last executing test programs: 5m29.330871727s ago: executing program 4 (id=6824): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0x48}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) 5m29.017841177s ago: executing program 4 (id=6828): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 64) r0 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6, 0xe8c}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x48, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000012002102"], 0x38}}, 0x0) 5m29.015866729s ago: executing program 4 (id=6831): r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f00000001c0)={0x1, 'veth0_to_bond\x00', {}, 0x2a2}) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000240)={{r0, &(0x7f0000000080)='\xe8+,-^\\#\x00', 0x80002, &(0x7f00000000c0)={@align=0x2fc9, {0x1, 0x9, 0x2, 0x101}}, 0x81, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000140)=0xa179}, {[0x9, 0x7, 0x2c, 0x2]}, 0xfffffbff, 0x3, &(0x7f0000000180)=""/3}) sendmsg$IPSET_CMD_DEL(r1, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x154}, 0x1, 0x0, 0x0, 0x6000}, 0x94) sendmmsg$inet(r0, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000002c0)="89", 0x1}], 0x1, &(0x7f0000000e40)=ANY=[], 0xd0}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000340)="4a84324eda", 0x5}], 0x1}}], 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e) close(r0) socket$kcm(0x29, 0x2, 0x0) (async) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f00000001c0)={0x1, 'veth0_to_bond\x00', {}, 0x2a2}) (async) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000240)={{r0, &(0x7f0000000080)='\xe8+,-^\\#\x00', 0x80002, &(0x7f00000000c0)={@align=0x2fc9, {0x1, 0x9, 0x2, 0x101}}, 0x81, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000140)=0xa179}, {[0x9, 0x7, 0x2c, 0x2]}, 0xfffffbff, 0x3, &(0x7f0000000180)=""/3}) (async) sendmsg$IPSET_CMD_DEL(r1, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB="540100000a06080000000000000000000300000520000780060005404e21000005000300410000000c00194000000000000009e8380007800c00028008000140ac1414aa08000a40fffffff628000940000004000c00184000000000000000000c001680080000000001000000000100070000000500010007000000780008801c0007801800148014000240fe8000000000000000000000000000aa0c000780080006400000004f100007800c00194000000000000080000c000780050007005e0000000c00078006001d40000300000c00078006001d40000300001800078014001700766c616e310000000000000000000000200008800c000780080006400000000b100007800900130073797a31000000000900020073797a3200000000080009400000000e24000880100007800a0011000000000000000000100007800c00184000000000000000090800094000000000365ee58053994ab163a963f8e8a9a15403eaa71c9bc1950a16e019622c0ec2ef2fa0facfc6f689c627c2"], 0x154}, 0x1, 0x0, 0x0, 0x6000}, 0x94) (async) sendmmsg$inet(r0, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000002c0)="89", 0x1}], 0x1, &(0x7f0000000e40)=ANY=[], 0xd0}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000340)="4a84324eda", 0x5}], 0x1}}], 0x2, 0x0) (async) connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e) (async) close(r0) (async) 5m29.007969292s ago: executing program 4 (id=6834): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)="d80000001000810468f70082db44b904021d080b01000000e8fe55a11800150006001400000000120800040043000000a80016000300014006000d00036010fab94dcf5c0461c1d67f6f94000534cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x20000004) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket(0x11, 0x800000003, 0x0) accept4$packet(r2, 0x0, 0x0, 0x800) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000007c0)=@mangle={'mangle\x00', 0x2, 0x6, 0x730, 0x270, 0x190, 0x0, 0x190, 0x0, 0x660, 0x660, 0x660, 0x660, 0x660, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'bond_slave_0\x00', 'vlan1\x00', {}, {}, 0x21}, 0x0, 0x168, 0x190, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @empty, @mcast2, @private2, [], [0x0, 0xffffffff], [], 0x0, 0x10}}, @common=@inet=@dccp={{0x30}, {[0x4e24, 0x4e24], [0x4e23, 0x4e24], 0xd, 0x20, 0x4, 0x7}}]}, @HL={0x28}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0x2}, [], [], 'bridge0\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {0x0, 0xfd}, 0x300, 0x4}}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'bridge0\x00', 'bond_slave_0\x00', {0xff}}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@loopback, @local, [0xff, 0x0, 0xff, 0xff000000], [0xff000000, 0xff000000, 0xffffffff, 0xffffff00], 'macvlan0\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x8, 0x81, 0x1, 0x36}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@private1, 0x0, 0x37}}}, {{@uncond, 0x0, 0x208, 0x230, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, @mcast2, @mcast2, @private0, @empty, @loopback, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @remote, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0]}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x790) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x11, 0xa, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000180), r4) r5 = socket$packet(0x11, 0x2, 0x300) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newrule={0x1c, 0x21, 0x1, 0x0, 0x0, {0x2, 0x0, 0x14}}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) setsockopt$packet_tx_ring(r5, 0x107, 0x5, &(0x7f0000000380)=@req3={0x808000, 0x4, 0x20300, 0xfc, 0x0, 0x2}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x94173000) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0xa}}, 0x26}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYRESDEC=r7, @ANYRESHEX=r0, @ANYBLOB="20000000280e0400280012800b97b5c57e616373656300001800028005000300087b2200d6cf4443a62d5242c0fd947229e32169f560429fbbde596f1b2548bce7a7e2efda14ac0f2d204fe8e9f3cb004401e26ba1e78cb30d20b9f093aac1c88311f156083af0a44666e7fa58ab0d2d44a023bed6dd6dd9d93fcefe475a28e1a80c4377733ea1947290bdea2b"], 0x48}, 0x1, 0x0, 0x0, 0x24008095}, 0x0) 5m27.292515807s ago: executing program 4 (id=6858): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xf000000}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x6, 0x4, 0x8, 0xc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5m27.221089756s ago: executing program 4 (id=6859): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x32}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) sendmsg$NFT_BATCH(r4, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x48}, 0x1, 0x0, 0x0, 0x20000810}, 0x0) r5 = getpid() write$cgroup_pid(r2, &(0x7f0000000880)=r5, 0x12) socket$key(0xf, 0x3, 0x2) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="30000000400007012bbd700000000000017c0000040042800c00018006000600800a00000c0002800800a300", @ANYRES32=r5, @ANYBLOB="c92444ee634f4925b289ac6425b48c8f18d29891136b381a1e5a6f7f4a206657f9e94060097531cb8f0d28f9159d5b366dd3f057b4e1bacca2658cd97d5f3d0733fe398dd8f5d090ffa8e9c66f5e2285b4fb70485f9e3159fb1b4677c5fa050d6cb5d97a593bcf7678bb7639ef8ae97f9a88600a0ca695f7388c33c0dc4f49cafd1f02f2abbf266fb040d71574b93af64543d0a3ee9b194715d0d5996e3eb5582a"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc020) vmsplice(r3, &(0x7f0000000980)=[{&(0x7f0000000500)="ac3b7e78eb3c5de1523b41a8089dfe1564e8a69638031c5ffc529b7fc0e869ff4b9456fa3147824c0a7685cc551ea5239c09ce9f3dee7bdea675e4e3daf14907d1ea778edc82eb7fb272cf8f9ab91ca45e65e0dc07e4ed072374d4d4441d67a4ab9b2ae3a81afc5beaaea5ab2b00281ec5844fc96b6574a5a5c7d2d95cc318d8adad6933053420b522d2c4582f3cf870bd2206b5f055c40d0c0d86737fce9007", 0xa0}, {&(0x7f00000005c0)="9bed0ae9092bab63141a2639461d707ce2d00570fca73b855304c390573b9650552d4f3015c4c05c4ec81f13cdf6ab9fbc72db18075b9ed30a04e3ae0dc6ca95935f85e6489d", 0x46}, {&(0x7f0000000640)="2579475ac94b0914660ad1ebf9013d96c927bdd33fb5b2684622b39c6d927690584f879205c942eeba8b897b74d1cfb91be9688a6b9a3d3018511a0d2f3c2bfc62e64697902c0e6f5dfeef2020eb6a6799", 0x51}, {&(0x7f00000006c0)="fbd9c2e147a1d8fdc4c630133a64bee3f4cfc90b5cf7efcab2c3bfd7ef4b27c1a2d68ab9081baba39c05b919ff9626ae82201282b9", 0x35}, {&(0x7f0000000700)="fe5eb549cc32013c0eba99adfc77581102d717c096c6f5dc4070d2713f976f0818a8a5fb368dfe37c6e59a6969a9bd0868715d680114bb592c6b7aa9eb362f9c92d80f89c8a6b55118b5018f4e08208f5616ba", 0x53}, {&(0x7f0000000780)="1a8a407cf75acb5e1bc022edb971eb245581a1e703539e2ca8ba6de777506a41eae20cff586d893016e6f086b50ab048fffc55399369b39763cc073f790391cf34298919300ca415992c57e3cb651a41cf221b65d44e944f83c107a892ac0865b365aa6e8ce8ef3fc1ca4d", 0x6b}, {&(0x7f00000008c0)="b69cdd8cda61cffc0a764604f1f685d8a64f141682afada1c7e19e04b679bc20cb9e046b1e7247b448bad84106f46cc774ed618ba9486cc3bd247ba7f53884790169967143d91a43ca3b9141c9842a0a6772559e45dd5ad79b7855ff86e7baf1b2e0cec7c6b7ffaff32a16227ae8373fb553325c9da7c1a14d57b0e17c3c46a18569b867f4574e22c4e891194a37833a89f1c57bd6677f6df5c3aec65629f0", 0x9f}], 0x7, 0x1) 5m12.155828663s ago: executing program 32 (id=6859): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x32}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) sendmsg$NFT_BATCH(r4, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x48}, 0x1, 0x0, 0x0, 0x20000810}, 0x0) r5 = getpid() write$cgroup_pid(r2, &(0x7f0000000880)=r5, 0x12) socket$key(0xf, 0x3, 0x2) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="30000000400007012bbd700000000000017c0000040042800c00018006000600800a00000c0002800800a300", @ANYRES32=r5, @ANYBLOB="c92444ee634f4925b289ac6425b48c8f18d29891136b381a1e5a6f7f4a206657f9e94060097531cb8f0d28f9159d5b366dd3f057b4e1bacca2658cd97d5f3d0733fe398dd8f5d090ffa8e9c66f5e2285b4fb70485f9e3159fb1b4677c5fa050d6cb5d97a593bcf7678bb7639ef8ae97f9a88600a0ca695f7388c33c0dc4f49cafd1f02f2abbf266fb040d71574b93af64543d0a3ee9b194715d0d5996e3eb5582a"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc020) vmsplice(r3, &(0x7f0000000980)=[{&(0x7f0000000500)="ac3b7e78eb3c5de1523b41a8089dfe1564e8a69638031c5ffc529b7fc0e869ff4b9456fa3147824c0a7685cc551ea5239c09ce9f3dee7bdea675e4e3daf14907d1ea778edc82eb7fb272cf8f9ab91ca45e65e0dc07e4ed072374d4d4441d67a4ab9b2ae3a81afc5beaaea5ab2b00281ec5844fc96b6574a5a5c7d2d95cc318d8adad6933053420b522d2c4582f3cf870bd2206b5f055c40d0c0d86737fce9007", 0xa0}, {&(0x7f00000005c0)="9bed0ae9092bab63141a2639461d707ce2d00570fca73b855304c390573b9650552d4f3015c4c05c4ec81f13cdf6ab9fbc72db18075b9ed30a04e3ae0dc6ca95935f85e6489d", 0x46}, {&(0x7f0000000640)="2579475ac94b0914660ad1ebf9013d96c927bdd33fb5b2684622b39c6d927690584f879205c942eeba8b897b74d1cfb91be9688a6b9a3d3018511a0d2f3c2bfc62e64697902c0e6f5dfeef2020eb6a6799", 0x51}, {&(0x7f00000006c0)="fbd9c2e147a1d8fdc4c630133a64bee3f4cfc90b5cf7efcab2c3bfd7ef4b27c1a2d68ab9081baba39c05b919ff9626ae82201282b9", 0x35}, {&(0x7f0000000700)="fe5eb549cc32013c0eba99adfc77581102d717c096c6f5dc4070d2713f976f0818a8a5fb368dfe37c6e59a6969a9bd0868715d680114bb592c6b7aa9eb362f9c92d80f89c8a6b55118b5018f4e08208f5616ba", 0x53}, {&(0x7f0000000780)="1a8a407cf75acb5e1bc022edb971eb245581a1e703539e2ca8ba6de777506a41eae20cff586d893016e6f086b50ab048fffc55399369b39763cc073f790391cf34298919300ca415992c57e3cb651a41cf221b65d44e944f83c107a892ac0865b365aa6e8ce8ef3fc1ca4d", 0x6b}, {&(0x7f00000008c0)="b69cdd8cda61cffc0a764604f1f685d8a64f141682afada1c7e19e04b679bc20cb9e046b1e7247b448bad84106f46cc774ed618ba9486cc3bd247ba7f53884790169967143d91a43ca3b9141c9842a0a6772559e45dd5ad79b7855ff86e7baf1b2e0cec7c6b7ffaff32a16227ae8373fb553325c9da7c1a14d57b0e17c3c46a18569b867f4574e22c4e891194a37833a89f1c57bd6677f6df5c3aec65629f0", 0x9f}], 0x7, 0x1) 2.471081679s ago: executing program 2 (id=9969): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x21}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_BITWISE_DREG={0x8}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x108}}, 0x0) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, r1, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @empty}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x9}]}, 0x40}}, 0x800) r2 = socket(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xc, &(0x7f0000000380)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r3}, {}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x14}}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="140100001f00050400000000da5a15e113"], 0x114}], 0x1, 0x0, 0x0, 0x881}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x1ab0429c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r7 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r7, 0x8940, &(0x7f000000a640)={0x0, 0x0}) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000180)={0x800}, 0x8) write(r8, &(0x7f0000000000)="240000001a00110414f9f4070009040080fffffffe110001000000000800040001000000", 0x24) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4, 0x8002}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) sendmsg$NL80211_CMD_SET_WIPHY(r2, &(0x7f00000003c0)={&(0x7f0000000280), 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, r9, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0x10001}, @NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0x7f}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0x58}, @NL80211_ATTR_WIPHY_DYN_ACK={0x4}, @NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0x8}, @NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0x349}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1464}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x1000}]}, 0x50}, 0x1, 0x0, 0x0, 0x44}, 0x4001) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0x13, &(0x7f00000009c0)=@framed={{}, [@printk={@li, {0x3, 0x3, 0x3, 0xa, 0x0, 0xfe00}, {0x5, 0x1, 0xb, 0x1, 0xa, 0x6}, {0x6, 0x0, 0x2}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, @printk={@p, {0x3, 0x0, 0x6, 0xa, 0x1, 0xfff8, 0xa1}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe00}, {}, {}, {0x85, 0x0, 0x0, 0xca}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.546534811s ago: executing program 3 (id=9979): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) socketpair(0x22, 0x800, 0x9, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c0002800500010000"], 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) (async) r3 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r3, 0x29, 0x4e, &(0x7f0000000600)=0x9, 0x4) bind$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00318e", 0x38, 0x3a, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x1, 0x0, 0x4, '\x00', {0x0, 0x6, "000006", 0xda34, 0x3a, 0xff, @rand_addr=' \x01\x00', @empty, [], "ccd151d71f80b0c9"}}}}}}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c000000180001002cbd7000000000000a100000fc02ff000000000008000400", @ANYRES32=r2, @ANYBLOB="0600150008000000100016800c"], 0x3c}}, 0x0) 1.544315336s ago: executing program 3 (id=9980): sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000104010200000000000000000100000108000440000000070500010001"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x4c000) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="0c00028006"], 0x24}}, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) getsockopt$MRT(r3, 0x0, 0xd0, 0x0, &(0x7f0000000080)) (async) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000000)=""/241, &(0x7f0000000100)=0xf1) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0xffffff1f, 0x3, 0xfffefffd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3cc40}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x3}]}}}, @IFLA_MASTER={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4008080) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32=r6, @ANYBLOB="6000508011"], 0x7c}, 0x1, 0x0, 0x0, 0x48d4}, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r7, 0x29, 0x6, &(0x7f0000000180)="10000000000000000100000024000000", 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x4b}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f0000000200)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) (async) unshare(0x46000480) 1.539656405s ago: executing program 0 (id=9981): ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000001480)={{0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x121000, &(0x7f0000000040)={@_ha_fsid={[0xf, 0x5]}, {0x9, 0x4, 0x6, 0x1}}, 0x80000000, &(0x7f0000000080), &(0x7f0000000200)=0x8}, {[0x8, 0xfffffff7, 0x5, 0xfffffff8]}, 0x1, 0x1000, &(0x7f0000000480)=""/4096}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000003c0), 0x3) getsockopt$bt_hci(r1, 0x11a, 0x3, 0x0, &(0x7f0000000000)) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000001500)=0x4, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) r4 = socket$netlink(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000001380)={'veth0\x00', &(0x7f0000001340)=@ethtool_cmd={0x9, 0x1ff, 0xffff38ce, 0x5, 0x9, 0x7f, 0x2, 0x3, 0x3, 0x3, 0x9, 0x2, 0x6, 0xb4, 0x3, 0x6, [0x9, 0x1]}}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000440)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x452c, 0x0, 0x4000, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffdd86}}}}}}}, 0xfdef) syz_emit_ethernet(0x32, &(0x7f0000000500)={@multicast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @multicast1}, {0x3200, 0x88be, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x8, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001700)={r0, 0x0, 0x78, 0xde, &(0x7f0000000280)="edaa3437b953a230d9a739997c58c803b411be1b5ee070bdee15312f92b41b07f50754bd1cbc813d8645e2d2c562642ab1cc6204b592664c1f2a2872045c950603530a998e78d156c85496a9536e1cbb0ecda036ed295f84182f1eb468219821101ca4a940f6120d688b2cef6e3c05864dcbb7168f0b8242", &(0x7f0000000300)=""/222, 0x7, 0x0, 0x9c, 0xf0, &(0x7f0000001540)="83f4d9ecae77f55999dcc4447e8289ddfa2b9c28902592cd65155fa18a0446e6d51185df68a1a00ea0fd773695c48e0845f584a3a7bf163c08717db46ff22c1d5a1cc22af7563ea7233d8f86f7699c293fe7f8feeeef24027a3b80ccb5f838affb631803d1d08b76f033e153f68efd4d625081f1c0295cee0be1dde8b329522e4b18c787064ae690ebc05d90aa2e84042f83628df511fdeb74f9addf", &(0x7f0000001600)="892624b3531a057f6216ec94ccf7dd1ee459b832a8fd56c60dcc856d62d9e7957c147ad4a3f411885449229f703229d2ef790077a6c8ed35c18c6d0ea92083b211f82dc87973b7b9580426c8b50525c35ad6623abd318d424b8391a79abe9e3a67de1b5ca9744a48845ce36dcb6a417e6836279539c5e8f9770bc5ae8a5daa05b5fcfb71a73c6f1f99c81457560bdbee0e55b03769014d15a95e4defaa3ab70b91722649f45b92d79ae0c50896dcdd2e8cfa9a51ae851350a8aa7a95d1e40921320515964052411c2152489b3c0a27b559a07d4d92dfd510138a2bd29f5049efe281c0d982f6cd414fe295cd510124d5", 0x5, 0x0, 0x8}, 0x50) 1.539238433s ago: executing program 1 (id=9982): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"/3432], &(0x7f0000000340)='GPL\x00'}, 0x48) r1 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_int(r1, 0x29, 0x3e, &(0x7f0000000000)=0x2, 0x4) sendto$inet6(r1, &(0x7f0000000080)="800009e92208a1ce", 0x8, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r0, 0x18000000000002a0, 0x10, 0x0, &(0x7f0000000080)="5aee41dea43e63a3f7fb7f1100000000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.538952143s ago: executing program 3 (id=9983): bind$phonet(0xffffffffffffffff, 0x0, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) openat$tun(0xffffffffffffff9c, 0x0, 0x80000, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0xa, 0x3, 0x3a) mmap(&(0x7f000028b000/0x3000)=nil, 0x3000, 0xe, 0x8010, 0xffffffffffffffff, 0x1000) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r0, 0x40786e88, &(0x7f0000000580)={{&(0x7f0000000240)=[{0x7, 0x130, 0x3, {0x4, 0x8}, 0x8, 0x401, 0x1}, {0x20000, 0x0, 0x5, {0x100, 0x9}, 0x6a, 0x4, 0x81}, {0x6, 0x3, 0x10, {0xff, 0x40}, 0x1, 0x9, 0x3}], 0x3, 0x40, 0x0, 0x188}, {&(0x7f0000000300)=[{0x8000, 0xa34}, {0x5, 0xffffffffffffff81}, {0xd, 0x8}, {0xff, 0x9}, {0x7, 0x6}, {0x80000001, 0x3}, {0x2}, {0x0, 0x8}, {0x6, 0x9}], 0x9, 0x10, 0x974e, 0x401}, {&(0x7f00000003c0)=[0x3, 0x3, 0x9], 0x3, 0x8, 0xe6}, {&(0x7f0000000400)=[{0x0, 0xe, 0x9, 0xfffffffffffffb95, 0x6}, {0x4, 0x6, 0x3, 0x9, 0x8}, {0x9, 0x22, 0x10, 0x5, 0x9}, {0x3, 0x2, 0x7, 0x80, 0x5}, {0x4e, 0xd, 0x9, 0x6, 0x9}, {0xd, 0x6e1, 0x9, 0x5, 0x6}, {0x8, 0x0, 0x7fffffffffffffff, 0x4e291ebe, 0xaf}], 0x7, 0x28, 0xed8, 0x8}, {&(0x7f0000000540)=[0x0], 0x1, 0x8, 0x3, 0x2}}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@ipv6_getaddr={0x64, 0x15, 0x1, 0x0, 0x0, {}, [@IFA_RT_PRIORITY={0x8}, @IFA_FLAGS={0x8}, @IFA_ADDRESS={0x14, 0x1, @empty}, @IFA_LOCAL={0x14, 0x2, @empty}, @IFA_CACHEINFO={0x3e}]}, 0x64}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000006a00010500000000fbdbdf25000000000000000008000a000100000049e36c02854131"], 0x20}, 0x1, 0x0, 0x0, 0x804}, 0xc080) 1.505633998s ago: executing program 2 (id=9984): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async, rerun: 32) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) (rerun: 32) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)) pwritev(r1, &(0x7f0000000000)=[{&(0x7f0000000600)="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", 0x133}, {&(0x7f0000000140)="ce903baa49", 0x5}], 0x2, 0x80000001, 0x4dc7a87d) (async, rerun: 32) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) (async, rerun: 32) r2 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r3 = socket(0x1d, 0x2, 0x6) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r3, 0x6a, 0x5, 0x0, &(0x7f0000000000)) ioctl$sock_bt_bnep_BNEPCONNADD(r2, 0x400442c8, &(0x7f00000001c0)=ANY=[@ANYRES32=r0]) 1.365141358s ago: executing program 1 (id=9986): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000400)={0x3c, r3, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x10, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_VALUE={0x4}]}]}, 0x3c}}, 0x0) close(r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000f6ffffff00000000fcffffff8500000030000000180100002020642500000000002020207b1af8ff00000000bfa110000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000a40)={@fallback=r1, r0, 0x2f}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000180)=ANY=[@ANYBLOB="44c228ecffb00d072b8e378266abaa091809f616ee93a184339e2e5e1f1d92b1986fe89617aa0b283b350fe859c96c26f724e2ce475471461992084dada66a536940bfc098173d489adaf41494de5af4945c03b9fcd06355e1c7a3"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0x24, 0x4a, &(0x7f0000000680)="b9ff03076804268c989e14f088a847e089021416e0885a0400000000000081009fa79900", 0x0, 0x400, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x3d) syz_emit_ethernet(0xfdef, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6092c01f00082f00fe8000000000000000000000000000bb00000000000000000000070000000000242065580000000000000021000086dd080088be4305400f10"], 0x0) 1.310863848s ago: executing program 3 (id=9987): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xc}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd708", 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x1, {[@window={0x3, 0x3, 0x96}]}}}}}}}}, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r4 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) sendmsg$NLBL_MGMT_C_PROTOCOLS(r2, 0x0, 0x937df857e6ea6539) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r7], 0x1c}}, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2140, 0x0) listen(r1, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r9, @ANYRES32=r8, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r9, &(0x7f0000000240), &(0x7f00000004c0)=@udp=r0}, 0x20) close(r9) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xd, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000002080)={'batadv_slave_0\x00'}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000002180)={'syztnl0\x00', &(0x7f00000020c0)={'syztnl0\x00', 0x0, 0x8040, 0x20, 0x0, 0x800, {{0x15, 0x4, 0x0, 0x1, 0x54, 0x66, 0x0, 0xf5, 0x4, 0x0, @multicast1, @multicast1, {[@generic={0x7, 0x12, "5b9d5b8d7db1fba3f42ed7216728a688"}, @ssrr={0x89, 0xb, 0x9c, [@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast]}, @lsrr={0x83, 0x23, 0x91, [@empty, @multicast1, @private=0xa010101, @remote, @dev={0xac, 0x14, 0x14, 0x3a}, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x11}]}]}}}}}) sendmsg$inet(r4, &(0x7f0000002280)={&(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10, &(0x7f0000002000), 0x0, &(0x7f00000021c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xfc}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_ttl={{0x14, 0x0, 0x2, 0xb7d0}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}], 0x90}, 0x24010810) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r10], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r11, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.28012404s ago: executing program 0 (id=9988): syz_extract_tcp_res$synack(&(0x7f0000000000)={0x41424344, 0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000200)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x28, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}, @local, {[], {{0x0, 0x4001, r0, 0x41424344, 0x0, 0x0, 0x400000000000016b, 0x2, 0x9, 0x0, 0x0, {[@sack={0x5, 0x12, [0x2, 0x7f, 0x7, 0xfa73]}]}}}}}}}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={0x1c, 0x2e, 0x1, 0x70bd27, 0x0, {0x4}, [@nested={0x4, 0xe}, @typed={0x4, 0x1e}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 1.222836192s ago: executing program 5 (id=9989): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000030085000000a8000000850000007e00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) sendto(0xffffffffffffffff, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async, rerun: 32) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800000056000100000000000000000007020000", @ANYRES32=r2, @ANYBLOB="200001"], 0x38}}, 0x0) (async) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x27}, 0x6) (async) close(r3) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3f}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x8}, @IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x3, 0x3}}, @IFLA_BR_MCAST_SNOOPING={0x5}]}}}]}, 0x50}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000480)={&(0x7f00000000c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)=@gettfilter={0x3c, 0x2e, 0x10, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xffff, 0xfff3}, {0xf, 0xfff2}, {0xfff1, 0x8}}, [{0x8, 0xb, 0x8001}, {0x8, 0xb, 0xff}, {0x8, 0xb, 0xffffffff}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x10) (async) syz_emit_ethernet(0x1f, &(0x7f0000000040)=ANY=[@ANYBLOB="ffffffffce2a0000000000000011424203"], 0x0) r4 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000540), 0x0) ppoll(&(0x7f0000000000)=[{r0, 0x10}, {}], 0x2, &(0x7f0000000040), &(0x7f0000000080)={[0x8001]}, 0x8) (async) recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 1.203679318s ago: executing program 1 (id=9990): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000300)=0x80000005, 0x4) sendmmsg$inet6(r0, &(0x7f0000001b40)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000340)="d5", 0x1}], 0x1}}], 0x1, 0x40) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="140000000400000008000000faffffff00000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000d10982ed76db15db76054c00000000000000"], 0x50) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r3, 0x114, 0x7, &(0x7f0000000ac0)={@tipc=@name={0x1e, 0x2, 0x3, {{0x42}, 0x2}}, {&(0x7f0000000980)=""/234, 0xea}, &(0x7f0000000a80), 0x21}, 0xa0) r4 = socket(0x10, 0x803, 0x2) syz_emit_ethernet(0x46, &(0x7f00000005c0)=ANY=[@ANYBLOB="aaaaaaaaaa88ffffffffffff080045000038000000000001907864010100ac1414aa0b009078032c0000450000000000000000890000ac1e0101ac1414bba3a439743b6fe7a8"], 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000940)=0x8, 0x8) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r6 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0xf1, @loopback, 0x19f49a9}], 0x1c) sendmsg$inet_sctp(r6, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x5}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="e6", 0xffe0}], 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x58, 0x4855}, 0x24000052) close(0x3) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}]}, 0x48}}, 0x8d0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_subtree(r7, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000340)={[{0x2b, 'pids'}, {0x2d, 'rlimit'}]}, 0xe) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newtfilter={0xd8, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xc}, {0xfff2}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0xac, 0x2, [@TCA_BPF_ACT={0x4c}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}]}}]}, 0xd8}}, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r9, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x12, r9, 0xd1383000) ioctl$FS_IOC_RESVSP(r9, 0x40305829, &(0x7f0000000040)={0x1100, 0x2, 0x8, 0x10003}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) 1.149681275s ago: executing program 5 (id=9991): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000880)={0x30, 0x40, 0x200, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0xc, 0x142, 0x0, 0x1, [@typed={0x8, 0xa, 0x0, 0x0, @u32=0x2892348f}]}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x48814}, 0xc000) 994.777529ms ago: executing program 2 (id=9992): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x38, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x1c, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x15, 0x0, 0x0, @uid}, @typed={0x8, 0xa, 0x0, 0x0, @fd}]}, @nested={0x4, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0x48810) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x18, r1, 0x77a5768982e879e3, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000005}, 0x40000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)={0x18, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@nested={0x4, 0x1e}]}, 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x84) 982.621432ms ago: executing program 0 (id=9993): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x16, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x9b}, [@ldst={0x6}]}, 0x0, 0x8000005, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe}, 0x94) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x28, r3, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0x340}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040}, 0xc0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f00000008c0)={0x1, {{0x2, 0x0, @multicast2}}}, 0x88) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 948.325143ms ago: executing program 5 (id=9994): r0 = socket(0x2d, 0x2, 0x0) bind$xdp(r0, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10) connect$qrtr(r0, &(0x7f0000000300)={0x2d, 0x1, 0x4001}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x8000}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x24, 0x12, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb0}}, 0x20050800) 855.760421ms ago: executing program 1 (id=9995): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(aes)\x00'}, 0x58) r2 = bpf$TOKEN_CREATE(0x24, &(0x7f0000001bc0)={0x0, r0}, 0x8) ioctl$OCFS2_IOC_RESVSP64(r2, 0x4030582a, &(0x7f0000001c00)={0x0, 0x2, 0x34a2, 0x5, 0x10, 0x6}) (async) r3 = accept(r1, 0x0, 0x0) recvmsg$kcm(r3, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x20) (async) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000240)={0x0, 0x8000}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f00000002c0)={0x8, 0x5, 0x8000, 0xfffffff9, 0x8, 0xfff, 0x6, 0x2, r4}, &(0x7f0000000740)=0x20) setsockopt$inet6_int(r0, 0x29, 0x5, 0x0, 0x0) (async) r5 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f0000001d00)=@qipcrtr, 0x80, 0x0}, 0x0) (async) sendmsg$kcm(r5, &(0x7f0000001540)={&(0x7f0000000040)=@qipcrtr={0x2a, 0xffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0) (async, rerun: 64) socket(0x1e, 0x2, 0x0) (rerun: 64) r6 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x10, 0x3a}, {0x18, 0x110, 0xe, "025f0dc359"}], 0x28}, 0x0) (async, rerun: 32) r7 = socket$kcm(0x10, 0x2, 0x4) (rerun: 32) sendmsg$kcm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x40, 0x0, 0x1, 0x0, 0x25dfdbfe, {}, [@WGDEVICE_A_PEERS={0x2c, 0x8, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4085}, 0x40000) (async) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="0f539af21094", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "1200b0", 0x38, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x4, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "277382", 0x0, 0x2c, 0x0, @private1, @rand_addr=' \x01\x00', [@srh={0x2c, 0x0, 0x4, 0x0, 0x3, 0x0, 0x365}]}}}}}}}, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100"], 0x64}}, 0x0) (async) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCADDRT(r9, 0x890b, &(0x7f0000000000)={0x0, {0x2, 0x100, @empty}, {0x2, 0x4, @dev={0xac, 0x14, 0x14, 0xff}}, {0x2, 0x0, @empty}, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x4}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) (async) recvmmsg(r8, &(0x7f0000001b00)=[{{&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000780)=[{&(0x7f00000001c0)=""/16, 0x10}, {&(0x7f0000000200)=""/23, 0x17}, {&(0x7f0000000340)=""/199, 0xc7}, {&(0x7f0000000440)=""/52, 0x34}, {&(0x7f0000000480)=""/121, 0x79}, {&(0x7f0000000500)=""/18, 0x12}, {&(0x7f0000000540)=""/228, 0xe4}, {&(0x7f0000000640)=""/63, 0x3f}, {&(0x7f0000000680)=""/172, 0xac}, {&(0x7f0000000740)}], 0xa, &(0x7f0000000840)=""/23, 0x17}, 0xff1}, {{&(0x7f0000000880)=@l2tp={0x2, 0x0, @multicast1}, 0x80, &(0x7f00000019c0)=[{&(0x7f0000000900)=""/144, 0x90}, {&(0x7f00000009c0)=""/4096, 0x1000}], 0x2, &(0x7f0000001a00)=""/238, 0xee}, 0x7}], 0x2, 0x20, &(0x7f0000001b80)={0x0, 0x989680}) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c000000180001002cbd7000000000000a100000fc02ff000000000008000400", @ANYRES32=r10, @ANYBLOB="0600150008000000100016800c"], 0x3c}}, 0x0) 748.62181ms ago: executing program 2 (id=9996): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) (async) recvmmsg(r0, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/152, 0x98}, {&(0x7f0000001340)=""/4094, 0xffe}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000200)=""/144, 0x90}], 0x4}, 0x1}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r2 = accept$packet(0xffffffffffffffff, &(0x7f0000003dc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000003e40)=0x14) (rerun: 64) accept$packet(r2, &(0x7f0000004280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000004380)=0x14) (async, rerun: 32) getsockname$packet(r2, &(0x7f0000003e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000002880)=0xfffffffffffffe94) (async, rerun: 32) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="380000004800030000000000000000000a000000", @ANYRES32, @ANYBLOB="000000001400010000000000000000000000000000800000080002"], 0x38}}, 0x0) (async, rerun: 32) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x58, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x4}, @IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x9, 0x3}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x58}}, 0x8000) (async, rerun: 32) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000002700), 0x2) (async) sendmsg$netlink(r4, &(0x7f00000068c0)={0x0, 0x0, &(0x7f0000006800)=[{&(0x7f0000003ec0)={0x20, 0x1e, 0x1, 0x70bd2a, 0x25dfdbfd, "", [@typed={0x8, 0x13a, 0x0, 0x0, @ipv4=@loopback}, @typed={0x8, 0x8a, 0x0, 0x0, @uid=0xee00}]}, 0x20}], 0x1, 0x0, 0x0, 0x24000001}, 0x20001020) (async) bind$bt_l2cap(0xffffffffffffffff, &(0x7f00000026c0)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3ff}, 0xe) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000002740)={0x5, 0xfec, 0xff, 0x7, 0x4, 0xe24}) sendmmsg(r4, &(0x7f0000004140)=[{{&(0x7f0000000000)=@pptp={0x18, 0x2, {0x2, @broadcast}}, 0x80, &(0x7f0000000100), 0x0, &(0x7f0000000140)=[{0xb8, 0x6, 0xffffffff, "24041db433a15e7bca33903eede588f6a5fc0c8ac5e7f79212501b4a02098f0e1b05a04e35a7e0066ee22ac9a0246109828e5e5c0d115633063da786c08ba250cc8707082259fbe189f103a769c5e534e4ed9d447e2232f9b3a10eadaba4c15d978f19448a5f65893c4e3afa34c3d079541dd167f10394f187740c5ba18392c0b2e1f19a7eb6fb8b546af306606c6e409f8b13d668ff8263e41ba9f570481932991e1d"}, {0x80, 0x119, 0x5, "de7db2483487d6485af16050f2d595db3980c2b760883683a8ae990bdafb08108dcbe2866f0e02356e89683a48495fc9d872b08f2c5753428db58f091d90d8fa55d0de1a469912d676ed346b3e008a51d1c86a16545d6b3877b771ec301c10e67dc2ad8b01fb80cc95257876e6"}, {0x88, 0x10a, 0x2, "e03fda14a9afe6eeab469db3df4217e833d09ba6e4c34e3da15e26cd6000d43dc0083ef66ee12ca142de8eaf8c68a869549e9c1edd6d462daa712272df3c7dda3c6cb3cbeb91591712a0e6eadc7dc8988f9f6af13a1f3b21a026ea8da77fbbc11cb407feb8df34620d1a1fbd3516dbc1108b023884bf0b"}], 0x1c0}}, {{&(0x7f0000000300)=@ieee802154={0x24, @short={0x2, 0x0, 0xaaa3}}, 0x80, &(0x7f00000014c0)=[{&(0x7f0000000380)="ba1f4fcc23342173da9087849d5978d21def9bdecf56f42817129d763def4c8dee0275d6f85bf7224f51f778ca9ef3f173173b3e38835a8f00ee61f5d92d9c1a7467e3a80ee0693e1cc4fc91dee72b572bf9a3f790b26f7a05d99f9e35704964e1d1a7e459be50bb317ec2885830deca87bfc9cada577b2a4197741205ed2741f41b8e16805ed0f153b803f592e0bfd46ad944f7a11edfc6c06ee5c62fed5d3369be7c72858dc4a43428a30753bb6cb4bf714082b2b4aa1cdc0bb31a67526eab33133268c86eecc742c233fec51b06dc5b20a2af02ef7dcbfe4070a5d9d464e8db4502306d1b", 0xe6}, {&(0x7f0000000480)="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", 0x1000}, {&(0x7f0000001480)="0f8d482873f70c6c4126b2bff673a2b3f745812776f2b603d94bdc58346b5f23ae831a6e0a230623437b2f53df254bf2fc", 0x31}], 0x3, &(0x7f00000043c0)=[{0x1010, 0x10c, 0xd, "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"}, {0x80, 0x115, 0x1, "96cf5506cc2a2b3e007b9673bb53359db29d5cee6705b6db46db6ff0adf5f945982429277fdb08fc3f6de0983875543df68e8e508b398aef35dadccd603c2952ed5d29db20af2a1344a90c1a051683dd93ee82b8f99d0e3d3ae982b56a5a19bfe1b2dc0c6892c8b63fc3"}, {0x40, 0x110, 0x8001, "ce0656b55860c589e7fb1c3e67695e174a881570accfe917646c47003144d17173275803cf04d2247e89c9fde8490000"}, {0x30, 0x119, 0x4, "54bd97a4eefda754f4d0d5b3ae73b9147c4dd52e45457c5797efbf7d"}, {0xc0, 0x115, 0x80, "e7e9153de31f1f3d53bf6e9168bd88fef8e7e9db2b23cc57c320a06f0356baf99c4103325a211ebeea0a733b25376dea09ca768507d067ae99c3eb7f23ee76b34394bccd7f550c57912931f4bd4b68d9eba8c1a57f00e19034c58f276013d21d798759fabcfbe2e5348783b632471138367332d47a3aa9e92d1f9e961c7e14fc025355b3e9c63e3367f093149aa7be96be53333d77112341df16ad65262d5db26d18f13dc22dde2e0f26f7d713"}], 0x11c0}}, {{0x0, 0x0, &(0x7f00000026c0), 0x0, &(0x7f0000002800)=[{0x80, 0x88, 0x101, "7e53eec699ec0abdfe5df5d163c7e2e142b05f38893c741e6e6ae6de5467870474895ce15cd8f582698d0f9de32c7c3e116b8208398614474b06d53d7b6eb3e098475ed7eeff7d2de24a74b3a450ad29c3a3f1adf7a5232b6596d50840b3b1cab1605403db5843a33e4e81b45db3"}], 0x80}}, {{&(0x7f0000002780)=@pptp={0x18, 0x2, {0x2, @loopback}}, 0x80, &(0x7f0000001500)=[{&(0x7f00000042c0)="12ed9a6b2bb515b2b84742b77485af0a65e4802cb966fd7dc20e010ec1dc8cb0d2477071eac764744f412b00e772488903de3c15952de93aaad57785d357b2fc31e4be00c01117b81c439caf9684ce73c715e840a580c563c9e088f5af1d0be1e8a16b6e84d6beca0dcc17ef6b0b55ade1bca01905a2b5a3db1e1c4533c62336457364e1bf37505c915cec1a6dd47f9764e1a2ceba7d40", 0x97}, {&(0x7f00000028c0)="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", 0x1000}, {&(0x7f00000038c0)="d6e0dba6d3acdef1bf35e76c1cdf1eb6d195ce049e89b9f0917bc3f45df084461d352b104339cb4353872f3ae267f4c97f4e8a0a24da1f924e9222633e6af836ad30d2a8b79d65a7650e5a16fefc29ae583ea96e8a71a515749527b5", 0x5c}, {&(0x7f0000003940)="9fd96c6f158b5bab7e5edc46a700d85707d3fb66d3c498629fbb5638b229c3481018dc98e114d5", 0x27}, {&(0x7f0000003980)="827420de6bdac77d34eedf0eb31900a68f321feb49fa73fa1118d75fc80672987d6541f9c9e4b3b8367f5b84059c0f366a71fc5415cb14a5e50be11a8ca3dc477c006f84bca063c0e0a9a793be1455ef0e6266b5b242e3458675cfe42364e8f5c5e8fe2dc57d72d8eb848c147619930b568f99ab8f8402e96255639d15786de85241b7c3b9100c9f3e7b00"/153, 0x99}, {&(0x7f0000003a40)="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", 0xfa}, {&(0x7f0000003b40)="90fce30c035c9e2568e63e0f597ac77df5b393e41be95ff70ae1a0dc36c1d575b5b7aa2c9a969c7a3d784b8b24a4dba0f39f03c99f3fdeab72ac7815ff19ab8194465968a734f1f65b65a17514778c9a6f4d09e4d0b9fabf2dc45e5a541f7bdd1feea810e517209c18c468d4b3d100c14ddd565b758347e252f8c1039541f34168f49572479816c7cb", 0x89}, {&(0x7f0000003c00)="bda6e8adc2e66b051d8288797e4fed7433e61afb4336287e638f7a3ef8a50c946e593fd392fd", 0x26}, {&(0x7f00000015c0)="5aff816d3b351e410fee85cb28e9f3a53e3b9489062c0bf53c5631de1065493103afc389447060c35a9676b0809245dcb985c952e49bcd", 0x37}], 0x9}}, {{&(0x7f0000003d40)=@in6={0xa, 0x4e24, 0x2, @empty, 0x832}, 0x80, &(0x7f0000003e00)=[{&(0x7f0000003dc0)}], 0x1, &(0x7f0000003f00)=[{0x68, 0x104, 0x5, "7f5d0eaa2487a2cf3a236f11b4c7e9d4294cc5acbc248322bd37a459d81c92225f7f9ba803f5be630f2868b46ab896d5f6cf785702307bff616f0e1ea9bfc650f975a8ba1575ae1553f219046a6968a3367fd2"}, {0x38, 0x10d, 0x1, "b0c206b141ea1158ec923cb72659172f74fb0edf7ced96309b05ce3b2f67eef3ab092d5787608922"}, {0x30, 0x10a, 0x1, "bbefe7555deebae5f5c56a88d8ec17d06d5d40d88e5e46a49c"}, {0xb0, 0x108, 0x7b, "c9e2b1cf2b7ed8c81cfb11f48fe986167ab5f990b22b3e18733c83cd734ad6d77d0d508840448465c4e3d40a2afc8f4b2112321db68f36c50a19f3b78d97b696089bf4942c8227b979056b0747c58612803b73554a4fd24efee1e5eab6351074e7272d1343394f1ee9aa8e802ee3fd15e75e886f8089879a9ba804471ac97e51695676be41a0f280ec45dcf69e515b8ca1b7baeb000b02b6c223"}, {0x60, 0x117, 0x9758, "8452022d89b462794da14f5a537d10554b58a32c7e625de3113717571af81af9143bed8bef9a0e459b1f79bcc3ad475c533e1e4ee3c62b97c56eaa2481e436d2984d7ed8e9b445b0b10e36c314b3"}, {0x40, 0x88, 0x1000, "4665ead5a62956f914d99db29a7b2f0bd6f2381f134a0fb411d8bfe23badd4209ea65299974336f5c5fd4bc2374b0a"}], 0x220}}], 0x5, 0x55) 717.124807ms ago: executing program 5 (id=9997): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x6, &(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xd1, &(0x7f0000000180)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0xbd, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b28, &(0x7f0000000000)={'wlan1\x00'}) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000004c0)={r1}, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x84, 0x30, 0xffff, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x2}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x84}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000480)=@gettaction={0x30, 0x32, 0x301, 0x70bd2b, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x0) 655.432559ms ago: executing program 0 (id=9998): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000e24400090004000000fddbdf2502000000"], 0x14}}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000e24400090004000000fddbdf2502000000"], 0x14}}, 0x0) (async) 601.315976ms ago: executing program 1 (id=9999): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000b80)=@newtaction={0x6c, 0x30, 0x109, 0x0, 0x0, {}, [{0x58, 0x1, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x10}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @rand_addr, @private}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001240)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x91ee, 0x9, 0x10000000, 0x0, 0x7}, 0x9, 0x8}, [{0xd6c, 0x9, 0x8, 0xff, 0x10001, 0x9}, {0x7f, 0x2, 0x6, 0x7fffffff, 0x1, 0x7}, {0x6, 0xb37b, 0x6, 0xb38, 0x0, 0xd0cb}, {0x4, 0x3, 0x2, 0xa318, 0x80000000, 0x1}, {0x9, 0xfffffff9, 0x2, 0x4, 0x6, 0x4}, {0x8000, 0x3, 0xe, 0x4, 0xcee8000, 0x1}, {0x9, 0x8, 0xfffffffa, 0x6, 0xa0fd, 0x8}, {0xffffffff, 0xe648, 0x7c0c3ffe, 0x8, 0x0, 0x5}, {0x3, 0x3, 0x9, 0xa}, {0x9, 0x6, 0xb6, 0x7fff, 0x5, 0x7}, {0x304, 0x66, 0x3, 0x101, 0x3, 0x9}, {0xff, 0x1, 0xe, 0x800, 0x3, 0x56}, {0xca, 0x4, 0x9, 0xfffffff8, 0x7, 0x7921bcf1}, {0x1, 0xff, 0x5, 0x80000000, 0xaae6, 0x9}, {0x4, 0x3, 0xa9, 0x8, 0x9, 0x4}, {0x5, 0x1000, 0x200, 0x2, 0x8, 0x6}, {0x3d648283, 0x2, 0x5, 0x9, 0x10000, 0x6}, {0x3, 0xa06, 0x1, 0x1, 0x9, 0x260ba674}, {0x6, 0xc5, 0x8d3, 0x9, 0x3, 0xffffffbc}, {0x3, 0x8, 0x3, 0x5, 0x0, 0xc80}, {0x3, 0xffffffff, 0xffff, 0x2, 0x9}, {0xfffffffa, 0x6, 0x77f, 0x160c, 0x3}, {0x1ff, 0x8, 0x0, 0x6, 0xb, 0x400}, {0x3ff, 0x9, 0xffff8001, 0x100, 0x3, 0x47}, {0x529, 0x8, 0x7, 0xffff, 0xc0a, 0xbad}, {0x8, 0x7, 0x884, 0x100, 0x9}, {0x8, 0x6, 0x6, 0xc, 0x3}, {0x4, 0x40, 0xcd6c, 0x71f, 0x8000, 0x6}, {0x5, 0x30a3, 0xa, 0x200, 0xfff, 0x9}, {0x3, 0x1, 0x5, 0x8, 0x2, 0x81}, {0x81, 0x0, 0x0, 0x49f11005, 0x9, 0x7fffffff}, {0x9, 0x0, 0x5c, 0x3bad, 0x8, 0x480}, {0xe, 0x58000000, 0x9, 0x3, 0x1ff, 0xaa2}, {0x800, 0xd1, 0x0, 0x3e, 0x0, 0x5}, {0x8, 0x0, 0x200, 0xfffffc00, 0x100, 0x10001}, {0x6, 0x7, 0x0, 0x101, 0x6, 0x81}, {0x8, 0x2, 0x200, 0x3, 0x4, 0x101}, {0xad, 0xa, 0x401, 0x0, 0x9, 0xff000000}, {0x8, 0x5, 0xd, 0x24, 0xc, 0x1}, {0xfffffff8, 0x9, 0x1000, 0xc, 0xea, 0x4}, {0x3, 0x0, 0x8, 0x1, 0x1, 0xffffff32}, {0x6, 0x5, 0xd7c9, 0x0, 0x5, 0x2}, {0xffff, 0x1, 0x5, 0x2, 0x7, 0x7}, {0x5, 0x2, 0x0, 0x401, 0x6, 0x400001}, {0x8000, 0x2, 0x4, 0x6, 0xfffffff8, 0x5}, {0x6, 0x0, 0x3, 0x5, 0x0, 0xffff8000}, {0x1, 0x0, 0x0, 0x9, 0x0, 0x4}, {0x2, 0x6, 0x2, 0x7, 0x9}, {0x0, 0xfffffffd, 0x756183d, 0xfffff801, 0x5, 0x8}, {0x7, 0xa, 0xfffffffc, 0x80000001, 0x407b, 0x2}, {0x7, 0x9, 0xee, 0x800, 0x1000}, {0x10, 0x5, 0x57a2a808, 0x80000000, 0x7fff, 0x5}, {0x729, 0x25, 0x6, 0x6, 0x8, 0x4}, {0x2, 0x406, 0xc209, 0x8, 0x0, 0xfffffffc}, {0x1, 0x7, 0x8, 0xfffffffb, 0x80000000, 0x4}, {0x1, 0x5, 0x8, 0x8000, 0x1, 0x7f}, {0x8001, 0xf42, 0x1, 0x3, 0x5, 0x430}, {0x2, 0xfffffff4, 0x5, 0xcca00a6d, 0xc8, 0x7}, {0x6, 0x7, 0x9, 0x8, 0x5, 0x5}, {0x5, 0x8000000, 0x7, 0x5, 0x401, 0x9}, {0x1, 0x6, 0x1ff, 0xa8de, 0x0, 0x807b}, {0x0, 0x80000000, 0x7fff, 0x5, 0x2, 0x7}, {0xe, 0xfffffffc, 0x7fffffff, 0x7, 0x5, 0x1ff}, {0x81, 0xaa, 0x1e, 0x9, 0x14fc, 0x8}, {0x9, 0xffffffff, 0x40, 0x6, 0x13b, 0xeacd}, {0x100020, 0xff, 0x6, 0x81, 0x0, 0x6}, {0x2, 0xe, 0xb, 0x0, 0x6, 0x2}, {0x8, 0x3, 0x5, 0x4, 0x4, 0x2}, {0x84, 0x3ff, 0x3d0c, 0x1, 0x8, 0x2}, {0x4, 0x4, 0xb85c, 0x1, 0x7, 0x6}, {0x3, 0xc6, 0x0, 0x1, 0x2, 0x3}, {0x7, 0x2, 0x8000, 0x2, 0x7fffffff, 0x79}, {0x6, 0x80000000, 0xfffffffe, 0x7, 0x3, 0x8}, {0xae, 0x3, 0x600, 0x9, 0xff, 0x3}, {0x1, 0xed5, 0x6de6, 0x10, 0x380000, 0x789}, {0x4, 0x7074, 0x32b, 0x3, 0xf}, {0x1ff, 0x7, 0x1, 0x96, 0x1, 0x9}, {0x9, 0x3, 0x0, 0xfff, 0x1ff, 0x8}, {0x1, 0x7d, 0x8, 0x7, 0x2, 0x3}, {0xfffff001, 0x9, 0x65d, 0x3c10, 0x7, 0x53}, {0x7, 0x0, 0x7, 0x101, 0x9, 0x1}, {0x7, 0x9, 0xd, 0x6, 0xfffffff7, 0x827}, {0x113, 0xfffffffe, 0x2, 0x400, 0x28, 0x81}, {0xfff, 0x6, 0x7, 0x40, 0x6, 0x10}, {0xc, 0x9, 0x8001, 0x0, 0x9, 0x6}, {0x5, 0x11b9, 0x401, 0x4, 0x2, 0x6}, {0x9, 0x100, 0x400, 0x9497, 0x101, 0x84b7}, {0xb4, 0xb85, 0x7, 0x3, 0x51, 0x5}, {0x2, 0x4, 0x5, 0xf, 0xf, 0x1283}, {0xfffffff8, 0x1c0000, 0x2, 0x10001, 0x1, 0x6}, {0x61, 0x80, 0xffffffff, 0x10000, 0x5, 0x8}, {0x8, 0x6, 0xc53, 0x80000000, 0x7, 0x5}, {0x0, 0x6, 0x5, 0x2, 0xdc, 0x6}, {0x0, 0xfffffffc, 0x2000101, 0x6cb685f2, 0x7, 0x1}, {0x0, 0xc3, 0x4, 0x5, 0x0, 0x9}, {0x8, 0xf7b5, 0x5, 0x5, 0x9, 0x7}, {0x1, 0x67f, 0x5689f935, 0x8, 0x6db, 0xff}, {0x1, 0x400, 0x3, 0x1e1, 0xa, 0x80000000}, {0xea, 0x5, 0x8, 0x5, 0x7fff, 0x1000}, {0x6, 0x5, 0x7, 0x3, 0x6, 0x80000000}, {0x9, 0x6, 0x7, 0x1, 0x9, 0x100}, {0x7202, 0x4, 0x5024, 0xf9, 0x6, 0x40}, {0x5, 0x10, 0x4, 0x5, 0xd, 0x8}, {0x1537, 0x101, 0x6, 0x1, 0x3, 0x6b}, {0x69, 0x400, 0x3, 0x81, 0xc6, 0x7fff}, {0x10001, 0x1, 0x3, 0x7fffffff, 0x7, 0x10001}, {0xcdc, 0x1, 0x7, 0x0, 0x8}, {0x1, 0x168dccf, 0x3, 0x3, 0x7fff, 0x6}, {0x3, 0x4, 0x7fff, 0x7, 0xaf68, 0x403}, {0x9, 0x0, 0x7, 0x6, 0x6, 0x80000001}, {0x5, 0x200, 0x800, 0xd00000, 0x3, 0x8}, {0x8001, 0x5d, 0xffffffff, 0x42e, 0x8, 0x55}, {0x9, 0x89, 0x6d, 0x460ebb44, 0x2, 0x2}, {0x951, 0x9, 0x3, 0x8, 0x1, 0x2}, {0x3, 0x8, 0x627b, 0x5, 0x6, 0x5}, {0x6, 0x803, 0x9fbc, 0x4, 0x1, 0x2}, {0x401, 0x6, 0x32d84255, 0xfa, 0x27f, 0x8000}, {0x0, 0x6, 0x3, 0xc, 0x8000, 0x40}, {0x5, 0x4, 0x1, 0x3, 0x0, 0x5}, {0x7f, 0x4, 0x7f, 0x10001, 0xff, 0x8}, {0x7, 0x96a3, 0x2, 0xd7, 0x6, 0x200}, {0x1, 0x5, 0x5, 0x37a3, 0x7, 0x8}, {0x81, 0x4000004, 0xd, 0xffffffff, 0x200, 0x4}, {0x4, 0x3ff, 0x7, 0x4, 0x4, 0x4}, {0x1, 0xffffffa4, 0x9, 0x2, 0xffffffff}, {0xd, 0x0, 0x3ff, 0x9, 0x8, 0x48}, {0x2, 0x10001, 0x9, 0x2, 0x8, 0x9}, {0xf, 0x1, 0x8, 0x101, 0xfffffffd, 0xc88}], [{}, {0x5}, {0x0, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x3}, {}, {0x5}, {0x3}, {0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x2}, {0x8cd778652b20be70, 0x1}, {0x1, 0x1}, {0x1}, {0x2}, {0x4}, {0x1, 0x1}, {0x5, 0x3}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x6}, {0x4}, {0x4, 0x1}, {0x4}, {0xa4f33433e7b7e23d, 0x1}, {0x4}, {0x0, 0x1}, {0x6}, {0x2, 0xa5b0c5c50171756a}, {0x5}, {}, {0x4}, {0x4, 0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x4}, {0x4}, {0x5, 0x1}, {0x1}, {0x2}, {0x3, 0x1}, {0x4}, {0x5}, {0x1, 0x1}, {0x5}, {0x2}, {0x1, 0x1}, {0x6}, {0x1}, {0x5, 0x1}, {0x5}, {0x2}, {}, {0x0, 0x1}, {0x3}, {0x5}, {0x3, 0x1}, {0x5}, {0x4, 0x1}, {0x2, 0x1}, {0x1}, {0x0, 0x1}, {0x2}, {0x5}, {0x2}, {0x5}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x3, 0x1}, {0x1}, {0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x1}, {0x1}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {}, {0x3, 0x1}, {0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3}, {0x1}, {0x1, 0x1}, {0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x5}, {0x3, 0x1}, {0x2}, {0x4, 0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) r2 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="20000000140001000000000000000000020000ff", @ANYRES32, @ANYBLOB="08000200ac1414aa"], 0x20}}, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x18, 0x1402, 0x1, 0x70fd29, 0x25dfdc02, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000801}, 0x4800) r3 = socket$nl_rdma(0x10, 0x3, 0x14) syz_emit_ethernet(0x34e, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0x7}, {0xffff, 0xffff}, {0x7, 0x10}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4404c}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newqdisc={0x44, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r11, {0x7}, {0xffff, 0xffff}, {0x7, 0x10}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x0, 0x5, 0x1ff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4404c}, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000001d14d9"], 0x38}, 0x1, 0x0, 0x0, 0x20004085}, 0x4004080) ioctl$AUTOFS_IOC_EXPIRE(r2, 0x810c9365, &(0x7f0000000040)={{0xfffffffa, 0x5}, 0x100, './file0\x00'}) 548.472718ms ago: executing program 5 (id=10000): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r1, &(0x7f0000000200), 0x12) bind$x25(r0, &(0x7f0000000080), 0x12) (async) r2 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r2, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) (async) connect$llc(r2, &(0x7f0000000240)={0x1a, 0x302, 0x0, 0x6, 0x0, 0x0, @broadcast}, 0x10) listen(r2, 0x9) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet_sctp(0x2, 0x5, 0x84) (async, rerun: 32) r5 = socket$inet(0xa, 0x801, 0x84) (async, rerun: 32) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) (async, rerun: 32) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000005e40), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r8, &(0x7f0000005f00)={&(0x7f0000005e00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000005ec0)={&(0x7f0000005e80)={0x24, r9, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f00000005c0)={r7, 0x6}, 0x8) (async) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f00000000c0)={r7, 0x80000000}, 0x8) (async) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r11 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCDARP(r11, 0x8953, &(0x7f0000000000)={{0x2, 0xffff, @broadcast}, {0x0, @local}, 0x38, {0x2, 0x0, @rand_addr=0x64010101}, 'veth0\x00'}) (async, rerun: 64) sendmsg$netlink(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYRES16=r10], 0x114}], 0x1, 0x0, 0x0, 0x6040080}, 0x48000) (async, rerun: 64) sendmmsg$inet6(r3, &(0x7f0000003500)=[{{&(0x7f0000000140)={0xa, 0x0, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4}, 0x1c, &(0x7f00000005c0)=[{&(0x7f0000000240)="81", 0x1}], 0x1}}, {{&(0x7f0000000080)={0xa, 0x4e22, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000300)="8c", 0x1}], 0x1}}], 0x2, 0x4004851) socket$nl_generic(0x10, 0x3, 0x10) (async) setsockopt(r3, 0x84, 0x11, &(0x7f0000000040)="020000000980ffff", 0x8) 467.439901ms ago: executing program 0 (id=10001): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000080), &(0x7f0000000100)=0x4) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000180)={0x0, @isdn={0x22, 0x0, 0x7, 0xda, 0x8}, @rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, @phonet={0x23, 0xe4, 0x1, 0x5f}, 0x8001, 0x0, 0x0, 0x0, 0x7ff, &(0x7f0000000140)='erspan0\x00', 0x9, 0x2}) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@assoc={0x18, 0x117, 0x4, 0x10}], 0x18, 0x40040}], 0x1, 0x8040) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r3) 465.534476ms ago: executing program 2 (id=10002): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="5800000010ced9ff000300000000000000a5047a", @ANYRES32=0x0, @ANYBLOB="0000000008440000300012800b00010067656e657665000020000280140007000000000000000000000000000000000105000c000100000008000a00", @ANYRES32, @ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 303.319022ms ago: executing program 3 (id=10003): r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040)=0x5, 0x4) sendto$inet6(r0, &(0x7f0000000040), 0x3000, 0x0, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x38}}, 0x20000000) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="940000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0300000000000000640012800b0001006970366772650000540002800800150061db0a0008000100", @ANYRES32, @ANYBLOB="14000700fe8000000000000000000000000000aa08000d005fe1ffff060010004e22000008000500200c000014000600fc"], 0x94}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000a00}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_delroute={0x1c, 0x19, 0x400, 0x70bd28, 0x25dfdbff, {0x2, 0x80, 0x4, 0xf, 0xfc, 0x0, 0xc8, 0x0, 0x400}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x8084) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00M\x00'/28], 0x50) r5 = gettid() sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4400000010000304f9fff2ffbedbdf2500007400", @ANYRES32=r4, @ANYBLOB="089805000750050008001300", @ANYRES32=r5], 0x44}, 0x1, 0x0, 0x0, 0x44882}, 0x4040010) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write(r6, &(0x7f0000000080)="29000300010003", 0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000380)={0x0}, &(0x7f00000003c0)=0xc) syz_open_procfs$namespace(r8, &(0x7f0000001780)='ns/ipc\x00') getpid() sendmmsg$unix(r7, &(0x7f0000001b00)=[{{0x0, 0xfffffffffffffed6, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {r8, 0x0, 0xee00}}}], 0x20, 0x4044014}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001bc0), 0x58, 0x800}}], 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000380)={0x0}, &(0x7f00000003c0)=0xc) syz_open_procfs$namespace(r10, &(0x7f0000001780)='ns/ipc\x00') r11 = socket$l2tp6(0xa, 0x2, 0x73) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="8500000031000000760000000000000027000000000004009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x23) sendmsg$NL80211_CMD_GET_POWER_SAVE(r2, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x20, r12, 0x8, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x10001, 0x55}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x50}, 0x80) bind$l2tp6(r11, &(0x7f00000001c0)={0xa, 0x0, 0x0, @empty}, 0x20) 263.812686ms ago: executing program 5 (id=10004): r0 = socket$igmp6(0xa, 0x3, 0x2) sendmsg(r0, &(0x7f0000000300)={&(0x7f0000000000)=@rc={0x1f, @none, 0x4}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000080)="85e55e5f00da86388c5885f2f1fd", 0xe}, {&(0x7f00000000c0)="654352dccaa217b93205bf8310a9819c9591b45c790f68e673a39c690b7cd36267a80bdeea27f2acb0d017d01fe3d625f76c79e817e8df62b1030abe7e4db5ffed102e33b0bcff7a20c276db1a87d7f155d4cfff6372038eda9b082dadcd9462e457b9f49874c7cdef99c34a4d8cb5b72365ea5df0061a02d0b84b9cdfc35ac2b3c6970798de5f3b52d31c201e8805a9310652eab5c8dfebbe4c1b6d2feb050284341afa7d908ef93b0e4885a37efd4db82c09b8c9cf8e511e2ad1f6c9da", 0xbe}], 0x2, &(0x7f00000001c0)=[{0x18, 0x104, 0x7, "618b867a34"}, {0xe0, 0x4cb40e77c9c18df, 0x7, "9f0384d32aabe92c741836fbc57fb28f989185fa0a69d1a63bf0ef88cf192d204e840d398c213d6e5046a5ba4690d92026a8db2e0c55b909f6f9d7ca7f66bd9eed60df0edd38683077f48ab3a4a3d2cc1b7e7058a77d5e93a9ef2ae9fd3cd3b12eae2c57d6e50a13ee9e655adf3c19eae1ec032c25ff14444e1742c0f8a93d143c44e7c116772d6bd27bd37115566ed5f81aa187461455e4415ca1831dd04a65404ef0b05034b9607ce09f336a868e156ffddb109534bb35ada422ef58e202c80b0f79400bd0e2d20a2126ff63fe91"}, {0x18, 0x116, 0x0, "e702da15"}], 0x110}, 0x800) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000400)={'erspan0\x00', &(0x7f0000000340)={'tunl0\x00', 0x0, 0x700, 0x40, 0x0, 0x6, {{0x27, 0x4, 0x2, 0x9, 0x9c, 0x65, 0x0, 0x9, 0x29, 0x0, @rand_addr=0x64010101, @local, {[@rr={0x7, 0x7, 0x4e, [@rand_addr=0x64010102]}, @cipso={0x86, 0x52, 0x3, [{0x1, 0x2}, {0x7, 0x10, "acf20776e45c280ccfcb3e655ccb"}, {0x0, 0xc, "949fddd2e9c132e46558"}, {0x6, 0x2}, {0x4, 0x9, "127161261e5ba8"}, {0x7, 0xe, "c9811b7c106dd386752c25d9"}, {0x1, 0xe, "202e7b29c59521cc64e055de"}, {0x1, 0x7, "0118fd25b7"}]}, @timestamp_addr={0x44, 0x2c, 0xc3, 0x1, 0x7, [{@loopback, 0x4}, {@private=0xa010100, 0x7fffffff}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}, {@remote, 0x8}, {@local, 0x5}]}, @noop]}}}}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000004c0)={'syztnl0\x00', &(0x7f0000000440)={'syztnl1\x00', r2, 0x2f, 0xf, 0x6, 0x200, 0x40, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote, 0x8, 0x700, 0x1, 0x5}}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000500)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000700)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000740)={"a2a759f36798368e9103c697504c1926", r3, r4, {0x3, 0x2}, {0x10000, 0x1}, 0x7f, [0x6, 0x4, 0x6, 0x4, 0x1, 0x3, 0x4, 0x10, 0x7fffffff, 0x8, 0xd8, 0xf6, 0x1, 0x9, 0x2, 0x8]}) recvmsg(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000840)=""/124, 0x7c}, {&(0x7f00000008c0)=""/236, 0xec}, {&(0x7f00000009c0)=""/23, 0x17}], 0x3, &(0x7f0000000a40)=""/71, 0x47}, 0x10000) ioctl$BTRFS_IOC_SPACE_INFO(r1, 0xc0109414, &(0x7f0000000b00)={0x7dd, 0x2, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) setsockopt$MRT6_TABLE(r0, 0x29, 0xcf, &(0x7f000000c800), 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r5, 0x5411, &(0x7f000000c840)) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r1, 0xf501, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f000000c980)={&(0x7f000000c880)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f000000c940)={&(0x7f000000c8c0)=@getlink={0x68, 0x12, 0x4, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x8010, 0x400}, [@IFLA_PHYS_PORT_ID={0x1c, 0x22, "fd2961b7abe2fab5c3871b185d4046f7c7d9f9e95307d943"}, @IFLA_WEIGHT={0x8, 0xf, 0x5}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x5}, @IFLA_WEIGHT={0x8, 0xf, 0x3}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x1}, @IFLA_IFALIASn={0x4}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0xf7}]}, 0x68}, 0x1, 0x0, 0x0, 0x8040}, 0x40000) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r7 = socket$inet6_icmp(0xa, 0x2, 0x3a) getsockopt$IP6T_SO_GET_ENTRIES(r7, 0x29, 0x41, &(0x7f000000c9c0)={'security\x00', 0x91, "344aab0eb80390f699fca44129aa5a27533cf305a7933584b4a5087ca360faae5a53237f8589b178a05bcce930d0d1737a000af68a54379692ca3a5fbdc5b192a1d6ff7b7e7488f45617a3b4bbf3e5d119336a0e4c3db3961a1cb4d97693103b0f67f0651ca4925f6395393c333667de28354b23c011620cc75026882f4d85fbe034257762f7a56af6fca5bca744520654"}, &(0x7f000000ca80)=0xb5) r8 = openat$tun(0xffffffffffffff9c, &(0x7f000000cac0), 0x4000, 0x0) ioctl$TUNSETVNETBE(r8, 0x400454de, &(0x7f000000cb00)) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f000000cc40)={r0, &(0x7f000000cb40)='\x00', 0x400000, &(0x7f000000cb80)={@align=0x2, {0x3, 0x5, 0x5, 0x4}}, 0xfffffffa, &(0x7f000000cbc0), &(0x7f000000cc00)=0x6}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f000000cc80)={0x0, 0x2}, &(0x7f000000ccc0)=0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r9, 0x84, 0x77, &(0x7f000000cd00)={r10, 0x8, 0x1, [0x3ff]}, 0xa) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r9, 0xfffffffffffffffd, 0x20004044) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f000000cd40), 0x2, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r9, 0x84, 0x75, &(0x7f000000cd80)={r10}, &(0x7f000000cdc0)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r9, 0x84, 0x11, &(0x7f000000ce00)={r11, 0x6}, &(0x7f000000ce40)=0x8) sendmsg$NFT_MSG_GETFLOWTABLE(r9, &(0x7f000000cf80)={&(0x7f000000ce80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f000000cf40)={&(0x7f000000cec0)={0x68, 0x17, 0xa, 0x401, 0x0, 0x0, {0x6, 0x0, 0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x8000000) ioctl$INCFS_IOC_CREATE_FILE(r8, 0xc058671e, &(0x7f000000d280)={{'\x00', 0x3}, {0x4}, 0xc0, 0x0, 0x0, &(0x7f000000cfc0)='./file0\x00', &(0x7f000000d000)='./file0\x00', &(0x7f000000d040)="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", 0x171, 0x0, &(0x7f000000d1c0)={0x2, 0x5e, {0x1, 0xc, 0x51, "9a3761d11ebfda8be607df6b54607d61956e90a92981b1e27b46e0bdc0cc1083487addbd96373803df41e75305e2906444de7008832696c8d156e54ea2361588b906f82793f53c2a7cb2d3f7530c845119"}, 0x4d, "29113635b0cc9659ff891f495241ad0824674cb249ead156a41ca9f0a1a84e160145d9762dac1b14794f5ca8650d0d1aa5af3e22864fa2b8b7a5653a81ee6a1146c6ab58589f6581c4fc19235e"}, 0xb7}) 140.617655ms ago: executing program 0 (id=10005): socket$rds(0x15, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@gettclass={0x24, 0x2a, 0x200, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x2, 0xffe0}, {0x6, 0xfffe}, {0xfff1, 0xfff3}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYRES64=r0], 0x30}}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, 0x0, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000), 0x4) sendto$inet(r3, &(0x7f0000000080)='<', 0xffffffffffffffef, 0x4805, 0x0, 0xfe8d) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket(0x40000000015, 0x5, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0xffffffffffffffff}, {0xffff, 0xffff}, {0xffe0, 0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x8, 0x7, 0x7fffffff}}}}]}, 0x44}}, 0x10) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xf3f, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb, 0x3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x0, 0x10000}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) connect$l2tp(r4, &(0x7f0000000200)={0x2, 0x0, @local, 0x2}, 0x10) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r8 = socket$netlink(0x10, 0x3, 0x2) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=ANY=[@ANYBLOB="9cbf6000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000080005008cae8a1a0a54a0a23afdf61945c882ca9873871d169b1173befd3165fbdf93bd16723f0b7c2644798aa977b8c641ee25bacacd50e8439973528ed5fede71673bb05a034d708c310c8a87fadaa3f298b0dd227b0aeb37dade9d7cbc208f15c5a4ca48cfd400"/128, @ANYRES32=r7, @ANYBLOB="6800128009000100766c616e000000005800028006000100020000000600050081000000100004800c0001000900000181000000340003800c00010008000000030000000c00010003000000080000000c00010009000000040000000c00010000000000010000800a000200aaaaaaaaaaaa0000"], 0x9c}}, 0x891) 138.923048ms ago: executing program 2 (id=10006): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0xfefffffc) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) (async) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) (async, rerun: 64) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (rerun: 64) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r5, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x20008000, 0x6, 0x8000, 0x6, 0xffffffff}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x0, 0x11, r5, 0x0) (async) mmap(&(0x7f0000001000/0x3000)=nil, 0x30000, 0x0, 0x11, r5, 0x0) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000) (async, rerun: 32) sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=@setlink={0x2c, 0x13, 0x5, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r2, 0x312}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x42) (async, rerun: 32) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8], 0x4c}}, 0x20008084) 138.254283ms ago: executing program 1 (id=10007): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000840)='notify_on_release\x00', 0x2, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) (async, rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x2, 0xd, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}, @sadb_x_policy={0x2, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x6, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@private1, @in6=@private1}}, @sadb_lifetime={0x4, 0x4}]}, 0xc0}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) r4 = socket(0x11, 0xa, 0x0) getsockname$packet(r4, 0x0, &(0x7f0000000040)) (async, rerun: 32) r5 = socket$netlink(0x10, 0x3, 0xc) (rerun: 32) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) (async, rerun: 64) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) (rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0x2f9, 0xffffca88, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632f77fb7f0200017f020001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="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"}, 0x28) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) socket$inet6_icmp(0xa, 0x2, 0x3a) (async) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)={0x14, r7, 0x301, 0x70bd28, 0x0, {0x34}}, 0x14}}, 0x0) (async) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000500)={0xffffffffffffffff}) splice(r9, 0x0, r8, 0x0, 0xffffffffffff8000, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) (async) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0100000000000000000007000000080001006e00000008000300", @ANYRES32=r13, @ANYBLOB="0c0099000000000000000000050053000100000014000400776c616e310000000000000000000000140006"], 0x60}}, 0x0) (async) sendmsg$NL80211_CMD_TESTMODE(r9, &(0x7f00000007c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000cc0)={0x248, r11, 0x200, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TESTDATA={0xf0, 0x45, "30da255f332f385e4edd5a20dfc5619fa1ef7fb2ed9c0535da21ae695d7af841d180909af45ab7dbe1e0f2175c3259ea1b907539a8f1a2a27e569b839d7a87f49a7e606e1f9c96321ced698c903adb2bc87aee8287b6f2dd338b46b5960d50fa1fe066797f3aa28174c11090c03f27922993da8497a13111fec4c489118a53cd42aac269febff64aee2172151387334d7f3b0c07d7f5dcf82aa10d3f041cec427bae30b0107a30749926eeee0b92d15aafc41f229ae6939b2cc64f4d46be559ec264bec934d8d0d2515a0e0358f5ec5f621e553e3da0731562c7c61567a76190739d413084b2ceaca48e751b"}, @NL80211_ATTR_TESTDATA={0xbe, 0x45, "19e88de36f2f7de8951aed2eec132bbde2a3ff54a956d526f133ed8ddc656da6a96a42d21c538f071c0d19d8707bc5c85ab58dd1ddeaf7ed0869710151f15afa7942f9cda4dd6895dbd8ef66669676a7cc5a56dec8a8ccfccfcea7a425b5a625cfe71d5cf7baa502f6b2bfb27d916b75ac7e3dc29ef90180b9f6b598b28c22e3b6b7d3109809440058dded40a4bbe46f86a94d419618a24e671331b28d83af0aa57da5a1afc7e22c23fc25ddcf4c9173305d87cd423419cd6b65"}, @NL80211_ATTR_TESTDATA={0x79, 0x45, "f5b26c52f40448dc258dca726c3d26c2b5c557f4c0068bd01130106c44723d6b76b743358350469372885efe02a4976896d73068f90e93f0374c8344430d05cb726bdb23bed15212b61d24e341c333357254189a1dbfc696e1e3a485814385d713a65bf4409702a069ece1ad8d99a2cd1bf3d105b3"}]}, 0x248}, 0x1, 0x0, 0x0, 0x408c8}, 0x40000) 0s ago: executing program 3 (id=10008): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000007d2700000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r3, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x40}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0xa}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x4020) kernel console output (not intermixed with test programs): attributes in process `syz.5.8242'. [ 877.546979][T10499] nci: nci_data_exchange_complete: no rx callback, dropping rx data... [ 877.676348][ T3650] netlink: 10 bytes leftover after parsing attributes in process `syz.1.8246'. [ 877.753081][ T3653] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8247'. [ 877.915022][ T3656] x_tables: duplicate underflow at hook 1 [ 878.073205][ T3664] netlink: 'syz.1.8250': attribute type 2 has an invalid length. [ 878.169990][ T3668] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8252'. [ 878.282254][ T3670] syzkaller0: entered promiscuous mode [ 878.290420][ T3670] syzkaller0: entered allmulticast mode [ 878.309402][ T3639] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 879.448951][ T3719] syzkaller0: entered promiscuous mode [ 879.454807][ T3719] syzkaller0: entered allmulticast mode [ 879.505366][ T3695] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 880.059625][ T3760] netlink: 'syz.0.8273': attribute type 2 has an invalid length. [ 880.277436][ T3779] syzkaller0: entered promiscuous mode [ 880.283056][ T3779] syzkaller0: entered allmulticast mode [ 880.318467][ T3781] IPv6: NLM_F_CREATE should be specified when creating new route [ 880.334732][ T3781] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 880.346060][ T3781] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 880.353742][ T3781] gretap1: entered promiscuous mode [ 880.359492][ T3781] gretap1: entered allmulticast mode [ 882.264173][ T4948] Bluetooth: hci2: command 0x0406 tx timeout [ 882.829615][ T3745] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 883.003631][ T3793] __nla_validate_parse: 7 callbacks suppressed [ 883.003649][ T3793] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8285'. [ 883.055114][ T3793] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8285'. [ 883.239327][ T3814] syzkaller0: entered promiscuous mode [ 883.254422][ T3814] syzkaller0: entered allmulticast mode [ 884.369715][ T3832] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8298'. [ 884.385880][ T3834] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8299'. [ 884.742700][ T3848] x_tables: ip_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 884.827232][ T3850] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8306'. [ 884.897583][ T4948] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 884.909800][ T4948] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 884.919662][ T4948] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 884.929320][ T4948] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 884.937266][ T4948] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 885.326365][T26024] syz_tun (unregistering): left promiscuous mode [ 885.352381][T26024] bridge0: port 1(syz_tun) entered disabled state [ 885.371744][T26024] bond3: left promiscuous mode [ 885.879842][T10505] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 885.910724][T10505] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 885.949769][T10505] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 886.068350][ T3917] net_ratelimit: 13 callbacks suppressed [ 886.068371][ T3917] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 886.211337][ T3922] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8326'. [ 886.230046][T10505] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 886.231790][ T3923] netlink: 84 bytes leftover after parsing attributes in process `syz.1.8324'. [ 886.242344][T10505] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 886.261141][T10505] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 886.278579][ T3925] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8325'. [ 886.349096][ T3922] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8326'. [ 886.362209][ T3851] vxcan1 speed is unknown, defaulting to 1000 [ 886.432373][T10505] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 886.457079][T10505] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 886.479937][T10505] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 886.506496][ T3935] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8327'. [ 886.515901][ T3934] netlink: 'syz.3.8328': attribute type 83 has an invalid length. [ 886.565650][ T3927] syzkaller0: entered promiscuous mode [ 886.577215][ T3927] syzkaller0: entered allmulticast mode [ 886.755786][T10505] netdevsim netdevsim2  (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 886.769584][T10505] netdevsim netdevsim2  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 886.806655][T10505] netdevsim netdevsim2  (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 886.893790][ T3851] wg1 speed is unknown, defaulting to 1000 [ 886.994585][ T4948] Bluetooth: hci6: command tx timeout [ 887.249278][T10505] bond3: left allmulticast mode [ 887.272506][T10505] bridge0: port 3(bond3) entered disabled state [ 887.523632][T10505] bond4 (unregistering): (slave ip6gre2): Releasing backup interface [ 887.532386][T10505] ip6gre2 (unregistering): left promiscuous mode [ 887.561833][T10505] bond6 (unregistering): (slave ip6gre3): Releasing backup interface [ 887.579358][T10505] ip6gre3 (unregistering): left promiscuous mode [ 887.779791][T10505] bond8 (unregistering): (slave geneve2): Releasing active interface [ 888.149505][T10505] team0: Port device bridge6 removed [ 888.198802][T10505] bond0 (unregistering): (slave team0): Releasing backup interface [ 888.208419][T10505] bond0 (unregistering): Released all slaves [ 888.219066][T10505] bond1 (unregistering): Released all slaves [ 888.237790][T10505] bond2 (unregistering): Released all slaves [ 888.252721][T10505] bond3 (unregistering): Released all slaves [ 888.268675][T10505] bond4 (unregistering): Released all slaves [ 888.284840][T10505] bond5 (unregistering): Released all slaves [ 888.301532][T10505] bond6 (unregistering): Released all slaves [ 888.322985][T10505] bond7 (unregistering): Released all slaves [ 888.338933][T10505] bond8 (unregistering): Released all slaves [ 888.356596][T10505] bond9 (unregistering): Released all slaves [ 888.371255][T10505] bond10 (unregistering): Released all slaves [ 888.457939][ T3971] vxcan1 speed is unknown, defaulting to 1000 [ 888.532111][ T3977] netlink: 'syz.5.8336': attribute type 7 has an invalid length. [ 888.624661][T10505] tipc: Disabling bearer [ 888.630187][T10505] tipc: Left network mode [ 888.832658][ T3971] wg1 speed is unknown, defaulting to 1000 [ 889.013017][ T3851] bridge0: port 1(bridge_slave_0) entered blocking state [ 889.020452][ T3851] bridge0: port 1(bridge_slave_0) entered disabled state [ 889.028488][ T3851] bridge_slave_0: entered allmulticast mode [ 889.046181][ T3851] bridge_slave_0: entered promiscuous mode [ 889.069099][ T3851] bridge0: port 2(bridge_slave_1) entered blocking state [ 889.076182][ T4948] Bluetooth: hci6: command tx timeout [ 889.082752][ T3851] bridge0: port 2(bridge_slave_1) entered disabled state [ 889.093781][ T3851] bridge_slave_1: entered allmulticast mode [ 889.103207][ T3851] bridge_slave_1: entered promiscuous mode [ 889.191765][ T3851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 889.241218][ T3851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 889.502487][ T3851] team0: Port device team_slave_0 added [ 889.513734][ T3851] team0: Port device team_slave_1 added [ 889.713503][ T3943] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 889.733475][ T3851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 889.763234][ T3851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 889.834876][ T3851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 889.908978][T10505] hsr_slave_0: left promiscuous mode [ 889.948348][T10505] hsr_slave_1: left promiscuous mode [ 889.996614][ T3991] __nla_validate_parse: 5 callbacks suppressed [ 889.996631][ T3991] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8338'. [ 890.017526][T10505] veth0_macvtap: left promiscuous mode [ 890.023135][T10505] veth1_vlan: left promiscuous mode [ 890.039499][T10505] veth0_vlan: left promiscuous mode [ 890.709864][ T3851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 890.727943][ T3851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 890.761617][ T3851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 890.858837][ T4008] tipc: Enabled bearer , priority 0 [ 890.887472][ T4009] syzkaller0: entered promiscuous mode [ 890.912335][ T4009] syzkaller0: entered allmulticast mode [ 890.967653][ T4012] tipc: Resetting bearer [ 891.004958][ T4003] tipc: Resetting bearer [ 891.072680][ T4003] tipc: Disabling bearer [ 891.089395][ T4027] netlink: 'syz.5.8342': attribute type 15 has an invalid length. [ 891.107446][ T4027] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8342'. [ 891.145609][ T4948] Bluetooth: hci6: command tx timeout [ 891.153199][ T4027] netlink: 'syz.5.8342': attribute type 15 has an invalid length. [ 891.176797][ T4027] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8342'. [ 891.214053][ T3851] hsr_slave_0: entered promiscuous mode [ 891.231715][ T3851] hsr_slave_1: entered promiscuous mode [ 891.343120][ T4036] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8344'. [ 891.398983][ T4042] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8344'. [ 891.411391][ T4038] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 891.444011][ T4038] lo: entered promiscuous mode [ 891.456391][ T4038] tunl0: entered promiscuous mode [ 891.460773][T10505] IPVS: stop unused estimator thread 0... [ 891.468321][ T4038] gre0: entered promiscuous mode [ 891.481047][ T4038] gretap0: entered promiscuous mode [ 891.499656][ T4038] erspan0: entered promiscuous mode [ 891.512712][ T4038] ip_vti0: entered promiscuous mode [ 891.561720][ T4048] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8347'. [ 891.835134][ T4061] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8350'. [ 891.950606][ T4064] netlink: 48 bytes leftover after parsing attributes in process `syz.5.8351'. [ 891.971880][ T4064] unsupported nla_type 7424 [ 892.159154][ T4061] 8021q: adding VLAN 0 to HW filter on device bond4 [ 892.387747][ T4086] 8021q: adding VLAN 0 to HW filter on device bond5 [ 892.400339][ T4086] bond4: (slave bond5): Enslaving as an active interface with an up link [ 892.410715][ T5294] 8021q: adding VLAN 0 to HW filter on device eth1 [ 892.455198][ T4096] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8355'. [ 892.467232][ T4103] netlink: 'syz.0.8356': attribute type 2 has an invalid length. [ 892.624031][ T4109] netlink: 'syz.0.8358': attribute type 1 has an invalid length. [ 892.673437][ T4113] netlink: 68 bytes leftover after parsing attributes in process `syz.1.8359'. [ 892.704961][ T4109] 8021q: adding VLAN 0 to HW filter on device bond14 [ 892.725871][ T4110] bond14: (slave ip6gretap1): making interface the new active one [ 892.738625][ T4110] bond14: (slave ip6gretap1): Enslaving as an active interface with an up link [ 892.751409][ T4109] bond14: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 892.770347][ T4109] bond14: entered allmulticast mode [ 892.780801][ T4109] ip6gretap1: entered allmulticast mode [ 892.923311][T10493] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 893.225573][ T4948] Bluetooth: hci6: command tx timeout [ 893.318428][ T4148] syzkaller1: entered promiscuous mode [ 893.324232][ T4148] syzkaller1: entered allmulticast mode [ 895.655361][ T4113] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 895.664676][ T4127] __nla_validate_parse: 1 callbacks suppressed [ 895.664691][ T4127] netlink: 224 bytes leftover after parsing attributes in process `syz.3.8362'. [ 895.691595][ T4132] netlink: 'syz.5.8361': attribute type 1 has an invalid length. [ 895.718977][ T4132] netlink: 'syz.5.8361': attribute type 2 has an invalid length. [ 895.758983][ T3851] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 895.796953][ T3851] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 895.807951][ T3851] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 895.839566][ T3851] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 895.864659][ T3851] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 895.900942][ T3851] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 895.925927][ T4167] netlink: 156 bytes leftover after parsing attributes in process `syz.5.8369'. [ 895.936985][ T3851] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 895.945675][ T4169] netlink: 76 bytes leftover after parsing attributes in process `syz.1.8367'. [ 895.978301][ T3851] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 895.985794][ T4169] netlink: 320 bytes leftover after parsing attributes in process `syz.1.8367'. [ 896.081838][ T4179] bridge5: entered promiscuous mode [ 896.094471][ T4179] bridge5: entered allmulticast mode [ 896.111403][ T4179] Cannot find del_set index 4 as target [ 896.231364][ T3851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 896.289679][ T3851] 8021q: adding VLAN 0 to HW filter on device team0 [ 896.328700][T10513] bridge0: port 1(bridge_slave_0) entered blocking state [ 896.335905][T10513] bridge0: port 1(bridge_slave_0) entered forwarding state [ 896.398445][T10513] bridge0: port 2(bridge_slave_1) entered blocking state [ 896.405691][T10513] bridge0: port 2(bridge_slave_1) entered forwarding state [ 896.608374][ T4211] netlink: 44 bytes leftover after parsing attributes in process `syz.3.8380'. [ 896.677215][ T4214] netlink: 44 bytes leftover after parsing attributes in process `syz.3.8380'. [ 896.897378][ T4231] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8383'. [ 896.935731][ T4230] xt_hashlimit: size too large, truncated to 1048576 [ 896.940390][ T4231] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8383'. [ 896.991500][ T4240] netlink: 'syz.0.8385': attribute type 4 has an invalid length. [ 897.008565][ T4235] bond5 (unregistering): Released all slaves [ 897.044003][ T4246] netlink: 'syz.0.8385': attribute type 4 has an invalid length. [ 897.151413][ T4239] netlink: 'syz.0.8385': attribute type 1 has an invalid length. [ 897.170933][ T4240] netlink: 'syz.0.8385': attribute type 1 has an invalid length. [ 897.193907][ T4239] netlink: 163952 bytes leftover after parsing attributes in process `syz.0.8385'. [ 897.209393][ T4240] netlink: 163952 bytes leftover after parsing attributes in process `syz.0.8385'. [ 897.358209][ T3851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 897.429498][ T3851] veth0_vlan: entered promiscuous mode [ 897.442163][ T3851] veth1_vlan: entered promiscuous mode [ 897.477851][ T3851] veth0_macvtap: entered promiscuous mode [ 897.490542][ T3851] veth1_macvtap: entered promiscuous mode [ 897.510846][ T3851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 897.525202][ T3851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 897.540039][T10517] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 897.550503][T10517] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 897.570080][T10517] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 897.579296][T10517] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 899.795841][ T4222] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 899.957767][T10519] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 899.975300][T10519] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 900.046582][ T4275] lo: Caught tx_queue_len zero misconfig [ 900.157212][T10517] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 900.171451][ T4281] netlink: 'syz.5.8393': attribute type 30 has an invalid length. [ 900.192303][T10517] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 900.237826][T10493] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 900.269064][T10493] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 900.303863][T10493] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 900.487040][ T4301] IPv6: NLM_F_CREATE should be specified when creating new route [ 900.813804][ T4319] IPVS: Error connecting to the multicast addr [ 900.855565][ T4324] __nla_validate_parse: 6 callbacks suppressed [ 900.855584][ T4324] netlink: 100 bytes leftover after parsing attributes in process `syz.3.8404'. [ 901.019139][ T4333] netlink: 'syz.0.8409': attribute type 2 has an invalid length. [ 901.172941][ T4337] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8411'. [ 901.266342][ T4352] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8415'. [ 901.298407][ T4349] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8413'. [ 901.336345][ T4354] dummy0: Caught tx_queue_len zero misconfig [ 901.521173][ T4361] netlink: 'syz.1.8417': attribute type 63 has an invalid length. [ 901.529752][ T4361] netlink: 'syz.1.8417': attribute type 63 has an invalid length. [ 901.735488][ T4371] xt_hashlimit: size too large, truncated to 1048576 [ 901.997006][ T4341] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 902.123453][ T4391] netlink: 96 bytes leftover after parsing attributes in process `syz.3.8426'. [ 902.190649][ T4393] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8427'. [ 902.292624][ T4400] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8427'. [ 902.430282][ T4411] FAULT_INJECTION: forcing a failure. [ 902.430282][ T4411] name failslab, interval 1, probability 0, space 0, times 1 [ 902.459246][ T4411] CPU: 1 UID: 0 PID: 4411 Comm: syz.2.8432 Not tainted syzkaller #0 PREEMPT(full) [ 902.459270][ T4411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 902.459282][ T4411] Call Trace: [ 902.459290][ T4411] [ 902.459299][ T4411] dump_stack_lvl+0xe8/0x150 [ 902.459329][ T4411] should_fail_ex+0x412/0x560 [ 902.459446][ T4411] should_failslab+0xa8/0x100 [ 902.459469][ T4411] __kmalloc_noprof+0xe8/0x760 [ 902.459496][ T4411] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 902.459566][ T4411] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 902.459597][ T4411] genl_family_rcv_msg_doit+0xd9/0x330 [ 902.459620][ T4410] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8433'. [ 902.459625][ T4411] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 902.459655][ T4411] ? apparmor_capable+0x126/0x170 [ 902.459768][ T4411] ? bpf_lsm_capable+0x9/0x20 [ 902.459828][ T4411] ? security_capable+0x7e/0x2c0 [ 902.459982][ T4411] genl_rcv_msg+0x61c/0x7a0 [ 902.460050][ T4411] ? __pfx_genl_rcv_msg+0x10/0x10 [ 902.460114][ T4411] ? __pfx_ieee802154_set_macparams+0x10/0x10 [ 902.460246][ T4411] netlink_rcv_skb+0x232/0x4b0 [ 902.460356][ T4411] ? __pfx_genl_rcv_msg+0x10/0x10 [ 902.460413][ T4411] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 902.460535][ T4411] ? down_read+0x270/0x2e0 [ 902.460585][ T4411] ? genl_rcv+0xd/0x40 [ 902.460649][ T4411] genl_rcv+0x28/0x40 [ 902.460706][ T4411] netlink_unicast+0x75c/0x8e0 [ 902.460801][ T4411] netlink_sendmsg+0x813/0xb40 [ 902.460901][ T4411] ? __pfx_netlink_sendmsg+0x10/0x10 [ 902.460988][ T4411] ? aa_sock_msg_perm+0xf1/0x1b0 [ 902.461068][ T4411] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 902.461152][ T4411] ____sys_sendmsg+0x972/0x9f0 [ 902.461231][ T4411] ? __might_fault+0xaf/0x130 [ 902.461319][ T4411] ? __pfx_____sys_sendmsg+0x10/0x10 [ 902.461394][ T4411] ? import_iovec+0x73/0xa0 [ 902.461498][ T4411] ___sys_sendmsg+0x2a5/0x360 [ 902.461539][ T4411] ? __lock_acquire+0x6b5/0x2cf0 [ 902.461620][ T4411] ? __pfx____sys_sendmsg+0x10/0x10 [ 902.461752][ T4411] ? __fget_files+0x2a/0x420 [ 902.461829][ T4411] ? __fget_files+0x3a0/0x420 [ 902.461909][ T4411] __x64_sys_sendmsg+0x1bd/0x2a0 [ 902.461961][ T4411] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 902.462032][ T4411] ? __pfx_ksys_write+0x10/0x10 [ 902.462120][ T4411] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 902.462174][ T4411] do_syscall_64+0x174/0x580 [ 902.462213][ T4411] ? trace_irq_disable+0x3b/0x140 [ 902.462276][ T4411] ? clear_bhb_loop+0x40/0x90 [ 902.462335][ T4411] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 902.462392][ T4411] RIP: 0033:0x7f5e52d9ce59 [ 902.462433][ T4411] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 902.462471][ T4411] RSP: 002b:00007f5e53c5f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 902.462533][ T4411] RAX: ffffffffffffffda RBX: 00007f5e53015fa0 RCX: 00007f5e52d9ce59 [ 902.462580][ T4411] RDX: 0000000004008000 RSI: 0000200000002a00 RDI: 0000000000000004 [ 902.462620][ T4411] RBP: 00007f5e53c5f090 R08: 0000000000000000 R09: 0000000000000000 [ 902.462654][ T4411] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 902.462683][ T4411] R13: 00007f5e53016038 R14: 00007f5e53015fa0 R15: 00007ffe2b6392d8 [ 902.462797][ T4411] [ 902.804006][ T4414] bond11: (slave lo): Releasing backup interface [ 902.845345][ T4414] bond11: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 902.872136][ T4422] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8436'. [ 902.914043][ T4414] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 902.926171][ T4425] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8436'. [ 903.116803][ T4434] syzkaller0: entered promiscuous mode [ 903.126991][ T4434] syzkaller0: entered allmulticast mode [ 903.166323][ T4434] 0: reclassify loop, rule prio 0, protocol 800 [ 903.240136][ T4441] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 903.380674][ T4449] FAULT_INJECTION: forcing a failure. [ 903.380674][ T4449] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 903.406778][ T4453] tipc: Started in network mode [ 903.411858][ T4453] tipc: Node identity 26fe0d199254, cluster identity 4711 [ 903.421316][ T4449] CPU: 1 UID: 0 PID: 4449 Comm: syz.0.8446 Not tainted syzkaller #0 PREEMPT(full) [ 903.421341][ T4449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 903.421354][ T4449] Call Trace: [ 903.421363][ T4449] [ 903.421371][ T4449] dump_stack_lvl+0xe8/0x150 [ 903.421400][ T4449] should_fail_ex+0x412/0x560 [ 903.421427][ T4449] _copy_from_user+0x2d/0xb0 [ 903.421518][ T4449] kstrtouint_from_user+0xd6/0x180 [ 903.421565][ T4449] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 903.421604][ T4449] proc_fail_nth_write+0x8e/0x210 [ 903.421653][ T4449] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 903.421684][ T4449] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 903.421722][ T4449] vfs_write+0x29a/0xb90 [ 903.421757][ T4449] ? __pfx_vfs_write+0x10/0x10 [ 903.421785][ T4449] ? __fget_files+0x2a/0x420 [ 903.421811][ T4449] ? __fget_files+0x3a0/0x420 [ 903.421832][ T4449] ? __fget_files+0x2a/0x420 [ 903.421865][ T4449] ksys_write+0x150/0x270 [ 903.421894][ T4449] ? __pfx_ksys_write+0x10/0x10 [ 903.421929][ T4449] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 903.421949][ T4449] do_syscall_64+0x174/0x580 [ 903.421967][ T4449] ? trace_irq_disable+0x3b/0x140 [ 903.421994][ T4449] ? clear_bhb_loop+0x40/0x90 [ 903.422017][ T4449] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 903.422035][ T4449] RIP: 0033:0x7f4b19b5d68e [ 903.422053][ T4449] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 903.422068][ T4449] RSP: 002b:00007f4b1aa8ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 903.422087][ T4449] RAX: ffffffffffffffda RBX: 00007f4b1aa906c0 RCX: 00007f4b19b5d68e [ 903.422101][ T4449] RDX: 0000000000000001 RSI: 00007f4b1aa900a0 RDI: 0000000000000003 [ 903.422112][ T4449] RBP: 00007f4b1aa90090 R08: 0000000000000000 R09: 0000000000000000 [ 903.422129][ T4449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 903.422140][ T4449] R13: 00007f4b19e16038 R14: 00007f4b19e15fa0 R15: 00007ffd27c861b8 [ 903.422172][ T4449] [ 903.629358][ T4453] tipc: Enabled bearer , priority 0 [ 903.674959][ T4456] syzkaller0: entered promiscuous mode [ 903.680916][ T4456] syzkaller0: entered allmulticast mode [ 903.687437][ T4456] tipc: Resetting bearer [ 903.746959][ T4452] tipc: Resetting bearer [ 903.878515][ T4473] sctp: [Deprecated]: syz.1.8452 (pid 4473) Use of struct sctp_assoc_value in delayed_ack socket option. [ 903.878515][ T4473] Use struct sctp_sack_info instead [ 903.922818][ T4476] netlink: 'syz.5.8453': attribute type 12 has an invalid length. [ 905.775642][ T4452] tipc: Disabling bearer [ 905.813397][T20603] tipc: Node number set to 3031043353 [ 905.886562][T10499] bond3: left allmulticast mode [ 905.919226][T10499] bond3: left promiscuous mode [ 905.926414][T10499] bridge0: port 3(bond3) entered disabled state [ 905.959968][T10499] bridge_slave_1: left allmulticast mode [ 905.970930][T10499] bridge_slave_1: left promiscuous mode [ 905.981645][T10499] bridge0: port 2(bridge_slave_1) entered disabled state [ 905.997634][T10499] bridge_slave_0: left allmulticast mode [ 906.014342][T10499] bridge_slave_0: left promiscuous mode [ 906.022200][T10499] bridge0: port 1(bridge_slave_0) entered disabled state [ 906.058935][T10499] tipc: Resetting bearer [ 906.079930][ T4498] __nla_validate_parse: 4 callbacks suppressed [ 906.079947][ T4498] netlink: 27 bytes leftover after parsing attributes in process `syz.0.8458'. [ 906.213608][T10499] tipc: Disabling bearer [ 906.267898][T10499] bond5 (unregistering): (slave gretap1): Releasing active interface [ 906.280842][T10499] batman_adv: batadv0: Removing interface: gretap2 [ 906.424311][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 906.528582][T10499] bond7 (unregistering): (slave bridge4): Releasing backup interface [ 906.731633][T10499] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 906.741339][T10499] bond_slave_0: left promiscuous mode [ 906.756670][T10499] bond0 (unregistering): Released all slaves [ 906.763460][T10517] smbdirect: ib_dev[syz1] removed [ 906.779566][T10499] bond1 (unregistering): Released all slaves [ 906.811738][T10499] bond2 (unregistering): Released all slaves [ 906.847132][T10499] bond3 (unregistering): Released all slaves [ 906.866778][T10499] bond4 (unregistering): Released all slaves [ 906.882390][T10499] bond5 (unregistering): Released all slaves [ 906.898893][T10499] bond6 (unregistering): Released all slaves [ 906.915011][T10499] bond7 (unregistering): Released all slaves [ 906.931241][T10499] bond8 (unregistering): Released all slaves [ 906.948793][T10499] bond9 (unregistering): Released all slaves [ 906.965504][T10499] bond10 (unregistering): Released all slaves [ 906.980711][T10499] bond11 (unregistering): Released all slaves [ 907.000889][ T4484] tipc: Enabled bearer , priority 10 [ 907.007662][ T4496] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8455'. [ 907.027642][ T4496] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8455'. [ 907.035224][T20587] infiniband syz1: ib_query_port failed (-19) [ 907.075009][ T4496] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8455'. [ 907.103409][ T4496] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8455'. [ 907.391623][ T4521] netlink: 'syz.5.8464': attribute type 12 has an invalid length. [ 907.487036][T10499] tipc: Left network mode [ 907.579838][ T4529] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8467'. [ 908.043426][ T4554] rdma_op ffff8880671299f0 conn xmit_rdma 0000000000000000 [ 908.071287][T10499] IPVS: stopping backup sync thread 21338 ... [ 908.081754][ T4554] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8473'. [ 908.404345][ T4574] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8478'. [ 908.517838][ T4583] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8480'. [ 908.716680][ T4586] syzkaller0: entered promiscuous mode [ 908.722202][ T4586] syzkaller0: entered allmulticast mode [ 909.371158][ T4606] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8488'. [ 910.851620][ T4594] netlink: 'syz.1.8484': attribute type 1 has an invalid length. [ 911.039544][ T4614] tc_dump_action: action bad kind [ 911.211874][ T4624] __nla_validate_parse: 1 callbacks suppressed [ 911.211892][ T4624] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.8495'. [ 911.313385][ T4632] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8498'. [ 911.331678][ T4624] veth0_to_bond: default FDB implementation only supports local addresses [ 911.383991][ T4634] bond4: entered allmulticast mode [ 911.399575][ T4622] netlink: 140 bytes leftover after parsing attributes in process `syz.5.8493'. [ 911.424437][ T4634] ip6gre1: entered allmulticast mode [ 911.493263][ T4636] netlink: 156 bytes leftover after parsing attributes in process `syz.1.8499'. [ 911.503978][ T4634] pimreg: entered allmulticast mode [ 911.528384][ T4640] pimreg: left allmulticast mode [ 911.693381][ T4629] bond4: left allmulticast mode [ 911.717473][ T4629] ip6gre1: left allmulticast mode [ 911.726447][ T4649] netlink: 160 bytes leftover after parsing attributes in process `syz.1.8502'. [ 911.879757][ T4653] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8504'. [ 911.925923][ T4653] veth0_virt_wifi: entered promiscuous mode [ 911.952109][ T4653] veth0_virt_wifi: entered allmulticast mode [ 911.973190][ T4662] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 911.997153][ T4661] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci6/hci6:200/input10 [ 912.079176][ T4653] macvlan2: entered promiscuous mode [ 912.089271][ T4667] netlink: 'syz.0.8508': attribute type 1 has an invalid length. [ 912.119931][ T4653] macvlan2: entered allmulticast mode [ 912.287831][ T4667] bond15: entered promiscuous mode [ 912.310622][ T4667] 8021q: adding VLAN 0 to HW filter on device bond15 [ 912.356442][ T4684] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8512'. [ 912.538590][T10499] hsr_slave_0: left promiscuous mode [ 912.550026][T10499] hsr_slave_1: left promiscuous mode [ 912.570135][T10499] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 912.578093][T10499] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 912.598938][T10499] veth0_macvtap: left promiscuous mode [ 912.605475][T10499] veth1_vlan: left promiscuous mode [ 912.611000][T10499] veth0_vlan: left promiscuous mode [ 912.729897][T10499] pim6reg527 (unregistering): left allmulticast mode [ 913.023348][T10499] vcan0 (unregistering): left allmulticast mode [ 913.067810][ T4698] syzkaller0: entered promiscuous mode [ 913.123274][ T4698] syzkaller0: entered allmulticast mode [ 913.172598][ T4710] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 913.210998][ T4713] netlink: 'syz.2.8514': attribute type 1 has an invalid length. [ 913.477355][ T4733] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8523'. [ 913.482960][ T30] audit: type=1800 audit(1780177382.331:32): pid=4728 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.8520" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=2332 res=0 errno=0 [ 913.518667][ T4731] netlink: 'syz.1.8521': attribute type 1 has an invalid length. [ 913.539144][ T4731] netlink: 'syz.1.8521': attribute type 1 has an invalid length. [ 913.567063][ T4731] netlink: 30 bytes leftover after parsing attributes in process `syz.1.8521'. [ 913.587629][ T4741] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8522'. [ 913.613681][ T4736] bond16 (unregistering): Released all slaves [ 913.678519][T10499] IPVS: stop unused estimator thread 0... [ 913.878593][ T4759] team_slave_0: Caught tx_queue_len zero misconfig [ 913.907497][ T4759] netlink: 'syz.3.8528': attribute type 11 has an invalid length. [ 913.987911][ T4759] : entered promiscuous mode [ 914.100422][ T4769] netlink: 'syz.0.8530': attribute type 3 has an invalid length. [ 914.312609][ T4778] netlink: 'syz.0.8534': attribute type 6 has an invalid length. [ 914.332981][ T4778] netlink: 'syz.0.8534': attribute type 5 has an invalid length. [ 914.518782][ T4790] netlink: 'syz.0.8538': attribute type 8 has an invalid length. [ 914.580274][ T4792] netlink: 'syz.3.8539': attribute type 1 has an invalid length. [ 914.768984][ T4806] netlink: 'syz.5.8544': attribute type 1 has an invalid length. [ 914.788336][ T4806] netlink: 'syz.5.8544': attribute type 1 has an invalid length. [ 916.035764][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 916.583223][ T4798] bond4: entered allmulticast mode [ 916.588640][ T4798] ip6gre1: entered allmulticast mode [ 916.643983][ T4798] bond4: left allmulticast mode [ 916.657400][ T4798] ip6gre1: left allmulticast mode [ 916.763797][ T4824] __nla_validate_parse: 16 callbacks suppressed [ 916.763814][ T4824] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8550'. [ 916.931350][ T4840] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8555'. [ 916.976781][ T4839] team0: No ports can be present during mode change [ 917.121909][ T4854] netlink: 188 bytes leftover after parsing attributes in process `syz.5.8558'. [ 917.445203][ T4879] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8567'. [ 917.556396][ T4883] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8567'. [ 917.598800][ T4888] netlink: 52 bytes leftover after parsing attributes in process `syz.1.8570'. [ 917.609993][ T4886] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8569'. [ 917.659367][ T4886] netlink: 88 bytes leftover after parsing attributes in process `syz.2.8569'. [ 917.680748][ T4888] bond6: (slave gre0): Device is not bonding slave [ 917.690007][ T4886] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8569'. [ 917.716885][ T4888] bond6: option active_slave: invalid value (gre0) [ 917.724418][ T4886] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8569'. [ 917.746714][ T4888] bond6 (unregistering): Released all slaves [ 917.800741][ T4899] netlink: 'syz.0.8572': attribute type 11 has an invalid length. [ 917.898703][ T4901] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 918.217393][ T4930] 8021q: adding VLAN 0 to HW filter on device bond8 [ 918.247041][ T4933] bond8: (slave gretap1): making interface the new active one [ 918.256248][ T4933] bond8: (slave gretap1): Enslaving as an active interface with an up link [ 919.183016][ T5018] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 919.369139][ T5030] validate_nla: 4 callbacks suppressed [ 919.369165][ T5030] netlink: 'syz.2.8612': attribute type 32 has an invalid length. [ 919.402094][ T5031] bond6: option fail_over_mac: invalid value (16) [ 919.412800][ T5031] bond6 (unregistering): Released all slaves [ 919.507427][ T5030] bond1: Setting coupled_control to off (0) [ 919.527367][ T5038] ip6t_rpfilter: unknown options [ 920.401846][ T5095] netlink: 'syz.0.8635': attribute type 13 has an invalid length. [ 920.422147][ T5095] gretap0: refused to change device tx_queue_len [ 920.437272][ T5095] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 920.648794][ T5109] xt_TCPMSS: Only works on TCP SYN packets [ 920.675330][ T5111] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 920.719322][ T5111] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 921.146217][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 921.213248][ T5142] veth0_macvtap: Caught tx_queue_len zero misconfig [ 921.430594][ T5154] netlink: 'syz.3.8652': attribute type 2 has an invalid length. [ 921.450382][ T5154] netlink: 'syz.3.8652': attribute type 2 has an invalid length. [ 921.490965][ T5154] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 921.638776][ T5171] netdevsim netdevsim0: Direct firmware load for .. failed with error -2 [ 921.688827][ T5171] netdevsim netdevsim0: Falling back to sysfs fallback for: .. [ 921.777552][ T5177] netlink: 'syz.2.8659': attribute type 21 has an invalid length. [ 921.802683][ T5177] __nla_validate_parse: 18 callbacks suppressed [ 921.802701][ T5177] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8659'. [ 921.949368][ T5184] netlink: 104 bytes leftover after parsing attributes in process `syz.3.8662'. [ 922.126936][ T5189] xt_hashlimit: size too large, truncated to 1048576 [ 922.964878][ T5211] netlink: 48 bytes leftover after parsing attributes in process `syz.0.8670'. [ 923.264459][ T5246] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 923.595143][ T5276] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 923.729660][ T5285] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.8691'. [ 924.048332][ T5314] netlink: 'syz.5.8695': attribute type 1 has an invalid length. [ 924.057530][ T5314] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 925.163728][ T5324] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.8698'. [ 925.173359][ T5324] netlink: Conntrack attr has 4 unknown bytes [ 926.480601][ T5264] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 926.645754][ T5330] netlink: 'syz.5.8699': attribute type 3 has an invalid length. [ 926.903285][ T5355] netlink: 'syz.2.8706': attribute type 2 has an invalid length. [ 927.180126][ T5384] netlink: 766 bytes leftover after parsing attributes in process `syz.1.8712'. [ 927.375792][ T5397] netlink: 'syz.2.8716': attribute type 1 has an invalid length. [ 927.392266][ T5397] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8716'. [ 927.489495][ T5400] tipc: Enabled bearer , priority 14 [ 927.983587][ T5441] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8722'. [ 928.025526][ T5441] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8722'. [ 928.089536][ T5451] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8726'. [ 928.147894][ T5450] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8726'. [ 928.393373][T20592] IPVS: starting estimator thread 0... [ 928.401700][ T5474] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 928.454571][ T5479] veth0_macvtap: Caught tx_queue_len zero misconfig [ 928.497915][ T5483] IPVS: using max 30 ests per chain, 72000 per kthread [ 928.678369][ T5488] bond6: option fail_over_mac: invalid value (16) [ 928.719531][ T5488] bond6 (unregistering): Released all slaves [ 928.818731][ T5421] tipc: Node number set to 190012614 [ 928.919605][ T5502] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 929.212327][ T5516] bridge6: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 929.231454][ T5516] bridge6: entered allmulticast mode [ 929.493511][ T5536] syzkaller0: entered promiscuous mode [ 929.500018][ T5536] syzkaller0: entered allmulticast mode [ 929.550405][ T5546] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8747'. [ 929.610764][ T5548] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8748'. [ 929.622537][ T5546] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8747'. [ 929.642845][ T5546] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8747'. [ 929.986937][ T5557] gretap0: entered promiscuous mode [ 929.995040][ T5557] gretap0: left promiscuous mode [ 930.010046][ T5558] gretap0: entered promiscuous mode [ 930.018206][ T5558] gretap0: left promiscuous mode [ 930.041689][ T5526] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 930.314846][ T5572] syzkaller0: entered promiscuous mode [ 930.330149][ T5572] syzkaller0: entered allmulticast mode [ 930.389809][ T5572] netlink: 'syz.5.8755': attribute type 21 has an invalid length. [ 930.465267][ T5583] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 930.649020][ T5596] block nbd5: Unsupported socket: should be TCP or UNIX. [ 931.142769][ T5631] debugfs: 'KŠŸu ™crµ±K:‘£ÿˆÌ¥ÝBßÝ£| “¼ÚÞlS·œ-!' already exists in 'ieee80211' [ 931.388791][ T1316] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 931.862101][ T5672] : renamed from bond0 [ 932.167418][ T5689] netlink: 'syz.5.8787': attribute type 6 has an invalid length. [ 932.227922][ T4948] Bluetooth: hci6: link tx timeout [ 932.236950][ T4948] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 932.451808][ T4948] Bluetooth: hci6: link tx timeout [ 932.457221][ T4948] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 932.476709][ T4948] Bluetooth: hci6: link tx timeout [ 932.481895][ T4948] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 932.535623][ T5713] __nla_validate_parse: 23 callbacks suppressed [ 932.535640][ T5713] netlink: 96 bytes leftover after parsing attributes in process `syz.2.8795'. [ 932.606437][ T5718] x_tables: unsorted underflow at hook 1 [ 932.613691][ T5713] vlan2: entered allmulticast mode [ 932.642444][ T5717] netlink: 96 bytes leftover after parsing attributes in process `syz.2.8795'. [ 932.677918][ T4948] Bluetooth: hci6: link tx timeout [ 932.683125][ T4948] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 932.691864][ T5713] erspan0: entered allmulticast mode [ 932.763114][ T4948] Bluetooth: hci6: link tx timeout [ 932.768415][ T4948] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 933.173171][ T5768] netlink: 'syz.0.8805': attribute type 11 has an invalid length. [ 933.402083][ T5784] netlink: 'syz.1.8808': attribute type 1 has an invalid length. [ 933.540095][ T5784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 933.593294][ T5780] bond0: (slave geneve3): making interface the new active one [ 933.616954][ T5780] bond0: (slave geneve3): Enslaving as an active interface with an up link [ 933.663927][ T5799] vlan3: entered allmulticast mode [ 933.670103][ T5799] veth1_virt_wifi: entered allmulticast mode [ 933.794654][ T4948] Bluetooth: hci6: link tx timeout [ 933.800027][ T4948] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 933.885076][ T4948] Bluetooth: hci6: link tx timeout [ 933.890362][ T4948] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 933.932476][T10513] tipc: Subscription rejected, illegal request [ 934.264606][ T4948] Bluetooth: hci6: command 0x0405 tx timeout [ 936.391436][ T5785] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 936.403765][ T5818] netlink: 'syz.3.8815': attribute type 1 has an invalid length. [ 936.432748][ T5818] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8815'. [ 936.712345][ T5834] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8821'. [ 936.729151][ T5834] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8821'. [ 936.971646][ T5855] sctp: [Deprecated]: syz.0.8828 (pid 5855) Use of struct sctp_assoc_value in delayed_ack socket option. [ 936.971646][ T5855] Use struct sctp_sack_info instead [ 937.012642][ T5859] netlink: 'syz.1.8827': attribute type 29 has an invalid length. [ 937.148541][ T5866] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8831'. [ 937.169530][ T5868] xt_CT: You must specify a L4 protocol and not use inversions on it [ 937.188043][ T5866] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8831'. [ 939.971400][ T5869] netlink: 'syz.1.8827': attribute type 29 has an invalid length. [ 940.055169][ T5887] kthread_run failed with err -4 [ 940.193061][ T5906] xt_CT: You must specify a L4 protocol and not use inversions on it [ 940.243247][ T5908] netlink: 'syz.3.8837': attribute type 5 has an invalid length. [ 940.365230][ T5913] netlink: 'syz.5.8840': attribute type 2 has an invalid length. [ 940.403810][ T5916] syzkaller1: entered promiscuous mode [ 940.425557][ T5916] syzkaller1: entered allmulticast mode [ 940.522559][ T5923] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 960.818383][ T5981] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8845'. [ 960.855421][ T5981] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8845'. [ 960.873242][ T5988] netlink: 224 bytes leftover after parsing attributes in process `syz.2.8846'. [ 960.894395][ T5981] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8845'. [ 960.906865][ T5988] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8846'. [ 960.937059][ T5988] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8846'. [ 960.949260][ T5992] vlan1: default FDB implementation only supports local addresses [ 961.026025][ T5997] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8850'. [ 961.315783][ T6010] team0: Port device team_slave_0 removed [ 961.505530][ T6033] netlink: 'syz.3.8859': attribute type 19 has an invalid length. [ 961.528318][ T6033] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 961.729640][ T6047] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.8863'. [ 961.747143][ T6047] netlink: 'syz.1.8863': attribute type 1 has an invalid length. [ 961.755716][ T6047] netlink: 212 bytes leftover after parsing attributes in process `syz.1.8863'. [ 962.151460][ T6067] netlink: 76 bytes leftover after parsing attributes in process `syz.3.8868'. [ 962.261742][ T6078] netlink: 'syz.2.8871': attribute type 1 has an invalid length. [ 962.283435][ T6079] IPv6: sit1: Disabled Multicast RS [ 962.372383][ T6078] bond3: entered promiscuous mode [ 962.398042][ T6078] 8021q: adding VLAN 0 to HW filter on device bond3 [ 962.512061][ T6078] bond3: (slave bridge3): making interface the new active one [ 962.520370][ T6078] bridge3: entered promiscuous mode [ 962.535293][ T6078] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 962.678978][ T6098] netlink: 'syz.1.8875': attribute type 17 has an invalid length. [ 962.734830][ T6098] gretap0: entered promiscuous mode [ 962.748599][ T6098] gretap0: left promiscuous mode [ 962.811673][ T6104] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 962.874344][ T6106] ip6_vti0: entered promiscuous mode [ 963.687930][ T6178] netlink: 'syz.0.8896': attribute type 1 has an invalid length. [ 964.309794][ T6218] netlink: 'syz.3.8911': attribute type 1 has an invalid length. [ 964.486298][ T6234] IPVS: set_ctl: invalid protocol: 50 172.20.20.13:20003 [ 964.500172][ T6233] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 964.620374][ T6244] Cannot find add_set index 0 as target [ 964.635928][ T6249] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 964.808155][ T6256] netlink: 'syz.2.8921': attribute type 1 has an invalid length. [ 964.816644][ T6257] netlink: 'syz.2.8921': attribute type 1 has an invalid length. [ 964.864192][ T6256] netlink: 'syz.2.8921': attribute type 2 has an invalid length. [ 964.872352][ T6257] netlink: 'syz.2.8921': attribute type 2 has an invalid length. [ 964.886591][ T6259] syz_tun: entered allmulticast mode [ 964.903548][ T6258] syz_tun: left allmulticast mode [ 965.062726][ T6271] bridge_slave_0: invalid flags given to default FDB implementation [ 965.850110][ T4948] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 965.863375][ T4948] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 965.876495][ T4948] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 965.890330][ T4948] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 965.900850][ T4948] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 966.183189][ T6320] __nla_validate_parse: 15 callbacks suppressed [ 966.183207][ T6320] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8936'. [ 966.214486][ T6320] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8936'. [ 966.220554][ T6323] netlink: 152 bytes leftover after parsing attributes in process `syz.1.8939'. [ 966.223682][ T6320] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8936'. [ 966.253596][ T6320] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8936'. [ 966.290998][ T6320] netlink: 104 bytes leftover after parsing attributes in process `syz.3.8936'. [ 966.307359][ T6329] SET target dimension over the limit! [ 966.571051][ T6349] xt_TCPMSS: Only works on TCP SYN packets [ 966.628899][ T6306] vxcan1 speed is unknown, defaulting to 1000 [ 966.744272][ T4948] Bluetooth: hci6: command 0x0405 tx timeout [ 966.791108][ T6360] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8948'. [ 966.853836][ T6362] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 966.875469][ T6363] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8948'. [ 966.942638][ T6368] netlink: 84 bytes leftover after parsing attributes in process `syz.2.8949'. [ 967.003170][ T6306] wg1 speed is unknown, defaulting to 1000 [ 967.309276][ T6391] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8958'. [ 967.523207][ T6404] xt_TPROXY: Can be used only with -p tcp or -p udp [ 967.633620][ T6413] validate_nla: 2 callbacks suppressed [ 967.633640][ T6413] netlink: 'syz.2.8961': attribute type 8 has an invalid length. [ 967.769206][ T6421] : entered promiscuous mode [ 967.909162][ T6431] netlink: 'syz.5.8966': attribute type 1 has an invalid length. [ 967.928385][ T6431] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 967.940542][ T6431] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 967.955220][ T4948] Bluetooth: hci0: command tx timeout [ 967.998670][ T6435] syz_tun: left allmulticast mode [ 968.023240][ T6306] bridge0: port 1(bridge_slave_0) entered blocking state [ 968.038133][ T6306] bridge0: port 1(bridge_slave_0) entered disabled state [ 968.053529][ T6306] bridge_slave_0: entered allmulticast mode [ 968.084952][ T6306] bridge_slave_0: entered promiscuous mode [ 968.098718][ T6306] bridge0: port 2(bridge_slave_1) entered blocking state [ 968.106464][ T6306] bridge0: port 2(bridge_slave_1) entered disabled state [ 968.113683][ T6306] bridge_slave_1: entered allmulticast mode [ 968.123222][ T6306] bridge_slave_1: entered promiscuous mode [ 968.243738][ T6306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 968.278804][ T6306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 968.351256][ T6455] netlink: 'syz.5.8970': attribute type 10 has an invalid length. [ 968.392266][ T6455] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 968.422064][ T6455] team0: Port device netdevsim1 added [ 968.477066][ T6306] team0: Port device team_slave_0 added [ 968.509572][ T6306] team0: Port device team_slave_1 added [ 968.605494][ T6306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 968.624623][ T6306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 968.656970][ T6306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 968.669974][ T6306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 968.708245][ T6306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 968.747086][ T6306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 969.050964][ T6488] netlink: zone id is out of range [ 969.057513][ T6488] netlink: zone id is out of range [ 969.062889][ T6488] netlink: zone id is out of range [ 969.068628][ T6488] netlink: zone id is out of range [ 969.073913][ T6488] netlink: zone id is out of range [ 969.079498][ T6488] netlink: zone id is out of range [ 969.093470][ T6488] netlink: zone id is out of range [ 969.104568][ T6488] netlink: zone id is out of range [ 970.028407][ T4948] Bluetooth: hci0: command tx timeout [ 970.805138][ T6306] hsr_slave_0: entered promiscuous mode [ 970.811589][ T6306] hsr_slave_1: entered promiscuous mode [ 970.818266][ T6306] debugfs: 'hsr0' already exists in 'hsr' [ 970.824070][ T6306] Cannot create hsr debugfs directory [ 971.133964][ T6498] netlink: 'syz.5.8983': attribute type 1 has an invalid length. [ 971.189839][ T6503] netlink: 'syz.2.8985': attribute type 1 has an invalid length. [ 971.221798][ T6506] __nla_validate_parse: 10 callbacks suppressed [ 971.221814][ T6506] netlink: 16215 bytes leftover after parsing attributes in process `syz.1.8986'. [ 971.244895][ T6498] bond6: entered promiscuous mode [ 971.250335][ T6498] 8021q: adding VLAN 0 to HW filter on device bond6 [ 971.337938][ T6503] 8021q: adding VLAN 0 to HW filter on device bond4 [ 971.394852][ T6510] bond4: (slave geneve2): making interface the new active one [ 971.421562][ T6510] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 971.592720][ T6525] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8991'. [ 971.691926][ T6535] netlink: 'syz.5.8994': attribute type 21 has an invalid length. [ 971.707308][ T6306] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 971.729581][ T6306] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 971.741779][ T6306] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 971.777592][ T6535] netlink: 156 bytes leftover after parsing attributes in process `syz.5.8994'. [ 971.907268][ T6306] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 971.918849][ T6306] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 971.929419][ T6306] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 971.959293][ T6545] tipc: Enabling not permitted [ 971.967664][ T6545] tipc: Enabling of bearer rejected, failed to enable media [ 971.993695][ T6547] netlink: 1044 bytes leftover after parsing attributes in process `syz.2.8997'. [ 972.091947][ T6306] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 972.104365][ T4948] Bluetooth: hci0: command tx timeout [ 972.125290][ T6306] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 972.139046][ T6306] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 972.169199][ T6549] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8998'. [ 972.178571][ T6549] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8998'. [ 972.270581][ T6306] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 972.292405][ T6306] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 972.315130][ T6306] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 972.344370][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 972.667347][ T6575] netlink: 'syz.5.9005': attribute type 1 has an invalid length. [ 972.707822][ T6306] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 972.756470][ T6580] netlink: 24 bytes leftover after parsing attributes in process `syz.5.9005'. [ 972.839235][ T6306] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 972.890417][ T6575] 8021q: adding VLAN 0 to HW filter on device bond7 [ 972.913963][ T6306] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 972.963055][ T6306] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 972.982353][ T6306] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 972.998029][ T6306] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 973.027768][ T6580] bond7: (slave geneve2): making interface the new active one [ 973.038388][ T6575] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9005'. [ 973.056935][ T6580] bond7: (slave geneve2): Enslaving as an active interface with an up link [ 973.068788][ T6306] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 973.101364][ T6306] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 973.117159][T10499] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 973.129666][T10499] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 973.207821][T10499] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 973.288597][ T6595] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.9008'. [ 973.298911][ T6611] netlink: 52 bytes leftover after parsing attributes in process `syz.5.9011'. [ 974.190238][ T4948] Bluetooth: hci0: command tx timeout [ 975.431150][ T6306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 975.461462][ T6642] erspan0: entered promiscuous mode [ 975.468676][ T6642] erspan0: left promiscuous mode [ 975.512852][ T6306] 8021q: adding VLAN 0 to HW filter on device team0 [ 975.539550][T10519] bridge0: port 1(bridge_slave_0) entered blocking state [ 975.546738][T10519] bridge0: port 1(bridge_slave_0) entered forwarding state [ 975.643906][T10537] bridge0: port 2(bridge_slave_1) entered blocking state [ 975.651106][T10537] bridge0: port 2(bridge_slave_1) entered forwarding state [ 976.084771][ T6688] net_ratelimit: 823 callbacks suppressed [ 976.084791][ T6688] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 976.087908][ T6689] netlink: 'syz.1.9031': attribute type 11 has an invalid length. [ 976.161200][ T6689] netlink: 'syz.1.9031': attribute type 11 has an invalid length. [ 976.375157][ T6703] syzkaller1: entered promiscuous mode [ 976.396951][ T6703] syzkaller1: entered allmulticast mode [ 976.760307][ T6306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 976.960886][ T6306] veth0_vlan: entered promiscuous mode [ 977.122473][ T6306] veth1_vlan: entered promiscuous mode [ 977.252792][ T6306] veth0_macvtap: entered promiscuous mode [ 977.301881][ T6753] __nla_validate_parse: 4 callbacks suppressed [ 977.301899][ T6753] netlink: 203984 bytes leftover after parsing attributes in process `syz.1.9043'. [ 977.339221][ T6306] veth1_macvtap: entered promiscuous mode [ 977.353515][ T6756] xt_hashlimit: size too large, truncated to 1048576 [ 977.396709][ T6758] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9045'. [ 977.424997][ T6306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 977.487133][ T6764] netlink: 212276 bytes leftover after parsing attributes in process `syz.3.9046'. [ 977.532297][ T6306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 977.542811][ T6767] netlink: 'syz.1.9047': attribute type 1 has an invalid length. [ 977.568206][ T6761] netlink: 44 bytes leftover after parsing attributes in process `syz.2.9044'. [ 977.718253][T10505] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 977.794939][ T6767] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.9047'. [ 977.820962][T10505] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 977.838304][T10505] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 977.906649][T10505] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 978.130142][ T6785] netlink: 'syz.2.9050': attribute type 10 has an invalid length. [ 978.159808][T10499] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 978.206310][T10499] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 978.290649][T10505] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 978.310692][T10505] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 978.642169][ T6808] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 978.723232][ T6817] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9056'. [ 978.843647][ T6821] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9057'. [ 978.871157][ T6824] xt_hashlimit: size too large, truncated to 1048576 [ 978.879414][ T6824] xt_hashlimit: size too large, truncated to 1048576 [ 978.893451][ T6821] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9057'. [ 978.934698][ T6821] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9057'. [ 979.017803][ T6834] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9060'. [ 979.101354][ T6837] tipc: Resetting bearer [ 979.167024][ T6837] tipc: Disabling bearer [ 979.286462][ T6837] vlan0 (unregistering): left allmulticast mode [ 979.313709][ T6837] veth0_vlan (unregistering): left allmulticast mode [ 979.334096][ T6837] vlan0 (unregistering): left promiscuous mode [ 980.109035][ T6861] vlan2: entered promiscuous mode [ 980.128139][ T6861] geneve1: entered promiscuous mode [ 980.139824][ T6861] vlan2: entered allmulticast mode [ 980.150614][ T6861] geneve1: entered allmulticast mode [ 980.158416][ T6871] netlink: 'syz.0.9064': attribute type 1 has an invalid length. [ 980.169884][ T6863] hsr_slave_0: left promiscuous mode [ 980.182640][ T6863] hsr_slave_1: left promiscuous mode [ 980.199032][ T6874] netlink: 'syz.2.9066': attribute type 10 has an invalid length. [ 980.538750][ T6902] xt_CONNSECMARK: invalid mode: 0 [ 980.703136][ T6909] netlink: 'syz.1.9078': attribute type 1 has an invalid length. [ 980.744418][T10517] wlan1: Trigger new scan to find an IBSS to join [ 980.796525][ T6918] netlink: 'syz.2.9081': attribute type 58 has an invalid length. [ 980.805062][ T6909] 8021q: adding VLAN 0 to HW filter on device bond7 [ 980.823172][ T6909] netlink: 'syz.1.9078': attribute type 1 has an invalid length. [ 980.846327][ T6915] bond7: (slave veth11): Enslaving as an active interface with a down link [ 980.956906][ T6909] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 980.973149][ T6909] bond7: (slave batadv1): making interface the new active one [ 981.002575][ T6909] batadv1: entered promiscuous mode [ 981.011608][ T6909] bond7: (slave batadv1): Enslaving as an active interface with an up link [ 981.143552][ T6933] FAULT_INJECTION: forcing a failure. [ 981.143552][ T6933] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 981.158547][ T6933] CPU: 1 UID: 0 PID: 6933 Comm: syz.3.9084 Not tainted syzkaller #0 PREEMPT(full) [ 981.158576][ T6933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 981.158590][ T6933] Call Trace: [ 981.158599][ T6933] [ 981.158609][ T6933] dump_stack_lvl+0xe8/0x150 [ 981.158647][ T6933] should_fail_ex+0x412/0x560 [ 981.158678][ T6933] _copy_from_iter+0x1d3/0x1670 [ 981.158707][ T6933] ? rcu_is_watching+0x15/0xb0 [ 981.158752][ T6933] ? __pfx__copy_from_iter+0x10/0x10 [ 981.158784][ T6933] ? netlink_sendmsg+0x650/0xb40 [ 981.158817][ T6933] ? skb_put+0x11b/0x210 [ 981.158861][ T6933] netlink_sendmsg+0x6c0/0xb40 [ 981.158909][ T6933] ? __pfx_netlink_sendmsg+0x10/0x10 [ 981.158940][ T6933] ? aa_sock_msg_perm+0xf1/0x1b0 [ 981.158969][ T6933] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 981.158999][ T6933] ____sys_sendmsg+0x972/0x9f0 [ 981.159016][ T6933] ? __might_fault+0xaf/0x130 [ 981.159054][ T6933] ? __pfx_____sys_sendmsg+0x10/0x10 [ 981.159081][ T6933] ? import_iovec+0x73/0xa0 [ 981.159106][ T6933] ___sys_sendmsg+0x2a5/0x360 [ 981.159123][ T6933] ? __lock_acquire+0x6b5/0x2cf0 [ 981.159146][ T6933] ? __pfx____sys_sendmsg+0x10/0x10 [ 981.159196][ T6933] ? __fget_files+0x2a/0x420 [ 981.159218][ T6933] ? __fget_files+0x3a0/0x420 [ 981.159250][ T6933] __x64_sys_sendmsg+0x1bd/0x2a0 [ 981.159269][ T6933] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 981.159297][ T6933] ? __pfx_ksys_write+0x10/0x10 [ 981.159332][ T6933] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 981.159353][ T6933] do_syscall_64+0x174/0x580 [ 981.159373][ T6933] ? trace_irq_disable+0x3b/0x140 [ 981.159400][ T6933] ? clear_bhb_loop+0x40/0x90 [ 981.159423][ T6933] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 981.159441][ T6933] RIP: 0033:0x7fc09479ce59 [ 981.159458][ T6933] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 981.159473][ T6933] RSP: 002b:00007fc0955eb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 981.159492][ T6933] RAX: ffffffffffffffda RBX: 00007fc094a15fa0 RCX: 00007fc09479ce59 [ 981.159505][ T6933] RDX: 0000000004008000 RSI: 0000200000002a00 RDI: 0000000000000004 [ 981.159517][ T6933] RBP: 00007fc0955eb090 R08: 0000000000000000 R09: 0000000000000000 [ 981.159528][ T6933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 981.159539][ T6933] R13: 00007fc094a16038 R14: 00007fc094a15fa0 R15: 00007fff11d39868 [ 981.159570][ T6933] [ 981.578570][ T6940] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 981.700293][ T6940] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 981.792312][ T6945] pim6reg1: entered promiscuous mode [ 981.820639][ T6945] pim6reg1: entered allmulticast mode [ 982.168703][ T6964] netlink: 'syz.0.9094': attribute type 1 has an invalid length. [ 982.203683][ T6964] netlink: 'syz.0.9094': attribute type 2 has an invalid length. [ 982.224201][ T6968] netlink: 'syz.2.9096': attribute type 13 has an invalid length. [ 982.232138][ T6964] netlink: 'syz.0.9094': attribute type 1 has an invalid length. [ 982.247006][ T30] audit: type=1107 audit(1780177451.111:33): pid=6961 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ù‹5ž÷Œ•%èÍUýAÊÃËÙ ë0ä™l…t¿Ý•/Öÿ Ž6òЍŠç›' [ 982.464234][ T6978] bridge0: port 3(veth1_to_bridge) entered blocking state [ 982.490504][ T6978] bridge0: port 3(veth1_to_bridge) entered disabled state [ 982.513259][ T6978] veth1_to_bridge: entered allmulticast mode [ 982.545549][ T6978] veth1_to_bridge: entered promiscuous mode [ 982.901781][ T6996] xfrm0: Caught tx_queue_len zero misconfig [ 983.119036][ T5419] IPVS: starting estimator thread 0... [ 983.225679][ T7008] IPVS: using max 31 ests per chain, 74400 per kthread [ 983.484864][ T7025] syzkaller1: entered promiscuous mode [ 983.501304][ T7025] syzkaller1: entered allmulticast mode [ 983.972728][ T7051] __nla_validate_parse: 12 callbacks suppressed [ 983.972745][ T7051] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9123'. [ 983.997027][ T7056] xt_cluster: you have exceeded the maximum number of cluster nodes (4294967295 > 32) [ 984.143296][ T7065] IPVS: set_ctl: invalid protocol: 60 127.0.0.1:20003 [ 984.291009][ T7070] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9128'. [ 984.301206][ T7073] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9128'. [ 984.373395][ T7075] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9129'. [ 984.462154][ T7085] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9133'. [ 984.621203][ T7091] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9135'. [ 984.745527][T10499] wlan1: Trigger new scan to find an IBSS to join [ 984.873692][ T7112] netem: change failed [ 984.908348][ T7117] netlink: 165 bytes leftover after parsing attributes in process `syz.5.9141'. [ 984.931921][ T7115] tipc: Enabling of bearer rejected, failed to enable media [ 985.332312][ T7152] validate_nla: 2 callbacks suppressed [ 985.332345][ T7152] netlink: 'syz.2.9150': attribute type 1 has an invalid length. [ 985.386906][ T7152] 8021q: adding VLAN 0 to HW filter on device bond5 [ 985.413858][ T7152] bond5: (slave veth0_to_bond): making interface the new active one [ 985.423611][ T7152] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 985.464940][ T7156] bond5: entered promiscuous mode [ 985.474037][ T7156] veth0_to_bond: entered promiscuous mode [ 985.480215][ T7156] bond5: entered allmulticast mode [ 985.485504][ T7156] veth0_to_bond: entered allmulticast mode [ 985.523116][ T7159] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9152'. [ 985.546261][ T7159] netlink: 50 bytes leftover after parsing attributes in process `syz.0.9152'. [ 985.564423][ T7161] SET target dimension over the limit! [ 985.576097][ T7159] netlink: 50 bytes leftover after parsing attributes in process `syz.0.9152'. [ 985.649217][T10499] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 985.661985][ T7165] lo speed is unknown, defaulting to 1000 [ 985.697127][ T7165] lo speed is unknown, defaulting to 1000 [ 985.782695][ T7176] netlink: 'syz.0.9156': attribute type 3 has an invalid length. [ 985.823118][ T7165] lo speed is unknown, defaulting to 1000 [ 985.829656][ T7170] syzkaller0: entered promiscuous mode [ 985.838852][ T7170] syzkaller0: entered allmulticast mode [ 986.218497][ T7165] infiniband sz1: set down [ 986.231106][ T7165] infiniband sz1: added lo [ 986.261459][ T7165] smbdirect: ib_dev[sz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 986.277461][ T7165] smbdirect: ib_dev[sz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 986.295347][ T7165] smbdirect: ib_dev[sz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 986.334829][ T7165] RDS/IB: sz1: added [ 986.350660][ T5419] lo speed is unknown, defaulting to 1000 [ 986.360989][ T7165] smc: adding ib device sz1 with port count 1 [ 986.383229][ T7165] smc: ib device sz1 port 1 has no pnetid [ 986.411514][T20593] lo speed is unknown, defaulting to 1000 [ 986.426593][ T7165] lo speed is unknown, defaulting to 1000 [ 986.534278][ T7202] IPv6: NLM_F_CREATE should be specified when creating new route [ 986.597495][ T7205] bond9: option fail_over_mac: invalid value (16) [ 986.609401][ T7205] bond9 (unregistering): Released all slaves [ 986.852295][ T7218] xt_hashlimit: size too large, truncated to 1048576 [ 987.107003][ T7165] lo speed is unknown, defaulting to 1000 [ 987.351869][ T7246] netlink: Conntrack attr has 4 unknown bytes [ 987.704306][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 987.746751][ T7165] lo speed is unknown, defaulting to 1000 [ 987.928103][ T7283] IPv6: sit2: Disabled Multicast RS [ 987.935360][ T7283] sit2: entered allmulticast mode [ 988.000083][ T7285] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 988.045877][ T7290] sit0: entered promiscuous mode [ 988.361558][ T7165] lo speed is unknown, defaulting to 1000 [ 988.467850][ T7311] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 988.863420][ T7331] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 988.863934][ T7328] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 988.905026][ T7165] lo speed is unknown, defaulting to 1000 [ 989.447287][ T7165] lo speed is unknown, defaulting to 1000 [ 989.509628][ T7347] netlink: 'syz.0.9205': attribute type 8 has an invalid length. [ 989.533557][ T7350] netlink: 'syz.0.9205': attribute type 8 has an invalid length. [ 989.754368][ T7355] xt_l2tp: missing protocol rule (udp|l2tpip) [ 989.841137][ T7359] netlink: 'syz.1.9208': attribute type 1 has an invalid length. [ 989.864273][ T7359] __nla_validate_parse: 9 callbacks suppressed [ 989.864287][ T7359] netlink: 2088 bytes leftover after parsing attributes in process `syz.1.9208'. [ 989.904448][ T7359] netlink: 1 bytes leftover after parsing attributes in process `syz.1.9208'. [ 990.137516][ T7165] lo speed is unknown, defaulting to 1000 [ 990.469589][ T7388] xt_hashlimit: size too large, truncated to 1048576 [ 990.577235][ T7165] lo speed is unknown, defaulting to 1000 [ 990.782744][ T7406] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9219'. [ 990.839512][ T7407] x_tables: duplicate underflow at hook 1 [ 991.086838][ T7165] lo speed is unknown, defaulting to 1000 [ 991.109315][ T7420] netlink: 'syz.2.9222': attribute type 12 has an invalid length. [ 991.176131][ T7427] netlink: 'syz.0.9224': attribute type 29 has an invalid length. [ 991.327046][ T7433] netlink: 'syz.2.9225': attribute type 11 has an invalid length. [ 991.344300][ T7433] netlink: 'syz.2.9225': attribute type 4 has an invalid length. [ 991.352910][ T7433] netlink: 'syz.2.9225': attribute type 6 has an invalid length. [ 991.373698][ T7435] Bluetooth: MGMT ver 1.23 [ 991.380646][ T7433] netlink: 199556 bytes leftover after parsing attributes in process `syz.2.9225'. [ 991.461397][ T7440] netlink: 'syz.0.9226': attribute type 1 has an invalid length. [ 991.855766][ T7165] lo speed is unknown, defaulting to 1000 [ 992.063129][T10503] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x2 [ 992.207414][ T7479] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9234'. [ 992.218509][ T7482] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9235'. [ 992.376152][T10499] batadv1: left promiscuous mode [ 992.478171][ T7493] syzkaller0: entered promiscuous mode [ 992.503442][ T7493] syzkaller0: entered allmulticast mode [ 992.550708][ T7493] netlink: 'syz.2.9239': attribute type 3 has an invalid length. [ 992.568213][ T7493] netlink: 224 bytes leftover after parsing attributes in process `syz.2.9239'. [ 992.721094][ T7510] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9245'. [ 992.765737][ T7507] caif0: tun_chr_ioctl cmd 1074025678 [ 992.779820][ T7507] caif0: group set to 0 [ 992.797274][ T7512] caif0: tun_chr_ioctl cmd 1074025678 [ 992.813256][ T7512] caif0: group set to 0 [ 992.839706][ T1316] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 993.013375][ T7522] netlink: 'syz.3.9248': attribute type 21 has an invalid length. [ 993.021938][ T7522] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 993.029221][ T7522] IPv6: NLM_F_CREATE should be set when creating new route [ 993.036592][ T7522] IPv6: NLM_F_CREATE should be set when creating new route [ 993.044087][ T7522] IPv6: NLM_F_CREATE should be set when creating new route [ 993.256323][ T7534] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.9253'. [ 993.308833][ T7536] netlink: 180 bytes leftover after parsing attributes in process `syz.3.9255'. [ 993.336137][ T7534] openvswitch: netlink: IP tunnel TTL not specified. [ 993.430699][ T7545] netlink: 'syz.1.9256': attribute type 4 has an invalid length. [ 993.462773][ T7545] .`: renamed from  [ 993.479505][ T7549] netlink: 'syz.2.9258': attribute type 1 has an invalid length. [ 993.621305][ T7560] netlink: 'syz.2.9262': attribute type 1 has an invalid length. [ 993.696959][ T7565] sctp: [Deprecated]: syz.5.9263 (pid 7565) Use of struct sctp_assoc_value in delayed_ack socket option. [ 993.696959][ T7565] Use struct sctp_sack_info instead [ 993.779071][ T7560] 8021q: adding VLAN 0 to HW filter on device bond6 [ 993.833869][ T7573] bond8: entered allmulticast mode [ 993.900870][ T7571] veth13: entered allmulticast mode [ 993.966498][ T7571] bond8: (slave veth13): Enslaving as an active interface with an up link [ 993.998092][ T7585] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 994.048770][ T7585] vlan5: entered promiscuous mode [ 994.055269][ T7585] dummy0: entered promiscuous mode [ 994.463802][ T7623] xt_hl: Unknown Hop Limit match mode: 206 [ 994.481034][ T7627] team_slave_1: Caught tx_queue_len zero misconfig [ 994.498251][ T7628] sctp: [Deprecated]: syz.3.9281 (pid 7628) Use of struct sctp_assoc_value in delayed_ack socket option. [ 994.498251][ T7628] Use struct sctp_sack_info instead [ 995.026394][ T7664] openvswitch: netlink: Flow key attr not present in new flow. [ 995.325455][ T7678] __nla_validate_parse: 9 callbacks suppressed [ 995.325475][ T7678] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9296'. [ 995.363369][ T7678] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9296'. [ 995.495196][ T7683] bond1: entered promiscuous mode [ 995.516775][ T7683] 8021q: adding VLAN 0 to HW filter on device bond1 [ 995.536511][ T7688] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9298'. [ 995.613786][ T7683] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9298'. [ 995.703107][ T7683] bond1: (slave bridge2): making interface the new active one [ 995.728292][ T7683] bridge2: entered promiscuous mode [ 995.736942][ T7683] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 996.142289][ T7737] netlink: 208240 bytes leftover after parsing attributes in process `syz.5.9309'. [ 996.241675][T29641] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 996.260333][T29641] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 996.268941][T29641] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 996.281347][T29641] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 996.297846][T29641] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 996.450182][ T7725] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 996.466561][ T7725] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 996.698052][ T7725] team0: Port device netdevsim1 removed [ 996.721624][ T7725] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 996.772629][ T7725] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 996.978805][ T7779] validate_nla: 4 callbacks suppressed [ 996.978822][ T7779] netlink: 'syz.1.9317': attribute type 20 has an invalid length. [ 996.993177][T29638] syz_tun (unregistering): left allmulticast mode [ 997.010209][T29638] syz_tun (unregistering): left promiscuous mode [ 997.023183][T29638] bridge0: port 1(syz_tun) entered disabled state [ 997.041066][ T7779] IPv6: NLM_F_CREATE should be specified when creating new route [ 997.175695][ T7725] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 997.216378][ T7725] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 997.483033][ T4948] Bluetooth: hci6: link tx timeout [ 997.488528][ T4948] Bluetooth: hci6: killing stalled connection 10:aa:aa:aa:aa:aa [ 997.540949][T10517] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 997.563483][T10517] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 997.617193][T10519] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 997.627672][T10519] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 997.651380][ T7739] vxcan1 speed is unknown, defaulting to 1000 [ 997.683197][T10519] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 997.709138][T10519] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 997.766686][T10517] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 997.779852][T10517] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 997.945124][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 998.031303][ T7832] netlink: 148 bytes leftover after parsing attributes in process `syz.5.9334'. [ 998.050730][ T7830] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9333'. [ 998.093163][ T7739] wg1 speed is unknown, defaulting to 1000 [ 998.111123][ T7830] syzkaller0: entered promiscuous mode [ 998.128700][ T7830] syzkaller0: entered allmulticast mode [ 998.210792][ T7835] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9335'. [ 998.256303][ T7835] 8021q: adding VLAN 0 to HW filter on device macsec2 [ 998.264978][T20593] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 998.359045][ T7739] lo speed is unknown, defaulting to 1000 [ 998.425175][ T7828] Bluetooth: hci5: command tx timeout [ 998.680651][ T7739] bridge0: port 1(bridge_slave_0) entered blocking state [ 998.688122][ T7739] bridge0: port 1(bridge_slave_0) entered disabled state [ 998.695468][ T7739] bridge_slave_0: entered allmulticast mode [ 998.702560][ T7739] bridge_slave_0: entered promiscuous mode [ 998.710676][ T7739] bridge0: port 2(bridge_slave_1) entered blocking state [ 998.718110][ T7739] bridge0: port 2(bridge_slave_1) entered disabled state [ 998.725566][ T7739] bridge_slave_1: entered allmulticast mode [ 998.732627][ T7739] bridge_slave_1: entered promiscuous mode [ 998.760552][ T7739] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 998.773029][ T7739] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 998.803351][ T7739] team0: Port device team_slave_0 added [ 998.811519][ T7739] team0: Port device team_slave_1 added [ 998.839732][ T7739] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 998.846975][ T7739] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 998.873172][ T7739] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 998.885678][ T7739] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 998.892621][ T7739] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 998.919391][ T7739] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 998.960876][ T7739] hsr_slave_0: entered promiscuous mode [ 998.967500][ T7739] hsr_slave_1: entered promiscuous mode [ 998.973991][ T7739] debugfs: 'hsr0' already exists in 'hsr' [ 998.979800][ T7739] Cannot create hsr debugfs directory [ 999.393317][ T7739] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 999.403001][ T7739] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 999.411055][ T7739] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 999.420369][ T7739] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 999.429306][ T7739] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 999.441030][ T7739] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 999.450174][ T7739] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 999.460184][ T7739] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 999.533317][ T7739] 8021q: adding VLAN 0 to HW filter on device bond0 [ 999.544672][ T7828] Bluetooth: hci6: command 0x0405 tx timeout [ 999.639076][ T7739] 8021q: adding VLAN 0 to HW filter on device team0 [ 999.653831][T10493] bridge0: port 1(bridge_slave_0) entered blocking state [ 999.661023][T10493] bridge0: port 1(bridge_slave_0) entered forwarding state [ 999.688996][T10493] bridge0: port 2(bridge_slave_1) entered blocking state [ 999.696179][T10493] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1000.031700][ T4948] Bluetooth: hci1: command 0x0405 tx timeout [ 1000.168252][ T7739] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1000.242516][ T7739] veth0_vlan: entered promiscuous mode [ 1000.260961][ T7739] veth1_vlan: entered promiscuous mode [ 1000.300137][ T7739] veth0_macvtap: entered promiscuous mode [ 1000.311629][ T7739] veth1_macvtap: entered promiscuous mode [ 1000.337773][ T7739] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1000.358801][ T7739] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1000.378943][T10519] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1000.393671][T10519] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1000.422034][T10519] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1000.482009][T10519] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1000.508372][T29641] Bluetooth: hci5: command tx timeout [ 1000.548460][T10505] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1000.575397][T10505] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1000.608082][T10519] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1000.616604][T10519] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1002.584439][T29641] Bluetooth: hci5: command tx timeout [ 1004.664739][T29641] Bluetooth: hci5: command tx timeout [ 1017.785796][T10499] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1020.285062][ T7973] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9337'. [ 1020.609296][ T7978] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9337'. [ 1020.649234][ T7990] netlink: 'syz.5.9342': attribute type 9 has an invalid length. [ 1020.674246][ T7978] nbd: device at index 64 is going down [ 1020.788187][ T4948] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1020.804643][ T4948] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1020.818005][ T4948] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1020.828999][ T4948] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1020.858157][ T4948] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1020.960240][ T7999] : entered promiscuous mode [ 1020.999564][ T7989] udevd[7989]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1021.069997][ T7989] udevd[7989]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1021.539671][ T8038] syzkaller0: entered promiscuous mode [ 1021.565223][ T8038] syzkaller0: entered allmulticast mode [ 1021.929685][ T7993] vxcan1 speed is unknown, defaulting to 1000 [ 1022.357875][ T7993] wg1 speed is unknown, defaulting to 1000 [ 1022.752038][ T8114] vlan1: entered promiscuous mode [ 1022.778990][ T8108] vlan1: left promiscuous mode [ 1022.869924][ T7993] lo speed is unknown, defaulting to 1000 [ 1022.915039][ T8123] x_tables: duplicate underflow at hook 3 [ 1022.925731][ T8128] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9378'. [ 1022.985196][T29641] Bluetooth: hci2: command tx timeout [ 1023.039662][ T8132] xt_hashlimit: size too large, truncated to 1048576 [ 1023.109394][ T8142] tipc: Enabling not permitted [ 1023.145074][ T8142] tipc: Enabling of bearer rejected, failed to enable media [ 1023.189816][ T8144] netlink: 36 bytes leftover after parsing attributes in process `syz.3.9382'. [ 1023.260308][ T8151] netlink: 44 bytes leftover after parsing attributes in process `syz.0.9383'. [ 1023.276762][ T8151] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9383'. [ 1023.305746][ T8151] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9383'. [ 1023.627903][ T8175] netlink: 'syz.0.9386': attribute type 1 has an invalid length. [ 1023.655845][ T8176] netlink: 'syz.3.9389': attribute type 1 has an invalid length. [ 1023.663834][ T8176] netlink: 96 bytes leftover after parsing attributes in process `syz.3.9389'. [ 1023.673384][ T8176] netlink: 658 bytes leftover after parsing attributes in process `syz.3.9389'. [ 1023.686566][ T8164] netlink: 'syz.2.9387': attribute type 4 has an invalid length. [ 1023.691779][ T8176] netlink: 1 bytes leftover after parsing attributes in process `syz.3.9389'. [ 1023.808886][ T8181] xt_hashlimit: invalid interval [ 1023.989734][ T8198] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 1024.091611][ T8201] netlink: 'syz.0.9396': attribute type 25 has an invalid length. [ 1024.191984][ T8201] netlink: 'syz.0.9396': attribute type 25 has an invalid length. [ 1024.224369][T10537] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1024.263599][T10537] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1024.296290][T10537] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1024.316975][T10537] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1024.398477][ T7993] bridge0: port 1(bridge_slave_0) entered blocking state [ 1024.406314][ T7993] bridge0: port 1(bridge_slave_0) entered disabled state [ 1024.413889][ T7993] bridge_slave_0: entered allmulticast mode [ 1024.423016][ T7993] bridge_slave_0: entered promiscuous mode [ 1024.442622][ T7993] bridge0: port 2(bridge_slave_1) entered blocking state [ 1024.468236][ T7993] bridge0: port 2(bridge_slave_1) entered disabled state [ 1024.484854][ T7993] bridge_slave_1: entered allmulticast mode [ 1024.492796][ T7993] bridge_slave_1: entered promiscuous mode [ 1024.586301][ T7993] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1024.613777][ T7993] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1024.705204][ T7993] team0: Port device team_slave_0 added [ 1024.724637][ T7993] team0: Port device team_slave_1 added [ 1024.772350][ T8235] xt_hashlimit: size too large, truncated to 1048576 [ 1024.809372][ T7993] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1024.824197][ T7993] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1024.881074][ T7993] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1024.908737][ T7993] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1024.923988][ T7993] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1025.003982][ T7993] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1025.064490][T29641] Bluetooth: hci2: command tx timeout [ 1025.294862][ T7993] hsr_slave_0: entered promiscuous mode [ 1025.301524][ T7993] hsr_slave_1: entered promiscuous mode [ 1025.316906][ T7993] debugfs: 'hsr0' already exists in 'hsr' [ 1025.322696][ T7993] Cannot create hsr debugfs directory [ 1025.411663][ T8256] netlink: 'syz.0.9410': attribute type 11 has an invalid length. [ 1025.440388][ T8256] __nla_validate_parse: 3 callbacks suppressed [ 1025.440404][ T8256] netlink: 199828 bytes leftover after parsing attributes in process `syz.0.9410'. [ 1025.508322][ T8256] netem: incorrect gi model size [ 1025.522001][ T8256] netem: change failed [ 1025.760391][ T7993] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1025.796411][ T7993] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1026.019498][ T8279] netlink: 'syz.2.9418': attribute type 27 has an invalid length. [ 1026.054727][ T8279] netlink: 'syz.2.9418': attribute type 4 has an invalid length. [ 1026.067373][ T8287] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9419'. [ 1026.073434][ T8279] netlink: 144 bytes leftover after parsing attributes in process `syz.2.9418'. [ 1026.113793][ T7993] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1026.140424][ T7993] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1026.173458][ T8287] macvlan2: entered allmulticast mode [ 1026.173589][ T8291] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1026.179984][ T8287] dummy0: entered allmulticast mode [ 1026.200750][ T8287] dummy0: entered promiscuous mode [ 1026.306158][ T7993] .`: (slave netdevsim1): Releasing backup interface [ 1026.330712][ T8293] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1026.342905][ T7993] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1026.362201][ T7993] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1026.382865][ T8297] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1026.437446][ T8299] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9424'. [ 1026.579368][ T7993] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1026.605471][ T7993] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1026.647612][ T8304] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9426'. [ 1026.705471][ T8304] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1026.714556][ T8306] tipc: Started in network mode [ 1026.729714][ T8306] tipc: Node identity ac14140f, cluster identity 4711 [ 1026.748051][ T8306] tipc: New replicast peer: 172.20.20.187 [ 1026.755224][ T8306] tipc: Enabled bearer , priority 10 [ 1026.898017][ T8301] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9425'. [ 1027.003555][ T8324] netlink: 'syz.5.9429': attribute type 1 has an invalid length. [ 1027.017154][ T8324] netlink: 'syz.5.9429': attribute type 1 has an invalid length. [ 1027.145077][T29641] Bluetooth: hci2: command tx timeout [ 1027.183837][ T7993] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1027.360684][ T7993] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1027.379377][ T7993] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1027.416825][ T7993] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1027.424830][ T7993] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1027.425211][ T8344] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9435'. [ 1027.455263][ T7993] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1027.489011][ T7993] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1027.512255][ T7993] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1027.590484][ T8357] netlink: 'syz.0.9437': attribute type 1 has an invalid length. [ 1027.712780][ T8357] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1027.739374][ T8366] ip_vti0: entered promiscuous mode [ 1027.980374][ T5415] tipc: Node number set to 2886997007 [ 1028.077857][ T8374] syzkaller1: entered promiscuous mode [ 1028.094515][ T8374] syzkaller1: entered allmulticast mode [ 1028.153217][ T8370] syzkaller0: entered promiscuous mode [ 1028.171797][ T8370] syzkaller0: entered allmulticast mode [ 1028.245130][ T8400] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9443'. [ 1028.307670][ T8400] veth0: entered promiscuous mode [ 1028.363275][T10503] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1028.371325][T10503] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1028.381813][ T8400] veth0: left promiscuous mode [ 1028.388018][ T8405] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9445'. [ 1028.394566][ T5419] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1028.412479][ T7993] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1028.523234][ T7993] 8021q: adding VLAN 0 to HW filter on device team0 [ 1028.537646][ T8413] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9447'. [ 1028.563692][T10537] bridge0: port 1(bridge_slave_0) entered blocking state [ 1028.570893][T10537] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1028.579601][ T8413] openvswitch: netlink: Flow actions attr not present in new flow. [ 1028.603695][T10537] bridge0: port 2(bridge_slave_1) entered blocking state [ 1028.610889][T10537] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1029.024790][ T5419] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1029.045091][ T8432] tc action pedit 'at' offset -61061 out of bounds [ 1029.052590][ T8432] tc action pedit 'at' offset -61061 out of bounds [ 1029.059183][ T8432] tc action pedit 'at' offset -61061 out of bounds [ 1029.065737][ T8432] tc action pedit 'at' offset -61061 out of bounds [ 1029.072255][ T8432] tc action pedit 'at' offset -61061 out of bounds [ 1029.078827][ T8432] tc action pedit 'at' offset -61061 out of bounds [ 1029.085398][ T8432] tc action pedit 'at' offset -61061 out of bounds [ 1029.091920][ T8432] tc action pedit 'at' offset -61061 out of bounds [ 1029.098481][ T8432] tc action pedit 'at' offset -61061 out of bounds [ 1029.105034][ T8432] tc action pedit 'at' offset -61061 out of bounds [ 1029.111565][ T8432] 0: reclassify loop, rule prio 0, protocol 800 [ 1029.234938][T29641] Bluetooth: hci2: command tx timeout [ 1029.240978][ T5423] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1029.445790][ T8455] lo: Caught tx_queue_len zero misconfig [ 1029.672265][ T8470] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1029.757200][ T7993] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1029.872780][ T7993] veth0_vlan: entered promiscuous mode [ 1029.905614][ T7993] veth1_vlan: entered promiscuous mode [ 1029.992444][ T7993] veth0_macvtap: entered promiscuous mode [ 1030.007496][ T7993] veth1_macvtap: entered promiscuous mode [ 1030.078489][ T7993] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1030.127602][ T7993] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1030.188422][ T8495] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1030.202352][T10497] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1030.232588][T10497] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1030.256578][T10497] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1030.274308][T10497] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1030.443308][T10497] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1030.460788][T10497] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1030.509500][T10503] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1030.520317][T10503] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1030.567344][ T8515] __nla_validate_parse: 7 callbacks suppressed [ 1030.567390][ T8515] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9478'. [ 1030.635548][ T8520] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9479'. [ 1030.699359][ T8522] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9480'. [ 1030.713428][ T8522] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9480'. [ 1030.811031][ T8526] netlink: 256 bytes leftover after parsing attributes in process `syz.1.9482'. [ 1030.893756][ T8533] netlink: 'syz.1.9482': attribute type 3 has an invalid length. [ 1031.021747][ T8541] netdevsim netdevsim0: Firmware load for '..' refused, path contains '..' component [ 1031.354713][ T8550] netlink: 'syz.1.9490': attribute type 1 has an invalid length. [ 1031.795558][ T8590] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9502'. [ 1031.806300][ T8591] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9502'. [ 1031.913923][ T8594] xt_CONNSECMARK: invalid mode: 0 [ 1031.947659][ T8594] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 1031.974283][ T8594] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1031.993984][ T8605] netlink: 'syz.5.9505': attribute type 3 has an invalid length. [ 1032.057228][ T8603] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9507'. [ 1032.104999][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1032.132665][ T8616] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9508'. [ 1032.141867][ T8616] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9508'. [ 1032.500722][ T8635] ÿ: renamed from veth0 (while UP) [ 1032.832259][ T8653] sctp: [Deprecated]: syz.2.9517 (pid 8653) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1032.832259][ T8653] Use struct sctp_sack_info instead [ 1032.858461][ T8648] syzkaller0: entered promiscuous mode [ 1032.864588][ T8648] syzkaller0: entered allmulticast mode [ 1032.882490][ T8653] netlink: 'syz.2.9517': attribute type 12 has an invalid length. [ 1032.899491][ T8653] netlink: 'syz.2.9517': attribute type 11 has an invalid length. [ 1034.099522][ T8695] netlink: 'syz.5.9529': attribute type 1 has an invalid length. [ 1035.838276][ T8733] syz_tun: entered allmulticast mode [ 1035.892177][ T8733] pim6reg: entered allmulticast mode [ 1035.909198][ T8742] netlink: 'syz.3.9539': attribute type 29 has an invalid length. [ 1035.989356][ T8746] __nla_validate_parse: 3 callbacks suppressed [ 1035.989376][ T8746] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9538'. [ 1036.022862][ T8733] syz_tun (unregistering): left allmulticast mode [ 1036.055774][ T30] audit: type=1804 audit(1780177504.911:34): pid=8751 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.9541" name="/newroot/459/cgroup.controllers" dev="tmpfs" ino=2361 res=1 errno=0 [ 1036.150717][ T30] audit: type=1800 audit(1780177504.951:35): pid=8751 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.9541" name="cgroup.controllers" dev="tmpfs" ino=2361 res=0 errno=0 [ 1036.408131][ T8772] netlink: 272 bytes leftover after parsing attributes in process `syz.3.9544'. [ 1036.462184][ T8772] netlink: 272 bytes leftover after parsing attributes in process `syz.3.9544'. [ 1036.497153][ T8781] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1036.515182][ T8776] netlink: 28 bytes leftover after parsing attributes in process `syz.5.9546'. [ 1036.561834][ T8778] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1036.758835][ T8798] xt_HMARK: proto mask must be zero with L3 mode [ 1036.775497][ T8801] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9550'. [ 1036.865756][ T8802] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9550'. [ 1036.940705][ T8801] syzkaller1: entered promiscuous mode [ 1036.971653][ T8812] netlink: 'syz.2.9555': attribute type 1 has an invalid length. [ 1036.979618][ T8801] syzkaller1: entered allmulticast mode [ 1037.006058][ T8808] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9553'. [ 1037.025978][ T8812] netlink: 'syz.2.9555': attribute type 2 has an invalid length. [ 1037.048959][ T8812] netlink: 'syz.2.9555': attribute type 1 has an invalid length. [ 1037.096935][ T8819] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 1037.193739][ T8821] netlink: 256 bytes leftover after parsing attributes in process `syz.0.9557'. [ 1037.374733][ T8839] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.9560'. [ 1037.439604][ T8842] netlink: 'syz.5.9563': attribute type 6 has an invalid length. [ 1037.476649][ T8842] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9563'. [ 1037.699588][ T8860] Bluetooth: MGMT ver 1.23 [ 1037.833299][ T8875] netlink: 'syz.3.9572': attribute type 1 has an invalid length. [ 1039.045758][ T8921] netlink: 'syz.3.9582': attribute type 12 has an invalid length. [ 1039.833863][ T8978] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 1039.853766][ T8978] netlink: 'syz.0.9593': attribute type 12 has an invalid length. [ 1039.886752][ T8979] netlink: 'syz.1.9591': attribute type 5 has an invalid length. [ 1040.071820][ T8987] bridge0: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 1040.115705][ T8987] bridge0: port 2(bridge_slave_1) entered disabled state [ 1040.123405][ T8987] bridge0: port 1(bridge_slave_0) entered disabled state [ 1040.184311][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1040.408480][ T8998] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1040.443665][ T9001] openvswitch: netlink: Tunnel attr 78 out of range max 16 [ 1041.015612][ T9035] __nla_validate_parse: 16 callbacks suppressed [ 1041.015633][ T9035] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9607'. [ 1041.122284][ T9035] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9607'. [ 1041.146763][ T9039] xt_nat: multiple ranges no longer supported [ 1041.271119][ T9050] x_tables: unsorted underflow at hook 1 [ 1041.335766][ T9057] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9611'. [ 1041.415421][ T9062] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9605'. [ 1041.444676][ T9060] vlan2: entered promiscuous mode [ 1041.468377][ T9055] hsr0: entered promiscuous mode [ 1041.670787][ T9069] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9614'. [ 1041.859999][ T9089] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1041.871562][ T9088] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9619'. [ 1041.881542][ T9089] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1042.022009][ T9103] netlink: 4132 bytes leftover after parsing attributes in process `syz.2.9624'. [ 1042.039833][ T9102] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9622'. [ 1042.101294][ T9107] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1042.127466][ T9102] bond3: entered promiscuous mode [ 1042.133698][ T9107] netlink: 220 bytes leftover after parsing attributes in process `syz.2.9625'. [ 1042.143349][ T9102] bond3: entered allmulticast mode [ 1042.151728][ T9107] bridge0: Caught tx_queue_len zero misconfig [ 1042.273274][ T9113] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9626'. [ 1044.773117][ T9078] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1044.785563][ T9115] netlink: 'syz.2.9627': attribute type 1 has an invalid length. [ 1044.806839][ T9115] netlink: 'syz.2.9627': attribute type 1 has an invalid length. [ 1044.830938][ T9115] netlink: 'syz.2.9627': attribute type 8 has an invalid length. [ 1045.233282][ T9136] syzkaller0: entered promiscuous mode [ 1045.257335][ T9136] syzkaller0: entered allmulticast mode [ 1045.297683][ T9136] skbuff: bad partial csum: csum=65535/2 headroom=4 headlen=65543 [ 1045.335584][ T9149] netlink: 'syz.0.9638': attribute type 23 has an invalid length. [ 1047.363748][ T9154] netlink: 'syz.0.9638': attribute type 23 has an invalid length. [ 1047.606830][T20596] IPVS: starting estimator thread 0... [ 1047.715548][ T9184] IPVS: using max 29 ests per chain, 69600 per kthread [ 1047.920846][ T9206] __nla_validate_parse: 6 callbacks suppressed [ 1047.920865][ T9206] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9651'. [ 1047.969453][ T9206] netlink: 'syz.1.9651': attribute type 1 has an invalid length. [ 1047.996591][ T9213] netlink: 'syz.0.9654': attribute type 1 has an invalid length. [ 1048.001970][ T9206] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.9651'. [ 1048.018448][ T9213] netlink: 224 bytes leftover after parsing attributes in process `syz.0.9654'. [ 1048.033082][ T9215] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9653'. [ 1048.057907][ T9206] netlink: Unknown conntrack attr (0) [ 1048.241118][ T9225] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 1048.249504][ T5420] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 1048.260909][ T9225] netlink: 'syz.3.9656': attribute type 10 has an invalid length. [ 1048.332996][ T9225] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1048.336287][ T9233] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9660'. [ 1048.361574][ T9225] team0: Port device netdevsim1 added [ 1048.367342][ T9234] netlink: 'syz.0.9658': attribute type 11 has an invalid length. [ 1048.380781][ T9234] netlink: 'syz.0.9658': attribute type 11 has an invalid length. [ 1048.408143][ T9234] netlink: 224 bytes leftover after parsing attributes in process `syz.0.9658'. [ 1048.539296][ T9233] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9660'. [ 1048.575309][ T9246] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9664'. [ 1048.580127][ T9233] netlink: 224 bytes leftover after parsing attributes in process `syz.5.9660'. [ 1048.623658][ T9233] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9660'. [ 1048.716063][ T9249] "syz.1.9665" (9249) uses obsolete ecb(arc4) skcipher [ 1048.766664][ T9257] netlink: 'syz.3.9668': attribute type 1 has an invalid length. [ 1048.783964][ T9257] netlink: 'syz.3.9668': attribute type 2 has an invalid length. [ 1048.819432][ T9257] hsr_slave_0: left promiscuous mode [ 1048.847668][ T9257] hsr_slave_1: left promiscuous mode [ 1050.379731][ T30] audit: type=1804 audit(1780177519.241:36): pid=9347 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.9693" name="/newroot/272/cgroup.controllers" dev="tmpfs" ino=1406 res=1 errno=0 [ 1050.452455][ T30] audit: type=1800 audit(1780177519.241:37): pid=9347 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.9693" name="cgroup.controllers" dev="tmpfs" ino=1406 res=0 errno=0 [ 1050.507471][ T9352] xt_hashlimit: size too large, truncated to 1048576 [ 1050.813318][ T9368] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1051.369919][ T9406] gretap3: entered promiscuous mode [ 1051.403869][ T9406] gretap3: entered allmulticast mode [ 1051.584993][ T9428] validate_nla: 3 callbacks suppressed [ 1051.585011][ T9428] netlink: 'syz.1.9717': attribute type 1 has an invalid length. [ 1051.782944][T10503] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1051.801960][T10503] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1051.809896][ T5420] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1052.050341][ T9447] workqueue: Failed to create a rescuer kthread for wq "nfc5_nci_rx_wq": -EINTR [ 1052.171529][ T5420] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1052.264792][ T9460] netlink: 'syz.5.9723': attribute type 23 has an invalid length. [ 1052.533752][ T9472] netlink: 'syz.1.9726': attribute type 2 has an invalid length. [ 1052.566919][ T9472] netlink: 'syz.1.9726': attribute type 2 has an invalid length. [ 1052.594865][ T9478] gtp3: entered allmulticast mode [ 1052.608393][ T9478] team0: Device gtp3 is of different type [ 1052.735490][ T9478] syzkaller1: tun_chr_ioctl cmd 1074025678 [ 1052.747143][ T5415] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1052.768290][ T9478] syzkaller1: group set to 0 [ 1052.817022][ T9490] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 1052.969804][ T9497] __nla_validate_parse: 19 callbacks suppressed [ 1052.969822][ T9497] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9733'. [ 1053.153642][ T9507] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9738'. [ 1053.172952][ T9507] netlink: 'syz.0.9738': attribute type 30 has an invalid length. [ 1053.210227][ T9512] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9738'. [ 1053.261919][ T9512] netlink: 'syz.0.9738': attribute type 30 has an invalid length. [ 1053.284832][ T9513] netlink: 830 bytes leftover after parsing attributes in process `syz.5.9739'. [ 1053.476578][ T9522] netlink: 28 bytes leftover after parsing attributes in process `syz.5.9741'. [ 1053.501135][ T9522] IPVS: Error connecting to the multicast addr [ 1053.541564][T20589] IPVS: starting estimator thread 0... [ 1053.548380][ T9522] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 1053.645669][ T9527] IPVS: using max 29 ests per chain, 69600 per kthread [ 1053.679345][ T9529] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9743'. [ 1053.797556][ T9531] bridge_slave_0: left allmulticast mode [ 1053.827880][ T9531] bridge_slave_0: left promiscuous mode [ 1053.836433][ T9531] bridge0: port 1(bridge_slave_0) entered disabled state [ 1053.852760][ T9531] veth1_to_bridge: left allmulticast mode [ 1053.873036][ T9531] veth1_to_bridge: left promiscuous mode [ 1053.889710][ T9531] bridge0: port 3(veth1_to_bridge) entered disabled state [ 1053.915543][ T9531] bridge_slave_1: left allmulticast mode [ 1053.931286][ T9531] bridge_slave_1: left promiscuous mode [ 1053.950979][ T9531] bridge0: port 2(bridge_slave_1) entered disabled state [ 1053.979727][ T9531] bond0: (slave bond_slave_0): Releasing backup interface [ 1054.005032][ T9531] bond0: (slave bond_slave_1): Releasing backup interface [ 1054.037425][ T9531] team0: Port device team_slave_0 removed [ 1054.055999][ T9531] team0: Port device team_slave_1 removed [ 1054.065459][ T9531] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1054.090789][ T9531] bond1: (slave bridge1): Releasing backup interface [ 1054.149004][ T9531] bond7: (slave geneve2): Releasing active interface [ 1054.209033][T10499] netdevsim netdevsim5 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1054.243959][T10499] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1054.268491][ T1316] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 1054.291976][T10499] netdevsim netdevsim5 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1054.310970][ T9552] netlink: 'syz.0.9748': attribute type 1 has an invalid length. [ 1054.333957][T10499] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1054.359626][T10499] netdevsim netdevsim5 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1054.373224][ T9556] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9750'. [ 1054.382802][T10499] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1054.393507][T10499] netdevsim netdevsim5 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1054.402454][T10499] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1054.420406][T10517] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1054.437579][T10517] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1054.445933][ T5415] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1054.559781][ T9565] netlink: 188 bytes leftover after parsing attributes in process `syz.5.9749'. [ 1054.571781][ T9561] netlink: 256 bytes leftover after parsing attributes in process `syz.1.9753'. [ 1054.726514][ T9576] netlink: 72 bytes leftover after parsing attributes in process `syz.5.9749'. [ 1054.924679][ T5419] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1054.929224][ T9586] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1055.387176][ T5419] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1055.563700][ T9623] netlink: 'syz.2.9768': attribute type 1 has an invalid length. [ 1055.618520][ T9623] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1055.638478][ T9623] bond5: (slave veth0_to_bond): Releasing active interface [ 1055.654887][ T9623] veth0_to_bond: left promiscuous mode [ 1055.667107][ T9623] veth0_to_bond: left allmulticast mode [ 1055.686964][ T9623] bond7: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1055.707017][ T9623] macvlan2: entered promiscuous mode [ 1055.712460][ T9623] macvlan2: entered allmulticast mode [ 1055.718830][ T9623] bond7: entered promiscuous mode [ 1055.724065][ T9623] veth0_to_bond: entered promiscuous mode [ 1055.730734][ T9623] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1055.747362][ T9623] bond7: left promiscuous mode [ 1055.756483][ T9623] veth0_to_bond: left promiscuous mode [ 1056.276726][ T9651] syzkaller0: entered promiscuous mode [ 1056.282402][ T9651] syzkaller0: entered allmulticast mode [ 1056.296727][ T9651] netlink: 'syz.5.9777': attribute type 1 has an invalid length. [ 1056.384942][ T9656] netlink: 'syz.1.9778': attribute type 1 has an invalid length. [ 1056.915273][ T9673] vxcan1 speed is unknown, defaulting to 1000 [ 1057.479894][ T9692] netlink: 'syz.3.9789': attribute type 75 has an invalid length. [ 1057.507258][ T9694] batadv_slave_0: Caught tx_queue_len zero misconfig [ 1057.605944][ T9673] wg1 speed is unknown, defaulting to 1000 [ 1058.051676][ T9673] lo speed is unknown, defaulting to 1000 [ 1058.085191][ T9728] __nla_validate_parse: 6 callbacks suppressed [ 1058.085206][ T9728] netlink: 24 bytes leftover after parsing attributes in process `syz.5.9803'. [ 1058.273496][ T9734] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9807'. [ 1058.323477][ T9736] sctp: [Deprecated]: syz.2.9808 (pid 9736) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1058.323477][ T9736] Use struct sctp_sack_info instead [ 1058.824794][ C1] ip6_tnl_xmit_ctl: 2 callbacks suppressed [ 1058.824813][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1058.831181][ T9769] ip6gre4: entered promiscuous mode [ 1058.901824][ T9769] ip6gre4: entered allmulticast mode [ 1058.925491][ T9777] xt_hashlimit: size too large, truncated to 1048576 [ 1058.948606][ T9771] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1059.305230][ T5419] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1059.353896][ T9791] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9824'. [ 1059.475035][T20596] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1059.541657][ T9791] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9824'. [ 1059.655488][T20596] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1059.681409][ T9803] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1059.738383][ T9797] bond4 (unregistering): Released all slaves [ 1060.146494][ T9812] sock: sock_set_timeout: `syz.0.9828' (pid 9812) tries to set negative timeout [ 1060.645875][ T9828] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9832'. [ 1061.077430][ T9838] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9833'. [ 1061.098536][ T9838] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9833'. [ 1061.168180][ T9848] tc_dump_action: action bad kind [ 1061.614501][ T9874] xt_addrtype: ipv6 does not support BROADCAST matching [ 1061.850147][ T9894] SET target dimension over the limit! [ 1061.907609][ T9898] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9852'. [ 1062.212956][ T9915] netlink: 236 bytes leftover after parsing attributes in process `syz.0.9858'. [ 1062.233101][ T9915] netlink: 236 bytes leftover after parsing attributes in process `syz.0.9858'. [ 1062.328459][ T9931] netlink: 'syz.2.9862': attribute type 12 has an invalid length. [ 1062.488713][ T9942] ipvlan2: entered promiscuous mode [ 1062.999307][ T9983] veth3: entered allmulticast mode [ 1063.032465][ T9982] tipc: Enabling of bearer rejected, failed to enable media [ 1063.083072][ T9924] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1063.423956][T10015] __nla_validate_parse: 5 callbacks suppressed [ 1063.423975][T10015] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.9890'. [ 1063.509136][T10020] Cannot find set identified by id 0 to match [ 1063.528558][T10021] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9892'. [ 1063.652591][T10033] bridge8: entered allmulticast mode [ 1063.666255][T10034] netlink: 52 bytes leftover after parsing attributes in process `syz.3.9895'. [ 1063.693297][T10036] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1063.719974][T10032] block nbd5: server does not support multiple connections per device. [ 1063.732315][T10032] block nbd5: shutting down sockets [ 1063.876683][T10046] netlink: 64 bytes leftover after parsing attributes in process `syz.1.9902'. [ 1063.893642][T10046] syzkaller1: entered promiscuous mode [ 1063.900098][T10046] syzkaller1: entered allmulticast mode [ 1064.101802][T10053] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9903'. [ 1064.154229][T10056] netlink: 'syz.1.9903': attribute type 8 has an invalid length. [ 1064.280045][T10059] netlink: 'syz.0.9905': attribute type 1 has an invalid length. [ 1064.304362][T10059] netlink: 'syz.0.9905': attribute type 1 has an invalid length. [ 1064.324333][T10059] netlink: 9172 bytes leftover after parsing attributes in process `syz.0.9905'. [ 1064.575857][T10077] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1064.654367][T10077] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9911'. [ 1064.687845][T10077] openvswitch: netlink: Missing key (keys=40, expected=80) [ 1064.770921][T10085] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9913'. [ 1064.812054][T10087] netlink: 'syz.5.9914': attribute type 2 has an invalid length. [ 1064.840696][T10093] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9915'. [ 1064.883562][T10085] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1064.901114][T10097] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9916'. [ 1064.927426][T10096] netlink: 'syz.3.9917': attribute type 1 has an invalid length. [ 1064.962952][T10090] macvlan2: entered allmulticast mode [ 1064.983861][T10090] bond3: entered promiscuous mode [ 1065.014488][T10090] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1065.068450][T10090] bond3: left promiscuous mode [ 1065.100571][T10103] bond8: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1065.139361][T10103] bond8: (slave lo): Enslaving as an active interface with an up link [ 1065.144479][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1065.178716][T10103] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1065.430453][T10131] syzkaller0: entered promiscuous mode [ 1065.444516][T10131] syzkaller0: entered allmulticast mode [ 1065.620377][T29641] block nbd5: Receive control failed (result -107) [ 1065.701686][T10156] syzkaller1: tun_chr_ioctl cmd 1074025678 [ 1065.712481][T10156] syzkaller1: group set to 0 [ 1066.361688][T10191] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 1066.764517][T10203] syzkaller1: entered promiscuous mode [ 1066.766257][ T5415] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1066.771490][T10203] syzkaller1: entered allmulticast mode [ 1066.846277][T10216] netlink: 'syz.1.9949': attribute type 2 has an invalid length. [ 1067.546052][ T5419] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1067.802609][T10281] netlink: 'syz.1.9965': attribute type 1 has an invalid length. [ 1067.958351][T10284] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 1068.120002][T10297] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1068.152216][T10305] ip6tnl0: Caught tx_queue_len zero misconfig [ 1068.344205][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1068.465674][T10329] __nla_validate_parse: 7 callbacks suppressed [ 1068.465693][T10329] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9976'. [ 1068.628059][T10336] IPv6: NLM_F_CREATE should be specified when creating new route [ 1068.945206][T10356] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9983'. [ 1069.331961][T10386] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9990'. [ 1069.386090][T10386] netlink: 92 bytes leftover after parsing attributes in process `syz.1.9990'. [ 1069.480788][T10392] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 1069.580253][T10394] netlink: 'syz.0.9993': attribute type 4 has an invalid length. [ 1069.876066][T10419] netlink: 64 bytes leftover after parsing attributes in process `syz.1.9999'. [ 1069.894462][T10419] netlink: 64 bytes leftover after parsing attributes in process `syz.1.9999'. [ 1070.020822][T10428] netlink: 'syz.2.10002': attribute type 1 has an invalid length. [ 1070.248785][T10435] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10003'. [ 1070.331285][T10440] netlink: 'syz.0.10005': attribute type 14 has an invalid length. [ 1070.362425][T10440] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10005'. [ 1070.403915][T10440] netlink: 'syz.0.10005': attribute type 14 has an invalid length. [ 1070.461800][T10440] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10005'. [ 1070.485826][T10450] [ 1070.488186][T10450] ====================================================== [ 1070.495277][T10450] WARNING: possible circular locking dependency detected [ 1070.502371][T10450] syzkaller #0 Not tainted [ 1070.506842][T10450] ------------------------------------------------------ [ 1070.513901][T10450] syz.2.10006/10450 is trying to acquire lock: [ 1070.520054][T10450] ffffffff8ea85600 (fs_reclaim){+.+.}-{0:0}, at: prepare_alloc_pages+0x152/0x650 [ 1070.529285][T10450] [ 1070.529285][T10450] but task is already holding lock: [ 1070.536644][T10450] ffff88807d0b3438 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x36/0x340 [ 1070.546135][T10450] [ 1070.546135][T10450] which lock already depends on the new lock. [ 1070.546135][T10450] [ 1070.556539][T10450] [ 1070.556539][T10450] the existing dependency chain (in reverse order) is: [ 1070.565552][T10450] [ 1070.565552][T10450] -> #7 (&mm->mmap_lock){++++}-{4:4}: [ 1070.573252][T10450] __might_fault+0xcb/0x130 [ 1070.578289][T10450] _copy_from_iter+0x100/0x1670 [ 1070.583683][T10450] tcp_sendmsg_locked+0x2121/0x5360 [ 1070.589480][T10450] tcp_sendmsg+0x2f/0x50 [ 1070.594259][T10450] sock_write_iter+0x406/0x4f0 [ 1070.599559][T10450] vfs_write+0x61d/0xb90 [ 1070.604338][T10450] ksys_write+0x150/0x270 [ 1070.609197][T10450] do_syscall_64+0x174/0x580 [ 1070.614307][T10450] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1070.620717][T10450] [ 1070.620717][T10450] -> #6 (sk_lock-AF_INET){+.+.}-{0:0}: [ 1070.628366][T10450] lock_sock_nested+0x41/0x100 [ 1070.633692][T10450] inet_shutdown+0x6a/0x390 [ 1070.638780][T10450] nbd_mark_nsock_dead+0x2e9/0x560 [ 1070.644522][T10450] recv_work+0x1c2e/0x1d40 [ 1070.649478][T10450] process_scheduled_works+0xb5d/0x1860 [ 1070.655552][T10450] worker_thread+0xa53/0xfc0 [ 1070.660662][T10450] kthread+0x389/0x470 [ 1070.665263][T10450] ret_from_fork+0x514/0xb70 [ 1070.670396][T10450] ret_from_fork_asm+0x1a/0x30 [ 1070.675683][T10450] [ 1070.675683][T10450] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 1070.683364][T10450] __mutex_lock+0x1a3/0x1550 [ 1070.688480][T10450] nbd_queue_rq+0x37b/0x1100 [ 1070.693598][T10450] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 1070.699720][T10450] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 1070.706615][T10450] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1070.713137][T10450] blk_mq_run_hw_queue+0x348/0x4f0 [ 1070.718769][T10450] blk_mq_dispatch_list+0xd16/0xe10 [ 1070.724493][T10450] blk_mq_flush_plug_list+0x48d/0x570 [ 1070.730392][T10450] __blk_flush_plug+0x3ed/0x4d0 [ 1070.735812][T10450] __submit_bio+0x28d/0x580 [ 1070.740836][T10450] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 1070.746994][T10450] block_read_full_folio+0x599/0x830 [ 1070.752823][T10450] filemap_read_folio+0x137/0x3b0 [ 1070.758379][T10450] do_read_cache_folio+0x358/0x590 [ 1070.764014][T10450] read_part_sector+0xb6/0x2b0 [ 1070.769347][T10450] adfspart_check_ICS+0xb1/0x960 [ 1070.774810][T10450] bdev_disk_changed+0x817/0x1770 [ 1070.780360][T10450] blkdev_get_whole+0x380/0x510 [ 1070.785767][T10450] bdev_open+0x31e/0xd30 [ 1070.790544][T10450] blkdev_open+0x470/0x610 [ 1070.795487][T10450] do_dentry_open+0x822/0x13a0 [ 1070.800781][T10450] vfs_open+0x3b/0x340 [ 1070.805387][T10450] path_openat+0x2e08/0x3860 [ 1070.810509][T10450] do_file_open+0x23e/0x4a0 [ 1070.815545][T10450] do_sys_openat2+0x113/0x200 [ 1070.820748][T10450] __x64_sys_openat+0x138/0x170 [ 1070.826135][T10450] do_syscall_64+0x174/0x580 [ 1070.831262][T10450] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1070.837693][T10450] [ 1070.837693][T10450] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 1070.844911][T10450] __mutex_lock+0x1a3/0x1550 [ 1070.850039][T10450] nbd_queue_rq+0xc6/0x1100 [ 1070.855076][T10450] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 1070.861155][T10450] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 1070.868011][T10450] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1070.874526][T10450] blk_mq_run_hw_queue+0x348/0x4f0 [ 1070.880165][T10450] blk_mq_dispatch_list+0xd16/0xe10 [ 1070.885890][T10450] blk_mq_flush_plug_list+0x48d/0x570 [ 1070.891792][T10450] __blk_flush_plug+0x3ed/0x4d0 [ 1070.897183][T10450] __submit_bio+0x28d/0x580 [ 1070.902221][T10450] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 1070.908379][T10450] block_read_full_folio+0x599/0x830 [ 1070.914198][T10450] filemap_read_folio+0x137/0x3b0 [ 1070.919754][T10450] do_read_cache_folio+0x358/0x590 [ 1070.925393][T10450] read_part_sector+0xb6/0x2b0 [ 1070.930685][T10450] adfspart_check_ICS+0xb1/0x960 [ 1070.936151][T10450] bdev_disk_changed+0x817/0x1770 [ 1070.941708][T10450] blkdev_get_whole+0x380/0x510 [ 1070.947092][T10450] bdev_open+0x31e/0xd30 [ 1070.951877][T10450] blkdev_open+0x470/0x610 [ 1070.956827][T10450] do_dentry_open+0x822/0x13a0 [ 1070.962134][T10450] vfs_open+0x3b/0x340 [ 1070.966736][T10450] path_openat+0x2e08/0x3860 [ 1070.971869][T10450] do_file_open+0x23e/0x4a0 [ 1070.976938][T10450] do_sys_openat2+0x113/0x200 [ 1070.982136][T10450] __x64_sys_openat+0x138/0x170 [ 1070.987515][T10450] do_syscall_64+0x174/0x580 [ 1070.992630][T10450] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1070.999046][T10450] [ 1070.999046][T10450] -> #3 (set->srcu){.+.+}-{0:0}: [ 1071.006241][T10450] __synchronize_srcu+0xca/0x300 [ 1071.011707][T10450] elevator_switch+0x1e8/0x7a0 [ 1071.017000][T10450] elevator_change+0x2cc/0x450 [ 1071.022299][T10450] elevator_set_default+0x36c/0x430 [ 1071.028032][T10450] blk_register_queue+0x3e9/0x4e0 [ 1071.033592][T10450] __add_disk+0x677/0xd50 [ 1071.038462][T10450] add_disk_fwnode+0xfb/0x480 [ 1071.043681][T10450] nbd_dev_add+0x72c/0xb50 [ 1071.048626][T10450] nbd_init+0x168/0x1f0 [ 1071.053407][T10450] do_one_initcall+0x250/0x870 [ 1071.058703][T10450] do_initcall_level+0x104/0x190 [ 1071.064262][T10450] do_initcalls+0x59/0xa0 [ 1071.069116][T10450] kernel_init_freeable+0x2a6/0x3e0 [ 1071.074842][T10450] kernel_init+0x1d/0x1d0 [ 1071.079696][T10450] ret_from_fork+0x514/0xb70 [ 1071.084822][T10450] ret_from_fork_asm+0x1a/0x30 [ 1071.090128][T10450] [ 1071.090128][T10450] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 1071.097985][T10450] __mutex_lock+0x1a3/0x1550 [ 1071.103109][T10450] elevator_change+0x1b3/0x450 [ 1071.108410][T10450] elevator_set_none+0xb5/0x140 [ 1071.113805][T10450] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 1071.120145][T10450] nbd_start_device+0x17f/0xb10 [ 1071.125546][T10450] nbd_genl_connect+0x165b/0x1cf0 [ 1071.131121][T10450] genl_family_rcv_msg_doit+0x22a/0x330 [ 1071.137207][T10450] genl_rcv_msg+0x61c/0x7a0 [ 1071.142239][T10450] netlink_rcv_skb+0x232/0x4b0 [ 1071.147538][T10450] genl_rcv+0x28/0x40 [ 1071.152053][T10450] netlink_unicast+0x75c/0x8e0 [ 1071.157352][T10450] netlink_sendmsg+0x813/0xb40 [ 1071.162650][T10450] ____sys_sendmsg+0x972/0x9f0 [ 1071.167941][T10450] ___sys_sendmsg+0x2a5/0x360 [ 1071.173141][T10450] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1071.178621][T10450] do_syscall_64+0x174/0x580 [ 1071.183738][T10450] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1071.190162][T10450] [ 1071.190162][T10450] -> #1 (&q->q_usage_counter(io)#69){++++}-{0:0}: [ 1071.198847][T10450] blk_alloc_queue+0x546/0x680 [ 1071.204165][T10450] __blk_mq_alloc_disk+0x197/0x390 [ 1071.209809][T10450] nbd_dev_add+0x499/0xb50 [ 1071.214758][T10450] nbd_genl_connect+0x962/0x1cf0 [ 1071.220233][T10450] genl_family_rcv_msg_doit+0x22a/0x330 [ 1071.226307][T10450] genl_rcv_msg+0x61c/0x7a0 [ 1071.231343][T10450] netlink_rcv_skb+0x232/0x4b0 [ 1071.236636][T10450] genl_rcv+0x28/0x40 [ 1071.241148][T10450] netlink_unicast+0x75c/0x8e0 [ 1071.246445][T10450] netlink_sendmsg+0x813/0xb40 [ 1071.251742][T10450] ____sys_sendmsg+0x972/0x9f0 [ 1071.257027][T10450] ___sys_sendmsg+0x2a5/0x360 [ 1071.262229][T10450] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1071.267695][T10450] do_syscall_64+0x174/0x580 [ 1071.272806][T10450] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1071.279223][T10450] [ 1071.279223][T10450] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 1071.286439][T10450] __lock_acquire+0x15a5/0x2cf0 [ 1071.291815][T10450] lock_acquire+0x106/0x350 [ 1071.296845][T10450] fs_reclaim_acquire+0x71/0x100 [ 1071.302324][T10450] prepare_alloc_pages+0x152/0x650 [ 1071.307967][T10450] __alloc_frozen_pages_noprof+0x12f/0x380 [ 1071.314312][T10450] alloc_pages_mpol+0x235/0x490 [ 1071.319693][T10450] alloc_pages_noprof+0xac/0x2a0 [ 1071.325164][T10450] pte_alloc_one+0x22/0x370 [ 1071.330207][T10450] do_pte_missing+0x1214/0x33f0 [ 1071.335590][T10450] handle_mm_fault+0x1bf2/0x3170 [ 1071.341068][T10450] do_user_addr_fault+0x75b/0x1340 [ 1071.346719][T10450] exc_page_fault+0x6a/0xc0 [ 1071.351749][T10450] asm_exc_page_fault+0x26/0x30 [ 1071.357127][T10450] rep_movs_alternative+0x30/0x90 [ 1071.362685][T10450] _copy_from_user+0x7a/0xb0 [ 1071.367811][T10450] copy_from_sockptr+0x5e/0x90 [ 1071.373192][T10450] packet_setsockopt+0xa2a/0x1510 [ 1071.378739][T10450] do_sock_setsockopt+0x17c/0x1b0 [ 1071.384293][T10450] __x64_sys_setsockopt+0x13d/0x1b0 [ 1071.390030][T10450] do_syscall_64+0x174/0x580 [ 1071.395169][T10450] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1071.401608][T10450] [ 1071.401608][T10450] other info that might help us debug this: [ 1071.401608][T10450] [ 1071.411834][T10450] Chain exists of: [ 1071.411834][T10450] fs_reclaim --> sk_lock-AF_INET --> &mm->mmap_lock [ 1071.411834][T10450] [ 1071.424366][T10450] Possible unsafe locking scenario: [ 1071.424366][T10450] [ 1071.431869][T10450] CPU0 CPU1 [ 1071.437274][T10450] ---- ---- [ 1071.442662][T10450] rlock(&mm->mmap_lock); [ 1071.447093][T10450] lock(sk_lock-AF_INET); [ 1071.454036][T10450] lock(&mm->mmap_lock); [ 1071.460892][T10450] lock(fs_reclaim); [ 1071.464882][T10450] [ 1071.464882][T10450] *** DEADLOCK *** [ 1071.464882][T10450] [ 1071.473022][T10450] 2 locks held by syz.2.10006/10450: [ 1071.478305][T10450] #0: ffff88808868c260 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_setsockopt+0x5a0/0x1510 [ 1071.488469][T10450] #1: ffff88807d0b3438 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x36/0x340 [ 1071.498425][T10450] [ 1071.498425][T10450] stack backtrace: [ 1071.504322][T10450] CPU: 0 UID: 0 PID: 10450 Comm: syz.2.10006 Not tainted syzkaller #0 PREEMPT(full) [ 1071.504341][T10450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1071.504352][T10450] Call Trace: [ 1071.504358][T10450] [ 1071.504365][T10450] dump_stack_lvl+0xe8/0x150 [ 1071.504385][T10450] print_circular_bug+0x2e1/0x300 [ 1071.504414][T10450] check_noncircular+0x12e/0x150 [ 1071.504438][T10450] __lock_acquire+0x15a5/0x2cf0 [ 1071.504477][T10450] ? unwind_next_frame+0xa6/0x2550 [ 1071.504507][T10450] ? kvm_sched_clock_read+0x11/0x20 [ 1071.504522][T10450] ? sched_clock+0x3f/0x60 [ 1071.504552][T10450] ? rcu_is_watching+0x15/0xb0 [ 1071.504573][T10450] ? prepare_alloc_pages+0x152/0x650 [ 1071.504597][T10450] lock_acquire+0x106/0x350 [ 1071.504613][T10450] ? prepare_alloc_pages+0x152/0x650 [ 1071.504640][T10450] ? __lock_acquire+0x6b5/0x2cf0 [ 1071.504660][T10450] fs_reclaim_acquire+0x71/0x100 [ 1071.504683][T10450] ? prepare_alloc_pages+0x152/0x650 [ 1071.504708][T10450] prepare_alloc_pages+0x152/0x650 [ 1071.504735][T10450] __alloc_frozen_pages_noprof+0x12f/0x380 [ 1071.504764][T10450] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1071.504792][T10450] ? __pfx_policy_nodemask+0x10/0x10 [ 1071.504813][T10450] alloc_pages_mpol+0x235/0x490 [ 1071.504831][T10450] alloc_pages_noprof+0xac/0x2a0 [ 1071.504849][T10450] pte_alloc_one+0x22/0x370 [ 1071.504870][T10450] do_pte_missing+0x1214/0x33f0 [ 1071.504896][T10450] ? mtree_range_walk+0x6f9/0x8b0 [ 1071.504971][T10450] handle_mm_fault+0x1bf2/0x3170 [ 1071.505000][T10450] ? handle_mm_fault+0xf1/0x3170 [ 1071.505023][T10450] ? __pfx_handle_mm_fault+0x10/0x10 [ 1071.505049][T10450] ? __lock_acquire+0x6b5/0x2cf0 [ 1071.505068][T10450] ? lock_mm_and_find_vma+0xa7/0x340 [ 1071.505093][T10450] do_user_addr_fault+0x75b/0x1340 [ 1071.505117][T10450] exc_page_fault+0x6a/0xc0 [ 1071.505133][T10450] asm_exc_page_fault+0x26/0x30 [ 1071.505150][T10450] RIP: 0010:rep_movs_alternative+0x30/0x90 [ 1071.505172][T10450] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 1071.505187][T10450] RSP: 0018:ffffc90006a7fc10 EFLAGS: 00050212 [ 1071.505202][T10450] RAX: 00007ffffffff001 RBX: 0000000000000010 RCX: 0000000000000010 [ 1071.505214][T10450] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: ffffc90006a7fcf0 [ 1071.505226][T10450] RBP: 0000000000000000 R08: ffffc90006a7fcff R09: 1ffff92000d4ff9f [ 1071.505238][T10450] R10: dffffc0000000000 R11: fffff52000d4ffa0 R12: 0000000000000005 [ 1071.505249][T10450] R13: ffffc90006a7fcf0 R14: ffffc90006a7fcf0 R15: 00002000000000c0 [ 1071.505270][T10450] _copy_from_user+0x7a/0xb0 [ 1071.505291][T10450] copy_from_sockptr+0x5e/0x90 [ 1071.505317][T10450] packet_setsockopt+0xa2a/0x1510 [ 1071.505340][T10450] ? __pfx_packet_setsockopt+0x10/0x10 [ 1071.505367][T10450] ? aa_sk_perm+0x6d5/0x900 [ 1071.505390][T10450] ? __fget_files+0x2a/0x420 [ 1071.505413][T10450] ? __pfx_aa_sk_perm+0x10/0x10 [ 1071.505436][T10450] ? __fget_files+0x2a/0x420 [ 1071.505455][T10450] ? aa_sock_opt_perm+0xff/0x1a0 [ 1071.505480][T10450] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1071.505508][T10450] ? __pfx_packet_setsockopt+0x10/0x10 [ 1071.505531][T10450] do_sock_setsockopt+0x17c/0x1b0 [ 1071.505558][T10450] __x64_sys_setsockopt+0x13d/0x1b0 [ 1071.505584][T10450] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1071.505600][T10450] do_syscall_64+0x174/0x580 [ 1071.505616][T10450] ? trace_irq_disable+0x3b/0x140 [ 1071.505641][T10450] ? clear_bhb_loop+0x40/0x90 [ 1071.505660][T10450] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1071.505676][T10450] RIP: 0033:0x7f5e52d9ce59 [ 1071.505691][T10450] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1071.505704][T10450] RSP: 002b:00007f5e53c5f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1071.505721][T10450] RAX: ffffffffffffffda RBX: 00007f5e53015fa0 RCX: 00007f5e52d9ce59 [ 1071.505733][T10450] RDX: 0000000000000005 RSI: 0000000000000107 RDI: 0000000000000005 [ 1071.505743][T10450] RBP: 00007f5e52e32d6f R08: 000000000000001c R09: 0000000000000000 [ 1071.505764][T10450] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000000 [ 1071.505773][T10450] R13: 00007f5e53016038 R14: 00007f5e53015fa0 R15: 00007ffe2b6392d8 [ 1071.505790][T10450] [ 1072.041123][T29641] Bluetooth: hci2: link tx timeout [ 1072.047043][T29641] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1072.060961][ T4948] Bluetooth: hci2: link tx timeout [ 1072.066219][ T4948] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1072.118151][ T4948] Bluetooth: hci2: link tx timeout [ 1072.123313][ T4948] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1072.159136][ T4948] Bluetooth: hci2: link tx timeout [ 1072.164466][ T4948] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1072.495105][ T4948] Bluetooth: hci2: link tx timeout [ 1072.500273][ T4948] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1072.653732][ T4948] Bluetooth: hci2: link tx timeout [ 1072.658987][ T4948] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1072.667442][ T4948] Bluetooth: hci2: link tx timeout [ 1072.672582][ T4948] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1073.544609][ T4948] Bluetooth: hci2: link tx timeout [ 1073.549870][ T4948] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1073.805488][ T4948] Bluetooth: hci2: link tx timeout [ 1073.810647][ T4948] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1074.104700][ T4948] Bluetooth: hci2: command 0x0405 tx timeout