last executing test programs: 55.418048951s ago: executing program 2 (id=5754): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x10, 0xd, &(0x7f0000000100)=ANY=[@ANYBLOB="180200000000000000000000000000008510000001000000950000000000000018010000202073250000000000202020731af8ff00000000bfa100000041000007010000f8fffffdb702000008000000b703000000000028850000003c00000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x9}, 0x94) 55.259832415s ago: executing program 2 (id=5756): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f00000004c0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x90, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x4}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_REPLY={0x4c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x133}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xcd}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x5ff}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x401}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x7fff}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x9}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x3257}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x25}]}]}, 0x90}}, 0x0) 55.251203811s ago: executing program 2 (id=5758): ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b000000050000000004000009000000"], 0x48) r0 = syz_genetlink_get_family_id$tipc(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000800)=ANY=[@ANYBLOB='M\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010026bd7000fbdbdf25010000000000000008410000004c"], 0x68}, 0x1, 0x0, 0x0, 0x20}, 0x4000) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000200)={0x6, 'dvmrp0\x00', {0x6}, 0x8}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x101, 0x0, 0xf, 0x0, 0x0}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, &(0x7f0000000040), &(0x7f0000000140)}, 0x20) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYRES16, @ANYBLOB="0100001400000000000002", @ANYRES32], 0x40}}, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5], 0x6f4}}, 0x8044) 54.916032006s ago: executing program 2 (id=5760): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc7c0000000c0a010100000000000000000a0000060900020073797a310000000009000100734c000080080003400000000240000b802c0001800a0001006c696d69740000001c0002800c00024000000000000000030c0001400000000000010000100001800c000100636f756e7465720014000000110001000000000000000000e55ba3c0d30b2e5d0300000a00"/232], 0xe0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = gettid() r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f00000001c0)={0x2, &(0x7f0000000280)=[{0x28, 0x8, 0x0, 0xbfffdffe}, {0x80000006, 0x9, 0xd, 0x7fff}]}, 0x10) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000b00)={{r0, &(0x7f0000000940)='\x00', 0x880, &(0x7f0000000980)={@_ha_fsid={[0x4, 0x40]}, {0x5, 0x1000, 0x7f, 0x6}}, 0x9, &(0x7f00000009c0), &(0x7f0000000a00)=0x4}, 0x1, &(0x7f0000000ac0)=[{0x3, 0x6, &(0x7f0000000a40)='*$#\x00', &(0x7f0000000a80)="2e979b93708d8957ead228454faca1bb9bbbfe970aa955e360bfe5fb2b79e3da2e96c3d5bf98333c78500e64b295058180fce1e8a3056ea3ec823fb4ac9f7bac", 0x40, 0x18}]}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000013c0)=@bpf_tracing={0x1a, 0x17, &(0x7f0000000bc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x401}, [@map_idx={0x18, 0x8, 0x5, 0x0, 0x5}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}]}, &(0x7f0000000c80)='GPL\x00', 0x8, 0xa5, &(0x7f0000000cc0)=""/165, 0x41100, 0x4, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000000f00)={0x8, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x29652, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000001380)=[{0x0, 0x5, 0x0, 0x1}], 0x10, 0x1}, 0x94) bind$bt_hci(r3, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f0000000000)="09000000017157", 0x7) r5 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000200)='ns/cgroup\x00') r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)={0x6c, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x18, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010100}, {0x8, 0x2, @broadcast}}}]}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @remote}}}]}]}, 0x6c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3000a}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0xffffffffffffff8e, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0xffffffff, 0x9}}]}]}, @IFLA_GROUP={0x8}]}, 0x3c}}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000005c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r10, &(0x7f0000000900)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000600)={0x70, r8, 0x20, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x71}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x15}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x15}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x42}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x46}]}, 0x70}, 0x1, 0x0, 0x0, 0x4001}, 0x40000014) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xb, 0x5, 0xc, 0x80000000, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r12, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r13, @ANYBLOB="000000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000000300000085000000d00000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000280)={r14, r12}, 0x4) syz_genetlink_get_family_id$nl80211(0x0, r9) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r9, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000240)=ANY=[@ANYBLOB='\t\x00\x00', @ANYRES16=r8, @ANYBLOB="010027bd7000fcdbdf251900000008000300", @ANYRES32=r15, @ANYBLOB="05001e000500000005001d0008000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20040000}, 0x24) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYBLOB="000829bd7000fddb52a3045a00e607000100600000000c009d0005000000520000000c406f1a74b4767591e52e86591983ca0099000800a4b334e3f65586a69a1bba00005d000000000000000000000000000089d3a138d9f83591d3e70a1c01b184edfcbf83fc2e1519ad635b9d41b40076b6b1c5454639cb0182ddd8c1ca81108e508594cd6efa957ba397e1db85e26f58062691df3e62a216b0682e1c8238c0446b08cf59e8135e99a2547a5ce75d7de80949d7c0980773bd368e58210bdfd3821f3b8128cabebc2c0a1521e4f6031030afa398f74d3ae7863be4959bf85457ffa9f478a859063ec1844e97c2bf3fba5e1531e03c02", @ANYRES32=r2, @ANYBLOB="080001006b0000000800db00", @ANYRES32=r5, @ANYBLOB="08000300", @ANYRES32=r15, @ANYBLOB="0c009900000000000e000000"], 0x74}, 0x1, 0x0, 0x0, 0x4008010}, 0x8044) close(0x3) 52.566751266s ago: executing program 2 (id=5769): sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002ec0)=ANY=[@ANYBLOB='(\x00', @ANYRES16, @ANYBLOB="5953fdfffffffddbdf256b00"], 0x28}, 0x1, 0x0, 0x0, 0x9095}, 0x50) r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x4640}, 0x2}, 0x0) 52.128761298s ago: executing program 2 (id=5773): sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x40000000, 0x0, 0x0}, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0xfffffffd}}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f00000001c0)={0x8000042, 0x3}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r4, &(0x7f00000006c0)=[{&(0x7f0000000080)="2e9b5b0007e03dd65193dfb6c575b43f86dd6067", 0x14}, {&(0x7f00000001c0)="0100"/13, 0xd}, {&(0x7f00000002c0)="37a0a6c482b23cba92ffffff3f7b42590e180c07f3c193b532f3080000008c191f", 0x21}], 0x3) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x42}, 0x10) sendmsg$tipc(r3, &(0x7f0000002340)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x42, 0x4}, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0) bind$tipc(r1, 0x0, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, &(0x7f0000000000)=ANY=[@ANYBLOB="03"], 0x4) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) r7 = socket$can_bcm(0x1d, 0x2, 0x2) getsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000300)={{{@in=@local, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@multicast1}}, &(0x7f0000000400)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@rand_addr=0x64010101, 0x4e21, 0x6, 0x4e21, 0x8, 0xa, 0x80, 0x80, 0x2e, 0x0, r8}, {0x7f, 0x80, 0x8, 0xfffffffffffffff8, 0x4, 0x58, 0x3, 0x4639}, {0x2, 0xffffffff80000000, 0x5, 0xfffffffffffffff8}, 0x3, 0x6e6bb9, 0x0, 0x0, 0x2, 0x1}, {{@in=@empty, 0x4d4, 0x32}, 0xa, @in6=@private2, 0x3506, 0x4, 0x0, 0x9, 0x2, 0x0, 0x315}}, 0xe8) connect$can_bcm(r7, &(0x7f00000000c0), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r7, &(0x7f00000002c0)={&(0x7f0000000100)={0x1d, r9}, 0x10, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="01000000ebce19d7ef84a30cc7c31a83af00000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYBLOB="0000008001000000010000e0010300"/24], 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000800) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000040)={r9, 0x1, 0x6, @broadcast}, 0x10) 36.998548273s ago: executing program 32 (id=5773): sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x40000000, 0x0, 0x0}, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0xfffffffd}}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f00000001c0)={0x8000042, 0x3}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r4, &(0x7f00000006c0)=[{&(0x7f0000000080)="2e9b5b0007e03dd65193dfb6c575b43f86dd6067", 0x14}, {&(0x7f00000001c0)="0100"/13, 0xd}, {&(0x7f00000002c0)="37a0a6c482b23cba92ffffff3f7b42590e180c07f3c193b532f3080000008c191f", 0x21}], 0x3) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x42}, 0x10) sendmsg$tipc(r3, &(0x7f0000002340)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x42, 0x4}, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0) bind$tipc(r1, 0x0, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, &(0x7f0000000000)=ANY=[@ANYBLOB="03"], 0x4) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) r7 = socket$can_bcm(0x1d, 0x2, 0x2) getsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000300)={{{@in=@local, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@multicast1}}, &(0x7f0000000400)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@rand_addr=0x64010101, 0x4e21, 0x6, 0x4e21, 0x8, 0xa, 0x80, 0x80, 0x2e, 0x0, r8}, {0x7f, 0x80, 0x8, 0xfffffffffffffff8, 0x4, 0x58, 0x3, 0x4639}, {0x2, 0xffffffff80000000, 0x5, 0xfffffffffffffff8}, 0x3, 0x6e6bb9, 0x0, 0x0, 0x2, 0x1}, {{@in=@empty, 0x4d4, 0x32}, 0xa, @in6=@private2, 0x3506, 0x4, 0x0, 0x9, 0x2, 0x0, 0x315}}, 0xe8) connect$can_bcm(r7, &(0x7f00000000c0), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r7, &(0x7f00000002c0)={&(0x7f0000000100)={0x1d, r9}, 0x10, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="01000000ebce19d7ef84a30cc7c31a83af00000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYBLOB="0000008001000000010000e0010300"/24], 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000800) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000040)={r9, 0x1, 0x6, @broadcast}, 0x10) 24.576506375s ago: executing program 5 (id=6031): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x7, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0, 0xffffffffffffffff}, &(0x7f0000000040), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x80000000) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000140)='illinois', 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 24.137565676s ago: executing program 5 (id=6032): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socket$key(0xf, 0x3, 0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000050000000200000007"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x5, r2}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r3, r2}, 0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xff05, 0x0, 0x10, {0x0, 0x0, 0x4a00, 0x0, 0x8020}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x40}, 0x1, 0x0, 0x0, 0x45844}, 0x840) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002780)={0x30, 0x40, 0x107, 0x70bd2d, 0x25dfdbfe, {0x4, 0x7c}, [@nested={0x1c, 0x1c2, 0x0, 0x1, [@nested={0x18, 0x9, 0x0, 0x1, [@typed={0x12, 0x91, 0x0, 0x0, @str='/dev/qrtr-tun\x00'}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)={0x40, 0x0, 0x8, 0x70bd28, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0xa}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4010}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) syz_emit_ethernet(0x3b5, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d9a", 0x37f, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, '\x00'/12}, {0x18, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc9"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x2, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4610001394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "00000000000000000000000200000000000000000000000000008879e66485201a0015ca837400000000000000000000001c0000000000"}, {0x0, 0x14, "5e14f0e7e72d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fa632dbf04542188b196e213408c"}, {0x1f, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r7}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x100}]}, 0x34}}, 0x0) r9 = socket(0x10, 0x803, 0x0) ioctl$SIOCX25SCALLUSERDATA(r6, 0x89e5, &(0x7f0000000380)={0x5, "9b2bfd996c0be5abb43cb3b0dbe99f3a7926b4b8e032ee19cb719817a88a825ea1816942b4e9322bc95288a463141e5ac63db6b8a145be31b7616743ed728bb8f3bae936e132cf4d5bf66ad646ff4ccef51ec743af93382a56162bbefd23448915341fcaf41f1d0862316ab3dd7d1de6f02814ca5f5c03d29189749fef86a658"}) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x210}]}, 0x34}}, 0x8000) sendmsg$NFT_BATCH(r0, 0x0, 0x0) 22.497823516s ago: executing program 5 (id=6044): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'wg0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000380)={'erspan0\x00', &(0x7f00000005c0)={'sit0\x00', r2, 0x700, 0x7857, 0xfffffff3, 0x3, {{0x33, 0x4, 0x2, 0xb, 0xcc, 0x66, 0x0, 0x6, 0x29, 0x0, @loopback, @private=0xa010102, {[@timestamp_prespec={0x44, 0xc, 0xd7, 0x3, 0x3, [{@loopback, 0x5}]}, @rr={0x7, 0x7, 0x46, [@multicast1]}, @lsrr={0x83, 0xf, 0x1d, [@broadcast, @rand_addr=0x64010101, @rand_addr=0x64010102]}, @timestamp={0x44, 0x24, 0xf3, 0x0, 0x4, [0x8, 0x0, 0x4, 0x3, 0x5, 0xc, 0x1b, 0x6]}, @lsrr={0x83, 0xf, 0xab, [@private=0xa010102, @rand_addr=0x64010102, @private=0xa010102]}, @timestamp_prespec={0x44, 0xc, 0x33, 0x3, 0x8, [{@multicast2, 0x8}]}, @timestamp={0x44, 0x24, 0x3d, 0x0, 0x6, [0x4, 0xe8e, 0x80000001, 0xd, 0x10001, 0x3, 0xf6, 0x5]}, @generic={0x89, 0xe, "3296e2b012480325ae5048fa"}, @timestamp={0x44, 0x24, 0xc7, 0x0, 0x7, [0x3, 0x1, 0xbcb, 0x401, 0x8, 0x8, 0x0, 0x0]}]}}}}}) sendmsg$nl_route(r0, &(0x7f0000000580)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)=@bridge_setlink={0x94, 0x13, 0x100, 0x70bd25, 0x25dfdbfc, {0x7, 0x0, 0x0, r3, 0x12460, 0x2c000}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0x4}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x100}, @IFLA_PROP_LIST={0x54, 0x34, 0x0, 0x1, [{0x14, 0x35, 'nr0\x00'}, {0x14, 0x35, 'team0\x00'}, {0x14, 0x35, 'pimreg0\x00'}, {0x14, 0x35, 'macvlan1\x00'}]}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x2256}]}, 0x94}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000400)=[{0x2, 0x0, {0x0, 0x1, 0x4}, {0x2, 0xe, 0x1}, 0x1, 0x2}, {0x0, 0x2, {0x0, 0x1, 0x4}, {0x3, 0xf0, 0x1}, 0xff}], 0x40) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r1, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}], 0x1}}], 0x1, 0x41) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xfff2, 0xfff2}, {0xfff1, 0xffff}, {0xfff2}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) 9.095843689s ago: executing program 5 (id=6124): r0 = socket(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) (async) getsockname$packet(r1, 0x0, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(r2, 0x107, 0x18, 0x0, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x50) (async) ioctl$PPPOEIOCDFWD(r1, 0xb101, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) r3 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000500)="5c00000013006bcc9e3be35c6e17aa31076b876c1c0000007ea60864160af36514001ac0080002008100020006a101c00364683b9dad7aa21240d69a6a818cf6c551ae60fc91b169edb1b175732b9f597fe3b6c5a3d77cc766307de2", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4044) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x64, r6, 0x1, 0x70bd2b, 0x1000, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x122}, @NBD_ATTR_BACKEND_IDENTIFIER={0xd, 0xa, 'list:set\x00'}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x64}}, 0x400400c) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000300), 0x0, 0xc000, 0x0, 0x0) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x66) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)={0x60, 0x2, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xd8}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x4}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}]}, 0x60}, 0x1, 0x0, 0x0, 0x20044040}, 0x40800) (async) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000064000000060a010400000000000000000100000008000b40000000003c00048038000180080001006e6174002c00028008000540000000000800014000000000080006400000000d08000240ffff000a08000640000000250900010073797a30"], 0xd8}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) syz_emit_ethernet(0x25c, &(0x7f0000000440)={@local, @multicast, @void, {@ipv4={0x800, @gre={{0x24, 0x4, 0x1, 0x3d, 0x24e, 0x67, 0x0, 0x6, 0x2f, 0x0, @empty, @local, {[@lsrr={0x83, 0x1b, 0xdb, [@rand_addr=0x64010102, @remote, @loopback, @loopback, @dev={0xac, 0x14, 0x14, 0x30}, @private=0xa010101]}, @end, @generic={0x83, 0xb, "1e3ca8a4995b594cdf"}, @timestamp_addr={0x44, 0x54, 0xd0, 0x1, 0x3, [{@private=0xa010100}, {@broadcast, 0x227b}, {@broadcast, 0x6}, {@empty, 0x83}, {@broadcast, 0x1000}, {@remote, 0x2}, {@empty, 0x3}, {@dev={0xac, 0x14, 0x14, 0x15}}, {@multicast1, 0x4}, {@broadcast, 0x6}]}, @noop]}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0xf, 0x0, [0x5], "e7a44483df056ac08a8706e840c5d9"}, {0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800, [0x8, 0x0], "c8e7eaf7b9a5943373e2732493247790fb10c3823bbd42d8ec5f566454f653901fec40b330038c784783d430fb3ade97261e40283a9a828094fb0143a6b73b69a7"}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [], "444508cd8458502c6ad1d84224a8ebee11b0ae838678dcbc10a83187c0fbcc0b4f295c6393b3aa00b5575e4e996c9e273d251b82249102dfd4b45928386e0c355d7914ee1cdead9546f7b6f5324b7ce9f4fed8cd82c040b620833e1e4350d08f42cfc7fa106b7007b9bee75aae58d2ff92432345a162a90ff3502ee563375378e97f55962b1d9df9340a2127cfe43616aaad858eac7da8bd58bf71f63bd2ecd0743650d34b04a771dd1c36669cbceced323240082092fc330b"}, {0x8, 0x88be, 0x3, {{0xd, 0x1, 0x1, 0x0, 0x1, 0x3, 0x4, 0x36}}}, {0x8, 0x22eb, 0x2, {{0xb, 0x2, 0x7, 0x0, 0x1, 0x1, 0x5, 0xca}, 0x2, {0x400, 0x0, 0x1, 0x1e, 0x0, 0x1, 0x0, 0x0, 0x1}}}, {0x8, 0x6558, 0x0, "9134b9261548e95e753b5eb96c1084292bea5ff3c828d77a9d9db0e7878dd7dcca4bac3d37c5fca08ca00e84132b7cdd1f3cfcd3888bf259ade3aa09407737b5c1cd4a1c1fa285c8cd9804d49e25a7ba48cabe6e060bcecd6e0f9fb80f6fe2335afa7222568583d6ffc092"}}}}}}, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r4, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x40, r9, 0x400, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0xfffffffc, 0x27}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x39}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x75}]}, 0x40}, 0x1, 0x0, 0x0, 0x40880}, 0x4080011) 9.053082231s ago: executing program 5 (id=6126): socket$nl_rdma(0x10, 0x3, 0x14) r0 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f000031e000/0x2000)=nil, 0x2000, 0x1000006, 0x13, 0xffffffffffffffff, 0x10000000) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071114200000000008510000002000000850000000500000095000d00000000009500a50000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r1, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000001b40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x47, 0x0}}, 0x10) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x2}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x44, 0x10, 0x403, 0x78bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000600}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="12000000050000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$BTRFS_IOC_INO_PATHS(r7, 0xc0389423, &(0x7f0000000540)={0x9, 0x10, [0x9, 0x8, 0x2, 0x400], &(0x7f0000000500)=[0x0, 0x0]}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000023c0)=@newlink={0x38, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40810, 0x1}, [@IFLA_GROUP={0x8}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x10000}, @IFLA_TXQLEN={0x8, 0xd, 0x80}]}, 0x38}, 0x1, 0x0, 0x0, 0x24040051}, 0x4000000) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GTP_CREATE_SOCKETS={0x5}, @IFLA_GTP_LOCAL6={0x14, 0x8, @empty}]}}}]}, 0x4c}}, 0x40) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r10, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="5800000010001fff000000000100000000000000", @ANYBLOB="85dafe4aac57eed0eebd25703b8df610f59491b74e61b81d8f77c92b4bffdcc48fbd4132a6600d8562d87c42d4809cdfd4607347926abed01aed06c0ed187b649adac7fd9003bbb8a4eeedad04c30a3b83afcdfb8a995dbcd21460a7efda8c97b7cb827bbc08715d3e6b926f290f6012e364e10fbbe69d3cf9879dde53de443b82b34c34bbd2fd122feaa09291aaf0e619424ffbc76995b4ad220b22b4eb40471c88aeee6936f2bac0d44a1f44540b6e98ccfc896bc107e7a5700bd59633", @ANYRESHEX=r4, @ANYBLOB="b418718622d06f1f0c861234056f01a10abbbbfa9ffefce86027f853d349f06a31"], 0x58}, 0x1, 0x0, 0x0, 0x80488d1}, 0x0) 8.348884247s ago: executing program 5 (id=6131): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000000000)="5c00000013006bcd9e3fe3dc5e48aa31086b87003000000000000000160af365040014000d0002008be3a0e640940800000000001282bb2352d1f006baa45e0d501e2494acf1566e000a84c9", 0x4c}, {&(0x7f0000001140)="d64b2bea4b3d874f2c4795d59f1570cd", 0x10}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x24044054) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x2, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x39, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x2844, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r2, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000), 0x8) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x4, 0x5}, 0x4) bind$tipc(r3, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x1, 0xfffffffb}}, 0x10) bind$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x1c, r7, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r8 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r8, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r3, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) bind$tipc(r8, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) bind$tipc(r8, &(0x7f00000001c0)=@name={0x1e, 0x2, 0x0, {{0x42, 0x4002}, 0x2}}, 0x10) r9 = socket$can_j1939(0x1d, 0x2, 0x7) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r12, {0x0, 0xffe0}, {}, {0xffff}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x2}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x20000040) connect$can_j1939(r9, &(0x7f0000000240)={0x1d, r12, 0x2, {0x1, 0x0, 0x4}, 0xfe}, 0x18) bind$tipc(r3, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100280000000000000004000000200001800d0001007564703a73797a32"], 0x34}}, 0x4040) 6.70479015s ago: executing program 4 (id=6143): syz_emit_ethernet(0xa2, &(0x7f0000000300)={@empty, @remote, @void, {@llc_tr={0x11, {@snap={0xaa, 0x1, "b229", "019f70", 0x88e7, "a144e23a8d1de1b8ad4195eb0b84bd4a72b05c62b9193c47c2f99bd2fde9c5562f73ccbc8a65df3ebb5f664789ed1b5c758cea221b5c49a8529895a2b91f203f99da87537c50cb57573be35cff25c9c5a9e9dd3d0e46e635fec1cba13da07620b9e6f90091fabfc7b50bf2cc40fa7c569ec701c2255393f6547ed825a894549100887861eddfad471a2d06"}}}}}, &(0x7f0000000440)={0x0, 0x4, [0x5a3, 0x806, 0x70e, 0x8e6]}) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_TTL={0x5, 0x4, 0xc6}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @local}]}}}]}, 0x40}}, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f00000000c0)={r0, r0, 0x206, 0x0, 0x0, 0x2, 0x72, 0x1, 0x3, 0x7, 0x0, 0x8, 'syz1\x00'}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x28, 0x43, 0x107, 0xffffdffe, 0x25dfdbfc, {0x2, 0x7c}, [@nested={0x4, 0x58}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x14c, 0x0, 0x1, [@nested={0x8, 0x9a, 0x0, 0x1, [@typed={0x4, 0x105}]}]}]}]}, 0x28}}, 0xc000) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0xf, &(0x7f0000000080)=0x4, 0x67) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000)='cgroup\x00', 0x101, 0x0, 0xf, 0x0, 0x0}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x13, r4, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$NFT_BATCH(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a09040000000000000000020000232c00048028000180070001fc84f0544a5127a480080001400000000f0500030001000000080002400000000c0900010073797a30000000000900020073797a3200000000200000000b0a01040000000000000000030000050900010073797a3000000000140000001100010000000000000000000500000a"], 0xa0}, 0x1, 0x0, 0x0, 0x48040}, 0x40) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f0000000180)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) 6.588313887s ago: executing program 4 (id=6145): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e21, @loopback}, @in={0x2, 0x0, @private=0xc0586300}, @in6={0xa, 0x0, 0x0, @private0}, @in={0x2, 0x4e20, @broadcast}], 0x4c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES64=r1, @ANYBLOB="ffffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000e0ff000000000000000054ac6b716f04d77b7db5ccb55c34c48cf92b6a3daae904a33f48a6b5532e8209bd9052c69bfa05897e893600f6d02a8ca8971e1dd31a5266876fc1d74d109ea899e052bcce006efd72a9db734bb1b0a4e8e1276381d2b46ac7204112b670bff8c4ae91bb3f1b7c81ff997a201e1b739f42dea48dc177b47c0d5f45c2864500b2fa0e00ebdba5efbe2affe508b226422e7027a9ac6982f53aa7287b246dc722720c42c716a2eb8fa97eb59e4695020c8f7af67d00cd7b431a88a444b5e7f8f97cafe5e353"], 0x50) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x8, [@struct={0x5, 0x1, 0x0, 0x4, 0x0, 0xd, [{0x5, 0x2, 0x6}]}]}, {0x0, [0x61, 0x0, 0x2e, 0x2e, 0x5f, 0x6f]}}, 0x0, 0x38, 0x0, 0x1, 0x400}, 0x28) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x5, 0xfffff010}, {0x6, 0x0, 0x2}]}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wg0\x00'}) socket$packet(0x11, 0x2, 0x300) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f00000026c0)={r4, &(0x7f00000025c0)='\xaa\xaa\xaa\xaa\xaa', 0x800, &(0x7f0000002600)={@align=0x1, {0x9, 0x3ff, 0xfffffff5, 0x7}}, 0x5, &(0x7f0000002640)={@_ha_fsid}, &(0x7f0000002680)=0x2000}) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001900)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r7 = gettid() r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="089805000750050008001300", @ANYRES32=r7], 0x44}, 0x1, 0x0, 0x0, 0x44882}, 0x4040010) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000002700)={{{@in=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@ipv4={""/10, ""/2, @multicast2}}}, &(0x7f0000002800)=0xe8) getgid() r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(r11, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000540)={0x2c, r12, 0x21, 0x70bd2b, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) r13 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r13, &(0x7f0000000a00)=[{{&(0x7f00000004c0)={0x2, 0x4000, @dev={0xac, 0x14, 0x14, 0xc2}}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000000)="a905a6f26e5b74640001000000100500000094dfa033fe5312e4beb85181b07f2654a39f", 0x24}], 0x1}}, {{&(0x7f0000000180)={0x2, 0x4e21, @remote}, 0x10, 0x0}}], 0x2, 0xc044) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000300)={0x1c, 0x39, 0x4, 0x70bd28, 0x25dfdbfc, "", [@nested={0xc, 0x51, 0x0, 0x1, [@nested={0x4, 0x9a}, @nested={0x4, 0x127}]}]}, 0x1c}, {0x0}, {&(0x7f0000003cc0)={0x1108, 0x30, 0x800, 0x70bd25, 0x25dfdbfb, "", [@typed={0x14, 0xba, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}, @typed={0x4, 0xd2}, @generic="9900d3622f69f0f3f480b701b8d875910904cec71dbb087b630bc3ce820dfde35571fb79583d2898ca20f994025096da4b9dbcaa5ce3d4ec0398c8e0d798ea4fabe3d0256c6d1868bcce08a45bf6ec43257cf76fb75543419bb76a1b988a2d5348b3d1d8f9cc68e4061f39910e0529586c1eae1bf20debbc8bccf0b4fe386f2776eda0", @typed={0x8, 0x24, 0x0, 0x0, @fd}, @nested={0x100b, 0xc6, 0x0, 0x1, [@typed={0x8, 0x5c, 0x0, 0x0, @ipv4=@empty}, @nested={0x4, 0xfd}, @typed={0x4, 0x11f}, @generic="7a8133ecc8b1c7ab7f51deb9aaa3d2", @typed={0xc, 0x145, 0x0, 0x0, @u64=0x5}, @nested={0x4, 0x15}, @nested={0x4, 0x12b}, @generic="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", @typed={0x4, 0x10d}]}, @generic="0410554876361f589114acf030125bb28196520514ae39d0b8c41cea23453d9c22d98eb5c7cf3fe2accf68099d1106d964ee45847d14e90b6000b5c4", @typed={0xc, 0x1d, 0x0, 0x0, @u64=0x4}]}, 0x1108}, {&(0x7f0000000f80)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="0800e900", @ANYRES32=r9, @ANYBLOB="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"], 0x958}], 0x4, &(0x7f0000000580), 0x0, 0x40}, 0x40000) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x52000000}, 0xc, &(0x7f00000011c0)=[{&(0x7f0000000e80)=ANY=[], 0x27c}, {&(0x7f0000001100)={0x20, 0x1a, 0x8, 0x70bd28, 0x25dfdbfb, "", [@typed={0x8, 0x115, 0x0, 0x0, @ipv4=@multicast1}, @typed={0x8, 0x157, 0x0, 0x0, @ipv4=@broadcast}]}, 0x20}, {&(0x7f0000001140)={0x18, 0x27, 0x10, 0x70bd2c, 0x25dfdbff, "", [@typed={0x8, 0x117, 0x0, 0x0, @str='GPL\x00'}]}, 0x18}, {&(0x7f0000001180)={0x28, 0x41, 0x100, 0x70bd26, 0x25dfdbfb, "", [@nested={0x18, 0xc8, 0x0, 0x1, [@nested={0x4, 0xdb}, @typed={0xc, 0x92, 0x0, 0x0, @u64=0x7a71}, @nested={0x4, 0x5c}]}]}, 0x28}], 0x4, &(0x7f0000001380)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [r1, r2, r3]}}, @rights={{0x18, 0x1, 0x1, [r6, r13]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r10, 0xffffffffffffffff}}}], 0x78}, 0x84) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r3}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x10, &(0x7f0000001a40)=ANY=[@ANYBLOB="18020000080054e500daa9e4d406355212fd42d17b6753bc7d082100000000000006000000b7080000000000007b8af8ff00000000b7080000000000007b8ef0ff00000000070300000000000000010000f8ffffffbfa41d25d1f100"/101, @ANYRES32=r3, @ANYBLOB="0000000000000000b705000008000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc848}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x5, 0x4, 0x4, 0x401, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x18}, 0x50) socket$inet(0x2, 0x3, 0x2) 6.093089011s ago: executing program 4 (id=6146): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYBLOB="01002dbd7000fedbdf250100000014000200776732000000000000000000000000004c00088040000080040009801400040002004e230a010101000000000000000024000100d1732899f611cd8994034d7f413dc957630e5493c285"], 0x74}, 0x1, 0x0, 0x0, 0xc004}, 0x4000040) sendmmsg(0xffffffffffffffff, &(0x7f0000000dc0), 0x0, 0x4040845) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_all\x00', 0x275a, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x3) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c00000012000301000000000000000000009db7000000000000010004000000000000000000000000000000000000000000000000000000691d0f76e77044d1eb94e56239e4"], 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 5.918555517s ago: executing program 4 (id=6149): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r2, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) socket(0x15, 0x5, 0x0) (async) r3 = socket(0x15, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x2713, 0x0, &(0x7f0000000000)) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000006c0)={r4, &(0x7f0000000500)}, 0x20) (async) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000006c0)={r4, &(0x7f0000000500)}, 0x20) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@updsa={0x13c, 0x1a, 0x1, 0x0, 0x0, {{@in=@loopback, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {@in=@local, 0x0, 0x33}, @in6=@rand_addr=' \x01\x00', {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth_trunc={0x4c, 0x14, {{'xcbc(aes)\x00'}}}]}, 0x13c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=@newlink={0x38, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x80, 0x10000}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0x3}]}}}]}, 0x38}}, 0x20004050) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa0806000108000604"], 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) writev(r7, &(0x7f0000000000)=[{0x0}, {&(0x7f0000006a00)="44b8", 0x2}], 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) (async) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010004000000fbdbdf250100000008000100030000001c000c800c000b8008000ac485ef41000c000b8008000a00b512080004000880040004800800020001"], 0x48}}, 0x3000c000) (async) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010004000000fbdbdf250100000008000100030000001c000c800c000b8008000ac485ef41000c000b8008000a00b512080004000880040004800800020001"], 0x48}}, 0x3000c000) 5.460139719s ago: executing program 4 (id=6151): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socket$key(0xf, 0x3, 0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000050000000200000007"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x5, r2}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r3, r2}, 0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xff05, 0x0, 0x10, {0x0, 0x0, 0x4a00, 0x0, 0x8020}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x40}, 0x1, 0x0, 0x0, 0x45844}, 0x840) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002780)={0x30, 0x40, 0x107, 0x70bd2d, 0x25dfdbfe, {0x4, 0x7c}, [@nested={0x1c, 0x1c2, 0x0, 0x1, [@nested={0x18, 0x9, 0x0, 0x1, [@typed={0x12, 0x91, 0x0, 0x0, @str='/dev/qrtr-tun\x00'}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)={0x40, 0x0, 0x8, 0x70bd28, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0xa}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4010}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) syz_emit_ethernet(0x3b3, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d9a", 0x37d, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, '\x00\x00\x00\x00\x00\x00\x00\x00\x00'}, {0x18, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x2, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4610001394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "00000000000000000000000200000000000000000000000000008879e66485201a0015ca837400000000000000000000001c0000000000"}, {0x0, 0x14, "5e14f0e7e72d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fa632dbf04542188b196e213408c"}, {0x1f, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r7}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x100}]}, 0x34}}, 0x0) r9 = socket(0x10, 0x803, 0x0) ioctl$SIOCX25SCALLUSERDATA(r6, 0x89e5, &(0x7f0000000380)={0x5, "9b2bfd996c0be5abb43cb3b0dbe99f3a7926b4b8e032ee19cb719817a88a825ea1816942b4e9322bc95288a463141e5ac63db6b8a145be31b7616743ed728bb8f3bae936e132cf4d5bf66ad646ff4ccef51ec743af93382a56162bbefd23448915341fcaf41f1d0862316ab3dd7d1de6f02814ca5f5c03d29189749fef86a658"}) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x210}]}, 0x34}}, 0x8000) sendmsg$NFT_BATCH(r0, 0x0, 0x0) 5.143051261s ago: executing program 1 (id=6157): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x10, 0xd, &(0x7f0000000100)=ANY=[@ANYBLOB="180200000000000000000000000000008510000001000000950000000000000018010000202073250000000000202020731af8ff00000000bfa100000000004007010000f8fffffdb702000008000000b703000000000028850000003c00000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x9}, 0x94) 5.044123805s ago: executing program 1 (id=6159): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-384\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000a80)={0x20, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}}, 0x45}, 0x1, 0x0, 0x0, 0x4040}, 0xe97b44310876ac03) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c00000040000701feffffff00000000017c0000040042800c000180060006000806000004000280040007"], 0x2c}, 0x1, 0x0, 0x0, 0x4008050}, 0xc800) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000640)=@ethtool_pauseparam={0x33, 0x80, 0x7, 0x7f}}) 4.441679272s ago: executing program 4 (id=6168): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x3, 0xffffffff}, @const={0x0, 0x0, 0x0, 0x2}, @func_proto={0x2, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x44}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4, '\x00', 0x0, r1, 0x1, 0x2}, 0x50) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4, '\x00', 0x0, r1, 0x1, 0x2}, 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001000010700000000200000000a0000000c000200"], 0x20}}, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0x1410, 0x1, 0x70bd2d, 0x25dfdc01, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x50}, 0x88c4) syz_genetlink_get_family_id$gtp(&(0x7f0000000180), r2) (async) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000180), r2) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r3, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@GTPA_MS_ADDR6={0x14, 0xc, @mcast2}, @GTPA_FAMILY={0x5, 0xd, 0xa}]}, 0x30}}, 0x10000) (async) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r3, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@GTPA_MS_ADDR6={0x14, 0xc, @mcast2}, @GTPA_FAMILY={0x5, 0xd, 0xa}]}, 0x30}}, 0x10000) r4 = socket$inet6(0xa, 0x80000, 0xf9d0) getsockopt$inet6_mtu(r4, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) 4.143950797s ago: executing program 1 (id=6172): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240), 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x2, 0x300}, {0x6e}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xc, 0x9, 0x0, 0x0, 0x10000020}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x20000010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.883713117s ago: executing program 3 (id=6173): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x10040) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000100)={0x3, 0x1000}, 0x4) getsockopt$packet_int(r2, 0x107, 0x15, 0x0, &(0x7f00000000c0)) socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f0000000080), 0x4a) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00000000c0)=0x9, 0x4) sendmmsg$inet(r3, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r4) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000004c0)={'vcan0\x00'}) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r8 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r6, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x10) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000006, 0x8180030, r9, 0xa3d2c000) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r10, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)='%-5lx \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r11}, 0x4) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x1d, &(0x7f0000000480)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r11}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x54}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r10}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r12, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000480)=ANY=[@ANYBLOB="911061000000000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r9, @ANYRES16=r14], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) 3.572893188s ago: executing program 1 (id=6174): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x10000000}, 0x1c) close(0x3) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f00000000c0)={r2, r2, 0x206, 0x0, 0x0, 0x2, 0x72, 0x1, 0x3, 0x7, 0x0, 0x8, 'syz1\x00'}) r4 = socket$unix(0x1, 0x2, 0x0) connect$unix(r4, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x4) ioctl$sock_bt_hidp_HIDPCONNDEL(r3, 0x400448c9, &(0x7f0000000180)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) r5 = socket(0xa, 0x5, 0x0) listen(r5, 0x100) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYRESHEX, @ANYRES32=0x0], 0x20, 0x4002804}, 0x51) socket(0x22, 0x5, 0x9) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000250019033752a5f76a80000005000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x24044004) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000002e00090027bd70000000000e04000000ae003b598066f5f70cc565a8b3f99f1be904b65e7f20f27016d08e83ee895421cedfa33408e676d080dfea7ad87ec9a18cc75be7a72b0000"], 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000e80), r6) r8 = socket$rds(0x15, 0x5, 0x0) bind$rds(r8, &(0x7f0000000840)={0x2, 0x0, @private=0xa010103}, 0x10) sendmsg$rds(r8, &(0x7f0000000000)={&(0x7f00000002c0)={0x2, 0x0, @multicast2}, 0x10, 0x0}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x8, &(0x7f0000000280)=0x100000001, 0x3) 2.729997576s ago: executing program 3 (id=6176): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x4, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x8}, [@jmp={0x6, 0x0, 0xc, 0x0, 0x0, 0x1, 0x8}]}, &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in={{0x2, 0x1000, @empty}}, 0x7fff, 0x0, 0xd78e, 0x40, 0x5a1, 0x0, 0x7}, 0x9c) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f00000000c0)={'geneve1\x00', 0x4}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r3, 0xc) socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r8, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}}, 0x800) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 2.644858311s ago: executing program 1 (id=6178): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socket$key(0xf, 0x3, 0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000050000000200000007"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x5, r2}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r3, r2}, 0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xff05, 0x0, 0x10, {0x0, 0x0, 0x4a00, 0x0, 0x8020}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x40}, 0x1, 0x0, 0x0, 0x45844}, 0x840) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002780)={0x30, 0x40, 0x107, 0x70bd2d, 0x25dfdbfe, {0x4, 0x7c}, [@nested={0x1c, 0x1c2, 0x0, 0x1, [@nested={0x18, 0x9, 0x0, 0x1, [@typed={0x12, 0x91, 0x0, 0x0, @str='/dev/qrtr-tun\x00'}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)={0x40, 0x0, 0x8, 0x70bd28, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0xa}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4010}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) syz_emit_ethernet(0x3b0, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d9a", 0x37a, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, '\x00\x00\x00\x00\x00\x00'}, {0x18, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x2, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4610001394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "00000000000000000000000200000000000000000000000000008879e66485201a0015ca837400000000000000000000001c0000000000"}, {0x0, 0x14, "5e14f0e7e72d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fa632dbf04542188b196e213408c"}, {0x1f, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r7}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x100}]}, 0x34}}, 0x0) r9 = socket(0x10, 0x803, 0x0) ioctl$SIOCX25SCALLUSERDATA(r6, 0x89e5, &(0x7f0000000380)={0x5, "9b2bfd996c0be5abb43cb3b0dbe99f3a7926b4b8e032ee19cb719817a88a825ea1816942b4e9322bc95288a463141e5ac63db6b8a145be31b7616743ed728bb8f3bae936e132cf4d5bf66ad646ff4ccef51ec743af93382a56162bbefd23448915341fcaf41f1d0862316ab3dd7d1de6f02814ca5f5c03d29189749fef86a658"}) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x210}]}, 0x34}}, 0x8000) sendmsg$NFT_BATCH(r0, 0x0, 0x0) 1.832607986s ago: executing program 3 (id=6184): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYBLOB="01002dbd7000fedbdf250100000014000200776732000000000000000000000000004c00088040000080040009801400040002004e230a010101000000000000000024000100d1732899f611cd8994034d7f413dc957630e5493c285"], 0x74}, 0x1, 0x0, 0x0, 0xc004}, 0x4000040) sendmmsg(0xffffffffffffffff, &(0x7f0000000dc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x50}}], 0x1, 0x4040845) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_all\x00', 0x275a, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x3) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c00000012000301000000000000000000009db7000000000000010004000000000000000000000000000000000000000000000000000000691d0f76e77044d1eb94e56239e4"], 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 1.73642362s ago: executing program 0 (id=6185): socket$inet6_sctp(0xa, 0x1, 0x84) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r3 = socket$inet_sctp(0x2, 0x1, 0x84) (rerun: 64) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000600)=0x9, 0x4) setsockopt$sock_int(r3, 0x1, 0x2, &(0x7f0000000040)=0x7, 0x4) listen(r3, 0x7) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) (async) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200000040000180060001000a00000008000500000000000c000700000000000000000008000900710000010700060072720000080008"], 0x54}}, 0x0) (async) sendmsg$nl_generic(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000043000701fefffffffbdbdf25027c000004004580280001"], 0x40}}, 0x810) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18020000000000000000000000000030850000002c00000095000000000000002b4003fe37a077ae55f52c0d80a2649baca85309be96d5a45bbbdb5ff7ffffffd075b3eee14473f51be98db7efbb059842badcfc81364470e8e04acb807fbbabc68abdcce9f672b6bb61c302dfd5c11071adac29fd64d33a3502fbeb1ed99dd0e792f24c420bfcc2635421d339ad521d6953b1137850d9e9ebf65ee988ea2dbee528678eb47efb7b3f19046c6f1bd1bf56e5853ed96137f95b3a11954ed1c8a8676468cf2405e48723d4b1ff"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x18) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001a00000129bd7000fddbdf250000000048007c44ebdc195332a15059288b604b51442338de0ff0cc82e5c644a48958ebff01f4e626f4e0f6256c2fe6a12fdc9d794415df36800a21f089dcdd726abe1a97272a3fedce9b654719b8ce24efc656767f566eb54c1d7a868576f37e3b41a527e328793ac867c1e33552d69b0e658060c63335df14e2dd2bda0644ddf64c744519ef694e94c8311fce2097c1551906"], 0x14}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[], 0x3c}}, 0x0) (async, rerun: 64) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) (rerun: 64) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async) ioctl$TUNSETQUEUE(r6, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'wg0\x00', 0x20}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'pimreg0\x00'}) (async) r8 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) (async) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r9, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xc, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x3}]}}]}, 0x3c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) r11 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRESHEX=r2, @ANYRES8=r0, @ANYRES16=r11], 0x58}}, 0x4000) 1.691091476s ago: executing program 3 (id=6186): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@ipv4_newroute={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x7}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @SEG6_LOCAL_IIF={0x8, 0x6, 0x3}}]}, 0x30}}, 0x4000050) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x4, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000700)=@newtfilter={0x54, 0x2c, 0xd09, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa, 0x7}, {}, {0x1c, 0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x84}, @TCA_FLOWER_KEY_IPV4_SRC_MASK={0x8, 0xb, 0xff000000}, @TCA_FLOWER_KEY_PORT_DST_MAX={0x6, 0x5a, 0x4e23}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8040}, 0x24004000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000002540)=@o_path={&(0x7f0000002500)='./file0\x00', 0x0, 0x4008, r0}, 0x18) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000002580)={&(0x7f0000000000)="14dd1c929910bb819889f2762736caf974914df61d3e9453146c33eca3dd85f601f609e7efef11c801d1d9cb54c25588d7f35c9b0859df1fa5449433831053d63671d08ba8ed5db5ee836de411221b1e82165be5a8b229e8680215bde0b86457b9f0b1393fa202e76dff3ecd1ef48f3ae49c7e037d936f5e8d4092d8251ebe28c84cc89f1d3a59a98455bf827bb1b0a2eb2e11d4e41faae714d128b3607608dd5915d45fc49a5410fabada08b6a1cbdf6def49", &(0x7f00000000c0)=""/32, &(0x7f00000014c0)="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", &(0x7f00000024c0)="632614774168118a52fa6b608c8b263d8c906d9a21902e1ca52770b3dceffcb8415afe36db4adf9b32", 0x6, r4, 0x4}, 0x38) 1.479180809s ago: executing program 0 (id=6187): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f00000003c0)=@framed={{}, [@jmp={0x5, 0x0, 0xe, 0x0, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5}, @ldst={0x2, 0x3, 0x3, 0xa, 0x0, 0xffffffffffffffc0, 0x10}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000000)=0x2, 0x4) 1.35512308s ago: executing program 3 (id=6188): r0 = socket$kcm(0x2, 0x5, 0x84) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000000)={0x9, 0x0, 0x1000006, 0x692}, 0x10) sendto$inet6(r2, &(0x7f0000000180)="40e2430877c542cb6fc66f8f56651e78", 0x10, 0x40000c7, 0x0, 0xfffffffffffffe40) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0xff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x1000, 0x9, 0x5, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x1000004, 0x7, 0x4, 0x1000, 0x762, 0x3, 0xd, 0x4, 0x2b12, 0x100, 0x6, 0x1c00, 0xb, 0x7, 0xbed4, 0x8, 0x8000100, 0x1, 0x0, 0x11000, 0x80000000, 0x5, 0x79b, 0x2, 0x1, 0x7d, 0x4, 0x2, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0xbd6, 0x8, 0x180000, 0x400a, 0x8b, 0x5, 0x44, 0xf7, 0x5, 0x5, 0x6, 0x9, 0x9, 0x2000b, 0x4009, 0x0, 0x4, 0xffffff01, 0x8, 0x752, 0x0, 0x1005, 0x5, 0x10001, 0x2, 0xffffffff, 0x6, 0x4, 0x9, 0x7ffffffe, 0xfdffffff, 0x2, 0x2, 0x86, 0x800103, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0xfff, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x2, 0x800, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x2, 0x3, 0x3ff, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x3}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x4}, 0x8) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x7c, &(0x7f0000000000)=r4, 0x62) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r6, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) syz_genetlink_get_family_id$fou(&(0x7f0000000080), r5) r7 = socket(0x2b, 0x1, 0x1) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r9, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) setsockopt$inet6_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r7, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r10, &(0x7f0000000580)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="000228bd7000ffdbdf25070000000c00"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x804) socket(0x400000000010, 0x3, 0x0) 1.324516183s ago: executing program 1 (id=6189): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) unshare(0x400) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0x9) write(r5, &(0x7f0000000380)='f', 0x1) unshare(0x22020600) tee(r4, r3, 0x3, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000700), r6) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000800)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_INTERFACE(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000840)={0x44, r7, 0x211, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_EXTENDED_ADDR={0xc}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan0\x00'}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x44}, 0x1, 0x0, 0x0, 0x40081}, 0x80) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000000)=0x2) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x6, 0xfc}]}) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r10 = accept4(r9, 0x0, 0x0, 0x0) sendmsg$alg(r10, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x40010}, 0x14000012) sendmsg$NL80211_CMD_FRAME(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x1) recvmsg$can_raw(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)=""/24, 0x18}, {&(0x7f0000000400)=""/89, 0x59}], 0x2}, 0x40010042) write$rfkill(r0, &(0x7f0000000340)={0x6, 0x0, 0x3, 0x0, 0x1}, 0x8) 1.313240687s ago: executing program 0 (id=6190): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c3000000000300003e851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608fffffff30500180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', 0x0, 0xf3ff}, 0x78) 1.127091568s ago: executing program 0 (id=6191): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYBLOB="01002dbd7000fedbdf250100000014000200776732000000000000000000000000004c00088040000080040009801400040002004e230a010101000000000000000024000100d1732899f611cd8994034d7f413dc957630e5493c285"], 0x74}, 0x1, 0x0, 0x0, 0xc004}, 0x4000040) sendmmsg(0xffffffffffffffff, &(0x7f0000000dc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x50}}], 0x1, 0x4040845) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_all\x00', 0x275a, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x3) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c00000012000301000000000000000000009db7000000000000010004000000000000000000000000000000000000000000000000000000691d0f76e77044d1eb94e56239e4"], 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 967.01975ms ago: executing program 0 (id=6192): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, 0x0, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) recvmmsg(r3, &(0x7f0000001180)=[{{0x0, 0x0, &(0x7f0000000940)=[{0x0}, {&(0x7f0000000140)=""/42, 0x2a}], 0x2}, 0x8000}], 0x1, 0x10002, 0x0) sendmsg$can_bcm(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x1d, &(0x7f0000000180)=0x2, 0x4) bind$bt_hci(r2, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000015c0)={0x20, 0x2c, 0x107, 0x0, 0x25dfdbff, {0x1, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@typed={0x4, 0x6}]}, @nested={0x4, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c050) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000000)={0x0, 0x9, "be5f21", 0x8, 0x80}) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r5, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x80, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_tunnel_key={0x68, 0x1, 0x0, 0x0, {{0xf}, {0x38, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0xc, @broadcast}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @loopback}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x80}}, 0x0) r7 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r7, 0x400448c8, &(0x7f00000000c0)={r5, r5, 0x1206, 0xfffffffffffffdf3, 0x0, 0x2, 0x0, 0x1, 0x3, 0x8, 0x2, 0x8, 'syz1\x00'}) ioctl$sock_bt_hidp_HIDPCONNDEL(r7, 0x400448c9, 0x0) r8 = accept4$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @local}, &(0x7f0000000080)=0x10, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r7, 0xc0385869, &(0x7f0000000200)={r8, &(0x7f00000000c0)='\x00', 0x2000, &(0x7f0000000100)={@align=0xc7, {0x3, 0x81, 0x3ff, 0x1}}, 0x2, &(0x7f0000000140), &(0x7f00000001c0)=0xa}) r9 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x3f, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f0000000180)=r10, 0x4) r11 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r11, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r11, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 323.417568ms ago: executing program 3 (id=6193): sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x40, 0x0, 0x10, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x77}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xf}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x57}]}, 0x40}, 0x1, 0x0, 0x0, 0x110}, 0x8001) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x3, 0x1, 0x0) setsockopt(r1, 0x107, 0xf, &(0x7f0000000100)="00008634", 0x4) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010000106fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="30200200090000001c0012800b0001006d616373656300000c000200"], 0x3c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) socket$kcm(0xa, 0x3, 0x87) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) pselect6(0x40, &(0x7f0000000040)={0x3, 0x7, 0x200000000007fff, 0x5, 0x5, 0x6, 0x5, 0x7}, 0x0, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) sendmsg$RDMA_NLDEV_CMD_DELLINK(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x38, 0x1404, 0x2, 0x70bd2b, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x40040}, 0x40c0) write$tun(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd120000000000140000006000000003088700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) close(r0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000180)=0x4000000) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000080)=0x6100204) pwritev(r2, &(0x7f0000000a80)=[{&(0x7f0000000540)="00214797357e0e8d442441e9beae583d48ac340d", 0x14}], 0x1, 0x4739, 0x1) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(camellia-generic)\x00'}, 0x58) r7 = accept4(r6, 0x0, 0x0, 0x80000) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x129642, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r9 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtfilter={0x54, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r10, {0xc, 0x2}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x5}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_BOS={0x5, 0x3, 0x4}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) sendmsg$NFT_BATCH(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x400c0}, 0x20004800) preadv(r2, &(0x7f0000000740)=[{&(0x7f00000004c0)=""/65, 0x41}, {&(0x7f0000000780)=""/77, 0x4d}, {&(0x7f0000000680)=""/12, 0xc}, {&(0x7f00000006c0)=""/84, 0x54}], 0x4, 0x6, 0xfffffffe) 0s ago: executing program 0 (id=6194): r0 = socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x200}, &(0x7f0000000040)=0x8) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) read$nci(r2, &(0x7f00000000c0)=""/80, 0x50) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r2, 0x8008f513, &(0x7f0000000140)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$BTRFS_IOC_SYNC(r0, 0x9408, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000200)={r1, 0x1}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r3, 0x84, 0x79, &(0x7f0000000280)={r1, 0x5, 0xfff7}, 0x8) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f00000002c0)={'wlan0\x00', @remote}) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000001ac0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000001e00)=0x0) sendmmsg$nfc_llcp(r4, &(0x7f0000004a40)=[{&(0x7f0000000300)={0x27, 0x0, 0xffffffffffffffff, 0x4, 0xa, 0x7, "aeb30add3320e65a271f36092a7083c61f8d026e724c5e3382d762e2fb59fd9d554d56e7410b38bfbcf93a5585fc30d87aefa6521fe0c3bf7e2babd9a85958", 0x8}, 0x60, &(0x7f00000017c0)=[{&(0x7f0000000380)="1a414255026fb0117ccdb11a2fc8451eff8d2b27f334c2085a7bc3efa5e43814351eaa1c9c16c87e0bd38488fd305c900dee5855b0654a03e6d7921206c725652e2a8835150674bebdf067108d9714545ac29248c05981cab1310e665590a2cb796e9eab5c3fec55fbbfa90401db0b7834", 0x71}, {&(0x7f0000000400)="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", 0x1000}, {&(0x7f0000001400)="5522263320c0f14bd3", 0x9}, {&(0x7f0000001440)="a4bae0125bf8fe9c7af8cf75152c5643a66a66bafefdb30685466ade31f5d6e5b25f4fc7c6fe9832cb07c204", 0x2c}, {&(0x7f0000001480)="9cbf0ebb57189cf9a99f12dab355c79ce9c4d4da1ec1a40a1e0e773d44ba1481bc3890025f658ad9e9bbfa348438d827bf4cbd972a94a214251889b88328d8df92158ae0377bb31a5c7f544bcfbeec1991604381117c23944f6cf591cf4821a7163d8d762d677ff23192e0a1eb3220bb86ef907f51af99e70983e1a686c6e8418f5a012223e8cfe849", 0x89}, {&(0x7f0000001540)="08823c7281a3d513afc2a8d31acca1ec6533629691a7f8ec6ccfe17e96bfd8ff3832df9485572c622dab5102a6b742480bfa44431e183bf2e8718c08c35949b7623e52de3aab44e5c4e768e51c014fdad945b40256e6313f18ce5e34177e10daebb6fe41839226fe3e7ae30666ac0f2d0b7364434839c8713172a7874dc48f1366f02a0f3e9fc21c835bf1f68c526699ebd92992579761a2de6027dc2c55aa", 0x9f}, {&(0x7f0000001600)="0b2b4794a354e956d97a9d36004778d56c0514aad1bf24526694adbc89a0f93ccab4aec3263ba2a4013e41d6d7730a7d21bd815c0e5945a16d0adcbf97ab91ce0a29f395ed1f05c0d26d6e1db6ba392e022984baa5b1815b8455e698d4e3a90fc004607e15acb9a950a2622f7d51c8ebcc7cb684715ce61a6ef8f9038ce6cf6fddf16897353b9ccc736b3c0db4a83f8a7c8e9d8ac37ec4b79a074cd8aaa3b41d56f42608f703262993e937adb554ad6d594a969245c644c6d8e24d515229ca7a75715aa00f9c3850cba787557ba1db158f844957ddd46df54d189823c713d7a18d66f495fb55c1e2", 0xe8}, {&(0x7f0000001700)="89143a3e01b66688d7bbcc72a68224164c44b26c8fa55536117774fdd75fc457242520d7893e4fd2b2fa5d53e60adf00e4a0de796eac52b773fa988522ea9860b47e8dbe87c56674bc7f7e543f9eabdd53b08bc9d21a0b8156362d1be9ac8c1853fcdb65a650c76284984c849099bc2969523bf21155c2764151d046246faa6e6f51570c81ee531aeb5e4c276cc4ad22b77a4c0fb5045eddfa0582d80aaebe65ee955b2ef017f42ef60e62a21bbfa5fe", 0xb0}], 0x8, 0x0, 0x0, 0x4}, {&(0x7f0000001840)={0x27, 0x0, 0xffffffffffffffff, 0x7, 0x1, 0x81, "ce62676054b4d3baaa15dc75b90b7fbff7f4d0da6bd30d1ce4ac7f3087e3c64debaa4afa41767890e0f012cdbc80b3da8b9e2566271df82192fc3c67509043", 0x1}, 0x60, &(0x7f0000001a40)=[{&(0x7f00000018c0)="e1f9b039d836ed708b0f11ac52deb2f58c80e52b0b2caa385df0c7e57ee896040537d802d945362bfd44ec9c64f26471a2e3f8158d42c6d8e2c31559c371d1985c05d981a35e0a37f329b1cb115f16696d47007623acb81d67f7104a94d6369d17412701f128ab0583f92a85ca317386baeb534b2346158a7dfc9a272a391a0a8a1c15132275892ec2b4d6e7cedd89cabd24e08b6fb2b3853c5f11283f2aa2bf6464d4e4c43d98740b127915a8a466965f5fc78c0ff8e693f73ad50d273a1f799f4e", 0xc2}, {&(0x7f00000019c0)="df840a701b08933f5049489f9ff47dc21ac644cd7a7e20f064110bb47634ae0d59372357004fefe4d2db7683579301468cbcd9f0788ff2976e92ec9c4b0388e00f0493ccbe08da26", 0x48}], 0x2, &(0x7f0000001a80)={0x38, 0x116, 0x401, "e94ddf44a78a87d5a60ef21e5bc2712a05e7344f1edbc0034aa85c6a4d7841f6582b"}, 0x38, 0x8010}, {&(0x7f0000001b00)={0x27, r5, 0x0, 0x7, 0x7, 0x3, "7b4190d488583384f357e53cf4dcf1186e34d0d32edd7ad800cd7b017c8f226999a3bc31b39815f0c9f924a0ff0c0ff426afdf5d21f58db71daa2e7ebdabc3", 0x3a}, 0x60, &(0x7f0000001d80)=[{&(0x7f0000001b80)="ad02439065e2a096beb64b828c9604fe3e2e4d6fadb12f44078482271ebce2f38554c876a9b322da61bf51714cabe8be4f496033e09121a41f35cc4ba4bd26d8c4aec9e2294d1deee17f6bc82e30ec1fa875ab3e29c76fa2af716bf32172dc94d07c3689d3ca4ddd261a2060ff263006328bc4d7116b9bf4fa9c695504e8a396c72561ec9741b72534fa90b39f5fef79be068402d3aa9b53f9634985fc18bbc3aec5a29cfb903b63551dc91a2c405a09ebb33d4ec293ecb34346a20998cb03b6675e42e2329999c177bbd1", 0xcb}, {&(0x7f0000001c80)="e9e6bb57ded8d506a6b1fba8b6f1f3d49c729f135d8269a40cf7aef324dc49e002290f8d0d470d8618d368fcc41805d84bf4e1cc95fed2c4a324fc8e6eb4550b29ba3e33bd2fe4b005e7ac4834481cb4c13d1849b96a84c0d4a5ce354637fe068bc07d4f12ec563523d48ee7fbb08374eb13610eadc507c5555e3d9341dec5ba66cb3e5b0e29a9b55d16d47476a59d3c57273f2214facb520f4e27bae287fcb5b22dde181bd67e508d68a46be79ade1f1694173d403a0bc078f52b1df469a4f3cc76713ea9b980988844e10dea0843", 0xcf}], 0x2, &(0x7f0000001dc0)={0x18, 0x117, 0x6, "8ed63e221ec2de"}, 0x18, 0x20004080}, {&(0x7f0000001e40)={0x27, r6, 0xffffffffffffffff, 0x5, 0x1, 0x5, "b935b90eb8e57519c0dade6b7428931f261882ceaa9dd3aaa5318c262cbe4e0533f885e7a13949620ef63310ae4753e5d6bada26ae201d813c3f94d9dbd31e", 0x2c}, 0x60, &(0x7f0000003500)=[{&(0x7f0000001ec0)="21e17ce50332afdc8967a01e19911eb970770217de49f8bfc83d4e8614cd82ec730b4a4c1bcd20f6033ca13a95568c91c2abfb9716d2a9e10044dea83781a68ec58aa02bef27f5dc3346c6de65de787021cb2c65972bf7699927cb", 0x5b}, {&(0x7f0000001f40)="3b20d2069d8769c44dd5193830b1a0d3b7e8cc9774fe391cc381517a6a6b0f9e554cb12c", 0x24}, {&(0x7f0000001f80)="7cd23cb0426d1bc0c5126a4f30bf5d9c7b3bf50cfcd7357a5d6672d1449ea276efbb78d372b317b9fab258aea2cc20eef7029ea2d791a56564d6e0584521f862d7ffd33bf83f7f0573182c2e081447636dbb8c6775a1891204746f58c557107cefc9532c71222f1e66d50be6b5ee05e07e70cb1982bd90204f9d16427fdf161283fa5e173c2af10f3d6dc468a7f9504d00f6c8e262b395ffe5261d8c351b26136cb7ac15d36609c5478ab1d0241131f864016813b7fddf52df0ff715827fa0654c19e1e007cf9e26869392e5faad74b9d723a55fa831da3f738c3e77e6218ba22b6dd52f548e", 0xe6}, {&(0x7f0000002080)="3365ca8764b45cdd3bf272558f57f0c2e8b1b41fa6c325f3fe4a7d062c974927ba2bca02ba209b51646d1ad0580233fd064d760fa8b589ba70a59a00c84da7b8061ff36acce28483dac4bb656a1123649e835d0a2d76787b270a2c7916b3c32843374a720482ab3d881b10518679cd98b1dd5197aaf3190275cfc00528d88f993d7756d6084c3c4123dd17ca6d175d7440ce3cb2a982befa242fa1fb3a5cc363ad51fcd88c994ccc92b3438c55eacbeda8e2ecfcc71f68d0cea066b50c59c78c0b52dcdb3b4f1e995459e65e367500f85839f92409e7ecd28aaf8931393a1ee7b8ebca34e71077e6197509a8", 0xec}, {&(0x7f0000002180)="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", 0xff}, {&(0x7f0000002280)="fb6baa4af993714431b1339916bc6c664a5d6db22db19d31960fc096c630927cba33d1a0116c8c47000979879feaef3ea9cb8146cbe482e4e7f62df4e205bc74692ddd501c09aeb0b5075efbd5eaac829c7a63dfe7816b368d3fe5bbee326eeae60e392e176b4d56535e5afcd745a547a3608a454e13e1c4cb4a8c4307cdcd8c018ac1962f5b92867b7eb22e2e4c0c453ef71f24053c63ea9409b780a044462d7910b6c67f01dff9928294e5e25b3c15ff7a88d7fd0217bc755cbadd058bb0932af99f7f4a13a1cac53f1ce664c803d18e799ba07c2cf866b01f31fdd9f40fc16b6e95f45d2d02f41c3b3fe0ceb89bb2523a218027f962c6044b3820ecc9", 0xfe}, {&(0x7f0000002380)="f1986ae7e48a8c3f9f6ca384bd370dfad3f74397c6262588be071e6504644e5347248d1bfd7f3e984b1c195d533ce558956e20bfabc0e52d5f40ef8798422937", 0x40}, {&(0x7f00000023c0)="329e6e326e192f6713cabda83f9d14edc8022324ba5d0eddfa77cc62f6fe5a1486513518448e0630274c5f6ba1600c3903b1568269d138fd61641e4cb8b8330bc6cae720f3e0dab2f0842078eab1417e2bfe309115d82d16471d038bfba925c96c966afb9e76b875", 0x68}, {&(0x7f0000002440)="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", 0x1000}, {&(0x7f0000003440)="1b66a6818792bc039b23c572df02fe16a73c2af9599e78397dcae714da99d7a48073fb8e10cc8a941f8efbc590b5a277b3641a25d7507d61679ec3951e674d453a68425d15e91a8732ba23b169138ce0eed79763b6c2f9312c54199a835ef17f0af57335229c82dec7bbf9296ce91fa6102e5d6c55b0be26c71832c237d3505e7c9afe", 0x83}], 0xa, &(0x7f00000035c0)={0x30, 0x10d, 0x5dd3, "3bac50619f4d5548c2850dbd02a7b0df26dff0a7964916d54ae40e428490"}, 0x30, 0x8004000}, {&(0x7f0000003600)={0x27, 0x0, 0x0, 0x1, 0x77, 0x3, "8b2df6d16548b30aefcc1031097668d549b115ac97be91ae7d7421fe0d597507626a8173c2bee46eeb86c9c0c0b068a3fb6b57e84218f840d197dc9dbded39", 0x3f}, 0x60, &(0x7f0000004900)=[{&(0x7f0000003680)="ba4f97d0e1accd8f955c77cab747d8e07a4d1940207b9db5eed2be6143596418829feb75347ca35f25e5df9321c739e316c0025c94779bb7a56482733d5b63aeb212bfbb19e151d3e7b9a85ad78bf507274e110e4cc23fb5680255aa7ca40adfc2f2c5c2135bee51ead219733ac2ab7b87181b72910009b6f949163723e2722359da7152b7aac2c4817a1e1c5de6271a39fe0e698b8a", 0x96}, {&(0x7f0000003740)="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", 0x1000}, {&(0x7f0000004740)="8e995717d856a40a0b7273776396270563aa7c1babbc8d9d04661349e9c4b78e4b62cfd58c6d2d2c61b606f8e7f0582e18f9d05e038e43249f722f53478689c3b8e78e4e38060041d173b3c1930eae9029e67574004bd1a193f46611d8e448ac6c498a9aebb21b5d19d5a3a990f501edea33e15c6d8f004160fe257e7db012137303072350ac5dc536c61c74d7e53180537d784fc1c0e72f83748e3dfa52da37f1bae79b587583818f55b56b069f7cd3ccde274d3c8a0fad052ddc78cdf07ee1440ca125a85888d8e86ece77967ad8d461279988", 0xd4}, {&(0x7f0000004840)="81a01e72173662bac571a0edf33e0adbbf82fafec7b5cf2bc1ab38243671103f76ccb6365444648b3510833b9006c4acddcc6094756ebda69acda872500884858ede0d60439201cb6782db21f8de83b6e4ee0d0e7b4a5d2ad6431087b3b78607b6d0c567f8e4d411172966707e61cf87764f0d7899598e272ecc2c0e4d68a92f5bebd939c1113097292316", 0x8b}], 0x4, &(0x7f0000004940)={0xe0, 0x84, 0x1, "9141878e8ae02c0e7058323b09e8185c4d9b713c1db0dcb2b86d1711710139206b9cda41e89297c42406d4c915d1927973913885ecf572ea78b8d618f5da40d504c2d6fbcc073ccb7a17ad16d52dc7d6ce6f2ff30c54f850395fb0f73b4854df71c4e5d38dd846c4a855dd8336ec722114a30d6dd1ea2821a258308a9ba9b1e32e42639871dbbd2bb6320565345206faf0e86f6bb86608ae2cb64c7b74d9d3017be725f30fc8a33a58b723cba91040fbbd0bdcd599ff13f4b9602927d0a08ad4bfcd25febc92641a14ef58b6e1"}, 0xe0, 0x800}], 0x5, 0x1) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f0000004bc0)=0x0, &(0x7f0000004c00)=0x4) sendmsg$nl_route_sched_retired(r3, &(0x7f0000004e40)={&(0x7f0000004b80)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000004e00)={&(0x7f0000004c40)=@newqdisc={0x1a8, 0x24, 0x408, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x6, 0xfffc}, {0x4}, {0x0, 0xfff2}}, [@q_dsmark={{0xb}, {0x8, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x28, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x86f}, @TCA_DSMARK_INDICES={0x6}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x2}]}}, @q_dsmark={{0xb}, {0x20, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x1}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x8}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x24, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0xa}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x9}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x12}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xfffd}]}}, @q_dsmark={{0xb}, {0x30, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x2}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x1a}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x33}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x3}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x2}]}}, @q_dsmark={{0xb}, {0x40, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x8}, @TCA_DSMARK_DEFAULT_INDEX={0x6}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x253}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xb}, @TCA_DSMARK_DEFAULT_INDEX={0x6}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x9}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xf000}]}}, @q_dsmark={{0xb}, {0x34, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x2}, @TCA_DSMARK_INDICES={0x6}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x8}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x2f}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x8}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x9}]}}]}, 0x1a8}, 0x1, 0x0, 0x0, 0xc0}, 0x4) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000004ec0), r4) sendmsg$NL80211_CMD_TESTMODE(r3, &(0x7f0000005040)={&(0x7f0000004e80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000005000)={&(0x7f0000004f00)={0xd0, r8, 0x120, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x25}}}}, [@NL80211_ATTR_TESTDATA={0x1d, 0x45, "26a9a023e732dbaccb90e3ad88e6fabc720830766569905792"}, @NL80211_ATTR_TESTDATA={0x85, 0x45, "0bc8bd5f45ab1ec40b60d4799510024dd0aad9c3d4e39fd76cae1420ddb68960240207a99eebbd69b1580307dc624a970c961bd8c565adb0407c04508448fda83ff0d49af99bcd589d0760e10f5ab0abab2ac723a07eec58c6b5c30698a85e870b866eb298b92f79b39d5df4e010649f4827b77e085ff81fd072538e5fd9a98d23"}]}, 0xd0}, 0x1, 0x0, 0x0, 0x20000001}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000050c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ADD_TX_TS(r3, &(0x7f00000051c0)={&(0x7f0000005080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000005180)={&(0x7f0000005100)={0x50, r8, 0x10, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x5, 0x63}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_ADMITTED_TIME={0x6}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x50}, 0x1, 0x0, 0x0, 0x48000}, 0x10080) sendto$unix(r4, &(0x7f0000005200)="6651d0b748f0f78dddf5eadd7914305f441787fdb61a40caf56b4d9a6e3d0a482ff8578465685efa5f92e24661f1d5a1d44cbef0347902cc8c9a1a47bd03d5095f77f498e4db52593981e571eb69fa1f5d6323a4e80901fa51573ec858b477aee65b5e91896ead546ac9eef09161959307c3fa1c39f1eec23da1b579ea62e3fd3054bf5bc1a99f2c39e0ba2cd025090a65cc65bf1ebf4eb63b7fddb86124a818d66c93eea2c57bc1c50d51", 0xab, 0x20000084, &(0x7f00000052c0)=@file={0x1, './file0\x00'}, 0x6e) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000005340)={'macvtap0\x00', {0x2, 0x0, @initdev}}) r10 = ioctl$TUNGETDEVNETNS(r4, 0x54e3, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r4, &(0x7f0000005440)={&(0x7f0000005380)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000005400)={&(0x7f00000053c0)={0x28, 0x1407, 0x35af5525f5e54875, 0x70bd29, 0x25dfdbfb, "", [@RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r10}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) ioctl$NILFS_IOCTL_CHANGE_CPMODE(r10, 0x40106e80, &(0x7f0000005480)) r11 = socket$phonet(0x23, 0x2, 0x1) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r11, 0x8002f515, &(0x7f00000054c0)) bind$llc(r3, &(0x7f0000005500)={0x1a, 0x221, 0x9, 0x7, 0x43, 0x9b, @broadcast}, 0x10) sendmsg$nl_route_sched(r4, &(0x7f0000005840)={&(0x7f0000005540)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000005800)={&(0x7f0000005580)=@deltaction={0x248, 0x31, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x3c, 0x1, [{0x10, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}, @TCA_ACT_TAB={0x5c, 0x1, [{0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x33f4}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xf2}}]}, @TCA_ACT_TAB={0x28, 0x1, [{0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x14, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}, @TCA_ACT_TAB={0x6c, 0x1, [{0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x14, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x101}}]}, @TCA_ACT_TAB={0x70, 0x1, [{0xc, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9d}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0x10, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffffff}}]}, @TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}]}, @TCA_ACT_TAB={0x54, 0x1, [{0xc, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x3614, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}]}, 0x248}, 0x1, 0x0, 0x0, 0x24004800}, 0x48001) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000005880)={0x2, 'veth0_to_hsr\x00', {0x9}, 0xfff7}) kernel console output (not intermixed with test programs): 80599][T25335] ? __fget_files+0x3a2/0x420 [ 634.180640][T25335] __x64_sys_sendmsg+0x1bd/0x2a0 [ 634.180667][T25335] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 634.180703][T25335] ? __pfx_ksys_write+0x10/0x10 [ 634.180746][T25335] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.180770][T25335] do_syscall_64+0x174/0x580 [ 634.180795][T25335] ? trace_irq_disable+0x3b/0x140 [ 634.180827][T25335] ? clear_bhb_loop+0x40/0x90 [ 634.180855][T25335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.180877][T25335] RIP: 0033:0x7f8f0779ce59 [ 634.180897][T25335] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 634.180915][T25335] RSP: 002b:00007f8f08717028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 634.180938][T25335] RAX: ffffffffffffffda RBX: 00007f8f07a15fa0 RCX: 00007f8f0779ce59 [ 634.180954][T25335] RDX: 0000000020008010 RSI: 0000200000000140 RDI: 0000000000000003 [ 634.180968][T25335] RBP: 00007f8f08717090 R08: 0000000000000000 R09: 0000000000000000 [ 634.180981][T25335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 634.180993][T25335] R13: 00007f8f07a16038 R14: 00007f8f07a15fa0 R15: 00007ffea5063db8 [ 634.181037][T25335] [ 634.182626][T25335] debugfs: out of free dentries, can not create file 'netdev@ffff888079ed66a8' [ 634.312246][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 634.535564][T25339] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5192'. [ 634.663670][T25343] netlink: 'syz.4.5193': attribute type 10 has an invalid length. [ 634.751367][T25343] syz_tun: entered promiscuous mode [ 634.762835][T25343] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 634.771839][T13795] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 634.784385][T13795] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 634.793292][T13795] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 634.802050][T13795] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 635.027245][T25352] netlink: 'syz.3.5198': attribute type 1 has an invalid length. [ 635.036970][T25355] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5197'. [ 635.112491][T25352] netlink: 96 bytes leftover after parsing attributes in process `syz.3.5198'. [ 635.307546][T25364] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 635.347843][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 635.624919][T25380] bridge_slave_0: mtu less than device minimum [ 635.637171][T25379] sctp: [Deprecated]: syz.4.5207 (pid 25379) Use of int in max_burst socket option. [ 635.637171][T25379] Use struct sctp_assoc_value instead [ 635.774222][T25388] Cannot find del_set index 4 as target [ 636.364348][T25414] __nla_validate_parse: 3 callbacks suppressed [ 636.364370][T25414] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5215'. [ 636.387665][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 636.459402][T25414] netlink: 'syz.1.5215': attribute type 1 has an invalid length. [ 636.467386][T25414] netlink: 'syz.1.5215': attribute type 2 has an invalid length. [ 636.606172][T25419] netlink: 'syz.3.5217': attribute type 1 has an invalid length. [ 636.625086][T25422] bridge5: entered promiscuous mode [ 636.625156][T25422] bridge5: entered allmulticast mode [ 636.660916][T25419] netlink: 'syz.3.5217': attribute type 3 has an invalid length. [ 636.669042][T25419] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5217'. [ 636.683824][T25419] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5217'. [ 636.779868][T25432] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5219'. [ 636.863891][T25424] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5218'. [ 636.877401][T25435] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 636.887610][T25435] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5220'. [ 636.935226][T25437] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5222'. [ 636.944483][T25432] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5219'. [ 637.029496][T25437] vlan3: entered promiscuous mode [ 637.192816][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 637.201903][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 637.251786][T25422] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5218'. [ 637.264725][T25432] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5219'. [ 637.427668][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 637.933152][T25470] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20002 [ 638.015511][T25482] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 638.468073][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 638.646496][T25513] bond8: entered promiscuous mode [ 638.666073][T25513] 8021q: adding VLAN 0 to HW filter on device bond8 [ 639.020455][T25526] xt_policy: neither incoming nor outgoing policy selected [ 639.060364][T25530] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 639.171731][ T5645] IPVS: starting estimator thread 0... [ 639.223873][T25523] netlink: 'syz.4.5241': attribute type 12 has an invalid length. [ 639.400017][T25542] netlink: 'syz.2.5247': attribute type 61 has an invalid length. [ 639.418667][T25542] netlink: 'syz.2.5247': attribute type 62 has an invalid length. [ 639.507725][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 639.538021][T25536] IPVS: using max 27 ests per chain, 64800 per kthread [ 639.791189][T25555] FAULT_INJECTION: forcing a failure. [ 639.791189][T25555] name failslab, interval 1, probability 0, space 0, times 0 [ 639.803997][T25555] CPU: 1 UID: 0 PID: 25555 Comm: syz.4.5249 Not tainted syzkaller #0 PREEMPT(full) [ 639.804025][T25555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 639.804039][T25555] Call Trace: [ 639.804048][T25555] [ 639.804057][T25555] dump_stack_lvl+0xe8/0x150 [ 639.804087][T25555] should_fail_ex+0x40c/0x560 [ 639.804130][T25555] should_failslab+0xa8/0x100 [ 639.804154][T25555] __kmalloc_cache_noprof+0x88/0x660 [ 639.804186][T25555] ? trace_contention_end+0x3d/0x140 [ 639.804214][T25555] ? __hw_addr_create+0x62/0x240 [ 639.804243][T25555] __hw_addr_create+0x62/0x240 [ 639.804263][T25555] ? stack_depot_init+0x34/0x1b0 [ 639.804286][T25555] __hw_addr_add_ex+0x1ce/0x520 [ 639.804317][T25555] dev_addr_init+0x15a/0x240 [ 639.804341][T25555] ? __pfx_dev_addr_init+0x10/0x10 [ 639.804368][T25555] ? alloc_netdev_mqs+0xa9/0x1220 [ 639.804402][T25555] alloc_netdev_mqs+0x2b4/0x1220 [ 639.804427][T25555] ? __pfx_snprintf+0x10/0x10 [ 639.804458][T25555] ? __pfx_ip6erspan_tap_setup+0x10/0x10 [ 639.804490][T25555] rtnl_create_link+0x321/0xd70 [ 639.804524][T25555] rtnl_newlink_create+0x25f/0xb00 [ 639.804558][T25555] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 639.804587][T25555] ? __pfx___mutex_lock+0x10/0x10 [ 639.804626][T25555] ? ns_capable+0x89/0xe0 [ 639.804654][T25555] rtnl_newlink+0x167f/0x1bd0 [ 639.804715][T25555] ? __pfx_rtnl_newlink+0x10/0x10 [ 639.804748][T25555] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 639.804813][T25555] ? kasan_quarantine_put+0xbb/0x1f0 [ 639.804844][T25555] ? lockdep_hardirqs_on+0x7a/0x110 [ 639.804874][T25555] ? nlmon_xmit+0xb0/0x100 [ 639.804894][T25555] ? kmem_cache_free+0x182/0x650 [ 639.804939][T25555] ? __lock_acquire+0x683/0x2cd0 [ 639.804967][T25555] ? __dev_queue_xmit+0x29b/0x37f0 [ 639.804997][T25555] ? __local_bh_enable_ip+0xd0/0x130 [ 639.805020][T25555] ? lockdep_hardirqs_on+0x7a/0x110 [ 639.805045][T25555] ? __dev_queue_xmit+0x29b/0x37f0 [ 639.805069][T25555] ? __local_bh_enable_ip+0xd0/0x130 [ 639.805090][T25555] ? __dev_queue_xmit+0x29b/0x37f0 [ 639.805124][T25555] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 639.805177][T25555] ? __pfx_rtnl_newlink+0x10/0x10 [ 639.805209][T25555] rtnetlink_rcv_msg+0x802/0xc00 [ 639.805248][T25555] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 639.805282][T25555] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 639.805314][T25555] ? ref_tracker_free+0x689/0x830 [ 639.805341][T25555] ? __pfx_ref_tracker_free+0x10/0x10 [ 639.805377][T25555] netlink_rcv_skb+0x226/0x4a0 [ 639.805403][T25555] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 639.805441][T25555] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 639.805480][T25555] ? netlink_deliver_tap+0x2e/0x1b0 [ 639.805504][T25555] ? netlink_deliver_tap+0x2e/0x1b0 [ 639.805535][T25555] netlink_unicast+0x7bb/0x940 [ 639.805583][T25555] netlink_sendmsg+0x813/0xb40 [ 639.805619][T25555] ? __pfx_netlink_sendmsg+0x10/0x10 [ 639.805647][T25555] ? aa_sock_msg_perm+0xf1/0x1b0 [ 639.805683][T25555] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 639.805717][T25555] ? __pfx_netlink_sendmsg+0x10/0x10 [ 639.805744][T25555] ____sys_sendmsg+0x9b9/0xa20 [ 639.805769][T25555] ? __might_fault+0xaf/0x130 [ 639.805842][T25555] ? __pfx_____sys_sendmsg+0x10/0x10 [ 639.805889][T25555] ? import_iovec+0x73/0xa0 [ 639.805920][T25555] ___sys_sendmsg+0x2a5/0x360 [ 639.805942][T25555] ? __lock_acquire+0x683/0x2cd0 [ 639.805971][T25555] ? __pfx____sys_sendmsg+0x10/0x10 [ 639.806037][T25555] ? __fget_files+0x2a/0x420 [ 639.806063][T25555] ? __fget_files+0x3a2/0x420 [ 639.806102][T25555] __x64_sys_sendmsg+0x1bd/0x2a0 [ 639.806130][T25555] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 639.806166][T25555] ? __pfx_ksys_write+0x10/0x10 [ 639.806209][T25555] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 639.806234][T25555] do_syscall_64+0x174/0x580 [ 639.806259][T25555] ? trace_irq_disable+0x3b/0x140 [ 639.806292][T25555] ? clear_bhb_loop+0x40/0x90 [ 639.806321][T25555] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 639.806344][T25555] RIP: 0033:0x7f025c59ce59 [ 639.806365][T25555] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 639.806385][T25555] RSP: 002b:00007f025d418028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 639.806409][T25555] RAX: ffffffffffffffda RBX: 00007f025c815fa0 RCX: 00007f025c59ce59 [ 639.806425][T25555] RDX: 0000000020008010 RSI: 0000200000000140 RDI: 0000000000000003 [ 639.806440][T25555] RBP: 00007f025d418090 R08: 0000000000000000 R09: 0000000000000000 [ 639.806454][T25555] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 639.806467][T25555] R13: 00007f025c816038 R14: 00007f025c815fa0 R15: 00007ffd3a941eb8 [ 639.806504][T25555] [ 640.547672][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 640.832246][T25580] netlink: 'syz.2.5258': attribute type 10 has an invalid length. [ 641.587655][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 641.734172][T25595] netlink: 'syz.3.5259': attribute type 12 has an invalid length. [ 641.986329][T25609] __nla_validate_parse: 6 callbacks suppressed [ 641.986348][T25609] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5265'. [ 642.020656][T25609] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5265'. [ 642.199378][T25615] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input12 [ 642.260391][T25616] netlink: zone id is out of range [ 642.627670][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 642.650213][T25638] FAULT_INJECTION: forcing a failure. [ 642.650213][T25638] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 642.664573][T25638] CPU: 1 UID: 0 PID: 25638 Comm: syz.0.5276 Not tainted syzkaller #0 PREEMPT(full) [ 642.664605][T25638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 642.664619][T25638] Call Trace: [ 642.664629][T25638] [ 642.664639][T25638] dump_stack_lvl+0xe8/0x150 [ 642.664670][T25638] should_fail_ex+0x40c/0x560 [ 642.664712][T25638] _copy_from_user+0x2d/0xb0 [ 642.664740][T25638] do_sock_getsockopt+0x200/0x7e0 [ 642.664771][T25638] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 642.664813][T25638] ? __fget_files+0x3a2/0x420 [ 642.664840][T25638] ? __fget_files+0x2a/0x420 [ 642.664875][T25638] __x64_sys_getsockopt+0x1a4/0x240 [ 642.664904][T25638] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 642.664928][T25638] do_syscall_64+0x174/0x580 [ 642.665013][T25638] ? trace_irq_disable+0x3b/0x140 [ 642.665046][T25638] ? clear_bhb_loop+0x40/0x90 [ 642.665075][T25638] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 642.665097][T25638] RIP: 0033:0x7fc1dff9ce59 [ 642.665117][T25638] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 642.665136][T25638] RSP: 002b:00007fc1e0efe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 642.665159][T25638] RAX: ffffffffffffffda RBX: 00007fc1e0215fa0 RCX: 00007fc1dff9ce59 [ 642.665176][T25638] RDX: 0000000000000073 RSI: 0000000000000084 RDI: 0000000000000003 [ 642.665189][T25638] RBP: 00007fc1e0efe090 R08: 00002000000009c0 R09: 0000000000000000 [ 642.665204][T25638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 642.665217][T25638] R13: 00007fc1e0216038 R14: 00007fc1e0215fa0 R15: 00007ffc7759af78 [ 642.665253][T25638] [ 643.667939][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 644.707665][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 645.747661][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 645.975725][T25742] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 645.984120][T25742] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 646.021596][T25743] FAULT_INJECTION: forcing a failure. [ 646.021596][T25743] name failslab, interval 1, probability 0, space 0, times 0 [ 646.034271][T25743] CPU: 1 UID: 0 PID: 25743 Comm: syz.1.5299 Not tainted syzkaller #0 PREEMPT(full) [ 646.034299][T25743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 646.034314][T25743] Call Trace: [ 646.034323][T25743] [ 646.034332][T25743] dump_stack_lvl+0xe8/0x150 [ 646.034364][T25743] should_fail_ex+0x40c/0x560 [ 646.034403][T25743] should_failslab+0xa8/0x100 [ 646.034428][T25743] __kmalloc_cache_noprof+0x88/0x660 [ 646.034459][T25743] ? __asan_memset+0x22/0x50 [ 646.034486][T25743] ? alloc_netdev_mqs+0xc18/0x1220 [ 646.034512][T25743] ? __kmalloc_cache_noprof+0x157/0x660 [ 646.034571][T25743] alloc_netdev_mqs+0xc18/0x1220 [ 646.034605][T25743] rtnl_create_link+0x321/0xd70 [ 646.034639][T25743] rtnl_newlink_create+0x25f/0xb00 [ 646.034667][T25743] ? __mutex_lock+0x5c5/0x1590 [ 646.034698][T25743] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 646.034726][T25743] ? __pfx___mutex_lock+0x10/0x10 [ 646.034763][T25743] ? ns_capable+0x89/0xe0 [ 646.034790][T25743] rtnl_newlink+0x167f/0x1bd0 [ 646.034843][T25743] ? __pfx_rtnl_newlink+0x10/0x10 [ 646.034875][T25743] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 646.034942][T25743] ? kasan_quarantine_put+0xbb/0x1f0 [ 646.034973][T25743] ? lockdep_hardirqs_on+0x7a/0x110 [ 646.035003][T25743] ? nlmon_xmit+0xb0/0x100 [ 646.035023][T25743] ? kmem_cache_free+0x182/0x650 [ 646.035067][T25743] ? __lock_acquire+0x683/0x2cd0 [ 646.035095][T25743] ? __dev_queue_xmit+0x29b/0x37f0 [ 646.035124][T25743] ? __local_bh_enable_ip+0xd0/0x130 [ 646.035147][T25743] ? lockdep_hardirqs_on+0x7a/0x110 [ 646.035171][T25743] ? __dev_queue_xmit+0x29b/0x37f0 [ 646.035202][T25743] ? __local_bh_enable_ip+0xd0/0x130 [ 646.035222][T25743] ? __dev_queue_xmit+0x29b/0x37f0 [ 646.035255][T25743] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 646.035305][T25743] ? __pfx_rtnl_newlink+0x10/0x10 [ 646.035340][T25743] rtnetlink_rcv_msg+0x802/0xc00 [ 646.035378][T25743] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 646.035412][T25743] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 646.035443][T25743] ? ref_tracker_free+0x689/0x830 [ 646.035471][T25743] ? __pfx_ref_tracker_free+0x10/0x10 [ 646.035507][T25743] netlink_rcv_skb+0x226/0x4a0 [ 646.035534][T25743] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 646.035570][T25743] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 646.035603][T25743] ? netlink_deliver_tap+0x2e/0x1b0 [ 646.035622][T25743] ? netlink_deliver_tap+0x2e/0x1b0 [ 646.035647][T25743] netlink_unicast+0x7bb/0x940 [ 646.035686][T25743] netlink_sendmsg+0x813/0xb40 [ 646.035717][T25743] ? __pfx_netlink_sendmsg+0x10/0x10 [ 646.035741][T25743] ? aa_sock_msg_perm+0xf1/0x1b0 [ 646.035770][T25743] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 646.035794][T25743] ? __pfx_netlink_sendmsg+0x10/0x10 [ 646.035816][T25743] ____sys_sendmsg+0x9b9/0xa20 [ 646.035836][T25743] ? __might_fault+0xaf/0x130 [ 646.035866][T25743] ? __pfx_____sys_sendmsg+0x10/0x10 [ 646.035894][T25743] ? import_iovec+0x73/0xa0 [ 646.035919][T25743] ___sys_sendmsg+0x2a5/0x360 [ 646.035938][T25743] ? __lock_acquire+0x683/0x2cd0 [ 646.035961][T25743] ? __pfx____sys_sendmsg+0x10/0x10 [ 646.036013][T25743] ? __fget_files+0x2a/0x420 [ 646.036035][T25743] ? __fget_files+0x3a2/0x420 [ 646.036067][T25743] __x64_sys_sendmsg+0x1bd/0x2a0 [ 646.036090][T25743] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 646.036118][T25743] ? __pfx_ksys_write+0x10/0x10 [ 646.036153][T25743] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 646.036173][T25743] do_syscall_64+0x174/0x580 [ 646.036201][T25743] ? trace_irq_disable+0x3b/0x140 [ 646.036228][T25743] ? clear_bhb_loop+0x40/0x90 [ 646.036251][T25743] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 646.036269][T25743] RIP: 0033:0x7f8f0779ce59 [ 646.036287][T25743] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 646.036303][T25743] RSP: 002b:00007f8f08717028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 646.036322][T25743] RAX: ffffffffffffffda RBX: 00007f8f07a15fa0 RCX: 00007f8f0779ce59 [ 646.036336][T25743] RDX: 0000000020008010 RSI: 0000200000000140 RDI: 0000000000000003 [ 646.036348][T25743] RBP: 00007f8f08717090 R08: 0000000000000000 R09: 0000000000000000 [ 646.036360][T25743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 646.036371][T25743] R13: 00007f8f07a16038 R14: 00007f8f07a15fa0 R15: 00007ffea5063db8 [ 646.036400][T25743] [ 646.787861][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 647.311427][T25770] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5308'. [ 647.383863][ T5652] Bluetooth: hci2: link tx timeout [ 647.413333][ T5652] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 647.600802][T25781] netlink: 'syz.1.5308': attribute type 10 has an invalid length. [ 647.609897][T25781] netlink: 41 bytes leftover after parsing attributes in process `syz.1.5308'. [ 647.619827][T25781] netlink: 140 bytes leftover after parsing attributes in process `syz.1.5308'. [ 647.629958][T25781] netlink: 41 bytes leftover after parsing attributes in process `syz.1.5308'. [ 647.707313][T25784] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 647.717972][T25784] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5312'. [ 647.827712][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 648.152777][T25801] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 648.189757][T25801] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5313'. [ 648.736373][T25814] bond3: entered promiscuous mode [ 648.867664][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 649.081254][T25840] bond0: (slave syz_tun): Releasing backup interface [ 649.165967][T25840] bond0: (slave bond_slave_0): Releasing backup interface [ 649.222404][T25840] bond0: (slave bond_slave_1): Releasing backup interface [ 649.393835][T25840] team0: Port device team_slave_0 removed [ 649.421029][T25840] team0: Port device team_slave_1 removed [ 649.432604][ T5652] Bluetooth: hci2: command 0x0405 tx timeout [ 649.457360][T25840] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 649.473173][T25840] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 649.494520][T25840] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 649.500350][T25861] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input13 [ 649.501963][T25840] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 649.533296][T25840] bond2: (slave veth3): Releasing active interface [ 649.615524][T25840] bond3: (slave geneve3): Releasing active interface [ 649.664685][T25840] bond4: (slave ip6gre1): Releasing backup interface [ 649.671502][T25840] ip6gre1: left promiscuous mode [ 649.725176][T25840] bond5: (slave veth1): Releasing backup interface [ 649.732000][T25840] bond5: (slave veth1): the permanent HWaddr of slave - a6:fc:32:13:74:0a - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 649.753268][T25840] bond5: (slave bridge3): Releasing backup interface [ 649.791192][T25840] batman_adv: batadv0: Removing interface: vlan2 [ 649.842972][T25871] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 649.877190][T25871] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 649.907684][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 649.946876][T25871] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 649.998945][T25877] xt_hashlimit: size too large, truncated to 1048576 [ 650.173903][T25878] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5330'. [ 650.182870][T25878] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5330'. [ 650.220354][T25878] geneve2: entered promiscuous mode [ 650.225658][T25878] geneve2: entered allmulticast mode [ 650.298887][T25885] syzkaller1: entered promiscuous mode [ 650.304442][T25885] syzkaller1: entered allmulticast mode [ 650.352578][T25890] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5333'. [ 650.609147][T25903] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5334'. [ 650.640964][T25897] bridge0: port 2(bridge_slave_1) entered disabled state [ 650.739287][T25905] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input14 [ 650.947765][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 651.010175][T25912] netlink: 'syz.1.5341': attribute type 10 has an invalid length. [ 651.216674][T25925] syzkaller1: entered promiscuous mode [ 651.222538][T25925] syzkaller1: entered allmulticast mode [ 651.462487][T25937] macvtap0: entered promiscuous mode [ 651.987898][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 652.054942][T25963] netlink: 'syz.3.5359': attribute type 2 has an invalid length. [ 652.358184][T25976] netlink: 'syz.4.5363': attribute type 10 has an invalid length. [ 652.470657][T25980] __nla_validate_parse: 2 callbacks suppressed [ 652.470678][T25980] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.5365'. [ 652.547960][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 652.555370][ C0] bridge0: topology change detected, propagating [ 652.562420][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 652.569740][ C0] bridge0: topology change detected, propagating [ 653.027671][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 653.075520][T25993] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5371'. [ 653.125460][T25993] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5371'. [ 653.505639][T26015] bridge0: port 1(veth0_virt_wifi) entered blocking state [ 653.513034][T26015] bridge0: port 1(veth0_virt_wifi) entered disabled state [ 653.520752][T26015] veth0_virt_wifi: entered allmulticast mode [ 653.528811][T26015] veth0_virt_wifi: entered promiscuous mode [ 653.546705][T26015] bridge0: port 1(veth0_virt_wifi) entered blocking state [ 653.554011][T26015] bridge0: port 1(veth0_virt_wifi) entered forwarding state [ 653.661976][T26025] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.5381'. [ 653.852202][T26034] Cannot find del_set index 0 as target [ 653.865454][ T449] block nbd1: Possible stuck request ffff888027b77000: control (read@0,1024B). Runtime 390 seconds [ 653.876230][ T449] block nbd1: Possible stuck request ffff888027b771c0: control (read@1024,1024B). Runtime 390 seconds [ 653.887232][ T449] block nbd1: Possible stuck request ffff888027b77380: control (read@2048,1024B). Runtime 390 seconds [ 653.899117][ T449] block nbd1: Possible stuck request ffff888027b77540: control (read@3072,1024B). Runtime 390 seconds [ 654.067659][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 654.421403][T26048] netlink: 'syz.2.5387': attribute type 10 has an invalid length. [ 654.534728][T26058] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 654.578089][T26053] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 655.018135][T26077] netlink: 'syz.1.5392': attribute type 1 has an invalid length. [ 655.041446][T26077] netlink: 'syz.1.5392': attribute type 10 has an invalid length. [ 655.108281][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 655.120698][T26077] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5392'. [ 655.136562][T26077] dummy0: entered promiscuous mode [ 655.625583][T26091] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 655.653280][T26091] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5395'. [ 656.147772][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 656.861169][T26136] netlink: 'syz.3.5402': attribute type 10 has an invalid length. [ 657.103102][T26146] netlink: 'syz.0.5406': attribute type 3 has an invalid length. [ 657.126802][T26148] netlink: 'syz.0.5406': attribute type 3 has an invalid length. [ 657.187708][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 657.202643][T26142] pim6reg: entered allmulticast mode [ 657.208284][T26142] pim6reg: left allmulticast mode [ 657.348796][T26156] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 657.356965][T26156] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 657.416995][T26153] netlink: zone id is out of range [ 657.426347][T26153] netlink: zone id is out of range [ 657.432901][T26153] netlink: zone id is out of range [ 657.438764][T26153] netlink: zone id is out of range [ 657.444050][T26153] netlink: zone id is out of range [ 657.451628][T26153] netlink: zone id is out of range [ 657.461132][T26160] netlink: 'syz.0.5409': attribute type 12 has an invalid length. [ 660.219589][T26257] netlink: 'syz.2.5440': attribute type 10 has an invalid length. [ 660.317906][T26263] tipc: Enabled bearer , priority 0 [ 660.326047][T26263] syzkaller0: entered promiscuous mode [ 660.331553][T26263] syzkaller0: entered allmulticast mode [ 660.360116][T26263] tipc: Resetting bearer [ 660.364714][T26265] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5438'. [ 660.444449][T26262] tipc: Resetting bearer [ 660.478287][T26267] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5439'. [ 660.488755][T26262] tipc: Disabling bearer [ 660.555918][T26269] xt_hashlimit: size too large, truncated to 1048576 [ 660.713608][T26272] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5442'. [ 661.029021][T26287] netlink: 'syz.4.5445': attribute type 4 has an invalid length. [ 661.050689][T26287] netlink: 240 bytes leftover after parsing attributes in process `syz.4.5445'. [ 661.146298][T26292] netlink: 'syz.1.5446': attribute type 89 has an invalid length. [ 661.163472][T26293] netlink: 'syz.1.5446': attribute type 89 has an invalid length. [ 661.347679][ C0] net_ratelimit: 403 callbacks suppressed [ 661.347703][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 661.806832][T26301] syzkaller0: entered promiscuous mode [ 661.819834][T26301] syzkaller0: entered allmulticast mode [ 662.387653][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 662.665133][T26344] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 662.691411][T26344] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5456'. [ 663.433648][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 664.467668][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 665.141999][T26326] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5453'. [ 665.507650][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 665.694131][T26372] syzkaller0: entered promiscuous mode [ 665.715070][T26372] syzkaller0: entered allmulticast mode [ 666.081978][T26391] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 666.117673][T26391] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 666.171647][T26393] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5468'. [ 666.227940][T26390] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5469'. [ 666.252438][T26401] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5471'. [ 666.284871][T26401] openvswitch: netlink: Invalid VLAN frame [ 666.409429][T26407] netlink: 220 bytes leftover after parsing attributes in process `syz.2.5472'. [ 666.430178][T26407] netlink: 5516 bytes leftover after parsing attributes in process `syz.2.5472'. [ 666.446361][T26407] syzkaller0: entered promiscuous mode [ 666.459393][T26407] syzkaller0: entered allmulticast mode [ 666.547769][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 666.565379][T13804] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 666.593474][T13804] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 667.045727][T26436] xt_hashlimit: size too large, truncated to 1048576 [ 667.162158][T26435] xt_hashlimit: size too large, truncated to 1048576 [ 667.254872][T26437] netlink: 'syz.4.5481': attribute type 1 has an invalid length. [ 667.262674][T26437] netlink: 96 bytes leftover after parsing attributes in process `syz.4.5481'. [ 667.330993][T26437] netlink: 1 bytes leftover after parsing attributes in process `syz.4.5481'. [ 667.350025][T26437] netlink: 'syz.4.5481': attribute type 1 has an invalid length. [ 667.357920][T26437] netlink: 'syz.4.5481': attribute type 8 has an invalid length. [ 667.384649][T26437] netlink: 606 bytes leftover after parsing attributes in process `syz.4.5481'. [ 667.515250][T26457] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 667.587817][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 667.604963][T26460] netlink: 1244 bytes leftover after parsing attributes in process `syz.0.5487'. [ 667.782496][T26470] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5491'. [ 667.842411][T26473] netlink: 'syz.3.5490': attribute type 3 has an invalid length. [ 667.885998][T26473] netlink: 'syz.3.5490': attribute type 1 has an invalid length. [ 667.893986][T26473] NCSI netlink: No device for ifindex 0 [ 668.331986][T26498] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 668.470742][T26495] netlink: 'syz.0.5498': attribute type 1 has an invalid length. [ 668.478565][T26495] netlink: 'syz.0.5498': attribute type 1 has an invalid length. [ 668.486335][T26495] netlink: 'syz.0.5498': attribute type 8 has an invalid length. [ 668.627844][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 669.227709][T26538] FAULT_INJECTION: forcing a failure. [ 669.227709][T26538] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 669.269237][T26538] CPU: 1 UID: 0 PID: 26538 Comm: syz.1.5507 Not tainted syzkaller #0 PREEMPT(full) [ 669.269268][T26538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 669.269282][T26538] Call Trace: [ 669.269291][T26538] [ 669.269300][T26538] dump_stack_lvl+0xe8/0x150 [ 669.269332][T26538] should_fail_ex+0x40c/0x560 [ 669.269374][T26538] _copy_from_user+0x2d/0xb0 [ 669.269400][T26538] rds_setsockopt+0x6e1/0xdf0 [ 669.269544][T26538] ? __pfx_rds_setsockopt+0x10/0x10 [ 669.269571][T26538] ? __fget_files+0x2a/0x420 [ 669.269604][T26538] ? __pfx_aa_sk_perm+0x10/0x10 [ 669.269639][T26538] ? __fget_files+0x2a/0x420 [ 669.269664][T26538] ? aa_sock_opt_perm+0xff/0x1a0 [ 669.269700][T26538] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 669.269731][T26538] ? __pfx_rds_setsockopt+0x10/0x10 [ 669.269761][T26538] do_sock_setsockopt+0x17c/0x1b0 [ 669.269790][T26538] __x64_sys_setsockopt+0x13d/0x1b0 [ 669.269816][T26538] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 669.269841][T26538] do_syscall_64+0x174/0x580 [ 669.269866][T26538] ? trace_irq_disable+0x3b/0x140 [ 669.269898][T26538] ? clear_bhb_loop+0x40/0x90 [ 669.269925][T26538] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 669.269948][T26538] RIP: 0033:0x7f8f0779ce59 [ 669.269969][T26538] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 669.269989][T26538] RSP: 002b:00007f8f08717028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 669.270012][T26538] RAX: ffffffffffffffda RBX: 00007f8f07a15fa0 RCX: 00007f8f0779ce59 [ 669.270029][T26538] RDX: 000000000000000a RSI: 0000000000000114 RDI: 0000000000000003 [ 669.270042][T26538] RBP: 00007f8f08717090 R08: 0000000000000004 R09: 0000000000000000 [ 669.270056][T26538] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 669.270071][T26538] R13: 00007f8f07a16038 R14: 00007f8f07a15fa0 R15: 00007ffea5063db8 [ 669.270107][T26538] [ 669.667864][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 669.829850][T26553] netlink: 'syz.1.5510': attribute type 1 has an invalid length. [ 669.856252][T26553] netlink: 'syz.1.5510': attribute type 1 has an invalid length. [ 670.209956][T26577] sctp: [Deprecated]: syz.2.5518 (pid 26577) Use of struct sctp_assoc_value in delayed_ack socket option. [ 670.209956][T26577] Use struct sctp_sack_info instead [ 670.707824][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 671.181703][T26627] __nla_validate_parse: 11 callbacks suppressed [ 671.181724][T26627] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5529'. [ 671.380154][T26633] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input15 [ 671.445901][T26635] netlink: zone id is out of range [ 671.707464][T26649] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5534'. [ 671.747694][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 671.902328][T26665] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 672.633608][T26700] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5539'. [ 672.672663][T26699] netlink: 9 bytes leftover after parsing attributes in process `syz.3.5546'. [ 672.735980][T26699] gretap0: entered promiscuous mode [ 672.787759][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 672.913126][T26708] validate_nla: 2 callbacks suppressed [ 672.913147][T26708] netlink: 'syz.4.5547': attribute type 13 has an invalid length. [ 673.206342][T26718] netlink: 'syz.4.5553': attribute type 1 has an invalid length. [ 673.334903][T26718] bond7: entered promiscuous mode [ 673.353648][T26718] 8021q: adding VLAN 0 to HW filter on device bond7 [ 673.429218][T26735] netlink: zone id is out of range [ 673.460237][T26737] openvswitch: netlink: VXLAN extension 1 has unexpected len 8 expected 4 [ 673.484549][T26738] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5556'. [ 673.552774][T26737] netlink: 'syz.1.5558': attribute type 13 has an invalid length. [ 673.709502][T26750] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.5562'. [ 673.711878][T26748] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5558'. [ 673.734720][T26746] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5560'. [ 673.800641][T26747] netlink: 29 bytes leftover after parsing attributes in process `syz.0.5561'. [ 673.811891][T26737] netlink: 'syz.1.5558': attribute type 2 has an invalid length. [ 673.825701][T26737] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5558'. [ 673.827873][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 673.999076][T26760] netlink: 'syz.4.5564': attribute type 1 has an invalid length. [ 674.078288][T26763] netlink: 'syz.3.5565': attribute type 39 has an invalid length. [ 674.095967][T26760] bond8: entered promiscuous mode [ 674.103139][T26760] 8021q: adding VLAN 0 to HW filter on device bond8 [ 674.264356][T26760] bond8: (slave bridge5): making interface the new active one [ 674.272002][T26760] bridge5: entered promiscuous mode [ 674.278985][T26760] bond8: (slave bridge5): Enslaving as an active interface with an up link [ 674.475774][T26778] netlink: zone id is out of range [ 674.597441][T26781] syzkaller0: entered promiscuous mode [ 674.617687][T26781] syzkaller0: entered allmulticast mode [ 674.653714][T26789] netlink: 'syz.0.5573': attribute type 21 has an invalid length. [ 674.668419][T26789] netlink: 'syz.0.5573': attribute type 4 has an invalid length. [ 674.717757][T26789] netlink: 'syz.0.5573': attribute type 5 has an invalid length. [ 674.867649][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 674.938110][T26797] netlink: 'syz.4.5578': attribute type 1 has an invalid length. [ 675.907693][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 676.420091][T26870] syzkaller0: entered promiscuous mode [ 676.425748][T26870] syzkaller0: entered allmulticast mode [ 676.869597][T26892] __nla_validate_parse: 13 callbacks suppressed [ 676.869625][T26892] netlink: 112 bytes leftover after parsing attributes in process `syz.0.5604'. [ 676.947661][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 677.067229][T26882] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5604'. [ 677.286982][T26912] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5612'. [ 677.301660][T26913] FAULT_INJECTION: forcing a failure. [ 677.301660][T26913] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 677.320710][T26912] bridge_slave_0: default FDB implementation only supports local addresses [ 677.330575][T26913] CPU: 0 UID: 0 PID: 26913 Comm: syz.2.5613 Not tainted syzkaller #0 PREEMPT(full) [ 677.330605][T26913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 677.330620][T26913] Call Trace: [ 677.330629][T26913] [ 677.330639][T26913] dump_stack_lvl+0xe8/0x150 [ 677.330673][T26913] should_fail_ex+0x40c/0x560 [ 677.330716][T26913] _copy_from_user+0x2d/0xb0 [ 677.330747][T26913] do_sys_poll+0x258/0x1110 [ 677.330783][T26913] ? __lock_acquire+0x683/0x2cd0 [ 677.330815][T26913] ? __pfx_do_sys_poll+0x10/0x10 [ 677.330840][T26913] ? aa_file_perm+0x18b/0x15f0 [ 677.330952][T26913] ? ktime_get_ts64+0xa9/0x410 [ 677.331051][T26913] ? __pfx_timespec64_add_safe+0x10/0x10 [ 677.331089][T26913] __x64_sys_poll+0x190/0x360 [ 677.331118][T26913] ? __pfx___x64_sys_poll+0x10/0x10 [ 677.331153][T26913] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 677.331179][T26913] do_syscall_64+0x174/0x580 [ 677.331205][T26913] ? trace_irq_disable+0x3b/0x140 [ 677.331238][T26913] ? clear_bhb_loop+0x40/0x90 [ 677.331267][T26913] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 677.331288][T26913] RIP: 0033:0x7f003119ce59 [ 677.331309][T26913] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 677.331329][T26913] RSP: 002b:00007f0031fa9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000007 [ 677.331354][T26913] RAX: ffffffffffffffda RBX: 00007f0031415fa0 RCX: 00007f003119ce59 [ 677.331371][T26913] RDX: 0000000000000009 RSI: 20000000000000b5 RDI: 0000200000000000 [ 677.331387][T26913] RBP: 00007f0031fa9090 R08: 0000000000000000 R09: 0000000000000000 [ 677.331401][T26913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 677.331415][T26913] R13: 00007f0031416038 R14: 00007f0031415fa0 R15: 00007ffee9d7a098 [ 677.331454][T26913] [ 677.692903][T26930] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5617'. [ 677.763069][T26930] digital: digital_start_poll: Unknown protocol [ 677.987761][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 678.053968][T26944] validate_nla: 2 callbacks suppressed [ 678.053991][T26944] netlink: 'syz.4.5622': attribute type 10 has an invalid length. [ 678.084291][T26944] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 678.296077][T26956] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 678.355081][T26956] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 678.450019][T26966] syzkaller0: entered promiscuous mode [ 678.464644][T26966] syzkaller0: entered allmulticast mode [ 678.639091][T26975] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5633'. [ 678.734211][T26973] bridge6: entered allmulticast mode [ 678.743609][T26973] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5632'. [ 678.842861][T26984] netlink: 'syz.3.5636': attribute type 10 has an invalid length. [ 678.917046][T26987] geneve5: entered promiscuous mode [ 678.929158][T26987] geneve5: entered allmulticast mode [ 678.960460][T26989] netlink: 'syz.3.5638': attribute type 10 has an invalid length. [ 679.027758][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 679.249898][T26998] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 679.292254][T26998] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 679.382129][T27003] netdevsim netdevsim2 netdevsim0: refused to change device tx_queue_len [ 679.386406][T26996] netlink: 'syz.4.5641': attribute type 1 has an invalid length. [ 679.398418][T26996] netlink: 96 bytes leftover after parsing attributes in process `syz.4.5641'. [ 679.407408][T26996] netlink: 1 bytes leftover after parsing attributes in process `syz.4.5641'. [ 679.416308][T26996] netlink: 'syz.4.5641': attribute type 1 has an invalid length. [ 679.455641][T26996] netlink: 'syz.4.5641': attribute type 8 has an invalid length. [ 679.463455][T26996] netlink: 606 bytes leftover after parsing attributes in process `syz.4.5641'. [ 679.575711][T27009] netlink: 'syz.2.5645': attribute type 13 has an invalid length. [ 679.612698][T27009] netlink: 'syz.2.5645': attribute type 17 has an invalid length. [ 679.831204][T27021] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5647'. [ 680.019378][T27008] bridge0: port 1(team0) entered disabled state [ 680.068212][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 680.470208][T27008] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 680.499894][T27008] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 680.963025][T27009] syz_tun: left promiscuous mode [ 681.010098][T27009] 8021q: adding VLAN 0 to HW filter on device bond0 [ 681.019324][T27009] bridge0: port 1(team0) entered blocking state [ 681.025829][T27009] bridge0: port 1(team0) entered forwarding state [ 681.032534][T27009] 8021q: adding VLAN 0 to HW filter on device team0 [ 681.045990][T27009] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 681.107336][T27009] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 681.107825][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 681.125148][T27009] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 681.155958][T27009] veth1_vlan: left promiscuous mode [ 681.162807][T27009] veth0_vlan: left promiscuous mode [ 681.169340][T27009] veth0_vlan: entered promiscuous mode [ 681.179562][T27009] veth1_vlan: entered promiscuous mode [ 681.205233][T27009] veth0_macvtap: left promiscuous mode [ 681.211117][T27009] veth0_macvtap: left allmulticast mode [ 681.218506][T27009] veth0_macvtap: entered promiscuous mode [ 681.224911][T27009] macvtap0: left promiscuous mode [ 681.246295][T27009] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 681.261791][T27009] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 681.275049][T27009] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 681.288261][T27009] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 681.312566][T27009] 8021q: adding VLAN 0 to HW filter on device bond1 [ 681.320932][T27009] vlan2: left allmulticast mode [ 681.325826][T27009] bond1: left allmulticast mode [ 681.357469][T27009] ipip0: left promiscuous mode [ 681.362979][T27009] ipip0: left allmulticast mode [ 681.373947][T27009] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 681.382124][T27009] team1: left promiscuous mode [ 681.386914][T27009] team1: left allmulticast mode [ 681.392286][T27009] 8021q: adding VLAN 0 to HW filter on device team1 [ 681.400256][T27009] team2: left promiscuous mode [ 681.405054][T27009] team2: left allmulticast mode [ 681.422272][T27009] 8021q: adding VLAN 0 to HW filter on device team2 [ 681.477625][T27009] vlan3: left promiscuous mode [ 681.484886][T27009] geneve2: left promiscuous mode [ 681.489897][T27009] geneve2: left allmulticast mode [ 681.501501][T27013] netlink: 'syz.0.5646': attribute type 1 has an invalid length. [ 681.573932][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 681.581251][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 682.147653][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 682.175778][T27067] __nla_validate_parse: 1 callbacks suppressed [ 682.175800][T27067] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5656'. [ 682.445344][T27081] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.5661'. [ 683.169191][T27105] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5668'. [ 683.187753][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 683.326820][T27113] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 683.335368][T27113] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 683.569213][T27120] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5672'. [ 683.598491][T27123] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5672'. [ 684.027349][ T449] block nbd1: Possible stuck request ffff888027b77000: control (read@0,1024B). Runtime 420 seconds [ 684.038231][ T449] block nbd1: Possible stuck request ffff888027b771c0: control (read@1024,1024B). Runtime 420 seconds [ 684.049231][ T449] block nbd1: Possible stuck request ffff888027b77380: control (read@2048,1024B). Runtime 420 seconds [ 684.060231][ T449] block nbd1: Possible stuck request ffff888027b77540: control (read@3072,1024B). Runtime 420 seconds [ 684.082156][T27132] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5675'. [ 684.107861][T27132] netlink: 15 bytes leftover after parsing attributes in process `syz.3.5675'. [ 684.227801][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 684.492842][T27145] netlink: 'syz.2.5676': attribute type 1 has an invalid length. [ 684.514512][T27153] netlink: 76 bytes leftover after parsing attributes in process `syz.1.5678'. [ 684.701482][T27145] bond2: entered promiscuous mode [ 684.707056][T27145] 8021q: adding VLAN 0 to HW filter on device bond2 [ 684.779006][T27157] 8021q: adding VLAN 0 to HW filter on device bond2 [ 684.803367][T27157] bond2: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 684.817944][T27157] bond2: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 684.845548][T27157] bond2: (slave ip6gre1): making interface the new active one [ 684.853092][T27157] ip6gre1: entered promiscuous mode [ 684.860563][T27157] bond2: (slave ip6gre1): Enslaving as an active interface with an up link [ 684.869375][T27161] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5681'. [ 685.267762][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 685.458304][T27186] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 685.470604][T27186] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 685.832721][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.071788][T27210] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 686.092319][T27210] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 686.302051][T27222] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5695'. [ 687.190140][T27266] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5709'. [ 687.337206][T27266] netlink: 96 bytes leftover after parsing attributes in process `syz.1.5709'. [ 687.348116][ C0] net_ratelimit: 1 callbacks suppressed [ 687.348140][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 687.388782][T27258] netlink: 80 bytes leftover after parsing attributes in process `syz.0.5706'. [ 687.398894][T27266] tunl0: Caught tx_queue_len zero misconfig [ 687.494747][T27276] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5714'. [ 687.505144][T27278] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5713'. [ 687.601902][T27285] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5716'. [ 687.713963][T27284] netlink: 'syz.4.5714': attribute type 1 has an invalid length. [ 687.722400][T27284] netlink: 84 bytes leftover after parsing attributes in process `syz.4.5714'. [ 687.732679][T27284] netlink: 1 bytes leftover after parsing attributes in process `syz.4.5714'. [ 687.741821][T27284] netlink: 'syz.4.5714': attribute type 1 has an invalid length. [ 687.749679][T27284] netlink: 'syz.4.5714': attribute type 8 has an invalid length. [ 687.757761][T27284] netlink: 606 bytes leftover after parsing attributes in process `syz.4.5714'. [ 687.773127][T27293] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5718'. [ 687.812546][T27296] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 687.830136][T27296] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 687.973662][T27302] netlink: 'syz.0.5722': attribute type 1 has an invalid length. [ 688.049319][T27302] 8021q: adding VLAN 0 to HW filter on device bond4 [ 688.074452][T27302] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 688.091260][T27302] bond4: (slave batadv1): making interface the new active one [ 688.101660][T27302] bond4: (slave batadv1): Enslaving as an active interface with an up link [ 688.205813][T27302] bond4 (unregistering): (slave batadv1): Releasing active interface [ 688.224445][T27302] bond4 (unregistering): Released all slaves [ 688.388129][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 689.130996][ T5652] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 689.162176][ T5652] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 689.170686][ T5652] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 689.178971][ T5652] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 689.186795][ T5652] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 689.415320][T27354] netlink: 'syz.1.5738': attribute type 1 has an invalid length. [ 689.427735][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 689.439978][T27354] netlink: 'syz.1.5738': attribute type 1 has an invalid length. [ 689.447835][T27354] netlink: 'syz.1.5738': attribute type 8 has an invalid length. [ 689.688853][T27363] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input16 [ 689.756266][T27367] netlink: zone id is out of range [ 689.831571][T27372] netlink: 'syz.2.5741': attribute type 12 has an invalid length. [ 690.418956][T27385] netlink: 'syz.4.5745': attribute type 1 has an invalid length. [ 690.448481][T27385] netlink: 'syz.4.5745': attribute type 1 has an invalid length. [ 690.456288][T27385] netlink: 'syz.4.5745': attribute type 8 has an invalid length. [ 690.467646][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 690.476761][T27365] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 690.789077][T27399] syzkaller0: entered promiscuous mode [ 690.804368][T27399] syzkaller0: entered allmulticast mode [ 691.026705][T27345] bridge0: port 1(bridge_slave_0) entered blocking state [ 691.040374][T27345] bridge0: port 1(bridge_slave_0) entered disabled state [ 691.051404][T27345] bridge_slave_0: entered allmulticast mode [ 691.059974][T27345] bridge_slave_0: entered promiscuous mode [ 691.082898][T27345] bridge0: port 2(bridge_slave_1) entered blocking state [ 691.090332][T27345] bridge0: port 2(bridge_slave_1) entered disabled state [ 691.097650][T27345] bridge_slave_1: entered allmulticast mode [ 691.105651][T27345] bridge_slave_1: entered promiscuous mode [ 691.143970][T27345] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 691.156888][T27345] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 691.184564][T27420] netlink: 'syz.0.5755': attribute type 1 has an invalid length. [ 691.196440][T27420] netlink: 'syz.0.5755': attribute type 1 has an invalid length. [ 691.204519][T27420] netlink: 'syz.0.5755': attribute type 8 has an invalid length. [ 691.240759][T27345] team0: Port device team_slave_0 added [ 691.249473][T27345] team0: Port device team_slave_1 added [ 691.267660][ T50] Bluetooth: hci0: command tx timeout [ 691.308723][T27345] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 691.315739][T27345] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 691.342272][T27345] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 691.356445][T27345] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 691.363456][T27345] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 691.389383][T27345] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 691.507642][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 691.754383][T27435] netlink: 'syz.0.5764': attribute type 10 has an invalid length. [ 691.869339][T27439] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 691.916129][T27425] bridge0: port 1(team0) entered disabled state [ 691.922744][T27425] bridge0: port 2(bridge_slave_1) entered disabled state [ 692.443890][T27425] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 692.502172][T27425] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 692.547648][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 693.418722][ T50] Bluetooth: hci0: command 0x041b tx timeout [ 693.587657][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 693.611219][T27425] bond2: left promiscuous mode [ 693.616162][T27425] ip6gre1: left promiscuous mode [ 693.691253][T27034] syz1: Port: 1 Link DOWN [ 693.696577][ T3280] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 693.705728][ T3280] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 693.714757][ T3280] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 693.723691][ T3280] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 693.790839][T27345] hsr_slave_0: entered promiscuous mode [ 693.803707][T27345] hsr_slave_1: entered promiscuous mode [ 694.057432][T27464] __nla_validate_parse: 38 callbacks suppressed [ 694.057456][T27464] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5772'. [ 694.085923][T27464] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 694.110304][T27464] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 694.627765][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 694.730544][T27345] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 695.128895][T27345] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 695.157847][T27486] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5771'. [ 695.484545][T27497] openvswitch: netlink: Missing valid actions attribute. [ 695.495872][T27497] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 695.508091][T27497] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5778'. [ 695.508593][ T50] Bluetooth: hci0: command 0x041b tx timeout [ 695.667812][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 695.760888][T27507] netlink: 'syz.1.5778': attribute type 1 has an invalid length. [ 695.769223][T27507] netlink: 84 bytes leftover after parsing attributes in process `syz.1.5778'. [ 695.778437][T27507] netlink: 1 bytes leftover after parsing attributes in process `syz.1.5778'. [ 695.849343][T27507] netlink: 'syz.1.5778': attribute type 1 has an invalid length. [ 695.875425][T27507] netlink: 'syz.1.5778': attribute type 8 has an invalid length. [ 695.919369][T27507] netlink: 606 bytes leftover after parsing attributes in process `syz.1.5778'. [ 695.932606][T27345] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 696.148128][T27345] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 696.249993][T27519] vlan4: entered promiscuous mode [ 696.343260][T27527] netlink: 'syz.4.5784': attribute type 14 has an invalid length. [ 696.454189][T27528] €Â: renamed from bond_slave_0 [ 696.615439][T27536] netlink: 248 bytes leftover after parsing attributes in process `syz.1.5785'. [ 696.643535][T27535] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 696.668786][T27537] netlink: 248 bytes leftover after parsing attributes in process `syz.1.5785'. [ 696.707883][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 696.718976][T27536] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5785'. [ 696.756822][T27547] netlink: 'syz.4.5787': attribute type 11 has an invalid length. [ 696.816289][T27345] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 696.839304][T27345] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 696.920070][T27547] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 696.935894][T27345] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 696.950552][T27345] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 697.048868][T27550] mac80211_hwsim hwsim52 wlan0: entered allmulticast mode [ 697.069824][T27345] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 697.080506][T27345] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 697.174006][T27345] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 697.195549][T27345] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 697.458072][T27345] 8021q: adding VLAN 0 to HW filter on device bond0 [ 697.508829][T27345] 8021q: adding VLAN 0 to HW filter on device team0 [ 697.570019][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 697.577303][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 697.589510][ T50] Bluetooth: hci0: command 0x041b tx timeout [ 697.635567][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 697.642889][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 697.744560][T27579] xt_hashlimit: size too large, truncated to 1048576 [ 697.747995][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 697.836546][T27585] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 698.178447][T27602] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 698.186578][T27602] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 698.491478][T27345] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 698.531704][T27611] tipc: Enabled bearer , priority 0 [ 698.573261][T27611] syzkaller0: entered promiscuous mode [ 698.581701][T27611] syzkaller0: entered allmulticast mode [ 698.645978][T27345] veth0_vlan: entered promiscuous mode [ 698.683629][T27610] tipc: Resetting bearer [ 698.785484][T27610] tipc: Disabling bearer [ 698.791419][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 698.809196][T27615] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5802'. [ 698.827100][T27345] veth1_vlan: entered promiscuous mode [ 698.893104][T27345] veth0_macvtap: entered promiscuous mode [ 698.921784][T27345] veth1_macvtap: entered promiscuous mode [ 698.970837][T27345] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 699.002993][T27345] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 699.026027][ T57] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 699.049068][ T57] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 699.073110][ T57] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 699.091952][ T57] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 699.308653][T13790] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 699.316585][T13790] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 699.467204][T13790] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 699.475754][T13790] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 699.668076][ T50] Bluetooth: hci0: command 0x041b tx timeout [ 699.709942][T27650] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5815'. [ 699.723765][ T29] audit: type=1800 audit(1781642613.795:14): pid=27652 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.5816" name="memory.events" dev="tmpfs" ino=2567 res=0 errno=0 [ 699.764177][ T29] audit: type=1800 audit(1781642613.805:15): pid=27653 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.5816" name="memory.events" dev="tmpfs" ino=2567 res=0 errno=0 [ 699.827806][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 700.293080][T27680] netlink: 9 bytes leftover after parsing attributes in process `syz.1.5825'. [ 700.642638][T27700] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 700.666055][T27700] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5827'. [ 700.867711][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 700.969336][T27708] netlink: 6040 bytes leftover after parsing attributes in process `syz.3.5833'. [ 701.221567][ T29] audit: type=1804 audit(1781642615.295:16): pid=27720 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.5837" name="/newroot/504/cgroup.controllers" dev="tmpfs" ino=2600 res=1 errno=0 [ 701.305368][ T29] audit: type=1800 audit(1781642615.295:17): pid=27720 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.5837" name="cgroup.controllers" dev="tmpfs" ino=2600 res=0 errno=0 [ 701.640965][T27739] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5839'. [ 701.907727][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 702.372433][T27769] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5848'. [ 702.882747][T27794] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5854'. [ 702.947741][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 703.500068][T27818] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5859'. [ 703.503505][T27819] netlink: 76 bytes leftover after parsing attributes in process `syz.0.5861'. [ 703.937477][T27838] IPVS: Unknown mcast interface: pim6reg1 [ 703.987752][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 704.339767][T27858] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5875'. [ 704.354385][T27862] netlink: 'syz.0.5877': attribute type 2 has an invalid length. [ 704.362186][T27862] netlink: 'syz.0.5877': attribute type 1 has an invalid length. [ 704.406841][T27858] vlan2: entered promiscuous mode [ 704.412415][T27858] geneve1: entered promiscuous mode [ 704.418628][T27858] vlan2: entered allmulticast mode [ 704.423932][T27858] geneve1: entered allmulticast mode [ 704.453784][T27864] netlink: 'syz.1.5878': attribute type 1 has an invalid length. [ 704.461639][T27864] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 704.725257][T27880] netlink: 'syz.1.5881': attribute type 4 has an invalid length. [ 704.816482][T27876] __nla_validate_parse: 1 callbacks suppressed [ 704.816502][T27876] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5882'. [ 704.850654][T27873] netlink: 'syz.1.5881': attribute type 4 has an invalid length. [ 704.852856][T27876] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5882'. [ 704.882222][T27876] netlink: 'syz.4.5882': attribute type 18 has an invalid length. [ 705.027838][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 705.087180][T27887] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 705.118659][T27887] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 705.134627][T27894] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5887'. [ 705.172615][T27895] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5887'. [ 705.192033][T27901] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5885'. [ 705.814195][T27926] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5897'. [ 705.982827][T27929] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5899'. [ 706.068098][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 706.152273][T27938] netlink: 'syz.3.5900': attribute type 12 has an invalid length. [ 706.205932][T27937] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input17 [ 706.292505][T27945] netlink: zone id is out of range [ 706.319057][T27942] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5903'. [ 706.473060][T27947] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5906'. [ 706.537427][T27951] openvswitch: netlink: nsh attr 16383 is out of range max 3 [ 706.604652][T27957] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 706.860114][T27966] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5910'. [ 706.873561][T27934] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 706.989590][T27971] tipc: Enabled bearer , priority 0 [ 706.997073][T27971] syzkaller0: entered promiscuous mode [ 707.002839][T27971] syzkaller0: entered allmulticast mode [ 707.013000][T27971] tipc: Resetting bearer [ 707.022593][T27970] tipc: Resetting bearer [ 707.042152][T27970] tipc: Disabling bearer [ 707.107819][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 707.170223][T27973] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 707.343886][T27979] netlink: 'syz.1.5915': attribute type 22 has an invalid length. [ 707.359372][T27979] veth0_virt_wifi: Caught tx_queue_len zero misconfig [ 708.115989][T28009] xt_hashlimit: size too large, truncated to 1048576 [ 708.148826][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 708.156178][ T50] Bluetooth: hci0: command 0x041b tx timeout [ 708.236563][T28014] openvswitch: netlink: Missing valid actions attribute. [ 708.255838][T28014] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 708.445921][T28018] nbd: nbd0 already in use [ 708.476358][T28018] block nbd0: NBD_DISCONNECT [ 708.518353][T28018] block nbd0: Send disconnect failed -107 [ 708.574558][T28018] block nbd0: shutting down sockets [ 708.746712][T28023] netlink: 'syz.4.5925': attribute type 1 has an invalid length. [ 708.757187][T28023] netlink: 'syz.4.5925': attribute type 1 has an invalid length. [ 709.187707][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 709.304990][T28029] hsr0: left promiscuous mode [ 709.441061][T28029] mac80211_hwsim hwsim55 wlan0: entered promiscuous mode [ 709.475750][ T5652] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 709.475779][T28029] vti0: left promiscuous mode [ 709.490676][ T5652] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 709.494908][T28029] ipip1: left promiscuous mode [ 709.507436][ T5652] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 709.526733][ T5652] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 709.547153][ T5652] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 709.570315][T28029] 8021q: adding VLAN 0 to HW filter on device bond2 [ 709.661617][T28029] bridge5: left promiscuous mode [ 709.683855][T28029] bond3: left promiscuous mode [ 709.696379][T28029] 8021q: adding VLAN 0 to HW filter on device bond3 [ 709.706592][T28029] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 709.731390][ T57] bridge_slave_1: left allmulticast mode [ 709.779592][ T57] bridge_slave_1: left promiscuous mode [ 709.785624][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 709.799741][ T57] bridge_slave_0: left allmulticast mode [ 709.805651][ T57] bridge_slave_0: left promiscuous mode [ 709.812027][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 709.835452][T28050] ieee802154 phy0 wpan0: encryption failed: -22 [ 710.023363][T28060] __nla_validate_parse: 7 callbacks suppressed [ 710.023383][T28060] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5936'. [ 710.117591][T28061] netlink: 3 bytes leftover after parsing attributes in process `syz.3.5936'. [ 710.179067][T28064] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5936'. [ 710.227731][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 710.364034][ T57] bond4 (unregistering): (slave geneve3): Releasing backup interface [ 710.373316][ T57] geneve3 (unregistering): left allmulticast mode [ 710.407843][ T57] bond2 (unregistering): (slave bridge1): Releasing backup interface [ 710.430773][ T57] bridge1 (unregistering): left promiscuous mode [ 710.460817][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 710.474362][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 710.484924][ T57] bond0 (unregistering): Released all slaves [ 710.496203][ T57] bond1 (unregistering): Released all slaves [ 710.519668][ T57] bond2 (unregistering): Released all slaves [ 710.539834][ T57] bond3 (unregistering): Released all slaves [ 710.564667][ T57] bond4 (unregistering): Released all slaves [ 710.650630][T28061] 0ªX¹¦À: renamed from batadv0 (while UP) [ 710.738797][T28061] 0ªX¹¦À: entered allmulticast mode [ 710.775339][T28061] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 710.794720][T28062] syzkaller0: entered promiscuous mode [ 710.800351][T28062] syzkaller0: entered allmulticast mode [ 711.061809][T28083] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5939'. [ 711.112658][T28083] validate_nla: 1 callbacks suppressed [ 711.112678][T28083] netlink: 'syz.0.5939': attribute type 2 has an invalid length. [ 711.125959][T28083] netlink: 'syz.0.5939': attribute type 1 has an invalid length. [ 711.175158][ T57] tipc: Left network mode [ 711.194610][T28083] netlink: 'syz.0.5939': attribute type 1 has an invalid length. [ 711.267738][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 711.480547][T28103] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 711.488701][T28103] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 711.588692][ T5652] Bluetooth: hci5: command tx timeout [ 712.307721][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 712.319144][T28136] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5951'. [ 712.363726][T28138] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5952'. [ 712.540488][ T57] hsr_slave_0: left promiscuous mode [ 712.568836][ T57] hsr_slave_1: left promiscuous mode [ 712.601926][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 712.629302][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 712.652975][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 712.669590][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 712.721620][ T57] veth1_vlan: left promiscuous mode [ 712.731252][ T57] veth0_vlan: left promiscuous mode [ 712.808162][T28164] netlink: 8752 bytes leftover after parsing attributes in process `syz.3.5955'. [ 713.157983][ T57] team0 (unregistering): Port device team_slave_1 removed [ 713.348609][ C0] net_ratelimit: 1 callbacks suppressed [ 713.348633][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 713.585103][T28175] syzkaller0: entered promiscuous mode [ 713.592716][T28175] syzkaller0: entered allmulticast mode [ 713.662987][T28177] syzkaller1: entered promiscuous mode [ 713.668648][ T5652] Bluetooth: hci5: command tx timeout [ 713.670072][T28177] syzkaller1: entered allmulticast mode [ 713.726074][T28038] bridge0: port 1(bridge_slave_0) entered blocking state [ 713.733695][T28038] bridge0: port 1(bridge_slave_0) entered disabled state [ 713.749056][T28038] bridge_slave_0: entered allmulticast mode [ 713.754878][T28177] netlink: 136 bytes leftover after parsing attributes in process `syz.3.5957'. [ 713.762873][T28038] bridge_slave_0: entered promiscuous mode [ 713.764121][T28177] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5957'. [ 713.784104][T28177] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5957'. [ 713.839933][T28038] bridge0: port 2(bridge_slave_1) entered blocking state [ 713.857433][T28038] bridge0: port 2(bridge_slave_1) entered disabled state [ 713.872568][T28038] bridge_slave_1: entered allmulticast mode [ 713.882445][T28177] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 713.892336][T28038] bridge_slave_1: entered promiscuous mode [ 714.099231][T28038] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 714.140993][T28038] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 714.180018][T28191] block nbd0: not configured, cannot reconfigure [ 714.200826][T28191] geneve0: entered promiscuous mode [ 714.216549][T28191] geneve0: left promiscuous mode [ 714.263795][T28038] team0: Port device team_slave_0 added [ 714.291573][T28038] team0: Port device team_slave_1 added [ 714.331725][T28038] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 714.338800][T28038] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 714.364784][T28038] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 714.387657][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 714.401838][T28038] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 714.408860][T28038] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 714.434844][T28038] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 714.507186][T28038] hsr_slave_0: entered promiscuous mode [ 714.527574][T28038] hsr_slave_1: entered promiscuous mode [ 714.534112][T28038] debugfs: 'hsr0' already exists in 'hsr' [ 714.539883][T28038] Cannot create hsr debugfs directory [ 714.725957][ T449] block nbd1: Possible stuck request ffff888027b77000: control (read@0,1024B). Runtime 450 seconds [ 714.736746][ T449] block nbd1: Possible stuck request ffff888027b771c0: control (read@1024,1024B). Runtime 450 seconds [ 714.748665][ T449] block nbd1: Possible stuck request ffff888027b77380: control (read@2048,1024B). Runtime 450 seconds [ 714.759698][ T449] block nbd1: Possible stuck request ffff888027b77540: control (read@3072,1024B). Runtime 450 seconds [ 714.969671][T28038] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 714.987349][T28038] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 714.995599][T28038] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 715.005626][T28038] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 715.013722][T28038] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 715.024556][T28038] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 715.032632][T28038] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 715.060266][T28038] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 715.129591][T28038] 8021q: adding VLAN 0 to HW filter on device bond0 [ 715.153709][T28038] 8021q: adding VLAN 0 to HW filter on device team0 [ 715.190056][T13795] bridge0: port 1(bridge_slave_0) entered blocking state [ 715.197282][T13795] bridge0: port 1(bridge_slave_0) entered forwarding state [ 715.220328][T13795] bridge0: port 2(bridge_slave_1) entered blocking state [ 715.227562][T13795] bridge0: port 2(bridge_slave_1) entered forwarding state [ 715.238277][ T57] IPVS: stop unused estimator thread 0... [ 715.405255][T28212] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 715.424331][T28212] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 715.433195][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 715.489727][T28215] netlink: 160 bytes leftover after parsing attributes in process `syz.4.5967'. [ 715.505750][T28215] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5967'. [ 715.671446][T28221] netlink: 76 bytes leftover after parsing attributes in process `syz.1.5968'. [ 715.749336][ T5652] Bluetooth: hci5: command tx timeout [ 716.202085][T28237] netlink: 'syz.1.5973': attribute type 1 has an invalid length. [ 716.219795][T28237] netlink: 96 bytes leftover after parsing attributes in process `syz.1.5973'. [ 716.235836][T28237] netlink: 1 bytes leftover after parsing attributes in process `syz.1.5973'. [ 716.252712][T28237] netlink: 'syz.1.5973': attribute type 1 has an invalid length. [ 716.260522][T28237] netlink: 'syz.1.5973': attribute type 8 has an invalid length. [ 716.268285][T28237] netlink: 606 bytes leftover after parsing attributes in process `syz.1.5973'. [ 716.292612][T28038] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 716.467704][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 716.892729][T28260] xt_CT: No such helper "netbios-ns" [ 716.910994][T28038] veth0_vlan: entered promiscuous mode [ 716.943741][T28268] tipc: Enabled bearer , priority 0 [ 716.965437][T28268] vxcan1: mtu less than device minimum [ 716.994425][T28038] veth1_vlan: entered promiscuous mode [ 717.098990][T28038] veth0_macvtap: entered promiscuous mode [ 717.112961][T28038] veth1_macvtap: entered promiscuous mode [ 717.212947][T28038] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 717.318362][T28038] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 717.349791][ T57] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 717.372717][ T57] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 717.381488][ T57] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 717.390276][ T57] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 717.510648][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 717.763282][T28268] tipc: Disabling bearer [ 717.828922][ T5652] Bluetooth: hci5: command tx timeout [ 717.913501][T13795] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 717.921398][T13795] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 717.987382][T13794] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 717.995280][T13794] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 718.178919][T28306] : renamed from veth0_to_bond (while UP) [ 718.209299][T28308] netlink: 'syz.5.5929': attribute type 2 has an invalid length. [ 718.217238][T28308] netlink: 'syz.5.5929': attribute type 1 has an invalid length. [ 718.243464][T28306] netlink: 192 bytes leftover after parsing attributes in process `syz.0.5989'. [ 718.511164][T28321] rdma_op ffff88806d63c9f0 conn xmit_rdma 0000000000000000 [ 718.547732][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 719.162187][T28346] netlink: 1100 bytes leftover after parsing attributes in process `syz.0.6001'. [ 719.172956][T28346] netlink: 92 bytes leftover after parsing attributes in process `syz.0.6001'. [ 719.319986][T28346] bridge0: port 1(veth0_virt_wifi) entered disabled state [ 719.403734][T28352] netlink: 'syz.3.6003': attribute type 2 has an invalid length. [ 719.413957][T28352] netlink: 'syz.3.6003': attribute type 1 has an invalid length. [ 719.450734][T28355] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6004'. [ 719.571159][T28360] Bluetooth: MGMT ver 1.23 [ 719.587657][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 719.655483][T28363] Cannot find add_set index 0 as target [ 719.890641][ T559] netdevsim netdevsim0 €Â: unset [0, 0] type 1 family 0 port 8472 - 0 [ 719.908351][ T559] netdevsim netdevsim0 €Â: unset [1, 0] type 2 family 0 port 6081 - 0 [ 719.966559][ T559] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 720.043377][ T559] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 720.052397][ T559] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 720.061305][ T559] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 720.136976][ T559] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 720.146053][ T559] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 720.326773][T28387] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 720.350207][T28387] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 720.573647][T28399] syzkaller0: entered promiscuous mode [ 720.579199][T28399] syzkaller0: entered allmulticast mode [ 720.627969][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 720.822263][T28405] FAULT_INJECTION: forcing a failure. [ 720.822263][T28405] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 720.865272][T28405] CPU: 0 UID: 0 PID: 28405 Comm: syz.5.6020 Not tainted syzkaller #0 PREEMPT(full) [ 720.865303][T28405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 720.865318][T28405] Call Trace: [ 720.865327][T28405] [ 720.865337][T28405] dump_stack_lvl+0xe8/0x150 [ 720.865369][T28405] should_fail_ex+0x40c/0x560 [ 720.865412][T28405] _copy_from_user+0x2d/0xb0 [ 720.865440][T28405] ___sys_sendmsg+0x1c6/0x360 [ 720.865473][T28405] ? __lock_acquire+0x683/0x2cd0 [ 720.865503][T28405] ? __pfx____sys_sendmsg+0x10/0x10 [ 720.865568][T28405] ? __fget_files+0x2a/0x420 [ 720.865596][T28405] ? __fget_files+0x3a2/0x420 [ 720.865636][T28405] __x64_sys_sendmsg+0x1bd/0x2a0 [ 720.865664][T28405] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 720.865700][T28405] ? __pfx_ksys_write+0x10/0x10 [ 720.865743][T28405] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 720.865768][T28405] do_syscall_64+0x174/0x580 [ 720.865795][T28405] ? trace_irq_disable+0x3b/0x140 [ 720.865829][T28405] ? clear_bhb_loop+0x40/0x90 [ 720.865857][T28405] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 720.865879][T28405] RIP: 0033:0x7f40c919ce59 [ 720.865901][T28405] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 720.865920][T28405] RSP: 002b:00007f40c9fcc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 720.865944][T28405] RAX: ffffffffffffffda RBX: 00007f40c9415fa0 RCX: 00007f40c919ce59 [ 720.865961][T28405] RDX: 0000000020000050 RSI: 00002000000002c0 RDI: 0000000000000004 [ 720.865976][T28405] RBP: 00007f40c9fcc090 R08: 0000000000000000 R09: 0000000000000000 [ 720.865990][T28405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 720.866004][T28405] R13: 00007f40c9416038 R14: 00007f40c9415fa0 R15: 00007fff879ce9f8 [ 720.866041][T28405] [ 721.069072][ C0] vcan0: j1939_tp_rxtimer: 0xffff888066bfb000: rx timeout, send abort [ 721.158409][T28407] __nla_validate_parse: 2 callbacks suppressed [ 721.158429][T28407] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6021'. [ 721.447078][T28422] netlink: 'syz.3.6026': attribute type 1 has an invalid length. [ 721.569210][ C0] vcan0: j1939_tp_rxtimer: 0xffff888066bfac00: rx timeout, send abort [ 721.577781][ C0] vcan0: j1939_tp_rxtimer: 0xffff888066bfb000: abort rx timeout. Force session deactivation [ 721.669688][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 721.720617][T28432] FAULT_INJECTION: forcing a failure. [ 721.720617][T28432] name failslab, interval 1, probability 0, space 0, times 0 [ 721.735958][T28432] CPU: 1 UID: 0 PID: 28432 Comm: syz.4.6030 Not tainted syzkaller #0 PREEMPT(full) [ 721.735988][T28432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 721.736002][T28432] Call Trace: [ 721.736010][T28432] [ 721.736020][T28432] dump_stack_lvl+0xe8/0x150 [ 721.736052][T28432] should_fail_ex+0x40c/0x560 [ 721.736093][T28432] should_failslab+0xa8/0x100 [ 721.736118][T28432] kmem_cache_alloc_node_noprof+0x8f/0x680 [ 721.736151][T28432] ? __alloc_skb+0x189/0x7a0 [ 721.736183][T28432] ? __alloc_skb+0x1d7/0x7a0 [ 721.736215][T28432] ? __local_bh_enable_ip+0xd0/0x130 [ 721.736243][T28432] __alloc_skb+0x1d7/0x7a0 [ 721.736281][T28432] netlink_sendmsg+0x5d4/0xb40 [ 721.736318][T28432] ? __pfx_netlink_sendmsg+0x10/0x10 [ 721.736348][T28432] ? aa_sock_msg_perm+0xf1/0x1b0 [ 721.736383][T28432] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 721.736412][T28432] ? __pfx_netlink_sendmsg+0x10/0x10 [ 721.736439][T28432] ____sys_sendmsg+0x9b9/0xa20 [ 721.736462][T28432] ? __might_fault+0xaf/0x130 [ 721.736497][T28432] ? __pfx_____sys_sendmsg+0x10/0x10 [ 721.736531][T28432] ? import_iovec+0x73/0xa0 [ 721.736563][T28432] ___sys_sendmsg+0x2a5/0x360 [ 721.736584][T28432] ? __lock_acquire+0x683/0x2cd0 [ 721.736612][T28432] ? __pfx____sys_sendmsg+0x10/0x10 [ 721.736674][T28432] ? __fget_files+0x2a/0x420 [ 721.736701][T28432] ? __fget_files+0x3a2/0x420 [ 721.736738][T28432] __x64_sys_sendmsg+0x1bd/0x2a0 [ 721.736766][T28432] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 721.736828][T28432] ? __pfx_ksys_write+0x10/0x10 [ 721.736870][T28432] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 721.736895][T28432] do_syscall_64+0x174/0x580 [ 721.736922][T28432] ? trace_irq_disable+0x3b/0x140 [ 721.736956][T28432] ? clear_bhb_loop+0x40/0x90 [ 721.736985][T28432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 721.737008][T28432] RIP: 0033:0x7f025c59ce59 [ 721.737030][T28432] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 721.737051][T28432] RSP: 002b:00007f025d3f7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 721.737075][T28432] RAX: ffffffffffffffda RBX: 00007f025c816090 RCX: 00007f025c59ce59 [ 721.737092][T28432] RDX: 0000000000000040 RSI: 0000200000001e00 RDI: 0000000000000008 [ 721.737107][T28432] RBP: 00007f025d3f7090 R08: 0000000000000000 R09: 0000000000000000 [ 721.737121][T28432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 721.737135][T28432] R13: 00007f025c816128 R14: 00007f025c816090 R15: 00007ffd3a941eb8 [ 721.737169][T28432] [ 722.077676][ C0] vcan0: j1939_tp_rxtimer: 0xffff888066bfac00: abort rx timeout. Force session deactivation [ 722.260845][T28442] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 722.277992][T28442] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 722.317512][T28445] netlink: 'syz.3.6033': attribute type 12 has an invalid length. [ 722.708195][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 722.782758][T28452] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6038'. [ 722.858177][T28454] netlink: 'syz.4.6039': attribute type 1 has an invalid length. [ 722.979854][T28440] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 723.128497][T28458] netlink: 'syz.4.6040': attribute type 12 has an invalid length. [ 723.161426][T28460] FAULT_INJECTION: forcing a failure. [ 723.161426][T28460] name failslab, interval 1, probability 0, space 0, times 0 [ 723.192133][T28460] CPU: 0 UID: 0 PID: 28460 Comm: syz.3.6041 Not tainted syzkaller #0 PREEMPT(full) [ 723.192165][T28460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 723.192180][T28460] Call Trace: [ 723.192189][T28460] [ 723.192199][T28460] dump_stack_lvl+0xe8/0x150 [ 723.192232][T28460] should_fail_ex+0x40c/0x560 [ 723.192275][T28460] should_failslab+0xa8/0x100 [ 723.192300][T28460] kmem_cache_alloc_node_noprof+0x8f/0x680 [ 723.192332][T28460] ? __alloc_skb+0x189/0x7a0 [ 723.192365][T28460] ? __alloc_skb+0x1d7/0x7a0 [ 723.192396][T28460] ? __local_bh_enable_ip+0xd0/0x130 [ 723.192425][T28460] __alloc_skb+0x1d7/0x7a0 [ 723.192463][T28460] netlink_sendmsg+0x5d4/0xb40 [ 723.192500][T28460] ? __pfx_netlink_sendmsg+0x10/0x10 [ 723.192529][T28460] ? aa_sock_msg_perm+0xf1/0x1b0 [ 723.192563][T28460] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 723.192598][T28460] ? __pfx_netlink_sendmsg+0x10/0x10 [ 723.192626][T28460] ____sys_sendmsg+0x9b9/0xa20 [ 723.192649][T28460] ? __might_fault+0xaf/0x130 [ 723.192685][T28460] ? __pfx_____sys_sendmsg+0x10/0x10 [ 723.192720][T28460] ? import_iovec+0x73/0xa0 [ 723.192750][T28460] ___sys_sendmsg+0x2a5/0x360 [ 723.192773][T28460] ? __lock_acquire+0x683/0x2cd0 [ 723.192802][T28460] ? __pfx____sys_sendmsg+0x10/0x10 [ 723.192866][T28460] ? __fget_files+0x2a/0x420 [ 723.192893][T28460] ? __fget_files+0x3a2/0x420 [ 723.192932][T28460] __x64_sys_sendmsg+0x1bd/0x2a0 [ 723.192960][T28460] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 723.192996][T28460] ? __pfx_ksys_write+0x10/0x10 [ 723.193039][T28460] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 723.193063][T28460] do_syscall_64+0x174/0x580 [ 723.193090][T28460] ? trace_irq_disable+0x3b/0x140 [ 723.193122][T28460] ? clear_bhb_loop+0x40/0x90 [ 723.193151][T28460] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 723.193173][T28460] RIP: 0033:0x7f6db719ce59 [ 723.193194][T28460] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 723.193213][T28460] RSP: 002b:00007f6db8116028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 723.193237][T28460] RAX: ffffffffffffffda RBX: 00007f6db7415fa0 RCX: 00007f6db719ce59 [ 723.193253][T28460] RDX: 0000000020000050 RSI: 00002000000002c0 RDI: 0000000000000004 [ 723.193268][T28460] RBP: 00007f6db8116090 R08: 0000000000000000 R09: 0000000000000000 [ 723.193282][T28460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 723.193296][T28460] R13: 00007f6db7416038 R14: 00007f6db7415fa0 R15: 00007fff8bacd6d8 [ 723.193332][T28460] [ 723.450452][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806d7ee000: rx timeout, send abort [ 723.747789][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 723.847419][T28457] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 723.866076][T28466] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6044'. [ 723.896418][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806d7ef800: rx timeout, send abort [ 723.960048][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806d7ee000: abort rx timeout. Force session deactivation [ 723.984258][ T50] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 724.013249][ T50] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 724.025943][ T50] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 724.038640][ T50] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 724.048165][ T50] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 724.307799][ T50] Bluetooth: hci0: command 0x041b tx timeout [ 724.404800][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806d7ef800: abort rx timeout. Force session deactivation [ 724.789010][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 725.028222][T28515] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 725.043580][T28515] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 725.382818][T28525] netlink: 'syz.4.6057': attribute type 1 has an invalid length. [ 725.390642][T28525] netlink: 96 bytes leftover after parsing attributes in process `syz.4.6057'. [ 725.425938][T28525] netlink: 1 bytes leftover after parsing attributes in process `syz.4.6057'. [ 725.434872][T28525] netlink: 'syz.4.6057': attribute type 1 has an invalid length. [ 725.442715][T28525] netlink: 'syz.4.6057': attribute type 8 has an invalid length. [ 725.450486][T28525] netlink: 606 bytes leftover after parsing attributes in process `syz.4.6057'. [ 725.535308][T28532] netlink: 'syz.4.6058': attribute type 1 has an invalid length. [ 725.586851][T28467] bridge0: port 1(bridge_slave_0) entered blocking state [ 725.602614][T28467] bridge0: port 1(bridge_slave_0) entered disabled state [ 725.610270][T28467] bridge_slave_0: entered allmulticast mode [ 725.620924][T28467] bridge_slave_0: entered promiscuous mode [ 725.652888][T28467] bridge0: port 2(bridge_slave_1) entered blocking state [ 725.660534][T28467] bridge0: port 2(bridge_slave_1) entered disabled state [ 725.668921][T28467] bridge_slave_1: entered allmulticast mode [ 725.677306][T28467] bridge_slave_1: entered promiscuous mode [ 725.737946][T28467] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 725.752398][T28467] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 725.827676][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 725.840908][T28467] team0: Port device team_slave_0 added [ 725.871534][T28467] team0: Port device team_slave_1 added [ 725.979185][T28467] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 725.996548][T28467] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 726.056153][T28467] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 726.081110][T28467] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 726.089288][T28467] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 726.116259][T28467] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 726.150795][ T50] Bluetooth: hci6: command tx timeout [ 726.218549][T28467] hsr_slave_0: entered promiscuous mode [ 726.226131][T28467] hsr_slave_1: entered promiscuous mode [ 726.234336][T28467] debugfs: 'hsr0' already exists in 'hsr' [ 726.241240][T28467] Cannot create hsr debugfs directory [ 726.387837][ T50] Bluetooth: hci0: command 0x041b tx timeout [ 726.580759][T28557] netlink: 84 bytes leftover after parsing attributes in process `syz.0.6068'. [ 726.611795][T28557] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6068'. [ 726.746099][T28554] netlink: 'syz.3.6067': attribute type 1 has an invalid length. [ 726.753997][T28554] netlink: 96 bytes leftover after parsing attributes in process `syz.3.6067'. [ 726.778529][T28554] netlink: 1 bytes leftover after parsing attributes in process `syz.3.6067'. [ 726.787519][T28554] netlink: 'syz.3.6067': attribute type 1 has an invalid length. [ 726.795282][T28554] netlink: 'syz.3.6067': attribute type 8 has an invalid length. [ 726.843101][T28554] netlink: 606 bytes leftover after parsing attributes in process `syz.3.6067'. [ 726.858996][T28467] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 726.869968][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 726.897135][T28564] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 726.905407][T28564] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 726.940245][T28567] FAULT_INJECTION: forcing a failure. [ 726.940245][T28567] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 726.954311][T28567] CPU: 0 UID: 0 PID: 28567 Comm: syz.3.6071 Not tainted syzkaller #0 PREEMPT(full) [ 726.954342][T28567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 726.954356][T28567] Call Trace: [ 726.954365][T28567] [ 726.954375][T28567] dump_stack_lvl+0xe8/0x150 [ 726.954407][T28567] should_fail_ex+0x40c/0x560 [ 726.954458][T28567] _copy_from_iter+0x1d3/0x1660 [ 726.954484][T28567] ? rcu_is_watching+0x15/0xb0 [ 726.954515][T28567] ? __pfx__copy_from_iter+0x10/0x10 [ 726.954535][T28567] ? kmem_cache_alloc_node_noprof+0x3ca/0x680 [ 726.954575][T28567] ? netlink_sendmsg+0x650/0xb40 [ 726.954601][T28567] ? skb_put+0x112/0x210 [ 726.954627][T28567] netlink_sendmsg+0x6c0/0xb40 [ 726.954662][T28567] ? __pfx_netlink_sendmsg+0x10/0x10 [ 726.954692][T28567] ? aa_sock_msg_perm+0xf1/0x1b0 [ 726.954727][T28567] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 726.954755][T28567] ? __pfx_netlink_sendmsg+0x10/0x10 [ 726.954782][T28567] ____sys_sendmsg+0x9b9/0xa20 [ 726.954807][T28567] ? __might_fault+0xaf/0x130 [ 726.954842][T28567] ? __pfx_____sys_sendmsg+0x10/0x10 [ 726.954877][T28567] ? import_iovec+0x73/0xa0 [ 726.954907][T28567] ___sys_sendmsg+0x2a5/0x360 [ 726.954930][T28567] ? __lock_acquire+0x683/0x2cd0 [ 726.954959][T28567] ? __pfx____sys_sendmsg+0x10/0x10 [ 726.955027][T28567] ? __fget_files+0x2a/0x420 [ 726.955053][T28567] ? __fget_files+0x3a2/0x420 [ 726.955093][T28567] __x64_sys_sendmsg+0x1bd/0x2a0 [ 726.955121][T28567] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 726.955155][T28567] ? __pfx_ksys_write+0x10/0x10 [ 726.955197][T28567] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 726.955220][T28567] do_syscall_64+0x174/0x580 [ 726.955246][T28567] ? trace_irq_disable+0x3b/0x140 [ 726.955279][T28567] ? clear_bhb_loop+0x40/0x90 [ 726.955307][T28567] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 726.955330][T28567] RIP: 0033:0x7f6db719ce59 [ 726.955352][T28567] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 726.955371][T28567] RSP: 002b:00007f6db8116028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 726.955395][T28567] RAX: ffffffffffffffda RBX: 00007f6db7415fa0 RCX: 00007f6db719ce59 [ 726.955412][T28567] RDX: 0000000020000050 RSI: 00002000000002c0 RDI: 0000000000000004 [ 726.955427][T28567] RBP: 00007f6db8116090 R08: 0000000000000000 R09: 0000000000000000 [ 726.955441][T28567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 726.955462][T28567] R13: 00007f6db7416038 R14: 00007f6db7415fa0 R15: 00007fff8bacd6d8 [ 726.955498][T28567] [ 727.212877][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804acc1400: rx timeout, send abort [ 727.342473][T28467] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.479583][T28576] netlink: 'syz.0.6075': attribute type 12 has an invalid length. [ 727.564178][T28467] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.685153][ C0] vcan0: j1939_tp_rxtimer: 0xffff888075f16000: rx timeout, send abort [ 727.721357][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804acc1400: abort rx timeout. Force session deactivation [ 727.907679][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 727.916974][T28467] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 728.121338][T28583] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6079'. [ 728.121886][T28592] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.6080'. [ 728.193511][ C0] vcan0: j1939_tp_rxtimer: 0xffff888075f16000: abort rx timeout. Force session deactivation [ 728.228182][ T50] Bluetooth: hci6: command tx timeout [ 728.287306][T28467] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 728.337725][T28467] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 728.346489][T28467] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 728.361256][T28467] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 728.370616][T28467] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 728.379986][T28599] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 728.385103][T28467] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 728.398836][T28467] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 728.410644][T28467] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 728.560226][T28608] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6082'. [ 728.621725][T28597] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 728.734688][T28467] 8021q: adding VLAN 0 to HW filter on device bond0 [ 728.773924][T28467] 8021q: adding VLAN 0 to HW filter on device team0 [ 728.791568][ T559] bridge0: port 1(bridge_slave_0) entered blocking state [ 728.798841][ T559] bridge0: port 1(bridge_slave_0) entered forwarding state [ 728.818659][ T559] bridge0: port 2(bridge_slave_1) entered blocking state [ 728.825869][ T559] bridge0: port 2(bridge_slave_1) entered forwarding state [ 728.947715][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 729.279994][T28629] netlink: 'syz.0.6089': attribute type 2 has an invalid length. [ 729.287807][T28629] netlink: 'syz.0.6089': attribute type 1 has an invalid length. [ 729.808205][T28643] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.6092'. [ 729.914776][T28647] openvswitch: netlink: Missing valid actions attribute. [ 729.921908][T28647] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 729.932791][T28647] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6093'. [ 730.007368][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 730.181107][T28467] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 730.240333][T28652] netlink: 'syz.4.6093': attribute type 1 has an invalid length. [ 730.248156][T28652] netlink: 'syz.4.6093': attribute type 1 has an invalid length. [ 730.256090][T28652] netlink: 'syz.4.6093': attribute type 8 has an invalid length. [ 730.313922][T28626] infiniband syz0: set down [ 730.319180][ T50] Bluetooth: hci6: command tx timeout [ 730.349941][T28467] veth0_vlan: entered promiscuous mode [ 730.361705][T28626] infiniband syz0: added ipvlan0 [ 730.380832][T28467] veth1_vlan: entered promiscuous mode [ 730.390357][T28626] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 730.392711][T28626] infiniband syz0: Couldn't open port 1 [ 730.421175][T28626] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 730.473808][T28626] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 730.492209][T28467] veth0_macvtap: entered promiscuous mode [ 730.517237][T28467] veth1_macvtap: entered promiscuous mode [ 730.533268][T28626] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 730.569593][T28467] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 730.603877][T28467] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 730.640689][T13790] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 730.649654][T13790] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 730.726920][T13790] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 730.747876][T13790] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 730.848780][T28626] RDS/IB: syz0: added [ 730.854263][T28626] smc: adding ib device syz0 with port count 1 [ 730.883938][T28626] smc: ib device syz0 port 1 has no pnetid [ 731.019170][T28666] FAULT_INJECTION: forcing a failure. [ 731.019170][T28666] name failslab, interval 1, probability 0, space 0, times 0 [ 731.032040][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 731.054985][T13794] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 731.062876][T13794] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 731.074924][T28666] CPU: 1 UID: 0 PID: 28666 Comm: syz.0.6097 Not tainted syzkaller #0 PREEMPT(full) [ 731.074954][T28666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 731.074969][T28666] Call Trace: [ 731.074978][T28666] [ 731.074988][T28666] dump_stack_lvl+0xe8/0x150 [ 731.075020][T28666] should_fail_ex+0x40c/0x560 [ 731.075063][T28666] should_failslab+0xa8/0x100 [ 731.075089][T28666] __kmalloc_noprof+0xe8/0x750 [ 731.075127][T28666] ? trace_kmalloc+0x2a/0xf0 [ 731.075156][T28666] ? ethnl_default_doit+0x166/0x1540 [ 731.075278][T28666] ethnl_default_doit+0x166/0x1540 [ 731.075311][T28666] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 731.075352][T28666] genl_family_rcv_msg_doit+0x233/0x340 [ 731.075389][T28666] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 731.075432][T28666] ? __lock_acquire+0x683/0x2cd0 [ 731.075464][T28666] genl_rcv_msg+0x614/0x7a0 [ 731.075501][T28666] ? __pfx_genl_rcv_msg+0x10/0x10 [ 731.075531][T28666] ? __pfx_ethnl_default_doit+0x10/0x10 [ 731.075576][T28666] netlink_rcv_skb+0x226/0x4a0 [ 731.075600][T28666] ? __pfx_genl_rcv_msg+0x10/0x10 [ 731.075633][T28666] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 731.075676][T28666] ? down_read+0x270/0x2e0 [ 731.075704][T28666] ? genl_rcv+0xd/0x40 [ 731.075735][T28666] genl_rcv+0x28/0x40 [ 731.075763][T28666] netlink_unicast+0x7bb/0x940 [ 731.075811][T28666] netlink_sendmsg+0x813/0xb40 [ 731.075845][T28666] ? __pfx_netlink_sendmsg+0x10/0x10 [ 731.075872][T28666] ? aa_sock_msg_perm+0xf1/0x1b0 [ 731.075907][T28666] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 731.075935][T28666] ? __pfx_netlink_sendmsg+0x10/0x10 [ 731.075963][T28666] ____sys_sendmsg+0x9b9/0xa20 [ 731.075986][T28666] ? __might_fault+0xaf/0x130 [ 731.076022][T28666] ? __pfx_____sys_sendmsg+0x10/0x10 [ 731.076056][T28666] ? import_iovec+0x73/0xa0 [ 731.076086][T28666] ___sys_sendmsg+0x2a5/0x360 [ 731.076109][T28666] ? __lock_acquire+0x683/0x2cd0 [ 731.076141][T28666] ? __pfx____sys_sendmsg+0x10/0x10 [ 731.076192][T28666] ? __fget_files+0x2a/0x420 [ 731.076214][T28666] ? __fget_files+0x3a2/0x420 [ 731.076246][T28666] __x64_sys_sendmsg+0x1bd/0x2a0 [ 731.076270][T28666] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 731.076300][T28666] ? __pfx_ksys_write+0x10/0x10 [ 731.076337][T28666] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 731.076361][T28666] do_syscall_64+0x174/0x580 [ 731.076386][T28666] ? trace_irq_disable+0x3b/0x140 [ 731.076417][T28666] ? clear_bhb_loop+0x40/0x90 [ 731.076445][T28666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 731.076464][T28666] RIP: 0033:0x7fc1dff9ce59 [ 731.076484][T28666] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 731.076501][T28666] RSP: 002b:00007fc1e0edd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 731.076521][T28666] RAX: ffffffffffffffda RBX: 00007fc1e0216090 RCX: 00007fc1dff9ce59 [ 731.076536][T28666] RDX: 0000000000000040 RSI: 0000200000001e00 RDI: 0000000000000008 [ 731.076548][T28666] RBP: 00007fc1e0edd090 R08: 0000000000000000 R09: 0000000000000000 [ 731.076560][T28666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 731.076572][T28666] R13: 00007fc1e0216128 R14: 00007fc1e0216090 R15: 00007ffc7759af78 [ 731.076602][T28666] [ 731.513118][T28668] syzkaller0: entered promiscuous mode [ 731.537767][T28668] syzkaller0: entered allmulticast mode [ 731.854301][T28673] netlink: 'syz.0.6100': attribute type 2 has an invalid length. [ 731.881230][T28673] netlink: 'syz.0.6100': attribute type 1 has an invalid length. [ 731.941114][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 731.950316][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 732.067658][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 732.230291][T28683] netlink: 'syz.1.6043': attribute type 2 has an invalid length. [ 732.336952][T28687] openvswitch: netlink: Missing valid actions attribute. [ 732.359448][T28689] __nla_validate_parse: 4 callbacks suppressed [ 732.359471][T28689] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6104'. [ 732.368392][T28687] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 732.397870][ T50] Bluetooth: hci6: command tx timeout [ 732.454151][T28687] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6105'. [ 732.484411][ T5652] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 732.498960][ T5652] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 732.512822][ T5652] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 732.521705][ T5652] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 732.563881][ T5652] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 732.797805][T28694] netlink: 'syz.4.6105': attribute type 1 has an invalid length. [ 732.814585][T28697] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input18 [ 732.829201][T28694] netlink: 84 bytes leftover after parsing attributes in process `syz.4.6105'. [ 732.838303][T28694] netlink: 1 bytes leftover after parsing attributes in process `syz.4.6105'. [ 732.877805][T28694] netlink: 'syz.4.6105': attribute type 1 has an invalid length. [ 732.887861][T28694] netlink: 'syz.4.6105': attribute type 8 has an invalid length. [ 732.897362][T28694] netlink: 606 bytes leftover after parsing attributes in process `syz.4.6105'. [ 733.107673][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 733.637439][T28715] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6109'. [ 733.733467][T28717] netlink: 'syz.4.6110': attribute type 2 has an invalid length. [ 733.741603][T28717] netlink: 'syz.4.6110': attribute type 1 has an invalid length. [ 734.147660][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 734.779710][ T5652] Bluetooth: hci1: command tx timeout [ 735.098213][T28691] bridge0: port 1(bridge_slave_0) entered blocking state [ 735.105650][T28691] bridge0: port 1(bridge_slave_0) entered disabled state [ 735.136541][T28691] bridge_slave_0: entered allmulticast mode [ 735.180079][T28691] bridge_slave_0: entered promiscuous mode [ 735.187635][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 735.205145][T28691] bridge0: port 2(bridge_slave_1) entered blocking state [ 735.212459][T28691] bridge0: port 2(bridge_slave_1) entered disabled state [ 735.244428][T28691] bridge_slave_1: entered allmulticast mode [ 735.252627][T28691] bridge_slave_1: entered promiscuous mode [ 735.344901][T28691] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 735.375468][T28691] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 735.420167][T28748] netlink: 'syz.4.6116': attribute type 1 has an invalid length. [ 735.437845][T28748] netlink: 96 bytes leftover after parsing attributes in process `syz.4.6116'. [ 735.476097][T28691] team0: Port device team_slave_0 added [ 735.486686][T28691] team0: Port device team_slave_1 added [ 735.513095][T28748] netlink: 1 bytes leftover after parsing attributes in process `syz.4.6116'. [ 735.522116][T28748] netlink: 'syz.4.6116': attribute type 1 has an invalid length. [ 735.539302][T28691] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 735.546518][T28691] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 735.584802][T28691] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 735.600516][T28691] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 735.607834][T28691] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 735.634969][T28691] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 735.735671][T28691] hsr_slave_0: entered promiscuous mode [ 735.742825][T28691] hsr_slave_1: entered promiscuous mode [ 735.750912][T28691] debugfs: 'hsr0' already exists in 'hsr' [ 735.756729][T28691] Cannot create hsr debugfs directory [ 735.882846][T28750] openvswitch: netlink: Missing valid actions attribute. [ 735.901264][T28750] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 735.933253][T28750] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6117'. [ 736.142438][T28750] netlink: 84 bytes leftover after parsing attributes in process `syz.1.6117'. [ 736.227643][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 736.821716][ T5652] Bluetooth: hci1: command tx timeout [ 736.915690][T28776] validate_nla: 4 callbacks suppressed [ 736.915808][T28776] netlink: 'syz.4.6123': attribute type 12 has an invalid length. [ 737.226222][T28783] netlink: 'syz.5.6126': attribute type 1 has an invalid length. [ 737.248966][T28783] vlan2: entered allmulticast mode [ 737.267687][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 737.283433][T28783] veth0_to_bond: entered allmulticast mode [ 737.345912][T28783] bridge0: port 2(bridge_slave_1) entered disabled state [ 737.353815][T28783] bridge0: port 1(bridge_slave_0) entered disabled state [ 737.364579][T28787] netlink: 'syz.1.6127': attribute type 10 has an invalid length. [ 737.446209][T28783] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 737.458923][T28783] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 737.493022][T28789] __nla_validate_parse: 5 callbacks suppressed [ 737.493045][T28789] netlink: 56 bytes leftover after parsing attributes in process `syz.5.6126'. [ 737.589499][T28787] syz_tun: entered promiscuous mode [ 737.629123][T28787] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 737.638826][T13790] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 737.647977][T13790] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 737.658098][T13790] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 737.667059][T13790] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 737.682800][T28775] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 737.947326][T28797] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6131'. [ 737.965009][T28691] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 738.012595][T28691] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 738.023553][T28691] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 738.054797][T28691] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 738.062998][T28691] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 738.102778][T28691] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 738.114858][T28797] tipc: Started in network mode [ 738.126440][T28797] tipc: Node identity ac14140f, cluster identity 4711 [ 738.133591][T28797] tipc: New replicast peer: 255.255.255.255 [ 738.140394][T28797] tipc: Enabled bearer , priority 10 [ 738.150889][T28691] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 738.213941][T28691] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 738.307657][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 738.418695][T28826] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6131'. [ 738.531465][T28691] 8021q: adding VLAN 0 to HW filter on device bond0 [ 738.571726][T28691] 8021q: adding VLAN 0 to HW filter on device team0 [ 738.594360][T13804] bridge0: port 1(bridge_slave_0) entered blocking state [ 738.601587][T13804] bridge0: port 1(bridge_slave_0) entered forwarding state [ 738.692639][T13804] bridge0: port 2(bridge_slave_1) entered blocking state [ 738.699873][T13804] bridge0: port 2(bridge_slave_1) entered forwarding state [ 738.867693][ T5652] Bluetooth: hci0: command 0x041b tx timeout [ 738.873806][ T50] Bluetooth: hci1: command tx timeout [ 738.877149][T28840] netlink: 'syz.4.6139': attribute type 10 has an invalid length. [ 739.022318][T28843] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.6140'. [ 739.198173][T27443] tipc: Node number set to 2886997007 [ 739.347691][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 739.487959][T28859] netlink: 'syz.4.6142': attribute type 1 has an invalid length. [ 739.732526][T28691] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 739.829968][T28691] veth0_vlan: entered promiscuous mode [ 739.863557][T28691] veth1_vlan: entered promiscuous mode [ 739.900995][T28691] veth0_macvtap: entered promiscuous mode [ 739.913829][T28691] veth1_macvtap: entered promiscuous mode [ 739.938070][T28691] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 739.950363][T28691] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 740.000111][T13804] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 740.008977][T13804] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 740.017735][T13804] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 740.026669][T13804] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 740.387679][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 740.446106][T13811] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 740.468801][T13811] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 740.569605][T28882] netlink: 'syz.1.6150': attribute type 1 has an invalid length. [ 740.614380][T13804] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 740.622443][T13804] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 740.948611][ T5652] Bluetooth: hci1: command tx timeout [ 740.948708][T28897] netlink: 'syz.1.6154': attribute type 2 has an invalid length. [ 740.962822][T28897] netlink: 'syz.1.6154': attribute type 1 has an invalid length. [ 740.995079][T28899] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 741.003830][T28899] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 741.120067][T28904] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6156'. [ 741.218560][T28910] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 741.232977][T28910] netdevsim netdevsim1: Direct firmware load for  failed with error -2 [ 741.241843][T28910] netdevsim netdevsim1: Falling back to sysfs fallback for:  [ 741.427750][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 741.578699][T28928] netlink: 'syz.0.6165': attribute type 2 has an invalid length. [ 741.590324][T28928] netlink: 'syz.0.6165': attribute type 1 has an invalid length. [ 741.884902][T28935] IPVS: set_ctl: invalid protocol: 51 100.1.1.1:20000 [ 742.467696][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 742.521745][ T50] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 742.541031][ T50] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 742.558414][ T50] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 742.570010][ T50] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 742.579536][ T50] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 742.821479][T28957] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input19 [ 743.165895][T17424] bond0: (slave syz_tun): Releasing backup interface [ 743.337883][T28961] RDS: rds_bind could not find a transport for ::ffff:10.1.1.3, load rds_tcp or rds_rdma? [ 743.507706][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 743.685239][ T57] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 743.696414][ T57] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 743.758559][T28980] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 743.767038][T28980] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 744.165101][ T57] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 744.177002][ T57] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 744.547683][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 744.562988][T28950] bridge0: port 1(bridge_slave_0) entered blocking state [ 744.570584][T28950] bridge0: port 1(bridge_slave_0) entered disabled state [ 744.578441][T28950] bridge_slave_0: entered allmulticast mode [ 744.639949][ T5652] Bluetooth: hci2: command tx timeout [ 744.642215][T28950] bridge_slave_0: entered promiscuous mode [ 744.654475][T28950] bridge0: port 2(bridge_slave_1) entered blocking state [ 744.662788][T28950] bridge0: port 2(bridge_slave_1) entered disabled state [ 744.670101][T28950] bridge_slave_1: entered allmulticast mode [ 744.678118][T28950] bridge_slave_1: entered promiscuous mode [ 744.720072][T28950] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 744.733021][T28950] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 744.842497][T28950] team0: Port device team_slave_0 added [ 744.851437][T28950] team0: Port device team_slave_1 added [ 744.935349][ T57] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 744.965748][ T57] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 744.984798][T28950] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 745.001659][T28950] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 745.047962][T28950] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 745.082193][T28950] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 745.089216][T28950] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 745.115223][T28950] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 745.360034][T28950] hsr_slave_0: entered promiscuous mode [ 745.366933][T28950] hsr_slave_1: entered promiscuous mode [ 745.377920][T28950] debugfs: 'hsr0' already exists in 'hsr' [ 745.383713][T28950] Cannot create hsr debugfs directory [ 745.413812][ T449] block nbd1: Possible stuck request ffff888027b77000: control (read@0,1024B). Runtime 480 seconds [ 745.424849][ T449] block nbd1: Possible stuck request ffff888027b771c0: control (read@1024,1024B). Runtime 480 seconds [ 745.438136][ T449] block nbd1: Possible stuck request ffff888027b77380: control (read@2048,1024B). Runtime 480 seconds [ 745.449248][ T449] block nbd1: Possible stuck request ffff888027b77540: control (read@3072,1024B). Runtime 480 seconds [ 745.473537][ T57] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 745.483455][ T57] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 745.551231][T29026] netlink: 'syz.0.6192': attribute type 12 has an invalid length. [ 745.587773][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 746.037225][T29034] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6193'. [ 746.170173][T29025] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 746.627790][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 746.712081][ T5652] Bluetooth: hci2: command tx timeout [ 746.945395][ T57] bond8 (unregistering): (slave bridge5): Releasing backup interface [ 746.954385][ T57] bridge5 (unregistering): left promiscuous mode [ 746.967824][ T57] bond0 (unregistering): Released all slaves [ 746.979201][ T57] bond1 (unregistering): Released all slaves [ 746.995231][ T57] bond2 (unregistering): Released all slaves [ 747.016154][ T57] bond3 (unregistering): Released all slaves [ 747.037168][ T57] bond4 (unregistering): Released all slaves [ 747.059088][ T57] bond5 (unregistering): Released all slaves [ 747.074930][ T57] bond6 (unregistering): Released all slaves [ 747.090917][ T57] bond7 (unregistering): Released all slaves [ 747.113016][ T57] bond8 (unregistering): Released all slaves [ 747.189877][ C0] ================================================================== [ 747.198028][ C0] BUG: KASAN: slab-use-after-free in fib_rules_lookup+0x15e/0xeb0 [ 747.205907][ C0] Read of size 8 at addr ffff888064abb780 by task syz.3.6193/29029 [ 747.213796][ C0] [ 747.216153][ C0] CPU: 0 UID: 0 PID: 29029 Comm: syz.3.6193 Not tainted syzkaller #0 PREEMPT(full) [ 747.216177][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 747.216191][ C0] Call Trace: [ 747.216208][ C0] [ 747.216215][ C0] dump_stack_lvl+0xe8/0x150 [ 747.216234][ C0] print_address_description+0x55/0x1e0 [ 747.216263][ C0] ? fib_rules_lookup+0x15e/0xeb0 [ 747.216279][ C0] print_report+0x58/0x70 [ 747.216292][ C0] kasan_report+0x117/0x150 [ 747.216317][ C0] ? fib_rules_lookup+0x15e/0xeb0 [ 747.216336][ C0] ? fib_rules_lookup+0x99/0xeb0 [ 747.216352][ C0] fib_rules_lookup+0x15e/0xeb0 [ 747.216370][ C0] ? fib_rules_lookup+0x99/0xeb0 [ 747.216389][ C0] ? __pfx_fib_rules_lookup+0x10/0x10 [ 747.216406][ C0] ? l3mdev_update_flow+0x26/0x610 [ 747.216460][ C0] ? l3mdev_update_flow+0x4ad/0x610 [ 747.216479][ C0] __fib_lookup+0x106/0x210 [ 747.216540][ C0] ? __lock_acquire+0x683/0x2cd0 [ 747.216556][ C0] ? __pfx___fib_lookup+0x10/0x10 [ 747.216570][ C0] ? __lock_acquire+0x683/0x2cd0 [ 747.216589][ C0] ? fib_lookup+0x49/0x440 [ 747.216633][ C0] ? ip_route_output_key_hash_rcu+0x274/0x2720 [ 747.216674][ C0] ip_route_output_key_hash_rcu+0x294/0x2720 [ 747.216701][ C0] ? ip_route_output_key_hash+0xd8/0x2a0 [ 747.216723][ C0] ? ip_route_output_key_hash+0xd8/0x2a0 [ 747.216746][ C0] ip_route_output_key_hash+0x18d/0x2a0 [ 747.216769][ C0] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 747.216796][ C0] ? icmp_route_lookup+0x370/0xb50 [ 747.216835][ C0] icmp_route_lookup+0x50a/0xb50 [ 747.216853][ C0] ? __pfx_icmp_route_lookup+0x10/0x10 [ 747.216867][ C0] ? __asan_memset+0x22/0x50 [ 747.216888][ C0] ? __icmp_send+0xa49/0x1710 [ 747.216900][ C0] ? lock_acquire+0x106/0x350 [ 747.216915][ C0] ? __icmp_send+0xa49/0x1710 [ 747.216930][ C0] ? __pfx___ip_options_echo+0x10/0x10 [ 747.216950][ C0] ? stack_trace_save+0xa9/0x100 [ 747.216972][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 747.216993][ C0] ? kfree+0x1c5/0x640 [ 747.217014][ C0] __icmp_send+0x1010/0x1710 [ 747.217028][ C0] ? __icmp_send+0x230/0x1710 [ 747.217048][ C0] ? __pfx___icmp_send+0x10/0x10 [ 747.217071][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 747.217101][ C0] ipv4_link_failure+0x64d/0xa50 [ 747.217128][ C0] ? __pfx_ipv4_link_failure+0x10/0x10 [ 747.217156][ C0] ? __pfx_ipv4_link_failure+0x10/0x10 [ 747.217180][ C0] arp_error_report+0x118/0x160 [ 747.217207][ C0] neigh_invalidate+0x243/0x470 [ 747.217228][ C0] neigh_timer_handler+0xc01/0x12b0 [ 747.217248][ C0] call_timer_fn+0x192/0x5e0 [ 747.217265][ C0] ? __pfx_neigh_timer_handler+0x10/0x10 [ 747.217280][ C0] ? call_timer_fn+0xd4/0x5e0 [ 747.217296][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 747.217317][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 747.217333][ C0] ? __pfx_neigh_timer_handler+0x10/0x10 [ 747.217350][ C0] __run_timer_base+0x652/0x8b0 [ 747.217364][ C0] ? ktime_get+0x45/0x220 [ 747.217392][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 747.217408][ C0] ? ktime_get+0x1f5/0x220 [ 747.217430][ C0] ? lapic_next_event+0x11/0x20 [ 747.217456][ C0] run_timer_softirq+0xb7/0x170 [ 747.217471][ C0] handle_softirqs+0x225/0x840 [ 747.217488][ C0] ? __irq_exit_rcu+0xca/0x220 [ 747.217506][ C0] __irq_exit_rcu+0xca/0x220 [ 747.217520][ C0] irq_exit_rcu+0x9/0x30 [ 747.217534][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 747.217552][ C0] [ 747.217557][ C0] [ 747.217563][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 747.217580][ C0] RIP: 0010:lockdep_unregister_key+0x2d5/0x350 [ 747.217598][ C0] Code: 91 03 09 00 89 c6 48 c7 c7 30 48 40 96 e8 03 e8 06 0a 90 e9 65 fe ff ff e8 18 1e 04 0a 41 f7 c7 00 02 00 00 74 b3 fb 40 84 ed <75> b2 eb c3 90 0f 0b 90 e9 26 ff ff ff 90 0f 0b 90 e9 2e ff ff ff [ 747.217612][ C0] RSP: 0018:ffffc900053479a0 EFLAGS: 00000202 [ 747.217627][ C0] RAX: 0000000000000046 RBX: 0000000000000001 RCX: 0000000000000046 [ 747.217637][ C0] RDX: ffffffff93fbc398 RSI: ffffffff8dfc731c RDI: ffffffff8c2886a0 [ 747.217649][ C0] RBP: ffff888036629f01 R08: ffffffff81aeb298 R09: 0000000000000000 [ 747.217660][ C0] R10: 0000000000000000 R11: ffffffff8e958780 R12: 0000000000000000 [ 747.217670][ C0] R13: ffff88806e3bf269 R14: 0000000000001000 R15: 0000000000000a87 [ 747.217684][ C0] ? __is_module_percpu_address+0x28/0x3f0 [ 747.217711][ C0] ? __pfx_pfifo_fast_destroy+0x10/0x10 [ 747.217745][ C0] __qdisc_destroy+0x1ab/0x470 [ 747.217761][ C0] dev_shutdown+0x352/0x450 [ 747.217779][ C0] unregister_netdevice_many_notify+0x11f0/0x2150 [ 747.217806][ C0] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 747.217826][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 747.217841][ C0] ? ref_tracker_alloc+0x2d7/0x4b0 [ 747.217859][ C0] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 747.217874][ C0] ? tun_chr_close+0x10a/0x1c0 [ 747.217934][ C0] ? __fput+0x418/0xa50 [ 747.217951][ C0] ? exit_to_user_mode_loop+0x193/0x6b0 [ 747.217968][ C0] unregister_netdevice_queue+0x2f5/0x340 [ 747.217988][ C0] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 747.218006][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 747.218022][ C0] ? queue_delayed_work_on+0x171/0x1e0 [ 747.218048][ C0] __tun_detach+0x1018/0x1880 [ 747.218071][ C0] tun_chr_close+0x10a/0x1c0 [ 747.218094][ C0] ? __pfx_tun_chr_close+0x10/0x10 [ 747.218117][ C0] __fput+0x418/0xa50 [ 747.218138][ C0] task_work_run+0x1d9/0x270 [ 747.218161][ C0] ? __pfx_task_work_run+0x10/0x10 [ 747.218186][ C0] exit_to_user_mode_loop+0x193/0x6b0 [ 747.218204][ C0] ? rcu_is_watching+0x15/0xb0 [ 747.218222][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 747.218238][ C0] do_syscall_64+0x353/0x580 [ 747.218256][ C0] ? clear_bhb_loop+0x40/0x90 [ 747.218274][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 747.218289][ C0] RIP: 0033:0x7f6db719ce59 [ 747.218304][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 747.218318][ C0] RSP: 002b:00007fff8bacd838 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 747.218333][ C0] RAX: 0000000000000000 RBX: 00007f6db7417da0 RCX: 00007f6db719ce59 [ 747.218343][ C0] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 747.218353][ C0] RBP: 00007f6db7417da0 R08: 0000000000000006 R09: 0000000000000000 [ 747.218362][ C0] R10: 00007f6db7417cb0 R11: 0000000000000246 R12: 00000000000b64ee [ 747.218372][ C0] R13: 00007f6db741627c R14: 00000000000b6430 R15: 00007f6db7416270 [ 747.218391][ C0] [ 747.218396][ C0] [ 747.859406][ C0] Allocated by task 17424: [ 747.863819][ C0] kasan_save_track+0x3e/0x80 [ 747.868599][ C0] __kasan_kmalloc+0x93/0xb0 [ 747.873233][ C0] __kmalloc_node_track_caller_noprof+0x4d7/0x7b0 [ 747.879775][ C0] kmemdup_noprof+0x2b/0x70 [ 747.884335][ C0] fib_rules_register+0x2f/0x400 [ 747.889383][ C0] fib4_rules_init+0x21/0x160 [ 747.894090][ C0] fib_net_init+0x17a/0x3e0 [ 747.898716][ C0] ops_init+0x35d/0x5d0 [ 747.902946][ C0] setup_net+0x118/0x350 [ 747.907230][ C0] copy_net_ns+0x4f9/0x720 [ 747.911787][ C0] create_new_namespaces+0x3f0/0x6b0 [ 747.917105][ C0] unshare_nsproxy_namespaces+0x149/0x190 [ 747.922857][ C0] ksys_unshare+0x57d/0xa00 [ 747.927506][ C0] __x64_sys_unshare+0x38/0x50 [ 747.932310][ C0] do_syscall_64+0x174/0x580 [ 747.936934][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 747.942856][ C0] [ 747.945200][ C0] Freed by task 23: [ 747.949020][ C0] kasan_save_track+0x3e/0x80 [ 747.953728][ C0] kasan_save_free_info+0x40/0x50 [ 747.958789][ C0] __kasan_slab_free+0x5c/0x80 [ 747.963585][ C0] __rcu_free_sheaf_prepare+0x12d/0x2a0 [ 747.969183][ C0] rcu_free_sheaf+0x31/0x200 [ 747.973845][ C0] rcu_core+0x78b/0x10a0 [ 747.978111][ C0] handle_softirqs+0x225/0x840 [ 747.982912][ C0] run_ksoftirqd+0x36/0x60 [ 747.987366][ C0] smpboot_thread_fn+0x57c/0xa80 [ 747.992331][ C0] kthread+0x389/0x470 [ 747.996414][ C0] ret_from_fork+0x514/0xb70 [ 748.001008][ C0] ret_from_fork_asm+0x1a/0x30 [ 748.005865][ C0] [ 748.008189][ C0] The buggy address belongs to the object at ffff888064abb700 [ 748.008189][ C0] which belongs to the cache kmalloc-192 of size 192 [ 748.022240][ C0] The buggy address is located 128 bytes inside of [ 748.022240][ C0] freed 192-byte region [ffff888064abb700, ffff888064abb7c0) [ 748.036052][ C0] [ 748.038396][ C0] The buggy address belongs to the physical page: [ 748.044825][ C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x64abb [ 748.053602][ C0] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 748.060734][ C0] page_type: f5(slab) [ 748.064721][ C0] raw: 00fff00000000000 ffff88813fe163c0 dead000000000100 dead000000000122 [ 748.073304][ C0] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 748.081893][ C0] page dumped because: kasan: bad access detected [ 748.088348][ C0] page_owner tracks the page as allocated [ 748.094128][ C0] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 15965, tgid 15965 (syz-executor), ts 377302284128, free_ts 371294725876 [ 748.115365][ C0] post_alloc_hook+0x22d/0x280 [ 748.120215][ C0] get_page_from_freelist+0x24ae/0x2530 [ 748.125823][ C0] __alloc_frozen_pages_noprof+0x18d/0x380 [ 748.131955][ C0] allocate_slab+0x77/0x660 [ 748.136619][ C0] refill_objects+0x336/0x3d0 [ 748.141333][ C0] __pcs_replace_empty_main+0x320/0x720 [ 748.146918][ C0] __kmalloc_noprof+0x464/0x750 [ 748.151892][ C0] __register_sysctl_table+0xc02/0x1370 [ 748.157655][ C0] neigh_sysctl_register+0x9b1/0xa90 [ 748.163167][ C0] devinet_sysctl_register+0xad/0x200 [ 748.168605][ C0] inetdev_init+0x29e/0x4d0 [ 748.173225][ C0] inetdev_event+0x307/0x15e0 [ 748.177941][ C0] notifier_call_chain+0x1a5/0x3d0 [ 748.183105][ C0] register_netdevice+0x18db/0x1f00 [ 748.188341][ C0] nsim_create+0xbd7/0x1140 [ 748.193004][ C0] __nsim_dev_port_add+0x7f8/0xcd0 [ 748.198149][ C0] page last free pid 5637 tgid 5637 stack trace: [ 748.204475][ C0] __free_frozen_pages+0xc0d/0xd20 [ 748.209607][ C0] vfree+0x1fd/0x330 [ 748.213528][ C0] kcov_close+0x28/0x50 [ 748.217816][ C0] __fput+0x418/0xa50 [ 748.221801][ C0] task_work_run+0x1d9/0x270 [ 748.226405][ C0] do_exit+0x73a/0x2360 [ 748.230746][ C0] do_group_exit+0x22d/0x2f0 [ 748.235340][ C0] get_signal+0x121b/0x12c0 [ 748.239841][ C0] arch_do_signal_or_restart+0xbb/0x860 [ 748.245393][ C0] exit_to_user_mode_loop+0xa9/0x6b0 [ 748.250680][ C0] do_syscall_64+0x353/0x580 [ 748.255271][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 748.261184][ C0] [ 748.263503][ C0] Memory state around the buggy address: [ 748.269141][ C0] ffff888064abb680: 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc fc [ 748.277298][ C0] ffff888064abb700: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 748.285364][ C0] >ffff888064abb780: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 748.293435][ C0] ^ [ 748.297628][ C0] ffff888064abb800: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 748.305723][ C0] ffff888064abb880: 00 00 00 fc fc fc fc fc fc fc fc fc fc fc fc fc [ 748.313807][ C0] ================================================================== [ 748.322213][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 748.329446][ C0] CPU: 0 UID: 0 PID: 29029 Comm: syz.3.6193 Not tainted syzkaller #0 PREEMPT(full) [ 748.338873][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 748.348955][ C0] Call Trace: [ 748.352279][ C0] [ 748.355169][ C0] vpanic+0x56c/0xa60 [ 748.359195][ C0] ? __pfx_vpanic+0x10/0x10 [ 748.363740][ C0] panic+0xc5/0xd0 [ 748.367510][ C0] ? __pfx_panic+0x10/0x10 [ 748.371966][ C0] ? fib_rules_lookup+0x15e/0xeb0 [ 748.377027][ C0] ? fib_rules_lookup+0x15e/0xeb0 [ 748.382080][ C0] check_panic_on_warn+0x89/0xb0 [ 748.387066][ C0] ? fib_rules_lookup+0x15e/0xeb0 [ 748.392128][ C0] end_report+0x73/0x170 [ 748.396417][ C0] ? fib_rules_lookup+0x15e/0xeb0 [ 748.401505][ C0] kasan_report+0x128/0x150 [ 748.406079][ C0] ? fib_rules_lookup+0x15e/0xeb0 [ 748.411156][ C0] ? fib_rules_lookup+0x99/0xeb0 [ 748.416191][ C0] fib_rules_lookup+0x15e/0xeb0 [ 748.421098][ C0] ? fib_rules_lookup+0x99/0xeb0 [ 748.426122][ C0] ? __pfx_fib_rules_lookup+0x10/0x10 [ 748.431560][ C0] ? l3mdev_update_flow+0x26/0x610 [ 748.436724][ C0] ? l3mdev_update_flow+0x4ad/0x610 [ 748.441978][ C0] __fib_lookup+0x106/0x210 [ 748.446524][ C0] ? __lock_acquire+0x683/0x2cd0 [ 748.451531][ C0] ? __pfx___fib_lookup+0x10/0x10 [ 748.456864][ C0] ? __lock_acquire+0x683/0x2cd0 [ 748.461845][ C0] ? fib_lookup+0x49/0x440 [ 748.466327][ C0] ? ip_route_output_key_hash_rcu+0x274/0x2720 [ 748.472538][ C0] ip_route_output_key_hash_rcu+0x294/0x2720 [ 748.478606][ C0] ? ip_route_output_key_hash+0xd8/0x2a0 [ 748.484320][ C0] ? ip_route_output_key_hash+0xd8/0x2a0 [ 748.490086][ C0] ip_route_output_key_hash+0x18d/0x2a0 [ 748.495688][ C0] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 748.502251][ C0] ? icmp_route_lookup+0x370/0xb50 [ 748.507404][ C0] icmp_route_lookup+0x50a/0xb50 [ 748.512382][ C0] ? __pfx_icmp_route_lookup+0x10/0x10 [ 748.517870][ C0] ? __asan_memset+0x22/0x50 [ 748.522589][ C0] ? __icmp_send+0xa49/0x1710 [ 748.527300][ C0] ? lock_acquire+0x106/0x350 [ 748.532008][ C0] ? __icmp_send+0xa49/0x1710 [ 748.536713][ C0] ? __pfx___ip_options_echo+0x10/0x10 [ 748.542207][ C0] ? stack_trace_save+0xa9/0x100 [ 748.547187][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 748.552605][ C0] ? kfree+0x1c5/0x640 [ 748.556717][ C0] __icmp_send+0x1010/0x1710 [ 748.561349][ C0] ? __icmp_send+0x230/0x1710 [ 748.566072][ C0] ? __pfx___icmp_send+0x10/0x10 [ 748.571053][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 748.576130][ C0] ipv4_link_failure+0x64d/0xa50 [ 748.581114][ C0] ? __pfx_ipv4_link_failure+0x10/0x10 [ 748.586615][ C0] ? __pfx_ipv4_link_failure+0x10/0x10 [ 748.592118][ C0] arp_error_report+0x118/0x160 [ 748.597051][ C0] neigh_invalidate+0x243/0x470 [ 748.601957][ C0] neigh_timer_handler+0xc01/0x12b0 [ 748.607247][ C0] call_timer_fn+0x192/0x5e0 [ 748.611892][ C0] ? __pfx_neigh_timer_handler+0x10/0x10 [ 748.617593][ C0] ? call_timer_fn+0xd4/0x5e0 [ 748.622331][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 748.627527][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 748.632746][ C0] ? __pfx_neigh_timer_handler+0x10/0x10 [ 748.638397][ C0] __run_timer_base+0x652/0x8b0 [ 748.643270][ C0] ? ktime_get+0x45/0x220 [ 748.647642][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 748.653041][ C0] ? ktime_get+0x1f5/0x220 [ 748.657574][ C0] ? lapic_next_event+0x11/0x20 [ 748.662472][ C0] run_timer_softirq+0xb7/0x170 [ 748.667430][ C0] handle_softirqs+0x225/0x840 [ 748.672242][ C0] ? __irq_exit_rcu+0xca/0x220 [ 748.677042][ C0] __irq_exit_rcu+0xca/0x220 [ 748.681654][ C0] irq_exit_rcu+0x9/0x30 [ 748.685906][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 748.691576][ C0] [ 748.694514][ C0] [ 748.697455][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 748.703453][ C0] RIP: 0010:lockdep_unregister_key+0x2d5/0x350 [ 748.709657][ C0] Code: 91 03 09 00 89 c6 48 c7 c7 30 48 40 96 e8 03 e8 06 0a 90 e9 65 fe ff ff e8 18 1e 04 0a 41 f7 c7 00 02 00 00 74 b3 fb 40 84 ed <75> b2 eb c3 90 0f 0b 90 e9 26 ff ff ff 90 0f 0b 90 e9 2e ff ff ff [ 748.729407][ C0] RSP: 0018:ffffc900053479a0 EFLAGS: 00000202 [ 748.735551][ C0] RAX: 0000000000000046 RBX: 0000000000000001 RCX: 0000000000000046 [ 748.743649][ C0] RDX: ffffffff93fbc398 RSI: ffffffff8dfc731c RDI: ffffffff8c2886a0 [ 748.751667][ C0] RBP: ffff888036629f01 R08: ffffffff81aeb298 R09: 0000000000000000 [ 748.759762][ C0] R10: 0000000000000000 R11: ffffffff8e958780 R12: 0000000000000000 [ 748.767772][ C0] R13: ffff88806e3bf269 R14: 0000000000001000 R15: 0000000000000a87 [ 748.775814][ C0] ? __is_module_percpu_address+0x28/0x3f0 [ 748.781777][ C0] ? __pfx_pfifo_fast_destroy+0x10/0x10 [ 748.787364][ C0] __qdisc_destroy+0x1ab/0x470 [ 748.792194][ C0] dev_shutdown+0x352/0x450 [ 748.796744][ C0] unregister_netdevice_many_notify+0x11f0/0x2150 [ 748.803223][ C0] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 748.810037][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 748.816074][ C0] ? ref_tracker_alloc+0x2d7/0x4b0 [ 748.821247][ C0] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 748.826748][ C0] ? tun_chr_close+0x10a/0x1c0 [ 748.831652][ C0] ? __fput+0x418/0xa50 [ 748.835862][ C0] ? exit_to_user_mode_loop+0x193/0x6b0 [ 748.841485][ C0] unregister_netdevice_queue+0x2f5/0x340 [ 748.847267][ C0] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 748.853550][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 748.858853][ C0] ? queue_delayed_work_on+0x171/0x1e0 [ 748.864329][ C0] __tun_detach+0x1018/0x1880 [ 748.869029][ C0] tun_chr_close+0x10a/0x1c0 [ 748.873639][ C0] ? __pfx_tun_chr_close+0x10/0x10 [ 748.878790][ C0] __fput+0x418/0xa50 [ 748.882789][ C0] task_work_run+0x1d9/0x270 [ 748.887405][ C0] ? __pfx_task_work_run+0x10/0x10 [ 748.892566][ C0] exit_to_user_mode_loop+0x193/0x6b0 [ 748.897964][ C0] ? rcu_is_watching+0x15/0xb0 [ 748.902742][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 748.908835][ C0] do_syscall_64+0x353/0x580 [ 748.913440][ C0] ? clear_bhb_loop+0x40/0x90 [ 748.918316][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 748.924223][ C0] RIP: 0033:0x7f6db719ce59 [ 748.928654][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 748.948283][ C0] RSP: 002b:00007fff8bacd838 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 748.956770][ C0] RAX: 0000000000000000 RBX: 00007f6db7417da0 RCX: 00007f6db719ce59 [ 748.964786][ C0] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 748.972815][ C0] RBP: 00007f6db7417da0 R08: 0000000000000006 R09: 0000000000000000 [ 748.980833][ C0] R10: 00007f6db7417cb0 R11: 0000000000000246 R12: 00000000000b64ee [ 748.988848][ C0] R13: 00007f6db741627c R14: 00000000000b6430 R15: 00007f6db7416270 [ 748.996869][ C0] [ 749.017809][ C0] Kernel Offset: disabled [ 749.022159][ C0] Rebooting in 86400 seconds..