last executing test programs: 2.523889141s ago: executing program 1 (id=3649): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x3, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0xfffff801}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r2}, &(0x7f00000002c0), &(0x7f0000000440)=r0}, 0x20) readv(r1, &(0x7f00000001c0), 0x0) 2.387400428s ago: executing program 1 (id=3652): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r6) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0xea4, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe70, 0x2, [@TCA_MATCHALL_ACT={0xe6c, 0x2, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x3, 0x6}, 0x1, 0xfb}, [{0x2, 0x9c, 0x81, 0x6, 0x2, 0x7}, {0x1, 0x6, 0x4, 0x3, 0xfffffffd, 0x81}, {0x1, 0x80000001, 0x8, 0x101, 0x3}, {0x3, 0x9, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x9, 0x51, 0x8}, {0x3, 0x4, 0xc, 0x101, 0x3, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x485, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0x0, 0x10000, 0x6}, {0x1, 0x3, 0x8, 0x3, 0x0, 0xffffffff}, {0x5, 0x0, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0x9, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x8000, 0x9}, {0x2, 0xfffffffb, 0x6, 0x5, 0x7ff, 0x6}, {0xfffffffb, 0x3, 0xfffffffe, 0x6, 0x2}, {0xfffff9fd, 0x9, 0xa5f, 0xa, 0x6, 0x2}, {0xffff997c, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x5, 0x2, 0xc, 0x8, 0x9, 0x60}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x8, 0x7fff, 0x8, 0x8, 0x9}, {0x8, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x1, 0x3, 0x8}, {0x0, 0x3, 0x1ff, 0x7437ec78, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x1, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x6, 0x2, 0x0, 0x80}, {0xd, 0x10000, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x9}, {0x9, 0x1ff, 0x81, 0x9c, 0x1, 0x5}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0x1}, {0x1, 0x32158140, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9100, 0x5, 0x2, 0x7f}, {0x5, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x6, 0xfff, 0xffffff13, 0x6, 0x2, 0x6}, {0x1, 0x6, 0x3, 0x4, 0x3, 0x9}, {0x6, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf}, {0x5, 0x3, 0x6, 0x1000, 0xd8fe, 0x8001}, {0x7, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0x7, 0x2, 0x1ff, 0xf9, 0xffff8001}, {0x0, 0x6, 0x8000, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2, 0x2, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7ffb}, {0xc7, 0x1, 0xad, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x8, 0x10001, 0x9f98, 0x8347, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0x8, 0x106, 0x7f, 0x4, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0x0, 0x80000001, 0x9}, {0x3, 0x9, 0x7, 0x6, 0x3e6b7592, 0xe5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x9, 0x5202, 0x2, 0x53ce, 0x3}, {0xffffff81, 0x7, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x3}, {0xfffffffd, 0x8, 0x7, 0x5, 0x3, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x2, 0x200}, {0x401, 0x2, 0x8, 0x6, 0x4, 0xc6e9}, {0x1, 0x2d73, 0x3ff, 0x5, 0x9f17, 0xffffff7f}, {0x2, 0x401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x101, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x5, 0x9}, {0x4d, 0x4, 0xffffffff, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff, 0x5}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x8, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x4, 0x3, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x8000, 0x7, 0x9}, {0xff, 0x7, 0x5, 0x10001, 0x6, 0x6}, {0x2, 0x8f, 0x9, 0xffffff46, 0x4, 0x80000000}, {0x9, 0x2, 0xfffffffc, 0x1, 0xd50, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x30, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x802, 0xfffffff8, 0x1ff}, {0x7, 0x9, 0x3ff, 0x1, 0x7, 0x4}, {0xfffffffb, 0x6, 0x0, 0x9, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x6}, {0x9, 0x7, 0x8001, 0x7, 0x7, 0x2}, {0x3, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0x2, 0xca2f, 0xfffff9de}, {0x5, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x1d, 0xffffff10, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x9, 0x0, 0x7, 0xdb, 0x5}, {0x7, 0x200, 0x9, 0x8, 0xa, 0x100}, {0x81, 0x4, 0x988, 0x0, 0x0, 0x7}, {0xdc03, 0x7, 0x402c, 0xffff, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b5}, {0xa24b, 0x947d, 0x3, 0x4, 0x80000000, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0x1, 0x6}, {0xfff, 0xda, 0x1f, 0x4, 0x8, 0x2}, {0x8, 0x10, 0x0, 0x0, 0xfffffff7, 0x43}, {0xfffff000, 0x7f, 0xe96, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x1}, {0x3, 0x3, 0x7, 0x4, 0xbe, 0x81}, {0x4, 0x800, 0x0, 0x5, 0x8, 0xfa2f}, {0x3, 0xffe00000, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x2, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0x2, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0xfffffff8, 0x7, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x7, 0x7}, {0x6, 0x2, 0x800, 0x200, 0x9, 0x3}, {0x7, 0x6, 0x8936, 0xdc7, 0x0, 0x2}, {0x8, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x5, 0xff, 0x9e0f, 0x5, 0x6}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0xa, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0x6, 0x2, 0x1, 0x1, 0x10, 0x5}, {0x4, 0x7, 0xfff, 0x78d, 0xffffcff9, 0x9}, {0x1, 0xe, 0x7c0, 0x2, 0x2, 0x207f}, {0x10, 0x5, 0xfffffffa, 0xff, 0x80000, 0xfff}, {0x1, 0x7ff, 0x6972, 0xa, 0x49d, 0x101}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {0x5}, {0x1}, {0x2, 0x745e81639ff0f356}, {0x4}, {0x5}, {0x3, 0x1}, {0x3}, {0x2}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x2}, {0x0, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x7, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {0x2}, {0x5}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x5}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0xa}, {0x3}, {0x3}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x4}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x5, 0x3}, {0x4}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x4}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x4}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x6}, {0xa}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x1}, {0x4}, {0x5}, {0x3}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x5}, {0x1, 0x1}, {0x5}, {}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x2}, {0x3}, {0x1, 0x1}, {}, {0x4}, {0x3}, {0x3}, {0x1, 0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x3, 0x1}, {0x1}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x5}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x18, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}]}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0xea4}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r5, 0xc}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) r11 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r11, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) close(0x4) socket$inet_tcp(0x2, 0x1, 0x0) 2.246796697s ago: executing program 3 (id=3654): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000007c0), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000fbdbdf250300000008000100000000001c0007800c00018008000100", @ANYRES32=r2, @ANYBLOB='\f', @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x2604c0d0}, 0x20004000) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r0) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) 2.185683235s ago: executing program 2 (id=3657): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@deltaction={0x14, 0x31, 0x1}, 0x14}}, 0x0) (async) r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r1) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_rfcomm_RFCOMM_LM(r4, 0x12, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4006100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x38, r2, 0x300, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x68537afa, 0x64}}}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x8042) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) (async, rerun: 64) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x114}}, 0x0) (async) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001640)=ANY=[@ANYBLOB="84050000", @ANYRES16=r8, @ANYBLOB="010000000000fbdbdf256600000008000300", @ANYRES32=r10, @ANYBLOB="08002600301600000800b700280000005805b9"], 0x584}}, 0x0) (async) sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, &(0x7f0000000fc0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000780)={0x7e8, r8, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0x23c, 0x11d, 0x0, 0x1, [{0xac, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x200}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x200}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x64, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x5, 0x2, [{0x4, 0xa}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_60GHZ={0x4c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x18, 0x1b, 0xb, 0xb, 0x24, 0x6, 0xb9add74617a69ea5, 0xb, 0x1b, 0x4, 0x30, 0x30, 0x4, 0x48, 0xc, 0x60, 0x60, 0x60, 0x18, 0x6c, 0xb, 0x9, 0x9]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x7, 0x1, 0xe7b, 0x40, 0x8000, 0xed, 0x1]}}]}]}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xa9}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x92}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3c}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0xfc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xdc, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x94, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x10, 0x2, [{0x1, 0xb}, {0x1, 0x8}, {0x5}, {0x2, 0x4}, {0x0, 0x2}, {0x4, 0x7}, {0x1, 0x8}, {0x1, 0x7}, {0x6, 0x9}, {0x6, 0x4}, {0x4}, {0x5, 0x7}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x2, 0xff, 0x1, 0x6, 0xe, 0x9, 0xfabf]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x12, 0x18, 0x24, 0x60, 0x12, 0x18, 0x16, 0xc, 0x1, 0x1, 0x30, 0x5b, 0x16, 0x9, 0x2, 0x7b, 0x12, 0x4, 0x5, 0x6c]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xffad, 0x6, 0x100, 0x9, 0x0, 0x8, 0x6d, 0x7]}}, @NL80211_TXRATE_HT={0x28, 0x2, [{0x7, 0x3}, {0x0, 0x1}, {0x7, 0x2}, {0x1, 0x6}, {0x5, 0xa}, {0x3, 0x2}, {0x0, 0x7}, {0x4, 0x5}, {0x7, 0x1}, {0x0, 0x8}, {0x6, 0x6}, {0x0, 0x4}, {0x6, 0x7}, {0x3, 0x6}, {0x0, 0xa}, {0x2, 0xa}, {0x7, 0x3}, {0x7}, {0x1, 0x1}, {0x4, 0x4}, {0x7, 0x2}, {0x2, 0x3}, {0x2}, {0x3, 0x9}, {0x0, 0x7}, {0x0, 0x4}, {0x1, 0x3}, {0x7, 0x9}, {0x2}, {0x4, 0x4}, {0x6, 0x3}, {0x4, 0xa}, {0x1}, {0x0, 0x7}, {0x0, 0x8}, {0x5}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_5GHZ={0x2c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x3, 0x4, 0xaf42, 0xf, 0x4, 0xb, 0xbab]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2459, 0xfff9, 0x8, 0x80, 0x0, 0xa504, 0x3, 0x3]}}]}, @NL80211_BAND_2GHZ={0x4}, @NL80211_BAND_60GHZ={0x14, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xe}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xc1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x4}]}, @NL80211_ATTR_TID_CONFIG={0x6c, 0x11d, 0x0, 0x1, [{0x4}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x2}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xdb}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x4e}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1b8, 0x11d, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xfffffffffffffffb}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xe5}]}, {0x128, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x118, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x44, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0xc, 0xc, 0xc, 0xc, 0x30, 0x5, 0x60, 0x5, 0x1b, 0x12, 0xb, 0x6, 0x5, 0x2, 0x48, 0x3, 0x4, 0x1, 0x6, 0x30, 0x45484417812c0c13, 0x5, 0x6c, 0x36, 0x3, 0x4, 0x66, 0x30, 0x60]}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0xb, 0x16, 0x9, 0xc, 0x5, 0x12, 0x2, 0x5, 0x48, 0x20, 0x3b, 0x6, 0x3, 0x16, 0x24, 0x6]}]}, @NL80211_BAND_5GHZ={0x5c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x339, 0x9, 0x7f, 0x81, 0x19, 0x6, 0x4]}}, @NL80211_TXRATE_HT={0x34, 0x2, [{0x3, 0xa}, {0x0, 0x6}, {0x1, 0x8}, {0x1, 0x2}, {0x3}, {0x0, 0x3}, {0x4, 0x4}, {0x0, 0x4}, {0x4, 0x6}, {0x3, 0x6}, {0x1, 0x4}, {0x7, 0x6}, {0x4, 0x4}, {0x1, 0x8}, {0x1, 0xa}, {0x1, 0x5}, {0x4}, {0x2}, {0x0, 0x7}, {0x4}, {0x2, 0x4}, {0x0, 0x3}, {0x1}, {0x3, 0x8}, {0x1, 0x5}, {0x7, 0x5}, {0x6}, {0x0, 0x1}, {0x7, 0x5}, {0x1, 0x4}, {0x4, 0x8}, {0x6, 0x4}, {0x2, 0x9}, {0x2, 0x5}, {0x2, 0x7}, {0x5, 0x6}, {0x6, 0x5}, {0x5, 0x7}, {0x4, 0x3}, {0x3, 0x3}, {0x1, 0xa}, {0x1, 0x3}, {0x7, 0x1}, {0x6}, {0x1, 0x3}, {0x0, 0x6}, {0x1, 0x8}, {0x0, 0x6}]}]}, @NL80211_BAND_6GHZ={0x68, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x7, 0x8, 0x3, 0x2, 0x8, 0x1, 0x200]}}, @NL80211_TXRATE_HT={0x39, 0x2, [{0x5, 0x6}, {0x7, 0x5}, {0x7, 0x1}, {0x2, 0xa}, {0x4, 0x4}, {0x4, 0x4}, {0x2, 0x2}, {0x1, 0x4}, {0x0, 0x5}, {0x7, 0x9}, {0x5, 0x7}, {0x3, 0x2}, {0x5, 0x1}, {0x1, 0x8}, {0x5, 0x5}, {0x4, 0x2}, {0x2, 0x4}, {0x1, 0x7}, {0x1, 0x4}, {0x7, 0x7}, {0x3, 0x2}, {0x3, 0x1}, {0x2}, {0x7, 0x4}, {0x2, 0x3}, {0x4, 0x9}, {0x3, 0x8}, {0x2, 0x9}, {0x3, 0x3}, {0x1}, {0x0, 0x2}, {0x6, 0x5}, {0x4, 0x7}, {0x1, 0x2}, {0x4, 0x4}, {0x1, 0x1}, {0x4, 0x2}, {0x3, 0x4}, {0x1, 0x4}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x1, 0x8}, {0x2, 0xa}, {0x0, 0x6}, {0x1}, {0x1, 0x3}, {0x3, 0x3}, {0x1}, {0x0, 0x6}, {0x7, 0xa}, {0x6, 0x2}, {0x2, 0x1}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xf580, 0x2, 0xfff, 0x1ff, 0x8, 0x2, 0x4, 0x6e29]}}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xea}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xba}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x36}]}]}, @NL80211_ATTR_TID_CONFIG={0x374, 0x11d, 0x0, 0x1, [{0x4}, {0x314, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x7e}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1c0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x90, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x3, 0x1000, 0x3, 0x40, 0x3, 0xf800, 0x2]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x400, 0xf16, 0x4, 0x2000, 0x4, 0x8, 0x7f, 0x7]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x30, 0x3, 0x6, 0x2]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x3b, 0xbff, 0x42, 0x0, 0x8, 0xffff]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x0, 0x4, 0x3, 0x1, 0x6, 0x2, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff, 0x7fff, 0x4, 0xff5a, 0x6, 0x7, 0x6, 0x100]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_6GHZ={0x48, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xea97, 0x29, 0x3, 0x2, 0x0, 0x6, 0x3, 0x8000]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x4, 0x3, 0x7, 0x7fa, 0x0, 0xef, 0x101]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x6, 0x14, 0xc3, 0x7, 0x1e42, 0x8, 0x3]}}]}, @NL80211_BAND_60GHZ={0x74, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3b, 0x2, [{0x1, 0x2}, {0x1, 0x6}, {0x0, 0x7}, {0x3, 0x1}, {0x1}, {0x0, 0xa}, {0x3, 0x2}, {0x7, 0x5}, {0x2, 0x8}, {0x3, 0x7}, {0x2, 0x8}, {0x5, 0x1}, {0x7, 0x8}, {0x1}, {0x1, 0x4}, {0x7, 0x3}, {0x5, 0x2}, {0x1, 0x1}, {0x5, 0x8}, {0x7}, {0x3, 0x8}, {0x1}, {0x1, 0x4}, {0x6}, {0x4, 0x8}, {0x7, 0x7}, {0x7, 0xa}, {0x5, 0x6}, {0x0, 0x4}, {0x1, 0x2}, {0x0, 0x8}, {0x4, 0x3}, {0x7, 0x1}, {0x7, 0x1}, {0x2, 0x9}, {0x2, 0x2}, {0x7, 0x6}, {0x1}, {0x3, 0x9}, {0x0, 0x7}, {0x4}, {0x0, 0xa}, {0x7, 0x8}, {0x0, 0x1}, {0x5, 0x2}, {0x4, 0x5}, {0x4, 0x7}, {0x7, 0x6}, {0x0, 0x9}, {0x3, 0x2}, {0x0, 0x6}, {0x6, 0x1}, {0x7}, {0x3, 0x4}, {0x4, 0x6}]}, @NL80211_TXRATE_HT={0x33, 0x2, [{0x3, 0x3}, {0x2, 0xa}, {0x3, 0x3}, {0x7, 0xa}, {0x3, 0x7}, {0x7, 0x2}, {0x6, 0x9}, {0x5}, {0x1, 0x5}, {0x5, 0x5}, {0x5, 0x6}, {0x0, 0x3}, {0x1, 0x3}, {0x6, 0x9}, {0x0, 0x9}, {0x5, 0x8}, {0x5, 0xa}, {0x4, 0x1}, {0x6, 0x1}, {0x6}, {0x7}, {0x7, 0x5}, {0x4, 0x1}, {0x4, 0xa}, {0x7, 0x3}, {0x6, 0x7}, {0x1, 0x1}, {0x2, 0x4}, {0x1, 0x8}, {0x3, 0x6}, {0x7, 0x2}, {0x2, 0xa}, {0x6, 0x3}, {0x5, 0x9}, {0x1, 0x8}, {0x4, 0x3}, {0x0, 0x1}, {0x0, 0x9}, {0x0, 0x5}, {0x1, 0x2}, {0x6, 0xa}, {0x0, 0x1}, {0x6, 0x1}, {0x4, 0x6}, {0x1, 0x4}, {0x6, 0x4}, {0x5, 0xa}]}]}, @NL80211_BAND_5GHZ={0x70, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x44, 0x2, [{0x1, 0xa}, {0x1, 0x4}, {0x0, 0x6}, {0x3, 0x5}, {0x0, 0x5}, {0x1, 0x3}, {0x0, 0x8}, {0x2, 0x6}, {0x2, 0xa}, {0x4, 0x4}, {0x0, 0x6}, {0x0, 0x1}, {0x3, 0x6}, {0x0, 0x5}, {0x1, 0xa}, {0x7, 0x8}, {0x7}, {0x5, 0x8}, {0x6, 0x7}, {0x1, 0x2}, {0x3, 0x5}, {0x5, 0x2}, {0x0, 0x7}, {0x4, 0x8}, {0x4, 0x6}, {0x3, 0x3}, {0x0, 0x2}, {0x7, 0xa}, {0x0, 0x9}, {0x4, 0x2}, {0x1, 0x2}, {0x0, 0x9}, {0x7, 0x1}, {0x6, 0x2}, {0x4, 0x8}, {0x5, 0xa}, {0x6, 0x4}, {0x6, 0x7}, {0x1, 0xa}, {0x6, 0xa}, {0x0, 0x8}, {0x2, 0x3}, {0x6, 0x7}, {0x2, 0x2}, {0x3, 0x4}, {0x5}, {0x1, 0x3}, {0x7, 0x2}, {0x4, 0x1}, {0x7, 0x1}, {0x0, 0x3}, {0x4, 0x7}, {0x6, 0x9}, {0x4, 0x9}, {0x6, 0x4}, {0x0, 0x7}, {0x0, 0x1}, {0x4}, {0x0, 0x5}, {0x7, 0x5}, {0x1, 0x8}, {0x2, 0x7}, {0x3}, {0x5, 0x1}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x4, 0x7f, 0x7, 0x9, 0x7, 0x200, 0x800]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x1b, 0x16, 0x9, 0x12, 0x16, 0x6c, 0x9, 0x60]}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x134, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x84, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x81, 0x2, 0x6, 0x5, 0xfffb, 0x93a, 0x3]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8000, 0x1, 0x0, 0x40, 0x1, 0x0, 0x9, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x5, 0x5, 0x4, 0x6, 0xd, 0x5]}}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x3, 0x27, 0x36, 0x5, 0xb, 0x16, 0x60, 0x24, 0x16, 0x1b, 0x24, 0x60, 0x5, 0x0, 0x1, 0x18, 0x18, 0x9, 0xb, 0x16, 0xc, 0x6c, 0x2, 0x48, 0x1e, 0x24, 0x30, 0x4, 0x18]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_2GHZ={0x98, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x2, 0x2, 0x7, 0x8, 0x1, 0x43, 0xc]}}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x24, 0x9, 0x12, 0x24, 0x6, 0x60, 0x6, 0x16, 0x5, 0x1, 0x6, 0x12, 0xb, 0x12, 0x60, 0x30, 0x16]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfff, 0x5, 0x48e9, 0x8, 0x9, 0x9, 0x5, 0x8]}}, @NL80211_TXRATE_HT={0x4c, 0x2, [{0x1, 0x1}, {0x7, 0x6}, {0x6, 0x9}, {0x2, 0x3}, {0x2, 0x1}, {0x6, 0x1}, {0x0, 0x5}, {0x0, 0x4}, {0x6, 0x2}, {0x4, 0x9}, {0x1}, {0x1, 0x8}, {0x7, 0x3}, {0x4, 0x1}, {0x5, 0x3}, {0x0, 0x7}, {0x7, 0x7}, {0x6, 0x1}, {0x1, 0x7}, {0x4, 0x6}, {0x3, 0x2}, {0x4, 0x8}, {0x0, 0x1}, {0x6, 0x2}, {0x3, 0x6}, {0x1, 0x9}, {0x1, 0x9}, {0x1, 0x9}, {0x3, 0x7}, {0x0, 0x8}, {0x4, 0x9}, {0x6, 0x3}, {0x1, 0x3}, {0x5, 0x3}, {0x0, 0x7}, {0x0, 0x4}, {0x0, 0x8}, {0x2, 0x4}, {0x3, 0x1}, {0x2, 0x5}, {0x5, 0xa}, {0x2, 0xa}, {0x2, 0x6}, {0x4, 0x1}, {0x1, 0x4}, {0x0, 0x5}, {0x0, 0xa}, {0x0, 0x2}, {0x1, 0xa}, {0x6, 0x7}, {0x6, 0x4}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x8}, {0x2, 0x7}, {0x1}, {0x0, 0x1}, {0x3, 0x2}, {0x6, 0x2}, {0x3, 0x8}, {0x4}, {0x1, 0x8}, {0x7, 0x1}, {0x3, 0x2}, {0x3, 0x7}, {0x6}, {0x0, 0x7}, {0x3, 0x3}, {0x1, 0x6}, {0x5, 0x5}, {0x5, 0x4}, {0x3, 0x5}]}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x32}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}]}]}, 0x7e8}, 0x1, 0x0, 0x0, 0x11}, 0x804) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=@newqdisc={0x74, 0x24, 0x4ee4e6a52ff56541, 0x2, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x44, 0x2, [@TCA_CODEL_TARGET={0x8, 0x1, 0x2}, @TCA_CODEL_ECN={0x8, 0x4, 0x1}, @TCA_CODEL_ECN={0x8, 0x4, 0x1}, @TCA_CODEL_TARGET={0x8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x7fff}, @TCA_CODEL_TARGET={0x8, 0x1, 0xfffffffa}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x9}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x7862}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x48801}, 0x40) (async, rerun: 64) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYRES16=r5], 0xe4}, 0x1, 0x0, 0x0, 0x4000005}, 0x20050840) (async, rerun: 64) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x7c}, {&(0x7f0000000640)="851072e4d19e62e61814a42c7b4e6475be5fd6b7f9f3fa7960ba55bcb2cd828d6223871470bfe0b0d6d1bb7af98d0627dca8162bcd4081376dd890662feb88f332d1908eda9fb963e2a0cc4b354867d3d7c913ac62a0ac97cf8ab9de124107d4b43b2c0c57c119dea3cf7bc5c9bc26c5c18eaf3bc5ad87459827e8d9f67df1021000c83a2dfaea23f0ed8e5403d84b5bb1331ef458a2db128babd7fe14a18b08ba6b954c089a52de41285c33a86a0b89a9355e7811822da71b5b6f4e54a92dd3e9d4c05acf3f254c49cb40f4b93c968732ce78fae856fe66e2d32303ce47", 0xde}], 0x2}, 0x83887f7a0b27f457) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async) r12 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$XFS_IOC_START_COMMIT(r12, 0x80585882, &(0x7f0000000240)={0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0xa, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000200000000000620188000000000095f5488ee5670ce9a2d2c94f974013d4d23c9332def5dd599d7884df8b1305fcdc2afb8f030e79b7431962742e96d418832ab958febb476a58a2c08885729cf82bb3596d4422f336951836cc090780edaadde889fb200fd66dc94cac99bac0d63608d1d7e69493c94cfb6a351b778d798346247e4b1a45c3b5c80bbb2f"], &(0x7f0000000100)='syzkaller\x00', 0x81, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0xf, r13}, 0x94) (async, rerun: 32) r14 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r14, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x23}, [@IFA_LOCAL={0x6, 0x2, @remote}]}, 0x2c}}, 0x0) (async) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r13, 0x84, 0x4, &(0x7f0000000180)=0x6, 0x4) 1.993138711s ago: executing program 1 (id=3658): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0x9c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 1.992886429s ago: executing program 2 (id=3659): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0x9c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) (fail_nth: 1) 1.96206693s ago: executing program 3 (id=3661): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0xb6}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x6}, 0x70) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r1, 0x89e3, &(0x7f0000000000)={0x806, 0x0, 0x8, 0x4, 0x40}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="620ac4ff0000000071104d000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x63, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_POWER_SAVE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="01002cbd7000ffdbdf253e00000008000300", @ANYRES32=r5], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x90) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000380)={&(0x7f00000000c0)={0x2ac, r3, 0x2, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0xb}, @void, @val={0xc, 0x99, {0x8, 0x50}}}}, [@NL80211_ATTR_VENDOR_DATA={0xc6, 0xc5, "348037785815c2775fa9c50beedcc859dd3b6bea5ce25f4784d1e80f076ba30c1fd48ac5eee82bd80f010859d66f862d3bd2523e18fe44401f4cb678fd27fcd6fe425fca2178f6c15f933e5e48d1a839799dcfa972cf5a2e2396ea4021c405da7ecae89a72a933e0fe5c6a16cb176d5d866d7d1aef2fd9d445d9d55911f8d03a6feb2bff17e92864e097b2ceb784ceaec970198428285e02529c910acfa694edaa43154f80b4cff2dbb75b07edc2a5ed8c69f57526489a0735c2707afaeb33fff366"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x7}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x4}, @NL80211_ATTR_VENDOR_DATA={0x19, 0xc5, "88c3d572b9329c5856ff9f12b30bdc594c35f6cc94"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x7}, @NL80211_ATTR_VENDOR_DATA={0xa1, 0xc5, "50e8ff49a2b754dac2fc0a51d42d32d44e96eb470569c01864a733b1ec7dc5b6619a92f795bf90a343de88f3c6398f51fe51e96e8ed6590654f21b46591502833a0d88cc176085eb84e242858b19baee968d801b4b56203765034e8b2db7eecf9be3a36f3cec634649fdcaec8fc75436925bcd2ff8a389f0c23b08ed2a085106234e1185409a3d024ee4ec184e2d469e60cc2c980518300e2ea640e227"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x6}, @NL80211_ATTR_VENDOR_DATA={0xd9, 0xc5, "5938414ab1798febe05f8c7b79755db7c137badb274bd7cd7fd7cc055f8789ebeb38a4e23e53ec03ae7d5d49310c20e432bc28fc1cf982e8429fe5a8a3767adb4c688e83c339bd42f4409b383da0506c3f739cb7e0445128f0442ca0fe5791f60622138114565523b773f711cb152faa50ec69efa387f9f5b6dfa876413ca01887e3071bb78abd78381fd0665a8875441a75ce2724b2d6518d34fd99734fcbf5e951fa116bd3003d0fc9b3cad348172c1d5702cd441159c20152c3ae35f9dc63f85139a5cb97f5c1dedb274846a590829bd59fcec0"}]}, 0x2ac}, 0x1, 0x0, 0x0, 0x800}, 0x6000) 1.854697681s ago: executing program 3 (id=3663): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x12000000}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xa8}}, 0x0) 1.642620453s ago: executing program 1 (id=3664): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) syz_emit_ethernet(0x7c, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd6aabd95500462ffffc000000000000000000004200000001ff020000000000000000000000000001"], 0x0) 1.642408993s ago: executing program 2 (id=3665): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x14, r2, 0x1, 0x70bd28, 0x25dfdbfb}, 0x14}}, 0x4040) r3 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x5f}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x90) ioctl$sock_bt_bnep_BNEPCONNADD(r3, 0x400442c8, &(0x7f0000001200)={r0, 0x0, 0xfff8}) 1.572852047s ago: executing program 3 (id=3666): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, &(0x7f0000000000)={r3, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000340)={r3, @in6={{0xa, 0x4e23, 0x5, @empty, 0x2}}, 0x3, 0x0, 0x20000, 0x81, 0xb1, 0x0, 0x4}, 0x9c) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) socket$kcm(0x29, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}, {0x5, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0xb, 0xfff3}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x3, 0xd73, 0xffffffffffffffff, 0x80, 0x401}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x2}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r10) r11 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r11, 0x1, 0xb, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket(0xddd15b57ee4ee8a6, 0x800, 0x200) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket$packet(0x11, 0x3, 0x300) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r12, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000002300)="81", 0x1}], 0x1}, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000014c0)={&(0x7f0000001380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0xa, [@ptr, @const, @typedef={0x5}, @union={0x0, 0x1, 0x0, 0x5, 0x1, 0x0, [{0x8, 0x1}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x61, 0x5f, 0x0, 0x5f]}}, &(0x7f0000001400)=""/149, 0x5e, 0x95, 0x1}, 0x20) 1.491656721s ago: executing program 4 (id=3668): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff000000001c0012800b0001006772657461700000", @ANYRES32, @ANYBLOB='\b\x00\r\x00\x00\x00\x00\x00\b\x00?'], 0x4c}}, 0x0) sendmsg$AUDIT_TTY_SET(r2, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x18, 0x3f9, 0x8, 0x70bd26, 0x25dfdbfb, {0x1}, [""]}, 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x4) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r1}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xe, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xd}, 0x10}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0xa}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r3, 0x26}, 0x10) close(r4) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0x3}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x0, 0x0, 0x0, 0x2000004, 0x0, 0x0, 0x1f00, 0x39, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x6, 0x200008, 0x5, 0x20003}, 0x10}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008", @ANYRES32=r6], 0x4c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="2800000010000108000000000000000002000000", @ANYRES32=0x0, @ANYBLOB="b40200000000000008001b"], 0x28}}, 0x0) 1.463416483s ago: executing program 1 (id=3669): pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$sock_int(r3, 0x1, 0x29, &(0x7f0000000000)=0x100, 0x4) write(r3, &(0x7f0000000340)="0a000300010000", 0x7) recvmmsg(r3, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x10040, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000300)={'TPROXY\x00'}, &(0x7f00000004c0)=0x1e) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x24, 0x5, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x14}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb0}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000bc0)="c9"}, 0x50) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="2000209c", @ANYRES16, @ANYBLOB="070627bd7000fcdbdf252d0000000a0001"], 0x20}, 0x1, 0x0, 0x0, 0x8015}, 0x4008000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r6 = socket(0x2d, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r6, &(0x7f0000000100)={&(0x7f0000000000)={0x2d, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0x4, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000071105a000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}}, @NFT_MSG_DELSET={0x5c, 0xb, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x4}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x6}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x1d}, @NFTA_SET_USERDATA={0x1a, 0xd, 0x1, 0x0, "fdcc0b2b7b188f9a953ad6d3f077d48b65e6b113662c"}]}], {0x14}}, 0xe4}}, 0x0) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x20) sendmsg$NL80211_CMD_GET_MPATH(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYRESHEX=r7, @ANYRES16=r9, @ANYBLOB="01000020b69c97553002677b00000c0001"], 0x2c}}, 0x0) ioctl(r7, 0x8b32, &(0x7f0000000040)) ioctl$sock_rose_SIOCDELRT(r0, 0x890c, &(0x7f0000000140)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1ff, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={'nr', 0x0}, 0x1, [@bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default]}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r10, 0x8933, &(0x7f0000000040)={'wg0\x00', 0x0}) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000002c0)={r1, &(0x7f00000001c0)="401544900a2a4ee7874dc05f35568479318d525f792a73dbbb19f2303685642bf8a56b004ddfc568282792297a8f4b4335c571013c0f33498794dd4241ef255a2930e810b0a90d55bcfd8d3af72929f4c7a9be2672824ac45f1cc67549ddc9d60c22537ead88758da06393048d943b3cd53321b1c72b9d1f880d85c2ded99ea5164e4052abee5be16ef9f6b7d3ebbb6b168944241d8d2c85d16efddac8bfaf72eaef6a4116ecf1965079d1e87edfd9de36c00e6538764f0d1c0602f6b6168d4ee2f0b80ca35caed06ff425a610e6966106cefa0a9986e39aa3115fcd9b5ac70efe351035c9", &(0x7f00000003c0)=""/254, 0x4}, 0x20) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=ANY=[@ANYBLOB="6000000071209377ab04df7f5c004e95429e0000", @ANYRES32=r11, @ANYBLOB="0c00018005000600050000000c000180060002000a0000000c00018005000300030000000c00018006000200090000000c000180060002000a0000000c0001800800010013000100"], 0x60}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) 1.404255155s ago: executing program 2 (id=3670): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000014007910480000000000690022000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xa3}, 0x21) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4001, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendto$inet6(r0, 0x0, 0x0, 0x20000840, &(0x7f0000001480)={0xa, 0x4e20, 0x2, @ipv4={'\x00', '\xff\xff', @empty}, 0x81}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x2, 0x0) r3 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(r3, 0x101, 0xa, &(0x7f0000000040)=0x2c5, 0x4) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000012c0)=@newtfilter={0x24, 0x28, 0xd27, 0x1000001, 0x0, {0x0, 0x0, 0x0, 0x0, {0xd, 0x9}, {0x6}, {0x0, 0x1}}}, 0x24}}, 0x4000) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001300)=@newtfilter={0x30, 0x2c, 0xd27, 0x30bd29, 0x21dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0xfff0}, {}, {0x3}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x34000844}, 0x200c4094) 1.099979258s ago: executing program 0 (id=3673): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000000)={0x1, 0x99, "949f7cb052b5e845152abca6d68e36db865b1eb773de807ad379c8035f9ccdeb7f6f3596360beb5335811b4c9db57e20de61340a80afa6cd43d6fd11c1008934ed275268115d6ca830bd184885f44f6290ae140efd29f44b34f8c04fe4ca7d073c4d4ea4ce3929a1de210961d9f27573f25b65c90d68dfc87638b3bc62e8cc7213297f719fdc2abb90d954c7ee4a2c53ca755a094f705ba631"}) r1 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f00000000c0)=0x1, 0x4) ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000180)) listen(r0, 0x34b) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000940)=0x0) sendmmsg(r2, &(0x7f0000004980)=[{{&(0x7f00000001c0)=@l2={0x1f, 0xf4c9, @none, 0x6}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000240)="c6ee0947ebfde478b100824c38d9ce7695bcf06c8c0f6d4afd2685d68157e6d94d2618e8ecadd73cf5b3ba0d1ea3fb42c2c33b4e344a9e4c0ba66a6137a03494176707f5b46a2fc7ea14336248535afef2bbd735498c1126fffbd76d84efe862904a9679a3986d0b2d24c4af934127b51c7838b385e8638f302aab91468cf676911d26bbfb96ac3d8711fd227bdc03982aba22d458e84c2b87dae4865af8f4923610dcbcef7545dcacb91b0d3a4e1aaa00866769c58e7706fcc4fdc3a09d9f3fb2b3", 0xc2}, {&(0x7f0000000340)="e93b11ed12abb7fb8296dd0b54e46d566fb9dee9dbc89323d49debd6bc3426c01e0cd7dbb972198c5aa28a064a05620beee391de1dd29ad7ced670b971b850e2d7aef3869332c160836ab58721e47e942aa5c1782f0157c0c01f6ad428d1b48c23cc39690bb01c73cfc8ddfda84f57f2e6873b8f1666c1945aa0089ff2f311c66fde8b9a69ea94e922d6a7b900673c94e681ec301316fd2cb1029655713929ad3925a6c57bac29236d34fd8d4cf06d07d974f3664cdb388e14bbfa2ee47b974f53d3e3ff66c0e29d31e02cf8ac6ac47179b78b9fbc1c7ed122aa466e27cbe3d4e11d3a53da43f5e4", 0xe8}, {&(0x7f0000000440)="4f4e5861b03ed8d68ac0c819372e994fa2c0d64b344295b4534a68cbfcca3e7e61bc14d6", 0x24}, {&(0x7f0000000480)="2e6d52dbb920db4b0d16be11465622e1cd07694d67704d8f2ec42b832371ec72d64d36c2c189e701d468b1f9538fd44e9375f43201a026f7ec9d896b510e2951bf162b2c0a89a7e998d0953e0d5f5704aa37359114b749f2dff6efc2", 0x5c}], 0x4, &(0x7f0000000540)=[{0xe8, 0x10b, 0x1000, "91ce066c21cef72750f3ee43ea960a2a2ffda7d1a495da18174938a6e59c96c2475339785e33edb35f4ed7fb27985345ddc6391b8322cd4b522d810a468123a534dc1ade1669a72059fadc89567ebe6933b0e2ee9fdf8a6ac7f882d1c5f793ffa21e2ea141a29fd31e64d22c209c02455c1570e6071d352b47c7e4cc29316ee6c7fcfa1d4906fa4f705b5a5ee3b5c7db745c3398d2c6deffdcae57f340d09c8778106d929be43f6a745795237375c73893692fa34e69a7ecefa76064dfc53fa1e77399b7c81e906944fc0fa392015bcf1bbee207da"}, {0x60, 0x84, 0xffff, "3b3ed1c2e3278c2085f4edb403957d1936ed8600c8b4e95434c89b2a1683808d705ea02d4c3b77f836a59d2b389cbdeafeffeccac228c1c4b4a408c27b11d455c42a280dda77cda25c"}, {0x78, 0x10e, 0x8, "ee0a200ef665fcc024fa69ea0554ec2e7d68c6fd49e7442a73fc26c3a21aa5800de1ed547c92f571b17bfa20c079394974ffb01b59797ff7fb3c3705b08e71b5b5d14b16d4c2750e3c6f0a4e968ccd98e2556b3518c9b67d5e54cfd56f11af52d687"}, {0x90, 0x114, 0xa, "d22c9fe179e0381f387c074be98a241e3ba05be94679406ae19c931c674b4ddda143ebe1d36e01892f13980398b1718d53df58827b2ba9f235c2311a4f0178bb2e95c03eb49cddbfc766b47063b19777a890ad7b0302d72d9bb3fefb59b75fe63d56d36739017883f8f31f4e8770f264bd9462efd52279cc9e5696"}, {0x78, 0x11, 0x2, "4eb9b1522d7414893b2514db565417631fb63a2c01fd88a034828a710cf303c16901d65ceb83867b026cec0f1fdc9bbd729b9c0e19bb410393e57012cdd101d0313f139c20a0ae22cbc455545260be375701f60f423f4e76af64e37b241504a8473e"}, {0x100, 0x112, 0x1000, "0fd6757b9aec5cb13b6eaeecd8b8d0abd06488c794167ccef454b24ee7053cf497644ba62fb3381f257a8bcbc6bd0ebfc0bb729adc6c27f9a88c4d536a13cd8bb3c69f9832f715db94feb6fb7788a250b4ddd90e5fba10368d4ee8d43e9a2d716f96a8ddad5b4fdfc4def64d7bb71304041126754cf5d347672bfd05c98e29467bc89ee13ec29adb92e73f3910f426d85fff79b57a276e725562cf4b55d5e6acf16aa2b56351ecabc84fd27664e69e397ca483a4ab28e1059206ba6a6f1071d5a8ec169dc971870206060872ca8c3d6c1713b6a84039395158ffed91e45ddd8ff9c294e6e31b5e9bb282"}], 0x3c8}}, {{&(0x7f0000000980)=@nfc={0x27, r3, 0xffffffffffffffff, 0x6}, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000a00)="c99159c6b19925e01bbc05c7f7c814142c", 0x11}, {&(0x7f0000000a40)="3ba5b3bdc42527ae74562b2a193d7c73df0bd6903510eaa89603f722da2003f522f6e8df684fb05669ab6a6dc7abca5f2a4f24f43121fafe82fb3c5663a66b390fea50cec7162a629bc94f0214891c13fd4b7e529056e988efaeb378daa70d790b19eac92710515a9d734358cc8cef4da9548ba86cea3c5989c2", 0x7a}, {&(0x7f0000000ac0)="79eb9625608e47627dca065d0e7ae64a1ff4931a3d7e7bb1405f26dc5e4966a1a7c6e4d90ea9659996bd90d58a77f86d2f5fef2d413a8c824797cfb919c90a6b05d97ba9f1487b463811907325eda78d6c45d2798ff84114df6fb113244f4edf5c473a6df09e14750926b0c03158599a89dec3723f22a8bc6bd981a15c6be382db5e2ac781cb65f3b7dda6", 0x8b}, {&(0x7f0000000b80)="d86a81da913972fcb4b3d36866fceb068f0e94629178885214fd4bccd6aa3e29c9db343aed04f86c637a55ab6191d85a5646807b75308ed8eb88489dc9f2d7ad8b3e69e35fd17335f7fe7b4e498815541bc9d297dbd3b9bd192efd7ee3317cfc06e3ee74992dd2b882fc1f262dee9b293fd0552f3f02862d9a0827fb73e6d8aa2a1926a75c06bb096bf4bdcda9cb3b04c8610132", 0x94}], 0x4}}, {{&(0x7f0000000c80)=@l2={0x1f, 0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x80, &(0x7f0000000e40)=[{&(0x7f0000000d00)="096156374f2cbbf006aab509251ce9156041ec856c1394fedf9825bc58c2f8640c730b7e4f1d139ced3cc0744419deb9bef0ce1ce25a063cdee79128b7c73aca2326c74adb85f5cbe8f5a52bdaa049fdc8dfb9ee248a16b1480f167958f89225c7e8e30769c44caf21685eeb82c940f0ca54fe91c68b27004f2b86822d97eba287c20bbb9e1118c92340b4043990ea23e79f472d0f556ff3a88e0f959206ecda146ee41f048431fa1d2529c39fb33f6d", 0xb0}, {&(0x7f0000000dc0)="77e7aa49f32919a514e6289ed626e6e3978f15b221d2ac7690d95908f1ea9ab45a8e267a5fbb03257d6e232f0ed18560b647578ad1811e2068721a3e19517d153044177ef44a", 0x46}], 0x2, &(0x7f0000000e80)=[{0x80, 0x88, 0xfffffffb, "d59bf5b5cd0c6615953df8afff8bdad528da43033fcc7bf7758e4bd811e6fa5bf67ba99e82cbd3a84283000725bbcd99c4dd4c629dd38e807f6185d4a72b8cbfa0d29b7866b22fc0a7fa8216f48c1611771380c55e45a4abb403a25b62e06c065dea5a9f899e46a020920dbb"}, {0x20, 0x108, 0x3, "d218204d118e6c82659f9d0a75db47"}, {0x1010, 0x117, 0xfdb, "fdc25660a5736cff46ca0fafdbba63aa863485b027df565ceeff1d920039e5ce858c26aea6434d02bad7be003abf473ef6f0505210f17a0b60d4e88ffc782c767d0e076933af4f726610e4e8661203a759cc18541caf6d78b5e432297d4e884cd068a97dc63508ebe859e9e90230acf1c895607f514764246cd5d7afdfcd68f4c122a46936a6e6eb6c38b186b974dd4fd5b7ea1776a6119c35a8decdef664fb4485369bed09b0944b6faa0511fc1626bf0f2f0a62fdeafb03392344ad81762fb02349b227bdfc90951ba662047061822c88aea7b2fb90bf5f027c875746ae5f60f17f84b97abac939d8b0a7baafef39d50065e8bed8bd6101b2e71c688a17e849b9d930eed5014acf3b06203ef8da2cada289cf7aaa23c4bb834ef99c68c0373c1ff8d7e434ca73f3ff569e2deb05b4d2c700eefef960da2004c9e49273a0e72c4781de83eb3793d171c73f9a7c59c6d2b824898535797eeb994203a585aba92b7ee5f1f40f7c3db5dd4e9b75a776bae7593075dbc338d4e3260409333f55ac696dd7c891e286e4b080365ec62009f156b52fcfd722790809fc6c7d801192fe17553250e46857896fcecef3657c0e86ed5b1c583fdeaec8759e63eb8d0140c149af447312766d5eb5a11b97eb6adb257b1d0410238111cc1b8514640f56fe15b2608566672a54857cd020ec3d16be68f9492e3ccf3d92fad9bc247d8156fdb3fffeddaec0b6ded5ce5c359fd86287419fd024fc2ce944b97c3e83c791567a0228f396e41a25fa6dea71a155b9f23775e134a9ed41e63dfb4fa9c8ccbe83f3fec689e80e00710e41f316dce04e9c544834e0b2ca2d9c4dfdfc4951634b37cfa992f81e3ed0cbf56deb9c843fbf4bb0540c73d9e86fe9753b2db7a67e9f03f45f03a9b42ada00a354826f0607a527a3350b6e72f8c7a9933cf1ff09361658e771d2373bb2fadc19af79183af2eea05c189ad8da842bdb3fd2d7a2e156c85df0db8d67e2e8cb905d5d5e043d041e87c05d5aafb7498788c8b42c131c1984c1ea2747a563977a81efc89fa6ad700b5d3bfb713101fcd0c83417effaccffe2920202fe2fe50b367fd1ee5a73c14679977dbcc32f0940acabb1d21ef1a0d3214e824764e9824cba2979d9c52290884802d8969ac7ab49dfaae5596066f908ac6851986750b96357fcaf77c40051837cadbdc8ff3c62a6d6cde21ff4da23457a6674ae020e21a19f3ee71d38f269906c25546d4c2cb798d90480b0f13a8620988f82ec64054bbe1d2a6d692a7445c46994b8d7261498b3144aeac3695c43988b560ecf8c9d3cf6e3ff3d64aeb93ea3b2701fba29f6b0b0e8644af538bb2be0788a49778770dace93a808f5a0264e570e4f08e824bdedcebbf4754083621d6033643439cb2278492c0e7d89446271d2399eb330dc67654ab9f399f9c50c242d919e5b4340a381f665284193d6aeee326bf118ff6e0a7814e9d548578cce5f4e47ba58c75c17a21bc71a0a77832a898c3dfc740d6478f9a5ddcbf5956ed996afef36189af7103e0264243052398143261f5ad14ae1858d78a0fae77923f87dd2da6a61bdc7dceb335db5a3b06c2a79fba801a8147e270a4e8ae3e8534bbcba0ae6d6277d60d300d1bed3727b22a2804012dff564111df29da45b15ad12f340f4585d838f510e12a934228cddda463c9234efae33b04f576a8321fd29adf02c89db7229b2a24825917cedd22691cceadb2c38de55eb61693ab808d326ad5694dd6af2ae1c81e8e8c7cf5f58f7af8969c297d6a94f984e1b3ff2cf4b6f884d98983b11008578082a6016c3930302000f02cdeda6e62c2b37bdc1a50b2946c805b6806ccc966750e333b53732a65bb9c26dd61807a367135129a48fce368a9f341e5e1823cba2c8007427bd94954c0c5991fd2b3199cc091d0eda983c104cf68135b8216ddf6ac690c3f872d941fcf53ee77a482724ecc11d87ef0f97b2a20cfd9b4a3a491d0df073b47804cdad85ec44f20dcf6cb2451c1cd08c942cd2d21bbb2cb874785cc4da714a9a53c2e9ad6486cd92061672bbc3a4f967163281b7fd8bb6f8b98da041d1f0f6996a3f262c178088af2fdf75df69d10ea60d9ec36117ed836abf25325b372f866525620daaf32afe7213d9d4312a9c0d12aa12c253f321f51896a635ecd534ff3f2023ea18b6e14b085adb3a8c38b902d461c8dbbe2de0879d17553e6706f9cb55daaabb4f852f04058944e154551f9f382a77b608791a05d21a41d2d5df5c8d3812090298fc716dbd0158f0331802ca67b1a759916039eb20487e824d5dff82372c3c12cf3b38ed26d120dbd9e2eb7aa940ca56105c338691c31f834c8eecd491f9871add3b992b97ce47ad86079641806d9a2c871c8c2438265a63d2731e80f4bce656642541da8799bf69e25253124581dcf6d22b475137f3c3de4f970702bf1ad6aeac21f933b8a0ce0bd74c207bda81cd8ad2d612775ec6ad4058d04b8fe21878c175e1680063502336404dc4c3d18ac28500fbe7735bf5933ae243c3c02faf77fd08908556d4c6da5685344fc8212c59c1ea4530bcbd320d8d72b1da35e0a6986a98a9091cb06b6d409fc031b1c439014801e4628a06b3a5d6ca4d1cdefe9122173f723ba1dc7b59ea10f11f5f4c738181502184ac8ecd96d1085d78199e0ac4b959a06307d8d72eaaad751bb127324582dac4f1b959f377882ccd2690a1dbe7260fe2ca099ea9767696adb88154602001ba1159e743bb89ea65967bce0f14f2d638d0ae895f69b0266cff81f92930dd335ce55af9fbf5692a3073165b951ec3c9ec1112b1995f28a0af6d2ef61256cd88ab99bd436df1bddbfc4af09880a82f436717d81036cb88e25c75a0c8240efb4aed210e1074ebbce810c1986f17a4647ff987b9898972784efe874d3ae652213ffa94478e1062772c38762ad932504275d96acddfec9ca7dcf743c070338f79f982863c63cbd5adc877bf5696d73636bc3b3ce2d49de087d6f1664a3f891163761a6177544882a136bf45e04e7f706d9a38417c9cf769f81309c1604c8b66d682e73a27f01f3e0595a1a730619bd1ed851809d8f742aed4dbdd3c6c5ecb2991efaf29e89c13e07c4c55f32ae0a36d72c90e2b7f16f89cbbcd027860e37fb67e944662cbdec1ddebfd746c71b91565439c7e85d281db2cc1330d1bedcf9c6f74e4161f97b484a8d2752f8c31b0ef9961aab444c55511b5af43d3929c81062ac4a66ff34c1046913f6b657af6a5751a655f702efb85aa3455af4a63e3ede0f49b46ab30d8f18d4d40c7e60599fc45bcf0dd51f3c7f02ede6e4e6858f2056affeb255bfbe22ca689ed00bd32d3a288ac40efdaea86afc3ef1bfe164c833811a9bb37b822a03eda211b6a2ac52669df010e6c069fb84c2b22e9267b0f1e117ad94247df790e39cf04e77ac4e3f740f313c17f3bf046e86b8c7ea555d358f49a9d19ff797a83efbae885af18fa1b5affed40d161eadbc5177dca9d3d7542776424fed2fa82d80dd48f7db41a7a920efe447fc844a96aa4a5f0789972801da8fb5ae82e61604f2c7542b4ee0023bc9f9b739584c6d029365e0b2f6912d80d96211fab2bbc1e3c0900ab9014ea5f50ab960900fd870e7c9b89f6b7ac5ae7641fd6424dc244db18f77b035e861260bf790cb4be7757bdf27240b5edf02504fbbc431335ac671f4735e1ecba6a9968e172ad8a43423d340c18f83f7c39766dfb07b173f72e00d90b0b9b80d72ccfbeabaadc7629a4cf61bc29a1527009f168000ccc003109004e2dc8be924f119ca5e84071cd5f2bb2ad48eac676d1eece85542ad06d0d53f5786412ce1954e664bc7a303ad159552c5c5f11c032cf87055329947c53635b32d93f1447b8b489e32dc3c1e7c1cf3714672fcf67dca287757ac71d65c4c757026ca989d2bb862a40a2f1b97ae8e000284a6781db5a1e921a7c8277c93d6334aeaf7c4d26da57856c3dc8b0f393d8a9473b2524a5bc68a28d4b32d052049d476052ed4e7975f43c08cca0898529eecc58175cf4143c466b9200204be87198d496ff72872b132b0d7c56c5db55b4bdf9f12c6458eb91208e0d35e9f79d7230a345894452aa279ad1a46d03701216d3674d0c6eb53fe1202190a39c8c9f67bcc4e598533966f21a560f9b6445c9ccdd82fcc84e4ca72ce0a77a9eab43405ce2bb1794c9ff74b3779f119237ecc7115cd83e8c183801ea176b22e7e48bd9e6190177dc8b3942dbacea4c3bcd08a57abf79fafb256a3730ef2f88f14f3eab2a19aea02290fec45f47676b6ccbba213733f347595515164160ec0da9979c5694d8598aac2a126a5109278c35d772650a1ec51f7a6483caf16794faaeb52ce5f266c33c1f3909b41370732d1f4a3124c1dcd1e0daf7934ee20f66cc2675abd46d48502c9743d236d92a569f5eafcbcf7e066fa4b025c0825a8c3de589fce6faf0d06a082d3564f48ba60add6dd18ff09e7fc7b1b214ce4961c3f5c9188ce9c26fe9183265f3e9c89e674282501c99315ddf1482e81aa3ff54e24f6b0b47b768ff7944a2340e202951978a106c0158cd839f1fef23bdc22ee0ecfdfd1ca9e960be4f6db14987a3b8d916d729ce92b101f39ad87323f62c8bc2e59e524c489908d673cfb818c3e40c86428bc56131b0fbfa45cc4bf90d6775a63e05fccf979c273e8b397bbb7c132e6b37c5a877d9d26dafea04a5d9cdea5529d80e8ab5da43c5c865419e5e9ebc3c7f8b5ac2ce70acfea5298b3a5bee90d6569ae5fde43cbff5ec28ef4e9a54da5ed51c5019bddfe084c46d609a94191f3c456b44c311d6790922a2a50f110d5caae9efe87bae3ae08ad3aa27953d51db215d2e2356104e23849dd5d01aaef09e344d9ddcb279920213b12c312f9f5a08261efa0952a2abf51ada226603f57f45b71a525e9620d69d7c16f96a71068ce9b159ef94b00a539ecb0e36e499337657e9c9c2916b009cbc0044258c6a2ffec784e8faa77ac65b2228bec88070d66d6d2ea618e529b6920255e6697087f6657b00ed3dcd1a70a4720deea56d6115e8821aed355fa824ac5ebd7406c9b583e37e0d35d66abd8cf3b3b876a161d1310300b5f214244a47ce7fbe8542604cc3b8d5ed2baf044c020d1bd71853d9adcb4ab2e01dce0652c9ae6df739ef603893af6b1bbfc119f9b14a26756d1de81cb4a68370357cf77a9a944b8317e7c22f7394c84e127eda9720db20e2e1a6d646de3705fe91d04b42904162f5616fc6ab12324f7043b459f33815767f5c0158c8736190d140658958027e6b631139c72639c5f190435847d88307d19e5c810197a67b81756754ccf2918a443d4ad5f896be01cfb9bdbf9bb9e7ea5f1be95c67f25e09b755fc3b8d07975f9c7ff7d34b789b7a5cb200e583e0717dfb01cf2b0ba496268edc98774e292bd97205ad0e94811ed8177307eb326c421e1d1cfcd1c8034d379c57140cf039404df5b7535f2485c75d9ed39b90767082e0d7463244fa7900a7b55c3fb764758db2f9062ce49fc2bb22c0692e13cac5ea55c59c82735b1ba4b6ddd653756981d383b7d65f61c3c1daaf0bbd484407bd44de5a13e8598610be3fd147c96d31a907ddd9c60c7cd132356f0d6c8987ce3f8f50475f1e40be510fec81149ca3ce17c3189a3aecccabece182ade64c8538ab2e7b778e15c648e8338670eb702bc3e6137382a53874263ee9719cdea38aaaed30c51ed2031ae097974c460d578a72054bf9fe00482a8bf75c662fc64ff58e3fa38c7a66a26dd740e7d13177146f8ba"}, {0x90, 0x10b, 0x101, "8bc2d27487cbaa4804c8197c7f766c1e13599463308fe1e5142894be7f204cc8541bb77b6847266b47fd3cffaf3347c34ec80ba2d028536bdbfa2dcf0ee7ba8a289fcc1e52a0fb0e7bb8a45b5bb3d4dad9e7dbbff72490349a35c28eeff22b403acbe32f685873c3e87c132f4d4eb54fdc17c8e5f7bb49cef5648a659d"}, {0x50, 0x117, 0x3, "4e229d62aac8ce85f2b2a9fea87dded57814e8e7952007b0830d5a69d7f51f99df758d4d950936502d35333ffc33f79fe8f75d7e5cc8cfbd4835"}, {0x100, 0x119, 0x9, "af475ef603eaefedd4b3e93ba7041d9c602c9d6cc89c1a18daa1ac2795a1190f2ff68ed47702bd94d90ae0eff9b9079941116e97174cf5c481ebca8ad3692fcc1328dc2f54f3d792fb8d2c0f7ef56351855d9b7208f90c1532e2d581a07adaa7b99f1b95ab8b0deb31f1610f26e87cb5c5b655fe68d2a70712bab0d9705d8bb5763276d484119c815fdbeac156de6400b549dc2a04588d0ea0e0d8f65f02b6b5f76169b79c810ace773447b3e9f8dac470a5263bef08e37ed0130430adf2450c1a6f19ed05cb45b5336f6af29c1c6c9a8d5cf4d418d3ee555d4ed9379d9f499aa2e08de415bb64f3860f319c"}, {0xc8, 0x88, 0x1, "76af144a1998de6e90bf8a3fc6e339df09c03cac2ab0a62e12d40f063835bf9c67d2e5c9b75f2c8b1003ad5ef5afb592d8fb950c2b50d5616bd7dd48206c383f554747c0c159d1551d951c79787c4e19093426b923f4dd5bac93baab41a91a8d9e866607de1a2fb0a46ccbfa21fc4881a02d6af281b68622239a1d7f0217faaae3f0e669b907794dc5f1c343ca6d70aeca615483a851f924f74cd98f31f46047e411092a8632c51ef7e1802cb6fa3e5eed"}], 0x1358}}, {{&(0x7f0000002200)=@llc={0x1a, 0x321, 0xb, 0x4, 0x7, 0x6, @multicast}, 0x80, &(0x7f00000048c0)=[{&(0x7f0000002280)="f9666f0ca820151b022aa316a4986407d46a786d54c1c7f54131cfaeffafae4c82df0ed1d262d88a940cce1fe09e935bdf83f4857be9c117b9f549ce3c795ba6d093e78d43f8f65c238197b2a7ba9dfa9de778d24491bc9cde8c2ae7699b104fc39e30731473a523b40f78bd10fcb0f1b4a50bc562af00e013994da26c7f527b3e60aa512ed4795eec37c0b2f4c538813aff8b399e475bda19a24594097a72395043851e4d4c04996967ea9862997bcf161a17579f315290ab54791ab73ebdfac659b2c180e7060231dae1b965734b4c1e0d7cbb28f00a74b6be86e838d9e09e353a042828707d3e1b9fbef44b731fd214b16238e52f501551ad58bd19a46a7898cf819b779cfa90caa255bc31be2740ffd2d7cd975e974791d7afb5b226f73ff295c056d2557611d16c35283b0e4f8e25783f108888593af34ba94f29ae16c7a3926cec5f4059663ef5e452b1bb4a6eab0041dad24f126575118762f75cee0c649083953fde1e1990b2a4fed6bff85e29fb3cd0bcae1586b1982434210383bf2351a4e1572c1a40da05beff191b939c94d63e18e1ed5eb925d070a0bbb401e5abeaa6ba4b725762124e62e2fcdb603cf1af6f112e50fa638e181c7c705e2f87fa66ef78c2770e9bb1188cb870ff867dbc202b07df1603807aae29fbc39a99047013ebd767bcabb6b660d81386be40e87d4f69b4cc943b785f17e7409578dd1254ca37855b7f4ccf1768a702a0098ad431a048cf6168603d5a371204869313aae950cbfbc4e43726798637f69ac43022c5255adf4eb3d5a2c7ccaa94152b4c7f51e284c6a7febe71e725576289b0e5d522568d542139b4fd54287f9c66380a44d51b0ce9fae76a159019272bfb5b64c377ddfdd85606d4604a5f60a4ad840b7a3d37cd0f329538aa937fb804d2b45e624317d61fca1843d33623d3fa7974c264307b648110d74a823abc82185b58ae9fcc23bdeb4b070e35ee3c36cb7d0c2b23db21228484d473ae7207d52d792150e32c052c5228c3572234ffbbf937c27ac5dd66715adc5875f0b73b601dc1fc1bd303fc4c891fc397c459fcf5e28ef9f7902b036eb701d12ea5df49b04ada1047f42c6b21d7b6ae10f82490835f415e03512ee461c9b7686a91173cf17878d2e031b8650cf4eccf59eee5ff6f6fd07a63655cca4d834fccf2f14286c0f60835fe6031b31a69f6f7130f1e40e27006f3287da5a4f105f01cc97fa0aae5b15b8d790917ade8a447922ffcec40cfda52f29b57583833cf2dcd17a5cc80879cb2fd1330f37d4856988ccf2cf63ccfe1b3e87c01f4b0043660247f81c91a7585b6c4e36d64715536d1233dbf93c11f7a744964132f50b9fcca6a219ee8933b0c8a766b541e18f2df339a5b2547963bf630fce17335d1e7837f42043228f2fed414cb5f0f9b1c7f53483b129ac028db1cd2c3e1c6beaab698fc7625a913bbdef1bdee35e83f9b149d07fb34bcbdfcc621a80998425b1ce4e44ec549c210b048f35fc7dbc07259eb40e0bae9e4404037b41211d75044a43c73b19786104ebe13f52e1063e0b5c67e1a188b44510929c7556ee647532b693875e943c72a78c543837a91c75a1ded74536e505a24b6b2af6c456e38625ae2a8ad897fb9a8832436699e8215617cb21782830370df7277149cc8fe7d64137744ef5457fdb6524e9e589298be9e588204266f1522d3aa49b6dcbec008b988715b501d3c39ced9baed1ad6d90cdbf02d2810039eca6bfe4937e99196f1a98cec2724746c45eea5ff9b0eab8f5e248b0cf1b29cc2163a55fbed7848d72f908aff9d902b92bd4d56424136748162aeea7c9501a00aab14e649875bfee812110a612099727baaa7c393294042f9edc448876e0ca7a6e87ec1cbaa80b6d98cb927e4b3c89955aaa120a05ef9b12ee4db4c912e5b36485cdf0c43a0a1ef26a08fe4247d80eb4630239bb973a166b6da74bf4d40ef23fa3bebbbfb2584e17ee3f63e7fb72bbcd9e27160a82a273e25a0f1c766d7957ce26d9ea8f39407e401e8712bca36664e75f4b265326d1cd1c65fae182de13ae668671bf734bfa54cba1563434a88f4423894c27e8ffa116a37c91f667116a2e34d39250ea894400d7230651324fd56dd1b4496ec85e5e9e6a5c7e526d442c0b143993b2a74e14ef6279153d4904251d61c44df54cb81a33c2c449402e0366eb46952500f75bdb580d99592ffa4785f6bc1a993a8215612d16a3d3129fc405433cda0f13eff8a593c236d23962f0bee4fabd81071c09fbf4c16e828d5a637fb03acef6bc9fbbc31bc93f4a28503292ad25cf2709bea345e90250fe02af8c2847c2002ee1f61da1cabfef83690a4318fb56dbc4c9c03ef844cbd3e554f2ac097e6a5be22b2985c3d381576e49604da892c02f2bb5dbbe9c21847e29e38aae44ef292c7fddb2d88dc02191a8b1751a3cb7dae93dfe13ab8393714143351b79df6459c5d4a752dfb3f80a39924020f1ea0219cf5bc4a451133c322d4ac182ba6805a4dfab60e0021ade86409da5d6ac49717affaeb89c9cd73e6b5c6e9d6d9b6b166f9f0ee280ba83f6444e5cd065d3154aaed382b0bfd90938f8db585c028b47cfd362ca7dcdf0be8a9c314c91d5121b5c078bb45f1d90d36e99b47f82f87e1a8b065e62e0c5f39e8967ca773287336638ec0f946ad0a3231b21f41df1e1a05ca347e71d9ba23463347a33619414b9234ff26c7c68248a21d1698c341bdffb0d9359deb7d174684a65ed977653a03f259ec9146dec311910d6b1df0c376c46010d189e2fffefd5dd8e8b9d6c6c2b52bd09422b662b74fceef93dd8dd9d85841c7c5b9994edb06bf99b71a0a52b208e359cf280ebdf2a0543a652095618adaa49b838f3a9dafde4cf534ab9400764e92f4f64eff60e97c1df374481222083ea5abff7ecbf220496e192efc190a335ecef9eafabb6e7e231d12762e634b3e1d0014a1e41346d3a03d9d06bff2c9a9bd7e929742cc182dc2c9f28d71a83a9e5f11d3f85ab4e6bad228045e7aee1c8972d9b8c4f4443afa8d027514da11aa545fe2eacde01108bc6bc0b20a47b14183977a718bde1219fb1036189d84d46016829fc601a01706c50ca2de4083bc5970c9ed00840eae5d3eb705d0bc47024c0b72fef505dbfc10d980424da060bf76c6a0ee326dc3f97de9335beefdf79901bf853aa7f09611d5c4926c7aed8c131e7d09e7f63481053552cb8b0c57f570597d73a0c9ff8d4bc1554fdd8c4fdb052b666563d09e764a985998a1653d1749ccaa5b9c8487bd4cdb8d7258200c8ed32a74ac092359935dac2cd882a52d42306bc2d15513954745309b79639db61052665a5dbd22b097a05d8ce4d300bfda6c0bf4503dd9df92f8db194f70b256974c05a563f62882f3453eaf88460fb92564c4f53f243fb1b4e36d46a2cd67b9f9a7180885b38dd8050b1c054cff5040c0cd7269381478a7b886eff806f9dfdbb24ef2b13837603ebde609dfd2438c79887cebe152719e656a3dbabc77a09c4d64ba2bc042d58cb6ff22aa1b0bb2f56de23fde90cb6a23b0de9cb3a02f67a2913311db4d51b93acdb85d931e66af8213b1cdd11e2ee21d9320ff1d7cd671e9e5ce5baa5c6fcc8c5b456c0ed2e75d49a9409e7befc675345980754995b6718a1e13dd0c81d62b30a73d1f042a5c61ecfe9a68ab83b573cfdcf2e139b3ec723ac03895e374a52b253ca40538d1f0b4c8bd4b72dd40fff840b1eb35503bd8da08ac53dae35986453327dff3e1573742e5fa69b954444b0ef6a64de566871ea2740bd32f9823c3380e3a6d23619063b544951d45e63508995471eb4bdfbd43ea050f3389772fe8caabba74d1b3b1c2f8865083eded52c20b30bbf3a3a0db07d6a10768a4055eba0b3593aaa53848bfedb4765e0e0e8aa22da26dc707de15dcbebc3c1f23c3760b3cf601c2f797c3d64704276693285ded17bbdae5bf22a0c045ef06cf0a3e9a0c2e672c427d3ed582a72e30e81b661c5b64d2685756458f1535feaa69b6651cddf9e3f852fe5e7df1a46e82b7159c91bc7d1cc7b912e49696d64f7811b9e5b46baba850e22834053ef8c92f30911256146f2bb387655b88ae7c03a4c277d842a3cf96b6fc838ee9dd3e171ff620853ef60bccf174ba8154b0574f74ce942e014e6e678904fa123e09c4d0b73c3ef16a79d7ce56809ebfdbf4006c54e783a043f32a4aec1148d7c39044a9df7c3e7dc76dc1a93eb24feb0221744e1d9d89925048eb8d2301315329221690c66b2d9a4582fabdea7717ebdb1526a6ae1e7616943d2f05a878e40d2b142cfe7d09918dfb8a83e4ae87b1ef9ebdb623b775584560954e5678c1ee9ef4e34dbf7882bbec910bab93d26afc3ab5751ef592eb13dba9f2e81ad28b027151410aa2e1e94847318600a9c195069e8ee49436a2939362ed4bf64bd5254c314a4519e90046e3d71397883fc95000a50b7628de978bdbee8223a1ca701f963842e6f82644433e669fb8d829172b4519455b675c2bfc03a25b6a27b20a1078e5deb59c56e9dc7917e3741d4b5a6b3eadfeb04384084d1fb297959e13725bb86faf8fbdbeb7c7c5c49f3b33db36216284b09e99f0fdb95f98040ca1e9883294a62245076fb7d7f2cdde5e3f92db0967b871cb972263f504515e7d91342a0ed9a84f905abbc4f304ac1e2d92a0f0f357a15115193b320681c075c5363d587f3a63b2964307a6a463aa086cc509491b61caa6cb8554271d8819a79c413e3d77a245f9a22a9553a0fa9e7dd69455e2da69174d10fe47c105adbf526e7c026cb82dca75d6e9bb9c36bbf04f0506d1309447edf28f351fb90b847de441feb581478ed627b2a559c6b2f1f749e6f60a22c765254e77e5a290faa85a44989bd17c158ac20ae9c9e9134099955ed887ef6c1df40f7cb4041467a3c12e828f1d6d2e829f43ecf77a73b5996075c706c1529ad8b6411e2c9361812e9f07676fd2ead7b9af4c61eeb6b8e61d3f9e8e0fd9925d43b3e8567a947b3d4c05f31b4cc5c996d51ba6c2369b4e5ea2e76eca364ce7b4c9cdb49c50fcaea34893489f49787eb238cb1b3295bff9b87083482d366f75f0a76b3d8526e561a43036b3f3f3f9e90a7b6e8becbd5b4bbf55b7cd9ca1592cb555637d5a1f49d8b4cab78edbaddb3ccdc6e7942c790e7b515292a949d6522b891ea8cb872cf9a031f47b1c869d5b7e921e333cd13f4eada274f715898fd5d01f7e81444b46a73745da8e9be93101c8952438b667591ac68cd942d9e144425c6782b418a79f1f6c7da7a387e055235c14b84e3f55959e045a4a7ad5c50bcfe6bd2e28aaba14d511fe9088e29868d131713111f9271752d7a4c0953fc04098e9161dd3f5a7c94be1b5eac09a09b5c2e3a3d629919ef3d07e57b763e96738981f34d5821a5705bba39c7e557e04694abe436d397d44590eb476680c3283d324aea014bd7cbacb86bdb317098855cf20f8a7854e8d828c959d3996fd14113385d5f37233e05683e0be41c3a6164b2dd6843a8ffdb30eb4da0eccb876d5bc6e4dcc30256839aa46b54182d213086e8014aaabc4825a62ca34a044959f84884ca7a59af4e8da07569376ca2a8d9eb2cace1348c1c37ae776dbfbd83f780c717e87e4a2fe3c86c666a1dbcc3a9895485d47ae15944c29ee905bbca23997f38ce62754f15ca640ce8ab55710dfc85f17c4c1502e4c044f5d5f6e9cc4f088d1c98f72f3f9d7565f710cbae3d24d1ad9d75b1115ffa1e0ddde71b35f224e7f1e7390a52e0097e5a546a307382119e5e6", 0x1000}, {&(0x7f0000003280)="c6a2d4186f11d179713dfcf41c85c5bbe597faae58a9d7bb90e3167074a156bdfc6850611f6b70846ddbf2b697972e617e3c5b6ea5071707d3e93e891861d7fc1caa0f18f517f1d23f612832714c97158a4e08439a030b637e575f01151e35edff05fc419bce693f6eb2061b403fdef5045216020781472cd8d07b4893778236b120097fd59763a153cb82f72a400cf68469ac3e1e99304f90c58fce54b94dbb54ab8a936800", 0xa6}, {&(0x7f0000003340)="2e5ee3e26b9a89d0cdbd60d456e8318db01e551e91e865b9732498777f1d3857cc08f551eeed95e0cfaf9050960596b376528b7103cb570718328dbeb88bd346bc1527fb1e19b87898b3ba877dfedd3006c5d65f7497edb9e74fd63b3be5a862839ceeabf2476c64f4ca7fd284e6e37701c5de8d8556f72d16a8f4d56ffcaf6050785531b43a40d4193b4508e8b65139579b8cbf4d5a11045465ed0c98d8955f8a4c28f151f9f630f22d296ffbd2956ebdb6a736da975659f8878587f412bfdae7649284e943e38e14c279fb675426f286bb8e70105fd69d89a1a3849317e4656fcd905ac6fd57292353e9d6597821e21772", 0xf2}, {&(0x7f0000003440)="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", 0x1000}, {&(0x7f0000004440)="d404157ae22d94bd967ef3d6e3136ad82ecc1b173cf7c83378f9c66318498927da6949c3aed57f4d010a15b18918a06366021a7cf371d4306b", 0x39}, {&(0x7f0000004480)="e9085758b8b578c6d04535955321597d61f4c96e40e360351555d78f835175416ec3b57a6e6cf642a831271e87635fcab6ee24fa47236108108cb868aa879eef98e0b705f72e5494fa80e832f53391d3a9fcd6e9ced68e68baf371be4f72f59532a94028c8be867e56fc4b60d4b140588730ab06caad772e71e3fb2e3722bdd8bf922644d950974603fb0235db179d1ad5514d98d3248e3fc32788dce0fc7a433c7d595b85249fda2c112ded420e9a3b5c5353610f5a7a95a188c196ee330fb64f1f1988bcf65ae667c967e3611a38f15795344606f414ad683f", 0xda}, {&(0x7f0000004580)="667ea63962937810adf18389dbd91df2d26712b16a1c3bd471afb61db1fc9c62ef198298b4aee3e80d1bb44a7f1ae424e4d6316f52ac78a336ec1bf910d86f12190c081295a51ec75629b23c98ae3e7b9f81822a294efebac37bce9e3e2455b03fc0f0a7bc1258e2bdddb4b73909bf512d87bd58522d360199a53711a7b85c7769c7d6eba02120b6ea9b82d395003209c49b347084ae6bbc5e6ae9e6d0f027c5657be416b1dc48c2799642b25af07f0f93079d6c0413f6606c1e75648480bf1008991d0f64bdf1752c43185d1a0446f892eb84cf05b2a0385e2eaca50d4f24990a465492e06496e6ea", 0xe9}, {&(0x7f0000004680)="8dda2d743e731b83a4f32b1b070cbf1ad9c74697c4be845c429a8d4e4eeb31290ef1a9fe867ab370b05edce09edbf232619b61ab2c6e4141b8c035b413f4088f079f9a717d4779a556c94508da2979a319a596519f4474f2d58c807cb8b1ce498ecd6fee05eff01c7c6e", 0x6a}, {&(0x7f0000004700)="6d65aa05cb2638410299cbb451296704872aa41e8b2560c6f14a094820795bfc39d0268b697434120871c5afabe5ec795f767d473d0b7dd0e628cab50f62031620b1d8aa2484847e0509f826fe1dd7b2a0121a0dee778b253031d23bac236c2481a6ce6ac29a07ae829f7d230a0b25b40018f64cb676f3a2dc4319e64d8bc80494fd0bced854b9ed271d2d102e7a5fbfdd84a9f16d23d5d963ce853ee72f435e185a3566bc1150321633adaae8cd7bb34e10bb1d0ea25d35df93d6a9db6eb1dd8dae58b2ead1a679cab631c90ce40180790803604fde704567cb959519d08f2ea896", 0xe2}, {&(0x7f0000004800)="8dce81349799bfdf863c62c190420afc07b08a919c0a271c92749166190ecc42b6d66cac2952b0f57e81dc65f6418322bdf9a054b404e7ef269a17baa4dca0bbee157a4889feb72b088676b18450406f8e590b4378c371284e1bd895598656b64f258ad9f9be70d3d6b82dc95c4986e8a02305002f334624b9e153813f513f639eb74b16d8eee5948fe149d838dfd72a14c88f6bdbf2ab5a0ba5cbec12", 0x9d}], 0xa}}], 0x4, 0x40000) read$nci(r2, &(0x7f0000004a80)=""/12, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000004bc0)={&(0x7f0000004ac0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000004b80)={&(0x7f0000004b00)={0x54, 0x2, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0x5}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x9}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x1d}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040005}, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000004c00)=@buf) r4 = socket$pppoe(0x18, 0x1, 0x0) ioctl$XFS_IOC_FSBULKSTAT_SINGLE(r4, 0xc0205866, &(0x7f0000004e40)={&(0x7f0000004c40)=0x2, 0x1ff, &(0x7f0000004c80)=[{}, {}], &(0x7f0000004e00)}) r5 = accept$packet(r2, 0x0, &(0x7f0000004e80)) getsockopt$IP_SET_OP_GET_FNAME(r5, 0x1, 0x53, &(0x7f0000004ec0)={0x8, 0x7, 0x0, 'syz1\x00'}, &(0x7f0000004f00)=0x2c) ioctl$XFS_IOC_FSBULKSTAT_SINGLE(r1, 0xc0205866, &(0x7f0000005080)={&(0x7f0000004f40)=0x3b7f, 0x80000000, &(0x7f0000004f80)=[{}], &(0x7f0000005040)}) getpeername$packet(r2, &(0x7f00000050c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000005100)=0x14) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000005140)={0x1b, 0x0, 0x0, 0x8e, 0x0, 0xffffffffffffffff, 0x9, '\x00', r6, r2, 0x0, 0x5, 0x3}, 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000051c0)) sendto$rxrpc(r2, &(0x7f0000005200)="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", 0x1000, 0x40, &(0x7f0000006200)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @loopback}}, 0x24) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r2, 0x110, 0x4, &(0x7f0000006240)=0x2, 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000062c0)={'macvlan1\x00', 0x0}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000006380)={0x1, 0x58, &(0x7f0000006300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_GET(r7, &(0x7f0000006500)={&(0x7f0000006280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000064c0)={&(0x7f00000063c0)={0xf0, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4}, 0x40) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000006580), r2) sendmsg$ETHTOOL_MSG_RINGS_SET(r2, &(0x7f0000006640)={&(0x7f0000006540)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000006600)={&(0x7f00000065c0)={0x3c, r10, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_RINGS_RX={0x8, 0x6, 0xdb8}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x4}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x4}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x5}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40015}, 0x4008800) r11 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_BT_SECURITY(r11, 0x112, 0x4, &(0x7f0000006680), 0x2) 1.054257164s ago: executing program 3 (id=3674): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0x9c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 1.051613199s ago: executing program 1 (id=3675): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r1 = socket$key(0xf, 0x3, 0x2) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, 0x0, 0x24000840) sendmsg$key(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0207e80702"], 0x10}}, 0x40044) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r3, &(0x7f00000005c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x28, 0x0, 0x100, 0x5, 0x25dfdbfc, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2d}, 0x90) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000004c0)={'syzkaller1\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r5, r8, 0x25, 0x2, @void}, 0x10) write$tun(r4, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd0900300003003000000060ce902d9f"], 0xfdef) r9 = socket$inet6(0xa, 0x3, 0x7b) setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000280)={{{@in=@multicast2, @in6=@remote, 0x0, 0x56, 0x2, 0x0, 0x2}, {0x8, 0x80, 0x0, 0x0, 0xdffffffffffffffb, 0xffffffffffffffff, 0x9, 0x3}, {0x6, 0x0, 0x4}, 0x1, 0x0, 0x1}, {{@in=@empty, 0x0, 0x2b}, 0x2, @in=@rand_addr=0x64010100, 0x3507, 0x4, 0x0, 0x0, 0x3, 0x0, 0x4}}, 0xe8) connect$inet6(r9, &(0x7f0000000000)={0xa, 0x0, 0x2, @private0={0xfc, 0x0, '\x00', 0xff}, 0x100}, 0x1c) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x2c, 0x3, 0x0) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="110000020400000004000000ff001974ca250000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r12, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r11}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={r12, &(0x7f0000000200)}, 0x20) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x29, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001000010029bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="2100000800040001800000"], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) openat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz0\x00', 0x200002, 0x0) close(r12) 989.334321ms ago: executing program 3 (id=3676): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000012000501000000000000000028001a00000000000000000700000000000000007f000001000000000000000000000000000000d8"], 0x38}}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000540)=@hci, 0x80, &(0x7f0000000200)=[{&(0x7f0000000400)=""/225, 0xe1}], 0x1, 0x0, 0x0, 0xf5ffffff}, 0x12042) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) sendmmsg$sock(r2, &(0x7f0000002c80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000008c0)="9a1646e333841dd817f884072bcfc4e86d09eae42c771150d2a0f7409c1370d3638a8b435039d8f5f5a58fd9696b618dee51e4869aced576ce4348d9b259fb3273c6a36fc309164021180c785a3c299cbf15a38790db0474eb0b41d11d4893959adec407e9ba742652a28fc5165a05b7593682298736a7ccd86db5f3758d2939e9992035d6de58a4b803a94a72a31139fd6e1f77b7e96492191da02c8bfd789de8bc6acd5484430d64a233fd9512f3d646d33db37e305f92dc1db89bd85b2689c942b596c0a45c4efff5", 0xca}, {&(0x7f0000000fc0)="efaf7a93d21cbcbd56d058e53b498eb5aec446ded5a0a15afc4a85e66ba967dd32bdaa041334d821c83f07626dff625725d9d7f2454a3c0354409cd461092701a394007cca7bf7ed39cb6d0860fc9fffc3867688808a8a9fa32d9c9f797ac6d2f35665413642d174ba233adaa36bf0d40144a05abc9458f98e5738d6952053397589681183bf74246782eaa788d1afbf227f54319c505f1678a3165181261067da7d2cc5ce2f9a8ca0b99fa09f8e95675cd7666c5e2edb4b8029c371ccfe0497285e0e223106e4b43dbbdae8faa67a625fff23346e701f1c8cf9b6cd0d485c422d1c07b63988d3377dfe6634b1e184", 0xef}, {&(0x7f0000000ac0)="8f30e4f3a357d24b35a884da0ffdc5c42f7ce57129b691f99daded3f1e2aa5f6738c747cd9fa7b3e59a5a24970b0a2a5bcc8cd72fc0a6e472442b441e273146cb840d20afb23fa12cfaaf4d54ffea9bdaf5d445e4773e815b6462cdc4b449d55a1d007a07e49cef17635abf4c4986abcc36fc5529e63aa97265af26fd3286548b2a7932c81883c382b1598d0761891370633573d40cd4b425576ff4998bf040fa0aef4b64392fc7f7b6fafb4a073a88f883f16c9c771664b430d91", 0xbb}, {&(0x7f0000000280)="3b3d07b7091f697381965e2e09f9f6f54a284af3f8fdb1c24e6d0c4a7f58ffca9b24b191f510fbf55fd3e76154e2a4fe1e14c7bbff4c24907805f79e2a90f0d8c8faccbd2243475ecfa1f5fac83b8910baf212596b2a4a23aab8eb9cfa683836af5e50b1bc4f815b49fc47f85fe32f31be5fae8ab75f88ff7687f9143eb2c30f42e2659c8f7f2eea31b74e233226f1965762bb075dcb39d9130dd1cef7b04035bd0fe45803ec1e165d4340d55eaae5c40d7bf46712a2bb2ed87c9b84e4bd49775c10e86b58d47fadbc520d8d", 0xcc}], 0x4}}, {{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000140)="d51927d7b27f39aa725cb19a990f66ac9aae2f7d92045a4c05e60f4dc5dc6c4e4ac8449b9915fb289bf1692a4c7d9440950ee716b680274b3c53048b6a2aeca47c5e6987db6b4fb364fa1e1709caa0696b9e02eabc8757ef2d", 0x59}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x7, @local, 0x0, 0x3}, 0x80, &(0x7f0000000980)=[{&(0x7f0000000340)="f4001100052b2c25fe80070000000000000000000009ffffffe000"/40, 0x28}], 0x1}, 0x20000810) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000000), 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'batadv_slave_1\x00'}) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x18, 0x1402, 0x1, 0x70fd29, 0x25dfdc02, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000801}, 0x4000) shutdown(r0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) splice(r5, &(0x7f0000000040), r4, 0x0, 0x800000000ff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f00000000c0)=@framed={{}, [@jmp={0x5, 0x1, 0xa}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newtaction={0x80, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x6c, 0x1, [@m_sample={0x68, 0x0, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x4}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x13}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x4}}}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008085}, 0x20040000) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x17, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffb}, 0x48) syz_emit_ethernet(0x37, &(0x7f0000000280)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @broadcast, @void, {@x25={0x805, {0x0, 0x3, 0x0, "f36b806dbe57be384de57e3df446f182504c82bd7dbb924eda6d04a924dd53bd890f63cc46f6"}}}}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x38, 0x1403, 0x1, 0x1070bd27, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000840}, 0x2400c000) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x401, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvtap}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) 966.949204ms ago: executing program 4 (id=3677): r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x4e, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd604dd318001806fffc01000000000000000050a4fe8000000000000000000000000000aa00004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="600200009078000008020000"], 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000000100"], 0x38}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r2, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000000)={'ip6gretap0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}}) 876.85531ms ago: executing program 0 (id=3678): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x29, 0x9, 0x9, 0x2, 0xc, @ipv4={'\x00', '\xff\xff', @multicast1}, @local, 0x8, 0x700, 0x3ff, 0x6}}) socket$nl_route(0x10, 0x3, 0x0) 795.885496ms ago: executing program 2 (id=3679): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000300)="018c4b098a28082d0004000084c38557c1b2ef87e5a5") ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000100)={0x0, @null, @bpq0, 0x8, 'syz1\x00', @null, 0xfff, 0x3, [@null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default]}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0xfffc, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{0xc}, {0x0}, &(0x7f0000000180)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}}, @rdma_map={0x30, 0x114, 0x3, {{0x0}, 0x0, 0x44}}], 0x78, 0x20040040}, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_RCVMTU(r6, 0x112, 0xd, 0x0, &(0x7f0000000040)) openat$tun(0xffffffffffffff9c, &(0x7f0000001000), 0xfa4f75bbacff275d, 0x0) syz_emit_ethernet(0xe2, &(0x7f0000000940)={@multicast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0xac, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, @mcast2, {[@dstopts={0x3a}], @echo_reply={0x81, 0x0, 0x0, 0x3, 0x8, "ee63c69e555cd0ddf59f98e0e99220ecf04f7d209a4177574886ba38e7664f446affffd4d41a58216cbe19f6f5794b8e6d5469627e9d717dc18689a9d920b260dc1b4cfab2ddaca8edd47cbc89c7e67f59b04f15a73b74f96a993f969f1b18cae14433379496503796fa5d13d202a3b4f33644092479967567d806dca1015a497ad363eb7432dabdf1b6123c9163d1ff8e097d4a36747507a335e9bc"}}}}}}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuset.memory_pressure\x00', 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB='T\x00'/20, @ANYRES32=0x0, @ANYBLOB="fab0817dbcb5f31a20001280110001006272696467655f736c617665000000000800058004001800140003006272696467655f736c6176655f300000"], 0x54}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) pipe(&(0x7f0000000140)) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, r4, 0xf21, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r9 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYRESHEX=r10, @ANYRES64=r10, @ANYBLOB="00000100000000001c001a800800058004a75e90998ee3f53d89dcc500050000003e"], 0x44}, 0x1, 0x0, 0x0, 0x5041}, 0x4004) ioctl$XFS_IOC_GETPARENTS(r0, 0xc028583e, &(0x7f00000002c0)={{[0x9, 0x80000000, 0x4, 0x710]}, 0x0, 0x3, 0x6f, 0x0, &(0x7f00000003c0)=[{{@align=0x6, {0x3, 0x6, 0x2, 0xfffffffffffffffb}}, 0x9, 0x0, 'bridge_slave\x00'}, {{@align=0x6, {0xff, 0xbff, 0x0, 0xfffffffffffff824}}, 0x0, 0x0, 'GPL\x00'}, {{@align=0x100000000, {0x7, 0x10, 0x54, 0x3}}, 0x8, 0x0, '\xff\xff'}, {{@align=0x3, {0xe7, 0x6, 0x9, 0x3}}, 0x0, 0x0, '\x00'}, {{@align=0x3, {0x5d, 0x76e6, 0x9}}, 0x9, 0x0, ']}.,,*\\\x00'}]}) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r8, 0x0) 776.544287ms ago: executing program 4 (id=3680): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socket$l2tp(0x2, 0x2, 0x73) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)={0x2c, r1, 0x1, 0x0, 0x25dfdbfc, {0x24}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 680.158249ms ago: executing program 0 (id=3681): r0 = socket$nl_rdma(0x10, 0x3, 0x14) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000009b80)={0x20, 0xd, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004804) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r2, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) (async) ioctl$sock_netdev_private(r2, 0x89f5, &(0x7f0000000000)) (async, rerun: 64) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000e80)={0x1c, 0x1402, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x62, 'syz1\x00'}]}, 0x1c}}, 0x0) (async, rerun: 64) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_DELOBJ={0xac, 0x14, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_USERDATA={0x45, 0x8, "cf9577f6f360d4723de42a551eff5a473fb27f4bd472793da713050177a9377a66e81aa2055f59567dbd6d2ef2001e5d0509582307812e6112bc03654e89b49246"}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xd4}}, 0x4884) 577.139726ms ago: executing program 4 (id=3682): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x2, [0x0, 0x0]}, &(0x7f0000000040)=0xc) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000080)={r2, 0x1}, &(0x7f00000000c0)=0x8) r5 = accept$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000140)=0x1c) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000180)={r2, 0x3}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000200)={r4, @in={{0x2, 0x4e23, @multicast2}}, 0x7, 0x8, 0x233, 0x401, 0x8d, 0x5, 0xfe}, &(0x7f00000002c0)=0x9c) connect$vsock_stream(r0, &(0x7f0000000300)={0x28, 0x0, 0x2710, @my=0x1}, 0x10) setsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000340)=@assoc_value={r4, 0x1}, 0x8) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f0000000380)={r3, 0x2}, &(0x7f00000003c0)=0x8) setsockopt$inet6_group_source_req(r5, 0x29, 0x2b, &(0x7f0000000400)={0x1, {{0xa, 0x4e24, 0x8001, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x30}}, 0x101}}, {{0xa, 0x4e23, 0xff, @local, 0x8001}}}, 0x108) r8 = socket$inet(0x2, 0x80006, 0x6) getsockopt$inet_sctp_SCTP_RTOINFO(r8, 0x84, 0x0, &(0x7f0000000540)={r2, 0xff, 0xffffff81, 0x4f}, &(0x7f0000000580)=0x10) preadv(r6, &(0x7f0000001980)=[{&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/135, 0x87}, {&(0x7f0000001680)=""/251, 0xfb}, {&(0x7f0000001780)=""/233, 0xe9}, {&(0x7f0000001880)=""/202, 0xca}], 0x5, 0x2, 0x20000) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001a40), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_FLUSH(r10, &(0x7f0000001c40)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001c00)={&(0x7f0000001a80)={0x150, r11, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x120, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xa1, 0x3, "87d6aed445e4216c2353629d4b1744e3c4381c7d55d6594c3dbfc4bda7405ad34daabbe0e98ae6e4852a336c0f19cf5ee7c53513d83f698c93004c521ed327906637e63322abeac0a1a82ac61f88e783d0dd7b6fc546c67b204ac9249d6b34756d031fa3514657a2f19d0f3f487e8e1d898761afb48ac36bdb99151ea33f8b6347a278695644b9430de046f6aa17185d550e1037929ec7143c5a086e08"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8}, @TIPC_NLA_NODE_ID={0x26, 0x3, "289d85c8a2bf0d66713df47b9fc2685c01f2f61c65ccd67b8d89281e7eafa8d4a819"}, @TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "c206b9dcb57b748f117aadc20ed11c0a93bb5a201d6b6a067f378a27"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x50}, @TIPC_NLA_PUBL_TYPE={0x8}]}]}, 0x150}}, 0x24000005) r12 = socket(0x2c, 0xa52314cc2e179b9f, 0xc) setsockopt$bt_hci_HCI_TIME_STAMP(r12, 0x0, 0x3, &(0x7f0000001c80)=0x9, 0x4) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r12, 0x84, 0xa, &(0x7f0000001cc0)={0xfffd, 0x2, 0x8005, 0x7ff, 0x1, 0xcaf1, 0x64, 0x7, r7}, &(0x7f0000001d00)=0x20) ioctl$AUTOFS_IOC_PROTOSUBVER(r12, 0x80049367, &(0x7f0000001d40)) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r12, 0x84, 0x75, &(0x7f0000001d80)={r9, 0xffff}, &(0x7f0000001dc0)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r12, 0x84, 0x14, &(0x7f0000001e00)=@int=0x30, 0x4) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000001e40)={0x2, [0x0, 0x0]}, &(0x7f0000001e80)=0xc) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000001ec0)={r13, 0x8}, &(0x7f0000001f00)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r12, 0x84, 0x23, &(0x7f0000001f40)={r7}, 0x8) r14 = epoll_create1(0x0) socketpair(0x2, 0x6, 0x3, &(0x7f0000001f80)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r14, 0x1, r15, &(0x7f0000001fc0)={0x10000000}) 574.980326ms ago: executing program 0 (id=3683): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071042b000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0xfe, 0x0}, 0x4e23, 0x3, 'wlc\x00', 0x25, 0x10000004, 0x7}, 0x2c) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, 0x0, &(0x7f0000000480)) r2 = socket$kcm(0xa, 0x2, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r4) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={0x3c, r5, 0x1, 0x70bd24, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0xc}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24080850}, 0xc010) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'sh\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x3, 0x1cb, 0x12d61, 0x12d58}}, 0x44) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d4c}}, 0x44) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0xfffffeec}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 457.264467ms ago: executing program 2 (id=3684): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000007000000040000000c00000000000000", @ANYRES32, @ANYBLOB="000000000000009bf7b8c20f6490590000080000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x13, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="8500000011000000350000000000020085000000230000009500073d000000003c8ea5932cf6fec5eade4bb02aa4f152b8bdfdf8ffffffffffeeff547930a8abf35fd3908aa4e150e020a1a45f8d6700ff00000000f669011b4504090bc057a5cdb706ceac9856bad67505a783d6f5d0542b83f636ab45c12311d14da9bf"], 0x0, 0x4}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000600)={r1, 0x58, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000300)=r2}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x4c, &(0x7f0000000000), 0x4) recvmsg$unix(r6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$TUNSETNOCSUM(r7, 0xc040ff0b, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x9, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xded}, [@exit, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}]}, &(0x7f0000000440)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x24, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x4, 0x2}, 0x8, 0x10, &(0x7f00000004c0)={0x2, 0xb, 0x5, 0x1}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r7, r0, r0, r0, r1, r0], 0x0, 0x10, 0xe}, 0x94) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x40, r4, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x8000000000000001}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}]}, 0x40}, 0x1, 0x0, 0x0, 0x4002}, 0x20008045) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) r10 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x20, r9, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) r12 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) recvmmsg(r12, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x140, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000000c0)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="450a00000000000061118400000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) 411.858555ms ago: executing program 0 (id=3685): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140000000040900010073797a300000000068000000060a01040000000000000000010000004000048020000180070001007274000014000280080002400000000108000140000000031c0001800b00010072656a65637400000c000280080001400000000108000b40000000000900010073797a30000000001400000011000100"], 0xf0}}, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r4, &(0x7f0000000300)={{0x6, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) sendto$netrom(r4, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000000)=0x2b1, 0x4) sendto$packet(r5, &(0x7f0000000180)="10030600e0ff020004004788aa96a13bb100001100007fca1a00", 0x10608, 0x0, &(0x7f0000000140), 0x14) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)={0x31c, 0x2e, 0x1, 0x3, 0x25dfdbfc, "", [@nested={0x30b, 0x10f3, 0x0, 0x1, [@nested={0xc, 0xe5, 0x0, 0x1, [@typed={0x8, 0xda, 0x0, 0x0, @pid}]}, @nested={0x15d, 0x7f, 0x0, 0x1, [@generic="cc39cb9db042474549524889905886009171313736215baae9fdfd00355318c9977e4535d6b232b37dc0067392db2608b279505c77b74983531f58fce686effe61b609487abb81bc75d4e67ca3e055d72cb435ab6f1639ffd15c57dfcf7a0a6386e7afb30e5a0ce79b72d75913", @generic="f80bec69229f826d13775d03b15cc5d9882718098ed0675d1935b77f14e53e774732635edbf74182997ee5", @generic="8a1413e08e03a3389678ab2957a52405dabfa582c12516d13e7b20e21bec94abd3cc16f391bb36c846adb1a2dde9e7c38240b38b72f3f4f667a4f434dde0b0aeb0a2f56f7fd8eba140f139432ea7537f6f3f749d8dfca2af8f34aebbe449c0fda2131ad1c773103d88ebb282185baceaa3003f43f6993418a06f3f7a0a4a7342638a92486ebfdd5f632e95a74f510d67c3ea24374ce3676f13e058fe6d39426ccf2a0bf4c7e7ebab5b43d4756cbc7775fed402e1e066532afc62323a1bacacdf62"]}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82", @generic="053b3a0b0a3176fa81d5dd205df77d46f70df08bc18894624e7bffe90164484395675b08b5cb590c676c2142be91e216739d0690e72a5925af7fb13fb2a4be76902e2211229172bd7c360f6d603e8eff61b35dd6ff34fe58dc5d3ba23ebb70b0d2f8d302084ad3e98ec61864d2cb9d0647451ab80d4f325eadc8d7ad364274f68cf6f7874b0d0c1b6442967dae092f893ad27643e311bc94a206618e9e36515064a0fab336692db34956ed512f98d73cf478601a5677008289970a674d1b41"]}]}, 0x31c}], 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x9, 0x400, 0x20000008, 0x6, 0x7}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) close(0x3) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'hsr0\x00', 0x10}) 73.234351ms ago: executing program 4 (id=3686): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0x9c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 36.396781ms ago: executing program 0 (id=3687): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3, &(0x7f0000000080)=0x7, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000f10000000000000020000018010000202070250000000000202020db09f8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000ca00000095"], &(0x7f0000000400)='GPL\x00', 0x1}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a00)=@can_newroute={0x164, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_MOD_SET={0x15, 0x4, {{{}, 0x0, 0x0, 0x0, 0x0, "29f764864ce3536c"}}}, @CGW_MOD_OR={0x15, 0x2, {{{}, 0x0, 0x0, 0x0, 0x0, "38286370efac9bdd"}, 0x1}}, @CGW_CS_CRC8={0x11e, 0x6, {0x4b, 0x0, 0x0, 0x0, 0x0, "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", 0x0, "19bc3340488836aaa131694a4cb097b6acc6773e"}}]}, 0x164}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$sock_int(r0, 0x1, 0x3, &(0x7f0000000080)=0x7, 0x4) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000f10000000000000020000018010000202070250000000000202020db09f8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000ca00000095"], &(0x7f0000000400)='GPL\x00', 0x1}, 0x94) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a00)=@can_newroute={0x164, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_MOD_SET={0x15, 0x4, {{{}, 0x0, 0x0, 0x0, 0x0, "29f764864ce3536c"}}}, @CGW_MOD_OR={0x15, 0x2, {{{}, 0x0, 0x0, 0x0, 0x0, "38286370efac9bdd"}, 0x1}}, @CGW_CS_CRC8={0x11e, 0x6, {0x4b, 0x0, 0x0, 0x0, 0x0, "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", 0x0, "19bc3340488836aaa131694a4cb097b6acc6773e"}}]}, 0x164}}, 0x0) (async) 0s ago: executing program 4 (id=3688): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=@delsa={0x4c, 0x11, 0x100, 0x70bd2c, 0x4, {@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d2, 0xa, 0xff}, [@replay_val={0x10, 0xa, {0x70bd25, 0x70bd2a, 0x987c}}, @lastused={0xc, 0xf, 0x7}, @extra_flags={0x8, 0x18, 0xd}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) kernel console output (not intermixed with test programs): socket [ 265.109868][T13521] syzkaller0: entered promiscuous mode [ 265.115515][T13521] syzkaller0: entered allmulticast mode [ 265.437109][T13541] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2308'. [ 265.513652][T13544] netlink: 'syz.2.2309': attribute type 1 has an invalid length. [ 265.558322][T13544] bond10: entered promiscuous mode [ 265.568550][T13544] 8021q: adding VLAN 0 to HW filter on device bond10 [ 265.721891][T13552] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2312'. [ 265.733244][T13553] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 265.741627][T13552] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 266.366354][T13560] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2313'. [ 266.602136][T13566] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input10 [ 266.801913][T13575] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.2320'. [ 266.899219][T13583] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 267.110528][T13595] syzkaller0: entered promiscuous mode [ 267.116062][T13595] syzkaller0: entered allmulticast mode [ 267.501543][T13610] xt_hashlimit: size too large, truncated to 1048576 [ 267.561507][T13612] gre2: entered allmulticast mode [ 267.580756][T13612] syzkaller1: entered allmulticast mode [ 267.892702][T13631] netlink: 'syz.1.2339': attribute type 9 has an invalid length. [ 268.119361][T13646] netlink: 'syz.0.2346': attribute type 1 has an invalid length. [ 268.188386][ T7588] IPVS: starting estimator thread 0... [ 268.279166][T13649] IPVS: using max 31 ests per chain, 74400 per kthread [ 268.457940][T13661] syzkaller0: entered promiscuous mode [ 268.473670][T13661] syzkaller0: entered allmulticast mode [ 269.136860][T13689] netlink: 'syz.3.2363': attribute type 1 has an invalid length. [ 269.145781][T13689] __nla_validate_parse: 9 callbacks suppressed [ 269.145801][T13689] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2363'. [ 269.216945][T13690] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 269.763762][T13695] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 270.466916][T13703] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2368'. [ 270.481553][T13701] netlink: 'syz.0.2367': attribute type 1 has an invalid length. [ 270.489598][T13700] netlink: 'syz.0.2367': attribute type 1 has an invalid length. [ 270.497373][T13700] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 270.518336][T13701] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 270.699332][T13714] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2372'. [ 270.859693][T13721] lo: left allmulticast mode [ 270.868433][T13721] tunl0: left allmulticast mode [ 270.873615][T13721] gre0: left allmulticast mode [ 270.879319][T13721] gretap0: left allmulticast mode [ 270.884617][T13721] erspan0: left allmulticast mode [ 270.893792][T13721] ip_vti0: left allmulticast mode [ 270.899370][T13721] ip6_vti0: left allmulticast mode [ 270.904812][T13721] sit0: left allmulticast mode [ 270.910920][T13721] ip6tnl0: left allmulticast mode [ 270.916142][T13721] ip6gre0: left allmulticast mode [ 270.921646][T13721] ip6gretap0: left allmulticast mode [ 270.927124][T13721] bond0: left allmulticast mode [ 270.934273][T13721] dummy0: left allmulticast mode [ 270.940842][T13721] nlmon0: left allmulticast mode [ 270.946106][T13721] caif0: left allmulticast mode [ 270.951420][T13721] batadv0: left allmulticast mode [ 270.956798][T13721] vxcan0: left allmulticast mode [ 270.962052][T13721] vxcan1: left allmulticast mode [ 270.967336][T13721] veth0: left allmulticast mode [ 270.973196][T13721] veth1: left allmulticast mode [ 270.978844][T13721] wg0: left allmulticast mode [ 270.983685][T13721] wg1: left allmulticast mode [ 270.988820][T13721] wg2: left allmulticast mode [ 270.993659][T13721] veth0_to_bridge: left allmulticast mode [ 271.001439][T13721] ¾x9ÿ: left allmulticast mode [ 271.006694][T13721] veth1_to_bridge: left allmulticast mode [ 271.013404][T13721] bridge_slave_1: left allmulticast mode [ 271.021633][T13721] bond_slave_0: left allmulticast mode [ 271.027254][T13721] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 271.043668][T13722] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 271.318206][T13733] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2378'. [ 271.329160][T13736] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2379'. [ 271.524276][T13741] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2381'. [ 271.585601][T13744] x_tables: duplicate entry at hook 3 [ 271.686034][T13751] erspan0: left promiscuous mode [ 271.691154][T13751] erspan0: entered allmulticast mode [ 271.696848][T13751] macsec0: entered allmulticast mode [ 271.702521][T13751] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 271.711615][T13751] bond8: left promiscuous mode [ 271.716428][T13751] bridge1: left promiscuous mode [ 271.746340][T13751] ip6tnl2: entered allmulticast mode [ 271.756384][T13751] gretap1: left promiscuous mode [ 271.777054][T13751] macvlan2: entered allmulticast mode [ 271.783114][T13751] bridge0: entered allmulticast mode [ 271.790478][T13751] sit1: entered allmulticast mode [ 271.803160][T13751] veth8: entered allmulticast mode [ 271.808728][T13751] veth9: entered allmulticast mode [ 271.813972][T13751] bond9: entered allmulticast mode [ 271.820629][T13751] bridge2: entered allmulticast mode [ 271.830143][T13751] gtp2: entered allmulticast mode [ 271.835312][T13751] mac80211_hwsim hwsim25 wlan3: entered allmulticast mode [ 271.849538][T13751] bridge3: entered allmulticast mode [ 271.855206][T13751] bridge4: entered allmulticast mode [ 271.862429][T13751] bridge5: entered allmulticast mode [ 271.877918][T13751] syzkaller1: entered allmulticast mode [ 272.463135][T13786] netlink: 'syz.4.2395': attribute type 2 has an invalid length. [ 272.639015][T13790] syzkaller1: entered allmulticast mode [ 272.656325][T13795] ¾x9ÿ: renamed from bridge_slave_0 [ 272.723067][T13799] netlink: 'syz.1.2400': attribute type 1 has an invalid length. [ 272.789371][T13799] 8021q: adding VLAN 0 to HW filter on device bond12 [ 272.814721][T13802] bond12: (slave ip6erspan0): making interface the new active one [ 272.825697][T13802] bond12: (slave ip6erspan0): Enslaving as an active interface with an up link [ 273.086934][T13815] 8021q: VLANs not supported on ip_vti0 [ 273.170189][T13819] 8021q: VLANs not supported on gre0 [ 273.253826][T13824] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 273.270080][T13825] netlink: 'syz.2.2406': attribute type 1 has an invalid length. [ 273.288289][T13825] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2406'. [ 273.318462][T13825] netlink: 658 bytes leftover after parsing attributes in process `syz.2.2406'. [ 273.327746][T13825] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2406'. [ 273.593605][T13843] SET target dimension over the limit! [ 273.743799][T13852] syzkaller1: entered promiscuous mode [ 273.770225][T13852] syzkaller1: entered allmulticast mode [ 273.821599][T13858] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2417'. [ 273.903878][T13861] tipc: Enabling of bearer rejected, failed to enable media [ 274.105004][T13869] netlink: 'syz.0.2423': attribute type 1 has an invalid length. [ 274.117375][T13871] IPv6: NLM_F_CREATE should be specified when creating new route [ 274.480309][T13889] bond13 (unregistering): Released all slaves [ 274.601036][T13899] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2431'. [ 274.783965][T13909] netlink: 'syz.4.2436': attribute type 9 has an invalid length. [ 274.791999][T13909] netlink: 'syz.4.2436': attribute type 11 has an invalid length. [ 274.800388][T13909] netlink: 'syz.4.2436': attribute type 12 has an invalid length. [ 274.809236][T13909] netlink: 210020 bytes leftover after parsing attributes in process `syz.4.2436'. [ 274.819069][T13909] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2436'. [ 275.033061][T13921] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2437'. [ 275.395681][T13946] openvswitch: netlink: Missing valid actions attribute. [ 275.422009][T13938] bond5: option all_slaves_active: invalid value (222) [ 275.431995][T13946] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 275.443402][T13938] bond5 (unregistering): Released all slaves [ 275.591136][T13956] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 275.639875][T13958] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2451'. [ 275.707457][T13960] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2452'. [ 275.791184][T13967] syz.4.2455: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 275.819290][T13967] CPU: 0 UID: 0 PID: 13967 Comm: syz.4.2455 Not tainted syzkaller #0 PREEMPT(full) [ 275.819324][T13967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 275.819338][T13967] Call Trace: [ 275.819347][T13967] [ 275.819356][T13967] dump_stack_lvl+0xe8/0x150 [ 275.819393][T13967] warn_alloc+0x249/0x340 [ 275.819422][T13967] ? stack_trace_save+0xa9/0x100 [ 275.819449][T13967] ? __pfx_warn_alloc+0x10/0x10 [ 275.819483][T13967] ? kasan_save_track+0x4f/0x80 [ 275.819506][T13967] ? kasan_save_track+0x3e/0x80 [ 275.819528][T13967] ? __kasan_kmalloc+0x93/0xb0 [ 275.819551][T13967] ? __kmalloc_cache_noprof+0x31c/0x660 [ 275.819575][T13967] ? xskq_create+0x56/0x170 [ 275.819598][T13967] ? xsk_setsockopt+0x54c/0x990 [ 275.819635][T13967] ? do_sock_setsockopt+0x17c/0x1b0 [ 275.819659][T13967] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 275.819683][T13967] ? do_syscall_64+0x14d/0xf80 [ 275.819713][T13967] __vmalloc_node_range_noprof+0x132/0x1730 [ 275.819779][T13967] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 275.819813][T13967] ? __kasan_kmalloc+0x93/0xb0 [ 275.819846][T13967] vmalloc_user_noprof+0xad/0xe0 [ 275.819870][T13967] ? xskq_create+0xbf/0x170 [ 275.819893][T13967] xskq_create+0xbf/0x170 [ 275.819919][T13967] xsk_init_queue+0x8a/0xe0 [ 275.819944][T13967] xsk_setsockopt+0x54c/0x990 [ 275.819982][T13967] ? __pfx_xsk_setsockopt+0x10/0x10 [ 275.820016][T13967] ? __pfx_aa_sk_perm+0x10/0x10 [ 275.820054][T13967] ? aa_sock_opt_perm+0xff/0x1a0 [ 275.820099][T13967] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 275.820126][T13967] ? __pfx_xsk_setsockopt+0x10/0x10 [ 275.820164][T13967] do_sock_setsockopt+0x17c/0x1b0 [ 275.820195][T13967] __x64_sys_setsockopt+0x13d/0x1b0 [ 275.820228][T13967] do_syscall_64+0x14d/0xf80 [ 275.820253][T13967] ? trace_irq_disable+0x3b/0x150 [ 275.820272][T13967] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.820294][T13967] ? clear_bhb_loop+0x40/0x90 [ 275.820321][T13967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.820343][T13967] RIP: 0033:0x7fa98859c799 [ 275.820364][T13967] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 275.820385][T13967] RSP: 002b:00007fa9894e4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 275.820409][T13967] RAX: ffffffffffffffda RBX: 00007fa988815fa0 RCX: 00007fa98859c799 [ 275.820426][T13967] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 275.820440][T13967] RBP: 00007fa988632c99 R08: 0000000000000004 R09: 0000000000000000 [ 275.820453][T13967] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 275.820467][T13967] R13: 00007fa988816038 R14: 00007fa988815fa0 R15: 00007ffdf5bcb668 [ 275.820504][T13967] [ 275.822544][T13967] Mem-Info: [ 276.098262][T13966] bond5: (slave vlan0): Opening slave failed [ 276.109947][T13968] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 276.126924][T13967] active_anon:5930 inactive_anon:7 isolated_anon:0 [ 276.126924][T13967] active_file:2887 inactive_file:40347 isolated_file:0 [ 276.126924][T13967] unevictable:768 dirty:109 writeback:0 [ 276.126924][T13967] slab_reclaimable:12199 slab_unreclaimable:101597 [ 276.126924][T13967] mapped:29522 shmem:1362 pagetables:1403 [ 276.126924][T13967] sec_pagetables:0 bounce:0 [ 276.126924][T13967] kernel_misc_reclaimable:0 [ 276.126924][T13967] free:1323688 free_pcp:9971 free_cma:0 [ 276.208758][T13967] Node 0 active_anon:23620kB inactive_anon:28kB active_file:11548kB inactive_file:161200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118088kB dirty:436kB writeback:0kB shmem:3912kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15192kB pagetables:5480kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 276.251019][T13967] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:188kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 276.283378][T13967] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 276.314195][T13967] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 276.321959][T13967] Node 0 DMA32 free:1336728kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23620kB inactive_anon:28kB active_file:11548kB inactive_file:161200kB unevictable:1536kB writepending:436kB zspages:0kB present:3129332kB managed:2552664kB mlocked:0kB bounce:0kB free_pcp:40180kB local_pcp:19040kB free_cma:0kB [ 276.355958][T13967] lowmem_reserve[]: 0 0 0 0 0 [ 276.360921][T13967] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:880kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 276.391342][T13967] lowmem_reserve[]: 0 0 0 0 0 [ 276.418245][T13967] Node 1 Normal free:3942664kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:188kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 276.491495][T13967] lowmem_reserve[]: 0 0 0 0 0 [ 276.496496][T13967] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 276.579382][T13967] Node 0 DMA32: 5611*4kB (UM) 3273*8kB (UME) 1774*16kB (UM) 201*32kB (UME) 480*64kB (UME) 453*128kB (UM) 423*256kB (UM) 342*512kB (UM) 219*1024kB (UME) 127*2048kB (UME) 97*4096kB (UM) = 1337204kB [ 276.656205][T13967] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 276.669049][T13967] Node 1 Normal: 0*4kB 3*8kB (UM) 7*16kB (UM) 8*32kB (UM) 6*64kB (UM) 8*128kB (UM) 2*256kB (M) 2*512kB (M) 1*1024kB (M) 1*2048kB (U) 961*4096kB (UM) = 3942664kB [ 276.698802][T13967] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 276.709032][T13967] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 276.720630][T13967] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 276.731248][T13967] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 276.742835][T13967] 44594 total pagecache pages [ 276.749140][T13967] 2 pages in swap cache [ 276.753866][T13967] Free swap = 124988kB [ 276.758785][T13967] Total swap = 124996kB [ 276.763378][T13967] 2097051 pages RAM [ 276.767649][T13967] 0 pages HighMem/MovableOnly [ 276.775691][T13967] 427050 pages reserved [ 276.780472][T13967] 0 pages cma reserved [ 276.894030][T13996] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2464'. [ 276.923056][T13997] netlink: 1196 bytes leftover after parsing attributes in process `syz.2.2463'. [ 276.973783][T13997] netlink: 'syz.2.2463': attribute type 3 has an invalid length. [ 277.001607][T13997] netlink: 666 bytes leftover after parsing attributes in process `syz.2.2463'. [ 277.109591][T14009] syz_tun: refused to change device tx_queue_len [ 277.171882][T14010] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2469'. [ 277.224913][T14014] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 277.237625][T14014] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 277.247652][T14014] gretap2: entered promiscuous mode [ 277.260643][T14014] gretap2: entered allmulticast mode [ 277.378640][T14027] netlink: 'syz.2.2474': attribute type 5 has an invalid length. [ 277.539370][T14037] netlink: 'syz.1.2473': attribute type 4 has an invalid length. [ 277.677040][T14042] bond11: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 277.694177][T14042] bond11: (slave lo): Enslaving as an active interface with an up link [ 277.703154][T14042] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 277.909601][T14050] netlink: 'syz.0.2481': attribute type 1 has an invalid length. [ 278.237241][T14068] netlink: 'syz.1.2486': attribute type 1 has an invalid length. [ 278.658910][T14092] syzkaller0: entered promiscuous mode [ 278.664592][T14092] syzkaller0: entered allmulticast mode [ 278.879580][T14103] siw: device registration error -23 [ 279.177784][T14119] bond13: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 279.194659][T14119] bond13: (slave lo): Enslaving as an active interface with an up link [ 279.203436][T14119] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 279.614156][T14143] __nla_validate_parse: 11 callbacks suppressed [ 279.614179][T14143] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2513'. [ 279.666528][T14143] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2513'. [ 279.740774][T14154] sctp: [Deprecated]: syz.0.2517 (pid 14154) Use of struct sctp_assoc_value in delayed_ack socket option. [ 279.740774][T14154] Use struct sctp_sack_info instead [ 279.801921][T14158] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 279.812276][T14159] netlink: 'syz.2.2518': attribute type 1 has an invalid length. [ 279.846916][T14159] 8021q: adding VLAN 0 to HW filter on device bond12 [ 280.206249][T14181] syzkaller0: entered promiscuous mode [ 280.212026][T14181] syzkaller0: entered allmulticast mode [ 280.226928][T14183] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2526'. [ 280.362629][T14193] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2531'. [ 280.603896][T14199] netlink: 'syz.3.2532': attribute type 9 has an invalid length. [ 280.758320][T14210] can: request_module (can-proto-0) failed. [ 280.767406][T14207] bridge0: entered promiscuous mode [ 280.775761][T14207] bridge0: entered allmulticast mode [ 280.786694][T14207] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input11 [ 280.843448][T14215] ipt_REJECT: TCP_RESET invalid for non-tcp [ 280.891091][T14221] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2537'. [ 280.906549][T14221] bond0: entered promiscuous mode [ 280.915451][T14222] netlink: zone id is out of range [ 280.921329][T14222] netlink: zone id is out of range [ 280.926534][T14221] bond_slave_0: entered promiscuous mode [ 280.935191][T14221] bond_slave_1: entered promiscuous mode [ 280.942026][T14222] netlink: zone id is out of range [ 280.956888][T14221] veth3: entered promiscuous mode [ 280.962197][T14222] netlink: zone id is out of range [ 280.970200][T14222] netlink: zone id is out of range [ 280.982431][T14221] bond0: left promiscuous mode [ 280.987328][T14221] bond_slave_0: left promiscuous mode [ 280.997604][T14222] netlink: zone id is out of range [ 281.003139][T14221] bond_slave_1: left promiscuous mode [ 281.019369][T14222] netlink: zone id is out of range [ 281.024180][T14221] veth3: left promiscuous mode [ 281.025426][T14222] netlink: zone id is out of range [ 281.039922][T14230] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2537'. [ 281.055412][T14222] netlink: zone id is out of range [ 281.065412][T14222] netlink: zone id is out of range [ 281.085168][T14233] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2542'. [ 281.111564][T14220] IPv6: sit2: Disabled Multicast RS [ 281.122572][T14220] sit2: entered allmulticast mode [ 281.187345][T14221] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2537'. [ 281.360837][T14237] netlink: 'syz.1.2545': attribute type 9 has an invalid length. [ 281.374585][T14237] netlink: 'syz.1.2545': attribute type 11 has an invalid length. [ 281.384428][T14237] netlink: 'syz.1.2545': attribute type 12 has an invalid length. [ 281.393096][T14237] netlink: 210020 bytes leftover after parsing attributes in process `syz.1.2545'. [ 281.397290][T14242] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2546'. [ 281.851566][T14262] netlink: 'syz.0.2554': attribute type 18 has an invalid length. [ 281.871122][T14262] netlink: 'syz.0.2554': attribute type 18 has an invalid length. [ 282.146840][T14278] xt_hashlimit: size too large, truncated to 1048576 [ 282.295488][T14285] syzkaller1: entered promiscuous mode [ 282.307267][T14285] syzkaller1: entered allmulticast mode [ 282.381710][T14285] veth0: entered promiscuous mode [ 282.390131][T14284] veth0: left promiscuous mode [ 282.834850][T14315] netlink: 'syz.2.2574': attribute type 1 has an invalid length. [ 282.881280][T14315] 8021q: adding VLAN 0 to HW filter on device bond13 [ 282.927553][T14320] bond13: (slave geneve3): making interface the new active one [ 282.943089][T14320] bond13: (slave geneve3): Enslaving as an active interface with an up link [ 282.988974][ T6096] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.014966][ T6096] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.108391][ T6096] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.138575][ T6096] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.529607][T14353] netlink: 'syz.0.2584': attribute type 16 has an invalid length. [ 283.550243][T14352] nlmon0: Caught tx_queue_len zero misconfig [ 283.645096][T14358] vti1: entered allmulticast mode [ 283.654020][T14358] vxcan2: entered allmulticast mode [ 283.659515][T14358] vxcan3: entered allmulticast mode [ 283.666011][T14358] bond5: entered allmulticast mode [ 283.686310][T14358] bridge0: left promiscuous mode [ 283.717697][T14358] mac80211_hwsim hwsim26 wlan4: entered allmulticast mode [ 283.734651][T14358] syzkaller1: entered allmulticast mode [ 284.539748][T14393] wg1: entered allmulticast mode [ 284.554769][T14393] mac80211_hwsim hwsim23 wlan3: entered allmulticast mode [ 284.570841][T14393] bond11: entered allmulticast mode [ 284.587372][T14393] geneve2: left promiscuous mode [ 284.593415][T14393] geneve2: entered allmulticast mode [ 284.611051][T14393] bridge0: entered allmulticast mode [ 284.632852][T14393] bond0: left promiscuous mode [ 284.645458][T14393] bridge3: left promiscuous mode [ 284.661689][T14406] __nla_validate_parse: 9 callbacks suppressed [ 284.661709][T14406] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2606'. [ 284.693092][T14393] xfrm1: entered allmulticast mode [ 284.705099][T14393] bridge4: entered allmulticast mode [ 284.710999][T14393] sit1: entered allmulticast mode [ 284.730946][T14393] gretap1: entered allmulticast mode [ 284.737096][T14393] bond12: entered allmulticast mode [ 284.742689][T14393] ip6erspan0: entered allmulticast mode [ 284.765036][T14393] gretap2: left promiscuous mode [ 284.779026][T14393] bond13: entered allmulticast mode [ 284.784385][T14393] syzkaller1: entered allmulticast mode [ 284.830145][ T6110] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 43745 - 0 [ 284.875644][ T6110] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 43745 - 0 [ 284.890704][ T6110] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 43745 - 0 [ 284.938274][ T6110] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 43745 - 0 [ 285.348563][T14437] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2617'. [ 285.430875][T14443] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2618'. [ 285.487736][T14449] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2613'. [ 285.954428][T14435] ip6tnl0: left allmulticast mode [ 286.098371][T14456] netlink: 'syz.2.2620': attribute type 16 has an invalid length. [ 286.144998][T14456] netlink: 'syz.2.2620': attribute type 17 has an invalid length. [ 286.330646][T14471] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2621'. [ 286.346716][T14472] FAULT_INJECTION: forcing a failure. [ 286.346716][T14472] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 286.405931][T14472] CPU: 0 UID: 0 PID: 14472 Comm: syz.1.2624 Not tainted syzkaller #0 PREEMPT(full) [ 286.405963][T14472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 286.405977][T14472] Call Trace: [ 286.405985][T14472] [ 286.405994][T14472] dump_stack_lvl+0xe8/0x150 [ 286.406035][T14472] should_fail_ex+0x412/0x560 [ 286.406073][T14472] _copy_from_user+0x2d/0xb0 [ 286.406099][T14472] ___sys_sendmsg+0x1c6/0x360 [ 286.406133][T14472] ? __pfx____sys_sendmsg+0x10/0x10 [ 286.406197][T14472] ? __fget_files+0x2a/0x420 [ 286.406227][T14472] ? __fget_files+0x3a0/0x420 [ 286.406271][T14472] __x64_sys_sendmsg+0x1bd/0x2a0 [ 286.406299][T14472] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 286.406336][T14472] ? __pfx_ksys_write+0x10/0x10 [ 286.406370][T14472] do_syscall_64+0x14d/0xf80 [ 286.406395][T14472] ? trace_irq_disable+0x3b/0x150 [ 286.406414][T14472] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.406435][T14472] ? clear_bhb_loop+0x40/0x90 [ 286.406461][T14472] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.406482][T14472] RIP: 0033:0x7f216c19c799 [ 286.406502][T14472] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 286.406521][T14472] RSP: 002b:00007f216d13d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 286.406542][T14472] RAX: ffffffffffffffda RBX: 00007f216c415fa0 RCX: 00007f216c19c799 [ 286.406558][T14472] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000003 [ 286.406571][T14472] RBP: 00007f216d13d090 R08: 0000000000000000 R09: 0000000000000000 [ 286.406584][T14472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 286.406604][T14472] R13: 00007f216c416038 R14: 00007f216c415fa0 R15: 00007fffa0687338 [ 286.406638][T14472] [ 286.606005][T14456] 8021q: adding VLAN 0 to HW filter on device bond0 [ 286.619323][T14456] net_ratelimit: 45 callbacks suppressed [ 286.619335][T14456] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 286.641069][T14458] gretap2: entered allmulticast mode [ 286.646786][T14458] macvlan3: entered allmulticast mode [ 286.658384][T14458] netdevsim netdevsim3 eth0: entered allmulticast mode [ 286.671282][T14458] netdevsim netdevsim3 eth1: entered allmulticast mode [ 286.682190][T14458] netdevsim netdevsim3 eth2: entered allmulticast mode [ 286.691984][T14458] netdevsim netdevsim3 eth3: entered allmulticast mode [ 286.700190][T14458] rose0: entered allmulticast mode [ 286.705579][T14458] syzkaller1: entered allmulticast mode [ 286.978568][T14497] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2630'. [ 287.048337][T14497] macvlan0: left allmulticast mode [ 287.053735][T14497] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2630'. [ 287.062217][T14500] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2632'. [ 287.095451][T14503] mac80211_hwsim hwsim5 ÿ: renamed from wlan1 [ 287.190799][T14506] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2634'. [ 287.413103][T14525] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2639'. [ 287.442158][T14528] netlink: 'syz.2.2640': attribute type 1 has an invalid length. [ 287.460135][T14529] netlink: 'syz.2.2640': attribute type 1 has an invalid length. [ 287.520371][T14533] vlan2: entered allmulticast mode [ 287.536723][T14533] syzkaller1: entered allmulticast mode [ 287.596591][T14539] bond14: (slave gretap2): making interface the new active one [ 287.626534][T14539] bond14: (slave gretap2): Enslaving as an active interface with an up link [ 287.834108][T14553] tipc: Enabling of bearer rejected, already enabled [ 287.845365][T14557] tipc: Enabling of bearer rejected, already enabled [ 288.155102][T14575] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 288.167800][T14575] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 288.189873][T14575] netlink: 'syz.4.2653': attribute type 4 has an invalid length. [ 288.246776][T14579] netlink: 'syz.3.2654': attribute type 4 has an invalid length. [ 288.261129][T14579] .`: renamed from bond0 [ 288.290776][T14586] netlink: 'syz.2.2655': attribute type 11 has an invalid length. [ 288.449100][T14591] syzkaller1: entered promiscuous mode [ 288.468378][T14591] syzkaller1: entered allmulticast mode [ 288.627334][T14603] netlink: 'syz.2.2663': attribute type 10 has an invalid length. [ 288.670500][T14599] syzkaller0: entered promiscuous mode [ 288.676108][T14599] syzkaller0: entered allmulticast mode [ 288.747024][T14609] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 288.773665][T14599] netlink: 'syz.2.2663': attribute type 11 has an invalid length. [ 288.786163][T14609] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 288.808469][T14616] ip6t_REJECT: ECHOREPLY is not supported [ 288.855882][T14599] veth15: entered allmulticast mode [ 289.701016][T14620] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 290.026918][T14644] __nla_validate_parse: 13 callbacks suppressed [ 290.026941][T14644] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2675'. [ 290.140208][T14653] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2677'. [ 290.151889][T14653] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2677'. [ 290.162642][T14652] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2677'. [ 290.174079][T14652] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2677'. [ 290.203085][T14656] netlink: 'syz.3.2678': attribute type 9 has an invalid length. [ 290.268271][T14656] syzkaller0: entered promiscuous mode [ 290.273925][T14656] syzkaller0: entered allmulticast mode [ 292.061679][T14633] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 292.252963][T14674] netdevsim netdevsim4: Direct firmware load for .. @ failed with error -2 [ 292.274654][T14674] netdevsim netdevsim4: Falling back to sysfs fallback for: .. @ [ 292.423921][T14685] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2688'. [ 293.247752][T14705] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2692'. [ 293.451093][T14717] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 293.461910][T14717] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2696'. [ 293.509351][T14722] netlink: 207952 bytes leftover after parsing attributes in process `syz.2.2699'. [ 293.568094][T14725] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2698'. [ 294.268634][T14763] netlink: 'syz.1.2712': attribute type 6 has an invalid length. [ 294.305640][T14763] netlink: 'syz.1.2712': attribute type 6 has an invalid length. [ 294.306351][ T49] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 294.333782][ T49] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 294.373931][ T49] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 294.395848][ T49] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 294.436313][T14766] netlink: 'syz.2.2711': attribute type 32 has an invalid length. [ 294.617270][T14786] IPv6: sit2: Disabled Multicast RS [ 294.702218][T14790] netlink: 'syz.3.2716': attribute type 6 has an invalid length. [ 294.714762][T14790] netlink: 'syz.3.2716': attribute type 5 has an invalid length. [ 294.976691][T14813] FAULT_INJECTION: forcing a failure. [ 294.976691][T14813] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 294.991611][T14813] CPU: 0 UID: 0 PID: 14813 Comm: syz.4.2726 Not tainted syzkaller #0 PREEMPT(full) [ 294.991643][T14813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 294.991656][T14813] Call Trace: [ 294.991665][T14813] [ 294.991673][T14813] dump_stack_lvl+0xe8/0x150 [ 294.991710][T14813] should_fail_ex+0x412/0x560 [ 294.991747][T14813] _copy_to_user+0x31/0xb0 [ 294.991774][T14813] simple_read_from_buffer+0xe1/0x170 [ 294.991810][T14813] proc_fail_nth_read+0x1bb/0x230 [ 294.991846][T14813] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 294.991891][T14813] ? rw_verify_area+0x2a6/0x4d0 [ 294.991915][T14813] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 294.991947][T14813] vfs_read+0x20c/0xa70 [ 294.991969][T14813] ? fdget_pos+0x246/0x320 [ 294.991994][T14813] ? __pfx___mutex_lock+0x10/0x10 [ 294.992023][T14813] ? __pfx_vfs_read+0x10/0x10 [ 294.992049][T14813] ? __fget_files+0x2a/0x420 [ 294.992085][T14813] ? __fget_files+0x3a0/0x420 [ 294.992117][T14813] ? __fget_files+0x2a/0x420 [ 294.992158][T14813] ksys_read+0x150/0x270 [ 294.992185][T14813] ? __pfx_ksys_read+0x10/0x10 [ 294.992221][T14813] do_syscall_64+0x14d/0xf80 [ 294.992247][T14813] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.992269][T14813] ? clear_bhb_loop+0x40/0x90 [ 294.992296][T14813] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.992321][T14813] RIP: 0033:0x7fa98855cfce [ 294.992341][T14813] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 294.992360][T14813] RSP: 002b:00007fa9894e3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 294.992383][T14813] RAX: ffffffffffffffda RBX: 00007fa9894e46c0 RCX: 00007fa98855cfce [ 294.992398][T14813] RDX: 000000000000000f RSI: 00007fa9894e40a0 RDI: 0000000000000005 [ 294.992412][T14813] RBP: 00007fa9894e4090 R08: 0000000000000000 R09: 0000000000000000 [ 294.992425][T14813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 294.992437][T14813] R13: 00007fa988816038 R14: 00007fa988815fa0 R15: 00007ffdf5bcb668 [ 294.992472][T14813] [ 295.261906][T14815] netlink: 'syz.1.2727': attribute type 19 has an invalid length. [ 295.311813][T14817] veth1_virt_wifi: entered promiscuous mode [ 295.649631][T14839] __nla_validate_parse: 10 callbacks suppressed [ 295.649653][T14839] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2735'. [ 295.932370][T14844] dvmrp0: entered allmulticast mode [ 296.058408][T14862] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 296.100671][T14867] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2745'. [ 296.118809][T14862] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2742'. [ 296.128992][T14868] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2742'. [ 296.427073][T14887] netlink: 'syz.1.2750': attribute type 1 has an invalid length. [ 296.492164][T14893] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 296.507156][T14893] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2752'. [ 296.530123][T14892] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2751'. [ 296.565727][T14897] netlink: 'syz.1.2754': attribute type 12 has an invalid length. [ 296.821578][T14904] pimreg: entered allmulticast mode [ 297.233504][T14927] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2763'. [ 297.352396][T14933] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2766'. [ 297.715430][T14961] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2772'. [ 297.750135][T14962] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 297.895394][T14969] veth8: entered allmulticast mode [ 297.903440][T14969] veth9: entered allmulticast mode [ 297.911496][T14969] ip6tnl1: entered allmulticast mode [ 297.917087][T14969] veth10: entered allmulticast mode [ 297.924846][T14969] veth11: entered allmulticast mode [ 297.930635][T14969] veth12: entered allmulticast mode [ 297.936115][T14969] veth13: entered allmulticast mode [ 297.943101][T14969] syzkaller1: entered allmulticast mode [ 298.002952][T14974] netlink: 'syz.4.2778': attribute type 33 has an invalid length. [ 298.011698][T14974] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2778'. [ 298.185730][ T7586] hid-generic 0005:15C2:0C6E.0004: unknown main item tag 0x0 [ 298.206983][ T7586] hid-generic 0005:15C2:0C6E.0004: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 298.354664][T14991] bond14: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 298.371776][T14991] bond14 (unregistering): Released all slaves [ 298.562001][T15006] syzkaller0: entered promiscuous mode [ 298.567565][T15006] syzkaller0: entered allmulticast mode [ 298.844685][T15009] vxlan0: entered allmulticast mode [ 298.877267][T15009] sit2: entered allmulticast mode [ 298.901107][T15009] batadv1: entered allmulticast mode [ 298.913271][T15009] syzkaller1: entered allmulticast mode [ 298.930652][ T6113] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 298.995829][ T6113] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 299.016834][ T6113] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 299.035616][ T6113] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 299.896603][T15066] netlink: 'syz.4.2807': attribute type 2 has an invalid length. [ 299.948829][T15066] netlink: 'syz.4.2807': attribute type 1 has an invalid length. [ 300.113226][T15077] netlink: 'syz.2.2810': attribute type 28 has an invalid length. [ 300.121233][T15077] netlink: 'syz.2.2810': attribute type 3 has an invalid length. [ 300.743115][T15108] veth1: entered allmulticast mode [ 300.749498][T15111] netlink: 'syz.2.2819': attribute type 5 has an invalid length. [ 300.823683][T15112] bond14: option all_slaves_active: invalid value (222) [ 300.837018][T15112] bond14 (unregistering): Released all slaves [ 301.036711][T15120] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 301.053932][T15125] netlink: 'syz.1.2823': attribute type 1 has an invalid length. [ 301.076301][T15125] __nla_validate_parse: 10 callbacks suppressed [ 301.076323][T15125] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2823'. [ 301.085933][T15120] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 301.369819][T15136] veth0: entered promiscuous mode [ 301.387053][T15137] netlink: 'syz.2.2825': attribute type 9 has an invalid length. [ 301.476893][T15133] veth0: left promiscuous mode [ 301.530701][T15145] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2829'. [ 301.549714][T15145] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2829'. [ 301.560343][T15145] netlink: 'syz.4.2829': attribute type 4 has an invalid length. [ 301.569063][T15147] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2829'. [ 301.578675][T15147] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2829'. [ 301.599766][T15147] netlink: 'syz.4.2829': attribute type 4 has an invalid length. [ 301.800740][T15155] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2833'. [ 301.844112][T15158] syzkaller1: entered allmulticast mode [ 302.052327][T15169] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 302.187555][T15172] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2840'. [ 302.214257][T15176] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2842'. [ 302.434454][T15185] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2845'. [ 302.445605][T15185] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2845'. [ 302.729760][T15197] netlink: 'syz.4.2849': attribute type 28 has an invalid length. [ 303.711872][ T7586] IPVS: starting estimator thread 0... [ 303.824984][T15231] IPVS: using max 26 ests per chain, 62400 per kthread [ 303.903153][T15234] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 306.144147][T15315] erspan0: entered promiscuous mode [ 306.677101][ T5148] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 306.687382][ T5148] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 306.705852][ T5148] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 306.748835][ T5148] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 306.758918][ T5148] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 306.989767][T15360] __nla_validate_parse: 8 callbacks suppressed [ 306.989790][T15360] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2901'. [ 307.034214][T15360] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2901'. [ 307.301934][T15373] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2906'. [ 307.363840][T15374] validate_nla: 2 callbacks suppressed [ 307.363862][T15374] netlink: 'syz.2.2906': attribute type 1 has an invalid length. [ 307.391657][T15377] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2906'. [ 307.511442][T15377] 8021q: adding VLAN 0 to HW filter on device bond15 [ 307.528456][T15348] chnl_net:caif_netlink_parms(): no params data found [ 307.546938][T15383] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2908'. [ 307.922667][T15348] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.930523][T15348] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.937904][T15348] bridge_slave_0: entered allmulticast mode [ 307.946557][T15348] bridge_slave_0: entered promiscuous mode [ 307.955700][T15348] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.963226][T15348] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.985253][T15348] bridge_slave_1: entered allmulticast mode [ 308.000719][T15348] bridge_slave_1: entered promiscuous mode [ 308.031148][T15411] netlink: 'syz.4.2918': attribute type 2 has an invalid length. [ 308.044559][T15414] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2917'. [ 308.059955][T15415] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2917'. [ 308.135215][T15348] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 308.160201][T15413] netlink: 'syz.4.2918': attribute type 9 has an invalid length. [ 308.170123][T15413] netlink: 'syz.4.2918': attribute type 11 has an invalid length. [ 308.175618][T15348] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 308.179879][T15413] netlink: 'syz.4.2918': attribute type 12 has an invalid length. [ 308.214910][T15413] netlink: 210020 bytes leftover after parsing attributes in process `syz.4.2918'. [ 308.238247][T15413] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2918'. [ 308.329418][T15348] team0: Port device team_slave_0 added [ 308.383672][T15348] team0: Port device team_slave_1 added [ 308.391725][T15431] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2922'. [ 308.484956][T15433] vlan0: entered allmulticast mode [ 308.509086][T15348] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 308.518241][T15348] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 308.589375][T15348] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 308.647317][T15348] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 308.655439][T15348] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 308.706002][T15348] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 308.829412][ T5837] Bluetooth: hci5: command tx timeout [ 308.940169][T15348] hsr_slave_0: entered promiscuous mode [ 308.977152][T15348] hsr_slave_1: entered promiscuous mode [ 308.993723][T15348] debugfs: 'hsr0' already exists in 'hsr' [ 309.002919][T15348] Cannot create hsr debugfs directory [ 309.311811][T15475] xt_ecn: cannot match TCP bits for non-tcp packets [ 309.794176][T15510] syzkaller1: entered promiscuous mode [ 309.806974][T15510] syzkaller1: entered allmulticast mode [ 310.016085][T15524] xt_hashlimit: size too large, truncated to 1048576 [ 310.428288][T15348] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 310.504615][T15348] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 310.541109][T15348] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 310.560739][T15348] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 310.880648][T15348] 8021q: adding VLAN 0 to HW filter on device bond0 [ 310.919516][ T5837] Bluetooth: hci5: command tx timeout [ 310.922228][T15348] 8021q: adding VLAN 0 to HW filter on device team0 [ 310.973320][ T6110] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.980550][ T6110] bridge0: port 1(bridge_slave_0) entered forwarding state [ 311.021910][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.029134][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 311.585382][T15348] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 311.732055][T15348] veth0_vlan: entered promiscuous mode [ 311.791552][T15348] veth1_vlan: entered promiscuous mode [ 311.889766][T15348] veth0_macvtap: entered promiscuous mode [ 311.910189][T15348] veth1_macvtap: entered promiscuous mode [ 311.932532][T15348] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 312.003484][T15348] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 312.076204][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.101333][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.160908][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.188520][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.404026][T15656] __nla_validate_parse: 17 callbacks suppressed [ 312.404125][T15656] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2983'. [ 312.545350][ T7882] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 312.575713][ T7882] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 312.644566][T15672] netlink: 27 bytes leftover after parsing attributes in process `syz.3.2987'. [ 312.719569][ T6113] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 312.728956][ T6113] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 312.804067][T15678] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2988'. [ 312.944551][T15685] netlink: 'syz.1.2894': attribute type 1 has an invalid length. [ 312.989198][ T5837] Bluetooth: hci5: command tx timeout [ 313.048998][T15695] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2993'. [ 313.235171][T15703] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2996'. [ 313.428990][T15708] netlink: 'syz.4.2999': attribute type 14 has an invalid length. [ 313.448365][T15708] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2999'. [ 313.484792][ T5148] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 313.496627][ T5148] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 313.504596][ T5148] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 313.513536][ T5148] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 313.523064][ T5148] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 313.739112][T15716] team0: Device gtp3 is up. Set it down before adding it as a team port [ 314.013694][T15735] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3006'. [ 314.527710][T15711] chnl_net:caif_netlink_parms(): no params data found [ 314.652244][T15769] netlink: 'syz.1.3017': attribute type 1 has an invalid length. [ 314.663930][T15769] netlink: 236 bytes leftover after parsing attributes in process `syz.1.3017'. [ 314.752278][T15778] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3018'. [ 314.800494][T15711] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.807843][T15711] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.815214][T15711] bridge_slave_0: entered allmulticast mode [ 314.823768][T15711] bridge_slave_0: entered promiscuous mode [ 314.875638][T15711] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.882963][T15711] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.892103][T15711] bridge_slave_1: entered allmulticast mode [ 314.900624][T15711] bridge_slave_1: entered promiscuous mode [ 314.978935][T15711] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 314.992344][T15711] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 315.068131][ T5837] Bluetooth: hci5: command tx timeout [ 315.257274][ T12] bond7 (unregistering): (slave vti0): Releasing backup interface [ 315.283169][ T12] erspan0 (unregistering): left promiscuous mode [ 315.298847][ T12] gretap0 (unregistering): left promiscuous mode [ 315.377305][ T12] bond2 (unregistering): (slave bridge1): Releasing backup interface [ 315.532918][T15799] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3023'. [ 315.548298][ T5837] Bluetooth: hci3: command tx timeout [ 315.714583][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 315.725288][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 315.736025][ T12] bond0 (unregistering): (slave veth3): Releasing backup interface [ 315.745421][ T12] bond0 (unregistering): Released all slaves [ 315.757717][ T12] bond1 (unregistering): (slave veth5): Releasing active interface [ 315.767208][ T12] bond1 (unregistering): Released all slaves [ 315.782188][ T12] bond2 (unregistering): Released all slaves [ 315.798377][ T12] bond3 (unregistering): Released all slaves [ 315.820484][ T12] bond4 (unregistering): Released all slaves [ 315.836539][ T12] bond5 (unregistering): (slave veth0_to_bond): Releasing active interface [ 315.846949][ T12] bond5 (unregistering): (slave bond6): Releasing active interface [ 315.861954][ T12] bond5 (unregistering): Released all slaves [ 315.879229][ T12] bond6 (unregistering): Released all slaves [ 315.894772][ T12] bond7 (unregistering): Released all slaves [ 315.910461][ T12] bond8 (unregistering): Released all slaves [ 315.949433][T15711] team0: Port device team_slave_0 added [ 316.069556][T15711] team0: Port device team_slave_1 added [ 316.167902][T15711] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 316.192554][T15711] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 316.245230][T15711] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 316.267377][ T12] tipc: Left network mode [ 316.329889][T15711] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 316.336886][T15711] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 316.469997][T15711] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 316.791058][T15711] hsr_slave_0: entered promiscuous mode [ 316.821320][T15711] hsr_slave_1: entered promiscuous mode [ 316.827591][T15711] debugfs: 'hsr0' already exists in 'hsr' [ 316.857080][T15711] Cannot create hsr debugfs directory [ 317.153174][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.160443][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.172889][ T1304] clip:clip_start_xmit: skb_dst(skb) == NULL [ 317.440612][T15874] __nla_validate_parse: 8 callbacks suppressed [ 317.440635][T15874] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3041'. [ 317.628691][ T5837] Bluetooth: hci3: command tx timeout [ 318.210610][T15914] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 318.245201][T15919] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 318.350508][T15923] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3053'. [ 318.520343][T15933] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3056'. [ 318.664748][ T12] hsr_slave_0: left promiscuous mode [ 318.709134][ T12] hsr_slave_1: left promiscuous mode [ 318.735464][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 319.227072][T15966] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3065'. [ 319.300178][T15968] netlink: 'syz.4.3066': attribute type 21 has an invalid length. [ 319.323202][T15711] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 319.335217][T15955] netlink: 284 bytes leftover after parsing attributes in process `syz.3.3062'. [ 319.370266][T15956] ip6tnl0: entered promiscuous mode [ 319.404241][T15968] netlink: 'syz.4.3066': attribute type 6 has an invalid length. [ 319.431261][T15968] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3066'. [ 319.466190][T15711] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 319.489286][T15711] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 319.510647][T15952] ip6tnl0: left promiscuous mode [ 319.519333][T15711] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 319.708204][ T5837] Bluetooth: hci3: command tx timeout [ 319.804974][T15993] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3072'. [ 319.978913][T15711] 8021q: adding VLAN 0 to HW filter on device bond0 [ 319.997591][T16000] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3074'. [ 320.034427][ T12] IPVS: stop unused estimator thread 0... [ 320.036581][T15711] 8021q: adding VLAN 0 to HW filter on device team0 [ 320.142122][ T6096] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.149387][ T6096] bridge0: port 1(bridge_slave_0) entered forwarding state [ 320.221100][ T6096] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.228410][ T6096] bridge0: port 2(bridge_slave_1) entered forwarding state [ 320.373836][T16022] ip6tnl0: entered allmulticast mode [ 320.383472][T16022] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 320.399403][T16022] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 320.421378][T16022] macsec1: entered allmulticast mode [ 320.449078][T16022] syzkaller1: entered allmulticast mode [ 320.472595][T16026] netlink: 'syz.3.3081': attribute type 10 has an invalid length. [ 320.495022][T16026] vxcan1: left allmulticast mode [ 320.509142][T16026] vxcan1: entered allmulticast mode [ 320.515892][T16026] team0: Port device vxcan1 added [ 320.958746][T16053] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3086'. [ 321.051872][T15711] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 321.160459][T15711] veth0_vlan: entered promiscuous mode [ 321.196386][T15711] veth1_vlan: entered promiscuous mode [ 321.221493][T16061] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 321.295981][T15711] veth0_macvtap: entered promiscuous mode [ 321.321372][T15711] veth1_macvtap: entered promiscuous mode [ 321.363011][T15711] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 321.395628][T15711] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 321.446645][ T1132] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.487209][ T1132] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.508746][ T1132] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.534390][ T1132] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.660743][T16087] ipt_REJECT: TCP_RESET invalid for non-tcp [ 321.675053][T16089] netlink: 7064 bytes leftover after parsing attributes in process `syz.2.3092'. [ 321.718094][T16089] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 321.796940][ T5837] Bluetooth: hci3: command tx timeout [ 322.045775][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 322.070790][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 322.150242][ T1132] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 322.168958][ T1132] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 322.331200][T16117] netlink: 'syz.2.3101': attribute type 10 has an invalid length. [ 322.935021][ T5148] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 322.951909][ T5148] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 322.962138][ T5148] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 322.975473][ T5148] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 322.983294][T16143] netlink: 'syz.4.3107': attribute type 1 has an invalid length. [ 322.983327][ T5148] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 323.108465][T16146] __nla_validate_parse: 3 callbacks suppressed [ 323.108485][T16146] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3107'. [ 323.669976][T16168] FAULT_INJECTION: forcing a failure. [ 323.669976][T16168] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 323.697815][T16170] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3112'. [ 323.720597][T16168] CPU: 0 UID: 0 PID: 16168 Comm: syz.2.3111 Not tainted syzkaller #0 PREEMPT(full) [ 323.720630][T16168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 323.720643][T16168] Call Trace: [ 323.720652][T16168] [ 323.720661][T16168] dump_stack_lvl+0xe8/0x150 [ 323.720697][T16168] should_fail_ex+0x412/0x560 [ 323.720735][T16168] _copy_from_user+0x2d/0xb0 [ 323.720761][T16168] ___sys_sendmsg+0x1c6/0x360 [ 323.720793][T16168] ? __pfx____sys_sendmsg+0x10/0x10 [ 323.720857][T16168] ? __fget_files+0x2a/0x420 [ 323.720888][T16168] ? __fget_files+0x3a0/0x420 [ 323.720932][T16168] __x64_sys_sendmsg+0x1bd/0x2a0 [ 323.720961][T16168] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 323.720996][T16168] ? __pfx_ksys_write+0x10/0x10 [ 323.721031][T16168] do_syscall_64+0x14d/0xf80 [ 323.721055][T16168] ? trace_irq_disable+0x3b/0x150 [ 323.721073][T16168] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.721094][T16168] ? clear_bhb_loop+0x40/0x90 [ 323.721120][T16168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.721142][T16168] RIP: 0033:0x7fbce5b9c799 [ 323.721162][T16168] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 323.721181][T16168] RSP: 002b:00007fbce69be028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 323.721204][T16168] RAX: ffffffffffffffda RBX: 00007fbce5e15fa0 RCX: 00007fbce5b9c799 [ 323.721220][T16168] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 323.721246][T16168] RBP: 00007fbce69be090 R08: 0000000000000000 R09: 0000000000000000 [ 323.721259][T16168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 323.721271][T16168] R13: 00007fbce5e16038 R14: 00007fbce5e15fa0 R15: 00007ffd91901eb8 [ 323.721303][T16168] [ 323.953678][T16170] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3112'. [ 323.999645][T16170] : entered promiscuous mode [ 324.063299][T16178] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3115'. [ 324.194549][T16186] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3117'. [ 324.256853][T16138] chnl_net:caif_netlink_parms(): no params data found [ 324.499906][T16138] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.509424][T16138] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.516807][T16138] bridge_slave_0: entered allmulticast mode [ 324.525379][T16138] bridge_slave_0: entered promiscuous mode [ 324.634961][T16204] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING [ 324.698899][T16138] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.706089][T16138] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.714532][T16138] bridge_slave_1: entered allmulticast mode [ 324.722641][T16138] bridge_slave_1: entered promiscuous mode [ 325.048535][T16138] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 325.082329][ T5837] Bluetooth: hci0: command tx timeout [ 325.170387][T16138] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 325.235179][T16229] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3125'. [ 325.325360][T16138] team0: Port device team_slave_0 added [ 325.475637][T16239] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3128'. [ 325.872886][ T1132] bond8 (unregistering): (slave bridge1): Releasing backup interface [ 326.172877][ T1132] .` (unregistering): Released all slaves [ 326.201494][ T1132] bond1 (unregistering): (slave veth3): Releasing active interface [ 326.219567][ T1132] bond1 (unregistering): Released all slaves [ 326.259345][ T1132] bond2 (unregistering): (slave veth5): Releasing active interface [ 326.272620][ T1132] bond2 (unregistering): Released all slaves [ 326.298222][ T1132] bond3 (unregistering): (slave veth7): Releasing active interface [ 326.307169][ T1132] bond3 (unregistering): Released all slaves [ 326.335950][ T1132] bond4 (unregistering): Released all slaves [ 326.355600][ T1132] bond5 (unregistering): Released all slaves [ 326.370049][ T1132] bond6 (unregistering): Released all slaves [ 326.384393][ T1132] bond7 (unregistering): Released all slaves [ 326.402297][T16266] netlink: 'syz.2.3134': attribute type 1 has an invalid length. [ 326.410518][ T1132] bond8 (unregistering): Released all slaves [ 326.432572][ T1132] bond9 (unregistering): Released all slaves [ 326.459199][ T1132] bond0 (unregistering): Released all slaves [ 326.466343][T16267] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3134'. [ 326.483560][T16138] team0: Port device team_slave_1 added [ 326.623573][T16266] 8021q: adding VLAN 0 to HW filter on device bond16 [ 326.681876][T16138] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 326.689200][T16138] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 326.716906][T16138] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 326.769362][T16274] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3137'. [ 326.794698][T16138] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 326.802528][T16274] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3137'. [ 326.811636][T16138] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 326.853744][T16138] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 327.053079][T16138] hsr_slave_0: entered promiscuous mode [ 327.059971][T16138] hsr_slave_1: entered promiscuous mode [ 327.076156][T16138] debugfs: 'hsr0' already exists in 'hsr' [ 327.085881][T16288] netlink: zone id is out of range [ 327.095342][T16288] netlink: zone id is out of range [ 327.107019][T16138] Cannot create hsr debugfs directory [ 327.130191][T16288] netlink: zone id is out of range [ 327.135347][T16288] netlink: zone id is out of range [ 327.148629][ T5837] Bluetooth: hci0: command tx timeout [ 327.170654][T16288] netlink: zone id is out of range [ 327.176212][T16288] netlink: zone id is out of range [ 327.185400][T16288] netlink: zone id is out of range [ 327.191504][T16288] netlink: zone id is out of range [ 327.196651][T16288] netlink: zone id is out of range [ 327.202487][T16288] netlink: zone id is out of range [ 327.787001][T16335] IPv6: NLM_F_REPLACE set, but no existing node found! [ 327.928760][ T1132] hsr_slave_0: left promiscuous mode [ 327.964402][ T1132] hsr_slave_1: left promiscuous mode [ 328.003886][ T1132] pimreg (unregistering): left allmulticast mode [ 329.228352][ T5837] Bluetooth: hci0: command tx timeout [ 331.170715][ T1132] vxcan1 (unregistering): left allmulticast mode [ 331.177744][ T1132] team0 (unregistering): Port device vxcan1 removed [ 331.311729][ T5837] Bluetooth: hci0: command tx timeout [ 331.444503][T16369] ieee802154 phy0 wpan0: encryption failed: -22 [ 331.560281][T16379] netlink: 'syz.1.3161': attribute type 11 has an invalid length. [ 331.588687][T16379] __nla_validate_parse: 3 callbacks suppressed [ 331.588708][T16379] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3161'. [ 331.681636][T16387] netlink: 19 bytes leftover after parsing attributes in process `syz.4.3164'. [ 331.759804][T16379] netlink: 'syz.1.3161': attribute type 11 has an invalid length. [ 331.760306][ T6096] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 331.782347][T16379] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3161'. [ 331.791401][ T6096] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 331.791448][ T6096] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 331.791486][ T6096] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 331.842852][T16392] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3165'. [ 332.026985][ T1132] IPVS: stop unused estimator thread 0... [ 332.039246][T16395] syzkaller1: entered promiscuous mode [ 332.044770][T16395] syzkaller1: entered allmulticast mode [ 332.087110][T16401] sctp: [Deprecated]: syz.0.3168 (pid 16401) Use of int in maxseg socket option. [ 332.087110][T16401] Use struct sctp_assoc_value instead [ 332.345723][T16138] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 332.382446][T16138] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 332.416299][T16138] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 332.450412][T16138] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 332.761926][T16138] 8021q: adding VLAN 0 to HW filter on device bond0 [ 332.779847][T16437] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3176'. [ 332.853783][T16138] 8021q: adding VLAN 0 to HW filter on device team0 [ 332.900130][ T6113] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.907359][ T6113] bridge0: port 1(bridge_slave_0) entered forwarding state [ 332.962389][ T1132] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.969642][ T1132] bridge0: port 2(bridge_slave_1) entered forwarding state [ 333.170008][T16451] lo: entered allmulticast mode [ 333.183904][T16451] tunl0: entered allmulticast mode [ 333.202195][T16451] gre0: entered allmulticast mode [ 333.237695][T16451] gretap0: entered allmulticast mode [ 333.260486][T16451] erspan0: entered allmulticast mode [ 333.283128][T16451] ip_vti0: entered allmulticast mode [ 333.298965][T16451] ip6_vti0: entered allmulticast mode [ 333.312178][T16451] sit0: entered allmulticast mode [ 333.325539][T16451] ip6tnl0: entered allmulticast mode [ 333.334244][T16451] ip6gre0: entered allmulticast mode [ 333.343388][T16451] syz_tun: entered allmulticast mode [ 333.354307][T16451] ip6gretap0: entered allmulticast mode [ 333.363553][T16451] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.371362][T16451] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.381040][T16451] bridge0: entered allmulticast mode [ 333.392183][T16451] vcan0: entered allmulticast mode [ 333.400177][T16451] bond0: entered allmulticast mode [ 333.405436][T16451] bond_slave_0: entered allmulticast mode [ 333.412183][T16451] bond_slave_1: entered allmulticast mode [ 333.421982][T16451] team0: entered allmulticast mode [ 333.427243][T16451] team_slave_0: entered allmulticast mode [ 333.434362][T16451] team_slave_1: entered allmulticast mode [ 333.444550][T16451] dummy0: entered allmulticast mode [ 333.454077][T16451] nlmon0: entered allmulticast mode [ 333.461878][T16451] caif0: entered allmulticast mode [ 333.467394][T16451] batadv0: entered allmulticast mode [ 333.478846][T16451] vxcan0: entered allmulticast mode [ 333.485464][T16451] vxcan1: entered allmulticast mode [ 333.494029][T16451] veth0: entered allmulticast mode [ 333.505280][T16451] veth1: entered allmulticast mode [ 333.515020][T16451] wg0: entered allmulticast mode [ 333.524171][T16451] wg1: entered allmulticast mode [ 333.532958][T16451] wg2: entered allmulticast mode [ 333.540545][T16451] veth0_to_bridge: entered allmulticast mode [ 333.555832][T16451] veth1_to_bridge: entered allmulticast mode [ 333.570181][T16451] veth0_to_bond: entered allmulticast mode [ 333.580721][T16451] veth1_to_bond: entered allmulticast mode [ 333.592262][T16451] veth0_to_team: entered allmulticast mode [ 333.604065][T16451] veth1_to_team: entered allmulticast mode [ 333.617784][T16451] veth0_to_batadv: entered allmulticast mode [ 333.630232][T16451] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 333.637757][T16451] batadv_slave_0: entered allmulticast mode [ 333.650278][T16451] veth1_to_batadv: entered allmulticast mode [ 333.660142][T16451] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 333.667791][T16451] batadv_slave_1: entered allmulticast mode [ 333.677308][T16451] xfrm0: entered allmulticast mode [ 333.685582][T16451] veth0_to_hsr: entered allmulticast mode [ 333.694733][T16451] hsr_slave_0: entered allmulticast mode [ 333.703936][T16451] veth1_to_hsr: entered allmulticast mode [ 333.716054][T16451] hsr_slave_1: entered allmulticast mode [ 333.724537][T16451] hsr0: entered allmulticast mode [ 333.732991][T16451] veth1_virt_wifi: entered allmulticast mode [ 333.741748][T16451] veth0_virt_wifi: entered allmulticast mode [ 333.751956][T16451] virt_wifi0: entered allmulticast mode [ 333.757865][T16451] veth1_vlan: entered allmulticast mode [ 333.766052][T16451] veth0_vlan: entered allmulticast mode [ 333.781956][T16451] vlan0: entered allmulticast mode [ 333.787229][T16451] vlan1: entered allmulticast mode [ 333.794832][T16451] macvlan0: entered allmulticast mode [ 333.803898][T16451] macvlan1: entered allmulticast mode [ 333.815613][T16451] ipvlan0: entered allmulticast mode [ 333.821459][T16451] ipvlan1: entered allmulticast mode [ 333.827043][T16451] veth1_macvtap: entered allmulticast mode [ 333.835650][T16451] veth0_macvtap: entered allmulticast mode [ 333.845193][T16451] macvtap0: entered allmulticast mode [ 333.853079][T16451] macsec0: entered allmulticast mode [ 333.862063][T16451] geneve0: entered allmulticast mode [ 333.870450][T16451] geneve1: entered allmulticast mode [ 333.880135][T16451] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 333.893462][T16451] netdevsim netdevsim0 netdevsim1: entered allmulticast mode [ 333.904693][T16451] netdevsim netdevsim0 netdevsim2: entered allmulticast mode [ 333.915404][T16451] netdevsim netdevsim0 netdevsim3: entered allmulticast mode [ 333.931503][T16451] mac80211_hwsim hwsim30 wlan0: entered allmulticast mode [ 333.949121][T16451] mac80211_hwsim hwsim31 wlan1: entered allmulticast mode [ 333.958660][T16451] ip6tnl1: entered allmulticast mode [ 333.964118][T16451] : entered allmulticast mode [ 333.972287][T16451] syzkaller1: entered allmulticast mode [ 334.008398][ T6096] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.037809][ T6096] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.207685][ T6096] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.238168][ T6096] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.515218][T16461] syzkaller0: entered promiscuous mode [ 334.522000][T16461] syzkaller0: entered allmulticast mode [ 336.491423][T16492] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3186'. [ 336.618497][T16542] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3188'. [ 337.895855][T16547] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3190'. [ 337.895858][T16548] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3190'. [ 337.895894][T16547] netlink: 'syz.0.3190': attribute type 7 has an invalid length. [ 337.912720][T16545] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 337.932508][T16548] netlink: 'syz.0.3190': attribute type 7 has an invalid length. [ 337.943119][T16548] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3190'. [ 337.958360][T16547] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3190'. [ 337.988655][T16545] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 338.011516][T16545] gretap1: entered promiscuous mode [ 338.016788][T16545] gretap1: entered allmulticast mode [ 338.024496][T16552] IPVS: length: 239 != 24 [ 338.167121][T16138] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 338.237300][T16562] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3194'. [ 338.333312][T16138] veth0_vlan: entered promiscuous mode [ 338.378747][T16138] veth1_vlan: entered promiscuous mode [ 338.475996][T16138] veth0_macvtap: entered promiscuous mode [ 338.495052][T16138] veth1_macvtap: entered promiscuous mode [ 338.527471][T16138] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 338.569434][T16138] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 338.589818][T16578] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3201'. [ 338.604274][ T6113] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.616765][ T6113] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.667488][ T6113] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.677868][ T6113] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.702355][T16578] bond17: (slave vcan0): refused to change device type [ 338.801631][T16584] Bluetooth: MGMT ver 1.23 [ 338.885191][T16586] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3204'. [ 338.962494][T16586] hsr_slave_0 (unregistering): left promiscuous mode [ 339.033327][ T6113] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 339.061612][ T6113] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.062225][T16594] FAULT_INJECTION: forcing a failure. [ 339.062225][T16594] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 339.099994][T16594] CPU: 1 UID: 0 PID: 16594 Comm: syz.0.3205 Not tainted syzkaller #0 PREEMPT(full) [ 339.100024][T16594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 339.100038][T16594] Call Trace: [ 339.100047][T16594] [ 339.100066][T16594] dump_stack_lvl+0xe8/0x150 [ 339.100101][T16594] should_fail_ex+0x412/0x560 [ 339.100136][T16594] _copy_from_iter+0x1d3/0x1670 [ 339.100170][T16594] ? unwind_next_frame+0xa5/0x23c0 [ 339.100209][T16594] ? __lock_acquire+0x6b5/0x2cf0 [ 339.100235][T16594] ? __pfx__copy_from_iter+0x10/0x10 [ 339.100284][T16594] tun_get_user+0x275/0x3dd0 [ 339.100320][T16594] ? aa_file_perm+0x192/0x15e0 [ 339.100345][T16594] ? aa_file_perm+0x50e/0x15e0 [ 339.100363][T16594] ? __pfx_tun_get_user+0x10/0x10 [ 339.100383][T16594] ? aa_file_perm+0x192/0x15e0 [ 339.100409][T16594] ? __lock_acquire+0x6b5/0x2cf0 [ 339.100446][T16594] ? ref_tracker_alloc+0x35c/0x4c0 [ 339.100480][T16594] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 339.100518][T16594] ? tun_get+0x1c/0x2f0 [ 339.100545][T16594] ? tun_get+0x1c/0x2f0 [ 339.100565][T16594] ? tun_get+0x1c/0x2f0 [ 339.100591][T16594] tun_chr_write_iter+0x113/0x200 [ 339.100616][T16594] vfs_write+0x61d/0xb90 [ 339.100648][T16594] ? __pfx_vfs_write+0x10/0x10 [ 339.100687][T16594] ? __fget_files+0x2a/0x420 [ 339.100727][T16594] ksys_write+0x150/0x270 [ 339.100752][T16594] ? __pfx_ksys_write+0x10/0x10 [ 339.100787][T16594] do_syscall_64+0x14d/0xf80 [ 339.100811][T16594] ? trace_irq_disable+0x3b/0x150 [ 339.100829][T16594] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.100850][T16594] ? clear_bhb_loop+0x40/0x90 [ 339.100875][T16594] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.100896][T16594] RIP: 0033:0x7ff5b199c799 [ 339.100915][T16594] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 339.100933][T16594] RSP: 002b:00007ff5b27be028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 339.100955][T16594] RAX: ffffffffffffffda RBX: 00007ff5b1c15fa0 RCX: 00007ff5b199c799 [ 339.100971][T16594] RDX: 000000000000002e RSI: 0000200000000140 RDI: 0000000000000004 [ 339.100984][T16594] RBP: 00007ff5b27be090 R08: 0000000000000000 R09: 0000000000000000 [ 339.100996][T16594] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 339.101008][T16594] R13: 00007ff5b1c16038 R14: 00007ff5b1c15fa0 R15: 00007ffc758c3c08 [ 339.101040][T16594] [ 339.368150][ T1132] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 339.389845][ T1132] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.678973][ T5148] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 339.688573][ T5148] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 339.697285][ T5148] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 339.711174][ T5148] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 339.723175][ T5148] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 339.891722][T16621] netlink: 'syz.2.3213': attribute type 1 has an invalid length. [ 339.899817][T16621] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3213'. [ 339.922627][T16621] netlink: 'syz.2.3213': attribute type 1 has an invalid length. [ 339.958779][T16621] netlink: 'syz.2.3213': attribute type 8 has an invalid length. [ 339.966768][T16621] netlink: 582 bytes leftover after parsing attributes in process `syz.2.3213'. [ 340.011035][T16623] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 340.139153][T16609] chnl_net:caif_netlink_parms(): no params data found [ 340.309764][T16609] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.317114][T16609] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.324500][T16609] bridge_slave_0: entered allmulticast mode [ 340.333514][T16609] bridge_slave_0: entered promiscuous mode [ 340.342591][T16609] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.350605][T16609] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.358705][T16609] bridge_slave_1: entered allmulticast mode [ 340.369014][T16609] bridge_slave_1: entered promiscuous mode [ 340.433381][T16609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 340.453641][T16609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 340.494203][T16609] team0: Port device team_slave_0 added [ 340.523310][T16609] team0: Port device team_slave_1 added [ 340.562917][T16609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 340.576638][T16609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 340.609948][T16609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 340.652648][T16609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 340.660538][T16609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 340.731364][T16609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 340.946172][T16645] pimreg3: entered allmulticast mode [ 341.136237][T16645] syzkaller0: entered promiscuous mode [ 341.151056][T16645] syzkaller0: entered allmulticast mode [ 341.165814][T16609] hsr_slave_0: entered promiscuous mode [ 341.179077][T16661] FAULT_INJECTION: forcing a failure. [ 341.179077][T16661] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 341.203296][T16609] hsr_slave_1: entered promiscuous mode [ 341.209994][T16609] debugfs: 'hsr0' already exists in 'hsr' [ 341.215859][T16609] Cannot create hsr debugfs directory [ 341.221754][T16661] CPU: 1 UID: 0 PID: 16661 Comm: syz.0.3225 Not tainted syzkaller #0 PREEMPT(full) [ 341.221780][T16661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 341.221794][T16661] Call Trace: [ 341.221802][T16661] [ 341.221811][T16661] dump_stack_lvl+0xe8/0x150 [ 341.221846][T16661] should_fail_ex+0x412/0x560 [ 341.221894][T16661] _copy_from_user+0x2d/0xb0 [ 341.221920][T16661] kstrtouint_from_user+0xd6/0x180 [ 341.221955][T16661] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 341.222005][T16661] proc_fail_nth_write+0x8e/0x210 [ 341.222038][T16661] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 341.222075][T16661] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 341.222108][T16661] vfs_write+0x29a/0xb90 [ 341.222141][T16661] ? __pfx_vfs_write+0x10/0x10 [ 341.222168][T16661] ? __fget_files+0x2a/0x420 [ 341.222204][T16661] ? __fget_files+0x3a0/0x420 [ 341.222235][T16661] ? __fget_files+0x2a/0x420 [ 341.222277][T16661] ksys_write+0x150/0x270 [ 341.222304][T16661] ? __pfx_ksys_write+0x10/0x10 [ 341.222340][T16661] do_syscall_64+0x14d/0xf80 [ 341.222365][T16661] ? trace_irq_disable+0x3b/0x150 [ 341.222385][T16661] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.222407][T16661] ? clear_bhb_loop+0x40/0x90 [ 341.222434][T16661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.222454][T16661] RIP: 0033:0x7ff5b195cfce [ 341.222475][T16661] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 341.222493][T16661] RSP: 002b:00007ff5b277bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 341.222515][T16661] RAX: ffffffffffffffda RBX: 00007ff5b277c6c0 RCX: 00007ff5b195cfce [ 341.222531][T16661] RDX: 0000000000000001 RSI: 00007ff5b277c0a0 RDI: 0000000000000006 [ 341.222545][T16661] RBP: 00007ff5b277c090 R08: 0000000000000000 R09: 0000000000000000 [ 341.222558][T16661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 341.222571][T16661] R13: 00007ff5b1c16218 R14: 00007ff5b1c16180 R15: 00007ffc758c3c08 [ 341.222605][T16661] [ 341.791110][ T5837] Bluetooth: hci1: command tx timeout [ 343.035049][ T1132] bond3 (unregistering): (slave ip6gretap1): Releasing active interface [ 343.043752][T16684] netlink: 'syz.2.3232': attribute type 1 has an invalid length. [ 343.052095][T16684] __nla_validate_parse: 4 callbacks suppressed [ 343.052114][T16684] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3232'. [ 343.090388][T16684] netlink: 1 bytes leftover after parsing attributes in process `syz.2.3232'. [ 343.117810][ T1132] tipc: Disabling bearer [ 343.123544][T16684] netlink: 658 bytes leftover after parsing attributes in process `syz.2.3232'. [ 343.484610][ T1132] bond1 (unregistering): (slave lo): Releasing backup interface [ 343.492977][ T1132] bond1 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 343.504654][ T1132] bond1 (unregistering): Released all slaves [ 343.522313][ T1132] bond2 (unregistering): (slave veth3): Releasing active interface [ 343.531298][ T1132] bond2 (unregistering): Released all slaves [ 343.547344][ T1132] bond3 (unregistering): Released all slaves [ 343.571809][ T1132] bond0 (unregistering): Released all slaves [ 343.591929][ T1132] bond4 (unregistering): Released all slaves [ 343.607565][ T1132] bond5 (unregistering): Released all slaves [ 343.800674][ T1132] tipc: Left network mode [ 343.870237][ T5837] Bluetooth: hci1: command tx timeout [ 344.081049][T16704] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3236'. [ 344.133675][ T1132] IPVS: stopping backup sync thread 8680 ... [ 344.311654][T16710] wg2: entered allmulticast mode [ 344.316888][T16710] net_ratelimit: 184 callbacks suppressed [ 344.316906][T16710] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 344.372979][T16726] ip6t_REJECT: ECHOREPLY is not supported [ 344.381567][T16726] x_tables: duplicate underflow at hook 2 [ 344.584955][T16737] netlink: 1664 bytes leftover after parsing attributes in process `syz.1.3241'. [ 344.586104][T16738] xt_connbytes: Forcing CT accounting to be enabled [ 345.171224][T16609] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 345.282083][T16609] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 345.299826][T16609] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 345.335401][T16609] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 345.418533][T16772] ieee802154 phy0 wpan0: encryption failed: -22 [ 345.466866][ T1132] hsr_slave_1: left promiscuous mode [ 345.480206][ T1132] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 345.488690][T16787] netlink: 'syz.3.3256': attribute type 1 has an invalid length. [ 345.504669][ T1132] batman_adv: batadv0: Removing interface: dummy0 [ 345.668862][T16798] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3256'. [ 345.704486][ T1132] team0 (unregistering): Port device team_slave_1 removed [ 345.723520][ T1132] team0 (unregistering): Port device team_slave_0 removed [ 345.952450][ T5837] Bluetooth: hci1: command tx timeout [ 346.049757][T16807] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3261'. [ 346.180039][T16813] ieee802154 phy0 wpan0: encryption failed: -22 [ 346.225484][T16811] netlink: 'syz.0.3262': attribute type 11 has an invalid length. [ 346.253489][T16609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 346.267451][T16811] netlink: 'syz.0.3262': attribute type 11 has an invalid length. [ 346.299720][T16811] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3262'. [ 346.347741][T16609] 8021q: adding VLAN 0 to HW filter on device team0 [ 346.470495][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.477698][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 346.529321][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.536498][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 346.619479][T16833] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3267'. [ 346.644477][ T1132] IPVS: stop unused estimator thread 0... [ 346.648197][T16833] nbd: must specify at least one socket [ 346.766020][T16837] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3269'. [ 346.983200][T16851] xt_l2tp: missing protocol rule (udp|l2tpip) [ 346.995750][T16854] xt_l2tp: missing protocol rule (udp|l2tpip) [ 347.307472][T16609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 347.360294][T16863] SET target dimension over the limit! [ 347.401767][T16871] netlink: 'syz.0.3276': attribute type 1 has an invalid length. [ 347.533086][T16874] vlan2: entered allmulticast mode [ 347.864735][T16894] netlink: 'syz.0.3281': attribute type 11 has an invalid length. [ 347.894210][ T6096] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 347.894519][T16894] netlink: 'syz.0.3281': attribute type 11 has an invalid length. [ 347.928975][ T6096] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 347.941861][ T6096] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 347.989143][ T6096] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 348.028238][ T5837] Bluetooth: hci1: command tx timeout [ 348.143877][T16913] __nla_validate_parse: 3 callbacks suppressed [ 348.143899][T16913] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3285'. [ 348.279684][T16921] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 348.414526][T16609] veth0_vlan: entered promiscuous mode [ 348.466107][T16609] veth1_vlan: entered promiscuous mode [ 349.031218][T16959] wg2: entered allmulticast mode [ 349.036566][T16959] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 349.175374][T16609] veth0_macvtap: entered promiscuous mode [ 349.207649][T16609] veth1_macvtap: entered promiscuous mode [ 349.284699][T16609] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 349.336665][T16609] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 349.380116][ T6110] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.394318][ T6110] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.423488][ T6110] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.436998][T16968] xt_SECMARK: invalid mode: 9 [ 349.460037][ T6110] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.721230][ T6110] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 349.741532][ T6110] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 349.826461][T16976] netlink: 'syz.1.3300': attribute type 4 has an invalid length. [ 349.896733][ T1132] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 349.917139][ T1132] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 350.797537][ T5148] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 350.808884][ T5148] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 350.816930][ T5148] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 350.831684][ T5148] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 350.840776][ T5148] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 350.923579][T17023] wg2: entered allmulticast mode [ 350.929513][T17023] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 351.080498][T17029] netlink: 'syz.0.3312': attribute type 1 has an invalid length. [ 351.233435][T17029] 8021q: adding VLAN 0 to HW filter on device bond1 [ 351.267169][T17030] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 351.460932][T17039] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3314'. [ 351.816822][T17020] chnl_net:caif_netlink_parms(): no params data found [ 351.873355][T17054] openvswitch: netlink: Unexpected mask (mask=200840, allowed=10048) [ 351.882545][T17054] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3317'. [ 351.961937][T17054] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3317'. [ 352.152608][T17020] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.178861][T17020] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.200397][T17020] bridge_slave_0: entered allmulticast mode [ 352.207815][T17020] bridge_slave_0: entered promiscuous mode [ 352.231060][T17020] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.242652][T17020] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.250288][T17020] bridge_slave_1: entered allmulticast mode [ 352.259257][T17020] bridge_slave_1: entered promiscuous mode [ 352.325447][T17020] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 352.353851][T17020] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 352.411998][T17020] team0: Port device team_slave_0 added [ 352.420701][T17020] team0: Port device team_slave_1 added [ 352.462727][T17020] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 352.474566][T17020] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 352.500943][T17020] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 352.538569][T17080] netlink: 'syz.3.3323': attribute type 12 has an invalid length. [ 352.560050][T17020] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 352.567041][T17020] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 352.611304][T17020] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 352.806589][T17020] hsr_slave_0: entered promiscuous mode [ 352.825986][T17020] hsr_slave_1: entered promiscuous mode [ 352.909763][ T5837] Bluetooth: hci2: command tx timeout [ 353.103808][T17095] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3328'. [ 353.241366][T17020] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.274581][T17102] netlink: 1368 bytes leftover after parsing attributes in process `syz.0.3331'. [ 353.286735][T17107] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3333'. [ 353.304159][T17107] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3333'. [ 353.404839][T17020] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.522142][T17020] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.643659][T17020] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.995497][T17020] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 354.019677][T17020] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 354.044952][T17152] xt_hashlimit: max too large, truncated to 1048576 [ 354.063838][T17020] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 354.095553][T17020] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 354.353747][T17020] 8021q: adding VLAN 0 to HW filter on device bond0 [ 354.383999][T17168] sctp: [Deprecated]: syz.4.3349 (pid 17168) Use of int in max_burst socket option. [ 354.383999][T17168] Use struct sctp_assoc_value instead [ 354.405126][T17020] 8021q: adding VLAN 0 to HW filter on device team0 [ 354.434898][ T6096] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.442107][ T6096] bridge0: port 1(bridge_slave_0) entered forwarding state [ 354.609429][ T6096] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.616683][ T6096] bridge0: port 2(bridge_slave_1) entered forwarding state [ 354.727439][T17175] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3351'. [ 354.859770][T17181] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3353'. [ 354.949064][T17181] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3353'. [ 354.958302][T17181] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3353'. [ 354.998720][ T5837] Bluetooth: hci2: command tx timeout [ 355.099562][T17193] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3356'. [ 355.120622][T17193] netlink: 'syz.4.3356': attribute type 21 has an invalid length. [ 355.237725][T17020] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 355.359453][T17020] veth0_vlan: entered promiscuous mode [ 355.397442][T17020] veth1_vlan: entered promiscuous mode [ 355.484677][T17020] veth0_macvtap: entered promiscuous mode [ 355.511428][T17020] veth1_macvtap: entered promiscuous mode [ 355.540725][T17020] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 355.560898][T17020] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 355.580090][T17212] erspan0: entered allmulticast mode [ 355.606661][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.649489][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.756573][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.787186][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.936739][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 355.959101][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 356.008392][ T6096] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 356.018209][ T6096] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 356.047490][T17232] H: renamed from dummy0 (while UP) [ 356.273456][T17245] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3306'. [ 356.328535][T17250] netlink: 'syz.1.3374': attribute type 1 has an invalid length. [ 356.353451][T17250] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3374'. [ 356.369909][T17250] netlink: 'syz.1.3374': attribute type 1 has an invalid length. [ 357.031124][T17288] bridge_slave_1: left promiscuous mode [ 357.036956][T17288] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.068194][ T5837] Bluetooth: hci2: command tx timeout [ 357.146520][T17288] bridge_slave_0: left promiscuous mode [ 357.179574][T17288] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.478900][T17316] lo: entered allmulticast mode [ 357.495821][T17316] tunl0: entered allmulticast mode [ 357.503775][T17316] gre0: entered allmulticast mode [ 357.516350][T17316] gretap0: entered allmulticast mode [ 357.525810][T17316] ip_vti0: entered allmulticast mode [ 357.533496][T17316] ip6_vti0: entered allmulticast mode [ 357.544494][T17316] sit0: entered allmulticast mode [ 357.556028][T17316] ip6tnl0: entered allmulticast mode [ 357.563819][T17316] ip6gre0: entered allmulticast mode [ 357.574810][T17316] syz_tun: entered allmulticast mode [ 357.583682][T17316] ip6gretap0: entered allmulticast mode [ 357.592382][T17316] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.600074][T17316] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.610304][T17316] bridge0: entered allmulticast mode [ 357.619314][T17316] vcan0: entered allmulticast mode [ 357.625855][T17316] bond0: entered allmulticast mode [ 357.637097][T17316] bond_slave_0: entered allmulticast mode [ 357.643226][T17316] bond_slave_1: entered allmulticast mode [ 357.654573][T17316] team0: entered allmulticast mode [ 357.683334][T17316] team_slave_0: entered allmulticast mode [ 357.689773][T17316] team_slave_1: entered allmulticast mode [ 357.699742][T17316] dummy0: entered allmulticast mode [ 357.709325][T17316] nlmon0: entered allmulticast mode [ 357.716140][T17316] caif0: entered allmulticast mode [ 357.722983][T17316] batadv0: entered allmulticast mode [ 357.731668][T17316] vxcan0: entered allmulticast mode [ 357.737927][T17316] vxcan1: entered allmulticast mode [ 357.744241][T17316] veth0: entered allmulticast mode [ 357.752398][T17316] veth1: entered allmulticast mode [ 357.761657][T17316] wg0: entered allmulticast mode [ 357.772275][T17316] wg1: entered allmulticast mode [ 357.781527][T17316] veth0_to_bridge: entered allmulticast mode [ 357.795998][T17316] veth1_to_bridge: entered allmulticast mode [ 357.811873][T17316] veth0_to_bond: entered allmulticast mode [ 357.824822][T17316] veth1_to_bond: entered allmulticast mode [ 357.836847][T17316] veth0_to_team: entered allmulticast mode [ 357.848689][T17316] veth1_to_team: entered allmulticast mode [ 357.879317][T17316] veth0_to_batadv: entered allmulticast mode [ 357.889634][T17316] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 357.897099][T17316] batadv_slave_0: entered allmulticast mode [ 357.906617][T17316] veth1_to_batadv: entered allmulticast mode [ 357.918776][T17316] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 357.926540][T17316] batadv_slave_1: entered allmulticast mode [ 357.939099][T17316] xfrm0: entered allmulticast mode [ 357.947249][T17316] veth0_to_hsr: entered allmulticast mode [ 357.959394][T17316] hsr_slave_0: entered allmulticast mode [ 357.967518][T17316] veth1_to_hsr: entered allmulticast mode [ 357.980046][T17316] hsr_slave_1: entered allmulticast mode [ 357.992251][T17316] hsr0: entered allmulticast mode [ 358.000816][T17316] veth1_virt_wifi: entered allmulticast mode [ 358.013661][T17316] veth0_virt_wifi: entered allmulticast mode [ 358.023124][T17316] virt_wifi0: entered allmulticast mode [ 358.032165][T17316] veth1_vlan: entered allmulticast mode [ 358.044169][T17316] veth0_vlan: entered allmulticast mode [ 358.064903][T17316] vlan0: entered allmulticast mode [ 358.071074][T17316] vlan1: entered allmulticast mode [ 358.076996][T17316] macvlan0: entered allmulticast mode [ 358.090464][T17316] macvlan1: entered allmulticast mode [ 358.099708][T17316] ipvlan0: entered allmulticast mode [ 358.105348][T17316] ipvlan1: entered allmulticast mode [ 358.115189][T17316] veth1_macvtap: entered allmulticast mode [ 358.126032][T17316] veth0_macvtap: entered allmulticast mode [ 358.140911][T17316] macvtap0: entered allmulticast mode [ 358.151587][T17316] macsec0: entered allmulticast mode [ 358.162664][T17316] geneve0: entered allmulticast mode [ 358.173778][T17316] geneve1: entered allmulticast mode [ 358.185451][T17316] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 358.199336][T17316] netdevsim netdevsim4 netdevsim1: entered allmulticast mode [ 358.212540][T17316] netdevsim netdevsim4 netdevsim2: entered allmulticast mode [ 358.225966][T17316] netdevsim netdevsim4 netdevsim3: entered allmulticast mode [ 358.265188][T17316] mac80211_hwsim hwsim36 wlan1: entered allmulticast mode [ 358.289811][T17316] bridge1: entered allmulticast mode [ 358.295383][T17316] syzkaller1: entered allmulticast mode [ 358.334794][ T7883] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.344429][ T7883] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.393234][ T7883] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.410734][ T7883] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.464293][T17334] netlink: 'syz.1.3399': attribute type 24 has an invalid length. [ 358.474291][T17336] __nla_validate_parse: 5 callbacks suppressed [ 358.474310][T17336] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3400'. [ 358.551443][T17342] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3402'. [ 358.580543][T17344] Bluetooth: MGMT ver 1.23 [ 358.612127][T17342] bridge_slave_1: left promiscuous mode [ 358.619974][T17342] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.676661][T17342] bridge_slave_0: left promiscuous mode [ 358.687882][T17342] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.083605][T17371] syzkaller0: entered promiscuous mode [ 359.095595][T17371] syzkaller0: entered allmulticast mode [ 359.148246][ T5148] Bluetooth: hci2: command tx timeout [ 359.269826][T17382] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.3415'. [ 359.283502][T17382] netlink: 'syz.3.3415': attribute type 4 has an invalid length. [ 359.291568][T17382] netlink: 17 bytes leftover after parsing attributes in process `syz.3.3415'. [ 359.503629][T17394] netlink: 'syz.2.3416': attribute type 14 has an invalid length. [ 359.608195][T17399] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3421'. [ 359.621160][T17399] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3421'. [ 359.662555][T17401] Cannot find add_set index 2 as target [ 359.893470][T17414] xt_TCPMSS: Only works on TCP SYN packets [ 359.903557][T17414] xt_TCPMSS: Only works on TCP SYN packets [ 359.909774][T17414] xt_TCPMSS: Only works on TCP SYN packets [ 359.915908][T17414] xt_TCPMSS: Only works on TCP SYN packets [ 359.923615][T17414] xt_TCPMSS: Only works on TCP SYN packets [ 359.930573][T17414] xt_TCPMSS: Only works on TCP SYN packets [ 359.936718][T17414] xt_TCPMSS: Only works on TCP SYN packets [ 359.943267][T17414] xt_TCPMSS: Only works on TCP SYN packets [ 359.950515][T17414] xt_TCPMSS: Only works on TCP SYN packets [ 359.957445][T17414] xt_TCPMSS: Only works on TCP SYN packets [ 360.110818][T17425] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3430'. [ 360.163854][T17431] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3431'. [ 360.192468][T17430] netlink: 336 bytes leftover after parsing attributes in process `syz.3.3433'. [ 360.488865][T17454] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 360.496157][T17454] IPv6: NLM_F_CREATE should be set when creating new route [ 360.531320][T17454] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3436'. [ 360.588487][ T5837] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 360.590345][ T5148] Bluetooth: hci0: command 0x0c1a tx timeout [ 360.700562][T17465] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 361.344670][T17498] gre1: entered promiscuous mode [ 361.378209][T17498] gre1: entered allmulticast mode [ 361.526651][T17514] bond0: (slave rose0): Enslaving as an active interface with an up link [ 362.583179][T17572] lo: entered allmulticast mode [ 362.591016][T17572] tunl0: entered allmulticast mode [ 362.599054][T17572] gre0: entered allmulticast mode [ 362.640612][T17572] gretap0: entered allmulticast mode [ 362.690560][T17572] erspan0: entered allmulticast mode [ 362.717744][T17572] ip_vti0: entered allmulticast mode [ 362.738765][T17572] ip6_vti0: entered allmulticast mode [ 362.755662][T17572] sit0: entered allmulticast mode [ 362.783177][T17572] ip6tnl0: entered allmulticast mode [ 362.796025][T17572] ip6gre0: entered allmulticast mode [ 362.810593][T17572] syz_tun: entered allmulticast mode [ 362.821840][T17572] ip6gretap0: entered allmulticast mode [ 362.837055][T17572] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.844865][T17572] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.860373][T17572] bridge0: entered allmulticast mode [ 362.870023][T17572] vcan0: entered allmulticast mode [ 362.886139][T17572] bond0: entered allmulticast mode [ 362.893423][T17572] bond_slave_0: entered allmulticast mode [ 362.899461][T17572] bond_slave_1: entered allmulticast mode [ 362.910760][T17572] team0: entered allmulticast mode [ 362.916038][T17572] team_slave_0: entered allmulticast mode [ 362.924523][T17572] team_slave_1: entered allmulticast mode [ 362.935637][T17572] H: entered allmulticast mode [ 362.948545][T17572] nlmon0: entered allmulticast mode [ 362.965200][T17572] caif0: entered allmulticast mode [ 362.970823][T17572] batadv0: entered allmulticast mode [ 362.989753][T17572] vxcan0: entered allmulticast mode [ 362.997578][T17572] vxcan1: entered allmulticast mode [ 363.005941][T17572] veth0: entered allmulticast mode [ 363.015284][T17572] veth1: entered allmulticast mode [ 363.025343][T17572] wg0: entered allmulticast mode [ 363.033577][T17572] wg1: entered allmulticast mode [ 363.041868][T17572] wg2: entered allmulticast mode [ 363.049675][T17572] veth0_to_bridge: entered allmulticast mode [ 363.064327][T17572] veth1_to_bridge: entered allmulticast mode [ 363.079359][T17572] veth0_to_bond: entered allmulticast mode [ 363.090605][T17572] veth1_to_bond: entered allmulticast mode [ 363.100401][T17572] veth0_to_team: entered allmulticast mode [ 363.111306][T17572] veth1_to_team: entered allmulticast mode [ 363.122411][T17572] veth0_to_batadv: entered allmulticast mode [ 363.131272][T17572] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 363.140996][T17572] batadv_slave_0: entered allmulticast mode [ 363.150396][T17572] veth1_to_batadv: entered allmulticast mode [ 363.159715][T17572] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 363.167262][T17572] batadv_slave_1: entered allmulticast mode [ 363.176367][T17572] xfrm0: entered allmulticast mode [ 363.183552][T17572] veth0_to_hsr: entered allmulticast mode [ 363.191612][T17572] hsr_slave_0: entered allmulticast mode [ 363.200951][T17572] veth1_to_hsr: entered allmulticast mode [ 363.209623][T17572] hsr_slave_1: entered allmulticast mode [ 363.217351][T17572] hsr0: entered allmulticast mode [ 363.225505][T17572] veth1_virt_wifi: entered allmulticast mode [ 363.234955][T17572] veth0_virt_wifi: entered allmulticast mode [ 363.243498][T17572] virt_wifi0: entered allmulticast mode [ 363.250280][T17572] veth1_vlan: entered allmulticast mode [ 363.258156][T17572] veth0_vlan: entered allmulticast mode [ 363.272722][T17572] vlan0: entered allmulticast mode [ 363.278268][T17572] vlan1: entered allmulticast mode [ 363.283827][T17572] macvlan0: entered allmulticast mode [ 363.293121][T17572] macvlan1: entered allmulticast mode [ 363.301530][T17572] ipvlan0: entered allmulticast mode [ 363.307028][T17572] ipvlan1: entered allmulticast mode [ 363.313190][T17572] veth1_macvtap: entered allmulticast mode [ 363.321437][T17572] veth0_macvtap: entered allmulticast mode [ 363.334263][T17572] macvtap0: entered allmulticast mode [ 363.343807][T17572] macsec0: entered allmulticast mode [ 363.352426][T17572] geneve0: entered allmulticast mode [ 363.360675][T17572] geneve1: entered allmulticast mode [ 363.369551][T17572] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 363.380556][T17572] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 363.392401][T17572] netdevsim netdevsim1 netdevsim2: entered allmulticast mode [ 363.403986][T17572] netdevsim netdevsim1 netdevsim3: entered allmulticast mode [ 363.413217][T17572] mac80211_hwsim hwsim28 wlan0: entered allmulticast mode [ 363.420667][T17572] mac80211_hwsim hwsim29 wlan1: entered allmulticast mode [ 363.429400][T17572] veth1_macvtap.2: entered allmulticast mode [ 363.435606][T17572] bond1: entered allmulticast mode [ 363.441198][T17572] bond2: entered allmulticast mode [ 363.446924][T17572] @: entered allmulticast mode [ 363.454479][T17572] gretap1: left promiscuous mode [ 363.461163][T17572] erspan1: entered allmulticast mode [ 363.466704][T17572] mac80211_hwsim hwsim37 wlan2: entered allmulticast mode [ 363.474837][T17572] gtp0: entered allmulticast mode [ 363.481640][T17572] syzkaller1: entered allmulticast mode [ 363.558206][ T49] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 363.578845][ T49] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.618378][ T49] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 363.635250][ T49] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.657377][ T49] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 363.676138][ T49] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.690327][ T49] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 363.700424][ T49] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.828647][T17613] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 364.004977][T17627] netlink: 'syz.2.3481': attribute type 1 has an invalid length. [ 364.013040][T17627] netlink: 'syz.2.3481': attribute type 2 has an invalid length. [ 364.180464][T17637] netlink: 'syz.0.3483': attribute type 2 has an invalid length. [ 364.438244][T17662] __nla_validate_parse: 5 callbacks suppressed [ 364.438264][T17662] netlink: 512 bytes leftover after parsing attributes in process `syz.3.3493'. [ 364.588869][T17672] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3496'. [ 364.683345][T17676] netlink: 'syz.4.3499': attribute type 20 has an invalid length. [ 364.698618][T17676] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3499'. [ 364.778748][ T49] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 364.809146][ T49] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 364.861970][ T49] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 364.894703][ T49] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 364.954056][T17694] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3502'. [ 365.017642][T17699] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3504'. [ 365.154657][T17702] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 365.218261][T17704] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3505'. [ 365.251597][T17704] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3505'. [ 365.255899][T17702] bond1 (unregistering): Released all slaves [ 365.272692][T17714] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.3509'. [ 365.371177][T17719] netlink: 'syz.3.3510': attribute type 1 has an invalid length. [ 365.399427][T17719] netlink: 212 bytes leftover after parsing attributes in process `syz.3.3510'. [ 365.421352][T17719] netlink: 5 bytes leftover after parsing attributes in process `syz.3.3510'. [ 365.692050][T17738] ¾x9ÿ: renamed from bridge_slave_0 [ 366.046711][T17760] veth0_to_bridge: vlans aren't supported yet for dev_uc|mc_add() [ 366.080749][T17760] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 367.072861][T17812] netlink: 'syz.0.3538': attribute type 1 has an invalid length. [ 367.750927][T17855] syzkaller0: mtu less than device minimum [ 367.764874][T17855] syzkaller0: entered allmulticast mode [ 367.908295][T17860] netlink: 'syz.4.3552': attribute type 2 has an invalid length. [ 367.937284][T17863] openvswitch: netlink: Key type 132 is out of range max 32 [ 368.086948][T17869] netlink: 'syz.1.3555': attribute type 1 has an invalid length. [ 368.102892][T17869] netlink: 'syz.1.3555': attribute type 2 has an invalid length. [ 368.174591][T17869] netlink: 'syz.1.3555': attribute type 10 has an invalid length. [ 368.198292][T17869] batadv0: left allmulticast mode [ 368.228030][T17869] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 368.266381][T17869] batadv0: entered allmulticast mode [ 368.285520][T17869] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 368.350924][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 368.856948][ T12] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 369.114775][T17919] syzkaller0: entered promiscuous mode [ 369.124713][T17918] openvswitch: netlink: IP tunnel TTL not specified. [ 369.138104][T17919] syzkaller0: entered allmulticast mode [ 369.441034][T17944] netlink: 'syz.3.3575': attribute type 16 has an invalid length. [ 369.458421][T17944] netlink: 'syz.3.3575': attribute type 17 has an invalid length. [ 369.696653][T17937] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.726388][T17937] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.756350][T17962] netlink: 'syz.0.3580': attribute type 6 has an invalid length. [ 369.868382][T17944] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 371.406417][T17982] 8021q: adding VLAN 0 to HW filter on device bond0 [ 371.420483][T17982] 8021q: adding VLAN 0 to HW filter on device team0 [ 371.435351][T17982] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 371.468046][T17986] lo: left allmulticast mode [ 371.490292][T17986] tunl0: left allmulticast mode [ 371.510012][T17986] gre0: left allmulticast mode [ 371.515384][T17986] gretap0: left allmulticast mode [ 371.547561][T17986] erspan0: left allmulticast mode [ 371.557681][T17986] ip_vti0: left allmulticast mode [ 371.564714][T17986] ip6_vti0: left allmulticast mode [ 371.583392][T18000] __nla_validate_parse: 15 callbacks suppressed [ 371.583409][T18000] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3589'. [ 371.587897][T17986] sit0: left allmulticast mode [ 371.590730][T17986] ip6tnl0: left allmulticast mode [ 371.612299][T17986] ip6gre0: left allmulticast mode [ 371.617920][T17986] syz_tun: left allmulticast mode [ 371.626667][T17986] ip6gretap0: left allmulticast mode [ 371.635862][T17986] vcan0: left allmulticast mode [ 371.648501][T17986] bond0: left allmulticast mode [ 371.654210][T17986] team0: left allmulticast mode [ 371.661459][T17986] dummy0: left allmulticast mode [ 371.667126][T17986] nlmon0: left allmulticast mode [ 371.674847][T17986] caif0: left allmulticast mode [ 371.682238][T17986] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 371.699279][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.715493][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.733001][T17996] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3590'. [ 371.744030][T17996] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3590'. [ 371.754615][T17996] netlink: 'syz.4.3590': attribute type 3 has an invalid length. [ 371.794469][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.961180][T18017] openvswitch: netlink: IP tunnel dst address not specified [ 371.977363][T18019] netlink: 300 bytes leftover after parsing attributes in process `syz.4.3597'. [ 372.289185][T18036] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3604'. [ 372.469669][T18044] ip6t_srh: unknown srh invflags 4000 [ 372.493303][T18046] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3608'. [ 372.583113][T18046] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3608'. [ 373.008507][T18071] tipc: Failed to remove unknown binding: 66,0,0/0:1342771892/1342771894 [ 373.024849][T18071] tipc: Failed to remove unknown binding: 66,0,0/0:1342771892/1342771893 [ 373.038712][T18071] tipc: Failed to remove unknown binding: 66,0,0/0:1342771892/1342771894 [ 373.053160][T18071] tipc: Failed to remove unknown binding: 66,0,0/0:1342771892/1342771893 [ 373.166082][T18082] sock: sock_timestamping_bind_phc: sock not bind to device [ 374.067039][T18114] bond1: option lacp_rate: invalid value (28) [ 374.076516][T18114] bond1 (unregistering): Released all slaves [ 376.206718][T18084] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 376.528356][T18141] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3636'. [ 376.676952][T18151] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3638'. [ 376.826079][T18160] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3640'. [ 376.850325][T18160] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3640'. [ 376.860132][T18160] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3640'. [ 377.224434][T18182] netlink: 'syz.2.3644': attribute type 1 has an invalid length. [ 377.772452][T18205] syzkaller1: entered promiscuous mode [ 377.778054][T18205] syzkaller1: entered allmulticast mode [ 377.807285][T18211] syzkaller0: entered promiscuous mode [ 377.828607][T18211] syzkaller0: entered allmulticast mode [ 377.854832][T18214] sctp: [Deprecated]: syz.0.3653 (pid 18214) Use of struct sctp_assoc_value in delayed_ack socket option. [ 377.854832][T18214] Use struct sctp_sack_info instead [ 377.888889][T18211] tc action pedit offset must be on 32 bit boundaries [ 377.961274][T18219] block nbd0: reconnected socket [ 377.969010][T18219] nbd: socks must be embedded in a SOCK_ITEM attr [ 378.011234][ T5148] block nbd0: Receive control failed (result -32) [ 378.211226][T18237] FAULT_INJECTION: forcing a failure. [ 378.211226][T18237] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 378.262448][T18239] netlink: 'syz.4.3660': attribute type 2 has an invalid length. [ 378.267146][T18237] CPU: 0 UID: 0 PID: 18237 Comm: syz.2.3659 Not tainted syzkaller #0 PREEMPT(full) [ 378.267223][T18237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 378.267274][T18237] Call Trace: [ 378.267295][T18237] [ 378.267317][T18237] dump_stack_lvl+0xe8/0x150 [ 378.267404][T18237] should_fail_ex+0x412/0x560 [ 378.267507][T18237] _copy_from_user+0x2d/0xb0 [ 378.267570][T18237] ___sys_sendmsg+0x1c6/0x360 [ 378.267654][T18237] ? __pfx____sys_sendmsg+0x10/0x10 [ 378.267826][T18237] ? __fget_files+0x2a/0x420 [ 378.267908][T18237] ? __fget_files+0x3a0/0x420 [ 378.268019][T18237] __x64_sys_sendmsg+0x1bd/0x2a0 [ 378.268093][T18237] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 378.268199][T18237] ? __pfx_ksys_write+0x10/0x10 [ 378.268316][T18237] do_syscall_64+0x14d/0xf80 [ 378.268379][T18237] ? trace_irq_disable+0x3b/0x150 [ 378.268448][T18237] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.268509][T18237] ? clear_bhb_loop+0x40/0x90 [ 378.268580][T18237] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.268640][T18237] RIP: 0033:0x7f28d999c799 [ 378.268692][T18237] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 378.268751][T18237] RSP: 002b:00007f28da920028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 378.268805][T18237] RAX: ffffffffffffffda RBX: 00007f28d9c15fa0 RCX: 00007f28d999c799 [ 378.268854][T18237] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 378.268886][T18237] RBP: 00007f28da920090 R08: 0000000000000000 R09: 0000000000000000 [ 378.268918][T18237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 378.268957][T18237] R13: 00007f28d9c16038 R14: 00007f28d9c15fa0 R15: 00007ffcf84ec1f8 [ 378.269042][T18237] [ 378.487321][T18239] netlink: 'syz.4.3660': attribute type 8 has an invalid length. [ 378.508088][T18239] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3660'. [ 378.593251][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.596392][T18250] syzkaller0: entered promiscuous mode [ 378.605167][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.616444][T18250] syzkaller0: entered allmulticast mode [ 378.624056][ T1304] clip:clip_start_xmit: skb_dst(skb) == NULL [ 378.706488][T18256] Bluetooth: MGMT ver 1.23 [ 378.958360][T18263] mac80211_hwsim hwsim40 wlan0: entered allmulticast mode [ 378.969324][T18263] @: entered allmulticast mode [ 378.976141][T18263] team0.0000: entered allmulticast mode [ 378.983408][T18263] bridge0: entered allmulticast mode [ 378.993720][T18263] syzkaller1: entered allmulticast mode [ 379.045294][ T12] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 379.068179][ T12] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 379.171492][ T12] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 379.180606][ T12] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 379.226185][T18284] lo speed is unknown, defaulting to 1000 [ 379.247362][T18284] lo speed is unknown, defaulting to 1000 [ 379.279998][T18284] lo speed is unknown, defaulting to 1000 [ 379.295086][T18287] syzkaller1: entered promiscuous mode [ 379.308770][T18289] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3676'. [ 379.318080][T18287] syzkaller1: entered allmulticast mode [ 379.363051][T18287] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3675'. [ 379.638064][ T7591] IPVS: starting estimator thread 0... [ 379.738314][T18309] IPVS: using max 27 ests per chain, 64800 per kthread [ 379.889682][T18325] netlink: 412 bytes leftover after parsing attributes in process `syz.0.3685'. [ 380.175541][ T7584] lo speed is unknown, defaulting to 1000 [ 380.182250][T18284] infiniband syz2: set active [ 380.191900][T18284] infiniband syz2: added lo [ 380.207542][T18284] [ 380.209913][T18284] ====================================================== [ 380.216960][T18284] WARNING: possible circular locking dependency detected [ 380.224011][T18284] syzkaller #0 Not tainted [ 380.228452][T18284] ------------------------------------------------------ [ 380.235504][T18284] syz.3.3676/18284 is trying to acquire lock: [ 380.241601][T18284] ffffffff8e85dae8 (pcpu_alloc_mutex){+.+.}-{4:4}, at: pcpu_alloc_noprof+0x218/0x19c0 [ 380.251235][T18284] [ 380.251235][T18284] but task is already holding lock: [ 380.258625][T18284] ffffffff8e5fcd08 (wq_pool_mutex){+.+.}-{4:4}, at: __alloc_workqueue+0x9ef/0x1e90 [ 380.267987][T18284] [ 380.267987][T18284] which lock already depends on the new lock. [ 380.267987][T18284] [ 380.278436][T18284] [ 380.278436][T18284] the existing dependency chain (in reverse order) is: [ 380.287460][T18284] [ 380.287460][T18284] -> #8 (wq_pool_mutex){+.+.}-{4:4}: [ 380.294994][T18284] __mutex_lock+0x19f/0x1300 [ 380.300135][T18284] __alloc_workqueue+0x9ef/0x1e90 [ 380.305698][T18284] alloc_workqueue_noprof+0xe3/0x210 [ 380.311524][T18284] padata_alloc+0xc1/0x370 [ 380.316487][T18284] pcrypt_init_padata+0x27/0x100 [ 380.321968][T18284] pcrypt_init+0x60/0xc0 [ 380.326753][T18284] do_one_initcall+0x250/0x8d0 [ 380.332071][T18284] do_initcall_level+0x104/0x190 [ 380.337575][T18284] do_initcalls+0x59/0xa0 [ 380.342444][T18284] kernel_init_freeable+0x2a6/0x3e0 [ 380.348183][T18284] kernel_init+0x1d/0x1d0 [ 380.353063][T18284] ret_from_fork+0x51e/0xb90 [ 380.358203][T18284] ret_from_fork_asm+0x1a/0x30 [ 380.363517][T18284] [ 380.363517][T18284] -> #7 (cpu_hotplug_lock){++++}-{0:0}: [ 380.371292][T18284] cpus_read_lock+0x42/0x160 [ 380.376431][T18284] static_key_slow_inc+0x12/0x30 [ 380.381915][T18284] nbd_genl_reconfigure+0x132f/0x1ea0 [ 380.387826][T18284] genl_family_rcv_msg_doit+0x22a/0x330 [ 380.393911][T18284] genl_rcv_msg+0x61c/0x7a0 [ 380.398955][T18284] netlink_rcv_skb+0x232/0x4b0 [ 380.404268][T18284] genl_rcv+0x28/0x40 [ 380.408790][T18284] netlink_unicast+0x80f/0x9b0 [ 380.414108][T18284] netlink_sendmsg+0x813/0xb40 [ 380.419431][T18284] ____sys_sendmsg+0x972/0x9f0 [ 380.424738][T18284] ___sys_sendmsg+0x2a5/0x360 [ 380.429953][T18284] __x64_sys_sendmsg+0x1bd/0x2a0 [ 380.435428][T18284] do_syscall_64+0x14d/0xf80 [ 380.440555][T18284] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.446981][T18284] [ 380.446981][T18284] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 380.454650][T18284] __mutex_lock+0x19f/0x1300 [ 380.459784][T18284] nbd_queue_rq+0x37b/0x1100 [ 380.464916][T18284] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 380.471000][T18284] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 380.477872][T18284] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 380.484390][T18284] blk_mq_run_hw_queue+0x348/0x4f0 [ 380.490042][T18284] blk_mq_dispatch_list+0xd16/0xe10 [ 380.495788][T18284] blk_mq_flush_plug_list+0x48d/0x570 [ 380.501697][T18284] __blk_flush_plug+0x3ed/0x4d0 [ 380.507083][T18284] __submit_bio+0x28d/0x580 [ 380.512135][T18284] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 380.518327][T18284] block_read_full_folio+0x599/0x830 [ 380.524187][T18284] filemap_read_folio+0x137/0x3b0 [ 380.529759][T18284] do_read_cache_folio+0x358/0x590 [ 380.535411][T18284] read_part_sector+0xb6/0x2b0 [ 380.540710][T18284] adfspart_check_ICS+0xa5/0xa40 [ 380.546184][T18284] bdev_disk_changed+0x7ba/0x1550 [ 380.551754][T18284] blkdev_get_whole+0x380/0x510 [ 380.557140][T18284] bdev_open+0x31e/0xd30 [ 380.561920][T18284] blkdev_open+0x470/0x610 [ 380.566880][T18284] do_dentry_open+0x785/0x14e0 [ 380.572204][T18284] vfs_open+0x3b/0x340 [ 380.576848][T18284] path_openat+0x2e08/0x3860 [ 380.581977][T18284] do_file_open+0x23e/0x4a0 [ 380.587031][T18284] do_sys_openat2+0x113/0x200 [ 380.592262][T18284] __x64_sys_openat+0x138/0x170 [ 380.597657][T18284] do_syscall_64+0x14d/0xf80 [ 380.602784][T18284] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.609210][T18284] [ 380.609210][T18284] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 380.616462][T18284] __mutex_lock+0x19f/0x1300 [ 380.621596][T18284] nbd_queue_rq+0xc6/0x1100 [ 380.626645][T18284] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 380.632734][T18284] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 380.639601][T18284] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 380.646119][T18284] blk_mq_run_hw_queue+0x348/0x4f0 [ 380.651770][T18284] blk_mq_dispatch_list+0xd16/0xe10 [ 380.657506][T18284] blk_mq_flush_plug_list+0x48d/0x570 [ 380.663415][T18284] __blk_flush_plug+0x3ed/0x4d0 [ 380.668807][T18284] __submit_bio+0x28d/0x580 [ 380.673850][T18284] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 380.680024][T18284] block_read_full_folio+0x599/0x830 [ 380.685855][T18284] filemap_read_folio+0x137/0x3b0 [ 380.691415][T18284] do_read_cache_folio+0x358/0x590 [ 380.697088][T18284] read_part_sector+0xb6/0x2b0 [ 380.702391][T18284] adfspart_check_ICS+0xa5/0xa40 [ 380.707870][T18284] bdev_disk_changed+0x7ba/0x1550 [ 380.713431][T18284] blkdev_get_whole+0x380/0x510 [ 380.718826][T18284] bdev_open+0x31e/0xd30 [ 380.723610][T18284] blkdev_open+0x470/0x610 [ 380.728576][T18284] do_dentry_open+0x785/0x14e0 [ 380.733882][T18284] vfs_open+0x3b/0x340 [ 380.738496][T18284] path_openat+0x2e08/0x3860 [ 380.743621][T18284] do_file_open+0x23e/0x4a0 [ 380.748657][T18284] do_sys_openat2+0x113/0x200 [ 380.753880][T18284] __x64_sys_openat+0x138/0x170 [ 380.759280][T18284] do_syscall_64+0x14d/0xf80 [ 380.764414][T18284] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.770847][T18284] [ 380.770847][T18284] -> #4 (set->srcu){.+.+}-{0:0}: [ 380.777990][T18284] __synchronize_srcu+0xca/0x300 [ 380.783474][T18284] elevator_switch+0x1e8/0x7a0 [ 380.788786][T18284] elevator_change+0x2cc/0x450 [ 380.794099][T18284] elevator_set_default+0x36c/0x430 [ 380.799840][T18284] blk_register_queue+0x366/0x430 [ 380.805410][T18284] __add_disk+0x677/0xd50 [ 380.810287][T18284] add_disk_fwnode+0xfb/0x480 [ 380.815506][T18284] nbd_dev_add+0x72c/0xb50 [ 380.820464][T18284] nbd_init+0x168/0x1f0 [ 380.825163][T18284] do_one_initcall+0x250/0x8d0 [ 380.830474][T18284] do_initcall_level+0x104/0x190 [ 380.835953][T18284] do_initcalls+0x59/0xa0 [ 380.840824][T18284] kernel_init_freeable+0x2a6/0x3e0 [ 380.846590][T18284] kernel_init+0x1d/0x1d0 [ 380.851461][T18284] ret_from_fork+0x51e/0xb90 [ 380.856593][T18284] ret_from_fork_asm+0x1a/0x30 [ 380.861902][T18284] [ 380.861902][T18284] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 380.869746][T18284] __mutex_lock+0x19f/0x1300 [ 380.874877][T18284] elevator_change+0x1b3/0x450 [ 380.880178][T18284] elevator_set_none+0xb5/0x140 [ 380.885576][T18284] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 380.891925][T18284] nbd_start_device+0x17f/0xb10 [ 380.897312][T18284] nbd_genl_connect+0x165b/0x1cf0 [ 380.902877][T18284] genl_family_rcv_msg_doit+0x22a/0x330 [ 380.908972][T18284] genl_rcv_msg+0x61c/0x7a0 [ 380.914013][T18284] netlink_rcv_skb+0x232/0x4b0 [ 380.919333][T18284] genl_rcv+0x28/0x40 [ 380.923853][T18284] netlink_unicast+0x80f/0x9b0 [ 380.929157][T18284] netlink_sendmsg+0x813/0xb40 [ 380.934496][T18284] ____sys_sendmsg+0x972/0x9f0 [ 380.939811][T18284] ___sys_sendmsg+0x2a5/0x360 [ 380.945047][T18284] __x64_sys_sendmsg+0x1bd/0x2a0 [ 380.950542][T18284] do_syscall_64+0x14d/0xf80 [ 380.955682][T18284] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.962127][T18284] [ 380.962127][T18284] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 380.970759][T18284] blk_alloc_queue+0x546/0x680 [ 380.976061][T18284] __blk_mq_alloc_disk+0x197/0x390 [ 380.981721][T18284] nbd_dev_add+0x499/0xb50 [ 380.986693][T18284] nbd_init+0x168/0x1f0 [ 380.991396][T18284] do_one_initcall+0x250/0x8d0 [ 380.996707][T18284] do_initcall_level+0x104/0x190 [ 381.002195][T18284] do_initcalls+0x59/0xa0 [ 381.007070][T18284] kernel_init_freeable+0x2a6/0x3e0 [ 381.012811][T18284] kernel_init+0x1d/0x1d0 [ 381.017694][T18284] ret_from_fork+0x51e/0xb90 [ 381.022821][T18284] ret_from_fork_asm+0x1a/0x30 [ 381.028125][T18284] [ 381.028125][T18284] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 381.035359][T18284] fs_reclaim_acquire+0x71/0x100 [ 381.040836][T18284] prepare_alloc_pages+0x152/0x650 [ 381.046489][T18284] __alloc_frozen_pages_noprof+0x12f/0x380 [ 381.052831][T18284] __alloc_pages_noprof+0xa/0x30 [ 381.058307][T18284] pcpu_populate_chunk+0x182/0xb30 [ 381.063982][T18284] pcpu_alloc_noprof+0xc6c/0x19c0 [ 381.069584][T18284] xt_percpu_counter_alloc+0x161/0x220 [ 381.075586][T18284] translate_table+0x1332/0x20b0 [ 381.081064][T18284] ip6t_register_table+0x11b/0x800 [ 381.086710][T18284] ip6table_security_table_init+0x41/0x70 [ 381.092973][T18284] xt_find_table_lock+0x30c/0x3e0 [ 381.098538][T18284] xt_request_find_table_lock+0x26/0x100 [ 381.104728][T18284] do_ip6t_get_ctl+0x716/0x1230 [ 381.110115][T18284] nf_getsockopt+0x26e/0x290 [ 381.115245][T18284] ipv6_getsockopt+0x1fd/0x2b0 [ 381.120547][T18284] do_sock_getsockopt+0x2d3/0x3f0 [ 381.126126][T18284] __x64_sys_getsockopt+0x1a4/0x240 [ 381.131876][T18284] do_syscall_64+0x14d/0xf80 [ 381.137226][T18284] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.143752][T18284] [ 381.143752][T18284] -> #0 (pcpu_alloc_mutex){+.+.}-{4:4}: [ 381.151509][T18284] __lock_acquire+0x15a5/0x2cf0 [ 381.156910][T18284] lock_acquire+0xf0/0x2e0 [ 381.161883][T18284] __mutex_lock+0x19f/0x1300 [ 381.167031][T18284] pcpu_alloc_noprof+0x218/0x19c0 [ 381.172598][T18284] __alloc_workqueue+0xa81/0x1e90 [ 381.178159][T18284] alloc_workqueue_noprof+0xe3/0x210 [ 381.183985][T18284] ib_mad_init_device+0x944/0x20a0 [ 381.189635][T18284] add_client_context+0x37c/0x7a0 [ 381.195209][T18284] enable_device_and_get+0x19c/0x3e0 [ 381.201057][T18284] ib_register_device+0x110f/0x13e0 [ 381.206817][T18284] rxe_register_device+0x1e3/0x350 [ 381.212478][T18284] rxe_net_add+0x81/0x110 [ 381.217356][T18284] rxe_newlink+0xdd/0x190 [ 381.222221][T18284] nldev_newlink+0x5bd/0x650 [ 381.227356][T18284] rdma_nl_rcv+0x6d7/0xa10 [ 381.232336][T18284] netlink_unicast+0x80f/0x9b0 [ 381.237653][T18284] netlink_sendmsg+0x813/0xb40 [ 381.242958][T18284] ____sys_sendmsg+0x972/0x9f0 [ 381.248285][T18284] ___sys_sendmsg+0x2a5/0x360 [ 381.253587][T18284] __x64_sys_sendmsg+0x1bd/0x2a0 [ 381.259069][T18284] do_syscall_64+0x14d/0xf80 [ 381.264203][T18284] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.270629][T18284] [ 381.270629][T18284] other info that might help us debug this: [ 381.270629][T18284] [ 381.280866][T18284] Chain exists of: [ 381.280866][T18284] pcpu_alloc_mutex --> cpu_hotplug_lock --> wq_pool_mutex [ 381.280866][T18284] [ 381.293936][T18284] Possible unsafe locking scenario: [ 381.293936][T18284] [ 381.301400][T18284] CPU0 CPU1 [ 381.306804][T18284] ---- ---- [ 381.312178][T18284] lock(wq_pool_mutex); [ 381.316442][T18284] lock(cpu_hotplug_lock); [ 381.323496][T18284] lock(wq_pool_mutex); [ 381.330272][T18284] lock(pcpu_alloc_mutex); [ 381.334792][T18284] [ 381.334792][T18284] *** DEADLOCK *** [ 381.334792][T18284] [ 381.342948][T18284] 6 locks held by syz.3.3676/18284: [ 381.348164][T18284] #0: ffffffff9a64dfd8 (&rdma_nl_types[idx].sem){.+.+}-{4:4}, at: rdma_nl_rcv+0x32b/0xa10 [ 381.358205][T18284] #1: ffffffff8f935a90 (link_ops_rwsem){++++}-{4:4}, at: nldev_newlink+0x42a/0x650 [ 381.367652][T18284] #2: ffffffff8f927310 (devices_rwsem){++++}-{4:4}, at: enable_device_and_get+0xff/0x3e0 [ 381.377599][T18284] #3: ffffffff8f927610 (clients_rwsem){++++}-{4:4}, at: enable_device_and_get+0x165/0x3e0 [ 381.387634][T18284] #4: ffff88807c578638 (&device->client_data_rwsem){++++}-{4:4}, at: add_client_context+0x33c/0x7a0 [ 381.398527][T18284] #5: ffffffff8e5fcd08 (wq_pool_mutex){+.+.}-{4:4}, at: __alloc_workqueue+0x9ef/0x1e90 [ 381.408310][T18284] [ 381.408310][T18284] stack backtrace: [ 381.414213][T18284] CPU: 1 UID: 0 PID: 18284 Comm: syz.3.3676 Not tainted syzkaller #0 PREEMPT(full) [ 381.414235][T18284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 381.414246][T18284] Call Trace: [ 381.414256][T18284] [ 381.414265][T18284] dump_stack_lvl+0xe8/0x150 [ 381.414292][T18284] print_circular_bug+0x2e1/0x300 [ 381.414322][T18284] check_noncircular+0x12e/0x150 [ 381.414353][T18284] __lock_acquire+0x15a5/0x2cf0 [ 381.414384][T18284] ? lockdep_unlock+0x5d/0xd0 [ 381.414406][T18284] lock_acquire+0xf0/0x2e0 [ 381.414428][T18284] ? pcpu_alloc_noprof+0x218/0x19c0 [ 381.414453][T18284] __mutex_lock+0x19f/0x1300 [ 381.414475][T18284] ? pcpu_alloc_noprof+0x218/0x19c0 [ 381.414494][T18284] ? __mutex_trylock_common+0x158/0x260 [ 381.414522][T18284] ? preempt_schedule_thunk+0x16/0x30 [ 381.414542][T18284] ? preempt_schedule_common+0x82/0xd0 [ 381.414562][T18284] ? preempt_schedule_thunk+0x16/0x30 [ 381.414579][T18284] ? pcpu_alloc_noprof+0x218/0x19c0 [ 381.414601][T18284] ? __pfx___mutex_lock+0x10/0x10 [ 381.414621][T18284] ? __mutex_lock+0x32d/0x1300 [ 381.414648][T18284] ? __alloc_workqueue+0x9ef/0x1e90 [ 381.414667][T18284] pcpu_alloc_noprof+0x218/0x19c0 [ 381.414687][T18284] ? rcu_is_watching+0x15/0xb0 [ 381.414713][T18284] ? __kasan_kmalloc+0x93/0xb0 [ 381.414734][T18284] ? __kmalloc_cache_node_noprof+0x3ef/0x6b0 [ 381.414758][T18284] __alloc_workqueue+0xa81/0x1e90 [ 381.414781][T18284] alloc_workqueue_noprof+0xe3/0x210 [ 381.414801][T18284] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 381.414825][T18284] ib_mad_init_device+0x944/0x20a0 [ 381.414860][T18284] ? __pfx_ib_mad_init_device+0x10/0x10 [ 381.414879][T18284] ? do_raw_spin_unlock+0xf5/0x210 [ 381.414898][T18284] ? _raw_spin_unlock+0x28/0x50 [ 381.414923][T18284] add_client_context+0x37c/0x7a0 [ 381.414942][T18284] ? __pfx_add_client_context+0x10/0x10 [ 381.414957][T18284] ? xa_find+0x25b/0x2b0 [ 381.414984][T18284] enable_device_and_get+0x19c/0x3e0 [ 381.415011][T18284] ? __pfx_enable_device_and_get+0x10/0x10 [ 381.415040][T18284] ? device_add+0x70b/0xb70 [ 381.415064][T18284] ib_register_device+0x110f/0x13e0 [ 381.415095][T18284] ? __pfx_ib_register_device+0x10/0x10 [ 381.415122][T18284] ? xas_start+0x3d4/0x770 [ 381.415145][T18284] ? xa_load+0x60/0x210 [ 381.415166][T18284] ? xa_load+0x60/0x210 [ 381.415186][T18284] ? xa_load+0x60/0x210 [ 381.415206][T18284] ? xa_load+0x1db/0x210 [ 381.415230][T18284] ? ib_device_set_netdev+0x5c9/0x6d0 [ 381.415250][T18284] rxe_register_device+0x1e3/0x350 [ 381.415276][T18284] rxe_net_add+0x81/0x110 [ 381.415300][T18284] rxe_newlink+0xdd/0x190 [ 381.415320][T18284] nldev_newlink+0x5bd/0x650 [ 381.415345][T18284] ? __pfx_nldev_newlink+0x10/0x10 [ 381.415404][T18284] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 381.415425][T18284] ? arch_stack_walk+0xfb/0x150 [ 381.415474][T18284] ? bpf_lsm_capable+0x9/0x20 [ 381.415498][T18284] ? security_capable+0x7e/0x2c0 [ 381.415524][T18284] ? __pfx_nldev_newlink+0x10/0x10 [ 381.415547][T18284] rdma_nl_rcv+0x6d7/0xa10 [ 381.415576][T18284] ? __pfx_rdma_nl_rcv+0x10/0x10 [ 381.415601][T18284] ? __netlink_lookup+0x7e4/0x8b0 [ 381.415644][T18284] ? netlink_deliver_tap+0x2e/0x1b0 [ 381.415676][T18284] netlink_unicast+0x80f/0x9b0 [ 381.415704][T18284] ? __pfx_netlink_unicast+0x10/0x10 [ 381.415729][T18284] ? netlink_sendmsg+0x650/0xb40 [ 381.415745][T18284] ? skb_put+0x11b/0x210 [ 381.415764][T18284] netlink_sendmsg+0x813/0xb40 [ 381.415784][T18284] ? __pfx_netlink_sendmsg+0x10/0x10 [ 381.415802][T18284] ? aa_sock_msg_perm+0xf1/0x1b0 [ 381.415828][T18284] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 381.415850][T18284] ____sys_sendmsg+0x972/0x9f0 [ 381.415875][T18284] ? __pfx_____sys_sendmsg+0x10/0x10 [ 381.415899][T18284] ? import_iovec+0x73/0xa0 [ 381.415925][T18284] ___sys_sendmsg+0x2a5/0x360 [ 381.415948][T18284] ? __pfx____sys_sendmsg+0x10/0x10 [ 381.415972][T18284] ? futex_wake+0x4ac/0x580 [ 381.416010][T18284] ? __fget_files+0x2a/0x420 [ 381.416037][T18284] ? __fget_files+0x3a0/0x420 [ 381.416068][T18284] __x64_sys_sendmsg+0x1bd/0x2a0 [ 381.416090][T18284] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 381.416115][T18284] ? rcu_is_watching+0x15/0xb0 [ 381.416145][T18284] do_syscall_64+0x14d/0xf80 [ 381.416165][T18284] ? trace_irq_disable+0x3b/0x150 [ 381.416181][T18284] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.416199][T18284] ? clear_bhb_loop+0x40/0x90 [ 381.416230][T18284] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.416248][T18284] RIP: 0033:0x7fe00fb9c799 [ 381.416264][T18284] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 381.416280][T18284] RSP: 002b:00007fe0109cb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 381.416299][T18284] RAX: ffffffffffffffda RBX: 00007fe00fe16090 RCX: 00007fe00fb9c799 [ 381.416312][T18284] RDX: 000000002400c000 RSI: 00002000000000c0 RDI: 000000000000000e [ 381.416324][T18284] RBP: 00007fe00fc32c99 R08: 0000000000000000 R09: 0000000000000000 [ 381.416335][T18284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 381.416345][T18284] R13: 00007fe00fe16128 R14: 00007fe00fe16090 R15: 00007ffdfed65158 [ 381.416365][T18284] [ 381.994352][T18284] RDS/IB: syz2: added [ 381.999907][T18284] smc: adding ib device syz2 with port count 1 [ 382.006117][T18284] smc: ib device syz2 port 1 has no pnetid [ 382.012336][ T8455] lo speed is unknown, defaulting to 1000 [ 382.019646][T18284] lo speed is unknown, defaulting to 1000 [ 382.138705][T18284] lo speed is unknown, defaulting to 1000 [ 382.228016][T18284] lo speed is unknown, defaulting to 1000 [ 382.303633][T18284] lo speed is unknown, defaulting to 1000 [ 382.377766][T18284] lo speed is unknown, defaulting to 1000 [ 382.454223][T18284] lo speed is unknown, defaulting to 1000 [ 382.529053][T18284] lo speed is unknown, defaulting to 1000 [ 383.708629][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)