000000000007b0ae8"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000702000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff6d6405000000000065040400010000000404000001000000b7050000400000006a0a80fe000000008500000053000000b7000000000000009500001000000000a80501363034fdb117168bd07ba00af739d1a1ee35fe163a255c33282044b32495ef8ab9adc67ccc945f105d802f5132143c0a9fc7a84452569957c1002ed7d4d8e17f791f4798c8eb483e9973320d046c3126c6afcfd84de03352c69b3edff5be26f8ffa5f8f2879021c2ea53ea79acd7fb38dd1abb75aa393cea26d465637d11f705000000473e7b7c4ae7dd5e4dee88518ddf12dddd4bfc6a4dd3b6beba51074229b0d4b504516c4c3e5d1aa044d8d00728141cd67bcd68f253288e655c6b34e02e90637ef2912ba7de26ff2357ef17f95a25780c3a057844f226ef4e912f01a201e694e3806e8c70e8b69524cd19f7525d8d66bb766f7f3f918c86a70252236800001897133af94a5a4cfc794d8b9d7c33632152c48eaf302f0b2e0c252b00000000000000006f1bbefbe08de65e3762e194ba4cae8b13535d7d11ee917bca4885bbf597a14ab2458efce78510d86272d88e0c8088f404f011289ebc5623faa1182632161e073af1d69a2e36bed435000025ecd201d2ffb0a7fa4f5d11060cdcf071defd0a8be3b69ce3e4f361aca75827426dde87fdf4617222674280f55e98107450c19b9d86329bd5b4697336112b0b8754ce3574046bf6114d1a88597850b77378fa8edfff8faf8b8ec039bab385cac0535373bb8fab90539b1a65ddff841eb671f3faf37ebdfccea0c002ad2b42047c9ec43193ccf617dbf8a12b4f189edbf9fb7c42b1f435ccd4d96822e6b70100912c92e3943e9c4f45d8bcd528fa8a3ea847f10e9b2506f3bb506f1d7fbde8010000000000a073d0de5538ab42e170b3baae34c35987b0dda497ac3f5e97e6e6aeea15c6d5ed24310100000003bb6030f84b63aaf8690db0221b1705c501f802ff59b4e683efa4b6e77e042072bd2ac37d413008ec9eb8166f6e28b49a77ed91befc65315896f88a8fb1dd679fb4c515f8b7a5b7aca6a251a89d47b728502f7e621cc0e3ba04000000c149ee6601728c750d304197c22da8650579475afd96187d881e93b42a5fdfd686d8900c44c67133dad58037fda65885a15a429edfe3027a5ebf95254744f10fd607bc3300b94932b8d944e0b083bbd86b19cb074577a25ff581d92af08a06f857310a2f14326b0b290205e91a682e00c8762cbc6b904c980eef6e6a1def886c95676dce6a8194479700a02b92bdc8d05eae1f24fdd7b80d1bb404c22f681594de2ebb9687219de8d73ac83823feb402a2415a9850d5f0183ec67be96dc0e4c2d7acf1dfe79d6771903b76e21190c22d641030e1ddacf006c3116e1803af20a5f2b5f7ba58aca5bcabbbab24414a3810788e5503e4be66d683daac5f0001000077339b4200000000108a3c87b19d5b9a00c75d84a92d6dcf00ba96edf35ede0e2b57c26e94801b498924166bde57d5f24258d9fd028096cc15a8b912b494d4bbe609031ea1ca65a548971d5d16296dd08e020000007a27310d5d01f8a8a0f5212d7f628f554afea715ccbc66cbb1016490f5d579308cb3188cf2fcaf67e0c16443d526ba4b968f07ae362c2133c168313e84beb871203880dd453c45d0a137d7f5a8b039dbfa62fb2b4214f8e69f967bf1fbd89e77fcca110000000800000000000000f8877994ebdc35f7efd41e3babd9b3782edd6776d5b6cb4ecd72c9de9b5503747d71440378cf2c2c7ea2dc5febb654a867f853713cf4c0bb322fbbe446d18dee4c821275ef18259cafc346c8b3b9fb0f3adcf6ea310a6b9a3f59e29a5909ea047fb61affb4bc8bbea1fb761b8933795b1a91358a7791aa843d07020e8bb6fc18458c49ac6313e7165b7d9f65e94a62b69f1011b94340cdb7303f01e5cdb5682ddf73d65c3de1d88dd7496d6345d5b9de0223988056a53e19a8b96b9640bc6c09d3c2ff894d626b57c776ed53f94d5e22ff148061b37f72bd92924cb1d0a725e19b264346b7cae0251a850de78316503f3c3d395c7e3f04fc8d52583327cd2341ce4b2d092815376299686f41353b2823814563011a2223b9dd00000000000000000000003a131374a3371cb3e2a9bb4d798b91cefa444501f40b7c9589e8c0bb6c82123d2b45ce905d0903b32ecf30e828c71a07a83f3275f3d661d1af0ffbd5d7f0"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0xfeffff, 0xe80, 0x3f000002, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "2d9421fe8a4c9563", "cf6ff9ff337ed301000100c747fbbfc1", '\x00', "4f9e86d67a8426bd"}, 0x28) (async) pipe(&(0x7f0000000040)) (async) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xffffff9b}], 0x1, 0x1) (async) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f5d937e5523", "4705a7b6113b967d7314f7201eb2babf", "1d1cbe23", "ecba06893bcdc493"}, 0x28) (async) recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x1, 0x0, 0x0) (async) sendmsg$AUDIT_DEL_RULE(r3, &(0x7f0000000cc0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000c80)={&(0x7f0000000840)={0x428, 0x3f4, 0x2, 0x70bd29, 0x25dfdbfb, {0x5, 0x2, 0x3e, [0x3e, 0x40000, 0x0, 0x284, 0x5, 0xff3, 0x8, 0xff, 0x1, 0x2, 0x80, 0x0, 0x5, 0x0, 0x4ba2, 0x8, 0xbc, 0x401, 0x14, 0x40, 0x8, 0x904, 0x485d, 0x8, 0x5, 0x1000, 0x9, 0x401, 0x1ff, 0x1, 0x8, 0x9, 0x9, 0xffffffff, 0x4, 0x6b, 0x8000, 0x7, 0x2, 0x1, 0x2, 0xfffff001, 0xb, 0x44, 0xffff, 0x6, 0x4c1, 0x2, 0x2, 0x2, 0xffffff81, 0x9, 0x8, 0x4, 0x9, 0x4, 0xd, 0x1, 0x9, 0x5, 0x0, 0x9, 0x2, 0x9], [0x80000001, 0x9, 0x0, 0x76c9, 0x5, 0x2, 0x5, 0x6, 0xffff, 0x2, 0x5, 0xdc6c, 0x80000001, 0x9, 0xfff, 0x8, 0x1000, 0x9f, 0x3, 0xfffffff8, 0xffff, 0x2, 0x0, 0xfff, 0x3, 0xc, 0x8, 0x0, 0x800, 0x5, 0xabe9, 0x0, 0x8, 0x80, 0x3, 0x7fffffff, 0x7f, 0x101, 0x3, 0x1, 0x0, 0xa, 0x8, 0xffff, 0x4, 0x200, 0x9, 0x3ff, 0x7, 0x1, 0x94, 0x5, 0x581f, 0x4, 0x7, 0x491890ac, 0x5, 0x9, 0x3ff, 0x6, 0x1000, 0x6, 0xb85f, 0x6], [0x3, 0xffffeb41, 0x9, 0x3, 0x9, 0x3, 0x80, 0x4, 0x3, 0x80000001, 0x8, 0x400, 0x5, 0x7, 0x1, 0xc, 0x0, 0x9, 0x0, 0x4, 0x1, 0x5, 0x7c, 0x6, 0x5fa5, 0xc, 0x4, 0x6, 0xb, 0x9, 0xa9, 0x9, 0xa9, 0x1f, 0xfffffffb, 0x8, 0xfffffffd, 0x4, 0x0, 0x8, 0x8, 0x4, 0x200, 0x2, 0xc6, 0x6, 0x2, 0x5, 0x0, 0x10, 0xb, 0x7, 0x6, 0xe4, 0x5, 0x0, 0x9, 0x3000000, 0x1, 0x1, 0x5, 0x7f, 0xe07c, 0xd], [0x9, 0x7, 0x7fffffff, 0xfffffff7, 0x101, 0x8, 0xfffffffc, 0xff, 0x0, 0xb713, 0x44, 0x6, 0xfffffff9, 0x2, 0x515, 0xff, 0x14, 0x7, 0x0, 0x6, 0x8, 0x5, 0x9fd, 0x6, 0x1, 0x0, 0x5, 0x6be8, 0x1, 0x6, 0x51adab5a, 0x49, 0x5, 0x1, 0x6, 0x3, 0xf, 0x1, 0x7, 0x4, 0x0, 0xff, 0x401, 0x800, 0xfff, 0x1, 0x2a9, 0xffff, 0x7, 0x4, 0x7, 0x48b2, 0x10, 0x2, 0x1ce, 0x200, 0x2, 0xfffffffa, 0x6, 0x1ff, 0x0, 0x4, 0xdb, 0x1], 0x7, ['\x00', ')*\\]\x00', '\x00']}, ["", "", ""]}, 0x428}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000085) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) (async) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f00000000c0)=0x8, 0x4) (async) 257.190939ms ago: executing program 4 (id=3076): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f00000000c0)=@assoc_value={0x0}, &(0x7f0000000000)) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000040)={0x8d, 0x2, 0x9, 0x87ab, 0x7a1}) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000300)=@assoc_value={r2, 0xfffffffa}, &(0x7f00000003c0)=0x8) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000000), 0x4) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400c775a100efee0109c92300000000000000000000000c0da8990a44152449c43aabee78d553b938d8214090786812cb8de7f6ee4a54af0bb6aacd0be9a7f7c35fb7ec332033b06bb36adb4d8efb21f6a9bd081133761de6d1dd4a2f0a7c56a07060a3e287cf1bf3449b892f6758beb8b21eef37a42a60fdc0c3d6bf807876a1db7317a5c1b6d1cdeca21545b6451637cb276a793b02f3722574465e7b70e0bf78439374606558901184cdf522a2d8c6b2d0f7aa83629a5b5766b2ae4528752dd6e8893191b4f181a0f80a4dbeed74f24ec7afe71d3e", @ANYRES32=0x0, @ANYBLOB="00000000800000002400128009000100620400000000000000000280050001000600000008000b00", @ANYRES32=0x0, @ANYBLOB, @ANYRES16=r2], 0x44}}, 0x40840) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000100)={r2, 0x5a}, &(0x7f0000000140)=0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000000}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000080)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000fedbdf25030000005800018044000400200001000a00000000000000fe8000000000000000000000000000aabf090000200002004a00000000000005fe8000000000000000000000000000bb000000000d0001007564703a73"], 0x6c}}, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a80)={&(0x7f00000010c0)={0x544, r4, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'xfrm0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_NODE={0x128, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x8d, 0x3, "8b0b28d2004e8404f9876824bb40d546263f4023da29e06c50c69bdd354c59644a789650ed3569b53bfdc8fb0f35dea0ea77792acaf31f2c8d8398c05d1d917954d401d19c0cfb561fdb140d0db62cdd0944c38ee2b875a51c7b66bdd8ce5b7fd9bd97703397cd80c04f40d1472decbdb28631fc1a51b2b4769fb5110f4cc1423471078d70c52e6939"}, @TIPC_NLA_NODE_ID={0x53, 0x3, "76f7f6b62b2cb14d3737017e4ba8b68de859455b8f62be4b08077524cf7535eb6a4975f0af32140f18c350ed711ceb09467e1a2af207605d0f66b826d0c98354cfc8008bdb826bd219e399238090a8"}, @TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "1f1999b5fa6ca7eeedcb910bbec7f6d324b101204d7523"}}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x400}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x10}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xd7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x78}]}, @TIPC_NLA_MEDIA={0x68, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7d64}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_LINK={0x40, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}]}, @TIPC_NLA_BEARER={0x5c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x0, @remote, 0x1}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'ib', 0x3a, 'veth1_to_team\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7f}]}, @TIPC_NLA_LINK={0x120, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x557}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}, @TIPC_NLA_NODE={0x158, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xb7, 0x3, "3f756b8d3a8535a9153b44a1284f606e84a20d2ea2fbf6a183bb77f6505e0615eb01e7ced8246a9759c1c7b97e495c8e779b24d284d7688bda0053c371faa5f7831afbf080ba84b1470cf5030b544cb7384adbf6961db1d56129a803112c47c8bc75ca9e57130d936b538e5baf49cce5dc893c1903c7f936ac11b19d6d5f3c5200c1a61f9cd69e3d65068997dfdca4f141e8a5cd811720f606baba5189a2f144f3258d195579330bda137e241b924630ccc171"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x200}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "57d8c3f004e41b59e4a1fc7b6f457bd1660b5d0a"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x10}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "67646a0e1e831db80f5a7d6d2da915af3ee0c9ee3c"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}]}]}, 0x544}, 0x1, 0x0, 0x0, 0x8014}, 0x8040) 219.268683ms ago: executing program 1 (id=3077): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x3a}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x80) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x3a}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x80) sendmsg$rds(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000002140)=[@mask_cswp={0x58, 0x114, 0x9, {{0x7, 0x2}, &(0x7f00000020c0)=0xb354, 0x0, 0x7fffffffffffffff, 0x1, 0xc555, 0x7, 0x10, 0x6}}], 0x58}, 0x0) (async) sendmsg$rds(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000002140)=[@mask_cswp={0x58, 0x114, 0x9, {{0x7, 0x2}, &(0x7f00000020c0)=0xb354, 0x0, 0x7fffffffffffffff, 0x1, 0xc555, 0x7, 0x10, 0x6}}], 0x58}, 0x0) 154.392302ms ago: executing program 6 (id=3078): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000040)={@cgroup=r3, r3, 0x2f}, 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback=r3, 0x2f, 0x0, 0x0, &(0x7f0000000000)=[0x0], 0x1, 0x0, 0x0, 0x0, &(0x7f0000000200)}, 0x40) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback=r3, 0x2f, 0x0, 0x0, &(0x7f0000000000)=[0x0], 0x1, 0x0, 0x0, 0x0, &(0x7f0000000200)}, 0x40) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000240)={'nat\x00', 0x0, 0x0, 0x0, [0x3, 0x6, 0xa, 0x0, 0x7, 0xffffffffffffff64], 0x9, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {}], 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x108) (async) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000240)={'nat\x00', 0x0, 0x0, 0x0, [0x3, 0x6, 0xa, 0x0, 0x7, 0xffffffffffffff64], 0x9, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {}], 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x108) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_delrule={0x38, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'sit0\x00'}, @FIB_RULE_POLICY=@FRA_PRIORITY={0x8}]}, 0x38}}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000102000000000000004f0000000e0001006e657464657673696d0000000f0002006e657464658713696d300000080003"], 0x4c}}, 0x20000011) (async) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000102000000000000004f0000000e0001006e657464657673696d0000000f0002006e657464658713696d300000080003"], 0x4c}}, 0x20000011) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0) 12.719358ms ago: executing program 1 (id=3079): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) connect$netrom(0xffffffffffffffff, &(0x7f0000000340)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x4}, [@default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, 0x0, 0x40000) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), 0xffffffffffffffff) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$sock_netdev_private(0xffffffffffffffff, 0x8914, &(0x7f0000000000)) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000240)=@bpq0, 0x10) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bpq0, 0x1, 'syz1\x00', @null, 0x5, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0xca) bind$ax25(r4, &(0x7f0000000280)={{0x3, @default, 0x1001}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), r4) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000)) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x218}], 0x1}, 0x0) 0s ago: executing program 6 (id=3080): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001080)=ANY=[@ANYRESOCT], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xffffffff}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028005000e0040"], 0x44}}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b37, &(0x7f0000000080)={'wlan1\x00', @random="02001c00004a"}) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newlink={0x40, 0x10, 0x403, 0x0, 0x1000000, {0x0, 0x0, 0x0, 0x0, 0x235, 0x2881}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MTU={0x8, 0x4, 0x5}]}, 0x40}, 0x1, 0xba01, 0x0, 0x4000080}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) (async) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x12a0, 0x1100, 0x18c, 0x203, 0x1100, 0x19030000, 0x11d0, 0x2e0, 0x2e0, 0x11d0, 0x2e0, 0x7fffffe, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [0x0, 0x0, 0xff, 0xff], [0x7fffffff, 0xff000000, 0xff000000, 0xff000000], 'bond_slave_1\x00', 'bond0\x00', {}, {}, 0x84, 0x7, 0x2, 0x55}, 0x300, 0x10d8, 0x1100, 0x0, {0x1000000}, [@common=@unspec=@cgroup1={{0x1030}, {0x1, 0x0, 0x1, 0x1, './cgroup.cpu/syz1\x00', 0xfffffffc, {0x3}}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1, 0x8d, 0x74c}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1300) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="61103400000000006113380000000000bfa00000000000000700000008ffffffd50301001874004095000600000000006916000000000000bf67000000000000360607000fff07201706000020190000160300000ee60060bf050000000000007b650000000000006507f9ff01000000070700004ddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f17540faf80250aa20c669a5e12814cb1cea5d4601d295c45a6a0b9bdb7dd399703cac4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000400c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44221b235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10fd7ed6735154beb4000000000000000000000000004000bc00f6746a9709e7e78f4ddc211bc3ebe6bd9d2aca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43ea0ffb567b40407d000000210000000000000000005f37d8703f37ca364a601ae899a56715a0a62a34c1d926a0f6a5480a55c22fe3a5ac00000000000000000000000500002000000000fb79ea00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e14d90deae46e26c596f84eba90000000000000000fffb0000000082fb0d3cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4f6e9cc54db6c7205a6b06ff7f0000000000007f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6106f117b062df67d3a6473265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089e0b1c23c0f3cdad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631d22bad050e9856b48ae3a03a497c37758537650fe6db89da3c437dc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0af1cb3f1f815f8989d78854ca4d3116dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0453bedf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c29984864961a57ff52f657a67463d7dbf85ae9321fc28206c812439ab129ae818837ee15620789c524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2b4dc87b0da20000d9ef418df19e7a8c4c328be0ce91798adc2dca87ddd9d064e081383409ed2912c811ae63f03212a5331c2a4ead000000000000000000000000000000000000000000000000001386866b311bd144bc32e059658c9f8342c90c1ade31b78072841b8b5a943d62a44cea6b050c42e3c205fad6a23fb43c93da0f49d911877265e6ee443e37397ecf89021e7f579e8d3a74c12b52938d91e9de07fc8eeeb9505f4a9c26266bf5449484ccc1317c747664e9f7478f82000000000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r6 = socket$unix(0x1, 0x1, 0x0) listen(r6, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r7 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) (async) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f0000001a00)=ANY=[@ANYBLOB="03000000000000000a004e2300000010ff010000000000000000000000000001f8ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b0000000a004e2000000008fe8000000000000000000000000000aa05000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000010000000c0000000000000000000000000000000104000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ad94e2100000073fe8000000000000000000000000000aa09000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e210000000800"/547], 0x610) r8 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r8, 0x29, 0x2a, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xfffffffe}}, {{0xa, 0x4e08, 0x4a3, @private2, 0x4f0}}}, 0x108) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x71228}, [@IFLA_MTU={0x8, 0x4, 0x81}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4004090) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001980)={r0, 0xe0, &(0x7f0000001880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000000c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa, &(0x7f0000000180)=[0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xc0, &(0x7f0000000480)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000004c0), &(0x7f0000000500), 0x8, 0xe7, 0x8, 0x8, &(0x7f0000001840)}}, 0x10) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b, 0x1}, @IFLA_NUM_TX_QUEUES={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008851}, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x18000000000002a0, 0x72, 0x0, &(0x7f0000000380)="b907620ae4acf007f9d7a3791be167adeb4e13d9073016efe53aaf6455f7ad70a1714f10990e48d32ce4f2ffc3d4b8743c14e360d86d41a6f1286f208a9ed55c4a83422a0a4fc61df8ad86c7577c702f71e04cb9fadabec6698219d8b2416ab9ff63e0160b00000000000000e4d9030c6812844e4f02f977cbeb90203a4c4f2b0000000431b13f9e6633aac9f439e9a75c2f5fb5d8d37289c92b2efdb0402dfc91a29f98d2e12e82000000e7b5040b21fb86ca88a5c41f776cbc7ec0b566de9a6d9572d3b26e45a8ef36c9ac04cc1eff7add6a9de5a5c5693955", 0x0, 0x0, 0x18000000, 0xfffffffffffffde2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3}, 0x50) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r4) kernel console output (not intermixed with test programs): 000000000000002e [ 363.826444][T11748] RAX: ffffffffffffffda RBX: 00007fad9a215fa0 RCX: 00007fad99f9cdd9 [ 363.826458][T11748] RDX: 0000000004000050 RSI: 0000200000000180 RDI: 0000000000000003 [ 363.826471][T11748] RBP: 00007fad9adf1090 R08: 0000000000000000 R09: 0000000000000000 [ 363.826484][T11748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 363.826495][T11748] R13: 00007fad9a216038 R14: 00007fad9a215fa0 R15: 00007ffd688a0328 [ 363.826526][T11748] [ 363.845914][T11661] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 364.102685][T11661] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 364.221879][T11661] team0: Port device team_slave_0 added [ 364.230732][T11661] team0: Port device team_slave_1 added [ 364.289435][T11661] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 364.305000][T11661] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 364.392986][T11661] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 364.411037][T11661] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 364.418492][T11661] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 364.447509][T11661] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 364.559172][T11661] hsr_slave_0: entered promiscuous mode [ 364.578827][T11661] hsr_slave_1: entered promiscuous mode [ 364.591040][T11661] debugfs: 'hsr0' already exists in 'hsr' [ 364.597454][T11661] Cannot create hsr debugfs directory [ 365.444790][T11661] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 365.500923][T11661] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 365.529349][T11661] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 365.576097][T11661] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 365.588523][T11661] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 365.591299][T11798] __nla_validate_parse: 7 callbacks suppressed [ 365.591318][T11798] netlink: 7064 bytes leftover after parsing attributes in process `syz.4.1681'. [ 365.616604][T11798] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 365.633369][T11661] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 365.663707][T11661] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 365.720056][T11661] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 365.874674][ T5858] Bluetooth: hci5: command tx timeout [ 365.941419][T11807] syzkaller0: entered promiscuous mode [ 365.958134][T11817] FAULT_INJECTION: forcing a failure. [ 365.958134][T11817] name failslab, interval 1, probability 0, space 0, times 0 [ 365.975714][T11807] syzkaller0: entered allmulticast mode [ 366.006006][T11817] CPU: 0 UID: 0 PID: 11817 Comm: syz.4.1684 Not tainted syzkaller #0 PREEMPT(full) [ 366.006033][T11817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 366.006044][T11817] Call Trace: [ 366.006052][T11817] [ 366.006059][T11817] dump_stack_lvl+0xe8/0x150 [ 366.006092][T11817] should_fail_ex+0x412/0x560 [ 366.006125][T11817] should_failslab+0xa8/0x100 [ 366.006148][T11817] ? skb_clone+0x212/0x3a0 [ 366.006169][T11817] kmem_cache_alloc_noprof+0x87/0x650 [ 366.006198][T11817] skb_clone+0x212/0x3a0 [ 366.006221][T11817] __netlink_deliver_tap+0x404/0x850 [ 366.006252][T11817] ? netlink_deliver_tap+0x2e/0x1b0 [ 366.006271][T11817] netlink_deliver_tap+0x19c/0x1b0 [ 366.006290][T11817] netlink_sendskb+0x68/0x140 [ 366.006318][T11817] netlink_rcv_skb+0x2b6/0x4b0 [ 366.006336][T11817] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 366.006366][T11817] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 366.006394][T11817] ? bpf_lsm_capable+0x9/0x20 [ 366.006418][T11817] ? security_capable+0x7e/0x2c0 [ 366.006452][T11817] nfnetlink_rcv+0x2c0/0x27b0 [ 366.006486][T11817] ? __local_bh_enable_ip+0xd0/0x130 [ 366.006511][T11817] ? lockdep_hardirqs_on+0x7a/0x110 [ 366.006534][T11817] ? __dev_queue_xmit+0x2b6/0x3950 [ 366.006553][T11817] ? __local_bh_enable_ip+0xd0/0x130 [ 366.006576][T11817] ? __dev_queue_xmit+0x2b6/0x3950 [ 366.006594][T11817] ? __dev_queue_xmit+0x1fe5/0x3950 [ 366.006612][T11817] ? __x64_sys_sendmsg+0x1bd/0x2a0 [ 366.006638][T11817] ? __dev_queue_xmit+0x2b6/0x3950 [ 366.006662][T11817] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 366.006693][T11817] ? __pfx___dev_queue_xmit+0x10/0x10 [ 366.006725][T11817] ? ref_tracker_free+0x693/0x840 [ 366.006747][T11817] ? __pfx_ref_tracker_free+0x10/0x10 [ 366.006781][T11817] ? skb_clone+0x246/0x3a0 [ 366.006803][T11817] ? __netlink_deliver_tap+0x807/0x850 [ 366.006820][T11817] ? netlink_deliver_tap+0x2e/0x1b0 [ 366.006844][T11817] ? netlink_deliver_tap+0x2e/0x1b0 [ 366.006861][T11817] ? netlink_deliver_tap+0x2e/0x1b0 [ 366.006884][T11817] netlink_unicast+0x75c/0x8e0 [ 366.006931][T11817] netlink_sendmsg+0x813/0xb40 [ 366.006958][T11817] ? __pfx_netlink_sendmsg+0x10/0x10 [ 366.006980][T11817] ? aa_sock_msg_perm+0xf1/0x1b0 [ 366.007000][T11817] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 366.007024][T11817] ____sys_sendmsg+0x972/0x9f0 [ 366.007043][T11817] ? __might_fault+0xaf/0x130 [ 366.007069][T11817] ? __pfx_____sys_sendmsg+0x10/0x10 [ 366.007100][T11817] ? import_iovec+0x73/0xa0 [ 366.007128][T11817] ___sys_sendmsg+0x2a5/0x360 [ 366.007149][T11817] ? __lock_acquire+0x6b5/0x2cf0 [ 366.007183][T11817] ? __pfx____sys_sendmsg+0x10/0x10 [ 366.007237][T11817] ? __fget_files+0x2a/0x420 [ 366.007254][T11817] ? __fget_files+0x3a0/0x420 [ 366.007282][T11817] __x64_sys_sendmsg+0x1bd/0x2a0 [ 366.007304][T11817] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 366.007333][T11817] ? __pfx_ksys_write+0x10/0x10 [ 366.007365][T11817] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.007385][T11817] do_syscall_64+0x15f/0xf80 [ 366.007410][T11817] ? trace_irq_disable+0x3b/0x140 [ 366.007433][T11817] ? clear_bhb_loop+0x40/0x90 [ 366.007455][T11817] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.007472][T11817] RIP: 0033:0x7fbc4f59cdd9 [ 366.007491][T11817] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 366.007506][T11817] RSP: 002b:00007fbc50407028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 366.007528][T11817] RAX: ffffffffffffffda RBX: 00007fbc4f815fa0 RCX: 00007fbc4f59cdd9 [ 366.007542][T11817] RDX: 0000000004000050 RSI: 0000200000000180 RDI: 0000000000000003 [ 366.007554][T11817] RBP: 00007fbc50407090 R08: 0000000000000000 R09: 0000000000000000 [ 366.007566][T11817] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 366.007575][T11817] R13: 00007fbc4f816038 R14: 00007fbc4f815fa0 R15: 00007ffc3832b388 [ 366.007605][T11817] [ 367.965845][ T5858] Bluetooth: hci5: command tx timeout [ 368.665603][T11661] 8021q: adding VLAN 0 to HW filter on device bond0 [ 368.730931][T11661] 8021q: adding VLAN 0 to HW filter on device team0 [ 368.783675][ T6203] bridge0: port 1(bridge_slave_0) entered blocking state [ 368.791042][ T6203] bridge0: port 1(bridge_slave_0) entered forwarding state [ 368.863516][ T6203] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.870795][ T6203] bridge0: port 2(bridge_slave_1) entered forwarding state [ 368.911786][T11844] tc_dump_action: action bad kind [ 368.966413][T11845] tc_dump_action: action bad kind [ 369.755607][T11661] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 370.050329][ T5858] Bluetooth: hci5: command tx timeout [ 370.216427][T11906] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1711'. [ 370.551495][T11920] netlink: 'syz.4.1715': attribute type 1 has an invalid length. [ 370.722864][T11934] tipc: Resetting bearer [ 370.760590][T11931] netlink: 'syz.1.1718': attribute type 3 has an invalid length. [ 370.779925][T11926] vcan1: entered promiscuous mode [ 370.791258][T11931] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1718'. [ 370.802022][T11935] can: request_module (can-proto-0) failed. [ 370.808449][T11926] vcan1: entered allmulticast mode [ 370.849230][T11661] veth0_vlan: entered promiscuous mode [ 370.913038][T11661] veth1_vlan: entered promiscuous mode [ 371.030820][T11661] veth0_macvtap: entered promiscuous mode [ 371.067018][T11661] veth1_macvtap: entered promiscuous mode [ 371.077120][T11944] xt_hashlimit: overflow, try lower: 3/0 [ 371.098505][T11949] xt_hashlimit: overflow, try lower: 3/0 [ 371.108541][T11661] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 371.131002][T11947] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 371.133467][T11661] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 371.162339][ T9540] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.181002][ T9540] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.199346][ T9540] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.209074][ T9540] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.367662][ T9540] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 371.396922][ T9540] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 371.484218][ T9531] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 371.509104][ T9531] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 371.891920][T11970] xt_TPROXY: Can be used only with -p tcp or -p udp [ 372.360219][T11999] netlink: 'syz.5.1741': attribute type 2 has an invalid length. [ 372.577142][T12007] skbuff: bad partial csum: csum=65535/2 headroom=4 headlen=65543 [ 372.952628][T12022] netlink: 'syz.1.1753': attribute type 11 has an invalid length. [ 372.972668][T12022] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.1753'. [ 373.028869][T12025] ip6tnl0: Caught tx_queue_len zero misconfig [ 373.044898][T12019] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1751'. [ 373.066783][T12018] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1751'. [ 373.079385][T12019] xt_l2tp: wrong L2TP version: 0 [ 373.197161][T12031] macvtap1: entered promiscuous mode [ 373.215797][T12031] macvtap1: entered allmulticast mode [ 373.238429][T12031] : entered allmulticast mode [ 373.921774][T12082] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1770'. [ 373.987787][T12092] netlink: 'syz.1.1771': attribute type 9 has an invalid length. [ 374.434272][T12113] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1774'. [ 374.668331][T12125] netlink: 666 bytes leftover after parsing attributes in process `syz.3.1778'. [ 375.025965][T12134] SET target dimension over the limit! [ 375.340029][T12142] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1784'. [ 375.363051][ T9529] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 375.372233][T12142] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1784'. [ 375.382419][ T48] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 375.393969][ T48] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 375.403320][ T48] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 375.764200][T12153] x_tables: ip_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 375.899676][T12160] netlink: 'syz.5.1791': attribute type 10 has an invalid length. [ 377.046562][T12206] syz_tun: mtu less than device minimum [ 377.803578][T12226] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1811'. [ 377.860219][T12228] netlink: 'syz.5.1809': attribute type 5 has an invalid length. [ 377.884788][T12231] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1812'. [ 377.899830][T12228] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1809'. [ 377.915312][T12231] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1812'. [ 377.934202][T12232] bond5: option miimon: invalid value (18446744073709551585) [ 377.963846][T12232] bond5: option miimon: allowed values 0 - 2147483647 [ 377.982837][T12232] bond5 (unregistering): Released all slaves [ 378.179048][T12248] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.1815'. [ 378.324057][T12254] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 378.361032][T12259] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1819'. [ 378.390692][T12259] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1819'. [ 378.435065][T12258] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1819'. [ 378.454980][T12258] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1819'. [ 378.472972][T12259] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1819'. [ 378.838983][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.892650][T12285] netlink: 'syz.1.1829': attribute type 1 has an invalid length. [ 378.931355][T12285] netlink: 'syz.1.1829': attribute type 1 has an invalid length. [ 379.054940][T12290] bond5: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 379.075956][T12290] bond5: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 379.130579][T12290] bond5: (slave ip6gre2): making interface the new active one [ 379.165095][T12290] bond5: (slave ip6gre2): Enslaving as an active interface with an up link [ 379.433656][T12319] netlink: 'syz.5.1837': attribute type 2 has an invalid length. [ 379.697367][T12328] netlink: 'syz.2.1840': attribute type 4 has an invalid length. [ 380.385624][T12345] hsr_slave_1 (unregistering): left promiscuous mode [ 380.776377][T12361] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 381.168557][T12373] netlink: 'syz.1.1853': attribute type 29 has an invalid length. [ 381.251595][T12376] netlink: 'syz.1.1853': attribute type 29 has an invalid length. [ 381.968176][T12416] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 382.153577][T12421] netlink: 'syz.2.1866': attribute type 10 has an invalid length. [ 382.578908][T12441] netlink: 'syz.3.1872': attribute type 39 has an invalid length. [ 382.857037][T12460] netlink: 'syz.3.1878': attribute type 24 has an invalid length. [ 383.009564][T12469] netlink: 'syz.1.1879': attribute type 11 has an invalid length. [ 383.033580][T12469] __nla_validate_parse: 13 callbacks suppressed [ 383.033603][T12469] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1879'. [ 383.064049][T12476] openvswitch: netlink: Missing valid actions attribute. [ 383.076094][T12476] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 383.201662][T12468] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1880'. [ 383.305162][T12482] netlink: 'syz.4.1883': attribute type 1 has an invalid length. [ 383.445436][T12488] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1883'. [ 383.541448][T12494] netlink: 'syz.3.1884': attribute type 4 has an invalid length. [ 383.554215][T12485] bond7: (slave geneve2): making interface the new active one [ 383.564020][T12485] bond7: (slave geneve2): Enslaving as an active interface with an up link [ 383.584472][T12496] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1886'. [ 383.605907][T12488] 8021q: adding VLAN 0 to HW filter on device bond7 [ 383.657161][ T9540] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 383.753787][ T9540] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 383.802853][ T9540] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 383.821862][ T9540] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 384.080656][T12520] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1893'. [ 384.101569][T12520] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1893'. [ 384.112313][T12522] syzkaller1: entered promiscuous mode [ 384.132826][T12520] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1893'. [ 384.150184][T12522] syzkaller1: entered allmulticast mode [ 384.439451][T12529] team0: Port device gretap1 added [ 384.578755][T12540] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1898'. [ 384.828630][T12553] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 384.902931][T12557] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1906'. [ 384.933469][T12557] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1906'. [ 385.009014][T12564] netlink: 'syz.5.1904': attribute type 1 has an invalid length. [ 385.171492][T12564] bond1: (slave geneve2): making interface the new active one [ 385.188602][T12564] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 385.190897][T12577] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 385.227143][ T9540] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 385.265606][ T9540] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 385.291423][T12581] FAULT_INJECTION: forcing a failure. [ 385.291423][T12581] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 385.307490][ T1097] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 385.312106][T12581] CPU: 1 UID: 0 PID: 12581 Comm: syz.2.1912 Not tainted syzkaller #0 PREEMPT(full) [ 385.312135][T12581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 385.312146][T12581] Call Trace: [ 385.312153][T12581] [ 385.312160][T12581] dump_stack_lvl+0xe8/0x150 [ 385.312195][T12581] should_fail_ex+0x412/0x560 [ 385.312229][T12581] _copy_from_user+0x2d/0xb0 [ 385.312251][T12581] ___sys_sendmsg+0x1c6/0x360 [ 385.312271][T12581] ? __lock_acquire+0x6b5/0x2cf0 [ 385.312302][T12581] ? __pfx____sys_sendmsg+0x10/0x10 [ 385.312327][T12581] ? kstrtouint+0x6e/0xe0 [ 385.312377][T12581] ? __fget_files+0x2a/0x420 [ 385.312396][T12581] ? __fget_files+0x3a0/0x420 [ 385.312424][T12581] __sys_sendmmsg+0x27c/0x4e0 [ 385.312449][T12581] ? __pfx___sys_sendmmsg+0x10/0x10 [ 385.312468][T12581] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 385.312517][T12581] ? ksys_write+0x242/0x270 [ 385.312542][T12581] ? __pfx_ksys_write+0x10/0x10 [ 385.312570][T12581] __x64_sys_sendmmsg+0xa0/0xc0 [ 385.312591][T12581] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.312610][T12581] do_syscall_64+0x15f/0xf80 [ 385.312643][T12581] ? trace_irq_disable+0x3b/0x140 [ 385.312667][T12581] ? clear_bhb_loop+0x40/0x90 [ 385.312690][T12581] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.312708][T12581] RIP: 0033:0x7f5f3a99cdd9 [ 385.312727][T12581] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 385.312742][T12581] RSP: 002b:00007f5f3b890028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 385.312763][T12581] RAX: ffffffffffffffda RBX: 00007f5f3ac15fa0 RCX: 00007f5f3a99cdd9 [ 385.312776][T12581] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 385.312789][T12581] RBP: 00007f5f3b890090 R08: 0000000000000000 R09: 0000000000000000 [ 385.312800][T12581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 385.312811][T12581] R13: 00007f5f3ac16038 R14: 00007f5f3ac15fa0 R15: 00007ffdaca9cd98 [ 385.312840][T12581] [ 385.523226][ T1097] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 385.825238][T12602] ip6t_srh: unknown srh invflags 4000 [ 386.035101][T12609] netlink: 'syz.4.1920': attribute type 10 has an invalid length. [ 386.095439][T12609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 386.147405][T12609] batadv0: entered promiscuous mode [ 386.161620][T12609] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 386.201458][T12623] Cannot find add_set index 0 as target [ 386.320827][T12623] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 386.487562][T12632] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 387.488579][T12665] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 387.569874][T12666] 8021q: adding VLAN 0 to HW filter on device bond6 [ 387.683118][T12666] bond6 (unregistering): Released all slaves [ 388.052609][T12688] __nla_validate_parse: 18 callbacks suppressed [ 388.052633][T12688] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1945'. [ 388.054646][T12685] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 388.069711][T12688] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1945'. [ 388.193010][T12695] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1947'. [ 388.204333][T12695] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1947'. [ 388.217196][T12695] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1947'. [ 388.447968][T12701] netlink: 212344 bytes leftover after parsing attributes in process `syz.2.1950'. [ 388.758448][T12714] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 389.000483][T12726] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1959'. [ 389.029433][T12726] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1959'. [ 389.038695][T12726] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1959'. [ 389.058333][T12723] bond10: option mode: invalid value (133) [ 389.087596][T12723] bond10 (unregistering): Released all slaves [ 389.152081][T12733] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1961'. [ 389.202008][T12731] SET target dimension over the limit! [ 389.446154][T12743] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 389.906793][T12763] af_packet: tpacket_rcv: packet too big, clamped from 3698 to 4294967272. macoff=96 [ 391.049501][T12820] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 391.080694][T12820] netlink: 'syz.1.1983': attribute type 3 has an invalid length. [ 391.897563][T12864] netlink: 'syz.4.1993': attribute type 1 has an invalid length. [ 392.042035][T12869] veth0: Caught tx_queue_len zero misconfig [ 392.352183][T12892] netlink: 'syz.4.2003': attribute type 1 has an invalid length. [ 392.546541][T12892] 8021q: adding VLAN 0 to HW filter on device bond8 [ 392.639958][T12896] bond8: (slave veth7): Enslaving as an active interface with a down link [ 392.659094][T12904] netlink: 'syz.1.2006': attribute type 5 has an invalid length. [ 392.772103][T12896] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 392.798068][T12896] bond8: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 393.449248][T12920] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 393.460556][T12920] tipc: Enabled bearer , priority 10 [ 393.485655][T12942] __nla_validate_parse: 31 callbacks suppressed [ 393.485679][T12942] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2018'. [ 393.520797][T12942] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2018'. [ 393.545171][T12942] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2018'. [ 393.863885][T12951] netlink: 'syz.1.2022': attribute type 1 has an invalid length. [ 393.976586][T12951] bond6: entered promiscuous mode [ 394.007651][T12951] 8021q: adding VLAN 0 to HW filter on device bond6 [ 394.044932][T12964] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2022'. [ 394.159348][T12958] bond6: (slave bridge2): making interface the new active one [ 394.179932][T12958] bridge2: entered promiscuous mode [ 394.232984][T12958] bond6: (slave bridge2): Enslaving as an active interface with an up link [ 394.245378][ T25] block nbd2: Possible stuck request ffff8880271f7000: control (read@0,1024B). Runtime 30 seconds [ 394.259835][ T25] block nbd2: Possible stuck request ffff8880271f71c0: control (read@1024,1024B). Runtime 30 seconds [ 394.271838][ T25] block nbd2: Possible stuck request ffff8880271f7380: control (read@2048,1024B). Runtime 30 seconds [ 394.283454][ T25] block nbd2: Possible stuck request ffff8880271f7540: control (read@3072,1024B). Runtime 30 seconds [ 394.506201][T12985] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2029'. [ 394.521270][T12984] netlink: 'syz.5.2028': attribute type 1 has an invalid length. [ 394.525115][T12985] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2029'. [ 394.554856][T12985] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2029'. [ 394.564120][T12987] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2030'. [ 394.647156][T12989] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2028'. [ 394.665927][T12991] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2030'. [ 394.763349][T12996] syzkaller1: entered promiscuous mode [ 394.775730][T12996] syzkaller1: entered allmulticast mode [ 394.919230][T13003] vcan0: tx drop: invalid da for name 0x0000000000000001 [ 394.940052][T13005] RDS: rds_bind could not find a transport for ::ffff:172.30.0.6, load rds_tcp or rds_rdma? [ 394.958226][T13006] RDS: rds_bind could not find a transport for ::ffff:172.30.0.6, load rds_tcp or rds_rdma? [ 395.908340][T13043] syzkaller1: entered promiscuous mode [ 395.927659][T13043] syzkaller1: entered allmulticast mode [ 396.430916][T13067] netlink: 'syz.2.2051': attribute type 3 has an invalid length. [ 396.456141][T13067] netlink: 'syz.2.2051': attribute type 1 has an invalid length. [ 396.489577][T13070] openvswitch: netlink: Missing key (keys=40, expected=80) [ 396.991321][T13071] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 397.374256][T13104] delete_channel: no stack [ 398.362540][T13142] xt_hashlimit: size too large, truncated to 1048576 [ 398.381811][T13145] netlink: 'syz.5.2075': attribute type 1 has an invalid length. [ 398.390643][T13145] netlink: 'syz.5.2075': attribute type 1 has an invalid length. [ 398.454733][T13150] –: renamed from vxcan1 (while UP) [ 398.657137][T13161] __nla_validate_parse: 29 callbacks suppressed [ 398.657159][T13161] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2081'. [ 398.806474][T13168] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2084'. [ 398.860794][T13170] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2084'. [ 398.876400][T13166] : entered promiscuous mode [ 398.932319][T13164] geneve1: entered promiscuous mode [ 399.137377][T13178] batadv2: entered allmulticast mode [ 399.208657][T13180] batadv2: entered allmulticast mode [ 399.502156][T13195] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2090'. [ 399.935245][T13210] netlink: 348 bytes leftover after parsing attributes in process `syz.4.2094'. [ 399.981626][T13216] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2095'. [ 400.028074][T13216] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2095'. [ 400.029746][T13219] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2093'. [ 402.828566][T13208] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 402.843708][T13223] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2097'. [ 403.227729][T13254] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2108'. [ 403.561625][T13273] netlink: 'syz.5.2113': attribute type 1 has an invalid length. [ 403.621198][T13278] syz.3.2114 (13278) used obsolete PPPIOCDETACH ioctl [ 403.623339][T13273] bridge0: port 3(ip6gretap1) entered blocking state [ 403.636416][T13273] bridge0: port 3(ip6gretap1) entered disabled state [ 403.643504][T13273] ip6gretap1: entered allmulticast mode [ 403.652671][T13273] ip6gretap1: entered promiscuous mode [ 403.668764][T13281] ip6gretap1: left allmulticast mode [ 403.680465][T13281] ip6gretap1: left promiscuous mode [ 403.697282][T13281] bridge0: port 3(ip6gretap1) entered disabled state [ 403.727949][T13281] bridge_slave_1: left allmulticast mode [ 403.746006][T13281] bridge_slave_1: left promiscuous mode [ 403.757918][T13281] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.790293][T13281] bridge_slave_0: left allmulticast mode [ 403.806732][T13281] bridge_slave_0: left promiscuous mode [ 403.825528][T13281] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.888368][ T6202] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.984019][T13297] __nla_validate_parse: 1 callbacks suppressed [ 403.984034][T13297] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2120'. [ 404.072252][T13301] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2122'. [ 404.084335][T13299] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2122'. [ 404.157636][T13303] tipc: Enabling of bearer rejected, failed to enable media [ 404.189151][T13305] bond7: entered promiscuous mode [ 404.240415][T13305] macvlan4: entered promiscuous mode [ 404.246680][T13305] macvlan4: entered allmulticast mode [ 404.253662][T13305] bond7: (slave macvlan4): Opening slave failed [ 404.274893][T13311] syzkaller1: entered promiscuous mode [ 404.280538][T13311] syzkaller1: entered allmulticast mode [ 405.373358][T13361] Unknown options in mask b7f2 [ 405.385228][T13359] netlink: 'syz.3.2143': attribute type 17 has an invalid length. [ 405.417356][T13359] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2143'. [ 405.451101][T13359] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2143'. [ 405.527586][T13368] netlink: 'syz.1.2147': attribute type 58 has an invalid length. [ 405.557870][T13368] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2147'. [ 405.660603][T13373] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2148'. [ 405.713655][T13375] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2148'. [ 405.814387][T13375] ip6erspan1: entered promiscuous mode [ 405.815851][T13386] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2152'. [ 405.885825][T13388] netlink: 256 bytes leftover after parsing attributes in process `syz.5.2151'. [ 406.337122][T13412] netlink: 'syz.5.2160': attribute type 21 has an invalid length. [ 408.300543][T13505] netdevsim netdevsim5 : renamed from netdevsim0 (while UP) [ 408.543730][T13512] syzkaller0: entered promiscuous mode [ 408.555960][T13512] syzkaller0: entered allmulticast mode [ 411.405935][T13547] __nla_validate_parse: 20 callbacks suppressed [ 411.405959][T13547] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2198'. [ 411.412317][T13545] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 411.442148][T13548] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 411.473462][T13547] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2198'. [ 411.582960][T13558] netlink: 'syz.1.2201': attribute type 30 has an invalid length. [ 411.641906][T13558] bond8: option arp_missed_max: invalid value (0) [ 411.648751][T13558] bond8: option arp_missed_max: allowed values 1 - 255 [ 411.658539][T13558] bond8 (unregistering): Released all slaves [ 411.822932][T13567] netlink: 'syz.4.2204': attribute type 1 has an invalid length. [ 412.072600][T13577] netlink: 'syz.1.2209': attribute type 1 has an invalid length. [ 412.083929][T13577] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 412.190265][T13588] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 412.213869][T13589] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.2210'. [ 412.341071][T13591] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 412.351218][T13594] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2214'. [ 412.413679][T13594] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2214'. [ 412.441569][T13597] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2215'. [ 412.547055][T13603] xt_hashlimit: size too large, truncated to 1048576 [ 412.567988][T13605] netlink: 208240 bytes leftover after parsing attributes in process `syz.3.2217'. [ 412.666236][T13609] IPv6: NLM_F_CREATE should be specified when creating new route [ 412.921669][T13619] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 413.162850][T13629] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2224'. [ 413.180211][T13629] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2224'. [ 413.196114][T13629] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2224'. [ 413.238146][T13635] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 413.259635][T13635] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 414.229890][T13682] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 414.476094][T13700] xt_hashlimit: size too large, truncated to 1048576 [ 414.596638][T13704] netlink: 'syz.5.2249': attribute type 1 has an invalid length. [ 414.655082][T13703] syzkaller0: entered promiscuous mode [ 414.662571][T13703] syzkaller0: entered allmulticast mode [ 414.853615][T13714] netlink: 'syz.5.2253': attribute type 4 has an invalid length. [ 417.260505][T13714] .`¹: renamed from bond0 (while UP) [ 417.307626][T13735] mac80211_hwsim hwsim11 syzkaller0: left promiscuous mode [ 417.315654][T13735] mac80211_hwsim hwsim11 syzkaller0: left allmulticast mode [ 417.539560][T13748] __nla_validate_parse: 7 callbacks suppressed [ 417.539583][T13748] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2261'. [ 417.557485][T13748] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2261'. [ 417.633826][T13748] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2261'. [ 417.640664][T13751] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2262'. [ 417.643179][T13748] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2261'. [ 417.658770][T13751] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 417.918064][T13767] veth1_macvtap: entered allmulticast mode [ 418.033216][T13780] netlink: 'syz.4.2270': attribute type 29 has an invalid length. [ 418.043950][T13780] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2270'. [ 418.070522][T13783] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2272'. [ 418.156696][T13785] netlink: 'syz.4.2274': attribute type 21 has an invalid length. [ 418.173133][T13785] netlink: 'syz.4.2274': attribute type 1 has an invalid length. [ 418.241784][T13793] netlink: 'syz.3.2275': attribute type 21 has an invalid length. [ 418.674329][T13813] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2280'. [ 418.862972][T13822] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2284'. [ 419.329995][T13839] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2288'. [ 419.779596][T13853] bond8: option all_slaves_active: invalid value (4) [ 419.811214][T13853] bond8 (unregistering): Released all slaves [ 419.822765][T13859] xt_CONNSECMARK: invalid mode: 0 [ 420.047324][T13863] syzkaller0: entered allmulticast mode [ 420.082381][T13863] syzkaller0 (unregistering): left allmulticast mode [ 420.339001][T13878] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 420.371413][T13867] syzkaller0: entered promiscuous mode [ 420.390139][T13867] syzkaller0: entered allmulticast mode [ 420.914273][T13907] netlink: 'syz.3.2308': attribute type 1 has an invalid length. [ 421.000807][T13907] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 421.553990][ T5162] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 421.579771][ T5162] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 421.592683][ T5162] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 421.614023][ T5162] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 421.623239][ T5162] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 421.814964][T13953] syzkaller0: entered promiscuous mode [ 421.838189][T13953] syzkaller0: entered allmulticast mode [ 421.867368][T13953] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 421.874672][ T5162] Bluetooth: hci5: command 0x0405 tx timeout [ 421.928775][T13935] nbd3: detected capacity change from 0 to 63 [ 421.961617][ T5846] block nbd3: Receive control failed (result -32) [ 421.970433][ T5162] block nbd3: Receive control failed (result -32) [ 421.997876][ T9992] block nbd3: Dead connection, failed to find a fallback [ 422.009882][ T9992] block nbd3: shutting down sockets [ 422.080859][ T9992] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 422.123854][ T9992] Buffer I/O error on dev nbd3, logical block 0, async page read [ 422.132882][ T9992] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 422.142915][ T9992] Buffer I/O error on dev nbd3, logical block 1, async page read [ 422.156436][ T9992] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 422.156669][T13965] netlink: 'syz.5.2325': attribute type 4 has an invalid length. [ 422.165867][ T9992] Buffer I/O error on dev nbd3, logical block 2, async page read [ 422.166336][ T9992] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 422.201540][ T9992] Buffer I/O error on dev nbd3, logical block 3, async page read [ 422.215460][ T9992] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 422.232886][ T9992] Buffer I/O error on dev nbd3, logical block 0, async page read [ 422.244297][ T9992] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 422.261869][ T9992] Buffer I/O error on dev nbd3, logical block 1, async page read [ 422.300791][ T9992] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 422.314239][ T9992] Buffer I/O error on dev nbd3, logical block 2, async page read [ 422.322678][ T9992] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 422.333302][ T9992] Buffer I/O error on dev nbd3, logical block 3, async page read [ 422.341503][T13967] netlink: 'syz.3.2326': attribute type 1 has an invalid length. [ 422.353464][ T9992] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 422.399144][ T9992] Buffer I/O error on dev nbd3, logical block 0, async page read [ 422.430774][ T9992] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 422.453969][ T9992] Buffer I/O error on dev nbd3, logical block 1, async page read [ 422.491701][ T9992] ldm_validate_partition_table(): Disk read failed. [ 422.532743][ T9992] Dev nbd3: unable to read RDB block 0 [ 422.566715][ T9992] nbd3: unable to read partition table [ 422.683358][ T9992] ldm_validate_partition_table(): Disk read failed. [ 422.723972][ T9992] Dev nbd3: unable to read RDB block 0 [ 422.753682][ T9992] nbd3: unable to read partition table [ 423.108935][T13998] netlink: 'syz.1.2334': attribute type 2 has an invalid length. [ 423.150380][T13998] __nla_validate_parse: 8 callbacks suppressed [ 423.150399][T13998] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2334'. [ 423.159823][T14001] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2335'. [ 423.176394][T14001] netlink: 'syz.4.2335': attribute type 30 has an invalid length. [ 423.215538][T14006] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2335'. [ 423.226831][T14006] netlink: 'syz.4.2335': attribute type 30 has an invalid length. [ 423.268681][T14007] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2335'. [ 423.291676][T14007] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2335'. [ 423.325817][T14001] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2335'. [ 423.335067][T14001] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2335'. [ 423.549967][T14018] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2338'. [ 423.577758][T14017] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2340'. [ 423.585914][T14016] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 423.595188][T14016] IPv6: NLM_F_CREATE should be set when creating new route [ 423.609664][T14016] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2338'. [ 423.720502][ T5846] Bluetooth: hci6: command tx timeout [ 423.749104][ T9] IPVS: starting estimator thread 0... [ 423.782688][T14025] netlink: 'syz.3.2343': attribute type 1 has an invalid length. [ 423.844797][T14028] IPVS: using max 26 ests per chain, 62400 per kthread [ 424.018451][T13942] chnl_net:caif_netlink_parms(): no params data found [ 424.080355][T14041] netlink: 'syz.1.2345': attribute type 3 has an invalid length. [ 424.233672][T14049] netlink: 'syz.3.2348': attribute type 1 has an invalid length. [ 424.264774][T14049] netlink: 'syz.3.2348': attribute type 2 has an invalid length. [ 424.308211][ T25] block nbd2: Possible stuck request ffff8880271f7000: control (read@0,1024B). Runtime 60 seconds [ 424.319336][ T25] block nbd2: Possible stuck request ffff8880271f71c0: control (read@1024,1024B). Runtime 60 seconds [ 424.330694][ T25] block nbd2: Possible stuck request ffff8880271f7380: control (read@2048,1024B). Runtime 60 seconds [ 424.377457][ T25] block nbd2: Possible stuck request ffff8880271f7540: control (read@3072,1024B). Runtime 60 seconds [ 424.606491][T13942] bridge0: port 1(bridge_slave_0) entered blocking state [ 424.614879][T13942] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.622139][T13942] bridge_slave_0: entered allmulticast mode [ 424.631282][T13942] bridge_slave_0: entered promiscuous mode [ 424.672562][T13942] bridge0: port 2(bridge_slave_1) entered blocking state [ 424.685593][T13942] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.692989][T13942] bridge_slave_1: entered allmulticast mode [ 424.701741][T13942] bridge_slave_1: entered promiscuous mode [ 424.748872][T13942] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 424.762865][T13942] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 424.808488][T13942] team0: Port device team_slave_0 added [ 424.818298][T13942] team0: Port device team_slave_1 added [ 424.871517][T13942] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 424.890927][T13942] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 424.944880][T13942] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 424.995964][T13942] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 425.015130][T13942] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 425.052260][T13942] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 425.141050][T13942] hsr_slave_0: entered promiscuous mode [ 425.148633][T13942] hsr_slave_1: entered promiscuous mode [ 425.149422][T14092] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 425.156458][T13942] debugfs: 'hsr0' already exists in 'hsr' [ 425.170205][T13942] Cannot create hsr debugfs directory [ 425.794696][ T5846] Bluetooth: hci6: command tx timeout [ 427.585102][T14071] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 427.631211][T13942] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 427.714812][T13942] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 427.762246][T13942] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 427.814908][T13942] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 427.832186][T13942] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 427.851030][T13942] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 427.861607][T13942] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 427.874606][ T5846] Bluetooth: hci6: command tx timeout [ 427.885708][T13942] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 427.902814][T14111] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap0 [ 427.915483][T14111] ip6gretap0: entered promiscuous mode [ 428.143086][T13942] 8021q: adding VLAN 0 to HW filter on device bond0 [ 428.174991][T14132] __nla_validate_parse: 2 callbacks suppressed [ 428.175013][T14132] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2368'. [ 428.225686][T14132] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2368'. [ 428.284028][T14136] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 428.328900][T13942] 8021q: adding VLAN 0 to HW filter on device team0 [ 428.367836][ T1097] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.375110][ T1097] bridge0: port 1(bridge_slave_0) entered forwarding state [ 428.448441][ T6203] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.455721][ T6203] bridge0: port 2(bridge_slave_1) entered forwarding state [ 428.778578][T14157] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 428.852853][T14151] syzkaller0: entered promiscuous mode [ 428.879412][T14160] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2377'. [ 428.880118][T14151] syzkaller0: entered allmulticast mode [ 428.965443][T14164] openvswitch: netlink: IP tunnel dst address not specified [ 428.966618][T14162] wireguard: wg0: Could not create IPv4 socket [ 429.958884][ T5846] Bluetooth: hci6: command tx timeout [ 431.840599][T13942] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 432.172432][T14209] vcan1: entered promiscuous mode [ 432.195245][T14209] vcan1: entered allmulticast mode [ 432.586684][T14232] netlink: 'syz.3.2396': attribute type 1 has an invalid length. [ 432.600417][T14232] netlink: 212 bytes leftover after parsing attributes in process `syz.3.2396'. [ 432.636882][T14233] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2397'. [ 432.655960][T14233] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2397'. [ 432.658512][T13942] veth0_vlan: entered promiscuous mode [ 432.666216][T14233] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2397'. [ 432.721016][T13942] veth1_vlan: entered promiscuous mode [ 432.743682][T14237] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2398'. [ 432.873152][T13942] veth0_macvtap: entered promiscuous mode [ 432.929483][T13942] veth1_macvtap: entered promiscuous mode [ 432.966421][T13942] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 433.009933][T13942] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 433.068116][ T9525] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.094361][T14251] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 433.107057][ T6202] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.121029][ T6202] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.136052][T14251] FAULT_INJECTION: forcing a failure. [ 433.136052][T14251] name failslab, interval 1, probability 0, space 0, times 0 [ 433.149019][T14251] CPU: 1 UID: 0 PID: 14251 Comm: syz.3.2403 Not tainted syzkaller #0 PREEMPT(full) [ 433.149048][T14251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 433.149059][T14251] Call Trace: [ 433.149068][T14251] [ 433.149077][T14251] dump_stack_lvl+0xe8/0x150 [ 433.149124][T14251] should_fail_ex+0x412/0x560 [ 433.149163][T14251] should_failslab+0xa8/0x100 [ 433.149192][T14251] __kmalloc_noprof+0xe8/0x760 [ 433.149217][T14251] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 433.149252][T14251] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 433.149288][T14251] genl_family_rcv_msg_doit+0xd9/0x330 [ 433.149322][T14251] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 433.149363][T14251] ? apparmor_capable+0x126/0x170 [ 433.149392][T14251] ? bpf_lsm_capable+0x9/0x20 [ 433.149420][T14251] ? security_capable+0x7e/0x2c0 [ 433.149458][T14251] genl_rcv_msg+0x61c/0x7a0 [ 433.149492][T14251] ? __pfx_genl_rcv_msg+0x10/0x10 [ 433.149517][T14251] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 433.149538][T14251] ? __pfx_nl80211_deauthenticate+0x10/0x10 [ 433.149564][T14251] ? __pfx_nl80211_post_doit+0x10/0x10 [ 433.149587][T14251] ? __pfx_ref_tracker_free+0x10/0x10 [ 433.149622][T14251] netlink_rcv_skb+0x232/0x4b0 [ 433.149646][T14251] ? __pfx_genl_rcv_msg+0x10/0x10 [ 433.149674][T14251] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 433.149714][T14251] ? down_read+0x270/0x2e0 [ 433.149742][T14251] ? genl_rcv+0xd/0x40 [ 433.149770][T14251] genl_rcv+0x28/0x40 [ 433.149793][T14251] netlink_unicast+0x75c/0x8e0 [ 433.149836][T14251] netlink_sendmsg+0x813/0xb40 [ 433.149868][T14251] ? __pfx_netlink_sendmsg+0x10/0x10 [ 433.149895][T14251] ? aa_sock_msg_perm+0xf1/0x1b0 [ 433.149918][T14251] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 433.149946][T14251] ____sys_sendmsg+0x972/0x9f0 [ 433.149969][T14251] ? __might_fault+0xaf/0x130 [ 433.149999][T14251] ? __pfx_____sys_sendmsg+0x10/0x10 [ 433.150033][T14251] ? import_iovec+0x73/0xa0 [ 433.150063][T14251] ___sys_sendmsg+0x2a5/0x360 [ 433.150084][T14251] ? __lock_acquire+0x6b5/0x2cf0 [ 433.150124][T14251] ? __pfx____sys_sendmsg+0x10/0x10 [ 433.150173][T14251] ? __fget_files+0x2a/0x420 [ 433.150188][T14251] ? __fget_files+0x3a0/0x420 [ 433.150214][T14251] __x64_sys_sendmsg+0x1bd/0x2a0 [ 433.150234][T14251] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 433.150260][T14251] ? __pfx_ksys_write+0x10/0x10 [ 433.150289][T14251] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.150306][T14251] do_syscall_64+0x15f/0xf80 [ 433.150327][T14251] ? trace_irq_disable+0x3b/0x140 [ 433.150349][T14251] ? clear_bhb_loop+0x40/0x90 [ 433.150369][T14251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.150384][T14251] RIP: 0033:0x7fad99f9cdd9 [ 433.150400][T14251] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 433.150415][T14251] RSP: 002b:00007fad9adf1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 433.150434][T14251] RAX: ffffffffffffffda RBX: 00007fad9a215fa0 RCX: 00007fad99f9cdd9 [ 433.150445][T14251] RDX: 0000000000000080 RSI: 0000200000000300 RDI: 0000000000000004 [ 433.150455][T14251] RBP: 00007fad9adf1090 R08: 0000000000000000 R09: 0000000000000000 [ 433.150465][T14251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 433.150475][T14251] R13: 00007fad9a216038 R14: 00007fad9a215fa0 R15: 00007ffd688a0328 [ 433.150501][T14251] [ 433.152671][ T6202] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.518386][T14259] netlink: 2 bytes leftover after parsing attributes in process `syz.5.2405'. [ 433.527778][T14259] tc_dump_action: action bad kind [ 433.714363][T14264] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2407'. [ 433.716069][T14262] netlink: 'syz.5.2406': attribute type 2 has an invalid length. [ 433.737186][ T1097] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 433.764344][ T1097] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 433.891519][T14268] netlink: 'syz.1.2409': attribute type 10 has an invalid length. [ 433.903767][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 433.923306][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 433.956747][T14272] netlink: 'syz.4.2410': attribute type 1 has an invalid length. [ 433.988264][T14272] netlink: 'syz.4.2410': attribute type 2 has an invalid length. [ 434.021127][T14268] veth0_vlan: left promiscuous mode [ 434.027254][T14272] netlink: 'syz.4.2410': attribute type 1 has an invalid length. [ 434.048557][T14268] veth0_vlan: entered promiscuous mode [ 434.061124][T14272] netlink: 'syz.4.2410': attribute type 3 has an invalid length. [ 434.070334][T14272] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2410'. [ 434.102839][T14268] team0: Device veth0_vlan failed to register rx_handler [ 434.113474][T14272] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2410'. [ 434.541492][T14296] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2313'. [ 434.567040][T14295] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2414'. [ 434.585371][T14296] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2313'. [ 434.640676][T14306] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2416'. [ 434.657199][T14306] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2416'. [ 434.688792][T14307] x_tables: duplicate underflow at hook 1 [ 434.698260][T14307] netlink: 'syz.1.2413': attribute type 8 has an invalid length. [ 434.711503][T14308] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2415'. [ 434.977686][T14314] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 435.023932][T14314] FAULT_INJECTION: forcing a failure. [ 435.023932][T14314] name failslab, interval 1, probability 0, space 0, times 0 [ 435.046692][T14314] CPU: 1 UID: 0 PID: 14314 Comm: syz.5.2418 Not tainted syzkaller #0 PREEMPT(full) [ 435.046722][T14314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 435.046735][T14314] Call Trace: [ 435.046744][T14314] [ 435.046753][T14314] dump_stack_lvl+0xe8/0x150 [ 435.046792][T14314] should_fail_ex+0x412/0x560 [ 435.046830][T14314] should_failslab+0xa8/0x100 [ 435.046858][T14314] __kmalloc_noprof+0xe8/0x760 [ 435.046883][T14314] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 435.046916][T14314] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 435.046950][T14314] genl_family_rcv_msg_doit+0xd9/0x330 [ 435.046982][T14314] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 435.047017][T14314] ? apparmor_capable+0x126/0x170 [ 435.047042][T14314] ? bpf_lsm_capable+0x9/0x20 [ 435.047070][T14314] ? security_capable+0x7e/0x2c0 [ 435.047106][T14314] genl_rcv_msg+0x61c/0x7a0 [ 435.047137][T14314] ? __pfx_genl_rcv_msg+0x10/0x10 [ 435.047161][T14314] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 435.047183][T14314] ? __pfx_nl80211_deauthenticate+0x10/0x10 [ 435.047209][T14314] ? __pfx_nl80211_post_doit+0x10/0x10 [ 435.047232][T14314] ? __pfx_ref_tracker_free+0x10/0x10 [ 435.047266][T14314] netlink_rcv_skb+0x232/0x4b0 [ 435.047289][T14314] ? __pfx_genl_rcv_msg+0x10/0x10 [ 435.047316][T14314] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 435.047369][T14314] ? down_read+0x270/0x2e0 [ 435.047398][T14314] ? genl_rcv+0xd/0x40 [ 435.047424][T14314] genl_rcv+0x28/0x40 [ 435.047454][T14314] netlink_unicast+0x75c/0x8e0 [ 435.047497][T14314] netlink_sendmsg+0x813/0xb40 [ 435.047529][T14314] ? __pfx_netlink_sendmsg+0x10/0x10 [ 435.047556][T14314] ? aa_sock_msg_perm+0xf1/0x1b0 [ 435.047579][T14314] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 435.047608][T14314] ____sys_sendmsg+0x972/0x9f0 [ 435.047631][T14314] ? __might_fault+0xaf/0x130 [ 435.047661][T14314] ? __pfx_____sys_sendmsg+0x10/0x10 [ 435.047695][T14314] ? import_iovec+0x73/0xa0 [ 435.047721][T14314] ___sys_sendmsg+0x2a5/0x360 [ 435.047742][T14314] ? __lock_acquire+0x6b5/0x2cf0 [ 435.047777][T14314] ? __pfx____sys_sendmsg+0x10/0x10 [ 435.047837][T14314] ? __fget_files+0x2a/0x420 [ 435.047858][T14314] ? __fget_files+0x3a0/0x420 [ 435.047890][T14314] __x64_sys_sendmsg+0x1bd/0x2a0 [ 435.047916][T14314] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 435.047949][T14314] ? __pfx_ksys_write+0x10/0x10 [ 435.047986][T14314] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.048008][T14314] do_syscall_64+0x15f/0xf80 [ 435.048032][T14314] ? trace_irq_disable+0x3b/0x140 [ 435.048060][T14314] ? clear_bhb_loop+0x40/0x90 [ 435.048085][T14314] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.048105][T14314] RIP: 0033:0x7f788bf9cdd9 [ 435.048125][T14314] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 435.048143][T14314] RSP: 002b:00007f788cf16028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 435.048165][T14314] RAX: ffffffffffffffda RBX: 00007f788c215fa0 RCX: 00007f788bf9cdd9 [ 435.048180][T14314] RDX: 0000000000000080 RSI: 0000200000000300 RDI: 0000000000000004 [ 435.048193][T14314] RBP: 00007f788cf16090 R08: 0000000000000000 R09: 0000000000000000 [ 435.048205][T14314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 435.048216][T14314] R13: 00007f788c216038 R14: 00007f788c215fa0 R15: 00007ffeb108ecf8 [ 435.048248][T14314] [ 435.704671][T14336] sctp: [Deprecated]: syz.6.2425 (pid 14336) Use of struct sctp_assoc_value in delayed_ack socket option. [ 435.704671][T14336] Use struct sctp_sack_info instead [ 435.780776][T14336] sctp: [Deprecated]: syz.6.2425 (pid 14336) Use of struct sctp_assoc_value in delayed_ack socket option. [ 435.780776][T14336] Use struct sctp_sack_info instead [ 435.812869][T14336] sctp: [Deprecated]: syz.6.2425 (pid 14336) Use of struct sctp_assoc_value in delayed_ack socket option. [ 435.812869][T14336] Use struct sctp_sack_info instead [ 435.816961][T14341] netlink: 'syz.1.2428': attribute type 2 has an invalid length. [ 435.863684][T14336] sctp: [Deprecated]: syz.6.2425 (pid 14336) Use of struct sctp_assoc_value in delayed_ack socket option. [ 435.863684][T14336] Use struct sctp_sack_info instead [ 435.912912][T14336] sctp: [Deprecated]: syz.6.2425 (pid 14336) Use of struct sctp_assoc_value in delayed_ack socket option. [ 435.912912][T14336] Use struct sctp_sack_info instead [ 435.950620][T14336] sctp: [Deprecated]: syz.6.2425 (pid 14336) Use of struct sctp_assoc_value in delayed_ack socket option. [ 435.950620][T14336] Use struct sctp_sack_info instead [ 436.006322][T14336] sctp: [Deprecated]: syz.6.2425 (pid 14336) Use of struct sctp_assoc_value in delayed_ack socket option. [ 436.006322][T14336] Use struct sctp_sack_info instead [ 436.059375][T14336] sctp: [Deprecated]: syz.6.2425 (pid 14336) Use of struct sctp_assoc_value in delayed_ack socket option. [ 436.059375][T14336] Use struct sctp_sack_info instead [ 436.119514][T14336] sctp: [Deprecated]: syz.6.2425 (pid 14336) Use of struct sctp_assoc_value in delayed_ack socket option. [ 436.119514][T14336] Use struct sctp_sack_info instead [ 436.153971][T14336] sctp: [Deprecated]: syz.6.2425 (pid 14336) Use of struct sctp_assoc_value in delayed_ack socket option. [ 436.153971][T14336] Use struct sctp_sack_info instead [ 436.352260][T14361] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 436.352356][ T5896] IPVS: starting estimator thread 0... [ 436.454598][T14367] IPVS: using max 25 ests per chain, 60000 per kthread [ 436.494322][T14363] bond11: entered promiscuous mode [ 436.500295][T14363] bond11: entered allmulticast mode [ 436.709941][T14381] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 436.775765][T14381] FAULT_INJECTION: forcing a failure. [ 436.775765][T14381] name failslab, interval 1, probability 0, space 0, times 0 [ 436.813110][T14381] CPU: 1 UID: 0 PID: 14381 Comm: syz.1.2441 Not tainted syzkaller #0 PREEMPT(full) [ 436.813141][T14381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 436.813162][T14381] Call Trace: [ 436.813170][T14381] [ 436.813179][T14381] dump_stack_lvl+0xe8/0x150 [ 436.813219][T14381] should_fail_ex+0x412/0x560 [ 436.813258][T14381] should_failslab+0xa8/0x100 [ 436.813288][T14381] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 436.813316][T14381] ? __alloc_skb+0x1d0/0x7d0 [ 436.813335][T14381] ? __local_bh_enable_ip+0xd0/0x130 [ 436.813371][T14381] __alloc_skb+0x1d0/0x7d0 [ 436.813391][T14381] ? netlink_ack_tlv_len+0x6c/0x210 [ 436.813415][T14381] netlink_ack+0x146/0xa50 [ 436.813433][T14381] ? __pfx_genl_rcv_msg+0x10/0x10 [ 436.813458][T14381] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 436.813481][T14381] ? __pfx_nl80211_post_doit+0x10/0x10 [ 436.813504][T14381] ? __pfx_ref_tracker_free+0x10/0x10 [ 436.813538][T14381] netlink_rcv_skb+0x2b6/0x4b0 [ 436.813561][T14381] ? __pfx_genl_rcv_msg+0x10/0x10 [ 436.813589][T14381] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 436.813628][T14381] ? down_read+0x270/0x2e0 [ 436.813655][T14381] ? genl_rcv+0xd/0x40 [ 436.813682][T14381] genl_rcv+0x28/0x40 [ 436.813705][T14381] netlink_unicast+0x75c/0x8e0 [ 436.813747][T14381] netlink_sendmsg+0x813/0xb40 [ 436.813780][T14381] ? __pfx_netlink_sendmsg+0x10/0x10 [ 436.813805][T14381] ? aa_sock_msg_perm+0xf1/0x1b0 [ 436.813828][T14381] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 436.813857][T14381] ____sys_sendmsg+0x972/0x9f0 [ 436.813880][T14381] ? __might_fault+0xaf/0x130 [ 436.813909][T14381] ? __pfx_____sys_sendmsg+0x10/0x10 [ 436.813941][T14381] ? import_iovec+0x73/0xa0 [ 436.813969][T14381] ___sys_sendmsg+0x2a5/0x360 [ 436.813990][T14381] ? __lock_acquire+0x6b5/0x2cf0 [ 436.814025][T14381] ? __pfx____sys_sendmsg+0x10/0x10 [ 436.814089][T14381] ? __fget_files+0x2a/0x420 [ 436.814109][T14381] ? __fget_files+0x3a0/0x420 [ 436.814142][T14381] __x64_sys_sendmsg+0x1bd/0x2a0 [ 436.814177][T14381] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 436.814210][T14381] ? __pfx_ksys_write+0x10/0x10 [ 436.814246][T14381] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.814269][T14381] do_syscall_64+0x15f/0xf80 [ 436.814295][T14381] ? trace_irq_disable+0x3b/0x140 [ 436.814321][T14381] ? clear_bhb_loop+0x40/0x90 [ 436.814347][T14381] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.814366][T14381] RIP: 0033:0x7f3f6f59cdd9 [ 436.814387][T14381] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 436.814403][T14381] RSP: 002b:00007f3f70437028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 436.814425][T14381] RAX: ffffffffffffffda RBX: 00007f3f6f815fa0 RCX: 00007f3f6f59cdd9 [ 436.814440][T14381] RDX: 0000000000000080 RSI: 0000200000000300 RDI: 0000000000000004 [ 436.814458][T14381] RBP: 00007f3f70437090 R08: 0000000000000000 R09: 0000000000000000 [ 436.814470][T14381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 436.814482][T14381] R13: 00007f3f6f816038 R14: 00007f3f6f815fa0 R15: 00007ffc94e16988 [ 436.814516][T14381] [ 437.149297][T14389] IPv6: NLM_F_CREATE should be specified when creating new route [ 437.789772][T14405] vlan2: entered allmulticast mode [ 437.818210][T14405] hsr0: entered allmulticast mode [ 437.840140][T14405] hsr_slave_0: entered allmulticast mode [ 437.855136][T14405] hsr_slave_1: entered allmulticast mode [ 437.863965][T14418] openvswitch: netlink: Flow key attr not present in new flow. [ 438.058781][T14424] netlink: 'syz.3.2454': attribute type 2 has an invalid length. [ 438.446558][T14450] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 438.474318][T14456] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 438.496219][T14450] FAULT_INJECTION: forcing a failure. [ 438.496219][T14450] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 438.510365][T14450] CPU: 0 UID: 0 PID: 14450 Comm: syz.5.2459 Not tainted syzkaller #0 PREEMPT(full) [ 438.510395][T14450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 438.510406][T14450] Call Trace: [ 438.510414][T14450] [ 438.510422][T14450] dump_stack_lvl+0xe8/0x150 [ 438.510460][T14450] should_fail_ex+0x412/0x560 [ 438.510498][T14450] _copy_to_user+0x31/0xb0 [ 438.510524][T14450] simple_read_from_buffer+0xe1/0x170 [ 438.510552][T14450] proc_fail_nth_read+0x1bb/0x230 [ 438.510579][T14450] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 438.510606][T14450] ? rw_verify_area+0x2a6/0x4d0 [ 438.510632][T14450] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 438.510657][T14450] vfs_read+0x20c/0xa70 [ 438.510689][T14450] ? __pfx___mutex_lock+0x10/0x10 [ 438.510716][T14450] ? __pfx_vfs_read+0x10/0x10 [ 438.510739][T14450] ? __fget_files+0x2a/0x420 [ 438.510762][T14450] ? __fget_files+0x3a0/0x420 [ 438.510779][T14450] ? __fget_files+0x2a/0x420 [ 438.510804][T14450] ksys_read+0x150/0x270 [ 438.510828][T14450] ? __pfx_ksys_read+0x10/0x10 [ 438.510857][T14450] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.510883][T14450] do_syscall_64+0x15f/0xf80 [ 438.510906][T14450] ? trace_irq_disable+0x3b/0x140 [ 438.510930][T14450] ? clear_bhb_loop+0x40/0x90 [ 438.510953][T14450] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.510973][T14450] RIP: 0033:0x7f788bf5d60e [ 438.510993][T14450] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 438.511011][T14450] RSP: 002b:00007f788cf15fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 438.511034][T14450] RAX: ffffffffffffffda RBX: 00007f788cf166c0 RCX: 00007f788bf5d60e [ 438.511048][T14450] RDX: 000000000000000f RSI: 00007f788cf160a0 RDI: 0000000000000006 [ 438.511060][T14450] RBP: 00007f788cf16090 R08: 0000000000000000 R09: 0000000000000000 [ 438.511072][T14450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 438.511083][T14450] R13: 00007f788c216038 R14: 00007f788c215fa0 R15: 00007ffeb108ecf8 [ 438.511119][T14450] [ 438.816695][T14466] __nla_validate_parse: 149 callbacks suppressed [ 438.816717][T14466] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2463'. [ 438.832523][T14466] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2463'. [ 439.371888][T14492] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2470'. [ 439.782166][T14509] IPVS: ip_vs_add_dest(): server weight less than zero [ 439.849471][T14474] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 439.856790][T14474] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 439.919725][T14474] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 439.937261][T14474] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 439.979313][T14474] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 439.997828][T14474] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 440.033500][T14474] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 440.052314][T14474] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 440.089924][T14474] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 440.099175][T14519] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2477'. [ 440.100641][T14474] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 440.190320][T14474] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 440.217449][T14474] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 440.280598][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.392753][T14474] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 440.421518][T14474] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 440.688553][T14550] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2484'. [ 440.982670][T14566] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2489'. [ 441.093527][T14569] pim6reg1: entered promiscuous mode [ 441.100879][T14569] pim6reg1: entered allmulticast mode [ 441.320514][T14577] Cannot find add_set index 3 as target [ 441.443235][T14583] ip6t_srh: unknown srh invflags 4000 [ 441.464197][T14583] netlink: 'syz.4.2495': attribute type 39 has an invalid length. [ 441.527436][T14586] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2494'. [ 441.560084][T14583] hsr_slave_1 (unregistering): left promiscuous mode [ 441.573524][T14596] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2496'. [ 441.589663][T14591] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2494'. [ 441.959631][T14609] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2501'. [ 442.469492][T14639] netlink: 'syz.6.2509': attribute type 1 has an invalid length. [ 442.749897][T14648] openvswitch: netlink: IPv6 tunnel dst address is zero [ 442.939999][T14654] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 442.955640][T14654] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 443.000315][T14660] netlink: 'syz.1.2514': attribute type 1 has an invalid length. [ 443.052791][T14660] bond8: (slave vxcan1): The slave device specified does not support setting the MAC address [ 443.065149][T14660] bond8: (slave vxcan1): Error -95 calling set_mac_address [ 443.092636][T14665] openvswitch: netlink: Missing valid actions attribute. [ 443.147488][T14665] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 443.222615][ T9540] tipc: Subscription rejected, illegal request [ 443.289200][T14669] bond8: (slave gretap2): making interface the new active one [ 443.323067][T14669] bond8: (slave gretap2): Enslaving as an active interface with an up link [ 443.403218][T14678] xt_l2tp: v2 doesn't support IP mode [ 443.474192][T14683] netlink: 'syz.5.2519': attribute type 8 has an invalid length. [ 443.692708][T14697] bond0: Device is already in use. [ 444.166862][T14719] syzkaller0: entered promiscuous mode [ 444.172784][T14719] syzkaller0: entered allmulticast mode [ 444.660393][T14744] xt_TCPMSS: Only works on TCP SYN packets [ 444.817894][T14750] __nla_validate_parse: 7 callbacks suppressed [ 444.817915][T14750] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2534'. [ 444.982460][T14760] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 445.017338][T14760] xt_hashlimit: size too large, truncated to 1048576 [ 445.047492][T14762] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 445.092688][T14764] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2540'. [ 445.742334][T14795] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2549'. [ 445.778316][T14787] bond9: Unable to set down delay as MII monitoring is disabled [ 445.786826][T14799] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 445.822394][T14787] bond9 (unregistering): Released all slaves [ 446.126893][T14806] : renamed from veth1_vlan (while UP) [ 446.266413][T14816] veth0: entered promiscuous mode [ 446.279213][T14813] veth0: left promiscuous mode [ 446.306417][T14792] netlink: 'syz.4.2549': attribute type 1 has an invalid length. [ 446.318291][T14792] netlink: 'syz.4.2549': attribute type 2 has an invalid length. [ 446.881282][T14855] tipc: Enabling of bearer rejected, already enabled [ 447.048159][T14857] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 447.086482][T14857] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 447.119324][T14863] netlink: 'syz.4.2566': attribute type 2 has an invalid length. [ 447.127944][T14858] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 447.128201][T14862] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 447.143047][T14862] IPv6: NLM_F_CREATE should be set when creating new route [ 447.148317][T14858] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 447.150560][T14862] IPv6: NLM_F_CREATE should be set when creating new route [ 447.166826][T14862] IPv6: NLM_F_CREATE should be set when creating new route [ 447.198299][T14867] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2566'. [ 447.230482][T14867] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2566'. [ 447.280215][T14870] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 447.350327][T14872] netlink: 'syz.5.2569': attribute type 1 has an invalid length. [ 447.358310][T14858] netlink: 'syz.3.2564': attribute type 10 has an invalid length. [ 447.404423][T14858] bond0: (slave wlan1): Opening slave failed [ 447.416404][T14870] syzkaller1: entered promiscuous mode [ 447.428286][T14870] syzkaller1: entered allmulticast mode [ 447.468099][T14876] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2570'. [ 447.471402][T14880] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2570'. [ 447.489359][T14875] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2570'. [ 447.500440][T14873] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2569'. [ 447.928366][T14899] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2577'. [ 449.320016][T14982] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 449.347790][T14984] syzkaller0: entered promiscuous mode [ 449.362395][T14984] syzkaller0: entered allmulticast mode [ 449.897755][T15014] __nla_validate_parse: 9 callbacks suppressed [ 449.897776][T15014] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2611'. [ 449.918102][T15014] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2611'. [ 449.940953][T15013] veth0: entered promiscuous mode [ 449.950776][T15014] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2611'. [ 449.958472][T15013] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2610'. [ 450.186314][T15020] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 450.375076][T15011] veth0: left promiscuous mode [ 450.497351][T15042] netlink: 'syz.5.2617': attribute type 1 has an invalid length. [ 450.626117][T15047] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2618'. [ 450.666229][T15051] netlink: 'syz.1.2619': attribute type 1 has an invalid length. [ 450.716231][T15051] netlink: 'syz.1.2619': attribute type 7 has an invalid length. [ 450.741485][T15051] netlink: 'syz.1.2619': attribute type 8 has an invalid length. [ 450.789661][T15051] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2619'. [ 450.817551][T15044] bond0: (slave bridge4): making interface the new active one [ 450.876465][T15044] bond0: (slave bridge4): Enslaving as an active interface with an up link [ 450.931760][T15062] netlink: 'syz.6.2622': attribute type 1 has an invalid length. [ 450.969223][T15062] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 450.976603][T15062] IPv6: NLM_F_CREATE should be set when creating new route [ 451.094953][T15067] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2624'. [ 451.119015][T15069] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2625'. [ 451.328446][T15069] ip6gretap0 (unregistering): left promiscuous mode [ 451.873501][T15111] netlink: 320 bytes leftover after parsing attributes in process `syz.1.2629'. [ 451.904356][T15097] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 452.223030][T15117] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 452.741788][T15110] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2632'. [ 453.079469][T15141] netlink: 'syz.1.2640': attribute type 3 has an invalid length. [ 453.351336][T15158] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 453.983082][T15197] netlink: 'syz.4.2652': attribute type 10 has an invalid length. [ 454.198127][T15208] ieee802154 phy1 wpan1: encryption failed: -22 [ 454.288605][T15210] netlink: 'syz.4.2655': attribute type 51 has an invalid length. [ 454.318888][T15210] batman_adv: batadv0: Removing interface: netdevsim0 [ 454.360790][ T25] block nbd2: Possible stuck request ffff8880271f7000: control (read@0,1024B). Runtime 90 seconds [ 454.371670][ T25] block nbd2: Possible stuck request ffff8880271f71c0: control (read@1024,1024B). Runtime 90 seconds [ 454.383449][ T25] block nbd2: Possible stuck request ffff8880271f7380: control (read@2048,1024B). Runtime 90 seconds [ 454.427578][T15210] bond0: (slave batadv0): Releasing backup interface [ 454.502568][T15210] batadv0 (unregistering): left promiscuous mode [ 454.531177][ T25] block nbd2: Possible stuck request ffff8880271f7540: control (read@3072,1024B). Runtime 90 seconds [ 454.619472][T15226] syzkaller0: entered promiscuous mode [ 455.178870][T15242] syzkaller0: entered promiscuous mode [ 455.191333][T15242] syzkaller0: entered allmulticast mode [ 455.323502][T15252] bond0: entered allmulticast mode [ 455.339798][T15252] __nla_validate_parse: 11 callbacks suppressed [ 455.339817][T15252] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2664'. [ 455.379589][T15252] openvswitch: netlink: Flow actions attr not present in new flow. [ 455.593494][T15268] netlink: 'syz.5.2670': attribute type 10 has an invalid length. [ 455.656669][T15272] netlink: 'syz.5.2670': attribute type 10 has an invalid length. [ 455.672548][T15272] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2670'. [ 455.733209][T15266] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 455.787565][T15268] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 455.887893][T15272] batadv0: entered promiscuous mode [ 455.922149][T15272] batadv0: entered allmulticast mode [ 455.947919][T15272] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 456.238592][ T5162] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 456.259182][ T5162] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 456.270072][ T5162] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 456.282921][ T5162] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 456.291936][ T5162] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 456.344926][ T5846] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 456.354441][ T5846] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 456.365981][ T5846] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 456.380093][ T5846] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 456.389069][ T5846] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 456.542662][T15291] netlink: 212344 bytes leftover after parsing attributes in process `syz.5.2678'. [ 457.159446][T15310] netlink: 'syz.3.2686': attribute type 1 has an invalid length. [ 457.185411][T15309] netlink: 'syz.3.2686': attribute type 1 has an invalid length. [ 457.220130][T15310] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2686'. [ 457.638250][ T6203] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.671086][ T6203] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 457.671727][T15331] netlink: 256 bytes leftover after parsing attributes in process `syz.5.2691'. [ 457.756743][T15333] : entered promiscuous mode [ 457.797912][ T6203] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.813954][ T6203] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 458.144938][ T6203] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.165620][ T6203] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 458.434949][ T5162] Bluetooth: hci7: command tx timeout [ 458.476019][ T6203] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.487614][ T6203] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 458.551832][T15356] bridge3: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 459.183585][T15286] chnl_net:caif_netlink_parms(): no params data found [ 459.790235][T15417] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2711'. [ 459.941918][T15406] netlink: 240 bytes leftover after parsing attributes in process `syz.5.2711'. [ 460.003496][ T6203] bridge_slave_0: left allmulticast mode [ 460.021132][ T6203] bridge_slave_0: left promiscuous mode [ 460.045227][ T6203] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.132025][T15432] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 460.331078][T15436] netlink: 'syz.6.2716': attribute type 1 has an invalid length. [ 460.503941][ T6203] bond5 (unregistering): (slave ip6gre2): Releasing backup interface [ 460.514766][ T5162] Bluetooth: hci7: command tx timeout [ 460.651217][ T6203] bond0 (unregistering): (slave gretap1): Releasing active interface [ 460.683455][ T6203] bond8 (unregistering): (slave gretap2): Releasing active interface [ 460.819001][ T6203] bond2 (unregistering): (slave bridge1): Releasing backup interface [ 460.827404][ T6203] bridge1 (unregistering): left promiscuous mode [ 460.870762][ T6203] bond6 (unregistering): (slave bridge2): Releasing backup interface [ 460.879012][ T6203] bridge2 (unregistering): left promiscuous mode [ 461.020228][ T6203] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 461.030958][ T6203] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 461.041793][ T6203] .` (unregistering): (slave bridge_slave_1): Releasing backup interface [ 461.051744][ T6203] .` (unregistering): Released all slaves [ 461.063736][ T6203] bond1 (unregistering): Released all slaves [ 461.081541][ T6203] bond2 (unregistering): Released all slaves [ 461.107054][ T6203] bond0 (unregistering): Released all slaves [ 461.135050][ T6203] bond3 (unregistering): Released all slaves [ 461.149757][ T6203] bond4 (unregistering): Released all slaves [ 461.165882][ T6203] bond5 (unregistering): Released all slaves [ 461.191611][ T6203] bond6 (unregistering): Released all slaves [ 461.210423][ T6203] bond7 (unregistering): Released all slaves [ 461.225270][ T6203] bond8 (unregistering): Released all slaves [ 461.244686][T15286] bridge0: port 1(bridge_slave_0) entered blocking state [ 461.252907][T15286] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.263872][T15286] bridge_slave_0: entered allmulticast mode [ 461.277186][T15286] bridge_slave_0: entered promiscuous mode [ 461.317908][T15426] erspan0: entered promiscuous mode [ 461.347690][ T5507] 8021q: adding VLAN 0 to HW filter on device eth1 [ 461.398281][T15286] bridge0: port 2(bridge_slave_1) entered blocking state [ 461.420026][T15286] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.456295][T15286] bridge_slave_1: entered allmulticast mode [ 461.509842][T15286] bridge_slave_1: entered promiscuous mode [ 461.638369][T15447] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2721'. [ 461.650295][T15449] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2721'. [ 461.667812][T15447] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2721'. [ 461.679962][T15447] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2721'. [ 461.681151][T15449] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2721'. [ 461.702351][T15449] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2721'. [ 461.773402][ T6203] IPVS: stopping master sync thread 8268 ... [ 461.781292][T15444] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2719'. [ 461.820237][T15286] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 461.891860][ T9540] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 461.892083][T15447] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2721'. [ 461.924324][T15447] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2721'. [ 461.934111][T15447] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2721'. [ 461.955228][T15286] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 461.980109][ T9540] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 462.016046][ T9540] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 462.028379][T15455] netlink: 'syz.3.2722': attribute type 1 has an invalid length. [ 462.155311][T15455] 8021q: adding VLAN 0 to HW filter on device bond12 [ 462.347016][ T9540] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 462.381828][T15286] team0: Port device team_slave_0 added [ 462.423387][T15286] team0: Port device team_slave_1 added [ 462.598139][ T5162] Bluetooth: hci7: command tx timeout [ 462.651115][T15481] netlink: 'syz.3.2727': attribute type 3 has an invalid length. [ 462.734854][T15487] netlink: 'syz.5.2728': attribute type 6 has an invalid length. [ 462.897443][T15286] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 462.934801][T15286] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 463.014428][T15286] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 463.050165][T15496] lo: entered promiscuous mode [ 463.057140][T15496] netlink: 'syz.3.2729': attribute type 2 has an invalid length. [ 463.065130][T15496] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 463.185342][T15286] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 463.213949][T15286] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 463.281848][T15286] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 463.861063][ T5507] 8021q: adding VLAN 0 to HW filter on device eth2 [ 463.964301][T15286] hsr_slave_0: entered promiscuous mode [ 464.008895][T15286] hsr_slave_1: entered promiscuous mode [ 464.028178][T15286] debugfs: 'hsr0' already exists in 'hsr' [ 464.051410][T15286] Cannot create hsr debugfs directory [ 464.238291][T15543] netlink: 'syz.5.2738': attribute type 1 has an invalid length. [ 464.333774][ T6203] hsr_slave_0: left promiscuous mode [ 464.369541][ T6203] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 464.397594][ T6203] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 464.426512][ T6203] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 464.435477][ T6203] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 464.462748][ T6203] : left allmulticast mode [ 464.468185][ T6203] veth1_macvtap: left promiscuous mode [ 464.476988][ T6203] veth0_macvtap: left promiscuous mode [ 464.482786][ T6203] : left promiscuous mode [ 464.675738][ T5162] Bluetooth: hci7: command tx timeout [ 464.832055][ T6203] team0 (unregistering): Port device team_slave_1 removed [ 464.853115][ T6203] team0 (unregistering): Port device team_slave_0 removed [ 464.964888][ T6203] team0 (unregistering): Port device dummy0 removed [ 464.982500][ T6203] vcan0 (unregistering): left allmulticast mode [ 465.599409][ T6203] IPVS: stop unused estimator thread 0... [ 466.321424][T15286] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 466.334032][T15286] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 466.348784][T15286] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 466.362033][T15286] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 466.376880][T15286] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 466.392155][T15286] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 466.403396][T15286] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 466.417418][T15286] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 466.543820][T15286] 8021q: adding VLAN 0 to HW filter on device bond0 [ 466.578495][T15286] 8021q: adding VLAN 0 to HW filter on device team0 [ 466.599226][ T9527] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.606454][ T9527] bridge0: port 1(bridge_slave_0) entered forwarding state [ 466.634546][ T9527] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.641804][ T9527] bridge0: port 2(bridge_slave_1) entered forwarding state [ 467.009266][T15286] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 467.086689][T15286] veth0_vlan: entered promiscuous mode [ 467.109431][T15286] veth1_vlan: entered promiscuous mode [ 467.163431][T15286] veth0_macvtap: entered promiscuous mode [ 467.179515][T15286] veth1_macvtap: entered promiscuous mode [ 467.211004][T15286] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 467.238408][T15286] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 467.265817][ T9527] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.284026][ T9527] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.319192][ T9527] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.353626][ T9527] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.473351][ T9525] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 467.494841][ T9525] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 467.551227][ T9525] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 467.566077][ T9525] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 470.530478][ T5211] udevd[5211]: worker [9988] /devices/virtual/block/nbd2 is taking a long time [ 484.437248][ T25] block nbd2: Possible stuck request ffff8880271f7000: control (read@0,1024B). Runtime 120 seconds [ 484.448112][ T25] block nbd2: Possible stuck request ffff8880271f71c0: control (read@1024,1024B). Runtime 120 seconds [ 484.459484][ T25] block nbd2: Possible stuck request ffff8880271f7380: control (read@2048,1024B). Runtime 120 seconds [ 484.545605][ T25] block nbd2: Possible stuck request ffff8880271f7540: control (read@3072,1024B). Runtime 120 seconds [ 501.718000][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 514.518865][ T25] block nbd2: Possible stuck request ffff8880271f7000: control (read@0,1024B). Runtime 150 seconds [ 514.529887][ T25] block nbd2: Possible stuck request ffff8880271f71c0: control (read@1024,1024B). Runtime 150 seconds [ 514.541525][ T25] block nbd2: Possible stuck request ffff8880271f7380: control (read@2048,1024B). Runtime 150 seconds [ 514.566502][ T25] block nbd2: Possible stuck request ffff8880271f7540: control (read@3072,1024B). Runtime 150 seconds [ 517.667655][T15681] netlink: 'syz.5.2753': attribute type 2 has an invalid length. [ 517.708365][ T5846] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 517.732155][ T5846] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 517.742480][ T5846] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 517.756870][ T5846] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 517.769396][ T5846] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 518.167381][T15689] bond11: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 518.188054][T15689] bond11 (unregistering): Released all slaves [ 518.737941][T15709] __nla_validate_parse: 14 callbacks suppressed [ 518.737963][T15709] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2762'. [ 518.763865][T15714] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2763'. [ 519.073427][T15723] xt_hashlimit: overflow, try lower: 3/0 [ 519.795314][ T5162] Bluetooth: hci4: command tx timeout [ 521.875126][ T5162] Bluetooth: hci4: command tx timeout [ 522.389420][T15739] netlink: 256 bytes leftover after parsing attributes in process `syz.5.2770'. [ 522.503545][T15739] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2770'. [ 522.569669][T15748] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2772'. [ 522.642740][T15748] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2772'. [ 522.725159][T15748] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2772'. [ 522.778662][T15680] chnl_net:caif_netlink_parms(): no params data found [ 522.851997][T15763] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2776'. [ 522.890567][T15763] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048) [ 523.252511][T15680] bridge0: port 1(bridge_slave_0) entered blocking state [ 523.286941][T15680] bridge0: port 1(bridge_slave_0) entered disabled state [ 523.312634][T15680] bridge_slave_0: entered allmulticast mode [ 523.345239][T15680] bridge_slave_0: entered promiscuous mode [ 523.381886][T15680] bridge0: port 2(bridge_slave_1) entered blocking state [ 523.412164][T15680] bridge0: port 2(bridge_slave_1) entered disabled state [ 523.442238][T15680] bridge_slave_1: entered allmulticast mode [ 523.447524][T15782] netlink: 7064 bytes leftover after parsing attributes in process `syz.5.2781'. [ 523.473753][T15680] bridge_slave_1: entered promiscuous mode [ 523.506827][T15782] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 523.591561][T15680] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 523.621684][T15680] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 523.735050][T15802] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2788'. [ 523.739847][T15680] team0: Port device team_slave_0 added [ 523.784331][ T5926] IPVS: starting estimator thread 0... [ 523.854181][T15680] team0: Port device team_slave_1 added [ 523.894664][T15808] IPVS: using max 29 ests per chain, 69600 per kthread [ 523.965246][ T5162] Bluetooth: hci4: command tx timeout [ 524.001874][T15680] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 524.021344][T15680] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 524.064948][T15680] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 524.128545][T15680] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 524.162464][T15680] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 524.234155][T15680] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 524.312423][T15810] team0 (unregistering): Failed to send options change via netlink (err -105) [ 524.336865][T15810] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105) [ 524.351197][T15810] team0 (unregistering): Port device team_slave_0 removed [ 524.367537][T15810] team0 (unregistering): Failed to send options change via netlink (err -105) [ 524.396015][T15810] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 524.426655][T15810] team0 (unregistering): Port device team_slave_1 removed [ 524.444720][T15810] team0 (unregistering): Failed to send options change via netlink (err -105) [ 524.465445][T15810] team0 (unregistering): Failed to send port change of device gretap1 via netlink (err -105) [ 524.478429][T15810] team0 (unregistering): Port device gretap1 removed [ 524.540036][T15832] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2795'. [ 524.691776][T15680] hsr_slave_0: entered promiscuous mode [ 524.699404][T15680] hsr_slave_1: entered promiscuous mode [ 525.469699][T15680] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.577818][T15680] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.677748][T15680] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.036266][ T5162] Bluetooth: hci4: command tx timeout [ 526.543050][T15680] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 526.552386][T15875] IPv6: addrconf: prefix option has invalid lifetime [ 526.607099][T15680] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 526.621800][T15878] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2810'. [ 526.630697][T15680] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 526.651723][T15878] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2810'. [ 526.653665][T15680] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 526.679491][T15680] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 526.694266][T15878] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2810'. [ 526.736197][T15680] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 526.761459][T15680] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 526.789030][T15680] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 526.805016][T15882] netlink: 'syz.5.2811': attribute type 3 has an invalid length. [ 526.829546][T15883] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 526.858471][T15883] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2812'. [ 527.060300][T15893] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2814'. [ 527.091615][T15680] 8021q: adding VLAN 0 to HW filter on device bond0 [ 527.149337][T15680] 8021q: adding VLAN 0 to HW filter on device team0 [ 527.161670][T15895] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2815'. [ 527.188995][ T9540] bridge0: port 1(bridge_slave_0) entered blocking state [ 527.196265][ T9540] bridge0: port 1(bridge_slave_0) entered forwarding state [ 527.250230][ T9527] bridge0: port 2(bridge_slave_1) entered blocking state [ 527.257549][ T9527] bridge0: port 2(bridge_slave_1) entered forwarding state [ 528.034219][T15680] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 528.162316][T15680] veth0_vlan: entered promiscuous mode [ 528.210123][T15680] veth1_vlan: entered promiscuous mode [ 528.276155][T15680] veth0_macvtap: entered promiscuous mode [ 528.309096][T15680] veth1_macvtap: entered promiscuous mode [ 528.345730][T15680] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 528.372350][T15680] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 528.400797][ T9527] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.416670][ T9527] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.439143][ T9527] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.448563][ T9527] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.733760][ T9525] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 528.758815][ T9525] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 528.826402][ T9531] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 528.840312][ T9531] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 529.000303][T15949] netlink: 'syz.5.2831': attribute type 1 has an invalid length. [ 529.045547][T15949] netlink: 'syz.5.2831': attribute type 4 has an invalid length. [ 529.070007][T15949] netlink: 9422 bytes leftover after parsing attributes in process `syz.5.2831'. [ 529.536387][T15967] mac80211_hwsim hwsim29 syzkaller0: entered promiscuous mode [ 529.611059][T15967] mac80211_hwsim hwsim29 syzkaller0: entered allmulticast mode [ 529.612644][T15971] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2838'. [ 529.706340][T15977] syzkaller1: entered promiscuous mode [ 529.725423][T15977] syzkaller1: entered allmulticast mode [ 530.044027][T15993] netlink: 248 bytes leftover after parsing attributes in process `syz.6.2845'. [ 530.166194][T15999] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2846'. [ 530.173377][T15995] syzkaller1: entered promiscuous mode [ 530.180840][T15995] syzkaller1: entered allmulticast mode [ 530.341973][T16004] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2849'. [ 530.351468][T16004] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2849'. [ 530.387876][T16004] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2849'. [ 530.409209][T16007] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.2850'. [ 530.419444][T16007] bridge_slave_1: default FDB implementation only supports local addresses [ 530.622980][T16016] xt_SECMARK: invalid mode: 9 [ 531.001251][T16033] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2857'. [ 531.005768][T16032] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2857'. [ 531.146390][T16039] netlink: 'syz.5.2859': attribute type 2 has an invalid length. [ 531.226041][T16041] batadv_slave_0: entered promiscuous mode [ 531.977436][T16036] batadv_slave_0: left promiscuous mode [ 532.068584][T16066] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2867'. [ 532.140139][T16066] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 532.157036][T16066] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 532.188251][T16071] macvlan2: entered promiscuous mode [ 532.194119][T16071] macvlan2: entered allmulticast mode [ 532.200932][T16071] bond4: (slave macvlan2): Error -98 calling set_mac_address [ 532.482026][T11071] NFSD: Failed to start, no listeners configured. [ 532.859721][T16095] vlan2: entered allmulticast mode [ 532.885324][T16095] bond0: entered allmulticast mode [ 532.903272][T16095] bond_slave_0: entered allmulticast mode [ 532.922479][T16095] bond_slave_1: entered allmulticast mode [ 532.940396][T16095] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 532.981411][T16103] netlink: 'syz.1.2881': attribute type 33 has an invalid length. [ 533.011182][T16104] netlink: 'syz.1.2881': attribute type 33 has an invalid length. [ 533.183213][T16113] FAULT_INJECTION: forcing a failure. [ 533.183213][T16113] name failslab, interval 1, probability 0, space 0, times 0 [ 533.209048][T16113] CPU: 0 UID: 0 PID: 16113 Comm: syz.6.2884 Not tainted syzkaller #0 PREEMPT(full) [ 533.209103][T16113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 533.209116][T16113] Call Trace: [ 533.209124][T16113] [ 533.209134][T16113] dump_stack_lvl+0xe8/0x150 [ 533.209189][T16113] should_fail_ex+0x412/0x560 [ 533.209229][T16113] should_failslab+0xa8/0x100 [ 533.209258][T16113] __kmalloc_noprof+0xe8/0x760 [ 533.209285][T16113] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 533.209319][T16113] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 533.209357][T16113] genl_family_rcv_msg_doit+0xd9/0x330 [ 533.209382][T16113] ? __asan_memcpy+0x40/0x70 [ 533.209408][T16113] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 533.209450][T16113] ? apparmor_capable+0x126/0x170 [ 533.209477][T16113] ? bpf_lsm_capable+0x9/0x20 [ 533.209504][T16113] ? security_capable+0x7e/0x2c0 [ 533.209544][T16113] genl_rcv_msg+0x61c/0x7a0 [ 533.209579][T16113] ? __pfx_genl_rcv_msg+0x10/0x10 [ 533.209605][T16113] ? __pfx_mptcp_pm_nl_add_addr_doit+0x10/0x10 [ 533.209633][T16113] ? __pfx_ref_tracker_free+0x10/0x10 [ 533.209667][T16113] netlink_rcv_skb+0x232/0x4b0 [ 533.209688][T16113] ? __pfx_genl_rcv_msg+0x10/0x10 [ 533.209714][T16113] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 533.209754][T16113] ? down_read+0x270/0x2e0 [ 533.209781][T16113] ? genl_rcv+0xd/0x40 [ 533.209807][T16113] genl_rcv+0x28/0x40 [ 533.209831][T16113] netlink_unicast+0x75c/0x8e0 [ 533.209873][T16113] netlink_sendmsg+0x813/0xb40 [ 533.209906][T16113] ? __pfx_netlink_sendmsg+0x10/0x10 [ 533.209932][T16113] ? aa_sock_msg_perm+0xf1/0x1b0 [ 533.209956][T16113] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 533.209984][T16113] ____sys_sendmsg+0x972/0x9f0 [ 533.210008][T16113] ? __might_fault+0xaf/0x130 [ 533.210040][T16113] ? __pfx_____sys_sendmsg+0x10/0x10 [ 533.210083][T16113] ? import_iovec+0x73/0xa0 [ 533.210110][T16113] ___sys_sendmsg+0x2a5/0x360 [ 533.210130][T16113] ? __lock_acquire+0x6b5/0x2cf0 [ 533.210164][T16113] ? __pfx____sys_sendmsg+0x10/0x10 [ 533.210223][T16113] ? __fget_files+0x2a/0x420 [ 533.210245][T16113] ? __fget_files+0x3a0/0x420 [ 533.210278][T16113] __x64_sys_sendmsg+0x1bd/0x2a0 [ 533.210304][T16113] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 533.210340][T16113] ? __pfx_ksys_write+0x10/0x10 [ 533.210375][T16113] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.210399][T16113] do_syscall_64+0x15f/0xf80 [ 533.210426][T16113] ? trace_irq_disable+0x3b/0x140 [ 533.210454][T16113] ? clear_bhb_loop+0x40/0x90 [ 533.210481][T16113] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.210501][T16113] RIP: 0033:0x7fc2fa39cdd9 [ 533.210523][T16113] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 533.210541][T16113] RSP: 002b:00007fc2f85d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 533.210564][T16113] RAX: ffffffffffffffda RBX: 00007fc2fa616090 RCX: 00007fc2fa39cdd9 [ 533.210578][T16113] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000006 [ 533.210590][T16113] RBP: 00007fc2f85d5090 R08: 0000000000000000 R09: 0000000000000000 [ 533.210602][T16113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 533.210612][T16113] R13: 00007fc2fa616128 R14: 00007fc2fa616090 R15: 00007ffcc38ad6d8 [ 533.210646][T16113] [ 533.671354][T16119] netlink: 'syz.4.2887': attribute type 25 has an invalid length. [ 533.992521][T16134] netlink: 'syz.4.2891': attribute type 12 has an invalid length. [ 534.033732][T16134] netlink: 'syz.4.2891': attribute type 12 has an invalid length. [ 534.665180][T16165] __nla_validate_parse: 12 callbacks suppressed [ 534.665203][T16165] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2901'. [ 534.707655][T16165] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2901'. [ 534.740434][T16168] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2903'. [ 534.767642][T16168] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2903'. [ 534.795573][T16168] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2903'. [ 534.825777][T16168] FAULT_INJECTION: forcing a failure. [ 534.825777][T16168] name failslab, interval 1, probability 0, space 0, times 0 [ 534.841007][T16168] CPU: 0 UID: 0 PID: 16168 Comm: syz.5.2903 Not tainted syzkaller #0 PREEMPT(full) [ 534.841038][T16168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 534.841050][T16168] Call Trace: [ 534.841058][T16168] [ 534.841065][T16168] dump_stack_lvl+0xe8/0x150 [ 534.841125][T16168] should_fail_ex+0x412/0x560 [ 534.841163][T16168] should_failslab+0xa8/0x100 [ 534.841193][T16168] __kmalloc_node_track_caller_noprof+0xeb/0x7b0 [ 534.841221][T16168] ? mptcp_pm_nl_add_addr_doit+0x3b7/0x1420 [ 534.841254][T16168] kmemdup_noprof+0x2b/0x70 [ 534.841302][T16168] mptcp_pm_nl_add_addr_doit+0x3b7/0x1420 [ 534.841341][T16168] ? __pfx___nla_validate_parse+0x10/0x10 [ 534.841373][T16168] ? __pfx_mptcp_pm_nl_add_addr_doit+0x10/0x10 [ 534.841420][T16168] ? rcu_is_watching+0x15/0xb0 [ 534.841443][T16168] ? trace_kmalloc+0x2a/0xf0 [ 534.841483][T16168] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 534.841511][T16168] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 534.841548][T16168] genl_family_rcv_msg_doit+0x22a/0x330 [ 534.841575][T16168] ? __asan_memcpy+0x40/0x70 [ 534.841600][T16168] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 534.841639][T16168] ? bpf_lsm_capable+0x9/0x20 [ 534.841667][T16168] ? security_capable+0x7e/0x2c0 [ 534.841704][T16168] genl_rcv_msg+0x61c/0x7a0 [ 534.841738][T16168] ? __pfx_genl_rcv_msg+0x10/0x10 [ 534.841764][T16168] ? __pfx_mptcp_pm_nl_add_addr_doit+0x10/0x10 [ 534.841789][T16168] ? __pfx_ref_tracker_free+0x10/0x10 [ 534.841822][T16168] netlink_rcv_skb+0x232/0x4b0 [ 534.841844][T16168] ? __pfx_genl_rcv_msg+0x10/0x10 [ 534.841871][T16168] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 534.841909][T16168] ? down_read+0x270/0x2e0 [ 534.841937][T16168] ? genl_rcv+0xd/0x40 [ 534.841962][T16168] genl_rcv+0x28/0x40 [ 534.841985][T16168] netlink_unicast+0x75c/0x8e0 [ 534.842027][T16168] netlink_sendmsg+0x813/0xb40 [ 534.842059][T16168] ? __pfx_netlink_sendmsg+0x10/0x10 [ 534.842084][T16168] ? aa_sock_msg_perm+0xf1/0x1b0 [ 534.842106][T16168] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 534.842135][T16168] ____sys_sendmsg+0x972/0x9f0 [ 534.842159][T16168] ? __might_fault+0xaf/0x130 [ 534.842190][T16168] ? __pfx_____sys_sendmsg+0x10/0x10 [ 534.842223][T16168] ? import_iovec+0x73/0xa0 [ 534.842250][T16168] ___sys_sendmsg+0x2a5/0x360 [ 534.842279][T16168] ? __lock_acquire+0x6b5/0x2cf0 [ 534.842314][T16168] ? __pfx____sys_sendmsg+0x10/0x10 [ 534.842375][T16168] ? __fget_files+0x2a/0x420 [ 534.842396][T16168] ? __fget_files+0x3a0/0x420 [ 534.842426][T16168] __x64_sys_sendmsg+0x1bd/0x2a0 [ 534.842452][T16168] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 534.842487][T16168] ? __pfx_ksys_write+0x10/0x10 [ 534.842523][T16168] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.842547][T16168] do_syscall_64+0x15f/0xf80 [ 534.842574][T16168] ? trace_irq_disable+0x3b/0x140 [ 534.842601][T16168] ? clear_bhb_loop+0x40/0x90 [ 534.842627][T16168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.842647][T16168] RIP: 0033:0x7f788bf9cdd9 [ 534.842667][T16168] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 534.842684][T16168] RSP: 002b:00007f788cf16028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 534.842707][T16168] RAX: ffffffffffffffda RBX: 00007f788c215fa0 RCX: 00007f788bf9cdd9 [ 534.842721][T16168] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000006 [ 534.842733][T16168] RBP: 00007f788cf16090 R08: 0000000000000000 R09: 0000000000000000 [ 534.842745][T16168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 534.842757][T16168] R13: 00007f788c216038 R14: 00007f788c215fa0 R15: 00007ffeb108ecf8 [ 534.842792][T16168] [ 536.236040][T16221] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2918'. [ 536.275970][T16221] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2918'. [ 536.314312][T16221] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2918'. [ 536.489144][T16235] netlink: 'syz.3.2921': attribute type 1 has an invalid length. [ 537.532593][T16278] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2933'. [ 537.650782][T16280] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 537.660715][T16280] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 537.748737][T16284] x_tables: duplicate underflow at hook 3 [ 537.843504][T16289] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2938'. [ 538.211761][T16304] delete_channel: no stack [ 538.233568][T16304] ieee802154 phy1 wpan1: encryption failed: -22 [ 538.601646][T16322] netlink: 'syz.1.2948': attribute type 1 has an invalid length. [ 541.601724][T16322] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 541.801240][T16332] s5ÿÿø: renamed from vlan1 (while UP) [ 541.828403][T16337] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 541.832239][T16340] __nla_validate_parse: 4 callbacks suppressed [ 541.832258][T16340] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2952'. [ 541.859294][T16340] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 541.873078][T16340] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2952'. [ 541.892105][T16340] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2952'. [ 541.903645][T16340] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2952'. [ 541.913490][T16340] netlink: 'syz.3.2952': attribute type 1 has an invalid length. [ 541.929641][T16344] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2953'. [ 542.054923][T16353] netlink: 'syz.6.2953': attribute type 44 has an invalid length. [ 542.074714][T16353] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2953'. [ 543.654681][T16340] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 544.470594][T16385] netlink: 'syz.1.2961': attribute type 29 has an invalid length. [ 544.507919][ T5846] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 544.523734][ T5846] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 544.535902][ T5846] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 544.548248][ T5846] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 544.559259][ T5846] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 544.622307][ T25] block nbd2: Possible stuck request ffff8880271f7000: control (read@0,1024B). Runtime 180 seconds [ 544.634672][ T25] block nbd2: Possible stuck request ffff8880271f71c0: control (read@1024,1024B). Runtime 180 seconds [ 544.646126][ T25] block nbd2: Possible stuck request ffff8880271f7380: control (read@2048,1024B). Runtime 180 seconds [ 544.659207][ T25] block nbd2: Possible stuck request ffff8880271f7540: control (read@3072,1024B). Runtime 180 seconds [ 544.753210][T16396] netlink: 500 bytes leftover after parsing attributes in process `syz.1.2961'. [ 544.790810][T16396] unsupported nla_type 58 [ 544.797059][T16389] netlink: 'syz.1.2961': attribute type 29 has an invalid length. [ 545.256450][T16415] xt_l2tp: missing protocol rule (udp|l2tpip) [ 545.470592][T16417] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2972'. [ 545.516233][T16424] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2973'. [ 545.529519][T16424] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2973'. [ 546.276366][T16456] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 546.416318][T16453] netlink: 'syz.3.2980': attribute type 2 has an invalid length. [ 546.567992][T16468] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 546.590034][T16387] chnl_net:caif_netlink_parms(): no params data found [ 546.675114][ T5846] Bluetooth: hci2: command tx timeout [ 546.780222][T16387] bridge0: port 1(bridge_slave_0) entered blocking state [ 546.787990][T16387] bridge0: port 1(bridge_slave_0) entered disabled state [ 546.795926][T16387] bridge_slave_0: entered allmulticast mode [ 546.810359][T16387] bridge_slave_0: entered promiscuous mode [ 546.821854][T16387] bridge0: port 2(bridge_slave_1) entered blocking state [ 546.830077][T16387] bridge0: port 2(bridge_slave_1) entered disabled state [ 546.837902][T16387] bridge_slave_1: entered allmulticast mode [ 546.847286][T16387] bridge_slave_1: entered promiscuous mode [ 546.898628][T16387] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 546.913834][T16387] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 546.985787][T16387] team0: Port device team_slave_0 added [ 547.010389][T16387] team0: Port device team_slave_1 added [ 547.056006][T16491] netlink: 'syz.3.2991': attribute type 1 has an invalid length. [ 547.298262][T16387] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 547.312605][T16387] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 547.345305][T16387] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 547.385376][T16387] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 547.392408][T16387] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 547.414164][T16501] __nla_validate_parse: 7 callbacks suppressed [ 547.414182][T16501] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2994'. [ 547.446129][T16387] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 547.480907][T16513] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2998'. [ 547.690256][T16518] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2999'. [ 547.710450][T16387] hsr_slave_0: entered promiscuous mode [ 547.722032][T16387] hsr_slave_1: entered promiscuous mode [ 547.732765][T16387] debugfs: 'hsr0' already exists in 'hsr' [ 547.744269][T16387] Cannot create hsr debugfs directory [ 547.849692][T16521] batadv1: entered allmulticast mode [ 547.873184][T16530] netlink: 'syz.6.3003': attribute type 1 has an invalid length. [ 547.938713][T16531] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3003'. [ 548.161381][T16542] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3006'. [ 548.299582][T16543] vlan3: entered allmulticast mode [ 548.305890][T16543] bridge3: entered allmulticast mode [ 548.336098][T16545] bridge3: port 1(erspan0) entered blocking state [ 548.343242][T16545] bridge3: port 1(erspan0) entered disabled state [ 548.350554][T16545] erspan0: entered allmulticast mode [ 548.360187][T16545] erspan0: entered promiscuous mode [ 548.360277][T16548] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3007'. [ 548.368902][T16545] bridge3: port 1(erspan0) entered blocking state [ 548.381318][T16545] bridge3: port 1(erspan0) entered forwarding state [ 548.492351][T16551] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 548.754787][ T5846] Bluetooth: hci2: command tx timeout [ 549.093675][T16387] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 549.127826][T16387] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.152236][T16578] netlink: 324 bytes leftover after parsing attributes in process `syz.3.3017'. [ 549.162364][T16387] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 549.169026][T16579] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3016'. [ 549.198758][T16579] hsr_slave_0: left promiscuous mode [ 549.211630][T16579] hsr_slave_1: left promiscuous mode [ 549.348793][T16387] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 549.396687][T16387] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.408516][T16387] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 549.527408][T16582] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 549.673111][T16387] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 549.689148][T16387] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.700315][T16387] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 549.724387][T16592] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3021'. [ 549.734728][T16592] netlink: 21 bytes leftover after parsing attributes in process `syz.1.3021'. [ 549.910493][T16387] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 549.928584][T16387] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.940599][T16387] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 550.552255][T16621] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 550.786101][T16387] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 550.834909][ T5846] Bluetooth: hci2: command tx timeout [ 550.874027][T16387] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 550.903880][T16387] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 550.971997][T16387] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 551.009276][T16387] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 551.049804][T16387] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 551.332669][T16387] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 551.383097][T16387] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 551.574073][T16657] gretap0: entered allmulticast mode [ 551.952543][T16387] 8021q: adding VLAN 0 to HW filter on device bond0 [ 552.007135][T16387] 8021q: adding VLAN 0 to HW filter on device team0 [ 552.052042][ T1097] bridge0: port 1(bridge_slave_0) entered blocking state [ 552.059437][ T1097] bridge0: port 1(bridge_slave_0) entered forwarding state [ 552.117364][ T1097] bridge0: port 2(bridge_slave_1) entered blocking state [ 552.124945][ T1097] bridge0: port 2(bridge_slave_1) entered forwarding state [ 552.273045][T16692] xt_cluster: node mask cannot exceed total number of nodes [ 552.660426][T16387] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 552.917047][ T5846] Bluetooth: hci2: command tx timeout [ 552.917328][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 552.940593][T16712] __nla_validate_parse: 7 callbacks suppressed [ 552.940615][T16712] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3048'. [ 552.958365][T16712] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3048'. [ 553.088833][T16387] veth0_vlan: entered promiscuous mode [ 553.108766][T16387] veth1_vlan: entered promiscuous mode [ 553.158851][T16387] veth0_macvtap: entered promiscuous mode [ 553.178530][T16387] veth1_macvtap: entered promiscuous mode [ 553.209398][T16387] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 553.229795][T16387] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 553.256923][ T9539] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.272801][ T9539] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.291506][ T9539] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.317610][ T9531] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.519663][T16727] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3050'. [ 553.530579][T16727] netlink: 'syz.6.3050': attribute type 5 has an invalid length. [ 553.540141][T16727] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3050'. [ 553.558083][T16727] geneve2: entered promiscuous mode [ 553.563361][T16727] geneve2: entered allmulticast mode [ 553.572511][ T6202] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 553.581723][ T6202] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 553.591475][ T6202] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 553.600638][ T6202] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 553.652418][T16729] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3051'. [ 553.893110][T16738] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3053'. [ 553.903061][T16738] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 554.907036][T16680] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 555.105852][ T1097] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 555.115842][ T1097] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 555.276818][ T1097] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 555.315363][ T1097] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 555.507123][T16771] bond1 (unregistering): Released all slaves [ 555.760968][T16784] netlink: 10 bytes leftover after parsing attributes in process `syz.3.3065'. [ 555.801492][T16786] netlink: 'syz.4.2958': attribute type 21 has an invalid length. [ 556.140986][T16807] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3071'. [ 556.199787][T16812] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3073'. [ 556.209064][T16810] dvmrp0: entered allmulticast mode [ 556.222197][T16810] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3072'. [ 556.400929][T16817] sctp_getsockopt_delayed_ack: 55 callbacks suppressed [ 556.400952][T16817] sctp: [Deprecated]: syz.4.3076 (pid 16817) Use of struct sctp_assoc_value in delayed_ack socket option. [ 556.400952][T16817] Use struct sctp_sack_info instead [ 556.478772][T16821] atomic_op ffff88807face198 conn xmit_atomic 0000000000000000 [ 556.491603][T16820] atomic_op ffff88807f1f7998 conn xmit_atomic 0000000000000000 [ 556.535148][T16824] tipc: Enabling of bearer rejected, failed to enable media [ 556.623380][T16830] [ 556.625818][T16830] ====================================================== [ 556.632919][T16830] WARNING: possible circular locking dependency detected [ 556.639970][T16830] syzkaller #0 Not tainted [ 556.644413][T16830] ------------------------------------------------------ [ 556.651461][T16830] syz.1.3079/16830 is trying to acquire lock: [ 556.657649][T16830] ffffffff8ff61938 (nr_node_list_lock){+.-.}-{3:3}, at: nr_rt_device_down+0xbe/0x860 [ 556.667266][T16830] [ 556.667266][T16830] but task is already holding lock: [ 556.674640][T16830] ffffffff8ff618d8 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x860 [ 556.684255][T16830] [ 556.684255][T16830] which lock already depends on the new lock. [ 556.684255][T16830] [ 556.694845][T16830] [ 556.694845][T16830] the existing dependency chain (in reverse order) is: [ 556.703881][T16830] [ 556.703881][T16830] -> #2 (nr_neigh_list_lock){+...}-{3:3}: [ 556.711890][T16830] _raw_spin_lock_bh+0x36/0x50 [ 556.717283][T16830] nr_rt_ioctl+0x40c/0xf90 [ 556.722250][T16830] sock_do_ioctl+0x101/0x320 [ 556.727372][T16830] sock_ioctl+0x5c6/0x7f0 [ 556.732242][T16830] __se_sys_ioctl+0xfc/0x170 [ 556.737360][T16830] do_syscall_64+0x15f/0xf80 [ 556.742566][T16830] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.748985][T16830] [ 556.748985][T16830] -> #1 (&nr_node->node_lock){+...}-{3:3}: [ 556.756999][T16830] _raw_spin_lock_bh+0x36/0x50 [ 556.762303][T16830] nr_rt_ioctl+0x215/0xf90 [ 556.767336][T16830] sock_do_ioctl+0x101/0x320 [ 556.772550][T16830] sock_ioctl+0x5c6/0x7f0 [ 556.777424][T16830] __se_sys_ioctl+0xfc/0x170 [ 556.782566][T16830] do_syscall_64+0x15f/0xf80 [ 556.787868][T16830] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.794432][T16830] [ 556.794432][T16830] -> #0 (nr_node_list_lock){+.-.}-{3:3}: [ 556.802296][T16830] __lock_acquire+0x15a5/0x2cf0 [ 556.807776][T16830] lock_acquire+0x106/0x350 [ 556.813087][T16830] _raw_spin_lock_bh+0x36/0x50 [ 556.818383][T16830] nr_rt_device_down+0xbe/0x860 [ 556.823764][T16830] nr_device_event+0x137/0x150 [ 556.829063][T16830] notifier_call_chain+0x1ad/0x3d0 [ 556.834708][T16830] __dev_notify_flags+0x16d/0x310 [ 556.840268][T16830] netif_change_flags+0xe8/0x1a0 [ 556.845758][T16830] dev_change_flags+0x130/0x270 [ 556.851147][T16830] dev_ioctl+0x7b4/0x1150 [ 556.856013][T16830] sock_do_ioctl+0x23e/0x320 [ 556.861137][T16830] sock_ioctl+0x5c6/0x7f0 [ 556.865991][T16830] __se_sys_ioctl+0xfc/0x170 [ 556.871144][T16830] do_syscall_64+0x15f/0xf80 [ 556.876270][T16830] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.882688][T16830] [ 556.882688][T16830] other info that might help us debug this: [ 556.882688][T16830] [ 556.892920][T16830] Chain exists of: [ 556.892920][T16830] nr_node_list_lock --> &nr_node->node_lock --> nr_neigh_list_lock [ 556.892920][T16830] [ 556.906750][T16830] Possible unsafe locking scenario: [ 556.906750][T16830] [ 556.914206][T16830] CPU0 CPU1 [ 556.919660][T16830] ---- ---- [ 556.925075][T16830] lock(nr_neigh_list_lock); [ 556.929802][T16830] lock(&nr_node->node_lock); [ 556.937095][T16830] lock(nr_neigh_list_lock); [ 556.944313][T16830] lock(nr_node_list_lock); [ 556.948928][T16830] [ 556.948928][T16830] *** DEADLOCK *** [ 556.948928][T16830] [ 556.957082][T16830] 2 locks held by syz.1.3079/16830: [ 556.962284][T16830] #0: ffffffff8fde4240 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x7a4/0x1150 [ 556.971134][T16830] #1: ffffffff8ff618d8 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x860 [ 556.981252][T16830] [ 556.981252][T16830] stack backtrace: [ 556.987167][T16830] CPU: 0 UID: 0 PID: 16830 Comm: syz.1.3079 Not tainted syzkaller #0 PREEMPT(full) [ 556.987192][T16830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 556.987203][T16830] Call Trace: [ 556.987212][T16830] [ 556.987220][T16830] dump_stack_lvl+0xe8/0x150 [ 556.987250][T16830] print_circular_bug+0x2e1/0x300 [ 556.987271][T16830] check_noncircular+0x12e/0x150 [ 556.987291][T16830] __lock_acquire+0x15a5/0x2cf0 [ 556.987319][T16830] ? __lock_acquire+0x6b5/0x2cf0 [ 556.987342][T16830] ? dsa_user_netdevice_event+0x495/0x2850 [ 556.987362][T16830] ? packet_notifier+0x121/0xf70 [ 556.987382][T16830] ? nr_rt_device_down+0xbe/0x860 [ 556.987396][T16830] lock_acquire+0x106/0x350 [ 556.987417][T16830] ? nr_rt_device_down+0xbe/0x860 [ 556.987433][T16830] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 556.987453][T16830] ? nr_rt_device_down+0xbe/0x860 [ 556.987467][T16830] _raw_spin_lock_bh+0x36/0x50 [ 556.987486][T16830] ? nr_rt_device_down+0xbe/0x860 [ 556.987500][T16830] nr_rt_device_down+0xbe/0x860 [ 556.987513][T16830] ? nr_device_event+0x12f/0x150 [ 556.987540][T16830] nr_device_event+0x137/0x150 [ 556.987563][T16830] notifier_call_chain+0x1ad/0x3d0 [ 556.987583][T16830] __dev_notify_flags+0x16d/0x310 [ 556.987599][T16830] ? __pfx___dev_notify_flags+0x10/0x10 [ 556.987614][T16830] ? __dev_change_flags+0x5a0/0x7e0 [ 556.987631][T16830] ? __pfx___dev_change_flags+0x10/0x10 [ 556.987649][T16830] ? full_name_hash+0x92/0xe0 [ 556.987666][T16830] netif_change_flags+0xe8/0x1a0 [ 556.987683][T16830] dev_change_flags+0x130/0x270 [ 556.987699][T16830] dev_ioctl+0x7b4/0x1150 [ 556.987724][T16830] sock_do_ioctl+0x23e/0x320 [ 556.987744][T16830] ? __pfx_sock_do_ioctl+0x10/0x10 [ 556.987763][T16830] ? do_futex+0x395/0x420 [ 556.987792][T16830] sock_ioctl+0x5c6/0x7f0 [ 556.987812][T16830] ? __pfx_sock_ioctl+0x10/0x10 [ 556.987831][T16830] ? __fget_files+0x2a/0x420 [ 556.987846][T16830] ? __fget_files+0x3a0/0x420 [ 556.987860][T16830] ? __fget_files+0x2a/0x420 [ 556.987877][T16830] ? bpf_lsm_file_ioctl+0x9/0x20 [ 556.987897][T16830] ? __pfx_sock_ioctl+0x10/0x10 [ 556.987915][T16830] __se_sys_ioctl+0xfc/0x170 [ 556.987935][T16830] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.987951][T16830] do_syscall_64+0x15f/0xf80 [ 556.987973][T16830] ? clear_bhb_loop+0x40/0x90 [ 556.987991][T16830] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.988007][T16830] RIP: 0033:0x7fd7a8b9cdd9 [ 556.988024][T16830] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 556.988038][T16830] RSP: 002b:00007fd7a9a22028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 556.988058][T16830] RAX: ffffffffffffffda RBX: 00007fd7a8e15fa0 RCX: 00007fd7a8b9cdd9 [ 556.988070][T16830] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000008 [ 556.988081][T16830] RBP: 00007fd7a8c32d69 R08: 0000000000000000 R09: 0000000000000000 [ 556.988091][T16830] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 556.988101][T16830] R13: 00007fd7a8e16038 R14: 00007fd7a8e15fa0 R15: 00007ffee89f3398 [ 556.988118][T16830] [ 557.373913][T16833] bond3: option xmit_hash_policy: invalid value (64) [ 557.412307][T16833] bond3 (unregistering): Released all slaves [ 560.490310][ T5211] udevd[5211]: worker [9988] /devices/virtual/block/nbd2 timeout; kill it [ 560.500569][ T5211] udevd[5211]: seq 15997 '/devices/virtual/block/nbd2' killed [ 563.158788][ T1316] ieee802154 phy1 wpan1: encryption failed: -22