last executing test programs: 2m56.054188908s ago: executing program 4 (id=1145): mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000100100000c"], 0x28, 0xe000}, 0x5}], 0x1, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x74, 0x2, 0x9, 0x5, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x2}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x4}, @NFCTH_TUPLE={0xc, 0x2, [@CTA_TUPLE_ZONE={0x6}]}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0xc, 0x2, [@CTA_TUPLE_ZONE={0x6}]}, @NFCTH_STATUS={0x8}, @NFCTH_QUEUE_NUM={0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xa}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x74}, 0x1, 0x0, 0x0, 0x4040}, 0x20048080) r1 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f00000001c0)={'nat\x00', 0x0, 0x0, 0x90, [0x4, 0x80, 0xffffffffffffffc0, 0xfff, 0xfffffffffffffff7, 0xd], 0x0, 0x0, 0x0}, &(0x7f0000000240)=0x108) 2m55.904366839s ago: executing program 4 (id=1149): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000800)=@updpolicy={0xb8, 0x14, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x58, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@ipv6_newaddr={0x20, 0x14, 0x8, 0x70bd28, 0x25dfdbfd, {0xa, 0x0, 0x13, 0xca, r2}, [@IFA_FLAGS={0x8, 0x8, 0x90}]}, 0x20}, 0x1, 0x0, 0x0, 0x8010}, 0x4000040) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x4, 0x0, 0x1, 0xfffffffffffffff4}], {0x95, 0x0, 0x700}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendto$packet(0xffffffffffffffff, &(0x7f00000002c0)="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", 0xfc, 0x10, &(0x7f00000003c0)={0x11, 0x2, r2, 0x1, 0xe, 0x6, @random="80629e1feb3e"}, 0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000d80)=@newlink={0x34, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, r7, 0x300, 0x8002}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ip6vti={{0xb}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@ipv6_newaddrlabel={0x38, 0x48, 0x1, 0x70bd2d, 0x25dfdbfb, {0xa, 0x0, 0x80}, [@IFAL_LABEL={0x8, 0x2, 0xc}, @IFAL_ADDRESS={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}]}, 0x38}}, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc) 2m55.639443361s ago: executing program 4 (id=1154): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4058587a, &(0x7f00000002c0)={{r0, &(0x7f0000000000)='veth0_to_bond\x00', 0x87e5e39bab029ae3, &(0x7f0000000080)={@_ha_fsid={[0x8, 0x9]}, {0x3, 0x0, 0xfff, 0x3}}, 0x9, &(0x7f00000000c0), &(0x7f0000000100)=0x2}, {[0x8001, 0x8, 0x5, 0x5]}, 0x200, 0x77, &(0x7f0000000240)=""/119}) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000340)={0x0, 0x61c2, 0x7, [0x6, 0xfc, 0x3, 0x7ff, 0x1, 0x71d, 0xcfe]}, &(0x7f0000000380)=0x16) getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f00000003c0)={r3, 0x10001, 0x6058, 0x4}, &(0x7f0000000400)=0x10) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24040804}, 0x4008000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000680)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r4, {0x4}, {}, {0xfff3}}}, 0x24}}, 0x800) 2m55.392060965s ago: executing program 4 (id=1159): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @multicast1}}, 0x24) listen(r0, 0xffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x7, 0x4, 0x8, 0x2}, 0x48) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000003, 0x30, r1, 0xef12000) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000080)={r1, &(0x7f0000000300), 0x0}, 0x20) 2m55.186227404s ago: executing program 4 (id=1162): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000100), 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x2008851}, 0x0) 2m55.044205087s ago: executing program 4 (id=1167): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000100039040000000000000000000003e4", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c00028005000100060000003c1a910d7500615d306851afb89df197fd61d1db27877583cc7b33820b95673fd8013c198891f02f251c4938a986904e"], 0x3c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), r0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'wp384-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x800) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b80)={0x14, 0x27, 0x1, 0x7fff6, 0x25dfdbfe, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4004884}, 0x4) sendmmsg$alg(r2, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b575", 0x2}], 0x1, 0x0, 0x0, 0x20040001}], 0x1, 0x8001) accept4(r2, 0x0, 0x0, 0x800) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) 2m39.88941535s ago: executing program 32 (id=1167): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000100039040000000000000000000003e4", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c00028005000100060000003c1a910d7500615d306851afb89df197fd61d1db27877583cc7b33820b95673fd8013c198891f02f251c4938a986904e"], 0x3c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), r0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'wp384-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x800) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b80)={0x14, 0x27, 0x1, 0x7fff6, 0x25dfdbfe, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4004884}, 0x4) sendmmsg$alg(r2, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b575", 0x2}], 0x1, 0x0, 0x0, 0x20040001}], 0x1, 0x8001) accept4(r2, 0x0, 0x0, 0x800) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) 2m27.377117315s ago: executing program 2 (id=1571): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x1f, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x4000851}, 0x4040054) r2 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xffffffffffff0000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @mss={0x2, 0xb}, @mss, @window={0x3, 0x6, 0xff81}, @timestamp, @timestamp, @sack_perm, @window={0x3, 0x800, 0x5}], 0x8) sendto$inet(r3, &(0x7f0000000000)="b8", 0x1, 0x2400a044, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r3, &(0x7f0000000380)='x', 0x1, 0x480c1, 0x0, 0x0) r4 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r4, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x810, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a00)=ANY=[@ANYBLOB="240000004100070130bd7000fedbdf326eb74d841750afd6c0d325027c000004002d8008"], 0x24}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={0x0, &(0x7f0000000740)=""/83, 0x0, 0x53, 0x1, 0xb0}, 0x20) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000000200)={'syzkaller0\x00', @random="2b0100004ec6"}) ioctl$TUNSETLINK(r6, 0x400454cd, 0x308) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r8) 2m27.081631157s ago: executing program 2 (id=1574): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$int_in(r0, 0x5421, &(0x7f0000000000)=0xa96) sendto$inet(r0, 0x0, 0x0, 0x2004c000, &(0x7f0000000140)={0x2, 0x4e21, @remote}, 0x10) pipe(&(0x7f0000000080)) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0xf3a, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x3}, {0x0, [0x2e]}}, 0x0, 0x1b, 0x0, 0x0, 0x0, 0x10000, @value=r1}, 0x28) socket$can_bcm(0x1d, 0x2, 0x2) socket$can_bcm(0x1d, 0x2, 0x2) (async) socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x8000, 0x10, 0xfff, 0x7, {{0x45, 0x4, 0x0, 0x2, 0x114, 0x67, 0x0, 0x3, 0x29, 0x0, @broadcast, @remote, {[@cipso={0x86, 0x5f, 0x3, [{0x6, 0x6, "f0859eb9"}, {0x5, 0x12, "6bd9f341962be27d39b0b030afafd3f0"}, {0x0, 0x7, "42164e939b"}, {0x2, 0x6, "a0f9d843"}, {0x1, 0x4, "8ed6"}, {0x2, 0xd, "ec5102ad6fdf64d45778e0"}, {0x7, 0xf, "af0bbab9f722701b3ea8280274"}, {0x1, 0xf, "d66617585a7f7851bb15aa42bb"}, {0x0, 0x5, "f05076"}]}, @cipso={0x86, 0x4d, 0x3, [{0x0, 0x9, "f3a8a99df03481"}, {0x7, 0x11, "259d8796665fe58f65838b70b52694"}, {0x7, 0xe, "a7f98cbfc69bc731e5a13223"}, {0x5, 0x8, "97f36191cd97"}, {0x6, 0x6, "65115c9f"}, {0x7, 0x11, "51e65a3f214810fc7ef8c02cd65144"}]}, @timestamp_addr={0x44, 0x3c, 0xbd, 0x1, 0xa, [{@local, 0x7}, {@local, 0x3ff}, {@rand_addr=0x64010100, 0x3}, {@local, 0x2}, {@empty, 0x401}, {@broadcast, 0x6}, {@private=0xa010101, 0x1}]}, @ssrr={0x89, 0x17, 0x9, [@empty, @multicast1, @remote, @multicast2, @local]}, @end]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x8000, 0x10, 0xfff, 0x7, {{0x45, 0x4, 0x0, 0x2, 0x114, 0x67, 0x0, 0x3, 0x29, 0x0, @broadcast, @remote, {[@cipso={0x86, 0x5f, 0x3, [{0x6, 0x6, "f0859eb9"}, {0x5, 0x12, "6bd9f341962be27d39b0b030afafd3f0"}, {0x0, 0x7, "42164e939b"}, {0x2, 0x6, "a0f9d843"}, {0x1, 0x4, "8ed6"}, {0x2, 0xd, "ec5102ad6fdf64d45778e0"}, {0x7, 0xf, "af0bbab9f722701b3ea8280274"}, {0x1, 0xf, "d66617585a7f7851bb15aa42bb"}, {0x0, 0x5, "f05076"}]}, @cipso={0x86, 0x4d, 0x3, [{0x0, 0x9, "f3a8a99df03481"}, {0x7, 0x11, "259d8796665fe58f65838b70b52694"}, {0x7, 0xe, "a7f98cbfc69bc731e5a13223"}, {0x5, 0x8, "97f36191cd97"}, {0x6, 0x6, "65115c9f"}, {0x7, 0x11, "51e65a3f214810fc7ef8c02cd65144"}]}, @timestamp_addr={0x44, 0x3c, 0xbd, 0x1, 0xa, [{@local, 0x7}, {@local, 0x3ff}, {@rand_addr=0x64010100, 0x3}, {@local, 0x2}, {@empty, 0x401}, {@broadcast, 0x6}, {@private=0xa010101, 0x1}]}, @ssrr={0x89, 0x17, 0x9, [@empty, @multicast1, @remote, @multicast2, @local]}, @end]}}}}}) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=@newlink={0x54, 0x10, 0x503, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r3, 0x0, 0x6230}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x21400, 0x8000}}}}}}, @IFLA_ADDRESS={0xa, 0x3, @random="3a712f0756b8"}]}, 0x54}}, 0x0) 2m26.848815717s ago: executing program 2 (id=1579): mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) (async) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x3, 0x0, @mcast2}, 0x1c) (async) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) (async) r2 = socket$inet_sctp(0x2, 0x0, 0x84) setsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000100)={r1, 0x3, 0x5, 0x945, 0xf549, 0x7}, 0x14) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000140)={r1, 0xf371}, 0x8) r3 = socket(0x15, 0x5, 0x0) r4 = socket(0x10, 0x3, 0x0) (async) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000016c0)=@newqdisc={0x48, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x3}, {0xffff, 0xffff}, {0xfff3, 0xd}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x8000, 0x4, 0x7, 0x15, 0x17, 0xb}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmmsg$sock(r0, &(0x7f0000002880)=[{{&(0x7f0000000040)=@isdn={0x22, 0x2, 0x2, 0x7, 0x29}, 0x80, &(0x7f0000003ec0)=[{&(0x7f00000000c0)="3681b0b89f534a51f4cb874eb84cf6999a0966e88d1a0ccb5a59dbddcd7c0cb179871710fe24d68042b1", 0x2a}, {&(0x7f0000000100)}, {&(0x7f0000000300)="cc2903edae6938dc1389a831d143a71281fcda5308f138bdb0060f49658da868fdb01bf0b269e20506802348810c464635f44a3ab4e0bff8eb1f89b84d455067c3b430882930b501dc0c60888015a9f7e3a2a50cf52acf5618fc3fbab773e328028926fbf6f27a3a9c620dc3667e59d2062b351a9522745edcde66604905822540c13206f8b89f5d773f3c8477fd6b8b2fee9b6fb0ac7130c439fff85ef2e4cc35a47c7a826afc1745fdcb4731fdb0247f86c2f4db71b32710cba00e5086999262c5b603ffb7e02b313290021301ad0a59c024e60bc48f1538922e952d5cd90a1cb66631024d7122ce939dd343db28dafb1849f49c", 0xf5}, {&(0x7f0000000480)="9c88463c50a54d8952709e534078e8f72517d4fc4af734ffe5590b010607ab965b2a9ae2388b715ff39bf2ce8df2923ea33030124508dcf89bb40ee58c67c9cc0af7b613452671c62cd731fa46ac74d93abd58cca353ee39c18b2578495a78dc84af127d1c20258fd350b10e6f6dfe9e2e3af23dadbe1d594452cdf740aa8e9d60", 0x81}, {&(0x7f00000029c0)="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", 0x207}, {&(0x7f0000000580)="6ab6dc5872cec460ddb9a8ca7fd7cdc5cdc0cf93830f277a4666fa159c905d40819c6a7e250e23", 0x27}, {&(0x7f00000005c0)="da0a8e655d3a9b97177b98aa9bc2ddc399d265114371d76710d03c44d6afb91ee261688ef598fa8b300967a53570b6327f694e7936a3143ef062a9bbed9f11f84a717fdecbb5a7e1a3539121d74486092b7fe95f3ca27702029c9c0098322325e5d4838f51d7ea4d43e830", 0x6b}, {&(0x7f0000000640)="b78ac23caddd5348bb62c578d3e182378b662ce1e3c0c333a78caea3baffa72aafa43e8458cb55261b0a5f4380", 0x2d}, {&(0x7f0000000680)="951d84d07d4cb7ef7819e1b0c3bdfecea9c41139394d6c990fa65dba46ff5db1f4e739d0feea33d33dc64c4ce66e4525f42468ad9918d26e7168acc8c6be32927faa5664ea666a322e95ebf6ed9542223dbb1f08138559f2058ef2d68b3cae85f185a37f8d99fce96f7037d92fd18054923c6bd269804a2a70401492fe02a6b307da8ee10363c168f15e2905acadf7fec085bef0b2ee2788fbc04134081e8661a2e9c3817d4f2741fdd562d66d6d4a", 0xaf}, {&(0x7f0000003dc0)="caae4458746bca7991ca2d8eadb13192b80c42680d295135f4ceae07c4b826a2a418fb7c0c06ae216e7c36e07899c9c69887dc1d06b7f6d39a18749de3c1fe6d935401310a8d9f9302c36c04046b33298497845f425f409f04d05ea72e05a27e640e0d1a29a5c29ace413806ce220ea42e3aca0920071496fb0626d83c53b093ea01c7a46c4e3a293251090849788ef809c20bc71758b291640a0ac956b13a473fe3d10f2acd9f2678654695802a102654939ca8395a55fe49853f7e24a14a2dc6e574d041181812b5c93005ec52da6013334e6a1859dd66ab868b310054a7dd2b195b28821ac4f06db8efa1d2f15f7562f0b03c8fe05613c4", 0xf9}], 0xa, &(0x7f0000000800)=[@timestamping={{0x14, 0x1, 0x25, 0xfffffff9}}, @mark={{0x14, 0x1, 0x24, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0x67}}, @txtime={{0x18}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}], 0x78}}, {{0x0, 0x0, &(0x7f0000001900)=[{&(0x7f0000000880)="2529dcdb2a5bec9728a8071452cf5ebe86a511532e146ec67fda8c1993b5010f1a6f312226427e7c30ad92e5cddfd550ca60a74ec2cf1945d0e72aeeba8dd49716a3bd7d1b504bdcf77032d709671cdddc8d3ba55b9acbd504a1773a35a3f9b7ec1e0fc2a68d785abb536de4532f16a65a57362cb3c436a408714dcff307a696d493a990caa4a4c835c353e7abbea8262545d14c1f38acc17e3b54895e3904770969f3208faf617c4ffdaea77d851e10c1aeef29b03c0fe04a56e5eefca85e77f2648a2c1fceb69cd3710ed4b7684f3ec77fb4f549cb53c5433099ccc89dfe6012da8fa8de685387e4913b4d6fb2aeb446fd15536de9d8df7ff1a070bdaded0c1006365e7ead61883b0f88b338b10ed3b01bc2d7665b64533d5d18bd47d139ad37bd4926911e7717816d7a9e11de2780ede525d904ca960f9e08f219eff95ebfaf07021f51c46bb54569194e149f615827677ba8cb5f387bfa139de962cba3cabb30d5f60820139fb787d903a06285dd78b051b64e5431325a637e1d8991b46e71b07e51371307b7052b21e2ed78d823e38b8321a9ac5568863392fcacbdf7e27391dee0f37cf3f2c0dced4871980a02623c3c31e7dbfc47ea9522a3cbe532b828941d60925c05d69f7de96598530c48dd5c97b8c10bc5a33116944b90d77163c32172b9843ba1de01f2b58b526b1d8cf90ec3ff181541825965e6ce8ada84183591278693817cd7e225a5a84b4b8ff16fd26f27bda7b20d36330d4938f7a2c0c2d8a4bd97a88f6d72c4bebaa70a52b6fc5fff47fcf3f4e485cc70524238bec75ba5bbf7374b9feced3102063495f82183361d9faf9dbba48e3e83e9fb80c187820343a603b7f760230227efb8c08a2a70cd83040b77e7927943a06cb9a1719f4daad378f9cdd162e0ed484bfd5fe27fcf18ff40215058d79e301adb6fc10feec7a1099e71f4884cd8b80b9b63c99bd46faf37397bbf52f894371623eb6b4ff62171ffe2bf6036b89b587a76d3e28b8d0f5fc0d124c9010e47ec4ddd6c3eeae1dc87ec625d66d4fa6784fd3f0938fd97a8946e91f130fd1f1a557b13c556e326f5ed2f52ae7a919180080c6453a9ea46c624bbd8c3a362c72dc814a251aac28155fafe8ef57343867f4408c4b18735693f76cdee88ea6dd39d0b908657a56a65908c07ddaf4f7bd976c119e004f1ec05c571f928e10f2b1ede8ea2c0b321a20927b9959c4d1126f7b317f1bc9a095372a344dba901670a34be3cc06ec0f26dc2e8baf31422838e68fff4e1b14ae0225f857283d74290dc6f6ad20637445c1e9186d23850058c069d40b87f2e7ad11a36554349d4fea970835f76a26d670794560545a5405a8e5e097f6d3ab7857148c7a773284e37f093911b197503088751fd3d8eb0f8e42c80073968cf3a554462cd6d5fa8960eb2cf5a2efa81aafc011a71288775610ee423bdfc079dedaccf594563311e172eabc27c27a3abd849866113dae4854e35c8790144172dacf55df2a0deedb3c099ba17759c1390989b23eaf88bb230512a2ac96ec55297e3f274326474538c20f3f0d2d43e5c8fa3bb89092296edf78caa5de70d448437ee0c431211db96e15343001f5d2ac16029b33dc9164a4802725291d57cf87df7677913a86a21e701f00817671434704624ea09a87d05406aba22e17dcaa16dd93acd3d7da2c8a472e8edc03194dcc3a17aae3c599c3a99e94c8bf50a938587655a2ef23204238849b1b74121d84d20d9f359f61196727aeb221b0852737f63657262eb0720153cced1483c031f3754443ffc65332a6e76fd1a8b97fea8123a95e57397d68a2160c1f12060dcb7f5132b8958fbc67bb76214de7865635dd4a1197ebad51371729bb5a91736d6c1ee92f499ebdf3fce27ca4f10276eb57ffa9a529ad199ba938df94421812749e4c441665c3ad59b2852a4a63a9a858252dc4ac1e34da5cfd04752c5ba2f0d2514d558268898cec5680bda25d6c787869ea2328512b1e8a7098d18368b5dc064728889044f0de37938f729c5b03f83f0ded54e504a15d60e6eeefe684bca4eff5c58432e8d5c6f46a55b5e40bff914b7e5accd803c8302aefde11543ebb4952ac8d045f6264c9cb41abe179d6c3446aa21cc2fd223d47b569608f5512eb2f778bd46859ba9ce817d8ef34e8dd45e4eda44d8b782be11169c896db74afcc4fb1b5e1eb4a7fdec07eedbcfc6a11b807e6a5c2430cab0faa1c36defdfb04ccf0bf77e764aa522060bd251ff239399d6983d102abdcd4ade4dadac2dd0615ec2f6c8e4797b444f9bec0be31a035b5206a5e545ec622e122c931afe5a71bbd5e65c02a9f588230b69aeb9aab4cca0fa83a90e692c03041ce68b6fa355be9bbf91defd23b132cb21369ce132bbbd6960b5262f2ac5206df6c43f48ed8c8349b9a111582f3b65f20cd31ff9a55be68a13a9b15b43e090323ad06f80213c3db184bf1871e2a60df733794d19f845e388957c89122345c7ad6f3af507d602bf07a5839c5adf921253bc2d7df95bd672b0740f30c2192b1fc068e64c23453265367b9590e3b608793131fb6ab3d6225704d5f2ce8fa0e5840fd6ef1f0c12631878595da157b77dfe2424a70b3735e8da02cb55217f76e2dbbd080d0d2ce88dcef4dcd6d9b875646efccaaf11771b222beaecf5c09edb1e0f61b8e772762c44dcf47bb3e35cdb5917eb870ef20fd1616e4f333a49bad74b0f06dde07c202c456a76b7315a6bfcfc219ceffc255a976ea5cec22d465ef7bd03cc9dbbf12f6f2cffdeeb88ff0bf36b2c7ca7cb5f679a9133bee43e23643579fc483fb1a3ef40f721a1ba20cec6319b0718ca0995d88bfc6114780c46b613152c20a81c2057a6107c6ee555e0fc9bac4a16ba53b42dfeffc8704728747b302de25c69933bebe7593fbe7bc20e8c1b5d59ac1dd72df17fa47325308f4d75908488b6b534a96894ec6542b96b1c975fe6dcab5c72a339ca2a0184ad9f08c323e64f21f99ffda2402b3908b4c3cddfc5fc7d858b898a9c1f371ba2532ab01d902ce72d0de04b9ae5d36d27aee7101ebc8fc60c4dbfd64d46f3e6f874fa1d40800b23c7e628d260feb112ba1e3f31c83021f0320de9b3cd204fd9044c506e6b96bac96b7b3da9d18767cf0390b9f62ad8730253688ac6d54a728852e5906d45f7559a3ea93ae65ec10b4d08a44140cd5abd9d07b1ee6b4da40c981b24642f38f334a023fe5678382e4a9721a557096a6746e14e5645fe5313637adc240c840bc1bb1940dbf99ca1ba824981115980a3b69520ee30888ce147cee452672d1e526cab8f937d8c584e2dbc55f8e548012f1c9d7bbb30034da2ae7774fbbe427e3fdd26934ce651797a3c8a32a60749fae75535390b4e76995978b3dcad18e485e70be5bce56cd8add0cf856d9638e40e66250a5d1928789422bd3cd842197d76b104419f9cfb6dcbe8b15e6c3f551652d4bd7e30486ef2600848d9b4de1040bea7aa0cdef83f1b159c5bee44b5db2608e3cf05b6941a8db5c5f4b352bcf95157d149e7d4ba3adb01f31a26670405c8ed489e0e41224d9b4ab8bf305b8143edfc18196ac47ae82e0e97920f834f4d7fd02c3414d1901f23b00fa7d3185a4fecb601286b137e0948746d801242666423177877ed38c10c3a613733ed402ec035beb51db3dd5fa0d377cdd9686f9f7335f350ee73c35a9c1265e44b8fd1ce042bfe144548bd24d8515af3b32ae65a509f3e1aec273d4da09a7f777a04fb79cf7bc42a153892a39f8a6280b3b77157702771a1456592dabd99c92c7442aa9e2685599eebaec0134dd2e1280e227f91ae3614d698e1ecfc0e9fa69612b2e319df5dd975bb0ca029e86c94a03382e269a1dd2084a327916a82cab735d4769197e08b43980fb732c47466289b9861db01a30a7014610ff4227a102847e6001edbfe23096d54c2d5284a1ffc4869d1eb79c074b52c39099cd1649cfb2ee66b13cfa0bbea66e6fe7f4ccec8f5387776d7a91445168e752abe7c09d01dbfe0086527f7d2680ecd112ce1fcf299224281f6e57001031873baba8f4e0c201bda71849303a26de6858e96c1b0154b932ee3b176250e96665a26961469d6a46d572d070a66d5aa00d5066818473c3c3afac3860dd3501f7bc03527c32b2b6caa4e970ad8848f79dd4cd4f80f6715e8f7e9ca3a8fe627b4763c6669f1169b748f9f831d3dd42d76f1fd2c2dd24e8819e2214559eb63d9452eabf518efa081c60d530f30fa4e27c52b69600dfd422f9a86bb420dc97beef269a26dd05b3c0988e5d771a4f57e1abc755600abf08f46f9daa6523f74f150f8c6ec840a441aaa2745211daffbba7e1c60391802dbed7939571d2a21eef5a89fba6b9c929ada838de9ebc932d1fa6c165f7649e5f9570ac337e5470c6bf0e41a061d0f33797d46aa59539e0239d26c191c823734a3bd5ca3b32a5dc1d112d4cea2fb561fb6e56125f266463e0062db10bed26ea5a05cde44248099946c2e7e4d21ee0ec77453a8736f273af2464291063c2e9e95c796a2f94612be377d0e78df68510f2f9522ccf93387ba983fbbe53cf9befa8b4242708e27b986dd6edd134763183a79cd6cceff93e71cbe296728035a663e98b77a020279c4c567a021bfc80a90fb3bca970c5c0fc965e0334fd58ddd1763811e2d1e3197085602522b92f1545642fdba8f36dd0c8c896c1fd1cbc6b3d28dadf2b1af4b5bc7038751d8da02c087ca8385a6a4af0dcdafc2017a3941af719e610701021e264bc6cad6db6b81776f6a6c600a7f51aa3704230b8ef9526fc8f3377e997a8e142a3e18c3ad889953261e09983fb98b8a1f3e2c628dfd3ab5a07ba3ed7fda999c693ef05245796a85e991eaae70799d242de5c18b3e968c1b331befc367edcbb6f01d1f624846aa79f6e92de3d4b7bed3b897523b207c5f64f6e8d1e0aa6d5f27173831be4e524c9720550ef419e6dde655c191444488131c6a8053c10aa808fa576d2a927986a3c48f8d01c3e3e6ac5111cf9eec2f9b9c14de890ba2e07f0446d904f5c65a044cc944815497b9a2add11a2694d67fa283ee8183154b42a919fe51e674cff816f971a8eb7c4d7377bc9e6bf7fdd5799d066c2195c8c6b5402b6a4fdb793eef6da2e41d42fa9e1089e7f698efbc48f198e0d7781a5bfba60459f7fc7779155c86c03ef3d3385229c1bfaf32da39d242cae8d26b29faf6127810a9b5402d220a2cb7a65233157d710dc484669b0febbe5bd9e0cecf8b41b833b1836c3950b16f599daa2b67946d0a11461f54f356f2cf61622cb12b8ceb40776be9307968650fee1e5abb169eb641cf60c66e5538939a5e101e05c5f56bd35d0b5e7fe92dbfc292aa022b32f4a76a7d1830344ab46c237fc2d26225559866dc2dbf0f484cac640f03ee240e1e2d6ed9b38c017243b1ac96fe0ac4cfc4960848c96757f89472e9c7059c29fb518219423d001b100fdbf7fc7160b040a2f65075f18164d2971f9442a797685c605fd31250f4d02f0ec8147d4bba489e6028bc4121ef4d9a42e8dbe2ed361a75d4ea328310e68169964be0223992cba1c5e902741c86b3b92c12ad458a709defaea19bc285de587842a85b4cdb2945b33a167f9033104b3172eb563fd2484b3a2f95c00adde9889044deabc1c8659d63e62ee79826715d6db6047b68b4884bbac4cca4cb028a285ddbf5624aa4bfd55e031d91db6cc9045fa77e0d04e3faafef7365e57182384340746c554faede1d1af65b943634094d54adfcb3cdf9b8bb8f08295024b0e556", 0x1000}, {&(0x7f0000001880)="29c473fad6f5efc99bcd01cac532319103f82e1e60d3c4dd7de62e1e28e83cd9fafde36f1c7dbc5b2b213c956e45a289619bc001edb10485ddfdc7025102bec7ba3156862073fe40ded7582af8c5f569cc60478f3c9c361a7f00000016e171c28a5ed16eb92fc016944b8161", 0x6c}], 0x2, &(0x7f0000001940)=[@mark={{0x14, 0x1, 0x24, 0x8000}}, @txtime={{0x18, 0x1, 0x3d, 0x8f}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}, @mark={{0x14, 0x1, 0x24, 0x3}}, @mark={{0x14}}, @mark={{0x14}}, @mark={{0x14, 0x1, 0x24, 0x80000000}}, @txtime={{0x18, 0x1, 0x3d, 0xffffffffffffff7d}}, @timestamping={{0x14}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}], 0xf0}}, {{&(0x7f0000001a40)=@ax25={{0x3, @null, 0x4}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}, 0x80, &(0x7f0000003d00)=[{&(0x7f0000000740)="b575b7cb5580e62119f1f6f3ebdc742b5660d265144a65d9e6e5b1c93a302c9996f4ef7194f2e4c5f2f9d946ce88006dda6389fca4467c5d15faaae3487b48a5bbecdc68efdf77e91e0ee05e", 0x4c}, {&(0x7f0000001b40)="5b471e2e1075ac3199fb93701ffec6cbef131633e3563e983b8944ae0855a8ff6ba5ff0fa1112427d9445170df22b2c609246d2226434a6a620abdd64b9dae23d6be1f7b953fa16c1a9164599d3c77a100ca6b0b5f00333e6294d06b34ab545b898ffbfa690ab2da58d24b9d71dcd12f8bd33a4423203f3faf5341775915d022e7584b1a0866c4887632bbfd04c89acbaf61", 0x92}, {&(0x7f0000001c00)="cc690d8dc257d36642f05547716c30c037916858aa018344f74c86c39ffecc5dfebfb7830b2dfb1278aaec3d5ad4d81060e74c99ca93cd2f0dfddb33fd4236a92e025b045e67ab03d7ffa0a4ac2f30ecf8d0f137777f7d7fb6739da68e58963c2ce06f98944bb3f6b3a9c1e5129e4665a7141f14a445363e3ab428dcff07f48d13933e0c05c498cfc67cd3d0d30ec62257bb2409bdc188", 0x97}, {&(0x7f0000001cc0)="fd4e19831c29976db95d0d4d9fc48c1e659302dc28b22e6d9a8f12f01337ce0ad7e74ab8f67184093c3a1b5c298ccece7a9a2ee8cbde24ddb12490b3f95471844e596dff17782665defc9467bae3146533ca4bd427f627a61d3c7655927918dd8b543edf6c8e07a7a360ce5cb4c3f931662cf6f0f516cde63477a0fe6db5d8057ab418df2660814d25b3da0bce797c86ae6058817c144b3820779693abaca11e5ba0ef06db3dc5c4c913c69f4d9fe63f13da64f6ae77fa79a3c38b2a67b47d3b83d7", 0xc2}, {&(0x7f0000001dc0)="d623ce6a0b3952e07e2557d809a64a916cf23bcf16e0ed974b36ac78252133508c167e59d5895b108cbe21d642cdf5fae06988be956cd829ac192c56bab584d701538355bafeac331ce16187f048f3c9ceb197db94b3974a440b097c7b8eadc0712d760e559df34ed2fd61661f0678c86c1eb5a338ce8b7b27529abe8eb061cc221cbc183a693ebb4ffc71eff4597ca129", 0x91}, {&(0x7f0000001e80)="224d0546dc95da6e57386efb6b40910827f94ca030273bb44973ba74ab2f74c135c528f9f13a9b3230970150f6490b48c8480b331809348e0aaf134931135c", 0x3f}, {&(0x7f0000000180)="ef66ff45a82ba3d9e5eaada2b4c3e4ccce373feb40d318a99641bab78976f9bb9e55a15b1226d9457a4c6fb8a76b57794ee1394d388fbd36a36f31216fb92549d4e398f34a6c7418e207ce8617d185b74fa28ee6046455cfe9e7ed8ef136cdcd947acd42bd98d9210d228706d1c9e09d5167c08f4773a974d18f57740b7e66288406dfa3ea7f89242b790ac12e9975e9d6be349f06d1a80f5aa8203de0ffc252cf6fb1e1a4beb4eb471c516dd8692fb72e98aaa2", 0xb4}, {&(0x7f0000002c00)="2670af02b50181634c1d03d556d257a929c9682733b7df110c6e012448220a563ea8c9e850cc095675516b6b9568535621e455b5ab257b00f826a7c8871633d97b1647d72a7b20adf53481300676715a680944107ef699d8203f222dc23b47f3460b2a71d26599682e9f9b33507e72673c099e417f16305ba209d07364c5147b90b8e6fd4a70381ef63306a154112ea568fff31219f10ea1527a36", 0x9b}, {&(0x7f0000002cc0)="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", 0x1000}, {&(0x7f0000003cc0)="007565e6a76babc6b87054ca42367b2acdbc5185f8b25624e623b4c651d555f3d44e518c73", 0x25}], 0xa, &(0x7f0000001f40)=[@timestamping={{0x14, 0x1, 0x25, 0xfffffffb}}, @txtime={{0x18, 0x1, 0x3d, 0x10000}}], 0x30}}, {{&(0x7f0000001f80)=@in6={0xa, 0x4e20, 0x5, @private1, 0xa}, 0x80, &(0x7f00000024c0)=[{&(0x7f0000002000)='N:', 0x2}, {&(0x7f0000002040)="a41639b2ee7493dd8d7ae00806651a5f91a9a4d382f443ebb7c9678b27140dbd96d8cbab1a770772a7902baabfdb43dcff10f522ead2faf943b07462172468578b1d899a54d384049f28e3c58d1dfc18dc01abbad002e9e571d0d144bacd3a7b2cea8f7f071549df2ff6af21306fe0668efdeecdee8f19d41267854d8ab39bd4318987263d6627fa05dcff5cc2a9fc675a42a4266a919c778423dd40c5d6fbf12d3811fac0097775a6389656aa4c6fedc9d3fbfb6e7133612029d8db201a170d846f3a", 0xc3}, {&(0x7f0000002140)="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", 0xfe}, {&(0x7f0000002240)="f4d24da0e730be0d66e082d0a01f2877cad649af58a47d680d1607627e43e6", 0x1f}, {&(0x7f0000002280)="fc31ec34991837905c168c4de678aaf028bcd613a640a697f16b7fd5afcb512dd45d4b99c1ac6a7aae4052528cff0803c78aa9db74325274c13979d176e5b67f3d66aadcc8b397a01f9e3d2936ae1d9b5f95bd853f7a9d8681bf70fca7109d21db7eb1c0d9635baf06653404afe3e8173a57af3944a268cc30244b11089658ae5ca2a8eca278", 0x86}, {&(0x7f0000002340)="2dbf24d577b2442420c6505db1b6f2c6fd5cdf8f20076c77ccf05a7aed5c88a7e79339ed09061ad58cfe028b6b9ac9ea8bff31ed10fb4abe34f3dcee465e27bf2e3efcca0688454a1b6100363fb0199c8ea0ae34e72c37f37901e1cbc472b720a2cb0890d1315b579b2b9acc923ff067", 0x70}, {&(0x7f00000023c0)="46237da7d6a6", 0x6}, {&(0x7f0000002400)="e4c34fbb2ecd10df5d4608633df7c3308a466fa156d696c45c1ee3877e672383930a7992ecd9f10910eb7b06b07d66b1cf30d9b5ae635154f62a01b93439866d62e71a34766fdaeadac52b533897845809133c3d782c3932fd398d3250edf8e4f9d52e960036ce536aa369644d46108a24ea614e0f7d7997067bfe00e006b992c7290614d0032f76918ab30f702250502a8e44bc8fb45af83fc3eb5cb160c86f38", 0xa1}], 0x8, &(0x7f0000002540)=[@txtime={{0x18, 0x1, 0x3d, 0xd}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}, @mark={{0x14, 0x1, 0x24, 0x5}}], 0x60}}, {{&(0x7f00000025c0)=@xdp={0x2c, 0x4, r6, 0x15}, 0x80, &(0x7f0000002740)=[{&(0x7f0000002640)="f516f9091c9a9a9885e73bf9b01c576dd86b75e550e3452df514dd2c120d63d0fd433c54c9213208e6efa3285e5475bbf7c1282cb455c62225ed60261e627eab61cec84e39b1", 0x46}, {&(0x7f00000026c0)="8971215244d1ddc6202064d12e332114593ca631fe67ae8fac04afd1077fbf45c615dbbb07aa6c729adb7423ded7569e0fe89e50934adead70044d7caade4a5d333dc11ab620aff8aef6c3691e75d30f5d015b3675a82415f7edf067dce13cfca3d9e04aab7cd5983197a18123e8", 0x6e}], 0x2, &(0x7f0000002780)=[@timestamping={{0x14, 0x1, 0x25, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}, @mark={{0x14, 0x1, 0x24, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0xff}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}, @mark={{0x14, 0x1, 0x24, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}, @mark={{0x14, 0x1, 0x24, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0x400}}], 0xd8}}], 0x5, 0x20000000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000240)={'ip6_vti0\x00', 0x0}) (async) ioctl$SIOCPNADDRESOURCE(r3, 0x89e0, &(0x7f0000000000)=0x3) (async) pipe(&(0x7f0000000140)) 2m26.747240677s ago: executing program 2 (id=1582): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x200280d0}, 0x40) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x8) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @local}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0xffff8001, @remote}, 0x1c) syz_emit_ethernet(0x4e, &(0x7f0000000180)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x40, @remote, @local, {[], {{0x4e22, 0x4e22, 0x0, 0x41424344, 0x0, 0x0, 0x5, 0x18, 0x1001}, {"55430463"}}}}}}}, 0x0) 2m26.666858512s ago: executing program 2 (id=1583): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a28000000000a010200000000000000000200000908000240000000030900010073797a300000000098000000160a030000000000000000000200000a6c000380180003801400010064756d6d7930000000000000000000000800014000000000400003801400010073797a6b616c6c65723100000000000014000100697036677265746170edffadf3000000140001006970366772657461703000000000000008000240000000020900020073797a31000000000900010073797a300000000014000000110001"], 0xe8}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$SIOCGSTAMP(r1, 0x8906, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) writev(r2, &(0x7f0000000540)=[{&(0x7f0000000200)='7I', 0x2}, {&(0x7f0000000240)="c10c7b3c05092c122302e852e8e4b564d7", 0x11}], 0x2) 2m26.481919964s ago: executing program 2 (id=1586): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32=r1], 0x78}, 0x1, 0x0, 0x0, 0x24008040}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, 0x27, 0x1, 0x7fffd, 0x1000, {0xc}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r4, 0x10040) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x3d, 0x28, 0x69, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) syz_emit_ethernet(0xb4, &(0x7f0000000300)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x7c, 0xfffe, 0x0, 0x95, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x1a, 0xef, 0x10b, 0x0, 0x0, {[@sack={0x5, 0x0, [0xc, 0x78, 0x4, 0x6, 0x8, 0x422d]}, @md5sig={0x13, 0x12, "c8497a470a3d8d11651cedc09be42aa5"}, @fastopen={0x22, 0x0, "6fc66c272d3125"}, @sack={0x5, 0xa, [0xfffffff1, 0x7fffffff]}, @sack={0x5, 0x6, [0x3]}, @fastopen={0x22, 0x9, "39cdb44d6203ad"}, @fastopen={0x22, 0x0, 'O'}]}}}}}}}, 0x0) r5 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000840)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x2b}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0x30, 0x66, 0x0, 0x1, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x16}}, {0x4e20, 0x4e20, 0x1c, 0x0, @gue={{0x2, 0x0, 0x0, 0x2, 0x100}, "c1963bf57e73e3279fdbd0c7"}}}}, 0x3e) 2m11.43438983s ago: executing program 33 (id=1586): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32=r1], 0x78}, 0x1, 0x0, 0x0, 0x24008040}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, 0x27, 0x1, 0x7fffd, 0x1000, {0xc}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r4, 0x10040) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x3d, 0x28, 0x69, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) syz_emit_ethernet(0xb4, &(0x7f0000000300)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x7c, 0xfffe, 0x0, 0x95, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x1a, 0xef, 0x10b, 0x0, 0x0, {[@sack={0x5, 0x0, [0xc, 0x78, 0x4, 0x6, 0x8, 0x422d]}, @md5sig={0x13, 0x12, "c8497a470a3d8d11651cedc09be42aa5"}, @fastopen={0x22, 0x0, "6fc66c272d3125"}, @sack={0x5, 0xa, [0xfffffff1, 0x7fffffff]}, @sack={0x5, 0x6, [0x3]}, @fastopen={0x22, 0x9, "39cdb44d6203ad"}, @fastopen={0x22, 0x0, 'O'}]}}}}}}}, 0x0) r5 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000840)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x2b}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0x30, 0x66, 0x0, 0x1, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x16}}, {0x4e20, 0x4e20, 0x1c, 0x0, @gue={{0x2, 0x0, 0x0, 0x2, 0x100}, "c1963bf57e73e3279fdbd0c7"}}}}, 0x3e) 39.837201882s ago: executing program 0 (id=2750): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000006000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x24, 0x24, 0x100, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}}, 0x24}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x2c, 0x2c, 0xd27, 0x179bd2b, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {}, {0x0, 0xffe0}}, [@TCA_CHAIN={0x8, 0xb, 0x30000000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x884}, 0x40) 39.501291813s ago: executing program 0 (id=2756): socket$inet_tcp(0x2, 0x1, 0x6) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newtaction={0x68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ctinfo={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x54}}, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000f80)=@broute={'broute\x00', 0x20, 0x6, 0x90, [0x2000000000, 0x0, 0x0, 0x0, 0x0, 0x2000000005c0], 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000002000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000004000000ffffffff00"/144]}, 0x108) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0x1, 0xc1, 0x4, 0x1, 0x3, 0x0, 0x101, 0x1000, 0x9, 0x3, 0x3, 0x1, 0xfffffffa, 0x1, 0x6, 0x9, 0x4, 0x5, 0x5, 0x100000, 0x762, 0x3, 0x10, 0xe, 0x2b12, 0x100, 0x6, 0x1c02, 0xb, 0xfda, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0xffffff29, 0x8, 0x5, 0x479b, 0x2, 0xa8, 0x7f, 0x4, 0xa, 0x7, 0x12, 0x4000101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180000, 0x4003, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x5, 0x4, 0x100003, 0x8, 0x752, 0x0, 0x3, 0xc, 0x10001, 0x2, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x2, 0x84, 0x100, 0x5, 0x252, 0x7f, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9a, 0x1000d, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x3, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x400008, 0x6, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="1709000000000000000001000000050007000000000008000900fbff00001400200000000000000000000000ffff0000000008000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x620b}, 0x0) 39.259696263s ago: executing program 0 (id=2760): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a00001400028010000b800c000a"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x28, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}]]}, 0x28}}, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r4, 0x400448c9, 0x0) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x40, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_IE={0x13, 0x2a, [@measure_req={0x26, 0x9, {0x3, 0x0, 0x5, "3f7968758cfa"}}, @ibss={0x6, 0x2, 0x1000}]}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x40}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a00001400028010000b800c000a"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x28, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}]]}, 0x28}}, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_bt_hci(r4, 0x400448c9, 0x0) (async) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x40, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_IE={0x13, 0x2a, [@measure_req={0x26, 0x9, {0x3, 0x0, 0x5, "3f7968758cfa"}}, @ibss={0x6, 0x2, 0x1000}]}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x40}}, 0x0) (async) 39.025240904s ago: executing program 0 (id=2764): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'veth1_to_hsr\x00'}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) socket$inet(0x2, 0x80001, 0x84) (async) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@ipv6_newrule={0x38, 0x20, 0x1, 0x70bd2d, 0x25dfdbfc, {0xa, 0x0, 0x80, 0x0, 0x9, 0x0, 0x0, 0x3, 0x2801e}, [@FRA_SRC={0x14, 0x2, @private2}, @FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e20, 0x4e20}}]}, 0x38}}, 0x480d0) (async) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@ipv6_newrule={0x38, 0x20, 0x1, 0x70bd2d, 0x25dfdbfc, {0xa, 0x0, 0x80, 0x0, 0x9, 0x0, 0x0, 0x3, 0x2801e}, [@FRA_SRC={0x14, 0x2, @private2}, @FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e20, 0x4e20}}]}, 0x38}}, 0x480d0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a00)=ANY=[@ANYBLOB="5c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697036746e6c00002c00028014000300200100000000faffffffffffffff000114000200fc02"], 0x5c}, 0x1, 0x0, 0x0, 0x50}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a00)=ANY=[@ANYBLOB="5c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697036746e6c00002c00028014000300200100000000faffffffffffffff000114000200fc02"], 0x5c}, 0x1, 0x0, 0x0, 0x50}, 0x0) 38.690786465s ago: executing program 0 (id=2768): socket$unix(0x1, 0x5, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$rds(0x15, 0x5, 0x0) (async) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, 0x0, 0x0) (async) setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) (async) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'gre0\x00', 0x0}) sendto$packet(r2, 0x0, 0x0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) socket(0x2b, 0x80801, 0x1) (async) socket(0x2b, 0x80801, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r6, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r7, @ANYRES32=r7], 0x44}, 0x1, 0x0, 0x0, 0x4000041}, 0x2000800) (async) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r6, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r7, @ANYRES32=r7], 0x44}, 0x1, 0x0, 0x0, 0x4000041}, 0x2000800) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002"], 0x110) pipe(&(0x7f0000000080)={0xffffffffffffffff}) readv(r8, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/243, 0xfffffdef}], 0x1) (async) readv(r8, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/243, 0xfffffdef}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000580)='veth0_virt_wifi\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) (async) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r9, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r10, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) setsockopt$inet_group_source_req(r4, 0x0, 0x0, &(0x7f0000000380)={0xffffffff, {{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}}, {{0x2, 0x0, @rand_addr=0x64010101}}}, 0x108) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) 38.333318893s ago: executing program 0 (id=2773): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000bc0)=@newtclass={0x464, 0x28, 0x200, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r0, {0x10, 0x6}, {0xffff}, {0xfff3}}, [@TCA_RATE={0x6, 0x5, {0x6b, 0x3}}, @TCA_RATE={0x6, 0x5, {0x10, 0x9}}, @tclass_kind_options=@c_htb={{0x8}, {0x414, 0x2, [@TCA_HTB_RATE64={0xc, 0x6, 0x1}, @TCA_HTB_RTAB={0x404, 0x4, [0x1, 0x6, 0x3, 0x10000, 0x1000, 0x6, 0x1, 0x1, 0x18a0, 0x0, 0x7ff, 0x2, 0x9, 0x981, 0x0, 0xb, 0xfffffff8, 0x1, 0x0, 0x3, 0xfffffffb, 0x6, 0x7, 0x5, 0x3ff, 0xff27, 0x3, 0x4, 0x1, 0x5, 0x6, 0x6a, 0x1000, 0x3, 0xb, 0x3, 0x7ff, 0x0, 0x10001, 0x40, 0x9, 0x1, 0xff, 0x0, 0x3, 0x2, 0x5, 0x9, 0x6, 0x4, 0x0, 0x8c, 0x100, 0x334f, 0x1, 0x5, 0x7fff, 0x4, 0x63, 0x2, 0x9, 0xdc, 0xa, 0x8, 0xffffffff, 0xfffffffc, 0x5, 0x8, 0x5, 0x0, 0x81, 0x5, 0x9, 0x9, 0x9, 0x7, 0x66d6e62, 0x9bfe, 0x3, 0x2, 0x10001, 0x40, 0x8, 0x6, 0x1, 0xfc2, 0x3, 0x4, 0xfff, 0x5, 0x6, 0x4, 0x5, 0x24c, 0x9a4, 0x7, 0x2, 0xb, 0x5, 0x0, 0x6, 0x336f7a26, 0x9, 0x8, 0x80000001, 0x7, 0x3, 0x4, 0xd260, 0x4, 0xab, 0x1, 0xb, 0x3, 0x81, 0x7, 0x4, 0x81, 0x8001, 0x2, 0x3, 0x6, 0x2, 0x1, 0x7, 0xf, 0x1, 0x9, 0x1, 0x3, 0x4, 0x8, 0x7, 0x454, 0x4, 0x1, 0x45, 0x400, 0x5, 0x8, 0x101, 0x7ff, 0xfffffffd, 0x80, 0x2, 0x4, 0x2, 0x8, 0xd, 0xfffffeff, 0x0, 0x1, 0x2, 0x8, 0x4, 0x4, 0x8001, 0x7, 0x10000, 0x7, 0x0, 0x7c, 0x100, 0x3, 0xe, 0xfffff4c0, 0x91, 0x1, 0x7, 0xf, 0x7, 0x7, 0x1, 0x40000000, 0x1ae, 0x480, 0xa, 0x1d56, 0x7, 0x6, 0x14, 0x4, 0x8, 0x4, 0x7, 0xffff4275, 0xd3, 0x0, 0xd5e, 0x80, 0xf, 0x8, 0x1, 0x8, 0x7944, 0x8df, 0xd7000, 0x1, 0x6, 0x0, 0x5e, 0xa, 0x5, 0x9, 0x7f, 0x3, 0x9, 0xf750, 0x200, 0x8, 0x4, 0x8, 0xd66f, 0xfffffffe, 0x8, 0x4, 0xb208, 0x40, 0x0, 0x9, 0x8a91, 0x7, 0x0, 0x1, 0x8, 0x8, 0x7, 0x5, 0x6, 0x4, 0x3, 0x0, 0x7, 0x347a5f6d, 0x7, 0x63, 0x0, 0x3, 0x6, 0x400, 0x3ff, 0x2, 0x6, 0x2, 0x1, 0x6105814b, 0x759117b3, 0x3, 0x1000, 0x0, 0x5e8, 0x70, 0x9, 0xffff, 0x3, 0x8]}]}}, @tclass_kind_options=@c_cake={0x9}, @TCA_RATE={0x6, 0x5, {0x4, 0x7f}}]}, 0x464}, 0x1, 0x0, 0x0, 0x4001}, 0x800) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newtaction={0x7c, 0x30, 0x1, 0x0, 0x0, {}, [{0x68, 0x1, [@m_vlan={0x64, 0x1, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x7c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b80)={0x14, 0x27, 0x1, 0x7fff6, 0x25dfdbfe, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4004884}, 0x4) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r4, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000000000800010015000800050025000000000008000400000000000c002e"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) splice(r5, &(0x7f0000000040)=0x10915bf4, r3, &(0x7f0000000080)=0x8000000000000000, 0xfff, 0x6) 22.501600341s ago: executing program 34 (id=2773): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000bc0)=@newtclass={0x464, 0x28, 0x200, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r0, {0x10, 0x6}, {0xffff}, {0xfff3}}, [@TCA_RATE={0x6, 0x5, {0x6b, 0x3}}, @TCA_RATE={0x6, 0x5, {0x10, 0x9}}, @tclass_kind_options=@c_htb={{0x8}, {0x414, 0x2, [@TCA_HTB_RATE64={0xc, 0x6, 0x1}, @TCA_HTB_RTAB={0x404, 0x4, [0x1, 0x6, 0x3, 0x10000, 0x1000, 0x6, 0x1, 0x1, 0x18a0, 0x0, 0x7ff, 0x2, 0x9, 0x981, 0x0, 0xb, 0xfffffff8, 0x1, 0x0, 0x3, 0xfffffffb, 0x6, 0x7, 0x5, 0x3ff, 0xff27, 0x3, 0x4, 0x1, 0x5, 0x6, 0x6a, 0x1000, 0x3, 0xb, 0x3, 0x7ff, 0x0, 0x10001, 0x40, 0x9, 0x1, 0xff, 0x0, 0x3, 0x2, 0x5, 0x9, 0x6, 0x4, 0x0, 0x8c, 0x100, 0x334f, 0x1, 0x5, 0x7fff, 0x4, 0x63, 0x2, 0x9, 0xdc, 0xa, 0x8, 0xffffffff, 0xfffffffc, 0x5, 0x8, 0x5, 0x0, 0x81, 0x5, 0x9, 0x9, 0x9, 0x7, 0x66d6e62, 0x9bfe, 0x3, 0x2, 0x10001, 0x40, 0x8, 0x6, 0x1, 0xfc2, 0x3, 0x4, 0xfff, 0x5, 0x6, 0x4, 0x5, 0x24c, 0x9a4, 0x7, 0x2, 0xb, 0x5, 0x0, 0x6, 0x336f7a26, 0x9, 0x8, 0x80000001, 0x7, 0x3, 0x4, 0xd260, 0x4, 0xab, 0x1, 0xb, 0x3, 0x81, 0x7, 0x4, 0x81, 0x8001, 0x2, 0x3, 0x6, 0x2, 0x1, 0x7, 0xf, 0x1, 0x9, 0x1, 0x3, 0x4, 0x8, 0x7, 0x454, 0x4, 0x1, 0x45, 0x400, 0x5, 0x8, 0x101, 0x7ff, 0xfffffffd, 0x80, 0x2, 0x4, 0x2, 0x8, 0xd, 0xfffffeff, 0x0, 0x1, 0x2, 0x8, 0x4, 0x4, 0x8001, 0x7, 0x10000, 0x7, 0x0, 0x7c, 0x100, 0x3, 0xe, 0xfffff4c0, 0x91, 0x1, 0x7, 0xf, 0x7, 0x7, 0x1, 0x40000000, 0x1ae, 0x480, 0xa, 0x1d56, 0x7, 0x6, 0x14, 0x4, 0x8, 0x4, 0x7, 0xffff4275, 0xd3, 0x0, 0xd5e, 0x80, 0xf, 0x8, 0x1, 0x8, 0x7944, 0x8df, 0xd7000, 0x1, 0x6, 0x0, 0x5e, 0xa, 0x5, 0x9, 0x7f, 0x3, 0x9, 0xf750, 0x200, 0x8, 0x4, 0x8, 0xd66f, 0xfffffffe, 0x8, 0x4, 0xb208, 0x40, 0x0, 0x9, 0x8a91, 0x7, 0x0, 0x1, 0x8, 0x8, 0x7, 0x5, 0x6, 0x4, 0x3, 0x0, 0x7, 0x347a5f6d, 0x7, 0x63, 0x0, 0x3, 0x6, 0x400, 0x3ff, 0x2, 0x6, 0x2, 0x1, 0x6105814b, 0x759117b3, 0x3, 0x1000, 0x0, 0x5e8, 0x70, 0x9, 0xffff, 0x3, 0x8]}]}}, @tclass_kind_options=@c_cake={0x9}, @TCA_RATE={0x6, 0x5, {0x4, 0x7f}}]}, 0x464}, 0x1, 0x0, 0x0, 0x4001}, 0x800) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newtaction={0x7c, 0x30, 0x1, 0x0, 0x0, {}, [{0x68, 0x1, [@m_vlan={0x64, 0x1, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x7c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b80)={0x14, 0x27, 0x1, 0x7fff6, 0x25dfdbfe, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4004884}, 0x4) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r4, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000000000800010015000800050025000000000008000400000000000c002e"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) splice(r5, &(0x7f0000000040)=0x10915bf4, r3, &(0x7f0000000080)=0x8000000000000000, 0xfff, 0x6) 15.576924637s ago: executing program 5 (id=2898): ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000800000000000000000000000000000002"]) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_timeval(r0, 0x1, 0x2, 0x0, 0x48) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x16c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e22, 0x2, 0x2, 0x0, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0xfe, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @local}, {0x0, 0x4, 0x0, 0x9, 0x0, 0x0, 0x5, 0x543}, {0x7, 0x49}, {0x0, 0x0, 0x2000000}, 0x70bd2d, 0x34fd, 0x2, 0x4, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db90100000000c54222cb7a"}}, @encap={0x1c, 0x4, {0xfffffffffffffffe, 0x4e24, 0x4e24, @in=@remote}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000c}, 0x40004) sendmsg$NFT_BATCH(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a3200000000140000001100", @ANYRES8], 0x54}, 0x1, 0x0, 0x0, 0x24068045}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000080a01010000000000000000020000000900010073797a300000000038000000060a17d50000000000000000020000000900020073797a32000000000900010073797a30000000000c0003400000000000000002"], 0xcdc}, 0x1, 0x0, 0x0, 0x8000}, 0x20040004) gettid() 15.08580146s ago: executing program 5 (id=2900): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x38, 0x1403, 0x1, 0x70bd29, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ip6gre0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000840}, 0x2400c000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = getpid() sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x148, 0x42, 0x1, 0x0, 0x0, {0x3, 0x1}, [@generic="0f000000", @nested={0x125, 0xd4, 0x0, 0x1, [@typed={0x9, 0xfb, 0x0, 0x0, @str='syz0\x00'}, @generic="3ecbe4acc29d65f52cc5e358859638d51a34c6a245e2a8b187f3a36010e9fb63e044dcb67a8df8c35dff3261fe910947005d09ddde61ef4b213c25c4cf75ef59a5fa4cf8eead841394dfbaa109ec2d5d015dab1472f9856d0d686e25e0fa0d83", @generic="e66b14d7ee22d7d3fb95c32620797afa9525a828d16852fa65ffa9c2c48e0df41201e474b6cfe06703395372227e585c53ea94d042f6eb661626ce7d34839fd9db9e8977c2d77cca72", @typed={0x8, 0x167, 0x0, 0x0, @pid=r2}, @typed={0x39, 0x5d, 0x0, 0x0, @binary="b32b081bb72a4738ade03708cd6a70d218e4dfe197f8518558a9ba3fb15b7271e28e51ed74b1a039318aaf66d01e54f849e8c4402a"}, @nested={0x28, 0xab, 0x0, 0x1, [@generic="f9041915be067be4ea48ded92bfb5d4e", @typed={0x14, 0x3e, 0x0, 0x0, @ipv6=@mcast2}]}]}, @nested={0x4, 0x8002}, @nested={0x4, 0x8003}]}, 0x148}}, 0x0) 3.655631277s ago: executing program 3 (id=2930): r0 = socket$inet6(0xa, 0xab525c4abde2f61a, 0x1) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000a80)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3a8, 0x0, 0x148, 0x1e0, 0x278, 0x310, 0xb0, 0x148, 0x1e0, 0x278, 0x310, 0x6, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x11}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x408) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$AUTOFS_IOC_PROTOVER(r1, 0x80049363, &(0x7f0000000080)) setsockopt$inet6_int(r2, 0x29, 0x11, &(0x7f0000000040)=0x3, 0x4) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0xa010102, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x8, 0x0, @void}}}}}}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000006800010003001000fbdbdf250000000000000000148006000000000000000000000000000000000039000400"], 0x30}, 0x1, 0x0, 0x0, 0x4008000}, 0x4010) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f00000002c0), r4) sendmsg$NFC_CMD_DEP_LINK_UP(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x2c, r5, 0x1, 0x70bd29, 0x7, {}, [@NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_COMM_MODE={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40810}, 0x4000000) syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r4) 3.181324616s ago: executing program 6 (id=2931): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) 3.132309633s ago: executing program 1 (id=2870): r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x9}}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f00000004c0)={r3, 0x3, 0x6, @remote}, 0x10) setsockopt$packet_drop_memb(r2, 0x107, 0x2, &(0x7f0000000100)={r3, 0x1, 0x6, @local}, 0x10) r4 = openat$cgroup_devices(r1, &(0x7f0000000300)='devices.deny\x00', 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r5 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/pid_for_children\x00') ioctl$NS_GET_OWNER_UID(r5, 0xb704, 0x0) write$cgroup_devices(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB='c '], 0xa) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@newtaction={0x84, 0x30, 0xffff, 0x0, 0x4, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x1, 0x6, 0x4, 0x8, {0x7, 0x0, 0x6, 0x80, 0x2}, {0x0, 0x2, 0x1, 0xc05, 0x77}, 0x2, 0x5, 0xffffffff}}]]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0x34fc4ba2772b4f79}}}]}]}, 0x84}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="85000000b800000095"], &(0x7f00000008c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) ioctl$NILFS_IOCTL_RESIZE(r0, 0x40086e8b, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[], 0x28, 0xe000}, 0x5}], 0x1, 0x0) r7 = socket$inet6(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x50, &(0x7f0000000000)={0x10, 0x0}, 0x3c) listen(r0, 0x0) 3.04569458s ago: executing program 3 (id=2932): socket$inet(0xa, 0x801, 0x84) (async) r0 = socket$inet(0xa, 0x801, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) socket$inet6_udp(0xa, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f00000004000000080000000c"], 0x50) socket$inet6_sctp(0xa, 0x5, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) (async) socket$packet(0x11, 0x3, 0x300) socket(0x10, 0x803, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x439, 0x70bd23, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0xb881}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24048007}, 0x4040844) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) close(0x3) (async) close(0x3) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) socket(0x400000000010, 0x3, 0xf) (async) socket(0x400000000010, 0x3, 0xf) socket$unix(0x1, 0x1, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) (async) socket$nl_rdma(0x10, 0x3, 0x14) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c000180060006006558000014000280100014800c00", @ANYRES8=r2], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c000180060006006558000014000280100014800c00", @ANYRES8=r2], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r3 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet(r3, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) sendto$inet(r3, &(0x7f0000000300)="b3", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x4}, 0x8) 2.785097247s ago: executing program 6 (id=2933): syz_emit_ethernet(0x76, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0041, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000140)=0x90) write$tun(r0, &(0x7f0000000080)=ANY=[@ANYRESOCT], 0xfdef) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="c603000000"], 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x40000) socket$unix(0x1, 0x2, 0x0) ioctl$XFS_IOC_COMMIT_RANGE(r1, 0x40585883, &(0x7f0000000000)={r1, 0x0, 0x4, 0x1be3, 0x4, 0x4, [0x4, 0x0, 0x401, 0x3, 0x2, 0x100000000]}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000d80), r1) 2.619546896s ago: executing program 3 (id=2934): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_mreqsrc(r1, 0x0, 0x53, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000580)={0x1, 0x0, 0xfffffffc, 0xfffffffc}, 0x10) pipe(&(0x7f0000000080)) write(r2, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000000000800040001000000", 0x24) bind$alg(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x4) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x6}, 0x1c) write(r0, &(0x7f0000000740)="2700000014000707030e0000120f0a0011000100f5fe0012f7000000070400000000000000050098c300f156cb5b450727a3b4839e3bac708feac80000324453fd4e592e763671798a31c8605fa64ae263dc540f931d36bf26d3dddc60ab9eb5a66916f61ad915a500f907931e74f1156f", 0x71) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000000) socket$phonet(0x23, 0x2, 0x1) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0, 0x2}, 0x94) r5 = socket$kcm(0x23, 0x5, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x620, 0x0, 0x540, 0x540, 0x540, 0x1d0, 0x610, 0x610, 0x610, 0x610, 0x610, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [0xffffffff, 0xff000000], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x21}, 0x0, 0x188, 0x1d0, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2}}, @common=@inet=@multiport={{0x50}, {0x0, 0x0, [0x0, 0x80]}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@private=0xa000000, @ipv4=@empty, 0xa, 0x30, 0x1}}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @loopback}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x0, 0x0, 0x0, 0xffffff00], [], '\x00', 'bond_slave_0\x00', {}, {}, 0x2f, 0x9}, 0x0, 0xa8, 0xe0, 0x48000000}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0x6, 0x5}, {0xffffffffffffffff, 0x6, 0x1}, {0x0, 0x4, 0x2}, 0xfffffffe}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv4=@loopback, 0x0, 0xfe}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x680) accept$inet(0xffffffffffffffff, &(0x7f0000000f80)={0x2, 0x0, @multicast1}, 0x0) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000240)=0x6, 0x4) socket$inet6(0xa, 0x5, 0x0) listen(r5, 0x8) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'erspan0\x00', @link_local}) 2.604335187s ago: executing program 1 (id=2935): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080), r0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x800448d3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002480)=@newtfilter={0xa4, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x70, 0x2, [@TCA_U32_POLICE={0x48, 0x6, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x4, 0x4, 0x6, 0x0, {0x7, 0x2, 0x3, 0x10, 0x4}, {0x6, 0x2, 0x9, 0xe23, 0x100, 0x5}, 0x7, 0x99, 0xef2}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xadd1}]}, @TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0xe}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x24040084) syz_genetlink_get_family_id$nl802154(0x0, r0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fddbdf25d448744e080001000300000034000480050003000700000005000300050000000500030000000000050003000100000005000300070000000500030005000000"], 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x20000800) r6 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb01001800000000000000a0000000a012889ef8e8116c60180fed000000050000000a00000000000002010000000f000000000000090100000004000000000000010000000020004c000c00000008000085020000000800000001000000020000120d00000005000000d200000001000000000000000000000005000000030000000100000002000000040000000f0000000500000000000000a3d2384c32af7bfd05000000010000000a00000005000000800000000800000000000010040000fdff2f305f006061c8859cab", @ANYRES16=0x0], &(0x7f00000000c0)=""/221, 0xbd, 0xdd, 0x0, 0x7, 0x10000, @value=r6}, 0x28) ioctl$FS_IOC_FSGETXATTR(r7, 0x801c581f, &(0x7f0000000200)={0xe3, 0x7, 0xa, 0x10, 0x6}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080), r0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_bt_hci(r2, 0x800448d3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'team_slave_1\x00'}) (async) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002480)=@newtfilter={0xa4, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x70, 0x2, [@TCA_U32_POLICE={0x48, 0x6, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x4, 0x4, 0x6, 0x0, {0x7, 0x2, 0x3, 0x10, 0x4}, {0x6, 0x2, 0x9, 0xe23, 0x100, 0x5}, 0x7, 0x99, 0xef2}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xadd1}]}, @TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0xe}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x24040084) (async) syz_genetlink_get_family_id$nl802154(0x0, r0) (async) sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fddbdf25d448744e080001000300000034000480050003000700000005000300050000000500030000000000050003000100000005000300070000000500030005000000"], 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x20000800) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb01001800000000000000a0000000a012889ef8e8116c60180fed000000050000000a00000000000002010000000f000000000000090100000004000000000000010000000020004c000c00000008000085020000000800000001000000020000120d00000005000000d200000001000000000000000000000005000000030000000100000002000000040000000f0000000500000000000000a3d2384c32af7bfd05000000010000000a00000005000000800000000800000000000010040000fdff2f305f006061c8859cab", @ANYRES16=0x0], &(0x7f00000000c0)=""/221, 0xbd, 0xdd, 0x0, 0x7, 0x10000, @value=r6}, 0x28) (async) ioctl$FS_IOC_FSGETXATTR(r7, 0x801c581f, &(0x7f0000000200)={0xe3, 0x7, 0xa, 0x10, 0x6}) (async) 2.473285391s ago: executing program 5 (id=2936): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x3, 0x7}, 0x4) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="80010000100001000000000000000000fe880000000000000000000000000001fe80000000000000000000000000000000000000000000000a0020005c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x180}, 0x1, 0x0, 0x0, 0x20004001}, 0x0) 2.316554257s ago: executing program 6 (id=2937): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x1c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1d}]}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x1}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x90}}, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r5, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000000000800010015000800050025000000000008000400000000000c002e"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000e40)={0xffffffffffffffff, 0xe0, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000b80)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, &(0x7f0000000bc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000c00)=[0x0], 0x0, 0x97, &(0x7f0000000c40)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000c80), &(0x7f0000000cc0), 0x8, 0x100003a, 0x8, 0x8, &(0x7f0000000d00)}}, 0x10) sendmmsg$inet(r0, &(0x7f00000011c0)=[{{&(0x7f0000000080)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000100)="912daf01b68d8808552f17806336539c22", 0x11}, {&(0x7f0000000300)="b859dfb93e61876f1ef3ec14800f1ea20bf0aac358cf7bb84ce9d3ec2f60c715ae21eb68dbbc1ccf2f32f3cdc515e6592aa490f9af0daf53b0962f5a795dd156fd97b168fbda757b53b92d8c0dd6e09aadd407a8581ab11a7285098482716376c791301ad12ef55512b77623fec97ba9fb6dd95fb0ce963f6e5d2389a8ce2514631f30a4643d5406e2e2edb1feb78348b0e20911bbd1131eb6ecd00c8588b6f68c3a7db78a63e24e2788e1b19efec82f666896", 0xb3}, {&(0x7f00000003c0)="abb81997ba8bbc37e4b9d81d8c3adf1a89911409d8fb8c7941b743edcc291afaf79b3d54c2ca39f69c6eee7e426a9c7aba3c758673649dc739ebc3628724c534b482104116ca1b84a1", 0x49}, {&(0x7f0000000500)="ec256503337fb20578e53ec80e7dfc1eec498be68462f4ee5318ec826125d3fdf61931f1d84cb8a76e70a02acd8649e6cfc4b14f2c3f4549cfdcc895429e06c403", 0x41}, {&(0x7f0000000580)="2815adfcd3ac66ecac80f4f7d2804d64a983e9538dd64978fff04e34425d1a415080765467bcda6e1388f35ca3bae65e6c02ccea9f7fed568b73ada45bbb793bc0fef8003586de6f45f132be9562b0809887e1", 0x53}], 0x5, &(0x7f0000000680)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_ttl={{0x14, 0x0, 0x2, 0xae7590b}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_retopts={{0x7c, 0x0, 0x7, {[@noop, @ssrr={0x89, 0x13, 0x80, [@rand_addr=0x64010102, @empty, @empty, @private=0xa010102]}, @timestamp_addr={0x44, 0x1c, 0x3e, 0x1, 0x0, [{@rand_addr=0x64010101, 0x7}, {@multicast2, 0x8000}, {@multicast1, 0xffffffff}]}, @timestamp_addr={0x44, 0x3c, 0x4d, 0x1, 0x6, [{@empty, 0x1000}, {@loopback, 0x10001}, {@multicast2, 0x1000}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xd6}, {@rand_addr=0x64010101, 0x4}, {@private=0xa010100, 0x3}, {@remote, 0x4}]}]}}}, @ip_retopts={{0x30, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x14, 0x15, 0x3, 0x8, [{@remote, 0x81}, {@loopback, 0x1}]}, @timestamp_addr={0x44, 0xc, 0x51, 0x1, 0x7, [{@empty, 0x1}]}]}}}], 0x128}}, {{&(0x7f00000007c0)={0x2, 0x4e20, @empty}, 0x10, &(0x7f0000000b40)=[{&(0x7f0000000800)}, {&(0x7f0000000900)="183d9e0ac8298f7194285baee3afc54289e327913d25fbec410f81b2b3550674a0f69aa23624ad5df75d719639857e9e250d9128e1e6b17c86889127c6e1196d527a85d9264b233c7e8fef8c51abbbd685b96a5bd2ed5ce14e9f342a3ebd0631c35599d1275e5b858142b56cdede015916819fd133548b0371c3c5583131b28674a37799d601053a44f3ce1fbcfe94aa6e9a8767eabc53e147132c9abd17f0e7d88abc94cbc89a6cfbeb66126671252bd383979450", 0xb5}, {&(0x7f00000009c0)="7827e828b7e90a1ff2fb12bd51a2825f74610677e5aa56f03b19b4325bcaa38691c5e6d7bdce379c83c51d3df66737c8b5c9ee5490488dee08d811298b05e3b344d8bae1c1ea29cea879a375cea34272e5049c80fad872b67a1ba5aa5df13f3c6d68d4c19b902fba3a5b6375f5e6a8e43fcee5cb2ab34654a8e253b5e387a524b25f1a4c054d0d71fac9c778864ee87d6625087f7d5254c612ad35ff14e64a1b3db316cdfc979cee951a1b1adb6a743dd7f27ca9950689f6230c710c64", 0xbd}, {&(0x7f0000000a80)="72950bd774b571ded06d348f2d9d239c7299c02bc8a31753ac9cfb2c7da422719f287654c62f631c70642e20bce9280664729a66593ef83c6feedf08d19a5e0c16e2408d1e324d29121b5409d12c03bbd1325a51abd8f51763bb88680a714ebaa2d6e61f52b7fb633cc3e9e7f42909deb79f08bc1060b8f52ffd96ef3c250e60648f38c30bcc9dcf1a00ae71c6d4f69737d0c96a001d7a9cbba19591751dd58caf4165a5f890d19f4547743dce317d8c", 0xb0}], 0x4, &(0x7f0000001240)=ANY=[@ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="e0000002ac1e0101000000001c000000000000000000000008000000", @ANYRES32=r6, @ANYBLOB="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"], 0x2d8}}], 0x2, 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000400000009"], 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xd, 0x3, 0x4, 0x1, 0x0, r7}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r8}, &(0x7f0000000840), &(0x7f0000000880)=r7}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000e80)={r8, &(0x7f0000000d40), 0x0}, 0x20) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000370400da3f662500000000000000", @ANYRES32=r9, @ANYBLOB="1100030000000000240012800900010069706970000000001400028008000200640101020500090089000000"], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) getsockname$packet(r2, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000800)=0x14) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) 2.239382331s ago: executing program 1 (id=2938): unshare(0x100000) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000600008000f0fffeffe809005300fff5dd00000010000100080c10000000ffffffffffff", 0x58}], 0x1) bind$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @none, 0x4}, 0xe) connect$bt_l2cap(r1, &(0x7f0000000200)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) unshare(0x20080) 1.949281113s ago: executing program 3 (id=2939): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000140)={r1}) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r2, 0x800442d2, &(0x7f0000000200)={0x3, &(0x7f0000000180)=[{0x0, 0x0, 0x0, @remote}, {0x0, 0x0, 0x0, @broadcast}, {0x0, 0x0, 0x0, @dev}]}) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000040)="04cee9ee1662040931d941e76c47728c", 0x10) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000080)="8274b2438621b24bf89fa3c534640c2b", 0x10) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r5 = socket(0x11, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'gre0\x00', 0x0}) bind$packet(r5, &(0x7f0000000180)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r5, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000003ec0)=[{0x0, 0x494}], 0x1, 0x0, 0x0, 0x8811}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_ECN={0x8, 0xa, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24004002}, 0x2000400c) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)=ANY=[], 0x114}], 0x1, 0x0, 0x0, 0x20008001}, 0x0) 1.74798615s ago: executing program 1 (id=2940): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x7, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104}, [@IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) r6 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2b, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x3, @mcast2}}, {{0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x8}}}, 0x108) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[@ANYBLOB="e00c", @ANYRES16=r2, @ANYBLOB="010000000000ffdbdf250100000000000000014100000018001700000000000000006574683a7465616d30000000"], 0x34}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x60, 0x2, 0x6, 0x3, 0x0, 0xa00, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x8}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xc30e}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x60}}, 0x0) 1.572198212s ago: executing program 6 (id=2941): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x9}, @NFT_OBJECT_COUNTER=@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}}, @NFT_MSG_DELRULE={0xdc, 0x8, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_USERDATA={0x6d, 0x7, 0x1, 0x0, "593b6472dfb94d6a5c632ad2154b14951a35dc231d62c327b37f27f4ddc142fae973e3c6adcb6aba359fd115b4f4a371086b5f1b76fa4638c9f3741a0b385f7e9cfbfcc270fa2cb48636871fbd8fcc9131248fb322fefde3872a7b4d4f008157b8cc7e694f77731a78"}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0xe1}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0xa01}]}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x124}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) (async, rerun: 64) r2 = socket$inet_icmp(0x2, 0x2, 0x1) (async, rerun: 64) clock_gettime(0x0, &(0x7f0000003dc0)={0x0, 0x0}) recvmmsg(r2, &(0x7f0000003d00)=[{{&(0x7f0000000380)=@caif=@dgm, 0x80, &(0x7f0000000440)=[{&(0x7f0000000400)=""/48, 0x30}], 0x1, &(0x7f0000000480)=""/159, 0x9f}, 0x9}, {{&(0x7f0000000540)=@tipc, 0x80, &(0x7f0000001900)=[{&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f00000016c0)=""/18, 0x12}, {&(0x7f0000001700)=""/8, 0x8}, {&(0x7f0000001740)=""/129, 0x81}, {&(0x7f0000001800)=""/174, 0xae}, {&(0x7f00000018c0)=""/35, 0x23}], 0x6, &(0x7f0000001980)=""/4096, 0x1000}}, {{&(0x7f0000002980)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f0000003c00)=[{&(0x7f0000002a00)=""/4096, 0x1000}, {&(0x7f0000003a00)=""/237, 0xed}, {&(0x7f0000003b00)=""/237, 0xed}], 0x3, &(0x7f0000003c40)=""/179, 0xb3}, 0xffffffff}], 0x3, 0xc0, &(0x7f0000003e00)={r3, r4+60000000}) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYRESDEC=r0], 0x38}, 0x1, 0x0, 0x0, 0x4008891}, 0xc000) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="0815000000051104000000000000000001000005540201"], 0x1508}}, 0x10) (async, rerun: 32) clock_gettime(0x6, &(0x7f0000000000)) (async, rerun: 32) r6 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r6, &(0x7f0000000000)={0x2, 0x0, @local, 0x3}, 0x10) (async, rerun: 64) writev(r5, &(0x7f0000000040), 0x2) (rerun: 64) 1.501726568s ago: executing program 3 (id=2942): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000880)=ANY=[@ANYBLOB="340000001300050000000001feffffff07000000", @ANYRES32=r1, @ANYBLOB="402000000000000014001a80100004800c000980"], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x400448c9, &(0x7f00000000c0)={'wlan0\x00', 0x1}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaa3aaaaaaaaaaaaaabb08004500003000000020fc02907800000000e0000300e305907800fa00094570fff6006500050103000000010102ac1414aa03781e0e071fe807c90e81"], 0x0) poll(&(0x7f0000000040)=[{r3, 0x1400}, {r4, 0x107a}, {0xffffffffffffffff, 0x40}, {r3, 0x80}, {r4, 0x4000}, {r2}, {r4, 0x2000}], 0x7, 0xff) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001c00), r5) sendmsg$NLBL_CALIPSO_C_REMOVE(r5, &(0x7f0000001cc0)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c40)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010025bd7000fe001f8d7660e20aa70000"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4010) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="010000000000ff7f1c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r8 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0x40, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_FLOWS={0x8}]}}]}, 0x40}}, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40090}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=@newlink={0x20, 0x10, 0x801, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r7, 0x1feff, 0x1}}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x2000000) 1.404071078s ago: executing program 5 (id=2943): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="24000000200001030000000000000000020000000000000000000000080018004e214e214bf84cd82a93c43bd5c1388116c4ae6fd6524ef0fa91d92b3db88ff57a278a73edcd48295a86f3ebfa69350af3d1a44fced5d9c187c21167c75684bb27ece6bea24a7b433232c1509a204ad864af83c279bc534bad5c875ec325511184cb22b4a059c8089b20099394cef2c3191699386a26637b99d0a7d0bd96010fc9ea9f6de5f54e910f2de87670bbb7778226"], 0x24}, 0x1, 0x0, 0x0, 0x24040084}, 0x0) 1.25974203s ago: executing program 6 (id=2944): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f00000004c0)={r3, 0x3, 0x6, @remote}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) setsockopt$packet_drop_memb(r2, 0x107, 0x2, &(0x7f00000003c0)={0x0, 0x1, 0x6, @broadcast}, 0x10) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000040)={0x1, 'nr0\x00', 0x1}, 0x18) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f00000026c0), r6) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000027c0)={&(0x7f0000000840)={0xf, r7, 0x800, 0xa070bd24, 0x25dfdbfe, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040045}, 0x20000000) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000c00)=ANY=[@ANYBLOB="5000000010000305000000000000020000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0001000000000000000000050009000000000008000500", @ANYRES32=r9], 0x50}}, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x9, 0x3, 0xc4f, 0x1, 0x1}, 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$802154_dgram(r13, &(0x7f0000000cc0)={0x0, 0x48, &(0x7f0000000040)={&(0x7f00000002c0)="05000000b92ba9e375f3d5a1fc0751577daff448fb417eb76377c3075661e57f6a1ad88443faf85a902e03e4c4e68c258b10a733e428ae2cd65cf9e52e6a23541f4bc6970df209050bf052c6624effea5f1e99ad3d96ed78ff3f524af2c90d5643d563b4f469a937cccad6efa449da086721a42a6616eb56afdf6e1e977964a59a007754d9a22bf26ddb67fb3cd24af531bb3a42a0532ff51473993bd4fb62b7fae1a02f982796fe3df1f080196ff1db13e62950561bf6330ce41dde70f59450a43a0e5678b45689b989d46e9e242cc89f34cd04c4e22e5cc1f1035c5010fd47be95ca79f9a85bf56011d8397d00"/253, 0x1}}, 0x20000855) ioctl$sock_inet_tcp_SIOCATMARK(r12, 0x8905, &(0x7f0000000280)) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000100), 0x6c7, r11, 0x0, 0x200000000000000}, 0x38) r14 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000041000701fefeffff00000000017c0000040042802000018006000600800a00000c001500faffffffffffffff08000900", @ANYRES32=r14, @ANYBLOB="040002"], 0x3c}, 0x1, 0x0, 0x0, 0x48815}, 0xc010) r15 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x34, r15, 0x1, 0x0, 0x25dfdbfe, {0x2, 0x2, 0x2}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x34}, 0x1, 0x40030000000000, 0x0, 0x800}, 0x80) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}]}, @NFT_MSG_NEWSETELEM={0x38, 0xc, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x4}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x10}}, 0xbc}}, 0x0) 473.163098ms ago: executing program 1 (id=2945): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_FW_DOWNLOAD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r1, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_FIRMWARE_NAME={0xa, 0x14, ']@-*^]'}]}, 0x30}, 0x1, 0x0, 0x0, 0x8080}, 0x4008001) r4 = socket(0x3, 0x80000, 0x3) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x88, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x50) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x3, [@type_tag={0xf, 0x0, 0x0, 0x12, 0x1}, @restrict={0x6, 0x0, 0x0, 0xb, 0x4}]}, {0x0, [0x0]}}, &(0x7f0000000300)=""/48, 0x33, 0x30, 0x0, 0x6, 0x10000}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x5, 0x0, 0x4, 0x48430, r5, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x2, 0x6, @value=r6}, 0x50) getsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f0000000380)=[{}, {}], &(0x7f00000003c0)=0x10) r7 = accept4$inet(r4, &(0x7f0000000400)={0x2, 0x0, @multicast2}, &(0x7f0000000440)=0x10, 0x800) writev(r7, &(0x7f0000001940)=[{&(0x7f0000000480)="a8f91b1fd6db6ad8e9c0833a54ba875b6e6d892c65aaf3837634aeba55a8db97697dba1816c5cea551b234201dd09b82fcf308957612d72af9c2c3f42a8e663b320e5cfab266d588491c81f4cde240431386c72bda05ca83be1a8a8a2d45c1aa7c5b2173954940e47f5f779eb8fa5d461bd2643c4ea019f006ba534d0aff6f44e20e4b9f65125a", 0x87}, {&(0x7f0000000540)="5ecd4c9db58fb1a83b10c1242b61417f50c24b022be49cf4bed02315424dd8ffd1010c8837f3af3d7bcf856c4b16ad18ea34a8897bdb3417263e1b32babb722fa8a223e6504afa94100ebd9763c996842086ca4e44c6c59e5a4e8e20573a1506d5364780f856378667ec1835b8c6708d52e3d7710a5b9706668635e989210919084e92aac8d3c11b5e72bf240d2099e8caff9148cb1aa57d2f1eb9778a217941e7224df6a575078430a84fa31e988376dda468394eb66b0a7254fdf4919fa1617e8152972b0a629dd81626dec1085f", 0xcf}, {&(0x7f0000000640)="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", 0xfd}, {&(0x7f0000000740)="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", 0x1000}, {&(0x7f0000001740)="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", 0xfc}, {&(0x7f0000001840)="19dfdb0eb1fc73d3f8ccca8c1d61b0fef06ac6c7b08d325015fb7bf964570d997fde65d43f8f1fd10be6547fd80a2ab4883dad515dc8ae5e5e72e04d94c9ee4766568c44867361f19fc08ca5430396984cf56b828c4fecae22c37f33fc1857d16dc186158dbd993f89603347dedecbd182c0981e83d3439b70bc70dd46e22a2fd582adf952025d6bf75ae621566618e3eaaf309f97d4ff602101793077b2dcc8aff5ff8d5a841ecbdca8a61a4c4d632d7b44ac77041a2c022e528a39a354b7540ce818e18bf19b1d7f051f4d6e6f84771825", 0xd2}], 0x6) r8 = socket(0x9, 0x2, 0x9) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001a00), r4) sendmsg$TIPC_NL_BEARER_DISABLE(r8, &(0x7f0000001c00)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001a40)={0x144, r9, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x94, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x353}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}, @TIPC_NLA_LINK={0x9c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x966}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x900000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x144}, 0x1, 0x0, 0x0, 0x40000}, 0x20004000) recvmmsg(r7, &(0x7f00000033c0)=[{{&(0x7f0000001c40)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000001ec0)=[{&(0x7f0000001cc0)=""/203, 0xcb}, {&(0x7f0000001dc0)=""/161, 0xa1}, {&(0x7f0000001e80)=""/17, 0x11}], 0x3, &(0x7f0000001f00)=""/23, 0x17}, 0x8}, {{&(0x7f0000001f40)=@ax25={{0x3, @rose}, [@bcast, @null, @default, @remote, @netrom, @rose, @null]}, 0x80, &(0x7f0000002380)=[{&(0x7f0000001fc0)=""/217, 0xd9}, {&(0x7f00000020c0)=""/229, 0xe5}, {&(0x7f00000021c0)=""/203, 0xcb}, {&(0x7f00000022c0)=""/172, 0xac}], 0x4, &(0x7f00000023c0)=""/4096, 0x1000}, 0x102}], 0x2, 0x40002042, &(0x7f0000003440)={0x77359400}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000003480)) r10 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r10, 0x8982, &(0x7f00000034c0)) r11 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet(r11, &(0x7f00000048c0)={&(0x7f0000003500)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000004800)=[{&(0x7f0000003540)="fd5e14c241336eca876ecb9bac41b71b888cc7bfe50c81abc1e5360b14c0a3aeef2780a2981369d566f91b4a046f8de5d9ff5b58d03bf4c90f1128cee1a4eb5fbf0f3d0f67173c203a8297b2fe1a782a21ad6eb6739a0d9cf51c2e4bc4185944957792f729ebb1d17e82e3c07c835175ffc9abf5621f96db194b96675b462f138de2a72a2feee5770a4cf2f4489813db1f2aabc0df0652bd2e08380dd8553067972b821b1d25a64d7ff8b4bbe9e80610a11d42d707217875453b7b9d712d04acff34fe7107ac4ad9842677976eabb52ff0c436da08b21dcd84219649715df5c6d991a08609", 0xe5}, {&(0x7f0000003640)="ee490e93daaa9201fe9cc0694174de350e4c10a96d59b4af4f1bf4f3dfb78e70302f3998ec30105d01ddca92d940f41d9a79273b4fa3a6c4867085bd4ed7b9de670f133e75e88969a7bc2270bebc9025095be9e8e7ed49a17e150d6e7d464dcdefdba12225e9f9a35a34020d50b65aff75d114ac67eb507ab83d3ec3e31273daf0754054d1f4026277caa121eae62c49", 0x90}, {&(0x7f0000003700)="e00d99567e23507d3c3eb5804ada4cf9cc1bef72258182314df57be2869c79a8ea3c5e7039df796b6b9ab52322a91a05000ba07d539d55b833a609770152f51f067f05529abfb56c2d86511b76fbf35be3eb86fd4246422122796d5af11b792c742cf844d4afbb09087b07a32f5ed81fae53cd8daa1e99968bb22da6ceee58ea85d105c37fb9d758d84ef7d5aad792f8836cfc0f60e1c6577375dc1bee7b51e456", 0xa1}, {&(0x7f00000037c0)="68cb659a14dbc2c3756488eeb2ee9e0bc842cf9e60de0da0e8e91db043a44bb3ad16c3e08279becbbd12dde8aeb5e4f8252f47c9ce5e6a6b55a6a403b63b48cef7026ef74441be81e26d406cc0ed1e06d90780fc23d064bd35bf2780541574a2f28af76c3a3554bc924279b0a64f9b7e307e7ea94e78327e905c031bda70074f3135bf929864319c1c09332ba705b48991e64e2fdf05a752193ed866ca1965e513cb304de21f58daf68435b59c8ad17a52646baace4d1c2d34c1915ab7291a9a8a25ee6d51105fe4643d0e6d740d40d464ff5b7ce90ecec4d13897e6f804833425d6a1b5b4b0597a26c7a214d46ed716649dfbaf5ffac66c1be553306ab171a80f94df375f20bfb6a015f2e85202cb22c52c013fa3c6f98f4797fbd25f10e464e55ae255a8ed2a9d8e32f7b08aee374cb149d72c21f758f4d909228756076a944740233ba886ecda9c84df3cf0e64ba5d0d4cc00d08535dc1b5b957cbb6494e38d4a8c3e4bfb89422544d265f63d9edd4aaeac682bf7c57ac6ee2c619793983dfc458bed2694c6006e6bfe2540c46aaaa96638cce34fbe3011ed1ddf9293562f42cf251212f17981428e7f2c37be1cc75cdd6c5237c84ba1385b2516c335e14f9da2e2a8e983ce670781bb5e76a79c401c0d563b62ccf2e581dee6f9aad37d79b4dd6ac6169f32f06eec3d97f19882d7d17a8ed45cbd285acc1be6a993d9c072d61a092935b0163d680e41371bf0aeb3ef52b502b1cc7ab0d2194167154a46a0d1813509bbaa6a28ee20b7aa252c9d8e827ff16e08d594f98ce71d7d818fb1b60689a1af7a18cd02cc6b02a6f35217ca750d9897b085a1db55ee683652e2bab370356fe0dc9348ab40a449476b59705d265ce8ec1c599c722c42f4160a41f04bf40d8f2fe2eac2828ca3d7db177c8cbe6c440e5a4b90001ba6136fb460899361ac185d7c0ea2d0a19e525adecdb19a3036c2cc49e276aeae416a0fd441ab600e51534aa7878c84dee4b10ccb665eb411ce1c4c30201b025ec40b9c95ce7df6cd75db9fefa094690eeeb40a8dff5f5c0f60020c4accbef14b2f465207b1577e95a202c870f4b4981ede02d08234645312d641c5d77652dd4bfefa68f861358b39d8ddbf061310b1deeee087b674561eab9f2cfd1e17896f3c618506afaea961c3652334a51f6150bac02ffbf1eb59a51653013900aa4185e8e8209c6c5765fb275f5445f7b7703b41f048d6ba381d0480df717512a7d52290423c76a9584fbe56b708b291da47f72aa424f37e04418ea295cb39b0273ade9c8baf2b2de38110d4fe907fb6e0386b9da0864f5f9aab2e633679182e01437eecfc34cf16436195277ac30117456cb9d4f213d00511e089abbcfebb769e4c064bcc1113a35fff9cb0565a0973c5e71c70cac230dd5a3928a034ada8823e5ec57bfc0c949d20558e9ede85141f3b454034daae738ac6cd1eda730f54ff394056d07a041993b815b4f1b5b8e9ae5b45b9e5ccb959de9ffd75a8472f1921d305f632bcd4da3189f1d0d3880af314bd497add289f1df8483080333ef4f8916347bc1cd5a7d98fcaaccb7b305d2b6eb1c07eeef62957b75d0618eb791557f7c431210d5a32afec057fbdd501157a30bc11fe11b0f9e69cd6f6de40d5a977ba676e408312c1a1750eb6f8942c367bb4c9f43dab088e551f80fa4c85e29727303b8213c18b08bca142555f9f99a559f5c14aefbf90467b3a6fb3bebb8463af1e70e1dee516e729da47012c7eb94c2d9d6060ce92efa3ec2b1fecbd08f565b45504c603c28339769167ee9ad5b8912ab6240e0064ce56ea614eba86c561aacff795eaf4819ee982b53626db702ebeb6db8cbe1e3a8286d07ff26c26830e02e90aca5da37df0694f275c96cbea83e61eb9b63d14e5e7c661d990e50130d59554bfd3af95a9247ba6ce4fc6c622350665ec45fb669b1fa62a0df41ebfa2bdf635a2c08e0b7ce95f22b8ece840f1c9391c6a07750f0feee1e82442242a5c02ff3492ba2c4d6097b7a9944538b944640a4e961cb72801b30db28dceb3cc4c96653725f54edc25cba4faad847b21acda278edea077c3040962c3f5bf46d53e100eb800cbe3da31fb07efd48a2e0976c337f48965680c82090a662e1cd5a4c149f3fc54d83ffc5a421ad1cfad30c0bc99741c958d6f63a349d399103d9652d14ed1bf2bfaa3fbfc989d6c2ec2e3e2008863c214634fbee6956eef9495c0d2986eea3554279209eb4c962a307f8e1d7ddd1875aff2e6cd6d3f2147aa608436ff982c695d187bb811f17c64822f1f84dfb6eab4900513e36f5897066c9c6ea03a3289069e2d9bcce09f383ae222a910755aa6a490e77a74d836423dc2b562918721e25bef70fea8cce3c813711613f7b367f514f2dc350976ffb4b0f1c5c56bf7385c9bb1ded8d3fea88c9d7d3a9a2ffda9c1d3e8e5743dd24e225b58b49c669bc1321e520fc2841e37b94ec8747c1cd7548b3f7512c9f58b2be1a3c6ca696edf1f3bf15bf8a6eb1e44ab8074e4146ad0f8c4a7c64815eb04e9973951caf9b6a253c0a55717a130efac0575db659c35eb77a7c68076e9628c4214d8dce2819e6663388133f54134d5cebf483795c13e8be49b8896b5f625f88e39c14a1c3c9712e2916d7975f5a951a7b5b2ae98fb59ef90c2e38e6b18df8767dcddb23cb5e5e58a86e14a7af9958159db4c3c9378decef8e865925d4bd64f6770b82d4f492c1e7744b16fee8af86442856a9958804d146e409c112d85e38f9345a2a3571744cd49bbb4e7a171de2df1a583ffb78be7a0fe9d49e0ad4474f3a4d299919bf93cedf3de639477f1f0263170db4841f58e30d4dd9c26c81fd1730020dd91ec9fd91ed6891efaa15f298c42d476e8fe83add3e96ed10d1220a79f2cf6384e28b06000352fea9d14253bb6a8e445bdcceca691cae19f45cfdba63a516ffb34223adb46fa2fa89264501b5d9332e8620aebf7629d58c2e79b02c43edf34ed640d3983877fe1f060d5b25167125f086e7addf83187fe26fbe9d999f22441c6ef44eacda7c050eede3167147724d30aa0961eb56e484d9a459a38e02af0496fe1fc66114db82d3d8c25663722e591a037bc6cc60936edf4a356bcf83785892fcb1e8f80e541d89db48ce696d50bf7c7d1c3dbf7fbb7fe4bbafb85e137c4f712206e58c51a2a053c777c7925142cdeb5bc3aac6f9793986f4b0eebca27696f3291aad27db01330cd0c2470ebb53b1391f3a4e4534014ea7bfb2fabd52941f2c63bae6a7be5308420afe6e61f502bc97373e958ae09c20817d01152f78ad9043cf95a338867c3e834af0854f9def3a0386fb13f112fd239a5ba5c5adb463f37f9b2cc79cb169e8fb4ba8d872108e95fa8d279770a7b4c26a73876c1b73aff4cb1d368307f4bf22c563e9d1ac846f8991d2b8b7ad5444f87d064c793f3578bfdb0ec21358519a6ca809087ce0daee9388005a33bf2f6e940c4f3834a5fc55ba6dbbd74537fa89aa4666999000da0ed3837c8c7777e10a8246609cc6b6dfdb1e9aa0486a8c181819949c6b390063b121134a6984c27be028f9799c352c88c84e50b040566cae6db45085dd606500cadd3098b12f7e7ebf0af41fa9108007ffbddb7e90be8b19cfcc9d21d6c0ed8c7cec4f27ec7960b7a837a65cdf45adac322c55a0f6d2545a1e8269d8fc1027929fab44c7deee9645c455f0ffdcedac7fafed132250f8a5ee8b8f034461a86e61e1bb620f835794cb4856f9dc7db35264dff22aed182d9783fab36c4bc5db177601e44097ebf0ec2492d9172251944541ab6f3ce406667c0d074f81935b5e3f1878a7360bad81898237269b11b934c0cede3d79d8e3e27c271d7d9a199a5d5b272256415559a6c8507a7c19f504333f332e2b3277cb2941f3f6196039870e1e392d1bc8940233c160ace1bdee3fe93bbf68481f2300da99ae0ec401cbd00fa75ae1d251cc771cb6f01d4cfe95e1acf3ed595dd9e271b92dd28c48d63cee127dd0c76c2af7ac502e3689b4883cda24e459dbee1e460d68db0357fbff1e147196e06a2d78195bbdcbcd93a5771ab7a8b29e2992d46f74f6b99778d126c346dba8f020d90c5d60963cb72d334eb63f1f0af2710e2f2ce62b15e7d39a51f83aefa8552177395972931e33b48c306d50f553b51645a3e64b14776853261407b79122248baee637f7f7796920919b3758f902930be84252c34a32f36b326243ea3b455f64d8ba9160548a30f977f12185b5c0fb1bed6387d8619b77734fd003c6a0c79ebcbffdfb3f688d86fc731fbca2c63396e8f81a9ab76a856bdd44fac66b20c42a52f0586966cffa08321b033a00860c0d155f8e2911bf1740aa53b39835f276f2c0ecda5659f9aa3854d2b9630394e258ff520c7362386846502e40e365ea98a58aef3887dadfe4cb2c51758b43410a6f2ebaedc86fb86c3981e42b547b2ca97d6b5a2b958ef36578926ce0dfe3d6e398ae0c579d0bfbaffc73ba5515871cab77eec0260b9646d2be1f79e7214de88bea817728302bd6ed2cb61e552c8d8887f3605b1d82c4d16a4bbe4425e0f55410c201aec14730add604f833e60cefb76ae45e7df7c5ba58058b4a650eeff73ca025418fc5c2cf07e884e465c3c70c9d2bd2ef6c854f88c4863e508a7231981bf2630df993f451ab7584d68e167b0ae1deac4e2ef3c81c40eccc826856b3fb2bffa257ccd93c5be2f70785cc24ad975bad2e5366a4e7dfda0f81bcc458b7db6525952e0354957f9bfd9041c50c307121ce1f74c7e61ea7339905380e1c70cca199f0fd9a123952747de38f2e2d458afaabec31808764d526b87976807a1cf17f0a02db353cad4ebcc5f1c17899cef261a7ab04d90403ed3a3239a10bf73f3a7b767765fd063374714a3aba1e980ba2e4c8f607f99073edf79470c22d390cc54016a18644ca82798e68d31ce5176ccc9e4441ab0dfc31dd6d55033836fa152beaa9dbf27d9aede0d04fe915ac6d49cfaf91c19c7ae94865dd3b9d0114c314bc605232289342c064002cd954649229d2ca308e11e4219bebdb14a62661b57f741d74ea948071b7025f4457fef4ac40ef307b547b126e4990e613e08f76edaa536856c91bc6ee8d597b5182d19cc82f689303e2551bfe940dfd22fa136181bef6a4b8b7078f52ad893c9f764a22d4779190dbfcf1560389095c7caffe92683dcb96f7b13bcfb9a913ec6762dd2a28a00f6861caefa58b86a6e8e52ac47adbad63d4baa6fd114c663c45708267f1ef6d19c310f1669e84e103593c769c2f99eb5cad43f7b0f5c1f03c5a212654fd81b4297ecd81fbb1da5985ef070b300db4fb33a036f24df2aaf83d8d59d8cd9d5c8131c762889c28893124b38e6f530cddab225b8a1348c4bb151f4309e1bb563150ad3453c29d361617a1ce5bdb2d7a55877de39c322ce32b5239c1d00cea0c6ea526def1d3588c463c0f17da9ebd0de4a38d8f65bce440e52d51797af846433dfa478f3b3625a1067741dfa9a21d43de603b5b0601dbf910404f8381f97829dc8c90d550f6d60b576eee65f921de90e6cf93813323b9da826f6bf053f26c234fff8978b54b27e0b78973237e243725d1f415250d9fce444b0b22a48926ffd0bb5ccf31f42f6ee33fe399d55aa8907462bc1eb3c40e9b78d7e755713ccba4b96524d5f8898578485a9726f4d3a7b6df0a7323337198c7386f29064bd0c873d9dca75ceb5b4bdb420688227fc70ad4b4cc96fca84ec885a25bfda27efe487deb08709feb41921cd948a90cb3b3dc1", 0x1000}, {&(0x7f00000047c0)="690b3d5ea0757c89f961aa168c044e72225c2254740192508bf8ed50843d4218a8fd0aae450e36a370c5ef0e03b2a4", 0x2f}], 0x5, &(0x7f0000004880)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}], 0x18}, 0x810) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000004900)={0x0, @in6={{0xa, 0x4e22, 0x8, @loopback, 0x7e}}}, &(0x7f00000049c0)=0x84) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r8, 0x84, 0x71, &(0x7f0000004a00)={r12, 0x9}, &(0x7f0000004a40)=0x8) ioctl$FS_IOC_RESVSP(r11, 0x40305828, &(0x7f0000004a80)={0x0, 0x2, 0x5caa0000000, 0x8001}) syz_genetlink_get_family_id$ethtool(&(0x7f0000004ac0), r8) r13 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) ioctl$sock_SIOCGPGRP(r7, 0x8904, &(0x7f0000004b40)=0x0) ioctl$sock_FIOGETOWN(r8, 0x8903, &(0x7f0000004b80)=0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000004c40)={&(0x7f0000004b00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000004c00)={&(0x7f0000004bc0)={0x2c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r13}, @NL802154_ATTR_PID={0x8, 0x1c, r14}, @NL802154_ATTR_PID={0x8, 0x1c, r15}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4844}, 0x20004054) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000004cc0)={r12, 0x20, &(0x7f0000004c80)=[@in={0x2, 0x4e21, @private=0xa010101}, @in={0x2, 0x4e21, @multicast1}]}, &(0x7f0000004d00)=0x10) 427.175604ms ago: executing program 5 (id=2946): r0 = socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x58, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x17, 0x1, {0x7, 0x80, 0x0, 0x1000, 0x2, 0x7fffffff, 0x10088}}, {0x4}}]}]}, 0x58}}, 0x0) 358.138095ms ago: executing program 6 (id=2947): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r0, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b000000000006000100070000000c00130005"], 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x20) r4 = socket$pppl2tp(0x18, 0x1, 0x1) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$packet(0x11, 0x3, 0x300) splice(r5, 0x0, r7, 0x0, 0x10500, 0x0) close(0x4) (async) close(0x4) connect$pppl2tp(r4, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x32) (async) connect$pppl2tp(r4, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x32) sendmmsg(r4, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x54}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r9, 0xfeffff, 0x113, 0x3f00f000, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0x4a, 0xffffff0c}, 0x40) socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r10, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)={0x24, r11, 0xf81, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x1000000}, @val={0x8}, @void}}}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_GET_WIPHY(r10, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)={0x24, r11, 0xf81, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x1000000}, @val={0x8}, @void}}}, 0x24}}, 0x0) r12 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x2, &(0x7f00000001c0)=@raw=[@map_idx={0x18, 0x1, 0x5, 0x0, 0xe}], &(0x7f0000000380)='syzkaller\x00', 0x81, 0x77, &(0x7f00000003c0)=""/119, 0x41100, 0x28, '\x00', 0x0, 0x25, r5, 0x8, &(0x7f0000000540)={0x3, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000580)=[r6, r5, r6, r6, r5, r6, r6, r6], &(0x7f0000000600)=[{0x3, 0x3, 0x5, 0x6}, {0x3, 0x2, 0xa, 0x2}, {0x4, 0x4, 0x6, 0x1}], 0x10, 0x2}, 0x94) ioctl$NILFS_IOCTL_SET_SUINFO(r12, 0x40186e8d, &(0x7f0000001200)={&(0x7f0000001180)=[{0x268aef86, 0x0, 0x0, {0x4, 0xb}}, {0x5, 0x2, 0x0, {0x4, 0x80000001}}, {0x401, 0x2, 0x0, {0x5, 0x5}}], 0x3, 0x20, 0xd7, 0x8000000000000001}) (async) ioctl$NILFS_IOCTL_SET_SUINFO(r12, 0x40186e8d, &(0x7f0000001200)={&(0x7f0000001180)=[{0x268aef86, 0x0, 0x0, {0x4, 0xb}}, {0x5, 0x2, 0x0, {0x4, 0x80000001}}, {0x401, 0x2, 0x0, {0x5, 0x5}}], 0x3, 0x20, 0xd7, 0x8000000000000001}) r13 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0100001000130700000000fedbdf256401050100000000000000000000000064010101000000000000000000000000000000024e230002020060001d000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141427000000000000000000000000000000fe3200000000000000000000000000000000000000070000000000000000000000000000000200000000000000080000000000000001000000000000000500000000000000ffffff7f000000004305000000000080daf20000000000000100000000000080000000000000000000000000000000000300000000000000000000002cbd7000043500000a00040000000000000000004c001200726663343130362867636d28616573292900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000"], 0x13c}}, 0x48080) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000040)={'lo\x00', &(0x7f0000000440)=@ethtool_drvinfo={0x3, "7d92b42d063115c362c8a907e5e9b3bd554d5648e059b7a508b4413ddadbe535", "2accccc59b52517872fe74aa06470fc45c044b1e418a7eba53196678ea9d18c6", "11ec925561e5180f4ca7c860aa9077967436795364e21ac7fb81e9091ebce89a", "b12fbfee5c7217523fde7f59954f153c26428aab505ae1b41e5f21a8f866882a", "4988f2d64c78be0d18597d12f5ffbbbeb551a98db17322b1bb0f3897ab7be1e7", "4e34f0db39b883accca5962e", 0x1, 0x0, 0x0, 0x0, 0x1}}) 37.304355ms ago: executing program 5 (id=2948): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x5, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x0, 0x7, 0x88}]}, @IPSET_ATTR_TYPENAME={0x0, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}}, 0x0) bind$can_raw(r0, &(0x7f00000001c0), 0x10) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000140)={0x1d, r2}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0xf3f, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {0x7, 0xfff3}, {0xb, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000140)={@local, @empty, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local, {[@lsrr={0x83, 0x3, 0xa1}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610424000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_SREG={0x8}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x57}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_CSUM_TYPE={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x94}}, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r4, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000400)={0x6c, r5, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x50, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="aa59bdb86308b1605437ab50a529567c1133f2d3e1bd2c0fd375b90477b313e1"}, @NL80211_REKEY_DATA_REPLAY_CTR={0x13, 0x3, "3084a0f95e235fa1"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x9}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="9b383bb2269ab900cd78eed111eff98f"}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x24004000) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0xfffffffffffffe01, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000040)=0x28) sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0xa, 0x1, 'AUDIT\x00'}, @NFTA_TARGET_INFO={0x5, 0x3, "ef"}, @NFTA_TARGET_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x84}}, 0x0) setsockopt$sock_int(r3, 0x28, 0x7, 0x0, 0x0) 36.821231ms ago: executing program 1 (id=2949): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x34, r0, 0x20, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1}]]}, 0x34}}, 0x884) 0s ago: executing program 3 (id=2950): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x15, @loopback}, 0x10) listen(r0, 0x5) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f00000002c0)={r2, &(0x7f00000000c0)='nl80211\x00', 0xac01, &(0x7f0000000140)={@align=0x200, {0x9, 0x1, 0x0, 0x8}}, 0x1, &(0x7f0000000180)={@_ha_fsid}, &(0x7f0000000280)=0x49}) bind$rds(r3, &(0x7f0000000340)={0x2, 0x4e23, @private=0xa010101}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r6, @ANYBLOB='\b\x00&'], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc0}, 0x0) connect$inet(r2, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10) write(r2, &(0x7f0000000400)='PASV\r\n', 0x6) r7 = accept4(r0, 0x0, 0x0, 0x0) write(r7, &(0x7f0000000380)='227 Entering Passive Mode (127,0,0,1,19,136)', 0x2c) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000600)={0x1, 'lo\x00'}, 0x18) kernel console output (not intermixed with test programs): 181.269354][ T198] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.276584][ T198] bridge0: port 2(bridge_slave_1) entered forwarding state [ 181.391966][T10600] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1455'. [ 181.401967][ T5609] Bluetooth: hci5: command tx timeout [ 181.444156][T10603] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1456'. [ 181.743971][T10616] netlink: zone id is out of range [ 181.763008][T10616] netlink: zone id is out of range [ 181.779801][T10616] netlink: zone id is out of range [ 181.809846][T10616] netlink: zone id is out of range [ 181.825574][T10616] netlink: zone id is out of range [ 181.848993][T10616] netlink: zone id is out of range [ 181.854264][T10616] netlink: zone id is out of range [ 181.872637][T10616] netlink: zone id is out of range [ 181.884383][T10616] netlink: zone id is out of range [ 181.895409][T10621] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32) [ 181.916041][T10616] netlink: zone id is out of range [ 182.018474][T10621] netlink: 6 bytes leftover after parsing attributes in process `syz.1.1462'. [ 182.093693][T10636] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1461'. [ 182.422814][T10647] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1467'. [ 182.536133][T10394] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 183.041427][T10394] veth0_vlan: entered promiscuous mode [ 183.061142][T10394] veth1_vlan: entered promiscuous mode [ 183.133273][T10394] veth0_macvtap: entered promiscuous mode [ 183.146097][T10394] veth1_macvtap: entered promiscuous mode [ 183.185668][T10394] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 183.226284][T10394] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 183.357728][ T198] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.358792][T10678] netlink: 'syz.2.1475': attribute type 24 has an invalid length. [ 183.404257][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.441383][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.487508][ T5609] Bluetooth: hci5: command tx timeout [ 183.547598][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.578423][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.600344][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.634462][T10687] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1477'. [ 183.646892][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.663702][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.939244][T10702] team0: No ports can be present during mode change [ 185.019877][T10744] __nla_validate_parse: 2 callbacks suppressed [ 185.019907][T10744] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1499'. [ 185.061433][T10744] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1499'. [ 185.133198][T10752] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1501'. [ 185.323002][T10753] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 185.544001][T10774] netlink: 232 bytes leftover after parsing attributes in process `syz.2.1509'. [ 185.562795][ T5609] Bluetooth: hci5: command tx timeout [ 185.563454][T10774] ieee802154 phy1 wpan1: encryption failed: -22 [ 185.773941][T10787] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1513'. [ 185.903625][T10789] netlink: 'syz.2.1515': attribute type 2 has an invalid length. [ 186.222618][T10807] mac80211_hwsim hwsim9 ÿ: renamed from wlan1 [ 186.332678][T10817] sctp: [Deprecated]: syz.3.1522 (pid 10817) Use of int in max_burst socket option. [ 186.332678][T10817] Use struct sctp_assoc_value instead [ 186.690280][T10830] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1527'. [ 186.893350][T10846] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 186.988958][ T9] IPVS: starting estimator thread 0... [ 187.028601][T10855] block nbd3: not configured, cannot reconfigure [ 187.053962][T10857] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 187.087261][T10853] IPVS: using max 33 ests per chain, 79200 per kthread [ 187.229516][T10866] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 187.366350][T10874] xt_CT: No such helper "pptp" [ 187.381325][T10874] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1540'. [ 187.775492][T10886] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1545'. [ 187.898358][T10890] block nbd5: not configured, cannot reconfigure [ 188.052773][T10898] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1551'. [ 188.235929][T10905] netlink: 'syz.3.1552': attribute type 1 has an invalid length. [ 188.284078][T10905] xt_CT: You must specify a L4 protocol and not use inversions on it [ 188.313516][T10905] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1552'. [ 188.501971][T10923] syzkaller1: entered promiscuous mode [ 188.513056][T10923] syzkaller1: entered allmulticast mode [ 188.555505][T10923] geneve3: entered promiscuous mode [ 188.574142][T10923] geneve3: entered allmulticast mode [ 188.607714][T10919] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 188.621761][T10919] batadv_slave_0: entered promiscuous mode [ 188.631848][T10919] batadv_slave_0: entered allmulticast mode [ 189.034006][T10907] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 189.275043][T10950] ovs-system: entered promiscuous mode [ 189.304851][T10950] Cannot find map_set index 135 as target [ 189.345455][T10963] syzkaller0: entered promiscuous mode [ 189.371555][T10963] syzkaller0: entered allmulticast mode [ 189.371690][T10964] xt_CT: No such helper "snmp" [ 189.781588][T10985] IPv6: NLM_F_REPLACE set, but no existing node found! [ 190.043817][T11003] net_ratelimit: 4 callbacks suppressed [ 190.043838][T11003] netlink: zone id is out of range [ 190.059981][T11003] netlink: zone id is out of range [ 190.065296][T11003] netlink: zone id is out of range [ 190.247852][T11016] tipc: Enabling of bearer rejected, failed to enable media [ 190.415944][T11020] __nla_validate_parse: 5 callbacks suppressed [ 190.415960][T11020] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1586'. [ 190.488604][T11024] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1588'. [ 190.531730][T11026] syzkaller1: entered promiscuous mode [ 190.538863][T11026] syzkaller1: entered allmulticast mode [ 190.968771][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.976892][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.194326][T11061] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1598'. [ 191.259880][T11063] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1599'. [ 191.463554][T11071] wireguard: wg2: Could not create IPv4 socket [ 191.535959][T11076] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1604'. [ 191.548016][T11076] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1604'. [ 191.555271][T11078] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 191.557226][T11076] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1604'. [ 191.803553][T11089] IPVS: Unknown mcast interface: pimreg1 [ 191.816343][T11086] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1607'. [ 191.825591][T11090] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1610'. [ 191.956091][T11095] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1611'. [ 192.164414][T11109] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 192.308850][T11118] sctp: [Deprecated]: syz.5.1619 (pid 11118) Use of int in max_burst socket option deprecated. [ 192.308850][T11118] Use struct sctp_assoc_value instead [ 192.386586][T11127] netlink: 'syz.5.1621': attribute type 8 has an invalid length. [ 192.785956][T11142] veth1_macvtap: left promiscuous mode [ 192.792631][T11142] macsec0: entered promiscuous mode [ 193.648060][T11185] netlink: 'syz.3.1635': attribute type 83 has an invalid length. [ 193.683032][T11181] 8021q: adding VLAN 0 to HW filter on device bond3 [ 193.704416][T11186] tipc: Enabling of bearer rejected, failed to enable media [ 193.836118][T11201] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 194.280744][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.423972][T11226] netlink: 'syz.1.1646': attribute type 1 has an invalid length. [ 194.529603][T11227] 8021q: adding VLAN 0 to HW filter on device bond4 [ 194.884196][T11253] Bluetooth: hci0: invalid length 0, exp 4 for type 32 [ 194.933820][T11255] IPVS: set_ctl: invalid protocol: 44 127.0.0.1:20002 [ 195.111235][T11267] netlink: 'syz.5.1660': attribute type 11 has an invalid length. [ 195.211821][T11267] 0·: renamed from hsr0 (while UP) [ 195.230687][T11267] 0·: entered allmulticast mode [ 195.239650][T11267] hsr_slave_0: entered allmulticast mode [ 195.245473][T11267] hsr_slave_1: entered allmulticast mode [ 195.252731][T11267] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 195.444670][T11277] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 195.674589][T11286] __nla_validate_parse: 16 callbacks suppressed [ 195.674601][T11286] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1668'. [ 195.695551][T11286] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1668'. [ 195.824695][T11290] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1670'. [ 195.836276][T11290] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1670'. [ 195.865711][T11291] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1669'. [ 196.381761][T11319] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.1676'. [ 196.449893][T11325] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1679'. [ 196.502712][T11325] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1679'. [ 196.612909][T11337] xt_hashlimit: overflow, try lower: 3/0 [ 196.824333][T11343] netlink: 'syz.1.1684': attribute type 1 has an invalid length. [ 196.832301][T11343] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1684'. [ 196.935656][T11345] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 196.944272][T11345] team0: Device ipvlan2 is already an upper device of the team interface [ 196.966575][T11349] netlink: 666 bytes leftover after parsing attributes in process `syz.1.1686'. [ 197.123796][T11356] A link change request failed with some changes committed already. Interface gre2 may have been left with an inconsistent configuration, please check. [ 197.352227][T11364] syzkaller1: entered promiscuous mode [ 197.363525][T11364] syzkaller1: entered allmulticast mode [ 197.821548][T11392] No such timeout policy "s" [ 197.837427][T11392] netlink: Failed to associated timeout policy 's' [ 198.192440][T11414] macvlan0: entered promiscuous mode [ 198.221453][T11417] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 198.313883][T11417] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 198.637554][T11443] syzkaller0: entered allmulticast mode [ 198.804235][T11449] team0: Device gtp1 is of different type [ 198.846353][T11451] x_tables: duplicate underflow at hook 2 [ 201.328909][T11428] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 201.480772][ T5617] Bluetooth: hci1: command 0x0406 tx timeout [ 201.486907][ T50] Bluetooth: hci4: command 0x0406 tx timeout [ 201.493084][ T5612] Bluetooth: hci3: command 0x0401 tx timeout [ 201.494501][ T5626] Bluetooth: hci0: command 0x0c1a tx timeout [ 201.594120][T11474] netlink: 'syz.1.1726': attribute type 11 has an invalid length. [ 201.603754][T11474] netlink: 'syz.1.1726': attribute type 4 has an invalid length. [ 201.615712][T11474] __nla_validate_parse: 5 callbacks suppressed [ 201.615725][T11474] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1726'. [ 201.651369][T11474] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1726'. [ 201.798541][T11471] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1724'. [ 201.807276][T11481] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1728'. [ 201.825818][T11471] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1724'. [ 201.836139][T11471] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1724'. [ 202.132580][T11494] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1731'. [ 202.383757][T11510] netlink: 'syz.5.1737': attribute type 10 has an invalid length. [ 202.424920][T11510] team0: Port device dummy0 added [ 202.512679][T11514] netlink: NAT attributes may be specified only when CT COMMIT flag is also specified. [ 202.532323][T11516] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1740'. [ 202.537907][T11514] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 202.642533][T11526] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1742'. [ 202.654344][T11526] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1742'. [ 203.233555][T11559] vlan4: entered allmulticast mode [ 203.247177][T11559] bridge5: entered allmulticast mode [ 203.302385][T11563] syz_tun: entered allmulticast mode [ 203.416493][T11569] xt_TPROXY: Can be used only with -p tcp or -p udp [ 203.513892][T11571] netlink: 'syz.5.1755': attribute type 2 has an invalid length. [ 204.458021][T11635] x_tables: duplicate entry at hook 1 [ 204.513433][T11638] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 204.793609][T11652] syzkaller0: entered allmulticast mode [ 205.366079][T11679] x_tables: duplicate underflow at hook 1 [ 205.396930][T11682] veth1_macvtap: entered allmulticast mode [ 205.671489][ T4927] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 205.684228][ T4927] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 205.688658][T11697] netlink: 'syz.5.1786': attribute type 7 has an invalid length. [ 205.700842][ T4927] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 205.714550][ T4927] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 205.726769][ T4927] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 205.731447][T11697] netlink: 'syz.5.1786': attribute type 8 has an invalid length. [ 205.757436][T11698] xt_hashlimit: size too large, truncated to 1048576 [ 206.436997][T11734] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 206.513594][T11734] tipc: MTU too low for tipc bearer [ 206.566277][T11741] netlink: 'syz.0.1799': attribute type 1 has an invalid length. [ 206.938123][ T5803] IPVS: starting estimator thread 0... [ 207.013551][T11764] sctp: [Deprecated]: syz.1.1802 (pid 11764) Use of int in maxseg socket option. [ 207.013551][T11764] Use struct sctp_assoc_value instead [ 207.060484][T11759] IPVS: using max 30 ests per chain, 72000 per kthread [ 207.503642][T11784] __nla_validate_parse: 7 callbacks suppressed [ 207.503658][T11784] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1808'. [ 207.565563][T11693] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.578833][T11693] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.586358][T11693] bridge_slave_0: entered allmulticast mode [ 207.604200][T11693] bridge_slave_0: entered promiscuous mode [ 207.625683][T11693] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.657817][T11693] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.665319][T11693] bridge_slave_1: entered allmulticast mode [ 207.673770][T11693] bridge_slave_1: entered promiscuous mode [ 207.794010][T11693] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 207.816573][ T4927] Bluetooth: hci6: command tx timeout [ 207.853857][T11693] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 207.995447][T11693] team0: Port device team_slave_0 added [ 208.019739][T11693] team0: Port device team_slave_1 added [ 208.119065][ T12] bond0: (slave bond_slave_1): interface is now down [ 208.145677][ T12] bond0: (slave team0): interface is now down [ 208.208521][T11693] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 208.232537][T11693] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 208.265695][T11693] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 208.294135][T11693] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 208.350158][T11693] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 208.439477][T11693] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 208.828224][T11866] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1828'. [ 208.832793][T11693] hsr_slave_0: entered promiscuous mode [ 208.862579][T11868] netlink: 252 bytes leftover after parsing attributes in process `syz.1.1829'. [ 208.881996][T11693] hsr_slave_1: entered promiscuous mode [ 208.903943][T11693] debugfs: 'hsr0' already exists in 'hsr' [ 208.912239][T11693] Cannot create hsr debugfs directory [ 208.981340][T11874] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 209.081765][T11880] ieee802154 phy1 wpan1: encryption failed: -22 [ 209.132537][T11878] netlink: 'syz.1.1832': attribute type 12 has an invalid length. [ 209.142647][T11878] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1832'. [ 209.877265][ T4927] Bluetooth: hci6: command tx timeout [ 210.170629][T11693] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 210.215481][T11693] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 210.251140][T11693] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 210.274077][T11933] IPVS: set_ctl: invalid protocol: 60 172.30.253.2:20003 [ 210.293009][T11693] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 210.315668][T11937] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.1848'. [ 210.330972][T11933] sctp: [Deprecated]: syz.1.1848 (pid 11933) Use of int in max_burst socket option deprecated. [ 210.330972][T11933] Use struct sctp_assoc_value instead [ 210.350582][T11693] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 210.370673][T11693] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 210.390953][T11693] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 210.426406][T11693] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 210.488862][T11947] vlan2: entered promiscuous mode [ 210.513070][T11947] team0: entered promiscuous mode [ 210.526843][T11947] team_slave_0: entered promiscuous mode [ 210.536194][T11947] team_slave_1: entered promiscuous mode [ 210.590191][T11956] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1854'. [ 210.619955][T11956] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1854'. [ 210.658787][T11965] sctp: [Deprecated]: syz.1.1854 (pid 11965) Use of int in maxseg socket option. [ 210.658787][T11965] Use struct sctp_assoc_value instead [ 210.678918][ T35] bond0: (slave bond_slave_1): interface is now down [ 210.710080][ T35] bond0: (slave team0): interface is now down [ 210.922990][T11693] 8021q: adding VLAN 0 to HW filter on device bond0 [ 210.970479][T11693] 8021q: adding VLAN 0 to HW filter on device team0 [ 210.974582][T11979] Cannot find map_set index 2 as target [ 210.993749][T11156] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.001006][T11156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 211.071075][T11156] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.078302][T11156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 211.576128][T12006] syzkaller0: entered promiscuous mode [ 211.581968][T12006] syzkaller0: entered allmulticast mode [ 211.957315][ T4927] Bluetooth: hci6: command tx timeout [ 213.259269][ T12] bond0: (slave bond_slave_1): interface is now down [ 213.266855][ T12] bond0: (slave team0): interface is now down [ 213.765036][T12055] netlink: 6 bytes leftover after parsing attributes in process `syz.3.1879'. [ 213.984266][T12067] netlink: 'syz.1.1882': attribute type 3 has an invalid length. [ 214.037432][ T4927] Bluetooth: hci6: command tx timeout [ 214.218685][T12076] netlink: 116 bytes leftover after parsing attributes in process `syz.0.1884'. [ 214.219138][T11693] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 214.268745][T11156] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 214.430159][ T76] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 214.443221][T12091] sctp: [Deprecated]: syz.5.1888 (pid 12091) Use of struct sctp_assoc_value in delayed_ack socket option. [ 214.443221][T12091] Use struct sctp_sack_info instead [ 214.476947][ T76] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 214.578780][ T13] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 214.709430][T12107] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 214.720365][T12107] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 214.742161][T12105] vlan2: entered promiscuous mode [ 214.752552][T12105] geneve1: entered promiscuous mode [ 214.768812][T12105] vlan2: entered allmulticast mode [ 214.774221][T12105] geneve1: entered allmulticast mode [ 215.036796][T11693] veth0_vlan: entered promiscuous mode [ 215.073092][T11693] veth1_vlan: entered promiscuous mode [ 215.141432][T12127] netlink: 'syz.0.1898': attribute type 1 has an invalid length. [ 215.149561][T11693] veth0_macvtap: entered promiscuous mode [ 215.181427][T12129] netlink: 'syz.3.1899': attribute type 1 has an invalid length. [ 215.188761][T11693] veth1_macvtap: entered promiscuous mode [ 215.285837][T12139] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1901'. [ 215.323783][T12131] 8021q: adding VLAN 0 to HW filter on device bond5 [ 215.334690][T12131] bond4: (slave bond5): making interface the new active one [ 215.342980][T12131] bond4: (slave bond5): Enslaving as an active interface with an up link [ 215.386574][T12131] openvswitch: netlink: IP tunnel TTL not specified. [ 215.395564][T12142] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 215.406694][T12136] bond4: (slave gretap3): Enslaving as a backup interface with an up link [ 215.561572][T11693] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 215.627022][T11693] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 215.630763][T12156] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1906'. [ 215.750702][ T35] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.789763][ T35] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.808208][ T76] bond0: (slave bond_slave_1): interface is now down [ 215.829014][ T76] bond0: (slave team0): interface is now down [ 215.863112][ T198] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.893159][ T198] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.015359][ T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.041217][T12175] netlink: 'syz.1.1911': attribute type 16 has an invalid length. [ 216.055996][T12178] sctp: [Deprecated]: syz.3.1913 (pid 12178) Use of int in maxseg socket option. [ 216.055996][T12178] Use struct sctp_assoc_value instead [ 216.070558][ T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.070843][T12175] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1911'. [ 216.110170][T12182] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1914'. [ 216.135589][ T1064] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.156549][ T1064] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.193668][T12182] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1914'. [ 216.253937][T12182] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1914'. [ 216.336527][T12188] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1915'. [ 216.602497][T12207] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1919'. [ 216.640390][T12210] pim6reg: entered allmulticast mode [ 216.714843][T12210] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 216.813896][T12210] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 216.850241][T12210] bond0 (unregistering): Released all slaves [ 217.002754][T12232] FAULT_INJECTION: forcing a failure. [ 217.002754][T12232] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 217.053163][T12232] CPU: 0 UID: 0 PID: 12232 Comm: syz.3.1927 Not tainted syzkaller #0 PREEMPT(full) [ 217.053188][T12232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 217.053197][T12232] Call Trace: [ 217.053204][T12232] [ 217.053211][T12232] dump_stack_lvl+0xe8/0x150 [ 217.053239][T12232] should_fail_ex+0x40c/0x560 [ 217.053263][T12232] _copy_from_user+0x2d/0xb0 [ 217.053287][T12232] kstrtouint_from_user+0xd6/0x180 [ 217.053309][T12232] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 217.053343][T12232] proc_fail_nth_write+0x8e/0x210 [ 217.053364][T12232] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 217.053392][T12232] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 217.053412][T12232] vfs_write+0x296/0xba0 [ 217.053441][T12232] ? __pfx_vfs_write+0x10/0x10 [ 217.053464][T12232] ? __fget_files+0x2a/0x420 [ 217.053488][T12232] ? __fget_files+0x3a2/0x420 [ 217.053505][T12232] ? __fget_files+0x2a/0x420 [ 217.053532][T12232] ksys_write+0x150/0x270 [ 217.053557][T12232] ? __pfx_ksys_write+0x10/0x10 [ 217.053586][T12232] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.053604][T12232] do_syscall_64+0x174/0x580 [ 217.053622][T12232] ? trace_irq_disable+0x3b/0x140 [ 217.053641][T12232] ? clear_bhb_loop+0x70/0xc0 [ 217.053661][T12232] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.053674][T12232] RIP: 0033:0x7fca9715e90e [ 217.053691][T12232] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 217.053705][T12232] RSP: 002b:00007fca9807ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 217.053723][T12232] RAX: ffffffffffffffda RBX: 00007fca980806c0 RCX: 00007fca9715e90e [ 217.053734][T12232] RDX: 0000000000000001 RSI: 00007fca980800a0 RDI: 0000000000000005 [ 217.053744][T12232] RBP: 00007fca98080090 R08: 0000000000000000 R09: 0000000000000000 [ 217.053754][T12232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 217.053764][T12232] R13: 00007fca97426038 R14: 00007fca97425fa0 R15: 00007fff9b5dca58 [ 217.053792][T12232] [ 217.326116][T12240] netlink: 'syz.5.1929': attribute type 1 has an invalid length. [ 217.412726][T12240] 8021q: adding VLAN 0 to HW filter on device bond1 [ 217.444150][T12249] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 3, id = 0 [ 217.611582][T12261] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 217.618932][T12261] IPv6: NLM_F_CREATE should be set when creating new route [ 217.814953][T12271] ip_tables: iptables: counters copy to user failed while replacing table [ 217.847507][T12271] ip_tables: iptables: counters copy to user failed while replacing table [ 217.857969][T12271] ip_tables: iptables: counters copy to user failed while replacing table [ 217.874063][T12276] netlink: 'syz.3.1940': attribute type 1 has an invalid length. [ 217.882744][T12271] ip_tables: iptables: counters copy to user failed while replacing table [ 217.883022][T12271] ip_tables: iptables: counters copy to user failed while replacing table [ 217.910785][T12271] ip_tables: iptables: counters copy to user failed while replacing table [ 217.920599][T12271] ip_tables: iptables: counters copy to user failed while replacing table [ 218.104916][T12289] xt_HMARK: proto mask must be zero with L3 mode [ 218.250967][T12295] netlink: 'syz.3.1946': attribute type 1 has an invalid length. [ 218.315199][T12297] bridge0: port 3(syz_tun) entered blocking state [ 218.356648][T12297] bridge0: port 3(syz_tun) entered disabled state [ 218.362313][ T12] bond0: (slave bond_slave_1): interface is now down [ 218.373076][ T12] bond0: (slave team0): interface is now down [ 218.377539][T12297] syz_tun: entered allmulticast mode [ 218.418161][T12297] syz_tun: entered promiscuous mode [ 218.432104][T12301] xt_socket: unknown flags 0x8 [ 218.444891][T12297] bridge0: port 3(syz_tun) entered blocking state [ 218.451523][T12297] bridge0: port 3(syz_tun) entered forwarding state [ 218.949948][T12323] __nla_validate_parse: 8 callbacks suppressed [ 218.949964][T12323] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1955'. [ 218.953208][T12334] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1956'. [ 218.956377][T12323] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1955'. [ 218.990039][T12323] block nbd0: Unsupported socket: should be TCP or UNIX. [ 219.024290][T12337] netlink: 'syz.3.1958': attribute type 21 has an invalid length. [ 219.033027][T12337] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 219.042262][T12337] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1958'. [ 219.148217][T12339] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1958'. [ 220.093439][T12342] netlink: 340 bytes leftover after parsing attributes in process `syz.0.1959'. [ 220.209109][T12337] hsr_slave_0: left promiscuous mode [ 220.219969][T12337] hsr_slave_1: left promiscuous mode [ 220.447760][T12369] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1965'. [ 220.494436][T12373] net_ratelimit: 59 callbacks suppressed [ 220.494453][T12373] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 220.621232][T12369] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1965'. [ 220.744211][T12384] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1972'. [ 220.918838][ T76] bond0: (slave bond_slave_1): interface is now down [ 220.950564][ T76] bond0: (slave team0): interface is now down [ 220.965161][T12403] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1978'. [ 220.978889][T12402] netlink: 'syz.5.1976': attribute type 12 has an invalid length. [ 221.040655][T12402] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 221.191642][T12418] sctp: [Deprecated]: syz.0.1982 (pid 12418) Use of int in maxseg socket option. [ 221.191642][T12418] Use struct sctp_assoc_value instead [ 221.412058][T12432] xfrm2: entered allmulticast mode [ 221.864026][T12460] SET target dimension over the limit! [ 222.078937][T12477] sock: sock_timestamping_bind_phc: sock not bind to device [ 222.415878][T12494] netlink: 'syz.3.2006': attribute type 1 has an invalid length. [ 222.425520][T12494] netlink: 'syz.3.2006': attribute type 1 has an invalid length. [ 222.531521][T12496] gtp2: entered promiscuous mode [ 222.543106][T12496] gtp2: entered allmulticast mode [ 222.699517][T12505] bond2 (unregistering): Released all slaves [ 223.004171][T12521] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_cmd_wq": -EINTR [ 223.192780][T12538] netdevsim netdevsim3 : renamed from netdevsim0 (while UP) [ 223.401121][T12548] IPVS: length: 239 != 24 [ 223.482369][ T13] bond0: (slave bond_slave_1): interface is now down [ 223.506709][ T13] bond0: (slave team0): interface is now down [ 224.094269][T12589] 8021q: adding VLAN 0 to HW filter on device bond2 [ 224.106076][T12589] bond0: (slave bond2): Enslaving as an active interface with an up link [ 224.141932][T12592] __nla_validate_parse: 9 callbacks suppressed [ 224.142011][T12592] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2031'. [ 224.186898][T12597] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2032'. [ 224.225428][T12600] syz_tun: entered allmulticast mode [ 224.316659][T12606] FAULT_INJECTION: forcing a failure. [ 224.316659][T12606] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 224.330093][T12606] CPU: 0 UID: 0 PID: 12606 Comm: syz.3.2035 Not tainted syzkaller #0 PREEMPT(full) [ 224.330117][T12606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 224.330126][T12606] Call Trace: [ 224.330133][T12606] [ 224.330140][T12606] dump_stack_lvl+0xe8/0x150 [ 224.330168][T12606] should_fail_ex+0x40c/0x560 [ 224.330191][T12606] _copy_from_user+0x2d/0xb0 [ 224.330212][T12606] copy_from_sockptr_offset+0x66/0xa0 [ 224.330231][T12606] do_tcp_getsockopt+0xd9d/0x2980 [ 224.330256][T12606] ? __pfx_do_tcp_getsockopt+0x10/0x10 [ 224.330271][T12606] ? sock_common_getsockopt+0x20/0xb0 [ 224.330293][T12606] ? aa_file_perm+0x18b/0x15f0 [ 224.330313][T12606] ? aa_label_sk_perm+0x532/0x6e0 [ 224.330339][T12606] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 224.330362][T12606] ? _parse_integer_limit+0x192/0x1e0 [ 224.330384][T12606] ? __lock_acquire+0x683/0x2cf0 [ 224.330404][T12606] ? kstrtouint+0x6e/0xe0 [ 224.330449][T12606] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 224.330469][T12606] tcp_getsockopt+0x83/0x130 [ 224.330484][T12606] ? sock_common_getsockopt+0x20/0xb0 [ 224.330515][T12606] ? sock_common_getsockopt+0x20/0xb0 [ 224.330535][T12606] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 224.330556][T12606] do_sock_getsockopt+0x51d/0x7e0 [ 224.330580][T12606] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 224.330611][T12606] ? __fget_files+0x3a2/0x420 [ 224.330630][T12606] ? __fget_files+0x2a/0x420 [ 224.330654][T12606] __x64_sys_getsockopt+0x1a4/0x240 [ 224.330677][T12606] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.330695][T12606] do_syscall_64+0x174/0x580 [ 224.330713][T12606] ? trace_irq_disable+0x3b/0x140 [ 224.330731][T12606] ? clear_bhb_loop+0x70/0xc0 [ 224.330751][T12606] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.330767][T12606] RIP: 0033:0x7fca9719e0d9 [ 224.330782][T12606] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 224.330795][T12606] RSP: 002b:00007fca98080028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 224.330813][T12606] RAX: ffffffffffffffda RBX: 00007fca97425fa0 RCX: 00007fca9719e0d9 [ 224.330824][T12606] RDX: 0000000000000023 RSI: 0000000000000006 RDI: 0000000000000003 [ 224.330833][T12606] RBP: 00007fca98080090 R08: 0000200000002100 R09: 0000000000000000 [ 224.330842][T12606] R10: 00002000000020c0 R11: 0000000000000246 R12: 0000000000000001 [ 224.330852][T12606] R13: 00007fca97426038 R14: 00007fca97425fa0 R15: 00007fff9b5dca58 [ 224.330879][T12606] [ 225.131433][T12630] bond3: option all_slaves_active: invalid value (222) [ 225.182224][T12630] bond3 (unregistering): Released all slaves [ 225.319457][T12648] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2045'. [ 225.539450][T12665] FAULT_INJECTION: forcing a failure. [ 225.539450][T12665] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 225.580497][T12665] CPU: 0 UID: 0 PID: 12665 Comm: syz.1.2047 Not tainted syzkaller #0 PREEMPT(full) [ 225.580523][T12665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 225.580531][T12665] Call Trace: [ 225.580538][T12665] [ 225.580545][T12665] dump_stack_lvl+0xe8/0x150 [ 225.580573][T12665] should_fail_ex+0x40c/0x560 [ 225.580597][T12665] _copy_from_user+0x2d/0xb0 [ 225.580619][T12665] copy_from_sockptr_offset+0x66/0xa0 [ 225.580641][T12665] do_tcp_getsockopt+0x1d62/0x2980 [ 225.580665][T12665] ? __pfx_do_tcp_getsockopt+0x10/0x10 [ 225.580681][T12665] ? sock_common_getsockopt+0x20/0xb0 [ 225.580701][T12665] ? aa_file_perm+0x18b/0x15f0 [ 225.580722][T12665] ? aa_label_sk_perm+0x532/0x6e0 [ 225.580750][T12665] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 225.580773][T12665] ? _parse_integer_limit+0x192/0x1e0 [ 225.580799][T12665] ? __lock_acquire+0x683/0x2cf0 [ 225.580821][T12665] ? kstrtouint+0x6e/0xe0 [ 225.580871][T12665] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 225.580893][T12665] tcp_getsockopt+0x83/0x130 [ 225.580937][T12665] ? sock_common_getsockopt+0x20/0xb0 [ 225.580958][T12665] ? sock_common_getsockopt+0x20/0xb0 [ 225.580980][T12665] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 225.581002][T12665] do_sock_getsockopt+0x51d/0x7e0 [ 225.581026][T12665] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 225.581059][T12665] ? __fget_files+0x3a2/0x420 [ 225.581079][T12665] ? __fget_files+0x2a/0x420 [ 225.581105][T12665] __x64_sys_getsockopt+0x1a4/0x240 [ 225.581129][T12665] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.581145][T12665] do_syscall_64+0x174/0x580 [ 225.581163][T12665] ? trace_irq_disable+0x3b/0x140 [ 225.581182][T12665] ? clear_bhb_loop+0x70/0xc0 [ 225.581201][T12665] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.581218][T12665] RIP: 0033:0x7f558839e0d9 [ 225.581234][T12665] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 225.581248][T12665] RSP: 002b:00007f55891c4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 225.581266][T12665] RAX: ffffffffffffffda RBX: 00007f5588626180 RCX: 00007f558839e0d9 [ 225.581278][T12665] RDX: 0000000000000023 RSI: 0000000000000006 RDI: 0000000000000003 [ 225.581289][T12665] RBP: 00007f55891c4090 R08: 0000200000002100 R09: 0000000000000000 [ 225.581299][T12665] R10: 00002000000020c0 R11: 0000000000000246 R12: 0000000000000001 [ 225.581310][T12665] R13: 00007f5588626218 R14: 00007f5588626180 R15: 00007fff83494728 [ 225.581337][T12665] [ 226.021649][T12683] netlink: 260 bytes leftover after parsing attributes in process `syz.5.2054'. [ 226.037563][ T1064] bond0: (slave bond_slave_1): interface is now down [ 226.051470][ T1064] bond0: (slave team0): interface is now down [ 226.084269][T12687] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2054'. [ 226.100291][ T1064] bond0: now running without any active interface! [ 226.335887][T12697] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2059'. [ 226.491123][T12706] netlink: 72 bytes leftover after parsing attributes in process `syz.6.2061'. [ 226.948206][T12729] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2071'. [ 226.979770][T12729] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2071'. [ 227.030555][T12729] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2071'. [ 227.104137][T12743] FAULT_INJECTION: forcing a failure. [ 227.104137][T12743] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 227.157891][ T4927] Bluetooth: hci6: command tx timeout [ 227.167135][T12743] CPU: 0 UID: 0 PID: 12743 Comm: syz.1.2072 Not tainted syzkaller #0 PREEMPT(full) [ 227.167158][T12743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 227.167168][T12743] Call Trace: [ 227.167175][T12743] [ 227.167181][T12743] dump_stack_lvl+0xe8/0x150 [ 227.167208][T12743] should_fail_ex+0x40c/0x560 [ 227.167231][T12743] _copy_to_user+0x31/0xb0 [ 227.167255][T12743] copy_to_sockptr+0x5e/0xa0 [ 227.167273][T12743] do_tcp_getsockopt+0x221b/0x2980 [ 227.167305][T12743] ? __pfx_do_tcp_getsockopt+0x10/0x10 [ 227.167320][T12743] ? sock_common_getsockopt+0x20/0xb0 [ 227.167340][T12743] ? aa_file_perm+0x18b/0x15f0 [ 227.167359][T12743] ? aa_label_sk_perm+0x532/0x6e0 [ 227.167386][T12743] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 227.167408][T12743] ? _parse_integer_limit+0x192/0x1e0 [ 227.167433][T12743] ? __lock_acquire+0x683/0x2cf0 [ 227.167455][T12743] ? kstrtouint+0x6e/0xe0 [ 227.167499][T12743] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 227.167522][T12743] tcp_getsockopt+0x83/0x130 [ 227.167536][T12743] ? sock_common_getsockopt+0x20/0xb0 [ 227.167557][T12743] ? sock_common_getsockopt+0x20/0xb0 [ 227.167576][T12743] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 227.167595][T12743] do_sock_getsockopt+0x51d/0x7e0 [ 227.167617][T12743] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 227.167648][T12743] ? __fget_files+0x3a2/0x420 [ 227.167666][T12743] ? __fget_files+0x2a/0x420 [ 227.167691][T12743] __x64_sys_getsockopt+0x1a4/0x240 [ 227.167715][T12743] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.167733][T12743] do_syscall_64+0x174/0x580 [ 227.167750][T12743] ? trace_irq_disable+0x3b/0x140 [ 227.167768][T12743] ? clear_bhb_loop+0x70/0xc0 [ 227.167787][T12743] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.167802][T12743] RIP: 0033:0x7f558839e0d9 [ 227.167819][T12743] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 227.167833][T12743] RSP: 002b:00007f55891c4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 227.167851][T12743] RAX: ffffffffffffffda RBX: 00007f5588626180 RCX: 00007f558839e0d9 [ 227.167862][T12743] RDX: 0000000000000023 RSI: 0000000000000006 RDI: 0000000000000003 [ 227.167872][T12743] RBP: 00007f55891c4090 R08: 0000200000002100 R09: 0000000000000000 [ 227.167883][T12743] R10: 00002000000020c0 R11: 0000000000000246 R12: 0000000000000001 [ 227.167893][T12743] R13: 00007f5588626218 R14: 00007f5588626180 R15: 00007fff83494728 [ 227.167920][T12743] [ 227.744502][T12765] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.752950][T12765] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.823981][T12770] x_tables: duplicate underflow at hook 2 [ 228.131144][T12791] netlink: 'syz.1.2089': attribute type 1 has an invalid length. [ 228.152135][T12791] netlink: 'syz.1.2089': attribute type 1 has an invalid length. [ 228.184192][T12795] netlink: 'syz.3.2090': attribute type 83 has an invalid length. [ 228.197001][T12791] netlink: 'syz.1.2089': attribute type 2 has an invalid length. [ 228.468938][T12817] FAULT_INJECTION: forcing a failure. [ 228.468938][T12817] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 228.506178][T12817] CPU: 1 UID: 0 PID: 12817 Comm: syz.5.2095 Not tainted syzkaller #0 PREEMPT(full) [ 228.506201][T12817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 228.506211][T12817] Call Trace: [ 228.506217][T12817] [ 228.506224][T12817] dump_stack_lvl+0xe8/0x150 [ 228.506251][T12817] should_fail_ex+0x40c/0x560 [ 228.506275][T12817] _copy_to_user+0x31/0xb0 [ 228.506302][T12817] copy_to_sockptr+0x5e/0xa0 [ 228.506319][T12817] do_tcp_getsockopt+0x221b/0x2980 [ 228.506343][T12817] ? __pfx_do_tcp_getsockopt+0x10/0x10 [ 228.506359][T12817] ? sock_common_getsockopt+0x20/0xb0 [ 228.506381][T12817] ? aa_file_perm+0x18b/0x15f0 [ 228.506404][T12817] ? aa_label_sk_perm+0x532/0x6e0 [ 228.506434][T12817] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 228.506459][T12817] ? _parse_integer_limit+0x192/0x1e0 [ 228.506484][T12817] ? __lock_acquire+0x683/0x2cf0 [ 228.506506][T12817] ? kstrtouint+0x6e/0xe0 [ 228.506556][T12817] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 228.506578][T12817] tcp_getsockopt+0x83/0x130 [ 228.506593][T12817] ? sock_common_getsockopt+0x20/0xb0 [ 228.506615][T12817] ? sock_common_getsockopt+0x20/0xb0 [ 228.506642][T12817] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 228.506664][T12817] do_sock_getsockopt+0x51d/0x7e0 [ 228.506689][T12817] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 228.506721][T12817] ? __fget_files+0x3a2/0x420 [ 228.506741][T12817] ? __fget_files+0x2a/0x420 [ 228.506767][T12817] __x64_sys_getsockopt+0x1a4/0x240 [ 228.506791][T12817] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.506809][T12817] do_syscall_64+0x174/0x580 [ 228.506827][T12817] ? trace_irq_disable+0x3b/0x140 [ 228.506846][T12817] ? clear_bhb_loop+0x70/0xc0 [ 228.506866][T12817] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.506881][T12817] RIP: 0033:0x7feb3c59e0d9 [ 228.506898][T12817] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 228.506911][T12817] RSP: 002b:00007feb3a7f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 228.506929][T12817] RAX: ffffffffffffffda RBX: 00007feb3c825fa0 RCX: 00007feb3c59e0d9 [ 228.506941][T12817] RDX: 0000000000000023 RSI: 0000000000000006 RDI: 0000000000000003 [ 228.506951][T12817] RBP: 00007feb3a7f6090 R08: 0000200000002100 R09: 0000000000000000 [ 228.506961][T12817] R10: 00002000000020c0 R11: 0000000000000246 R12: 0000000000000001 [ 228.506972][T12817] R13: 00007feb3c826038 R14: 00007feb3c825fa0 R15: 00007ffdd677c7a8 [ 228.506999][T12817] [ 228.776520][T12824] netlink: 'syz.6.2097': attribute type 7 has an invalid length. [ 228.784951][T12824] netlink: 'syz.6.2097': attribute type 8 has an invalid length. [ 229.045885][T12837] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 229.281414][T12855] __nla_validate_parse: 6 callbacks suppressed [ 229.281431][T12855] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2108'. [ 229.304234][T12859] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2106'. [ 229.316487][T12847] netlink: 'syz.6.2102': attribute type 2 has an invalid length. [ 229.325285][T12847] netlink: 188 bytes leftover after parsing attributes in process `syz.6.2102'. [ 229.336905][T12847] x_tables: duplicate underflow at hook 1 [ 229.362070][T12859] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 229.575465][T12872] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2113'. [ 229.640520][T12872] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2113'. [ 230.255831][T12910] bond5: entered promiscuous mode [ 230.299443][T12910] bond5: entered allmulticast mode [ 230.320953][T12910] 8021q: adding VLAN 0 to HW filter on device bond5 [ 230.560149][T12942] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2133'. [ 231.011571][T12972] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2139'. [ 231.205224][T12972] team0: Port device team_slave_0 removed [ 231.321911][T12986] syz_tun: left allmulticast mode [ 231.383192][T12988] vcan0: tx drop: invalid da for name 0x0000000000000001 [ 231.567964][T12999] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2149'. [ 231.649337][T12995] bond9: option mode: invalid value (10) [ 231.665052][T12995] bond9 (unregistering): Released all slaves [ 231.983085][T13023] ip6t_srh: unknown srh invflags 4000 [ 232.086551][T13035] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2158'. [ 232.129920][T13035] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2158'. [ 232.160970][T13032] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.168591][T13032] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.651613][T13059] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.658880][T13059] bridge0: port 2(bridge_slave_1) entered listening state [ 232.666290][T13059] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.673531][T13059] bridge0: port 1(bridge_slave_0) entered listening state [ 232.752037][T13059] 8021q: adding VLAN 0 to HW filter on device bond1 [ 232.764753][T13069] xt_hashlimit: size too large, truncated to 1048576 [ 232.799534][T13059] 8021q: adding VLAN 0 to HW filter on device bond6 [ 232.812836][T13059] 8021q: adding VLAN 0 to HW filter on device bond7 [ 232.830298][T13059] A link change request failed with some changes committed already. Interface rose0 may have been left with an inconsistent configuration, please check. [ 233.173995][T13088] bridge0: port 3(gretap0) entered blocking state [ 233.212715][T13088] bridge0: port 3(gretap0) entered disabled state [ 233.229246][T13088] gretap0: entered allmulticast mode [ 233.253426][T13088] gretap0: left allmulticast mode [ 233.717755][T13114] netlink: 'syz.1.2185': attribute type 10 has an invalid length. [ 233.752479][T13114] bond0: (slave virt_wifi0): The slave device specified does not support setting the MAC address [ 233.774178][T13114] bond0: (slave virt_wifi0): Error -95 calling set_mac_address [ 234.026954][T13125] bond6: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 234.073820][T13125] bond6 (unregistering): Released all slaves [ 234.381613][T13148] __nla_validate_parse: 5 callbacks suppressed [ 234.381630][T13148] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2195'. [ 234.568193][T13157] IPv6: addrconf: prefix option has invalid lifetime [ 234.576195][T13157] IPv6: addrconf: prefix option has invalid lifetime [ 234.586219][T13148] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2195'. [ 234.629312][T13157] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2198'. [ 234.660639][T13159] IPv6: addrconf: prefix option has invalid lifetime [ 234.667430][T13159] IPv6: addrconf: prefix option has invalid lifetime [ 234.801494][T13148] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2195'. [ 234.825121][T13173] netlink: 'syz.6.2201': attribute type 16 has an invalid length. [ 234.853918][T13174] netlink: 'syz.6.2201': attribute type 16 has an invalid length. [ 234.872645][T13174] netlink: 'syz.6.2201': attribute type 17 has an invalid length. [ 234.882203][T13173] netlink: 'syz.6.2201': attribute type 17 has an invalid length. [ 234.991021][T13173] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 235.305959][T13188] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2206'. [ 235.461229][T13161] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 255.262430][T13204] syzkaller0: entered promiscuous mode [ 255.268700][T13205] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2209'. [ 255.268859][T13207] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2207'. [ 255.278254][T13204] syzkaller0: entered allmulticast mode [ 255.334449][T13207] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2207'. [ 255.353327][T13213] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2212'. [ 255.503922][T13217] netlink: 'syz.0.2213': attribute type 2 has an invalid length. [ 255.508972][T13221] netlink: 'syz.0.2213': attribute type 2 has an invalid length. [ 255.636371][T13227] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2216'. [ 255.713907][T13227] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2216'. [ 255.726477][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.921634][T13227] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2216'. [ 256.125540][T13263] netlink: 'syz.3.2224': attribute type 1 has an invalid length. [ 256.179690][T13268] netlink: 'syz.5.2225': attribute type 1 has an invalid length. [ 256.191175][T13268] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2225'. [ 256.202780][T13268] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2225'. [ 256.235620][T13263] bond10: entered promiscuous mode [ 256.244590][T13270] IPVS: set_ctl: invalid protocol: 51 172.20.20.170:20001 [ 256.254874][T13263] 8021q: adding VLAN 0 to HW filter on device bond10 [ 256.368149][T13270] erspan2: entered allmulticast mode [ 256.467313][T13279] netlink: 7 bytes leftover after parsing attributes in process `syz.3.2229'. [ 256.779444][T13299] openvswitch: netlink: Message has 512 unknown bytes. [ 256.926229][T13305] bond3: Unable to set peer notification delay as MII monitoring is disabled [ 256.939619][T13305] bond3 (unregistering): Released all slaves [ 256.991851][T13310] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 257.343731][T13331] macvlan0: left promiscuous mode [ 257.376182][T13331] netlink: 'syz.0.2244': attribute type 1 has an invalid length. [ 257.402082][T13331] netlink: 'syz.0.2244': attribute type 2 has an invalid length. [ 257.769719][T13350] xt_TPROXY: Can be used only with -p tcp or -p udp [ 258.167338][ T198] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 258.192421][ T198] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 258.219255][ T198] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 258.240906][ T76] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 258.386039][ T76] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0xf [ 258.616986][T13399] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 258.624551][T13400] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 258.738154][T13412] raw_sendmsg: syz.1.2266 forgot to set AF_INET. Fix it! [ 258.942322][T13424] netlink: 'syz.0.2270': attribute type 1 has an invalid length. [ 259.014117][T13429] netlink: 'syz.6.2272': attribute type 17 has an invalid length. [ 259.095906][T13424] 8021q: adding VLAN 0 to HW filter on device bond6 [ 259.145448][T13429] gretap0: entered promiscuous mode [ 259.200971][T13429] gretap0: left promiscuous mode [ 259.589877][T13462] netlink: 'syz.6.2280': attribute type 1 has an invalid length. [ 259.591864][T13463] netlink: 'syz.3.2282': attribute type 1 has an invalid length. [ 259.725251][T13463] 8021q: adding VLAN 0 to HW filter on device bond11 [ 260.528550][T13522] __nla_validate_parse: 23 callbacks suppressed [ 260.528569][T13522] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2295'. [ 260.698652][T13530] netlink: 'syz.6.2296': attribute type 1 has an invalid length. [ 260.739578][T13530] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2296'. [ 260.776333][T13535] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2297'. [ 261.365958][T13572] Bluetooth: hci0: unsupported parameter 5134 [ 261.372412][T13572] Bluetooth: hci0: unsupported parameter 8192 [ 261.378971][T13572] Bluetooth: hci0: unsupported parameter 5134 [ 261.385103][T13572] Bluetooth: hci0: unsupported parameter 8192 [ 261.442511][T13576] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2310'. [ 261.485493][T13576] macvtap1: entered promiscuous mode [ 261.490890][T13576] vlan0: entered promiscuous mode [ 261.496434][T13576] macvtap1: entered allmulticast mode [ 261.502402][T13576] vlan0: entered allmulticast mode [ 261.507876][T13576] veth0_vlan: entered allmulticast mode [ 261.857731][T13549] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 262.046155][T13597] openvswitch: netlink: nsh attr 109 is out of range max 3 [ 262.246513][T13612] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2319'. [ 262.258732][T13612] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2319'. [ 262.289312][T13609] gtp0: entered promiscuous mode [ 262.294441][T13609] gtp0: entered allmulticast mode [ 262.302679][T13615] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2322'. [ 262.316068][T13610] syzkaller1: tun_chr_ioctl cmd 1074025678 [ 262.322100][T13610] syzkaller1: group set to 0 [ 262.356861][T13612] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2319'. [ 262.461033][T13606] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2319'. [ 262.553459][T13606] team0: Port device team_slave_0 removed [ 262.611037][T13633] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.2326'. [ 262.762940][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 262.771673][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 262.858661][T13644] netlink: Invalid conntrack helper [ 262.873830][T13644] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 262.921109][ T4927] Bluetooth: hci2: command 0x0405 tx timeout [ 263.453694][T13678] netlink: 'syz.6.2341': attribute type 3 has an invalid length. [ 264.120819][T13681] bridge0: port 3(syz_tun) entered disabled state [ 264.188494][T13681] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.196112][T13681] bridge0: port 1(1¾x9ÿ) entered disabled state [ 264.718350][T13728] netlink: 'syz.6.2350': attribute type 1 has an invalid length. [ 265.287966][ T76] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 265.314126][ T76] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.341031][ T76] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 265.352204][ T76] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.372349][ T76] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 265.395096][ T76] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.423141][ T76] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 265.448940][ T76] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.592415][T13744] macsec2: entered promiscuous mode [ 265.611445][T13751] __nla_validate_parse: 9 callbacks suppressed [ 265.611463][T13751] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2357'. [ 265.630092][T13744] bridge0: entered promiscuous mode [ 265.650994][T13744] macsec2: entered allmulticast mode [ 265.679628][T13744] bridge0: entered allmulticast mode [ 265.729155][T13744] bridge0: port 4(macsec2) entered blocking state [ 265.781251][T13764] xt_cgroup: invalid path, errno=-2 [ 265.784579][T13744] bridge0: port 4(macsec2) entered disabled state [ 265.830397][T13744] bridge0: left allmulticast mode [ 265.925048][ T5724] bridge0: left promiscuous mode [ 266.091083][ T5710] IPVS: starting estimator thread 0... [ 266.158312][T13784] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2364'. [ 266.190766][T13784] netlink: 27 bytes leftover after parsing attributes in process `syz.5.2364'. [ 266.200404][T13780] IPVS: using max 31 ests per chain, 74400 per kthread [ 266.732176][T13816] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2374'. [ 266.760995][T13820] vlan1: entered allmulticast mode [ 266.775164][T13822] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2377'. [ 266.775651][T13820] veth0_vlan: entered allmulticast mode [ 266.797784][T13824] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2374'. [ 266.835988][ T5272] veth0_vlan: left promiscuous mode [ 266.906994][T13824] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 266.931701][T13824] batadv_slave_0: entered allmulticast mode [ 266.962339][ T5817] veth0_vlan: entered promiscuous mode [ 267.029336][T13830] netlink: 'syz.5.2379': attribute type 25 has an invalid length. [ 267.093330][T13833] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2381'. [ 267.212742][T13833] bond1: option xmit_hash_policy: invalid value (64) [ 267.236972][T13833] bond1 (unregistering): Released all slaves [ 267.371787][T13854] netlink: 'syz.1.2383': attribute type 1 has an invalid length. [ 267.452419][T13856] netlink: 'syz.3.2386': attribute type 10 has an invalid length. [ 267.535582][T13856] team0: Port device dummy0 added [ 267.880634][T13856] netlink: 'syz.3.2386': attribute type 10 has an invalid length. [ 267.957447][T13856] team0: Port device dummy0 removed [ 268.053607][T13881] macvtap0: entered allmulticast mode [ 268.064754][T13881] veth0_macvtap: entered allmulticast mode [ 268.445837][T13905] FAULT_INJECTION: forcing a failure. [ 268.445837][T13905] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 268.476804][T13905] CPU: 1 UID: 0 PID: 13905 Comm: syz.3.2396 Not tainted syzkaller #0 PREEMPT(full) [ 268.476828][T13905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 268.476851][T13905] Call Trace: [ 268.476858][T13905] [ 268.476865][T13905] dump_stack_lvl+0xe8/0x150 [ 268.476895][T13905] should_fail_ex+0x40c/0x560 [ 268.476919][T13905] _copy_from_user+0x2d/0xb0 [ 268.476942][T13905] ___sys_sendmsg+0x1c6/0x360 [ 268.476967][T13905] ? __lock_acquire+0x683/0x2cf0 [ 268.476989][T13905] ? __pfx____sys_sendmsg+0x10/0x10 [ 268.477032][T13905] ? __fget_files+0x2a/0x420 [ 268.477053][T13905] ? __fget_files+0x3a2/0x420 [ 268.477077][T13905] __x64_sys_sendmsg+0x1b1/0x290 [ 268.477097][T13905] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 268.477128][T13905] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.477146][T13905] do_syscall_64+0x174/0x580 [ 268.477164][T13905] ? clear_bhb_loop+0x70/0xc0 [ 268.477183][T13905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.477198][T13905] RIP: 0033:0x7fca9719e0d9 [ 268.477214][T13905] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 268.477227][T13905] RSP: 002b:00007fca98080028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 268.477244][T13905] RAX: ffffffffffffffda RBX: 00007fca97425fa0 RCX: 00007fca9719e0d9 [ 268.477255][T13905] RDX: 0000000000000010 RSI: 0000200000000b40 RDI: 0000000000000004 [ 268.477265][T13905] RBP: 00007fca98080090 R08: 0000000000000000 R09: 0000000000000000 [ 268.477274][T13905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 268.477283][T13905] R13: 00007fca97426038 R14: 00007fca97425fa0 R15: 00007fff9b5dca58 [ 268.477310][T13905] [ 269.293019][T13932] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2404'. [ 269.372195][T13934] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2405'. [ 269.634102][T13946] FAULT_INJECTION: forcing a failure. [ 269.634102][T13946] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 269.687284][T13946] CPU: 0 UID: 0 PID: 13946 Comm: syz.1.2409 Not tainted syzkaller #0 PREEMPT(full) [ 269.687308][T13946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 269.687317][T13946] Call Trace: [ 269.687323][T13946] [ 269.687330][T13946] dump_stack_lvl+0xe8/0x150 [ 269.687357][T13946] should_fail_ex+0x40c/0x560 [ 269.687379][T13946] _copy_from_user+0x2d/0xb0 [ 269.687400][T13946] __copy_msghdr+0x390/0x590 [ 269.687423][T13946] ___sys_sendmsg+0x213/0x360 [ 269.687438][T13946] ? __lock_acquire+0x683/0x2cf0 [ 269.687463][T13946] ? __pfx____sys_sendmsg+0x10/0x10 [ 269.687511][T13946] ? __fget_files+0x2a/0x420 [ 269.687530][T13946] ? __fget_files+0x3a2/0x420 [ 269.687556][T13946] __x64_sys_sendmsg+0x1b1/0x290 [ 269.687576][T13946] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 269.687620][T13946] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.687636][T13946] do_syscall_64+0x174/0x580 [ 269.687653][T13946] ? trace_irq_disable+0x3b/0x140 [ 269.687672][T13946] ? clear_bhb_loop+0x70/0xc0 [ 269.687691][T13946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.687707][T13946] RIP: 0033:0x7f558839e0d9 [ 269.687723][T13946] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 269.687736][T13946] RSP: 002b:00007f5589206028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 269.687754][T13946] RAX: ffffffffffffffda RBX: 00007f5588625fa0 RCX: 00007f558839e0d9 [ 269.687765][T13946] RDX: 0000000000000010 RSI: 0000200000000b40 RDI: 0000000000000004 [ 269.687775][T13946] RBP: 00007f5589206090 R08: 0000000000000000 R09: 0000000000000000 [ 269.687784][T13946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 269.687793][T13946] R13: 00007f5588626038 R14: 00007f5588625fa0 R15: 00007fff83494728 [ 269.687820][T13946] [ 269.695653][T13948] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2410'. [ 269.956825][ T5609] block nbd1: Receive control failed (result -107) [ 270.003416][T13965] netlink: 'syz.1.2412': attribute type 2 has an invalid length. [ 270.026534][T13965] syzkaller1: entered promiscuous mode [ 270.035843][T13965] syzkaller1: entered allmulticast mode [ 270.403449][T13987] Bluetooth: hci0: invalid length 0, exp 2 for type 14 [ 270.504078][T13994] FAULT_INJECTION: forcing a failure. [ 270.504078][T13994] name failslab, interval 1, probability 0, space 0, times 0 [ 270.518527][T13994] CPU: 0 UID: 0 PID: 13994 Comm: syz.6.2422 Not tainted syzkaller #0 PREEMPT(full) [ 270.518551][T13994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 270.518560][T13994] Call Trace: [ 270.518566][T13994] [ 270.518571][T13994] dump_stack_lvl+0xe8/0x150 [ 270.518603][T13994] should_fail_ex+0x40c/0x560 [ 270.518626][T13994] should_failslab+0xa8/0x100 [ 270.518649][T13994] __kmalloc_cache_noprof+0xa8/0x660 [ 270.518668][T13994] ? llc_sap_find+0x74/0x3d0 [ 270.518688][T13994] ? llc_sap_open+0xe1/0x3b0 [ 270.518705][T13994] ? llc_sap_open+0xe1/0x3b0 [ 270.518729][T13994] llc_sap_open+0xe1/0x3b0 [ 270.518752][T13994] llc_ui_autobind+0x1f1/0x560 [ 270.518775][T13994] llc_ui_sendmsg+0x1f6/0xe30 [ 270.518811][T13994] ? __pfx_llc_ui_sendmsg+0x10/0x10 [ 270.518829][T13994] ? aa_sock_msg_perm+0xf1/0x1b0 [ 270.518850][T13994] ? __pfx_llc_ui_sendmsg+0x10/0x10 [ 270.518867][T13994] sock_sendmsg_nosec+0x13a/0x180 [ 270.518892][T13994] ____sys_sendmsg+0x54e/0x850 [ 270.518916][T13994] ? __pfx_____sys_sendmsg+0x10/0x10 [ 270.518942][T13994] ? import_iovec+0x73/0xa0 [ 270.518967][T13994] ___sys_sendmsg+0x2a5/0x360 [ 270.518983][T13994] ? __lock_acquire+0x683/0x2cf0 [ 270.519006][T13994] ? __pfx____sys_sendmsg+0x10/0x10 [ 270.519054][T13994] ? __fget_files+0x2a/0x420 [ 270.519072][T13994] ? __fget_files+0x3a2/0x420 [ 270.519102][T13994] __x64_sys_sendmsg+0x1b1/0x290 [ 270.519123][T13994] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 270.519159][T13994] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.519177][T13994] do_syscall_64+0x174/0x580 [ 270.519194][T13994] ? trace_irq_disable+0x3b/0x140 [ 270.519213][T13994] ? clear_bhb_loop+0x70/0xc0 [ 270.519234][T13994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.519250][T13994] RIP: 0033:0x7f2f2519e0d9 [ 270.519266][T13994] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 270.519280][T13994] RSP: 002b:00007f2f26058028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 270.519298][T13994] RAX: ffffffffffffffda RBX: 00007f2f25425fa0 RCX: 00007f2f2519e0d9 [ 270.519310][T13994] RDX: 0000000000000010 RSI: 0000200000000b40 RDI: 0000000000000004 [ 270.519329][T13994] RBP: 00007f2f26058090 R08: 0000000000000000 R09: 0000000000000000 [ 270.519339][T13994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 270.519348][T13994] R13: 00007f2f25426038 R14: 00007f2f25425fa0 R15: 00007ffd729af548 [ 270.519377][T13994] [ 270.843964][T14003] __nla_validate_parse: 1 callbacks suppressed [ 270.843982][T14003] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2425'. [ 270.898752][T14003] netlink: 'syz.0.2425': attribute type 7 has an invalid length. [ 270.906640][T14003] netlink: 'syz.0.2425': attribute type 8 has an invalid length. [ 270.914775][T14003] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2425'. [ 270.958264][T14005] openvswitch: netlink: Duplicate key (type 0). [ 271.089196][T14017] FAULT_INJECTION: forcing a failure. [ 271.089196][T14017] name failslab, interval 1, probability 0, space 0, times 0 [ 271.147173][T14017] CPU: 1 UID: 0 PID: 14017 Comm: syz.0.2430 Not tainted syzkaller #0 PREEMPT(full) [ 271.147197][T14017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 271.147206][T14017] Call Trace: [ 271.147213][T14017] [ 271.147221][T14017] dump_stack_lvl+0xe8/0x150 [ 271.147249][T14017] should_fail_ex+0x40c/0x560 [ 271.147272][T14017] should_failslab+0xa8/0x100 [ 271.147296][T14017] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 271.147314][T14017] ? __nf_conntrack_alloc+0x81/0x3e0 [ 271.147326][T14017] ? __nf_conntrack_alloc+0x81/0x3e0 [ 271.147343][T14017] __nf_conntrack_alloc+0x81/0x3e0 [ 271.147360][T14017] init_conntrack+0x170/0x1080 [ 271.147379][T14017] ? __pfx_init_conntrack+0x10/0x10 [ 271.147397][T14017] ? __pfx___nf_conntrack_find_get+0x10/0x10 [ 271.147416][T14017] ? __siphash_unaligned+0x25c/0x3e0 [ 271.147436][T14017] nf_conntrack_in+0xbc3/0x15a0 [ 271.147464][T14017] ? __pfx_nf_conntrack_in+0x10/0x10 [ 271.147482][T14017] ? ipt_do_table+0x2b9/0x15d0 [ 271.147503][T14017] ? nf_hook+0xa1/0x3a0 [ 271.147519][T14017] ? ipv4_conntrack_defrag+0x2a0/0x5b0 [ 271.147538][T14017] ? ipv4_conntrack_local+0x126/0x210 [ 271.147555][T14017] ? __pfx_ipv4_conntrack_local+0x10/0x10 [ 271.147576][T14017] nf_hook_slow+0xc5/0x220 [ 271.147598][T14017] ? __pfx_dst_output+0x10/0x10 [ 271.147613][T14017] nf_hook+0x22a/0x3a0 [ 271.147634][T14017] ? nf_hook+0xa1/0x3a0 [ 271.147649][T14017] ? __pfx_nf_hook+0x10/0x10 [ 271.147664][T14017] ? __ip_local_out+0x152/0x6a0 [ 271.147684][T14017] ? __pfx_dst_output+0x10/0x10 [ 271.147713][T14017] __ip_local_out+0x558/0x6a0 [ 271.147729][T14017] ? __pfx_dst_output+0x10/0x10 [ 271.147750][T14017] ip_local_out+0x2a/0x190 [ 271.147768][T14017] ? __ip_queue_xmit+0x65/0x1b10 [ 271.147785][T14017] __ip_queue_xmit+0x10df/0x1b10 [ 271.147809][T14017] ? __ip_queue_xmit+0x65/0x1b10 [ 271.147830][T14017] ? __pfx_ip_queue_xmit+0x10/0x10 [ 271.147848][T14017] __tcp_transmit_skb+0x2d18/0x47c0 [ 271.147888][T14017] ? rcu_is_watching+0x15/0xb0 [ 271.147923][T14017] ? __pfx___tcp_transmit_skb+0x10/0x10 [ 271.147940][T14017] ? ktime_get+0x45/0x220 [ 271.147965][T14017] ? ktime_get+0x45/0x220 [ 271.147981][T14017] ? seqcount_lockdep_reader_access+0xea/0x100 [ 271.148010][T14017] tcp_connect+0x220b/0x53e0 [ 271.148061][T14017] ? __pfx_tcp_connect+0x10/0x10 [ 271.148096][T14017] ? __asan_memset+0x22/0x50 [ 271.148119][T14017] ? __pfx_tcp_fastopen_defer_connect+0x10/0x10 [ 271.148140][T14017] ? secure_tcp_seq_and_ts_off+0xf2/0x1d0 [ 271.148164][T14017] ? sk_setup_caps+0x94f/0xbc0 [ 271.148181][T14017] ? sk_setup_caps+0x29/0xbc0 [ 271.148197][T14017] tcp_v4_connect+0x1051/0x1950 [ 271.148228][T14017] ? __pfx_tcp_v4_connect+0x10/0x10 [ 271.148257][T14017] __inet_stream_connect+0x258/0xe00 [ 271.148283][T14017] ? do_raw_spin_lock+0x12b/0x2f0 [ 271.148297][T14017] ? lock_sock_nested+0x6a/0x100 [ 271.148320][T14017] ? __pfx___inet_stream_connect+0x10/0x10 [ 271.148342][T14017] ? inet_stream_connect+0x51/0xa0 [ 271.148359][T14017] ? __local_bh_enable_ip+0xd0/0x130 [ 271.148380][T14017] inet_stream_connect+0x66/0xa0 [ 271.148398][T14017] __sys_connect+0x323/0x460 [ 271.148417][T14017] ? __pfx___sys_connect+0x10/0x10 [ 271.148445][T14017] ? __pfx_ksys_write+0x10/0x10 [ 271.148472][T14017] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.148489][T14017] __x64_sys_connect+0x7a/0x90 [ 271.148504][T14017] do_syscall_64+0x174/0x580 [ 271.148519][T14017] ? trace_irq_disable+0x3b/0x140 [ 271.148536][T14017] ? clear_bhb_loop+0x70/0xc0 [ 271.148551][T14017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.148563][T14017] RIP: 0033:0x7f7e38f9e0d9 [ 271.148577][T14017] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 271.148588][T14017] RSP: 002b:00007f7e39e8d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 271.148602][T14017] RAX: ffffffffffffffda RBX: 00007f7e39226090 RCX: 00007f7e38f9e0d9 [ 271.148611][T14017] RDX: 0000000000000010 RSI: 0000200000000700 RDI: 0000000000000006 [ 271.148618][T14017] RBP: 00007f7e39e8d090 R08: 0000000000000000 R09: 0000000000000000 [ 271.148626][T14017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 271.148633][T14017] R13: 00007f7e39226128 R14: 00007f7e39226090 R15: 00007fffc15188d8 [ 271.148655][T14017] [ 271.640948][T14026] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 271.695650][T14026] netdevsim netdevsim6 netdevsim0: left promiscuous mode [ 271.749730][T14028] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2435'. [ 271.889658][T14030] FAULT_INJECTION: forcing a failure. [ 271.889658][T14030] name failslab, interval 1, probability 0, space 0, times 0 [ 271.902507][T14030] CPU: 1 UID: 0 PID: 14030 Comm: syz.1.2436 Not tainted syzkaller #0 PREEMPT(full) [ 271.902530][T14030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 271.902539][T14030] Call Trace: [ 271.902546][T14030] [ 271.902552][T14030] dump_stack_lvl+0xe8/0x150 [ 271.902579][T14030] should_fail_ex+0x40c/0x560 [ 271.902603][T14030] should_failslab+0xa8/0x100 [ 271.902627][T14030] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 271.902645][T14030] ? local_lock_release+0x9c/0x160 [ 271.902663][T14030] ? __alloc_skb+0x1d7/0x7a0 [ 271.902676][T14030] ? __alloc_skb+0x1d7/0x7a0 [ 271.902697][T14030] __alloc_skb+0x1d7/0x7a0 [ 271.902717][T14030] alloc_skb_with_frags+0xc6/0x760 [ 271.902735][T14030] ? __lock_acquire+0x683/0x2cf0 [ 271.902763][T14030] sock_alloc_send_pskb+0x878/0x990 [ 271.902799][T14030] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 271.902831][T14030] ? llc_ui_sendmsg+0x433/0xe30 [ 271.902851][T14030] ? llc_ui_sendmsg+0x433/0xe30 [ 271.902868][T14030] ? __local_bh_enable_ip+0xd0/0x130 [ 271.902891][T14030] llc_ui_sendmsg+0x459/0xe30 [ 271.902925][T14030] ? __pfx_llc_ui_sendmsg+0x10/0x10 [ 271.902945][T14030] ? aa_sock_msg_perm+0xf1/0x1b0 [ 271.902966][T14030] ? __pfx_llc_ui_sendmsg+0x10/0x10 [ 271.902983][T14030] sock_sendmsg_nosec+0x13a/0x180 [ 271.903007][T14030] ____sys_sendmsg+0x54e/0x850 [ 271.903030][T14030] ? __pfx_____sys_sendmsg+0x10/0x10 [ 271.903059][T14030] ? import_iovec+0x73/0xa0 [ 271.903083][T14030] ___sys_sendmsg+0x2a5/0x360 [ 271.903100][T14030] ? __lock_acquire+0x683/0x2cf0 [ 271.903122][T14030] ? __pfx____sys_sendmsg+0x10/0x10 [ 271.903171][T14030] ? __fget_files+0x2a/0x420 [ 271.903190][T14030] ? __fget_files+0x3a2/0x420 [ 271.903218][T14030] __x64_sys_sendmsg+0x1b1/0x290 [ 271.903239][T14030] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 271.903270][T14030] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.903286][T14030] do_syscall_64+0x174/0x580 [ 271.903303][T14030] ? trace_irq_disable+0x3b/0x140 [ 271.903321][T14030] ? clear_bhb_loop+0x70/0xc0 [ 271.903340][T14030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.903356][T14030] RIP: 0033:0x7f558839e0d9 [ 271.903373][T14030] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 271.903386][T14030] RSP: 002b:00007f5589206028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 271.903404][T14030] RAX: ffffffffffffffda RBX: 00007f5588625fa0 RCX: 00007f558839e0d9 [ 271.903415][T14030] RDX: 0000000000000010 RSI: 0000200000000b40 RDI: 0000000000000004 [ 271.903426][T14030] RBP: 00007f5589206090 R08: 0000000000000000 R09: 0000000000000000 [ 271.903436][T14030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 271.903445][T14030] R13: 00007f5588626038 R14: 00007f5588625fa0 R15: 00007fff83494728 [ 271.903472][T14030] [ 272.222974][T14037] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2437'. [ 272.229831][T14033] netlink: 768 bytes leftover after parsing attributes in process `syz.5.2438'. [ 272.250243][T14039] macvlan0: entered promiscuous mode [ 272.706071][T14072] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2448'. [ 272.742069][T14073] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2449'. [ 272.752874][T14073] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2449'. [ 272.766523][T14072] block nbd3: not configured, cannot reconfigure [ 272.792845][T14075] bridge0: port 3(gretap0) entered blocking state [ 272.809470][T14075] bridge0: port 3(gretap0) entered disabled state [ 272.841973][T14075] gretap0: entered allmulticast mode [ 272.898381][T14075] gretap0: left allmulticast mode [ 272.915078][T14074] vcan0: left allmulticast mode [ 273.099662][T14091] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2454'. [ 273.353801][T14111] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 273.565184][T14107] xt_hashlimit: size too large, truncated to 1048576 [ 273.872640][T14145] FAULT_INJECTION: forcing a failure. [ 273.872640][T14145] name failslab, interval 1, probability 0, space 0, times 0 [ 273.886910][T14145] CPU: 1 UID: 0 PID: 14145 Comm: syz.1.2469 Not tainted syzkaller #0 PREEMPT(full) [ 273.886929][T14145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 273.886937][T14145] Call Trace: [ 273.886943][T14145] [ 273.886949][T14145] dump_stack_lvl+0xe8/0x150 [ 273.886974][T14145] should_fail_ex+0x40c/0x560 [ 273.886995][T14145] should_failslab+0xa8/0x100 [ 273.887014][T14145] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 273.887031][T14145] ? skb_clone+0x212/0x3a0 [ 273.887051][T14145] ? skb_clone+0x212/0x3a0 [ 273.887071][T14145] skb_clone+0x212/0x3a0 [ 273.887086][T14145] ? dev_queue_xmit_nit+0x270/0xac0 [ 273.887103][T14145] dev_queue_xmit_nit+0x28d/0xac0 [ 273.887117][T14145] ? dev_queue_xmit_nit+0x2d/0xac0 [ 273.887135][T14145] dev_hard_start_xmit+0x1c1/0x830 [ 273.887163][T14145] __dev_queue_xmit+0x14c0/0x3820 [ 273.887191][T14145] ? __dev_queue_xmit+0x29b/0x3820 [ 273.887222][T14145] ? __might_fault+0xaf/0x130 [ 273.887239][T14145] ? __pfx___dev_queue_xmit+0x10/0x10 [ 273.887257][T14145] ? _copy_from_iter+0x2d3/0x1660 [ 273.887294][T14145] ? eth_header+0x11b/0x200 [ 273.887314][T14145] ? llc_build_and_send_ui_pkt+0x27f/0x3b0 [ 273.887337][T14145] llc_ui_sendmsg+0x901/0xe30 [ 273.887372][T14145] ? __pfx_llc_ui_sendmsg+0x10/0x10 [ 273.887390][T14145] ? aa_sock_msg_perm+0xf1/0x1b0 [ 273.887409][T14145] ? __pfx_llc_ui_sendmsg+0x10/0x10 [ 273.887425][T14145] sock_sendmsg_nosec+0x13a/0x180 [ 273.887447][T14145] ____sys_sendmsg+0x54e/0x850 [ 273.887468][T14145] ? __pfx_____sys_sendmsg+0x10/0x10 [ 273.887492][T14145] ? import_iovec+0x73/0xa0 [ 273.887514][T14145] ___sys_sendmsg+0x2a5/0x360 [ 273.887530][T14145] ? __lock_acquire+0x683/0x2cf0 [ 273.887552][T14145] ? __pfx____sys_sendmsg+0x10/0x10 [ 273.887595][T14145] ? __fget_files+0x2a/0x420 [ 273.887611][T14145] ? __fget_files+0x3a2/0x420 [ 273.887638][T14145] __x64_sys_sendmsg+0x1b1/0x290 [ 273.887658][T14145] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 273.887690][T14145] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.887707][T14145] do_syscall_64+0x174/0x580 [ 273.887723][T14145] ? trace_irq_disable+0x3b/0x140 [ 273.887741][T14145] ? clear_bhb_loop+0x70/0xc0 [ 273.887761][T14145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.887777][T14145] RIP: 0033:0x7f558839e0d9 [ 273.887794][T14145] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 273.887808][T14145] RSP: 002b:00007f5589206028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 273.887825][T14145] RAX: ffffffffffffffda RBX: 00007f5588625fa0 RCX: 00007f558839e0d9 [ 273.887837][T14145] RDX: 0000000000000010 RSI: 0000200000000b40 RDI: 0000000000000004 [ 273.887846][T14145] RBP: 00007f5589206090 R08: 0000000000000000 R09: 0000000000000000 [ 273.887856][T14145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 273.887864][T14145] R13: 00007f5588626038 R14: 00007f5588625fa0 R15: 00007fff83494728 [ 273.887889][T14145] [ 274.701862][T14173] netlink: 128 bytes leftover after parsing attributes in process `syz.5.2477'. [ 274.809141][T14177] FAULT_INJECTION: forcing a failure. [ 274.809141][T14177] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 274.865399][T14177] CPU: 0 UID: 0 PID: 14177 Comm: syz.3.2481 Not tainted syzkaller #0 PREEMPT(full) [ 274.865421][T14177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 274.865429][T14177] Call Trace: [ 274.865436][T14177] [ 274.865443][T14177] dump_stack_lvl+0xe8/0x150 [ 274.865469][T14177] should_fail_ex+0x40c/0x560 [ 274.865491][T14177] _copy_from_user+0x2d/0xb0 [ 274.865515][T14177] kstrtouint_from_user+0xd6/0x180 [ 274.865536][T14177] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 274.865572][T14177] proc_fail_nth_write+0x8e/0x210 [ 274.865596][T14177] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 274.865624][T14177] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 274.865644][T14177] vfs_write+0x296/0xba0 [ 274.865675][T14177] ? __pfx_vfs_write+0x10/0x10 [ 274.865697][T14177] ? __fget_files+0x2a/0x420 [ 274.865730][T14177] ? __fget_files+0x3a2/0x420 [ 274.865748][T14177] ? __fget_files+0x2a/0x420 [ 274.865776][T14177] ksys_write+0x150/0x270 [ 274.865800][T14177] ? __pfx_ksys_write+0x10/0x10 [ 274.865829][T14177] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.865847][T14177] do_syscall_64+0x174/0x580 [ 274.865864][T14177] ? trace_irq_disable+0x3b/0x140 [ 274.865883][T14177] ? clear_bhb_loop+0x70/0xc0 [ 274.865903][T14177] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.865919][T14177] RIP: 0033:0x7fca9715e90e [ 274.865935][T14177] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 274.865948][T14177] RSP: 002b:00007fca9807ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 274.865966][T14177] RAX: ffffffffffffffda RBX: 00007fca980806c0 RCX: 00007fca9715e90e [ 274.865977][T14177] RDX: 0000000000000001 RSI: 00007fca980800a0 RDI: 0000000000000003 [ 274.865987][T14177] RBP: 00007fca98080090 R08: 0000000000000000 R09: 0000000000000000 [ 274.865997][T14177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 274.866006][T14177] R13: 00007fca97426038 R14: 00007fca97425fa0 R15: 00007fff9b5dca58 [ 274.866034][T14177] [ 275.280352][T14171] netlink: 'syz.1.2478': attribute type 10 has an invalid length. [ 275.314755][T14171] netlink: 'syz.1.2478': attribute type 10 has an invalid length. [ 275.954330][T14226] tipc: Started in network mode [ 275.969626][T14226] tipc: Node identity fe800000000000000000000000000013, cluster identity 4711 [ 276.010497][T14226] tipc: Enabled bearer , priority 10 [ 276.254425][T14247] xt_TPROXY: Can be used only with -p tcp or -p udp [ 276.802682][T14281] __nla_validate_parse: 2 callbacks suppressed [ 276.802699][T14281] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2507'. [ 277.041477][T14296] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2511'. [ 277.124023][T14299] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2512'. [ 277.131029][T14295] gtp0: entered promiscuous mode [ 277.147834][T14295] gtp0: entered allmulticast mode [ 277.174206][ T5724] tipc: Node number set to 4269801491 [ 277.210844][T14299] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2512'. [ 277.261870][T14305] netlink: 'syz.5.2515': attribute type 11 has an invalid length. [ 277.471018][T14320] lo: entered promiscuous mode [ 277.500021][T14320] netlink: 'syz.5.2519': attribute type 2 has an invalid length. [ 277.508093][T14320] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 277.559453][T14323] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2521'. [ 278.109578][T14358] netlink: 244 bytes leftover after parsing attributes in process `syz.6.2534'. [ 278.231011][T14365] IPVS: set_ctl: invalid protocol: 255 10.1.1.2:20004 [ 278.272509][T14365] x_tables: duplicate underflow at hook 1 [ 278.324014][T14365] IPVS: length: 80 != 8 [ 278.503611][T14384] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2543'. [ 278.549240][T14384] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2543'. [ 278.589771][T14380] bond3: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 278.641760][T14380] bond3 (unregistering): Released all slaves [ 278.772758][T14391] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2544'. [ 278.789608][T14403] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2546'. [ 278.833078][T14393] bond6: option mode: invalid value (10) [ 278.881848][T14393] bond6 (unregistering): Released all slaves [ 279.211120][T14426] netlink: 'syz.1.2554': attribute type 12 has an invalid length. [ 279.235341][T14430] ipt_rpfilter: unknown options [ 279.246473][T14431] ipt_rpfilter: unknown options [ 279.274820][T14426] bond6: option primary_reselect: invalid value (255) [ 279.301060][T14426] bond6 (unregistering): Released all slaves [ 279.423167][T14437] can: request_module (can-proto-0) failed. [ 279.624394][T14448] netlink: 'syz.1.2560': attribute type 1 has an invalid length. [ 279.772773][T14448] bond6: entered promiscuous mode [ 279.783083][T14448] 8021q: adding VLAN 0 to HW filter on device bond6 [ 279.830441][T14462] sctp: [Deprecated]: syz.6.2565 (pid 14462) Use of int in max_burst socket option. [ 279.830441][T14462] Use struct sctp_assoc_value instead [ 280.264566][T14491] openvswitch: netlink: IPv4 tunnel dst address is zero [ 280.448287][T14487] veth1: entered promiscuous mode [ 280.620983][T14504] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 280.793159][T14504] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 280.956844][T14504] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 281.088096][T14504] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 281.190459][T14504] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 281.282538][T14504] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 281.792521][T14556] tipc: Started in network mode [ 281.799818][T14556] tipc: Node identity fe800000000000000000000000000013, cluster identity 4711 [ 281.811054][T14556] tipc: Enabled bearer , priority 10 [ 282.003458][T14563] xt_socket: unknown flags 0x8 [ 282.092122][T14565] __nla_validate_parse: 11 callbacks suppressed [ 282.092138][T14565] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2583'. [ 282.135102][T14571] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2584'. [ 282.157393][T14571] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2584'. [ 282.409868][T14584] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2589'. [ 282.625846][T14603] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2593'. [ 282.900497][T14615] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2595'. [ 282.927441][ T5817] tipc: Node number set to 4269801491 [ 282.975238][T14620] syzkaller0: entered promiscuous mode [ 282.983322][T14620] syzkaller0: entered allmulticast mode [ 283.044292][T14620] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2598'. [ 283.073246][T14620] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2598'. [ 283.120852][T14625] openvswitch: netlink: Message has 5 unknown bytes. [ 283.398400][T14643] netlink: 27 bytes leftover after parsing attributes in process `syz.6.2605'. [ 283.399367][T14642] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2604'. [ 283.575168][T14649] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 284.121676][T14680] netlink: 'syz.5.2615': attribute type 2 has an invalid length. [ 284.246361][T14680] : entered promiscuous mode [ 284.261082][T14686] nbd: illegal input index 65508 [ 284.728678][T14716] netlink: 'syz.0.2628': attribute type 5 has an invalid length. [ 284.768596][T14714] netlink: 'syz.0.2628': attribute type 5 has an invalid length. [ 285.012315][T14726] 8021q: adding VLAN 0 to HW filter on device bond2 [ 285.021543][T14728] netlink: 'syz.0.2633': attribute type 22 has an invalid length. [ 285.105093][T14728] netlink: 'syz.0.2633': attribute type 22 has an invalid length. [ 285.108591][ T1064] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 285.168397][ T1064] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 285.220442][T14745] tipc: Invalid UDP bearer configuration [ 285.220494][T14745] tipc: Enabling of bearer rejected, failed to enable media [ 285.269361][ T198] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 285.316311][ T198] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 285.463938][T14760] ip6gretap0: entered promiscuous mode [ 285.506268][T14758] ip6gretap0: left promiscuous mode [ 286.335189][T14819] IPVS: dh: FWM 3 0x00000003 - no destination available [ 286.359126][T14824] netlink: 'syz.6.2658': attribute type 13 has an invalid length. [ 288.439316][T14836] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 288.452090][T14837] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 288.463119][T14832] syzkaller0: entered promiscuous mode [ 288.468710][T14832] syzkaller0: entered allmulticast mode [ 288.684213][T14863] __nla_validate_parse: 16 callbacks suppressed [ 288.684229][T14863] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2665'. [ 288.792737][T14868] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2666'. [ 288.990926][T14881] netlink: 'syz.0.2670': attribute type 11 has an invalid length. [ 290.054332][T14930] syzkaller0: entered promiscuous mode [ 290.075805][T14930] syzkaller0: entered allmulticast mode [ 290.341014][T14942] netlink: 'syz.1.2688': attribute type 1 has an invalid length. [ 290.665946][T14942] bond7: entered promiscuous mode [ 290.692515][T14942] 8021q: adding VLAN 0 to HW filter on device bond7 [ 290.716252][ T5272] veth1_vlan: left promiscuous mode [ 290.798789][T14953] sch_fq: defrate 0 ignored. [ 291.041526][T14965] atomic_op ffff88803372b198 conn xmit_atomic 0000000000000000 [ 291.078446][T14965] netlink: 'syz.3.2692': attribute type 1 has an invalid length. [ 292.723289][T15020] bond0: (slave ip6gre0): Error: Device can not be enslaved while up [ 292.837142][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 292.844418][ C0] bridge0: topology change detected, propagating [ 292.851117][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 292.858378][ C0] bridge0: topology change detected, propagating [ 292.958129][T15023] bond12: entered allmulticast mode [ 292.994860][T15023] 8021q: adding VLAN 0 to HW filter on device bond12 [ 293.129858][T15036] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2708'. [ 294.006814][T15070] netlink: 124 bytes leftover after parsing attributes in process `syz.3.2716'. [ 294.104705][T15067] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2716'. [ 294.173027][T15067] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.214216][T15083] IPVS: Error connecting to the multicast addr [ 294.618927][T15095] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2722'. [ 294.888339][T15104] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2724'. [ 294.974451][T15108] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2725'. [ 296.018919][T15142] IPVS: Error connecting to the multicast addr [ 296.214182][T15150] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2739'. [ 296.469411][T15161] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2742'. [ 296.533298][T15163] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2743'. [ 296.606580][T15170] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2745'. [ 296.643694][T15167] netlink: 'syz.5.2745': attribute type 5 has an invalid length. [ 296.707435][T15163] xt_l2tp: missing protocol rule (udp|l2tpip) [ 296.910343][T15179] netlink: 'syz.1.2749': attribute type 21 has an invalid length. [ 296.934977][T15179] netlink: 'syz.1.2749': attribute type 1 has an invalid length. [ 297.014585][T15184] netlink: 'syz.3.2748': attribute type 178 has an invalid length. [ 297.352010][T15201] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2753'. [ 297.673658][T15217] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 297.736854][T15221] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 297.781429][T15223] netlink: 'syz.5.2762': attribute type 8 has an invalid length. [ 297.971938][T15231] bond3 (unregistering): Released all slaves [ 299.236954][T15278] vlan5: entered promiscuous mode [ 299.280247][T15289] __nla_validate_parse: 2 callbacks suppressed [ 299.280266][T15289] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2779'. [ 299.320901][T15278] bridge0: entered promiscuous mode [ 299.614559][T15300] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2782'. [ 299.646090][T15301] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2782'. [ 299.908139][T15305] IPVS: Error connecting to the multicast addr [ 300.220163][T15320] openvswitch: netlink: nsh attr 109 is out of range max 3 [ 300.279019][T15324] bond0: Caught tx_queue_len zero misconfig [ 300.982055][ T4927] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 300.983343][T15339] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2793'. [ 301.005176][ T4927] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 301.014158][ T4927] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 301.022880][T15340] 8021q: VLANs not supported on ip6tnl0 [ 301.040076][ T4927] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 301.048750][ T4927] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 301.316621][T15348] netlink: 'syz.1.2795': attribute type 1 has an invalid length. [ 301.449451][T15354] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2796'. [ 301.482235][T15348] 8021q: adding VLAN 0 to HW filter on device bond8 [ 301.521622][T15353] bond8: (slave gretap1): making interface the new active one [ 301.535453][T15353] bond8: (slave gretap1): Enslaving as an active interface with an up link [ 301.773523][T15365] FAULT_INJECTION: forcing a failure. [ 301.773523][T15365] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 301.822542][T15365] CPU: 1 UID: 0 PID: 15365 Comm: syz.1.2799 Not tainted syzkaller #0 PREEMPT(full) [ 301.822567][T15365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 301.822577][T15365] Call Trace: [ 301.822584][T15365] [ 301.822591][T15365] dump_stack_lvl+0xe8/0x150 [ 301.822620][T15365] should_fail_ex+0x40c/0x560 [ 301.822646][T15365] _copy_to_user+0x31/0xb0 [ 301.822671][T15365] simple_read_from_buffer+0xe1/0x170 [ 301.822698][T15365] proc_fail_nth_read+0x1bb/0x230 [ 301.822723][T15365] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 301.822749][T15365] ? rw_verify_area+0x24a/0x4c0 [ 301.822773][T15365] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 301.822794][T15365] vfs_read+0x213/0xa80 [ 301.822821][T15365] ? __pfx___mutex_lock+0x10/0x10 [ 301.822841][T15365] ? __pfx_vfs_read+0x10/0x10 [ 301.822866][T15365] ? __fget_files+0x2a/0x420 [ 301.822890][T15365] ? __fget_files+0x3a2/0x420 [ 301.822908][T15365] ? __fget_files+0x2a/0x420 [ 301.822935][T15365] ksys_read+0x150/0x270 [ 301.822963][T15365] ? __pfx_ksys_read+0x10/0x10 [ 301.822993][T15365] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.823012][T15365] do_syscall_64+0x174/0x580 [ 301.823030][T15365] ? trace_irq_disable+0x3b/0x140 [ 301.823050][T15365] ? clear_bhb_loop+0x70/0xc0 [ 301.823069][T15365] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.823086][T15365] RIP: 0033:0x7f558835e90e [ 301.823103][T15365] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 301.823116][T15365] RSP: 002b:00007f55891e4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 301.823134][T15365] RAX: ffffffffffffffda RBX: 00007f55891e56c0 RCX: 00007f558835e90e [ 301.823146][T15365] RDX: 000000000000000f RSI: 00007f55891e50a0 RDI: 0000000000000007 [ 301.823157][T15365] RBP: 00007f55891e5090 R08: 0000000000000000 R09: 0000000000000000 [ 301.823167][T15365] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 301.823176][T15365] R13: 00007f5588626128 R14: 00007f5588626090 R15: 00007fff83494728 [ 301.823204][T15365] [ 302.174721][T15366] IPVS: Error connecting to the multicast addr [ 302.714371][T15390] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2806'. [ 303.160521][ T5609] Bluetooth: hci7: command tx timeout [ 303.344580][T15336] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.369675][T15336] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.400941][T15336] bridge_slave_0: entered allmulticast mode [ 303.426716][T15336] bridge_slave_0: entered promiscuous mode [ 303.451841][T15336] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.471899][T15336] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.492588][T15336] bridge_slave_1: entered allmulticast mode [ 303.502210][T15336] bridge_slave_1: entered promiscuous mode [ 303.517878][T15413] IPVS: Error connecting to the multicast addr [ 303.594577][T15336] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 303.610248][T15336] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 303.745480][T15336] team0: Port device team_slave_0 added [ 303.763839][T15336] team0: Port device team_slave_1 added [ 303.833963][T15336] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 303.849913][T15336] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 303.882178][ T5609] Bluetooth: hci5: command 0x0406 tx timeout [ 303.891543][T15336] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 303.905934][T15336] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 303.915695][T15336] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 303.965908][T15336] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 303.983188][T15423] netlink: 6777 bytes leftover after parsing attributes in process `syz.6.2814'. [ 304.201745][T15336] hsr_slave_0: entered promiscuous mode [ 304.229712][T15336] hsr_slave_1: entered promiscuous mode [ 304.252546][T15336] debugfs: 'hsr0' already exists in 'hsr' [ 304.277561][T15336] Cannot create hsr debugfs directory [ 304.379345][T15438] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2818'. [ 304.451968][T15438] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2818'. [ 305.237614][ T4927] Bluetooth: hci7: command tx timeout [ 305.604408][T15455] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2822'. [ 305.919747][T15336] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 305.939071][T15336] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.987643][T15479] IPVS: Error connecting to the multicast addr [ 306.192062][T15490] ip_tables: iptables: counters copy to user failed while replacing table [ 306.219089][T15336] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 306.262269][T15336] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.449974][T15500] netlink: 'syz.5.2829': attribute type 14 has an invalid length. [ 306.480424][T15500] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2829'. [ 306.572541][T15336] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 306.583706][T15336] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.613185][T15500] netlink: 'syz.5.2829': attribute type 14 has an invalid length. [ 306.701941][T15500] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2829'. [ 306.806123][T15336] netdevsim netdevsim3  (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 306.826330][T15510] netlink: 116 bytes leftover after parsing attributes in process `syz.1.2830'. [ 306.846073][T15336] netdevsim netdevsim3  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.317949][ T4927] Bluetooth: hci7: command tx timeout [ 307.509746][T15534] netlink: 'syz.1.2835': attribute type 33 has an invalid length. [ 307.805620][T15534] bond9: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 307.841496][T15534] bond9 (unregistering): Released all slaves [ 308.146694][T15530] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 308.185989][T15336] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 308.207269][T15562] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2840'. [ 308.241172][T15336] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 308.281977][T15336] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 308.373281][T15336] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 308.405296][T15336] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 308.427952][T15336] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 308.438478][T15336] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 308.542774][T15336] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 308.966451][T15336] 8021q: adding VLAN 0 to HW filter on device bond0 [ 309.049531][T15582] netlink: 88 bytes leftover after parsing attributes in process `syz.5.2843'. [ 309.143994][T15336] 8021q: adding VLAN 0 to HW filter on device team0 [ 309.152927][T15581] netlink: 170676 bytes leftover after parsing attributes in process `syz.1.2844'. [ 309.181374][T15581] openvswitch: netlink: ufid size 41726 bytes exceeds the range (1, 16) [ 309.197474][ T198] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.204731][ T198] bridge0: port 1(bridge_slave_0) entered forwarding state [ 309.232530][T15581] openvswitch: netlink: Message has 512 unknown bytes. [ 309.246782][ T198] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.254036][ T198] bridge0: port 2(bridge_slave_1) entered forwarding state [ 309.401803][ T4927] Bluetooth: hci7: command tx timeout [ 309.884403][T15591] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2845'. [ 310.399817][T15605] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2848'. [ 310.460695][T15605] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2848'. [ 310.750657][T15336] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 310.841111][T15611] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2850'. [ 311.023775][T15336] veth0_vlan: entered promiscuous mode [ 311.126129][T15336] veth1_vlan: entered promiscuous mode [ 311.272260][T15626] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2852'. [ 311.292927][T15626] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2852'. [ 311.316103][T15626] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2852'. [ 311.383443][T15336] veth0_macvtap: entered promiscuous mode [ 311.420932][T15336] veth1_macvtap: entered promiscuous mode [ 311.522654][T15336] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 311.570763][T15336] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 311.767633][ T1064] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.774599][T15634] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2855'. [ 311.816594][T15634] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2855'. [ 311.839868][ T1064] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.973707][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 311.997183][ T1064] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.017452][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.029110][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 312.146914][T11156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 312.184924][T11156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 312.269298][T15642] RDS: rds_bind could not find a transport for fc02::, load rds_tcp or rds_rdma? [ 312.389996][T15650] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2791'. [ 312.419108][T15649] xt_TCPMSS: Only works on TCP SYN packets [ 312.561729][T15654] netlink: 'syz.6.2861': attribute type 1 has an invalid length. [ 312.586447][T15654] netlink: 'syz.6.2861': attribute type 1 has an invalid length. [ 312.598964][T15654] team_slave_1: Caught tx_queue_len zero misconfig [ 313.464317][ T5609] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 313.478704][ T5609] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 313.489760][ T5609] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 313.528268][ T5609] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 313.540582][ T5609] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 314.299151][T11156] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 314.314469][T11156] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.328857][T11156] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 314.476431][T11156] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 314.509785][T11156] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.537885][T11156] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 314.580724][ T4927] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 314.592692][ T4927] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 314.611696][ T4927] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 314.621957][ T4927] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 314.633000][ T4927] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 314.774027][T11156] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 314.785387][T11156] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.797626][T11156] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 314.892492][T11156] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 314.904927][T11156] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.916007][T11156] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 314.989645][T15685] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.014172][T15685] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.024845][T15685] bridge_slave_0: entered allmulticast mode [ 315.034764][T15685] bridge_slave_0: entered promiscuous mode [ 315.064971][T15685] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.082990][T15685] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.093441][T15685] bridge_slave_1: entered allmulticast mode [ 315.101725][T15685] bridge_slave_1: entered promiscuous mode [ 315.281429][T15685] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 315.304257][T15685] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 315.389529][T11156] vlan3: left allmulticast mode [ 315.407218][T11156] geneve0: left allmulticast mode [ 315.413942][T11156] vlan3: left promiscuous mode [ 315.420694][T11156] geneve0: left promiscuous mode [ 315.428769][T11156] bridge0: port 3(vlan3) entered disabled state [ 315.444293][T11156] bridge_slave_1: left allmulticast mode [ 315.450718][T11156] bridge_slave_1: left promiscuous mode [ 315.458739][T11156] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.470697][T11156] bridge_slave_0: left allmulticast mode [ 315.476421][T11156] bridge_slave_0: left promiscuous mode [ 315.483117][T11156] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.576033][T15658] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 315.642675][ T4927] Bluetooth: hci0: command tx timeout [ 316.679415][ T4927] Bluetooth: hci1: command tx timeout [ 316.704448][T11156] bond8 (unregistering): (slave gretap1): Releasing active interface [ 316.954524][T11156] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 316.975304][T11156] bond0 (unregistering): Released all slaves [ 316.990826][T11156] bond1 (unregistering): Released all slaves [ 317.011339][T11156] bond2 (unregistering): Released all slaves [ 317.032449][T11156] bond3 (unregistering): Released all slaves [ 317.062502][T11156] bond4 (unregistering): Released all slaves [ 317.092600][T11156] bond5 (unregistering): Released all slaves [ 317.117443][T11156] bond6 (unregistering): Released all slaves [ 317.146969][T11156] bond7 (unregistering): Released all slaves [ 317.165076][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.192711][T11156] bond8 (unregistering): Released all slaves [ 317.219069][T15685] team0: Port device team_slave_0 added [ 317.233447][T15723] tipc: New replicast peer: 255.255.255.255 [ 317.265099][T15723] tipc: Enabled bearer , priority 10 [ 317.444571][T15685] team0: Port device team_slave_1 added [ 317.555704][T15739] x_tables: duplicate underflow at hook 3 [ 317.729532][ T4927] Bluetooth: hci0: command tx timeout [ 318.045599][T15685] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 318.071966][T15685] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 318.072298][T15759] SET target dimension over the limit! [ 318.195080][T15685] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 318.425458][T15685] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 318.434224][T15771] Cannot find add_set index 4 as target [ 318.455659][T15685] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 318.531507][T15685] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 318.757578][ T4927] Bluetooth: hci1: command tx timeout [ 319.056776][ T5272] 8021q: adding VLAN 0 to HW filter on device eth1 [ 319.074380][T15785] "syz.6.2884" (15785) uses obsolete ecb(arc4) skcipher [ 319.140732][T15685] hsr_slave_0: entered promiscuous mode [ 319.199648][T15685] hsr_slave_1: entered promiscuous mode [ 319.245568][T15685] debugfs: 'hsr0' already exists in 'hsr' [ 319.260663][T15685] Cannot create hsr debugfs directory [ 319.517850][T11156] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 319.675982][T11156] veth1_vlan: left allmulticast mode [ 319.699869][T15807] __nla_validate_parse: 4 callbacks suppressed [ 319.699886][T15807] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2891'. [ 319.715957][T11156] veth1_macvtap: left promiscuous mode [ 319.749024][T11156] veth0_macvtap: left allmulticast mode [ 319.754783][T11156] veth0_macvtap: left promiscuous mode [ 319.761450][T11156] veth1_vlan: left promiscuous mode [ 319.766828][T11156] veth0_vlan: left promiscuous mode [ 319.798437][ T4927] Bluetooth: hci0: command tx timeout [ 320.574184][T11156] team0 (unregistering): Port device team_slave_1 removed [ 320.838098][ T4927] Bluetooth: hci1: command tx timeout [ 321.175938][T15828] xt_hashlimit: size too large, truncated to 1048576 [ 321.887282][ T4927] Bluetooth: hci0: command tx timeout [ 322.024487][T15847] ip6gre0 speed is unknown, defaulting to 1000 [ 322.213281][T11156] IPVS: stop unused estimator thread 0... [ 322.493782][T15847] ip6gre0 speed is unknown, defaulting to 1000 [ 322.616047][T15847] ip6gre0 speed is unknown, defaulting to 1000 [ 322.622448][T15700] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.630476][T15700] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.653174][T15700] bridge_slave_0: entered allmulticast mode [ 322.673781][T15700] bridge_slave_0: entered promiscuous mode [ 322.745934][T15700] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.771568][T15700] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.795403][T15700] bridge_slave_1: entered allmulticast mode [ 322.816705][T15700] bridge_slave_1: entered promiscuous mode [ 322.922884][ T4927] Bluetooth: hci1: command tx timeout [ 323.078995][T15847] infiniband syz0: set active [ 323.084090][T15847] infiniband syz0: added ip6gre0 [ 323.106071][T15847] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 323.119245][T15847] infiniband syz0: Couldn't open port 1 [ 323.134602][T15847] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 323.150668][T15847] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 323.169128][T15847] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 323.245444][T15847] RDS/IB: syz0: added [ 323.250434][T15847] smc: adding ib device syz0 with port count 1 [ 323.258321][T15847] smc: ib device syz0 port 1 has no pnetid [ 324.363493][ T42] ip6gre0 speed is unknown, defaulting to 1000 [ 324.384901][T15700] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 324.420820][T15700] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 324.511905][ T24] ip6gre0 speed is unknown, defaulting to 1000 [ 324.560623][T15847] ip6gre0 speed is unknown, defaulting to 1000 [ 324.576235][T15700] team0: Port device team_slave_0 added [ 324.595304][T15700] team0: Port device team_slave_1 added [ 324.791352][T15700] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 324.805856][T15700] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 324.883271][T15700] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 324.914386][T15700] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 324.927394][T15877] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2904'. [ 324.941657][T15700] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 325.017888][T15700] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 325.298655][T15700] hsr_slave_0: entered promiscuous mode [ 325.325386][T15700] hsr_slave_1: entered promiscuous mode [ 325.357308][T15700] debugfs: 'hsr0' already exists in 'hsr' [ 325.386987][T15700] Cannot create hsr debugfs directory [ 325.652892][T15847] ip6gre0 speed is unknown, defaulting to 1000 [ 325.822396][T15685] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 325.851389][T15685] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 325.905239][T15685] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 325.969260][T15685] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 326.086034][T15685] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 326.150971][T15685] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 326.198521][T15685] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 326.260144][T15911] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2910'. [ 326.323023][ T5710] IPVS: starting estimator thread 0... [ 326.355434][T15685] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 326.400360][T15914] IPVS: rr: TCP 127.0.0.1:21 - no destination available [ 326.440761][T15915] IPVS: using max 28 ests per chain, 67200 per kthread [ 326.754911][T15847] ip6gre0 speed is unknown, defaulting to 1000 [ 327.841407][T15847] ip6gre0 speed is unknown, defaulting to 1000 [ 327.972321][T15700] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 328.003421][T15700] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 328.029688][T15700] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 328.068001][T15700] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 328.110803][T15685] 8021q: adding VLAN 0 to HW filter on device bond0 [ 328.147365][T15700] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 328.188712][T15700] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 328.208238][T15700] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 328.214742][T15956] IPVS: rr: TCP 127.0.0.1:21 - no destination available [ 328.263388][T15700] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 328.550683][T15685] 8021q: adding VLAN 0 to HW filter on device team0 [ 328.579906][T15969] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 328.611825][ T198] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.619124][ T198] bridge0: port 1(bridge_slave_0) entered forwarding state [ 328.724600][ T198] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.731896][ T198] bridge0: port 2(bridge_slave_1) entered forwarding state [ 328.795893][T15847] ip6gre0 speed is unknown, defaulting to 1000 [ 329.111199][T15700] 8021q: adding VLAN 0 to HW filter on device bond0 [ 329.241105][T15700] 8021q: adding VLAN 0 to HW filter on device team0 [ 329.276093][T15981] bridge0: port 3(veth1_to_bridge) entered blocking state [ 329.311174][T15981] bridge0: port 3(veth1_to_bridge) entered disabled state [ 329.359871][T15981] veth1_to_bridge: entered allmulticast mode [ 329.399170][T15981] veth1_to_bridge: entered promiscuous mode [ 329.420905][T15981] bridge0: adding interface veth1_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 329.460446][T15981] bridge0: port 3(veth1_to_bridge) entered blocking state [ 329.467760][T15981] bridge0: port 3(veth1_to_bridge) entered forwarding state [ 329.723474][ T1064] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.730707][ T1064] bridge0: port 1(bridge_slave_0) entered forwarding state [ 329.833512][T15847] ip6gre0 speed is unknown, defaulting to 1000 [ 329.855354][T11156] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.862607][T11156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 330.070464][T15999] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2919'. [ 330.087347][T15999] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2919'. [ 330.718828][T16022] netlink: 16215 bytes leftover after parsing attributes in process `syz.3.2922'. [ 330.880381][T15847] ip6gre0 speed is unknown, defaulting to 1000 [ 331.133273][T15685] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 331.244440][T16041] IPVS: rr: TCP 127.0.0.1:21 - no destination available [ 331.381062][T15685] veth0_vlan: entered promiscuous mode [ 331.448264][T15685] veth1_vlan: entered promiscuous mode [ 331.760868][T15685] veth0_macvtap: entered promiscuous mode [ 331.800903][T15847] ip6gre0 speed is unknown, defaulting to 1000 [ 331.816169][T15685] veth1_macvtap: entered promiscuous mode [ 331.934307][T15685] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 331.967148][T16064] bond_slave_0: Caught tx_queue_len zero misconfig [ 332.032071][T15685] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 332.145260][T15700] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 332.190034][ T35] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.225452][T16065] netlink: 80 bytes leftover after parsing attributes in process `syz.6.2927'. [ 332.234847][T16064] sit0: Caught tx_queue_len zero misconfig [ 332.328771][ T35] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.372327][ T35] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.671734][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.899037][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 332.901844][T15847] ip6gre0 speed is unknown, defaulting to 1000 [ 332.953421][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 333.139048][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 333.347275][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 333.454135][T16089] ip_tables: iptables: counters copy to user failed while replacing table [ 333.563351][T15700] veth0_vlan: entered promiscuous mode [ 333.580984][T16089] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2930'. [ 333.708169][T15700] veth1_vlan: entered promiscuous mode [ 333.907969][T16097] veth0: entered promiscuous mode [ 333.991766][T16097] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2870'. [ 334.017662][T16097] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2870'. [ 334.108499][T16096] veth0: left promiscuous mode [ 334.189558][T15700] veth0_macvtap: entered promiscuous mode [ 334.395238][T15700] veth1_macvtap: entered promiscuous mode [ 334.553134][T15700] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 334.715888][T15700] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 334.728960][T16126] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2937'. [ 334.809757][T16126] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.818795][T16126] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.158497][ T35] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.230191][ T35] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.330908][ T35] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.492634][T16143] bridge_slave_0: left allmulticast mode [ 335.521177][T16143] bridge_slave_0: left promiscuous mode [ 335.549996][T16143] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.601132][T16143] bridge_slave_1: left allmulticast mode [ 335.619287][T16143] bridge_slave_1: left promiscuous mode [ 335.632917][T16143] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.660502][T16160] netlink: 'syz.3.2942': attribute type 1 has an invalid length. [ 335.683108][T16143] bond0: (slave bond_slave_0): Releasing backup interface [ 335.771898][T16143] bond0: (slave bond_slave_1): Releasing backup interface [ 335.891795][T16143] team0: Port device team_slave_0 removed [ 335.981226][T16143] team0: Port device team_slave_1 removed [ 336.000812][T16143] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 336.024339][T16143] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 336.057128][T16143] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 336.076950][T16143] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 336.121163][T16143] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 336.208198][ T1064] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.238962][T16146] vlan0: entered promiscuous mode [ 336.254023][T16146] team0: Port device vlan0 added [ 336.261510][T16152] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2942'. [ 336.310383][T16163] veth0: entered promiscuous mode [ 336.383060][T16166] veth0: left promiscuous mode [ 336.592105][T16189] netlink: 'syz.6.2947': attribute type 19 has an invalid length. [ 336.998459][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 337.010971][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 337.023748][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 337.036142][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 337.049381][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 337.061784][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 337.075242][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 337.087649][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 337.376718][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 337.385027][ T30] INFO: task syz.2.1586:11020 blocked for more than 143 seconds. [ 337.407350][ T30] Not tainted syzkaller #0 [ 337.690414][T15700] ieee80211 phy37: Selected rate control algorithm 'minstrel_ht' [ 337.711920][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.739997][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 337.886265][ T30] task:syz.2.1586 state:D stack:23368 pid:11020 tgid:11019 ppid:5610 task_flags:0x400140 flags:0x00080002 [ 338.185744][ T30] Call Trace: [ 338.292268][ T30] [ 338.376221][ T30] __schedule+0x17d9/0x56c0 [ 338.457402][ C1] net_ratelimit: 1740 callbacks suppressed [ 338.457422][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 338.465755][ T30] ? __lock_acquire+0x683/0x2cf0 [ 338.475638][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 338.476397][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:4a:f4:5e:28:40:78, vlan:0) [ 338.505825][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 338.518221][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 338.531185][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:4a:f4:5e:28:40:78, vlan:0) [ 338.544460][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 338.556847][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 338.570444][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:4a:f4:5e:28:40:78, vlan:0) [ 338.583458][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 339.360538][ T30] ? __lock_acquire+0x683/0x2cf0 [ 339.365690][ T30] ? __pfx___schedule+0x10/0x10 [ 339.869583][ T30] ? schedule+0x90/0x2b0 [ 339.919508][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 339.981735][ T30] schedule+0x164/0x2b0 [ 340.030835][ T30] schedule_preempt_disabled+0x13/0x30 [ 340.104470][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.161117][ T30] __mutex_lock+0x7bf/0x1550 [ 340.455485][ T30] ? __mutex_lock+0x5d4/0x1550 [ 340.841430][ T30] ? nfsd_nl_svc_export_set_reqs_doit+0x132/0x1450 [ 340.968453][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 341.327275][ T30] ? net_generic+0x1e/0x240 [ 341.723789][ T30] ? net_generic+0x1e/0x240 [ 342.107552][ T30] nfsd_nl_svc_export_set_reqs_doit+0x132/0x1450 [ 342.187486][ T30] ? __kmalloc_noprof+0x375/0x720 [ 342.812918][ T30] ? __nla_validate_parse+0x2429/0x2d50 [ 342.857630][ T30] ? do_syscall_64+0x174/0x580 [ 343.417884][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.467419][ C1] net_ratelimit: 7505 callbacks suppressed [ 343.467441][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 343.486185][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 343.498633][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 343.511657][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:4a:f4:5e:28:40:78, vlan:0) [ 343.524398][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 343.537350][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 343.549872][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 343.562834][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:4a:f4:5e:28:40:78, vlan:0) [ 343.575380][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 343.588343][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 343.979031][ T30] ? __pfx_nfsd_nl_svc_export_set_reqs_doit+0x10/0x10 [ 343.985890][ T30] ? __pfx___nla_validate_parse+0x10/0x10 [ 344.549374][ C1] sched: DL replenish lagged too much [ 344.950346][ T30] ? rcu_is_watching+0x15/0xb0 [ 344.973641][ T30] ? trace_kmalloc+0x2a/0xf0 [ 345.111417][ T30] ? __kmalloc_noprof+0x396/0x720 [ 345.381987][ T30] ? __nla_parse+0x40/0x60 [ 345.645193][ T30] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 346.167399][ T30] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 346.536911][ T30] genl_family_rcv_msg_doit+0x233/0x340 [ 347.030549][ T30] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10