last executing test programs: 4m12.637141097s ago: executing program 4 (id=1671): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30000000410007012bbd700000000000047c00000400c2800c00018006000600843b00000c00028008000d"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x43}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) sendmsg$NFT_BATCH(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELOBJ={0x20, 0x14, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0xff}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELFLOWTABLE={0x34, 0x18, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x7c}, 0x1, 0x0, 0x0, 0x4001}, 0x4801) 4m12.571598026s ago: executing program 4 (id=1672): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) (async) r1 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@private0, @in=@rand_addr=0x64010102, 0x4e20, 0x0, 0x4e22, 0x48, 0x2, 0x0, 0x0, 0x1}, {0xfffffffffffffffc, 0xffffffffffffffff, 0x0, 0x10001, 0x5, 0x5, 0x5, 0xfffffffffffffffd}, {0x2, 0xffffffffffff90df, 0x0, 0x20000000000000}, 0x40, 0x0, 0x1, 0x0, 0x1}, {{@in6=@empty, 0x4d4, 0x6c}, 0xa, @in=@broadcast, 0x3502, 0x4, 0x3, 0x0, 0x0, 0x0, 0x200000}}, 0xe8) (async, rerun: 64) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) (async, rerun: 64) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x62d6479f28036dc9, &(0x7f0000000100)=0x2001, 0x4) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x11, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r2}, &(0x7f0000000280), &(0x7f0000000340)}, 0x20) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) ioctl$XFS_IOC_FD_TO_HANDLE(r3, 0xc038586a, &(0x7f0000000180)={r3, &(0x7f0000000000)='\\.-&\x00', 0x4c000, &(0x7f0000000040)={@align=0x800, {0x5, 0x7, 0xf, 0xfffffffffffffffd}}, 0x2, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0x2}) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000340)=ANY=[@ANYBLOB="1c00000000000000000000000000000001000000", @ANYRES32=0x1, @ANYBLOB="00000000000000f600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000300"/28], 0x50) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) write(r4, &(0x7f00000002c0)="29000000140005b7ff00000004eabdeb0101b6ff02159f7e5520756b0f33b49db96ad24d12595fbea5", 0x29) (async, rerun: 64) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r4) (async, rerun: 64) sendmsg$IPSET_CMD_PROTOCOL(r4, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x44, 0x1, 0x6, 0x0, 0x0, 0x0, {0x5, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x400a0c0}, 0x20040840) (async) write(r3, &(0x7f0000000300)="240000005800410f9c00f4f90085b3a85c91fddf080001000501009f0800828001000000", 0x24) 4m12.091898345s ago: executing program 4 (id=1673): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000100)='gretap0\x00'}) r2 = epoll_create(0xfffffffd) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x1288, 0x4) 4m11.922498956s ago: executing program 4 (id=1674): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x4}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000080)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002abd70000000400a0100000007000100272a000014000500fc01000000000000000000000000000108000c000200000006000b000a0000000800020005000000080004000000000014000600"], 0x78}, 0x1, 0x2000000}, 0x50) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000080)={@broadcast, 0x1, 0x0, 0x20, 0x0, [{@remote}, {@empty}]}}) close(r0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r3, 0x0, 0x14, &(0x7f0000000000)=0x1, 0x4) recvfrom$inet(r3, 0x0, 0x1f, 0x40000120, 0x0, 0xfffffe91) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 4m10.996846756s ago: executing program 4 (id=1681): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x70bd28, 0x25dfdbfc, {0x2, 0x20, 0x1, 0xc8, r2}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x40000c0) (async) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) (async) setsockopt$sock_int(r3, 0x1, 0x21, &(0x7f00006dbffc), 0x4) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000001100)="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", 0x3e2}, {&(0x7f0000000400)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241070096c1498194a7197b45d74a8532b82037b02c9e6045c361ebf4752154fdfe39867a3236186eff2e437321de2e5f6479b384bd9ba37bcab948be0db1e4631eda95e59fdb9d1172c26347db86cdbbf687b5ae29029fbaf53d0576425e493a2fdf20aa2e298a41e395d7025cbce20e7df7357f5c11035638ee615514da29a9fa215ad9", 0x9f}], 0x2}, 0x0) (async) setsockopt$RDS_CONG_MONITOR(r3, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) (async) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x40) (async) recvmmsg(r3, &(0x7f0000006fc0)=[{{0x0, 0x0, 0x0}, 0x400002}, {{0x0, 0x0, 0x0}, 0x81}], 0x2, 0x20000020, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=@newlink={0x40, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3806}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_REMOTE={0x8, 0x5, @multicast1}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x20040850) 4m9.011887598s ago: executing program 4 (id=1682): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r1}, &(0x7f0000000300), &(0x7f00000001c0), 0x1000000}, 0x20) sendmsg$nl_generic(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000340)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbfe, {0x6}}, 0x14}}, 0x24000004) 3m53.931366257s ago: executing program 32 (id=1682): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r1}, &(0x7f0000000300), &(0x7f00000001c0), 0x1000000}, 0x20) sendmsg$nl_generic(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000340)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbfe, {0x6}}, 0x14}}, 0x24000004) 2m31.101108916s ago: executing program 3 (id=2540): bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) (async) r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) (async) sendto$inet(r0, &(0x7f0000000140)="9138ffb4f42ee93737f7ff6f0dfb8d4ee53c0e264dbb5295181b8bd0715a614d12", 0x21, 0xc000, &(0x7f0000000180)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x8, 0x0}}, 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x0, 0x200000000000011f, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff0000000071108d000000000095", @ANYRES8, @ANYRESOCT], &(0x7f0000000480)='GPL\x00'}, 0x94) 2m30.792182913s ago: executing program 3 (id=2542): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYRES16=r1, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0) 2m30.567414473s ago: executing program 3 (id=2545): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400), 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{0x1}, &(0x7f0000000800), &(0x7f0000000840)}, 0x20) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)) sendmsg$NFC_CMD_SE_IO(r1, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="62118415", @ANYRES16, @ANYBLOB="000828bd7000fedbdf251b000000"], 0x14}, 0x1, 0x0, 0x0, 0x400}, 0x40014) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000440)=@sack_info={0x0, 0x2, 0x7f}, 0xc) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 2m29.455880424s ago: executing program 3 (id=2559): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x421a2}, [@IFLA_IFNAME={0x14, 0x3, 'wlan0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0xfffffffc, 0x3}}]}]}]}, 0x48}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r1, 0x0) listen(r1, 0xfff) r2 = accept(r1, 0xfffffffffffffffd, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x8}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x90) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @loopback}]}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={r4, @in={{0x2, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x8, 0x9, 0xfffffffb, 0x6, 0x1c, 0x5, 0x2}, 0x9c) sendmsg$NL80211_CMD_DEL_PMK(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x5c, r3, 0x800, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x5, 0xfff}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8040}, 0x8004) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WDS_PEER(r2, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r3, 0x200, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}]}, 0x70}}, 0x2000094) 2m28.850917414s ago: executing program 3 (id=2563): r0 = socket(0x2a, 0x2, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x43, &(0x7f0000000000)={0x0, 0x2710}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x5}}}}]}, 0x44}}, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x10, 0x3fb, 0x100, 0x70bd29, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0x20000801}, 0x800) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x10, 0x4, 0x8, 0x2}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r4, 0x0, 0x0, 0x200000000000000}, 0x20) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="200000001a14010000000000000000000800030000000000080003"], 0x20}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000002d001347"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20008040) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r5) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtfilter={0x48, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x4, 0x9}, {}, {0x1, 0xffee}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x18, 0x2, [@TCA_CGROUP_EMATCHES={0x14, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x1) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m28.600694127s ago: executing program 3 (id=2565): r0 = socket(0x5, 0x80002, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5, 0x15}, 0x48) socket$inet6_mptcp(0xa, 0x1, 0x106) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x5}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x1, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}}, 0x24000041) r4 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r4, 0x11e, 0x1, 0x0, &(0x7f0000000000)) r5 = socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket(0x40000000015, 0x5, 0x0) getsockopt(r6, 0x200000000114, 0x2719, 0x0, &(0x7f0000000080)=0x39) setsockopt$RDS_CANCEL_SENT_TO(r6, 0x114, 0x1, &(0x7f0000000580)={0x2, 0x4e21, @remote}, 0x10) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x4}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c0000001800010280000000fcdbdf250a148000ff01fd07"], 0x1c}}, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1800000027000100fdff0700001000000400000004000180"], 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) sendmmsg(r0, &(0x7f0000004440)=[{{&(0x7f0000000000)=@pptp={0x18, 0x2, {0x1, @rand_addr=0x64010102}}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000180)="b1112c077006ccb8a803e020da6629f935284f8d47bdcfd370bf723e1a36bb703864f8c9a4e08ea70499bd8df37f607e0dca8440078f25a6980685d45598c4da6944b10147079a027a0ca47a970fe6b6e093381eca93494368d796aa059b2aee57ef5e5403b79a7705074072aff07e47fda2f25d2bec360f9d2c2f0c8a7afc7dcc0729ed47", 0x85}, {&(0x7f0000000240)="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", 0xfa}], 0x2, &(0x7f0000000380)=[{0x28, 0x6, 0xfeb1, "5f23ca722aae6ed88f731bd6694006630d597ae84d"}], 0x28}}, {{&(0x7f00000003c0)=@isdn={0x22, 0x4, 0x8, 0x1, 0x8}, 0x80, &(0x7f0000002a40)=[{&(0x7f0000000440)="af51ab095e96b10a46123449e288cee0c33057628165b833dbaa190a06db598cccec47892225fb4f64e6f136edb965caff07f0f05af084f8efac8c4919d754bd88c8cf1b2b575d80a2e6dd43271a7b6076c4c56b71c31f8115a30bdfc080408bf29a83d8d318751456a214d704eacdba562064d90aef0ce26e1b16e7e60be927af9be1dd1495f9b663ff63892035b8e47c8bd3", 0x93}, {&(0x7f0000000500)="a9512b3972ea5bb2a95998d114ce09c15f61c74b09369c81eec4114ca7ccbd8a1bfd4fd555b0f39a657c48a90d84beab7e220ee6419f84568d8f84d5f567a6765295975003ec06c17e6d3a5d66beccec3652e9709f5ad1b7fd78242ea1a2be51259ebef14f43a896f82736159796853eac097b9f885211a6ee", 0x79}, {&(0x7f0000000640)="3de218fbc3e116d18d30c6ae90f7ce0a73b85d0c2de120b61af2886dc1344ceda52a078c22cf7b8f50f21472646ddf72eee80cdc10de311a4957eebefe4e2802f986b69d2da8ec35357f42b3af2fb2215c386e21cc76efa6c5ab515d7ce7529121ba462b3fde72f4c592ef6653162721a953f9d9a788e5285b4969e4a4df806400ae5895067d4f7c76f619cde6b74397a4b4d28ec78183c6c8e0c24db230cf39d0445ebb6c518ec4c5b07c784ad0ceb2266b29955344c97edd4fe0240c83872bf651b0c0159f233f93cc1aff6221276ccb185d41b9eff93c260384", 0xdb}, {&(0x7f0000000740)="7a3cae7f194d94a7f5f613eb1f473b02622118bbfe4962e0bdb374b1442c15fe542b2c3e7be9bf9fcabaa5d1151cebbc6a32db1b2e28bebe4c3efde56b83e7a557f2d4e6e30b7b067093d2f05cc9732441a6688e780ea00e8394498ffbdc54754cdb80268dd5e5ff7605e4f3a3ff52aea0d40b581d68a774bb207e1708119473600a83de9e2654a72008b1cc87abe948d39a1b43e0417ba3c5642bb34b5431521e171103447ed2963471727420bea22ca8507f2c05b615a9642dc09d11952d5c7b08021678f110dc248ea5886002d8a5ca5311a45dd4cfc2f3a29cca9b4932", 0xdf}, {&(0x7f0000000840)="8c305b3677c260df65c45aca4cbc1f68090ae6aa77799e86c9b301d2e4dfadfb9871920793e5286c2682b52e8ce9b18f0ab740", 0x33}, {&(0x7f0000000880)="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", 0x1000}, {&(0x7f0000001880)="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", 0x1000}, {&(0x7f0000002880)="d3948bc2171b528beb3f09c375454becaf4190bb1aefecef6215488875ce3b9a186952e0661fe044884d8669f0d8065e9c2f8d8970e27e150f6b9f4045b7bad796b6a5e951612ffdb594a3be3358ee803ed6b01b852c589a4d42941a6fe9df348a0fec8643433c24bac6dceee9bfcf0fb8c4994c1af2e1d257a5b27f885f61c550c0bc118e3ba558bc218af06fb714873ead8313772341e8d1107ecfe6478af2960dba4be39c368bd7c99f0101bbc827276cdd0204a4f8d41afa9e978dce311a91919758bfffa639384dae658472149101612813ef8a36a318a2269b75", 0xdd}, {&(0x7f0000002980)="a26f4ff5d2eb92adff2aeeb20d59fe69621463e0582b8f58b1dfec62418d1b3ee45f7a1827ae7ea76425a2df54743b5d7c10553e155c9ee1768acdbaf4f162704da604aaa62a8c9c758117ec2d0b86de5de5750e455703fbdddc8bb15a15c6a1bf4cea7958eb48b30e93bbf110cc15974402e6ed2fd30924e2118926ed28f5f814cd36cc2d066606d8a400e48099b7dae54d4083a1f220e463c2fbe4", 0x9c}], 0x9, &(0x7f0000002b00)=[{0xb0, 0x1, 0xc5, "f6b7b7d4199dc157ea687dc71f0e65779eca2aa7898b1061c95eda073a9a4d5e0043b9eba222c2819359dc657a94c379404ebc9b9e03b0121d289131ba41f5aa483565573f11ed7e1c3e4444319cb12b06c4fd87b855138635827516e3b05c95fdd3b7db07c0b094a7d55f04fc5cddf622d898cc0add8db350a73c84239e3a558831f24972cec43f9d289b4563a70b735f2878a2d3890538fc6d"}, {0xb0, 0x102, 0x3, "09c2303799374fc658f602332ac31fb23e06061c389d3f069a4d9c70320f21888617c8f334ef5682f459193b0d03a0aae92cd0c4fd09825ff564ebd4ff6b3815a439a48850bb1af5c91c202c76b2bb34d044382da6a38136a831e92cecbc58a465a6046fa24b6052e1d1de21dfae718e6ad043aaa84c977b7db3b223abf7b8abe6603b2ce7f6b675547c2f68cee923ed75b10f49c5d69601204071b162ff1dcc"}], 0x160}}, {{&(0x7f0000002c80)=@rxrpc=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0x9, @private1, 0x5}}, 0x80, &(0x7f0000003080)=[{&(0x7f0000002d00)="5de8f32f2c7c455eaa71147bfb77430ceadcc5fcdef8dea1bff377ba8fb8f59f119f1e3dd1e257620ddb03661dfe9cced57db15670f7d23c09a335b1192786a40de75e4ca4e553e90e427911250985cafcc682e5b44183c18915526ae775632c98b77939feb2bf2b606de692e11be26efde719fbf88f823ffd26fa820fda5aa863d68031a6c9f1cea9624a3d4e2f7b48b66b4a330d5a82389a91b5ba4673fea77c1484bc9b860183fa64b2907dc78e941360758dcf32acc409d36db630da7b56bc5e8f", 0xc3}, {&(0x7f0000002e00)="d3edb0bfb397085aed5cbd4df87d13e867", 0x11}, {&(0x7f0000002e40)="c3f193eab8f67a64e33b5503a9c89443399406df6ae36fa269fbea2dea7bb0c86957b9678b1f02ab66cbc46cc5656210d6c8a285d860fdf836522f70353000cd33960e5554a9867f9f3f3c2db4793fc3a48ad8b84a275a5295c8850748aea21ec982825b42e000712edd5c34f559f55fb7bbe79b9d9c88be44f44a789d2ef1cff30db9fb688ac759a379078dd94fcc66a205bb8eb1e85037f1cec22fa5099d2e32262f09b628d1a5f28c5a21072413872c337e7d44296489def06bc43b91d76b9382d7867e42a1ad6e7e5dd0793576a198d2", 0xd2}, {&(0x7f0000002f40)="0541cab0f5efaaa88a0a112da5c56c1e11886c79b09ad3d256ae36a432b43a5cda4b204a633c4449e992ea643ce7c374e326d96e24f4c5a49b71420bf198366cef9fab4e0f27125c4d2d3b47a937523fbcc441818bdb989e79e6800c14ff05fe069db55d8a76bc25714bc24c03af993c4db47a279e20199322a6b2dc7c5ce5ec55cac6f151a23c4b81cca25fa1b7e8c2aeb0bb450bfb2d9e7356a2edc78fda3fdfe15497d078190c7a1f5c38deba415efb857b", 0xb3}, {&(0x7f0000003000)="8fd6479f054aef85fd0753668d568271e62e9943432032bdb02ec2886f74c3b11992b3e4a1945024cbd88ba583fb63842d5e11c74838455b05215111c2d683d5beae4ad4507db88c5d507b08239223bfe192034ac90b804757114bbdba03afa8aed608f7f0a30ec0a8da1cf8a167723f", 0x70}], 0x5, &(0x7f0000003100)=[{0x1010, 0x124, 0xfffffc00, "b36c630b2b4f700c7b7f76fe3e2d26fd526497dde9042368e995299556b2dfccc470c5e6531c39ce50bd875da84c53363cee7a5bbb642cf2369b4aa9d630ff5a545d9df6fa9bacf73a8788ba91f569a46f6714dc66baad0246554b04e0c40636658122cb32511ab73038e5a94f3bc0f9a62e1afa428a481f5c3d3e7f6f8af524db6492a15cf4bbce1ce1a5c0d715d39c5944d9a78dd205cc92af255f6e5ce7cdf9ea07d789151d37f9caf9c834d1ae2317ab67acd8fdd4605897798653717e0420e1f8a2a90f55b720fb73ed9f19c75e37b4f5e717d5ab9c9ab098305e69edcfc70ef8406182ae89c6de4eb873372917d21877d0acc2eb2ec29347402557aadc3731503746498fbbbdb469bfe95fdf5fff39eaa5acd8bdee6a4cf8ac75dfc6f9f036189c1eb3b51957943db3a067df8491318fd66ebf96ea69238fde0cdff185eb764a55a7dbae902f7ae5333bc0953c4117d1801cd309d1eb002b232bd4005a3ca6d3047b1208bd2a59b199321b0baf6db7c1de9073d2a592c8d75e8fcf47d4f8ab2d2197f7e7d2961862afca31d7f8d375a0e056d61b59ee3674c8668af250f83e312f7154c3576ecffaa72c10bc8985e1adb688445a283226696c1fd7bf75b3f1eb468d2c94a5d972a4f3a5afaa5cbe613ff42725fdc627b0d2bb8da564b6e335bb484ea42b2d0e81df3173a2891f8c773dbbc8d1f7723adf70019d15cb793b9ef0037630be4eb2eff159086d90ef373d53a248091f12917b62b3933adc97eb5c8966add06be1ae4bdffcf63eeb464048476359d8b664c1066a46aa910bee453a0caccf1026082985365f5cb597a592f9590906722e9fbd5c8cd87f18e848a8a523fcd08de0855162fe695152d252bfd383bc089f7af15353ef074b11e7d020339e14fbca4223621a267fabe30684c27307e985c3ea1e6ee0c238e0ca8b2b56716b9a7c03ce56e077f006bdd02e61b70d1b97e91f560aacb9d4da6b3347210aa7addf07a2fb8a6117cfb8a8dfd065a4ceeb2dd0d64cf1e218f1137e9bd486c050039ce8e2f41aa8cc70a9d06041bdfbbddc491b5371bedd34e14d8e5b6f820a944fc6d0e508f13d34a7a5d34b39e325a34ac9004b9116e52c7645ca8771b1d030dffcb29ec03f0e046902cc5a98144ce044a13b596d0692467c3e65e30db2553888a9e608617c430fbede7dd4a8dd06bc0bb86eba3ee99c71c65bb70692cfd6e3309f52952eeb53261b76375e78e781934bd0d58e7c4ad2490e7348174bc389d770a26fbdb8d28691068f6f2b967901b00a0cd392b4ab47f1f8325e9c69f1fb0cc8aec5345319985314fef87506cd4328f1886e86d5ba560b9a1cdbbe2a6a088b1197aaf2dc80645d5306f677e3b4d9cb863e53d9478d5338765f88f0b4c911d2ef8225b8a8e20a44c7bc455593a7fb61315973043be2501d94d733c2b13afc2ced4d9edfabdf8dd8db0d5d4ae4f564b74bd70a2b0e3b17a7a0c67c92c1ecd411e9d8f695f16a898a201bf575e3301210250622af65e7f0e0bff6a731117c490829924666877b877178f0e0ef039a2a92f3507add7a9c5cb3105bf3494ee47cf6c082e82d09f1d98ecacfc948f6c90c298579a971a8bf67b6daafb014f663440bf9f9a0416f2a96b14505b2335e8c0bd13ac97b262279d8f1d7b1207a19dbb30d5cd91dfa9bde317d5154e8f641fbeb5416ce21f3d31176242c9317e0beaf736725c2164e0b261d5574ec6fad11ea3e8b481a3624e42fd453659f18dd4704e878e0820895fca9a77ab821428f74773d19bb754610d616c3cc7da886d181ea1967fcad5d425a1c5a412452a76224684717c4d76cf5e9579962b24641a46cee9d1296527906b66f53e75f49a64df865bac03ebaae4286d3827a9d9eb6c9fba48015ad0de916c90db4618a8f56e9ee0c39255244e6b72464af68be064b50720d2f7a59c33683ceb8d00459e3a72c2c7487c6c0c0ce7944ef1d4fd395563bf9c6faeb2637176ab1b6c4d0b8a7094829424488ac35520d47017113efabe9bfe6b4c4937b21d2dda3658997cf5485c8571f98bfc6cb945be43750f8d9095b7ac617de1bf469644fde2738929b63f28fc83f42be37fa509299dd702bc9bd04bb709bc1af2db8d8eef76ac0dae2d4caaf5749b4f284b314bd40439ba0ad17bdac81708406c880aa992a6f6ad7cb751d8d9ec5120bf06b3432fcb127f55eff11d2cc2cf459af6ec949764eb5ed69a9be245946ba2350e92cc19409a8c947e8395a170937aa436473572590184a37e3f44a71f706b26f201125f91a2b4938bd520723eb392773f0239197b23c8b761c513046d6c47a5164ee44bee65f71cad57568190185719fb656bfe4cd793d6ac80a3a6b0bd71ff248e67d52a29784c660d81ac5724b6d1bf29bd989cf73e903d09aec5a1147b8e3f5ff4c79001999f3c39ed4acd4165841aff89d4cbdc51ac7a2515144d24163959ddb0d0f46dd12414b78e9f30c4a3cb7d73bc0bc2f8fb6317bf163477b6cfc78a9defa68d05c988b024ee38b0b5711cca1aeaf9c72c1edf5950effa76cc49ad5e9737eaba094966be256db3d122c37cd06b93f5819069ce1ceac23bc0bb83c73e593ad794aa11b8c8187052842be9aa5597f296a3c8460ea8a78aed25423f3208974496de85d96f2beb476348a5f0260cd626c41535b4f9ce01f76706b03fdfee0e60de93114efd2b7c1bd1fe3e95bcccb6aa4b411cebfba71236ecdd4c1c42b4df9dc93674717dc219106deec21842ddb5fb08b060321141d49c627fe989db201aac03e393832f04f200cf9898ba07c1979ce054a04727d9af0ca48349ad6190f293d8c6a0c99b01edd4a183fbe689bad088cc4d31696b94b94a12c3795f7710ae583c22e437e611a3bd8170c0ee71d4a868260f1672bed11cba60323ca1ddd60fd92e6ec6a9af65010d4178687b804393852a5e3332ff95d711f1b7fd163311d98531dc945cf5ae58a1dbe7dbae6f44bd48a183a2583ef5630de4fdd34424eb917c06d06dc3178a836f91e565aeb73ca239eb9d7bf280c104b523b46954f6d94ff5f1d6948ba4eadb2eca265c4b26cc7295c5b9f1e7d9890dc1b03d9063945f98cffae5dda15a8f4cc3a78057e04289fa41e6dabb17ffad06c03fde49e91a53f0158cab6503cdf66256cb261260c8dd69342727ac4ae4f417f66e3be04dd046b5e37b564bccf48f30209cbcea5398d6fcf0d0a06a77762bb584956ef5eb0b0812a5a2f5b57ddf69166591477a5b0ea0de46f523518464efc0795e95ec4f2dd1d97ff82798b5bef8be5787a1a7c0ccdd6fe4a50ac07323c47a154a658e91d56df46479883f5757a7247642b66bc893b6dde5583ad7f774b4b49d2982b79338fd3463d5a74d2b0863e3abce9a6ee00e4fd69b3322ef3d2c786a7dd65e2f12fd4e748ce3f4d6d2b0a62eb8865677e625627d4587924062a88fbd16ef85aa13897ff75a2a7fdbaaaff1f96045dc174ac93c422f73b33bec59f20a29e8f9bf89e8e9ce91206ca42a33dae46a08d5de7ff5e08ab43ac2605ec1cffdc95d8b55f24ec74e47c73876a966611ff9e49cc19d1a86f101348832377406c61d0de8d92d187864c6274521d8398f4c1373577748c8c1032b561327c6bfa40588e58ad1457b195cd22a88b6708966f08001f74fe400b56eb9d4a87ec08f5e0552eac15f0961cf6138bb45c46b7501a92b99465c085ca5f6c0a1baf19afc10e13739cc15d2d9320f1a083c62be191862360dea713977e1556a62fc2a0bfc151e43edfb4c4cb61e29050a09cc8ea22d75abe63ed9bf5690d39edb1727c67897c81070836cab080ef7af221bff3601013188fecb34096846c8a8edccc80a90130fee5e29204c366aa848ffd1864366ed519c0f4ea866c69b13aa2eac6f24eb3880181e722ac55935d67c8acf4e1549aceec7ffb9d67cbec16d0401b92040326422c027850065fca356ebe702399cb6b0ca6d9d55c92ba702ca4b90e26d1175404f7bf1bd4091acb8e69fc6bb16e5cd11fad0aef7eb9a22d45d7409d6c39b64a16d6ecbf245103ab6a8ea101065634fcf8e921fc524f7d06eb031d915cd3a872a863e8a9f2167106f4b99b66728c1041276728ea4171483b778f44d59c0c7add981b0cbea399f0b51615d920ba1d904aa7c95f585cc191a15f2de0fca7ce0532c42c01174d0af2d4b054d271a7e8f6d9d0e1ad6dc4bf051e5e44fd9fa1363eac59e5b1bb66e7d06acaa9e402af7c06e83cece88bd092e9c1cf5eb7bdf1ea2cbc16b37fa3e51a5b53b18079ef57f1fdb09f1166e86685027d67b6e1edb31f694f6b3de4da9cd5ffca61b9773dd63d0423bc478ac3edfc9924ec2daaf22ee939ec0dab3675cefb20575a3eab8450c90ec69ba5851c03d3672276d11523719e8a5baeb585bf4ea2a51611c14ac70703a0c74ab520b8d9f5fa73bb7dd725257d97a15dc8c7ae8f23d704524e786fafdf6c9d33df98601e7ea38139aa1bcee2de875099b6bfd5ff9823dd089a37cf3da4a3eae5993b81bde4a547a1b35f600cc31370a0d5767549f3dd87b4eae13d435f1f20c47dc066d8d2d55140bb6f818a57a905ed437d6ecbf253260ffec8c3cb82c7c5cfb9c459cefe65e5c071d8a7a36e3e58cc7bcc9d4f9cf4cb511ffe5386db0d0317d4176d3edb83688c9f32ec6bbf7a7a32a71a9db31606f1f759d8a0e0142f7d67fb29981b335a6b54f09643bd803e3421a22a1cc8b06243a87b2bc35764570f05cea020fb3a65d292fc2871779e7d97c71c8da7c85966c58a3f7e0a04c53859472eb022271a8ebce751dddccc0b2ae3f44c2d70bf38bf2fe27aeefabef1e9a448379e2440499403a80c5c9e40c7347194f3fb6d69384a31eb3615cc3d3fb0a7fda4a53e8ea1c668b44937a409f3efb9c0d2595fd2c19010d542b566b641bf0b5ac1d2c8c4c7f9c98bd27b3d11ecd1c783ad27b37c49d9c90bdc21e20e9b98d06d162dbee0132dcab653d464d0455f60e1dc7868f3beb37cfa999193c533b9e6222cd3295ee13d53f8321ca5228c0ed13019ec647730af33bd5f10d9d462994a5be014de5cb9346536f5f879d61fc0886319b6907feb9e251539f345c0c4687b210a2dfaafb17232a25f391cad83216dc28571863a578e16520ceb8062744f1da92e05f32dcbd6ce7c6b2c31296e14a3962c084df827e4f0755f8fb319d12ee72b7f101a6d585cac5c8c6d1ce4f8ddf64f7eac6c2060a1ee425390ad684f8dcf16190fff40d15ac0020059876ac89a5e5d8364f4e034b8d82afe113fa7a9bb396ee08a3255cc344c8dac67dae44de21dd3216f61ec9bcb4c1803412a1d7d8905a71c0d453120cb127326aa04c096ec31862deb2d5704f03665ee221109743045fa1c5d354d9806542f5afa9d57d8a45abb99a11d1c3c69f23dda6f5f0541acd24ff07fc4374c82f0ef2ce09b307d67878dd84fdfd1afdf4364ffb9c3fc9ee590412872848ee5d05f96eee196b4ff1d35f6eda77d96a37dc451a0b3c0f8bb863942daf2af61bebf1ab684f85740ddef82c4c3cbb90933bdce28540b0d4558eb7c9fc0c52381529339e10ba34c3458064f89559cd8cbd09c0528874fc4813b07e2c4ef9ea8a7853333eb6ac5074be5e655eca3c1d858a796e400810b5e4ca321e28c0ea68b0e6ff09f2a08dbdd4ad28db0869c51496b14fc17c77ba726cbcdf12a547146b0ab819f745974a282f151ee1ef8a38a777d7c51b64889f3e743713dead52c6b7ace1e6ca47f9c922c05f92df017537c30f7dda9dc97e4c0b0de17e3fe1b8e6166e4"}, {0x40, 0x116, 0xfffffffc, "8076a3fc0e11168dcd100fef36c94ed49dbb9730f2fe7a959738638a095cffc66db99065434161cbf92882a6ca6ee53f"}, {0x60, 0x84, 0x175, "068cb6522f3e6ae011f27c7ac75ecdb9d9274a63d9a227723e98f4c321cee22d06e14f965550440f2078a873d45163119cd4275ab6504b8a3e023e6561a4fd47a3a9ca683575d9ff359c8540"}], 0x10b0}}, {{&(0x7f00000041c0)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e22, @remote}}, 0x80, &(0x7f0000004380)=[{&(0x7f0000004240)="9eb2f36066ffb9bcf5af78b9b82f96b7bea2c7c158a334988b1ea8c441a800de67114c6fe1c7ea210ad17f21053808a2ca48d83c54b7a2115eafdecf9b6d3a214bae87f697a391db3ad5c1339cd1a285d1fc2b2a3689febfa4fec134", 0x5c}, {&(0x7f00000042c0)="ef4e01af621ef805e435fed5dcb04d8ebcd51cd9238ab37815d08522fad50189e9ef34e334df83ba496dfe39a1f9e3caefddfe4a969125f3c5d97f6ec8a1d803e83242c8c6355066cd4b17f8d9dca7d2f376b76202e1a95b628f4b2161b523b2b973d75281fcf37de5ca811296227708dade2adf7f0e97546a05632ed2cb140134e6ef070254de19219db9", 0x8b}], 0x2, &(0x7f00000043c0)=[{0x50, 0x3a, 0x9, "2e2b056c1dc8534eaba02361fc9e665c3af98db8dee678d3b9ddf1462c4172a206f04db5c8420ecb6f838f3ecde9e0f3f81ac7258b893047a8"}], 0x50}}], 0x4, 0x4040000) 2m13.483838478s ago: executing program 33 (id=2565): r0 = socket(0x5, 0x80002, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5, 0x15}, 0x48) socket$inet6_mptcp(0xa, 0x1, 0x106) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x5}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x1, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}}, 0x24000041) r4 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r4, 0x11e, 0x1, 0x0, &(0x7f0000000000)) r5 = socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket(0x40000000015, 0x5, 0x0) getsockopt(r6, 0x200000000114, 0x2719, 0x0, &(0x7f0000000080)=0x39) setsockopt$RDS_CANCEL_SENT_TO(r6, 0x114, 0x1, &(0x7f0000000580)={0x2, 0x4e21, @remote}, 0x10) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x4}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c0000001800010280000000fcdbdf250a148000ff01fd07"], 0x1c}}, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1800000027000100fdff0700001000000400000004000180"], 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) sendmmsg(r0, &(0x7f0000004440)=[{{&(0x7f0000000000)=@pptp={0x18, 0x2, {0x1, @rand_addr=0x64010102}}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000180)="b1112c077006ccb8a803e020da6629f935284f8d47bdcfd370bf723e1a36bb703864f8c9a4e08ea70499bd8df37f607e0dca8440078f25a6980685d45598c4da6944b10147079a027a0ca47a970fe6b6e093381eca93494368d796aa059b2aee57ef5e5403b79a7705074072aff07e47fda2f25d2bec360f9d2c2f0c8a7afc7dcc0729ed47", 0x85}, {&(0x7f0000000240)="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", 0xfa}], 0x2, &(0x7f0000000380)=[{0x28, 0x6, 0xfeb1, "5f23ca722aae6ed88f731bd6694006630d597ae84d"}], 0x28}}, {{&(0x7f00000003c0)=@isdn={0x22, 0x4, 0x8, 0x1, 0x8}, 0x80, &(0x7f0000002a40)=[{&(0x7f0000000440)="af51ab095e96b10a46123449e288cee0c33057628165b833dbaa190a06db598cccec47892225fb4f64e6f136edb965caff07f0f05af084f8efac8c4919d754bd88c8cf1b2b575d80a2e6dd43271a7b6076c4c56b71c31f8115a30bdfc080408bf29a83d8d318751456a214d704eacdba562064d90aef0ce26e1b16e7e60be927af9be1dd1495f9b663ff63892035b8e47c8bd3", 0x93}, {&(0x7f0000000500)="a9512b3972ea5bb2a95998d114ce09c15f61c74b09369c81eec4114ca7ccbd8a1bfd4fd555b0f39a657c48a90d84beab7e220ee6419f84568d8f84d5f567a6765295975003ec06c17e6d3a5d66beccec3652e9709f5ad1b7fd78242ea1a2be51259ebef14f43a896f82736159796853eac097b9f885211a6ee", 0x79}, {&(0x7f0000000640)="3de218fbc3e116d18d30c6ae90f7ce0a73b85d0c2de120b61af2886dc1344ceda52a078c22cf7b8f50f21472646ddf72eee80cdc10de311a4957eebefe4e2802f986b69d2da8ec35357f42b3af2fb2215c386e21cc76efa6c5ab515d7ce7529121ba462b3fde72f4c592ef6653162721a953f9d9a788e5285b4969e4a4df806400ae5895067d4f7c76f619cde6b74397a4b4d28ec78183c6c8e0c24db230cf39d0445ebb6c518ec4c5b07c784ad0ceb2266b29955344c97edd4fe0240c83872bf651b0c0159f233f93cc1aff6221276ccb185d41b9eff93c260384", 0xdb}, {&(0x7f0000000740)="7a3cae7f194d94a7f5f613eb1f473b02622118bbfe4962e0bdb374b1442c15fe542b2c3e7be9bf9fcabaa5d1151cebbc6a32db1b2e28bebe4c3efde56b83e7a557f2d4e6e30b7b067093d2f05cc9732441a6688e780ea00e8394498ffbdc54754cdb80268dd5e5ff7605e4f3a3ff52aea0d40b581d68a774bb207e1708119473600a83de9e2654a72008b1cc87abe948d39a1b43e0417ba3c5642bb34b5431521e171103447ed2963471727420bea22ca8507f2c05b615a9642dc09d11952d5c7b08021678f110dc248ea5886002d8a5ca5311a45dd4cfc2f3a29cca9b4932", 0xdf}, {&(0x7f0000000840)="8c305b3677c260df65c45aca4cbc1f68090ae6aa77799e86c9b301d2e4dfadfb9871920793e5286c2682b52e8ce9b18f0ab740", 0x33}, {&(0x7f0000000880)="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", 0x1000}, {&(0x7f0000001880)="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", 0x1000}, {&(0x7f0000002880)="d3948bc2171b528beb3f09c375454becaf4190bb1aefecef6215488875ce3b9a186952e0661fe044884d8669f0d8065e9c2f8d8970e27e150f6b9f4045b7bad796b6a5e951612ffdb594a3be3358ee803ed6b01b852c589a4d42941a6fe9df348a0fec8643433c24bac6dceee9bfcf0fb8c4994c1af2e1d257a5b27f885f61c550c0bc118e3ba558bc218af06fb714873ead8313772341e8d1107ecfe6478af2960dba4be39c368bd7c99f0101bbc827276cdd0204a4f8d41afa9e978dce311a91919758bfffa639384dae658472149101612813ef8a36a318a2269b75", 0xdd}, {&(0x7f0000002980)="a26f4ff5d2eb92adff2aeeb20d59fe69621463e0582b8f58b1dfec62418d1b3ee45f7a1827ae7ea76425a2df54743b5d7c10553e155c9ee1768acdbaf4f162704da604aaa62a8c9c758117ec2d0b86de5de5750e455703fbdddc8bb15a15c6a1bf4cea7958eb48b30e93bbf110cc15974402e6ed2fd30924e2118926ed28f5f814cd36cc2d066606d8a400e48099b7dae54d4083a1f220e463c2fbe4", 0x9c}], 0x9, &(0x7f0000002b00)=[{0xb0, 0x1, 0xc5, "f6b7b7d4199dc157ea687dc71f0e65779eca2aa7898b1061c95eda073a9a4d5e0043b9eba222c2819359dc657a94c379404ebc9b9e03b0121d289131ba41f5aa483565573f11ed7e1c3e4444319cb12b06c4fd87b855138635827516e3b05c95fdd3b7db07c0b094a7d55f04fc5cddf622d898cc0add8db350a73c84239e3a558831f24972cec43f9d289b4563a70b735f2878a2d3890538fc6d"}, {0xb0, 0x102, 0x3, "09c2303799374fc658f602332ac31fb23e06061c389d3f069a4d9c70320f21888617c8f334ef5682f459193b0d03a0aae92cd0c4fd09825ff564ebd4ff6b3815a439a48850bb1af5c91c202c76b2bb34d044382da6a38136a831e92cecbc58a465a6046fa24b6052e1d1de21dfae718e6ad043aaa84c977b7db3b223abf7b8abe6603b2ce7f6b675547c2f68cee923ed75b10f49c5d69601204071b162ff1dcc"}], 0x160}}, {{&(0x7f0000002c80)=@rxrpc=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0x9, @private1, 0x5}}, 0x80, &(0x7f0000003080)=[{&(0x7f0000002d00)="5de8f32f2c7c455eaa71147bfb77430ceadcc5fcdef8dea1bff377ba8fb8f59f119f1e3dd1e257620ddb03661dfe9cced57db15670f7d23c09a335b1192786a40de75e4ca4e553e90e427911250985cafcc682e5b44183c18915526ae775632c98b77939feb2bf2b606de692e11be26efde719fbf88f823ffd26fa820fda5aa863d68031a6c9f1cea9624a3d4e2f7b48b66b4a330d5a82389a91b5ba4673fea77c1484bc9b860183fa64b2907dc78e941360758dcf32acc409d36db630da7b56bc5e8f", 0xc3}, {&(0x7f0000002e00)="d3edb0bfb397085aed5cbd4df87d13e867", 0x11}, {&(0x7f0000002e40)="c3f193eab8f67a64e33b5503a9c89443399406df6ae36fa269fbea2dea7bb0c86957b9678b1f02ab66cbc46cc5656210d6c8a285d860fdf836522f70353000cd33960e5554a9867f9f3f3c2db4793fc3a48ad8b84a275a5295c8850748aea21ec982825b42e000712edd5c34f559f55fb7bbe79b9d9c88be44f44a789d2ef1cff30db9fb688ac759a379078dd94fcc66a205bb8eb1e85037f1cec22fa5099d2e32262f09b628d1a5f28c5a21072413872c337e7d44296489def06bc43b91d76b9382d7867e42a1ad6e7e5dd0793576a198d2", 0xd2}, {&(0x7f0000002f40)="0541cab0f5efaaa88a0a112da5c56c1e11886c79b09ad3d256ae36a432b43a5cda4b204a633c4449e992ea643ce7c374e326d96e24f4c5a49b71420bf198366cef9fab4e0f27125c4d2d3b47a937523fbcc441818bdb989e79e6800c14ff05fe069db55d8a76bc25714bc24c03af993c4db47a279e20199322a6b2dc7c5ce5ec55cac6f151a23c4b81cca25fa1b7e8c2aeb0bb450bfb2d9e7356a2edc78fda3fdfe15497d078190c7a1f5c38deba415efb857b", 0xb3}, {&(0x7f0000003000)="8fd6479f054aef85fd0753668d568271e62e9943432032bdb02ec2886f74c3b11992b3e4a1945024cbd88ba583fb63842d5e11c74838455b05215111c2d683d5beae4ad4507db88c5d507b08239223bfe192034ac90b804757114bbdba03afa8aed608f7f0a30ec0a8da1cf8a167723f", 0x70}], 0x5, &(0x7f0000003100)=[{0x1010, 0x124, 0xfffffc00, "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"}, {0x40, 0x116, 0xfffffffc, "8076a3fc0e11168dcd100fef36c94ed49dbb9730f2fe7a959738638a095cffc66db99065434161cbf92882a6ca6ee53f"}, {0x60, 0x84, 0x175, "068cb6522f3e6ae011f27c7ac75ecdb9d9274a63d9a227723e98f4c321cee22d06e14f965550440f2078a873d45163119cd4275ab6504b8a3e023e6561a4fd47a3a9ca683575d9ff359c8540"}], 0x10b0}}, {{&(0x7f00000041c0)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e22, @remote}}, 0x80, &(0x7f0000004380)=[{&(0x7f0000004240)="9eb2f36066ffb9bcf5af78b9b82f96b7bea2c7c158a334988b1ea8c441a800de67114c6fe1c7ea210ad17f21053808a2ca48d83c54b7a2115eafdecf9b6d3a214bae87f697a391db3ad5c1339cd1a285d1fc2b2a3689febfa4fec134", 0x5c}, {&(0x7f00000042c0)="ef4e01af621ef805e435fed5dcb04d8ebcd51cd9238ab37815d08522fad50189e9ef34e334df83ba496dfe39a1f9e3caefddfe4a969125f3c5d97f6ec8a1d803e83242c8c6355066cd4b17f8d9dca7d2f376b76202e1a95b628f4b2161b523b2b973d75281fcf37de5ca811296227708dade2adf7f0e97546a05632ed2cb140134e6ef070254de19219db9", 0x8b}], 0x2, &(0x7f00000043c0)=[{0x50, 0x3a, 0x9, "2e2b056c1dc8534eaba02361fc9e665c3af98db8dee678d3b9ddf1462c4172a206f04db5c8420ecb6f838f3ecde9e0f3f81ac7258b893047a8"}], 0x50}}], 0x4, 0x4040000) 2m12.074815893s ago: executing program 2 (id=2717): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x8, 0x10002, 0x0, 0x1}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0c00000061d007315441fc1e0900000000000000", @ANYRES32=r1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=@newqdisc={0x138, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x138}}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2, r2, 0x900}, 0x38) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[], 0x3c}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYRES8, @ANYRES32=r5], 0x90}}, 0x0) r7 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={0xffffffffffffffff, r4, 0x25, 0x1d, @void}, 0x10) r8 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r8) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000200)={r7, r8, 0x0, r2}, 0x10) 2m11.706640777s ago: executing program 2 (id=2721): clock_gettime(0x23eaa8d54bacd65c, 0x0) (async) r0 = socket$xdp(0x2c, 0x3, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f00000000c0)={&(0x7f0000000000)=""/157, 0x9d}) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000340), r1) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)=0x0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x24, r2, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x90}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40880}, 0x48000) 2m11.523172756s ago: executing program 2 (id=2723): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x4, 0x8, 0x22}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x4, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)={0x60, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xfc}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x60}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)='%-5lx \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2m11.26111734s ago: executing program 2 (id=2726): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x3}, @enum, @func_proto={0x0, 0x2, 0x0, 0xd, 0x2, [{0x10}, {}]}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x50}, 0x20) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0xa00, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x20}, 0x1, 0x0, 0x0, 0x48040}, 0x20000004) 2m10.938225989s ago: executing program 2 (id=2729): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000380), 0x4) r2 = socket(0xa, 0x5, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000cc0)='ip6tnl0\x00', 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f00000005c0)=[@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}], 0x10) (async) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000b00)='tunl0\x00', 0x10) (async) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000500)={0x0, 0x1}, &(0x7f0000000980)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f00000009c0)={r3, 0xc0, "0567f67d10f6355e88bb8cda05366a68984469dd47d2096a428645cc9c2968696fd30e97e74b749ae345906b64b500fcb196e2afb7555e486b295d7645347ea991dee46c0c872d3431c3f6fa520dc47864b4aeaf71df2ed8c4f43f49068ffc3ad333afb2a9b83f92b0ed088784dda7f1512d1cfdbd976cb1fc28b1e9a0e44b7fd3681811ba7a6b721f42759006a682b2ec5a31903bad6cf97bea840d57a6191161a47df51088e0b6f26bfc1e8952780693b6acd35e583c185a383d59cc88d981"}, &(0x7f0000000ac0)=0xc8) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="21000000000000002c00128009000100626f6e64000000001c00028005002100010400080500010004"], 0x4c}}, 0x0) (async) recvmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000100)=""/207, 0xcf}, {&(0x7f0000000200)=""/22, 0x16}, {&(0x7f0000000240)=""/61, 0x3d}, {&(0x7f0000000280)=""/254, 0xfe}, {&(0x7f0000000380)=""/84, 0x54}, {&(0x7f0000000400)=""/212, 0xd4}, {&(0x7f0000000940)=""/62, 0x3e}, {&(0x7f0000000540)=""/15, 0xf}, {&(0x7f0000000580)=""/198, 0xc6}, {&(0x7f0000000680)=""/137, 0x89}], 0xa, &(0x7f0000000800)=""/209, 0xd1}, 0x40020143) (async) connect$inet6(r2, &(0x7f0000000bc0)={0xa, 0x4e24, 0x80, @ipv4={'\x00', '\xff\xff', @remote}, 0xffff}, 0x1c) getsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f0000000b40), &(0x7f0000000b80)=0x4) (async) r5 = socket$inet_sctp(0x2, 0x1, 0x84) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r6, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) (async) mmap(&(0x7f0000d30000/0x3000)=nil, 0x3000, 0x0, 0x12, r7, 0x0) (async) mmap(&(0x7f0000f6e000/0x1000)=nil, 0x1000, 0x3000006, 0x12, r7, 0x5c2a7000) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.current\x00', 0x275a, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000003, 0x28011, r8, 0xac9d4000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x200000a, 0xc3072, 0xffffffffffffffff, 0x2fd15000) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x2000) (async) ioctl$PPPIOCBRIDGECHAN(r6, 0x40047435, &(0x7f0000000c80)=0x4a92) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, &(0x7f0000000c00)={r4, 0x2}, &(0x7f0000000c40)=0x8) 2m10.732269271s ago: executing program 2 (id=2730): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x27, 0x9, 0x70bd25, 0x25dfdbfd, {0x12}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0xffff8000}]}, 0x1c}}, 0x4000080) syz_emit_ethernet(0x82, &(0x7f00000000c0)=ANY=[@ANYBLOB="bbbbbbbbbbbb00003f6127f072598d0000000088a800008100000086dd605f106000442f00fc000000000000000000000000000000ff020000000000000000000000000001242081000000000000000800000086dd080088be86ddffff100000000100000000000000080022eb000000002000e000020000000000000000000000088503f81a4a3ef644fa37ac79b565a0052a90907af70bb38e0fc1eafe8e557e2957a61b17da607cd9262499b6c2819cbe71468ec0c7559efc3dfde55ff886179ab38203eec4dec3ac78281cc160cf2ed63765f06f1263b3e5e8cb"], 0x0) 2m9.134076867s ago: executing program 1 (id=2740): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0xfffe) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0xfdef) 2m8.690830915s ago: executing program 1 (id=2745): socket$key(0xf, 0x3, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000940)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6(0xa, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x4, 0x8, 0xb}, 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000740)={@map=r2, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0x400454d0, 0x8) socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@fallback=r4, r4, 0x2f, 0x8, 0xffffffffffffffff, @void, @value=0x0}, 0x20) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x2000, {0x0, 0x0, 0x74, r5, {0xd, 0x10}, {0xfff8, 0xb}, {0xfff2, 0x10}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840) 2m8.264006293s ago: executing program 1 (id=2747): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r3, &(0x7f00000000c0)={0x1d, r4}, 0x18) connect$can_j1939(r3, &(0x7f0000000100)={0x1d, r4, 0x0, {0x1, 0xf0}}, 0x18) sendmmsg(r3, &(0x7f0000004300)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)="462ebbe6d9073d6fa3", 0x9}], 0x1}}], 0x1, 0x40040f5) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r5, &(0x7f00000000c0)={0x1d, r6, 0x0, {0x2, 0x0, 0x4}, 0x2}, 0x18) connect$can_j1939(r5, &(0x7f0000000140)={0x1d, r6, 0x0, {0x2, 0xf0}, 0x1}, 0x18) sendmmsg(r5, &(0x7f0000004300)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000340)="462ebbe6d9073d6fa34c2d28aa708936bb19e656da2f34ecdbf8f27b8f9dd2ec16ada05787201e46e7036b00bbb65ff0a8cadc7fb7831750f1edb022515b25d6e1fa50dad846b3ee57a293373af86975a635ca51bb40ed19", 0x58}, {&(0x7f00000003c0)="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", 0x6a2}], 0x2}}], 0x1, 0xf5) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="09400c00b3b9de47699992bb957abae85c8ff2e6db43041feaeab62eabc36a5974e613c10c7fa808596abde98ab5b6c262f31812deccaf03df4f3b050bd8b50193d12ec3e5f1ccfba18522c0b72500f032446a3c35b8ac8c1ee462d041a6c7ce9e76a46b85f0a249e1ae", @ANYRES16=r1, @ANYBLOB="01012dbd7000000000002b00000008000300", @ANYRES32=r2, @ANYBLOB="04003400"], 0x20}}, 0x2000c840) 2m6.646207363s ago: executing program 1 (id=2756): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$kcm(0x29, 0x2, 0x0) close(r0) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xe, &(0x7f0000000000)=0xd938, 0x4) r3 = socket$netlink(0x10, 0x3, 0x4) write(r3, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10, 0x0}, 0x30004040) setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f00000000c0), 0xfe11) close(r0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$kcm(0x29, 0x2, 0x0) (async) close(r0) (async) socket$kcm(0x2, 0x200000000000001, 0x106) (async) socket$packet(0x11, 0x3, 0x300) (async) setsockopt$packet_int(r2, 0x107, 0xe, &(0x7f0000000000)=0xd938, 0x4) (async) socket$netlink(0x10, 0x3, 0x4) (async) write(r3, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) (async) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10, 0x0}, 0x30004040) (async) setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f00000000c0), 0xfe11) (async) close(r0) (async) 2m6.441245057s ago: executing program 1 (id=2758): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400), 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)) sendmsg$NFC_CMD_SE_IO(r1, 0x0, 0x40014) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000440)=@sack_info={0x0, 0x2, 0x7f}, 0xc) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 2m5.369540441s ago: executing program 1 (id=2765): bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x0, 0x0, 0x8002, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffff7a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_emit_ethernet(0x4e, &(0x7f00000000c0)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x18, 0x3a, 0x0, @remote, @mcast2, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @mcast2}}}}}}, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x27, 0x301, 0x270bda5, 0x25dfdbfa, {0x1}}, 0x14}}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x11}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0xc, &(0x7f00000000c0), 0xfff1}, 0x90) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$inet(r3, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cf", 0x2}], 0x1}, 0x0) sendmsg$rds(r3, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r3, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc) 1m55.565600043s ago: executing program 34 (id=2730): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x27, 0x9, 0x70bd25, 0x25dfdbfd, {0x12}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0xffff8000}]}, 0x1c}}, 0x4000080) syz_emit_ethernet(0x82, &(0x7f00000000c0)=ANY=[@ANYBLOB="bbbbbbbbbbbb00003f6127f072598d0000000088a800008100000086dd605f106000442f00fc000000000000000000000000000000ff020000000000000000000000000001242081000000000000000800000086dd080088be86ddffff100000000100000000000000080022eb000000002000e000020000000000000000000000088503f81a4a3ef644fa37ac79b565a0052a90907af70bb38e0fc1eafe8e557e2957a61b17da607cd9262499b6c2819cbe71468ec0c7559efc3dfde55ff886179ab38203eec4dec3ac78281cc160cf2ed63765f06f1263b3e5e8cb"], 0x0) 1m49.9758793s ago: executing program 35 (id=2765): bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x0, 0x0, 0x8002, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffff7a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_emit_ethernet(0x4e, &(0x7f00000000c0)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x18, 0x3a, 0x0, @remote, @mcast2, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @mcast2}}}}}}, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x27, 0x301, 0x270bda5, 0x25dfdbfa, {0x1}}, 0x14}}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x11}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0xc, &(0x7f00000000c0), 0xfff1}, 0x90) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$inet(r3, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cf", 0x2}], 0x1}, 0x0) sendmsg$rds(r3, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r3, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc) 1m14.01127933s ago: executing program 5 (id=3047): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101"], 0x40}, 0xfffe) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={0x0, 0x68}}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0xfdef) 1m12.46507385s ago: executing program 5 (id=3052): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{r2}, &(0x7f0000000040), &(0x7f00000003c0)='%pI4 \x00'}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={0xffffffffffffffff, 0x0, 0xe, 0x48000000, &(0x7f0000000300)="40f0538ef047b21fb60068305500", 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r4, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0) 1m11.908641107s ago: executing program 5 (id=3057): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="28000000040601020000000000000000050000080500e000070000000900020073797a3000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000280)={'gretap0\x00', &(0x7f0000000040)={'gre0\x00', 0x0, 0x0, 0x700, 0x400, 0x0, {{0x28, 0x4, 0x1, 0x8, 0xa0, 0x65, 0x0, 0x68, 0x4, 0x0, @multicast1, @private=0xa010102, {[@lsrr={0x83, 0xb, 0x72, [@initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101]}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x18, 0x1, [{0x6, 0x12, "49aaffbcd349a2942f7be3e3fa75f324"}]}, @rr={0x7, 0x7, 0x9e, [@rand_addr=0x64010100]}, @cipso={0x86, 0x5c, 0x0, [{0x2, 0x12, "2747752b5876a432af2c8e9bd1341e8a"}, {0x2, 0xe, "d783ce259b8af76cd8319b23"}, {0x1, 0xb, "ba30df09f8bb302af2"}, {0x1, 0xf, "d2b2e16ff886afef63664386fc"}, {0x5, 0xd, "990368cba50f7aa2225902"}, {0x4, 0xf, "01c21e30865457de9061d509d3"}]}]}}}}}) sendmsg$nl_route(r1, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@ipv4_delroute={0x24, 0x19, 0x4, 0x70bd28, 0x25dfdbfd, {0x2, 0x14, 0x4, 0xfa, 0x0, 0x4, 0xfd, 0x1, 0x1700}, [@RTA_IIF={0x8, 0x3, r2}]}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="61123000000000006113100000000000bf200000000000001600020038e873a23d030100000000009500000000000000bc26000000000000bf67000000000000070200000fff07006702000003000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 1m11.45436078s ago: executing program 5 (id=3059): r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x4, 0x4d9, 0x3}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030500000400fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="61000100000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r3, @ANYBLOB="07e55311b9b70b9bfd8e5a90ea48f5b3e4c00120052d4dda64f6ccb3c9455583f640d3ccc3d0e521e4f890ff4ee61a8060e26e0b302d0a85d11c0e1c8b10fdab80e7a1a4371f7683bdc6677fa853889cfd3740310ba186bad8decb99ff96568e3a4c551f8553abf81f3e132ec7a025183cf65b7b818cf338275bc4d118099e7096afd516ddfa2310cfaf5839dd187e4930de022e841cf423ecf114c8ad455bfe8048a551b2d4"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r4 = socket$packet(0x11, 0x2, 0x300) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000180)=r6, 0x4) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="f800000016008502000000000000000020010000000000000000000000000002a600000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032"], 0xf8}}, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000080)=@ethtool_rxfh={0x1}}) 1m10.462920936s ago: executing program 5 (id=3065): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x7, &(0x7f0000000080)=[0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x9d, &(0x7f0000000180)=[{}, {}], 0x10, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0xda, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x25, &(0x7f00000002c0)={0xffffffffffffffff, r1, 0x25, 0x2a, @void}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r2, 0x10040) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='veth0_vlan\x00', 0x10) syz_emit_ethernet(0x42, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa32080045000034006700000206907864010001ac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="4c00000200000000000000000040000000000000"], 0x0) syz_emit_ethernet(0x46, &(0x7f00000003c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}, @val={@void, {0x8100, 0x0, 0x0, 0x4}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0xffffa888}]}}}}}}}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x278, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3e8, 0xffffffff, 0xffffffff, 0x3e8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0xffff00, 0xff000000], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x88}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [0x0, 0x0, 0x0, 0xff000000], 'erspan0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x2d8) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB='..']) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') openat$cgroup(r4, &(0x7f0000000340)='syz1\x00', 0x200002, 0x0) r5 = socket$inet6(0xa, 0x1, 0x8010000000000084) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000a40)=@newsa={0x14c, 0x10, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@remote, 0x0, 0xfff7, 0x2000, 0x1, 0x0, 0x0, 0x0, 0x3b, 0x0, 0xffffffffffffffff}, {@in=@rand_addr=0x64010102, 0x0, 0x6c}, @in=@remote, {0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4}, {0x0, 0x4, 0x40000000}, {}, 0x0, 0x0, 0x2, 0x0, 0x1}, [@XFRMA_IF_ID={0x8, 0x1f, 0x4}, @algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @sec_ctx={0xc, 0x8, {0x8, 0x8, 0x0, 0x7}}]}, 0x14c}}, 0x4810) sendmmsg$inet6(r5, &(0x7f0000004cc0)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x1ff, @private0, 0x401}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000440)="f5", 0x1}], 0x1}}], 0x1, 0x40) shutdown(r5, 0x1) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) getsockopt$inet_buf(r7, 0x118, 0x3, 0x0, &(0x7f00000003c0)) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01012dbd7000000000002b00000008000300", @ANYRES32=r10, @ANYBLOB="050034006e000000080026006c09000008002700010000003dc82b7d8c17b22c542cc744bc7e41a5b05aa83539e55e6c960160e7699f7e2f85b1c9eae52ddabe2fed3c942064efab6918c7de5df7db3a450aaf2c0018bd1918c5b9f9c89b36f5cddf457ccbee35f5ac9fa46182db4e8b2c26b3feaff783af2e68eb995e57200d8603bd44af3ea5844092a18395e1e4ea24662e289792db883cf54065ab8cf1eb7914aecc2b56253de504ef"], 0x34}}, 0x2000c840) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000540)={0x0, @in6={{0xa, 0x4e22, 0x400, @empty, 0x6}}, 0x7d, 0x0, 0x40, 0x5, 0x0, 0x4, 0x1}, &(0x7f00000002c0)=0x9c) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x8927, &(0x7f0000000000)={0xfffffffffffffffb, 0xd93a}) 1m9.319076655s ago: executing program 5 (id=3070): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) (async) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904ff80000000fe280000000000000800040001000000", 0x24) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000240)={0x0, 0x300, &(0x7f0000000200)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vxcan1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x810) (async) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x35, 0x0, 0x0) (async) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x6, @empty}, 0x1c) recvmmsg(r3, &(0x7f0000008cc0)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x2, 0x0) (async) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) (async) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.io_queued\x00', 0x0, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r4, 0x80047210, &(0x7f00000000c0)) ioctl$TUNSETFILTEREBPF(r4, 0x800454e1, &(0x7f0000000100)=r4) 54.053354283s ago: executing program 36 (id=3070): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) (async) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904ff80000000fe280000000000000800040001000000", 0x24) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000240)={0x0, 0x300, &(0x7f0000000200)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vxcan1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x810) (async) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x35, 0x0, 0x0) (async) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x6, @empty}, 0x1c) recvmmsg(r3, &(0x7f0000008cc0)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x2, 0x0) (async) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) (async) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.io_queued\x00', 0x0, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r4, 0x80047210, &(0x7f00000000c0)) ioctl$TUNSETFILTEREBPF(r4, 0x800454e1, &(0x7f0000000100)=r4) 12.390550326s ago: executing program 6 (id=3313): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)={0x14c, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x10}, [@CTA_EXPECT_NAT={0x138, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x58, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x2d}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_EXPECT_NAT_TUPLE={0x74, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00'}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_EXPECT_NAT_TUPLE={0x68, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x10}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0xfffffffd, @empty}, 0x1c) listen(r0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) syz_emit_ethernet(0xca, &(0x7f0000000300)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0xbc, 0x4, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010104, @local}, {{0xfffc, 0x20, 0x41424344, 0x41424344, 0x0, 0x6, 0x2a, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@remove_addr={0x1e, 0x70, 0x5, 0x0, "0c74a267af746b2387efce786976ed4d23f31757b2dfba8169883c082ff271038bf923f2b1f8fcecd63c43cf1a6c1f2a000851ba950fa0f69be4349dfa9e553e73013ec65f5af9158ea0ac2481f6d6119ee5b7773058394e9010cae5f72390f9a29c1b4860d9a7b1db0dde828e"}, @timestamp={0x8, 0xa, 0x80000, 0x2}, @exp_fastopen={0xfe, 0x11, 0xf989, "08fb227731c97d01646669cf59"}, @sack={0x5, 0x6, [0x877f]}]}}}}}}}, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23) connect$inet6(r3, &(0x7f0000000000)={0xa, 0xce26, 0x200000, @loopback, 0x800}, 0x1c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'pimreg\x00'}) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) shutdown(r0, 0x0) 11.562300525s ago: executing program 6 (id=3320): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r0, 0x1, 0x4d, &(0x7f00000014c0)=""/145, &(0x7f0000000080)=0x91) close(0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) bpf$ITER_CREATE(0xb, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x28, r3, 0x1, 0x70bd2a, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x28}}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x800) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x8, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0xfff3, 0x10}}}, 0x24}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x200, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xe7e7}, @TCA_FQ_PIE_TARGET={0x8, 0x3, 0x4}]}}]}, 0x44}}, 0x20004015) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0xe0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e23, 0x3, @loopback, 0x7}}, 0x0, 0xfffd, 0xfffffffc, 0x6, 0x5a1, 0x0, 0x2}, 0x9c) 10.484246799s ago: executing program 6 (id=3326): syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "e0ffac", 0x14, 0x2c, 0x0, @remote, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010104}, {[], {{0x2b00, 0xfffc, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0xc, 0x0, 0x3}}}}}}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 10.244930566s ago: executing program 6 (id=3328): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, &(0x7f0000000a00), &(0x7f0000000a40)=0x4) ioctl$sock_bt_hci(r2, 0x800448d3, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x25dfdbff, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004041}, 0x0) 10.052767561s ago: executing program 7 (id=3330): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet6_int(r1, 0x29, 0x3a, 0x0, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 9.706639062s ago: executing program 8 (id=3331): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x2, 0x3, 0x1, 0x0, 0x43}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000100000000000000000004000000", @ANYRES32=0x0, @ANYBLOB="000000000001000014001680100001800c000400feffffff0400000008001b"], 0x3c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 9.219106771s ago: executing program 8 (id=3333): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) close(0xffffffffffffffff) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) (async) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x40098}, 0x0) (async) r1 = socket(0x10, 0x80002, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_proto_private(r3, 0x8b20, &(0x7f0000000080)) (async) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="20000000520001000000000000000000020300000c00010001"], 0x20}}, 0x80) (async) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140011"], 0x48}}, 0x0) socket$netlink(0x10, 0x3, 0x10) 9.218435063s ago: executing program 7 (id=3334): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x202000, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r6, {0xffff, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xf4, 0x0, 0x4, 0xb, 0x3}, 0x2f}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x884}, 0x40) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000280)=@xdp={0x2c, 0x0, r6, 0x18}, 0x80, &(0x7f00000034c0)=[{&(0x7f00000001c0)="27030200dc0f14000e00", 0xa}, {&(0x7f00000022c0)="ffc9ace87aade11690dd52a158e0b1c49686ce569fbf520db4cad1ed8e1b28400a1b7ff9", 0x24}], 0x2}, 0x8000) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r10, {0xc, 0x10}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 8.562824785s ago: executing program 8 (id=3335): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000040)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) sendmsg$NL80211_CMD_DEAUTHENTICATE(r1, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x114, r2, 0x20, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x3f}}}}, [@NL80211_ATTR_IE={0x7b, 0x2a, [@supported_rates={0x1, 0x7, [{0x2, 0x1}, {0x3, 0x1}, {0x60}, {0x6, 0x1}, {0x18}, {0xc, 0x1}, {0x16}]}, @cf={0x4, 0x6, {0x6, 0x1, 0x7, 0x3}}, @cf={0x4, 0x6, {0xf1, 0x4, 0x8, 0xff}}, @rann={0x7e, 0x15, {{0x1, 0x5}, 0x5, 0x2, @device_a, 0x0, 0x800, 0x4000000}}, @random_vendor={0xdd, 0x36, "f67d9bb6444f3c6dc75691a32d94f1cb609fb8503336c87a7d5b18f3d61b9b0c56d28803bdb54dd662c163e53bb8a77a65320e1566d3"}, @ibss={0x6, 0x2, 0xffff}, @erp={0x2a, 0x1, {0x0, 0x0, 0x1}}, @cf={0x4, 0x6, {0x7, 0x7f, 0x4, 0xfffa}}]}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SSID={0x1b, 0x34, @random="233cc2e121ccfdb722c880d461ca64170b85a55e3d153e"}, @NL80211_ATTR_IE={0x34, 0x2a, [@prep={0x83, 0x25, {{0x0, 0x1}, 0x7, 0xe, @broadcast, 0x808, @value=@device_b, 0xb2d, 0x4, @device_a, 0x7f}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x0, 0x1, 0x0, 0x2, 0x9, 0x8}}]}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}]}, 0x114}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000002600010125bd7000fcffffff6d0000000800030047"], 0x1c}, 0x1, 0x0, 0x0, 0x409d6}, 0x0) 4.264089229s ago: executing program 8 (id=3339): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58) (async) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0xd) (async) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0xd) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x3}, 0x10) (async) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x3}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x41}, 0x1be) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x18}}, 0x10, 0x0}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYRES32=r3], 0xc8}}, 0x0) 4.137115141s ago: executing program 7 (id=3340): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000340)=0x3, 0x8) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000ac0)=@newqdisc={0x80, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x3}]}}, @TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xa, 0x6, 0x9, 0xcb54, 0x2, 0x6, 0xfabd}}, {0x4}}, {{0x1c, 0x1, {0x6, 0x0, 0x8001, 0xfffffffb, 0x2, 0x6, 0xf8000000}}, {0x4}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x48001}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) close(r6) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r9, &(0x7f00000000c0)={&(0x7f00000004c0)=@xdp={0x2c, 0x0, r8, 0x18}, 0x80, &(0x7f00000008c0)=[{&(0x7f00000001c0)="27030200", 0x4}], 0x1}, 0x4005) 3.693917685s ago: executing program 8 (id=3342): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000036000000180100006420002500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001800000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x5, 0xb90, 0x0, &(0x7f0000000140)="259a00f271a76d1708fff74588a8", 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, 0x0}, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) getsockopt$inet_mptcp_buf(r3, 0x11c, 0x3, &(0x7f0000000040)=""/185, &(0x7f0000000140)=0xb9) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x200280d0}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000004a80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x40091}, 0x40) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r4 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x4}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) 2.564791295s ago: executing program 6 (id=3345): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$inet(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x1c, 0x17, 0x1, 0x70bd26, 0x25dfdbfd, {0xa}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48c1}, 0x20000010) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x23) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r7, 0x702, 0x72, 0x0, &(0x7f0000000040)="e460334400005000eb00c15286ddea7b03c6b8564a1ef1cef05bdaa5958a2cb1087dad203447dba73666d209bd02246fe3e0f3be78a37ba851da39f7594a66e7ab3666ee250fa7d5595238df44f22828d26e2591592d02f875b0cea9b4cbbf37fcd33bb7c668e43a945608d8ea0da812d7c7", 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000005f00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r8, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}}, 0x28000) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000640)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r9 = socket$netlink(0x10, 0x3, 0x4) sendmsg$GTP_CMD_DELPDP(r9, 0x0, 0xc000) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000029c0)={0x6, 0x11, &(0x7f0000002740)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12637fab}, {}, {}, [@call={0x85, 0x0, 0x0, 0x32}, @call={0x85, 0x0, 0x0, 0xb4}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x63, 0x54, &(0x7f0000002840)=""/84, 0x41000, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000002900)={0x0, 0xd, 0x8, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000002940)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x8}, 0x94) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r10, 0x29, 0x41, &(0x7f0000000340)={'security\x00', 0x4, [{}, {}, {}, {}]}, 0x68) sendmsg$NL80211_CMD_LEAVE_OCB(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14, r4, 0x200, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x13881b182ae7aa9d) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r11, {0x0, 0x2}, {0xffff, 0xffff}, {0x5}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x1000, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40800}, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)=ANY=[@ANYRES8=r0, @ANYRES32=r0], 0x220}], 0x1, 0x0, 0x0, 0xc0}, 0x4000000) 2.34103978s ago: executing program 0 (id=3346): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711237000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r1 = socket$kcm(0x2, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000100)={r1}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x100, 0x100, 0x9, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0x8, r2}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r2}, 0x38) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x68, 0x30, 0x800, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffffb}, 0xc0000000}}]}, {0x4}, {0xfffffffffffffe22}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="660a00000000000061114c000000000085000000cf00000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) 2.095007117s ago: executing program 0 (id=3347): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000050900010073797a310000000024010000050a01020000000000000000010000000c00024000000000000000010900010073797a3100000000040004800a0007"], 0x1ac}, 0x1, 0x0, 0x0, 0x4801}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gre0\x00', 0x200}) 1.703595486s ago: executing program 0 (id=3348): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x2c}, 0x94) r1 = socket$inet6(0xa, 0x3, 0x3) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r0, 0x0, 0x25, 0x2, @void}, 0x10) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r0, 0x0, 0x25, 0x2, @void}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, r3, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x7}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100001080000e3015b08162335a00000", @ANYRES32, @ANYBLOB="80400100000001000c002b8008000100", @ANYRES32=r0], 0x34}, 0x1, 0x0, 0x0, 0x200048d0}, 0xc0) (async) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100001080000e3015b08162335a00000", @ANYRES32, @ANYBLOB="80400100000001000c002b8008000100", @ANYRES32=r0], 0x34}, 0x1, 0x0, 0x0, 0x200048d0}, 0xc0) socket(0x1d, 0x2, 0x6) (async) r4 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r5, 0x8000000000000003, {}, 0xfd}, 0x18) (async) bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r5, 0x8000000000000003, {}, 0xfd}, 0x18) close(r4) r6 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r6, &(0x7f0000000580)={0x1d, r5, 0x1, {0x2, 0x0, 0x2}, 0xf9}, 0x18) r7 = socket$nl_generic(0x10, 0x3, 0x10) close(r1) (async) close(r1) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r7) sendmsg$NL80211_CMD_SET_BEACON(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000000)={0x18, r8, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_IE_ASSOC_RESP={0x4, 0xe}]}, 0x18}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r9) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r11, @ANYBLOB="5c005a8054000180050007000100000047000200"], 0x78}, 0x1, 0x0, 0x0, 0x40080}, 0x2000c840) gettid() (async) r12 = gettid() sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x2c, r8, 0x100, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void, @void}}, [@NL80211_ATTR_PID={0x8, 0x52, r12}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x51}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r11}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.696722068s ago: executing program 8 (id=3349): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x202000, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r6, {0xffff, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xf4, 0x0, 0x4, 0xb, 0x3}, 0x2f}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x884}, 0x40) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000280)=@xdp={0x2c, 0x0, r6, 0x18}, 0x80, &(0x7f00000034c0)=[{&(0x7f00000001c0)="27030200dc0f14000e00", 0xa}, {&(0x7f00000022c0)="ffc9ace87aade11690dd52a158e0b1c49686ce569fbf520db4cad1ed8e1b28400a1b7ff9", 0x24}], 0x2}, 0x8000) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r10, {0xc, 0x10}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 938.690264ms ago: executing program 7 (id=3350): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="a00000001800092d00000000000000001c140000fe000001"], 0xa0}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94) sendmsg$nl_generic(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="581800004400010029bd7000040000000100000004004880401801"], 0x1858}, 0x1, 0x0, 0x0, 0x200408d1}, 0x4008094) r2 = socket$netlink(0x10, 0x3, 0x5) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x10}, 0xc) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x41, 0x3, 0x3b0, 0x0, 0x0, 0x0, 0x240, 0x0, 0x318, 0x1f0, 0x1f0, 0x318, 0x1f0, 0x3, 0x0, {[{{@ip={@multicast1, @empty, 0x0, 0xff, 'macvlan1\x00', 'wg1\x00', {}, {}, 0x6}, 0x0, 0x1f8, 0x240, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}, @common=@inet=@hashlimit2={{0x150}, {'tunl0\x00', {0x4, 0x9b8b, 0x10, 0x1, 0xffffffff, 0x10000, 0xf0df, 0x20}, {0xae6b5d1}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x6, 0x3, 0x1, 'pptp\x00', {0x80}}}}, {{@ip={@private=0xa010100, @rand_addr=0x64010101, 0xffffff00, 0x0, 'pim6reg\x00', 'bridge_slave_1\x00', {0xff}, {0x101}, 0x6, 0x2}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x2, 0x9, 0x7, 'pptp\x00', 'syz1\x00', {0xb98}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x410) 937.639963ms ago: executing program 0 (id=3351): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002fc0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028008000300070000000800090001"], 0x44}}, 0x0) socketpair(0x22, 0x0, 0xa271, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000040)={0x0, 0x1, 0x6}, 0x10) 685.724581ms ago: executing program 6 (id=3352): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000600), r0) sendmsg$IEEE802154_LLSEC_LIST_DEV(r1, &(0x7f0000000780)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14, r2, 0x100, 0x70bd25, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4004840) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000180), r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) close(0x3) (async) close(0x3) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000580)=0xde01, 0xc) (async) write$cgroup_int(r6, &(0x7f0000000580)=0xde01, 0xc) socket$alg(0x26, 0x5, 0x0) (async) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000010c0)=@newtfilter={0x24, 0x26, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x1}}}, 0x24}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r6) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xffffffa9}, {&(0x7f00000002c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)}, {0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000003c0)="96e6e14d06cd2cd1dc6969313336a9017d94"}, {&(0x7f0000000400)="499b7fee4035c5b8beb1f70453870f0783c185665f5661dc54c5a1a1ad65e127a695fb29eb758e857595e5277fdfcd8246da633a7d6ed7e05fe75f4f36c670e755ca5142914fdc83650da6c01c7a06ebf495fbe36b151a4c207d9347308484a5891ad7c14310bd"}, {&(0x7f0000000640)="7caba4f81ffec1c44c4691773da226d91a54e9721f1f4c8f4d4f19a73292612c8ad72d40ac83e55148f6700815e6d140cfab03adc719caee1f3feed087bc616c3bc19a510350d0befe495457b7d16c139c6e6850f1e32a661bd7cc91e333472aae3e3eb8815a38aa8fea91788c44336c8437a86f885f3546456df377a81b43b22f543cad111ff0d0"}], 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="00000000000000001701000004000000040000000000000000000000000000001701000003000000000000000000000000000000000000001701000002000000000000008db6ba8669d9e3af336c9db7d7b600000000000067ab9dfade50263fca68064513414d4a7812c38b4c70753e9ef9f941ff7c1ebcfd79c64a594b41dd41b329d3cc14c29fa008f5c24363ad52e2bafeba6e55ac24ad2a44cbeacd365353b6541f21789daab56174ca2941b64022d67061ec8e2b1fa1eed6e9d4"], 0x0, 0x40088c0}], 0x1, 0x40800) (async) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xffffffa9}, {&(0x7f00000002c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)}, {0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000003c0)="96e6e14d06cd2cd1dc6969313336a9017d94"}, {&(0x7f0000000400)="499b7fee4035c5b8beb1f70453870f0783c185665f5661dc54c5a1a1ad65e127a695fb29eb758e857595e5277fdfcd8246da633a7d6ed7e05fe75f4f36c670e755ca5142914fdc83650da6c01c7a06ebf495fbe36b151a4c207d9347308484a5891ad7c14310bd"}, {&(0x7f0000000640)="7caba4f81ffec1c44c4691773da226d91a54e9721f1f4c8f4d4f19a73292612c8ad72d40ac83e55148f6700815e6d140cfab03adc719caee1f3feed087bc616c3bc19a510350d0befe495457b7d16c139c6e6850f1e32a661bd7cc91e333472aae3e3eb8815a38aa8fea91788c44336c8437a86f885f3546456df377a81b43b22f543cad111ff0d0"}], 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="00000000000000001701000004000000040000000000000000000000000000001701000003000000000000000000000000000000000000001701000002000000000000008db6ba8669d9e3af336c9db7d7b600000000000067ab9dfade50263fca68064513414d4a7812c38b4c70753e9ef9f941ff7c1ebcfd79c64a594b41dd41b329d3cc14c29fa008f5c24363ad52e2bafeba6e55ac24ad2a44cbeacd365353b6541f21789daab56174ca2941b64022d67061ec8e2b1fa1eed6e9d4"], 0x0, 0x40088c0}], 0x1, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r5, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r5, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000000000)={0x4c, r3, 0x1, 0x0, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x300}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5}, {0x5}, {0x5}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}]}, 0x4c}}, 0x0) 357.521764ms ago: executing program 0 (id=3353): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipv6_getanyicast={0x14, 0x3e, 0x100, 0x70bd2a, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x14}}, 0x0) 174.663528ms ago: executing program 7 (id=3354): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x11, 0x4, 0x4, 0x12}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x20, 0x1c, 0xff, 0xfffff014}, {0x6}]}, 0x10) 167.930546ms ago: executing program 0 (id=3355): syz_emit_ethernet(0x2a, &(0x7f0000000240)={@multicast, @random="7f0a00034011", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x2, 0xf, 0x1c, 0x66, 0x0, 0x80, 0x2, 0x0, @remote, @local}, "156b3485e766b1df"}}}}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000040)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}, @multicast, @void, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x1, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}, @private1={0xfc, 0x1, '\x00', 0x1}}}}}, &(0x7f00000000c0)={0x0, 0x4, [0x78c, 0x8b6, 0xfa2, 0x43]}) r0 = socket$l2tp6(0xa, 0x2, 0x73) bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000210021012dd27000000000000a00000d0000000002000000"], 0x1c}}, 0x8044) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x6, &(0x7f0000000300)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000000000000000000000f7ffffbe0000000000000095", @ANYRESDEC=r1, @ANYRES32=r1], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x16}, 0x0, 0x2, 0x3, 0x4, 0x8, 0xf}, 0x20) 0s ago: executing program 7 (id=3356): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) bpf$ITER_CREATE(0xb, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x28, r3, 0x1, 0x70bd2a, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x28}}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x800) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x8, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0xfff3, 0x10}}}, 0x24}}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPP(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x28, r6, 0xf01, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x4f}}}}}, 0x28}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x34, 0x24, 0x200, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4, 0x8002}}]}, 0x34}}, 0x20004015) r7 = socket(0x10, 0x3, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000240)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x5c, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3df], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}, [@TCA_MQPRIO_MAX_RATE64={0x4}]}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x71228}, [@IFLA_MTU={0x8, 0x4, 0x81}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4004090) r11 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r11, &(0x7f00000002c0), 0x40000000000009f, 0xe0) kernel console output (not intermixed with test programs): cket_rcv: packet too big, clamped from 39 to 4294967272. macoff=96 [ 383.965373][T14193] netlink: 'syz.5.2208': attribute type 1 has an invalid length. [ 384.193836][T14193] 8021q: adding VLAN 0 to HW filter on device bond2 [ 384.343477][T14197] bond2: (slave syz_tun): Enslaving as a backup interface with an up link [ 384.543019][T14215] bond5: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 384.585850][T14215] bond5 (unregistering): Released all slaves [ 384.741505][T14220] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2215'. [ 385.452925][T14269] IPv6: Can't replace route, no match found [ 385.494571][T14269] IPv6: Can't replace route, no match found [ 385.869338][T14293] x_tables: duplicate entry at hook 1 [ 386.095592][T14296] syzkaller0: entered promiscuous mode [ 386.101940][T14296] syzkaller0: entered allmulticast mode [ 386.120358][T14301] netlink: 'syz.0.2234': attribute type 1 has an invalid length. [ 386.159049][T14300] syzkaller1: entered promiscuous mode [ 386.169308][T14300] syzkaller1: entered allmulticast mode [ 386.277276][T14304] syzkaller1: left promiscuous mode [ 386.294084][T14304] syzkaller1: left allmulticast mode [ 386.354864][T14312] netlink: 'syz.2.2238': attribute type 1 has an invalid length. [ 386.429894][T14312] bond5: entered promiscuous mode [ 386.436369][T14312] 8021q: adding VLAN 0 to HW filter on device bond5 [ 386.937175][T14341] __nla_validate_parse: 4 callbacks suppressed [ 386.937197][T14341] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2243'. [ 387.037914][T14344] veth0: entered promiscuous mode [ 387.051208][T14343] veth0: left promiscuous mode [ 387.061703][T14346] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2245'. [ 387.240306][T14357] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2247'. [ 387.310930][T14360] netlink: 'syz.1.2248': attribute type 1 has an invalid length. [ 387.512321][T14360] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 387.531717][T14374] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2252'. [ 387.663126][T14376] netlink: 'syz.3.2254': attribute type 1 has an invalid length. [ 388.013493][T14385] bond7: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 388.053136][T14385] bond7: (slave lo): Enslaving as an active interface with an up link [ 388.080766][T14385] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 388.128983][T14399] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2259'. [ 388.313880][T14407] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2264'. [ 388.341159][T14411] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 388.350734][T14410] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2265'. [ 388.844239][T14427] netlink: 'syz.5.2269': attribute type 10 has an invalid length. [ 389.070114][T14447] netlink: 'syz.1.2271': attribute type 23 has an invalid length. [ 389.612914][T14460] vlan2: entered promiscuous mode [ 389.632508][T14460] hsr0: entered promiscuous mode [ 389.647770][T14460] vlan2: entered allmulticast mode [ 389.666895][T14460] hsr0: entered allmulticast mode [ 389.702577][T14460] hsr_slave_0: entered allmulticast mode [ 389.725460][T14460] hsr_slave_1: entered allmulticast mode [ 390.029551][ T5625] Bluetooth: hci5: link tx timeout [ 390.036500][ T5625] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 390.107759][T14490] netlink: 'syz.2.2282': attribute type 1 has an invalid length. [ 390.238084][T14500] IPVS: set_ctl: invalid protocol: 47 224.0.0.2:20000 [ 390.281553][T14505] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2288'. [ 390.337818][T14502] xfrm0 speed is unknown, defaulting to 1000 [ 390.392853][T14500] netlink: 'syz.0.2284': attribute type 20 has an invalid length. [ 390.420081][T14500] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2284'. [ 390.482514][T14502] xfrm0 speed is unknown, defaulting to 1000 [ 390.518822][T14502] xfrm0 speed is unknown, defaulting to 1000 [ 390.520964][T14500] netlink: 'syz.0.2284': attribute type 20 has an invalid length. [ 390.533145][T14502] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 390.533201][T14502] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 390.533241][T14502] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 390.556412][T14502] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 390.590106][T14500] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2284'. [ 390.740454][T14502] xfrm0 speed is unknown, defaulting to 1000 [ 390.766187][T14502] xfrm0 speed is unknown, defaulting to 1000 [ 390.798581][T14502] xfrm0 speed is unknown, defaulting to 1000 [ 390.827579][T14502] xfrm0 speed is unknown, defaulting to 1000 [ 390.868129][T14502] xfrm0 speed is unknown, defaulting to 1000 [ 390.895372][T14502] xfrm0 speed is unknown, defaulting to 1000 [ 390.937218][T14528] netlink: 'syz.0.2292': attribute type 4 has an invalid length. [ 391.898299][T14562] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 391.946978][T14571] __nla_validate_parse: 4 callbacks suppressed [ 391.946999][T14571] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2303'. [ 392.070786][ T5625] Bluetooth: hci5: command 0x0406 tx timeout [ 392.240837][T14581] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2306'. [ 392.476653][T14591] IPVS: length: 59 != 8 [ 392.623904][T14602] netlink: 'syz.3.2309': attribute type 15 has an invalid length. [ 392.676741][T14605] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2309'. [ 392.700766][T14602] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2309'. [ 392.718133][T14606] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2311'. [ 393.006304][T14618] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 393.027387][T14623] netlink: 'syz.0.2316': attribute type 1 has an invalid length. [ 393.040422][T14623] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2316'. [ 393.051922][T14623] netlink: 'syz.0.2316': attribute type 2 has an invalid length. [ 393.062025][T14623] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2316'. [ 393.211617][T14630] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 393.224506][T14629] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 394.011361][T14662] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2328'. [ 395.629171][T14725] syzkaller0: entered promiscuous mode [ 395.671341][T14725] syzkaller0: entered allmulticast mode [ 395.882901][T14748] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2342'. [ 396.171323][T14757] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2346'. [ 396.206965][T14763] openvswitch: netlink: Unexpected mask (mask=4000010, allowed=10058) [ 396.775406][ T9121] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 396.793882][T14790] netlink: 'syz.3.2355': attribute type 21 has an invalid length. [ 396.803838][ T9121] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 396.816678][T14790] netlink: 'syz.3.2355': attribute type 22 has an invalid length. [ 396.852669][T14790] netlink: 'syz.3.2355': attribute type 23 has an invalid length. [ 396.881033][T14790] netlink: 'syz.3.2355': attribute type 25 has an invalid length. [ 397.309420][T14806] __nla_validate_parse: 4 callbacks suppressed [ 397.309441][T14806] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2360'. [ 397.372254][T14806] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2360'. [ 397.459612][T14806] vlan0: entered promiscuous mode [ 397.491953][T14816] bridge_slave_1: left allmulticast mode [ 397.512445][T14816] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.569243][T14816] bridge_slave_0: left allmulticast mode [ 397.591570][T14816] bridge_slave_0: left promiscuous mode [ 397.626039][T14816] bridge0: port 1(bridge_slave_0) entered disabled state [ 397.804530][T14829] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2365'. [ 397.868706][T14829] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2365'. [ 397.922365][T14829] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2365'. [ 398.164926][T14847] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 398.399381][T14857] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2374'. [ 398.420476][T14859] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2374'. [ 398.781528][T14874] geneve2: entered promiscuous mode [ 398.832499][T14880] 8021q: VLANs not supported on ip_vti0 [ 398.860615][T14880] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2379'. [ 398.915885][T14880] hsr_slave_0: left promiscuous mode [ 398.975165][T14880] hsr_slave_1: left promiscuous mode [ 399.041410][T14894] netlink: 'syz.0.2381': attribute type 1 has an invalid length. [ 399.143496][T14894] bond5: entered promiscuous mode [ 399.153020][T14894] 8021q: adding VLAN 0 to HW filter on device bond5 [ 399.283114][T14905] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2385'. [ 399.295364][T14905] netlink: 'syz.1.2385': attribute type 1 has an invalid length. [ 399.346455][T14910] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2385'. [ 399.451784][T14905] bond8: entered promiscuous mode [ 399.457919][T14905] 8021q: adding VLAN 0 to HW filter on device bond8 [ 399.526512][T14915] netlink: 'syz.3.2386': attribute type 1 has an invalid length. [ 399.644064][T14915] 8021q: adding VLAN 0 to HW filter on device bond8 [ 399.764725][T14915] vlan2: entered promiscuous mode [ 399.776058][T14915] bond8: entered promiscuous mode [ 399.783960][T14915] vlan2: entered allmulticast mode [ 399.791381][T14915] bond8: entered allmulticast mode [ 399.802154][T14915] netlink: 'syz.3.2386': attribute type 5 has an invalid length. [ 401.911585][T14886] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 402.425503][T14958] netlink: ct family unspecified [ 402.468109][T14958] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 402.556121][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 402.562782][ T1174] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 402.652514][T14959] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 402.839213][T14975] netlink: 'syz.3.2403': attribute type 12 has an invalid length. [ 402.859791][T14975] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2403'. [ 402.893257][T14975] netlink: 'syz.3.2403': attribute type 5 has an invalid length. [ 403.270126][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 403.689964][T14990] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2410'. [ 403.760495][T14990] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 403.773000][ T10] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 404.235584][T15015] batadv0: entered promiscuous mode [ 404.264245][T15015] macsec1: entered promiscuous mode [ 404.304133][T15015] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 404.343040][T15015] batadv0: left promiscuous mode [ 405.476001][T15058] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2427'. [ 405.497375][T15058] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 405.530748][T15060] sctp: [Deprecated]: syz.5.2429 (pid 15060) Use of int in max_burst socket option. [ 405.530748][T15060] Use struct sctp_assoc_value instead [ 405.821051][T15072] mac80211_hwsim hwsim18 syzkaller0: entered promiscuous mode [ 405.846024][T15072] mac80211_hwsim hwsim18 syzkaller0: entered allmulticast mode [ 405.887562][T15071] syzkaller0: entered promiscuous mode [ 405.893266][T15071] syzkaller0: entered allmulticast mode [ 405.913974][T15075] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2435'. [ 406.052040][T15079] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20002 [ 406.852094][T15107] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2442'. [ 406.896281][T15107] netlink: 'syz.2.2442': attribute type 1 has an invalid length. [ 407.029658][T15109] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2442'. [ 408.707371][T15103] netlink: 'syz.1.2441': attribute type 1 has an invalid length. [ 408.725362][T15107] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 408.727256][T15108] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 409.189102][T15129] tipc: Started in network mode [ 409.223316][T15129] tipc: Node identity 080211000001, cluster identity 4711 [ 409.243659][T15129] tipc: Enabled bearer , priority 0 [ 409.264179][T15132] x_tables: duplicate underflow at hook 2 [ 409.280673][T15129] netlink: 'syz.5.2448': attribute type 1 has an invalid length. [ 409.800830][T15160] netlink: 312 bytes leftover after parsing attributes in process `syz.2.2458'. [ 409.965952][T15170] x_tables: duplicate underflow at hook 2 [ 409.990118][ T176] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 410.005692][T15171] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2460'. [ 410.299034][T15177] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2463'. [ 410.347380][T15184] openvswitch: netlink: IP tunnel dst address not specified [ 410.359042][ T10] tipc: Node number set to 134418688 [ 410.625591][T15198] netlink: 'syz.5.2468': attribute type 39 has an invalid length. [ 411.007241][T15208] netlink: 'syz.5.2472': attribute type 1 has an invalid length. [ 411.111831][T15214] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 411.184352][T15211] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 411.406364][T15208] 8021q: adding VLAN 0 to HW filter on device bond3 [ 411.746964][T15241] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2476'. [ 412.882505][T15274] netlink: 'syz.5.2480': attribute type 1 has an invalid length. [ 412.926203][T15274] netlink: 5120 bytes leftover after parsing attributes in process `syz.5.2480'. [ 413.044587][T15284] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2483'. [ 413.095538][T15284] netlink: 6 bytes leftover after parsing attributes in process `syz.2.2483'. [ 413.473031][T15297] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2487'. [ 413.988613][T15298] netlink: 'syz.2.2487': attribute type 4 has an invalid length. [ 414.216311][T15326] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2493'. [ 414.340863][T15327] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 414.766869][T15340] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.108957][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.511633][T15358] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 415.673678][T15361] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2503'. [ 415.755714][T15235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.864473][T15368] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2505'. [ 415.905062][T15368] nbd: must specify a device to reconfigure [ 415.964816][T15372] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.974878][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.994548][T15371] netlink: 'syz.3.2506': attribute type 2 has an invalid length. [ 416.370728][T15381] syzkaller0: entered promiscuous mode [ 416.399337][T15381] syzkaller0: entered allmulticast mode [ 416.470420][T15385] syzkaller0: entered promiscuous mode [ 416.487947][T15385] syzkaller0: entered allmulticast mode [ 417.053349][T15402] netlink: 'syz.3.2514': attribute type 1 has an invalid length. [ 417.102718][T15337] veth0_to_team: entered promiscuous mode [ 417.234099][T15337] A link change request failed with some changes committed already. Interface dvmrp1 may have been left with an inconsistent configuration, please check. [ 417.275890][T15336] lo speed is unknown, defaulting to 1000 [ 417.435416][T15411] FAULT_INJECTION: forcing a failure. [ 417.435416][T15411] name failslab, interval 1, probability 0, space 0, times 0 [ 417.448563][T15336] xfrm0 speed is unknown, defaulting to 1000 [ 417.472367][ T12] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 417.475845][T15411] CPU: 1 UID: 0 PID: 15411 Comm: syz.5.2515 Not tainted syzkaller #0 PREEMPT(full) [ 417.475873][T15411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 417.475884][T15411] Call Trace: [ 417.475891][T15411] [ 417.475900][T15411] dump_stack_lvl+0xe8/0x150 [ 417.475933][T15411] should_fail_ex+0x40c/0x560 [ 417.475960][T15411] should_failslab+0xa8/0x100 [ 417.475987][T15411] __kmalloc_noprof+0xfe/0x720 [ 417.476009][T15411] ? rcu_is_watching+0x15/0xb0 [ 417.476035][T15411] ? tomoyo_realpath_from_path+0xef/0x640 [ 417.476055][T15411] ? tomoyo_realpath_from_path+0xef/0x640 [ 417.476085][T15411] tomoyo_realpath_from_path+0xef/0x640 [ 417.476114][T15411] ? tomoyo_path_number_perm+0x219/0x5f0 [ 417.476140][T15411] tomoyo_path_number_perm+0x246/0x5f0 [ 417.476169][T15411] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 417.476194][T15411] ? __lock_acquire+0x683/0x2cf0 [ 417.476230][T15411] ? hook_file_ioctl+0x1f0/0x5f0 [ 417.476276][T15411] ? __fget_files+0x2a/0x420 [ 417.476302][T15411] ? __fget_files+0x2a/0x420 [ 417.476323][T15411] ? __fget_files+0x3a2/0x420 [ 417.476343][T15411] ? __fget_files+0x2a/0x420 [ 417.476370][T15411] security_file_ioctl+0xc3/0x2a0 [ 417.476397][T15411] __se_sys_ioctl+0x47/0x170 [ 417.476415][T15411] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.476435][T15411] do_syscall_64+0x174/0x580 [ 417.476451][T15411] ? trace_irq_disable+0x3b/0x140 [ 417.476474][T15411] ? clear_bhb_loop+0x40/0x90 [ 417.476496][T15411] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.476514][T15411] RIP: 0033:0x7f537b79de99 [ 417.476532][T15411] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 417.476547][T15411] RSP: 002b:00007f537c667028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 417.476567][T15411] RAX: ffffffffffffffda RBX: 00007f537ba25fa0 RCX: 00007f537b79de99 [ 417.476580][T15411] RDX: 00002000000000c0 RSI: 00000000800442d3 RDI: 0000000000000004 [ 417.476592][T15411] RBP: 00007f537c667090 R08: 0000000000000000 R09: 0000000000000000 [ 417.476602][T15411] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 417.476613][T15411] R13: 00007f537ba26038 R14: 00007f537ba25fa0 R15: 00007ffe19993268 [ 417.476642][T15411] [ 417.476662][T15411] ERROR: Out of memory at tomoyo_realpath_from_path. [ 417.516310][ T5843] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 417.568859][ T12] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 417.809960][T15413] netlink: 'syz.1.2516': attribute type 1 has an invalid length. [ 417.837356][ T5843] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 418.224369][T15413] bond9: entered promiscuous mode [ 418.253778][T15413] 8021q: adding VLAN 0 to HW filter on device bond9 [ 418.710731][ T5843] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 419.155375][T15458] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2527'. [ 419.184258][T15458] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2527'. [ 419.204425][T15460] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2528'. [ 420.025440][T15480] bond7: (slave lo): Releasing backup interface [ 420.088146][T15480] bond7: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 420.318091][T15480] bridge_slave_0: left allmulticast mode [ 420.338530][T15480] bridge_slave_0: left promiscuous mode [ 420.339551][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 420.351407][T15480] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.420117][T15480] bridge_slave_1: left allmulticast mode [ 420.441538][T15480] bridge_slave_1: left promiscuous mode [ 420.463340][T15480] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.500081][T15480] bond0: (slave bond_slave_0): Releasing backup interface [ 420.528154][T15480] bond0: (slave bond_slave_1): Releasing backup interface [ 420.557459][T15480] team0: Port device team_slave_0 removed [ 420.574873][T15480] team0: Port device team_slave_1 removed [ 420.581845][T15480] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 420.596119][T15480] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 420.598783][T15492] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2535'. [ 420.637982][T15480] bond4: (slave ip6gre2): Releasing backup interface [ 420.646010][T15480] ip6gre2: left promiscuous mode [ 420.679671][T15495] netlink: 372 bytes leftover after parsing attributes in process `syz.2.2535'. [ 420.730327][T15483] team0: Port device xfrm0 added [ 421.411738][T15504] syzkaller0: mtu less than device minimum [ 421.663763][T15521] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2543'. [ 422.096348][T15537] sctp: [Deprecated]: syz.0.2550 (pid 15537) Use of int in maxseg socket option. [ 422.096348][T15537] Use struct sctp_assoc_value instead [ 422.308810][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 422.854255][T15558] netlink: 'syz.5.2558': attribute type 1 has an invalid length. [ 422.914532][T15556] netlink: 'syz.1.2556': attribute type 1 has an invalid length. [ 422.973810][T15560] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 423.151376][T15565] macvlan2: entered promiscuous mode [ 423.170080][T15565] macvlan2: entered allmulticast mode [ 423.196519][T15565] bond4: entered promiscuous mode [ 423.232428][T15565] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 423.252329][T15565] bond4: left promiscuous mode [ 425.210889][T15622] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2574'. [ 425.351064][T15235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 425.825350][T15651] netlink: 'syz.0.2585': attribute type 9 has an invalid length. [ 425.988953][T15235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.152280][T15666] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2587'. [ 426.347043][T15670] netlink: 'syz.5.2589': attribute type 1 has an invalid length. [ 426.381965][T15670] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2589'. [ 426.509332][T15672] bond7: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 426.546651][T15672] bond7 (unregistering): Released all slaves [ 426.693818][T15675] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2591'. [ 426.710862][T15675] netlink: 124 bytes leftover after parsing attributes in process `syz.1.2591'. [ 427.036904][T15683] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.104413][T15683] bridge0: port 2(bridge_slave_1) entered disabled state [ 427.724171][T15713] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2600'. [ 427.799284][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.833797][T15697] 8021q: adding VLAN 0 to HW filter on device bond1 [ 427.855708][T15697] mac80211_hwsim hwsim18 syzkaller0: left promiscuous mode [ 427.883997][T15697] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 427.908863][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.149075][T15235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.381592][T15732] syzkaller1: entered promiscuous mode [ 428.387291][T15732] syzkaller1: entered allmulticast mode [ 428.604899][T15734] syzkaller0: entered promiscuous mode [ 428.627800][T15734] syzkaller0: entered allmulticast mode [ 428.791661][T15742] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2608'. [ 428.856937][T15743] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2608'. [ 429.131553][T15752] syzkaller0: entered promiscuous mode [ 429.165793][T15752] syzkaller0: entered allmulticast mode [ 429.549543][T15774] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2614'. [ 430.079991][ T30] audit: type=1804 audit(1784720025.930:9): pid=15788 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2620" name="/newroot/546/cgroup.controllers" dev="tmpfs" ino=2808 res=1 errno=0 [ 430.166375][ T30] audit: type=1800 audit(1784720025.930:10): pid=15788 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2620" name="cgroup.controllers" dev="tmpfs" ino=2808 res=0 errno=0 [ 430.535711][T15794] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2623'. [ 430.652549][T15805] syzkaller0: entered promiscuous mode [ 430.658529][T15805] syzkaller0: entered allmulticast mode [ 431.003070][T15814] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2629'. [ 431.030624][T15816] netlink: 'syz.0.2630': attribute type 1 has an invalid length. [ 431.039186][T15816] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 431.046468][T15816] IPv6: NLM_F_CREATE should be set when creating new route [ 431.055297][T15816] IPv6: NLM_F_CREATE should be set when creating new route [ 431.126063][T15813] tipc: Failed to obtain node identity [ 431.153102][T15813] tipc: Enabling of bearer rejected, failed to enable media [ 431.361845][T15824] __nla_validate_parse: 3 callbacks suppressed [ 431.361868][T15824] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2633'. [ 431.425358][T15827] netlink: 'syz.1.2634': attribute type 1 has an invalid length. [ 431.450902][T15827] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2634'. [ 431.483782][T15827] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2634'. [ 431.749339][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 431.767717][T15834] mac80211_hwsim hwsim18 syzkaller0: entered promiscuous mode [ 431.825734][T15834] tipc: Enabling of bearer rejected, already enabled [ 431.866322][T15834] ipt_REJECT: TCP_RESET invalid for non-tcp [ 431.995894][T15840] syzkaller0: entered promiscuous mode [ 432.008091][T15840] syzkaller0: entered allmulticast mode [ 432.075162][T15837] netlink: 'syz.0.2638': attribute type 11 has an invalid length. [ 432.352522][T15848] batman_adv: batadv0: Adding interface: bridge7 [ 432.366132][T15848] batman_adv: batadv0: The MTU of interface bridge7 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 432.447433][T15848] batman_adv: batadv0: Not using interface bridge7 (retrying later): interface not active [ 432.547976][T15853] netlink: 164 bytes leftover after parsing attributes in process `syz.5.2643'. [ 432.770322][T15858] netlink: 'syz.1.2646': attribute type 21 has an invalid length. [ 432.802527][T15858] IPv6: NLM_F_CREATE should be specified when creating new route [ 432.827634][T15858] netlink: 'syz.1.2646': attribute type 1 has an invalid length. [ 432.879422][T15867] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2648'. [ 432.934053][T15867] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2648'. [ 433.021431][T15871] netlink: 'syz.0.2649': attribute type 1 has an invalid length. [ 433.064840][T15870] netlink: 'syz.0.2649': attribute type 1 has an invalid length. [ 433.152876][T15878] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 433.195028][T15874] bond10: option arp_all_targets: invalid value (18446744073709551613) [ 433.233943][T15874] bond10 (unregistering): Released all slaves [ 433.272045][T15871] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 433.273912][T15870] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 433.652015][T15895] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2653'. [ 433.994401][T15903] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 434.423829][T15923] xt_cluster: node mask cannot exceed total number of nodes [ 434.438000][T15922] netlink: 23 bytes leftover after parsing attributes in process `syz.2.2661'. [ 434.852159][T15937] mac80211_hwsim hwsim18 syzkaller0: left promiscuous mode [ 434.880364][T15937] mac80211_hwsim hwsim18 syzkaller0: left allmulticast mode [ 434.896325][T15935] syzkaller0: entered promiscuous mode [ 434.911348][T15935] syzkaller0: entered allmulticast mode [ 435.090730][ T30] audit: type=1107 audit(1784720030.950:11): pid=15941 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Á»àƒî̾{Aà©ÀV)s3.ï£]§ËòÖúî☒Ñö€' [ 435.090730][ T30] O¾Ü7¾ncV®vôúxàæ²>¦›îÛœ©ûÍë½ZÏÅFªA¥V‘Á' [ 435.262921][T15945] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2669'. [ 435.288772][T15945] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 435.567239][T15953] xt_HMARK: spi-set and port-set can't be combined [ 435.598672][T15235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 435.985992][T15960] ipt_ECN: cannot use operation on non-tcp rule [ 436.131736][T15967] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2677'. [ 436.377099][T15981] netlink: 'syz.1.2681': attribute type 2 has an invalid length. [ 436.632950][T15989] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2682'. [ 436.761577][T15993] xt_l2tp: wrong L2TP version: 0 [ 437.048978][T15999] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 437.061961][T16001] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2688'. [ 437.134874][T15999] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 437.182319][T16005] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2689'. [ 437.208874][T16005] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2689'. [ 437.904696][T16024] netlink: 'syz.1.2696': attribute type 11 has an invalid length. [ 437.918144][T16024] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2696'. [ 438.146276][T16034] veth1_macvtap: left promiscuous mode [ 438.166803][T16034] macsec0: entered promiscuous mode [ 438.186107][T16034] macsec0: entered allmulticast mode [ 438.251159][T16035] veth1_macvtap: entered promiscuous mode [ 438.281431][T16035] veth1_macvtap: entered allmulticast mode [ 438.302038][T16035] macsec0: left promiscuous mode [ 438.321446][T16035] macsec0: left allmulticast mode [ 438.332628][T16035] veth1_macvtap: left allmulticast mode [ 438.546146][T16046] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2702'. [ 438.827545][T16053] netlink: 'syz.1.2706': attribute type 8 has an invalid length. [ 439.054575][T16060] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2708'. [ 439.264122][T16064] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2710'. [ 439.290544][T16064] netlink: 'syz.1.2710': attribute type 3 has an invalid length. [ 439.502989][T16070] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2711'. [ 439.520462][T16070] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2711'. [ 439.521334][ T5625] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 439.558828][ T5625] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 439.568174][ T5625] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 439.580324][ T5625] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 439.593762][ T5625] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 440.565670][T16117] digital: digital_start_poll: Unknown protocol [ 441.176170][T16134] sctp: [Deprecated]: syz.5.2727 (pid 16134) Use of int in max_burst socket option deprecated. [ 441.176170][T16134] Use struct sctp_assoc_value instead [ 441.350726][T10552] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 441.370208][T16138] 8021q: adding VLAN 0 to HW filter on device bond7 [ 441.650759][T16152] netlink: 'syz.0.2731': attribute type 1 has an invalid length. [ 441.661810][T16152] netlink: 'syz.0.2731': attribute type 1 has an invalid length. [ 441.669705][ T5625] Bluetooth: hci6: command tx timeout [ 441.730459][T16152] bond6: (slave geneve3): making interface the new active one [ 441.739865][T16152] bond6: (slave geneve3): Enslaving as an active interface with an up link [ 441.758905][T16152] __nla_validate_parse: 4 callbacks suppressed [ 441.758924][T16152] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2731'. [ 441.776299][T12080] netdevsim netdevsim0 netdevsim0: set [1, 2] type 2 family 0 port 20000 - 0 [ 441.812360][T16152] 8021q: adding VLAN 0 to HW filter on device bond6 [ 441.820966][T12080] netdevsim netdevsim0 netdevsim1: set [1, 2] type 2 family 0 port 20000 - 0 [ 441.859466][T12080] netdevsim netdevsim0 netdevsim2: set [1, 2] type 2 family 0 port 20000 - 0 [ 441.880027][T12080] netdevsim netdevsim0 netdevsim3: set [1, 2] type 2 family 0 port 20000 - 0 [ 442.035696][T16157] block nbd0: NBD_DISCONNECT [ 442.057214][T16157] block nbd0: Send disconnect failed -32 [ 442.085688][T16157] block nbd0: shutting down sockets [ 442.116186][T16160] openvswitch: netlink: IP tunnel dst address not specified [ 442.193013][T16161] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2733'. [ 442.224728][T16161] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2733'. [ 442.453165][T16175] sctp: [Deprecated]: syz.5.2736 (pid 16175) Use of int in max_burst socket option. [ 442.453165][T16175] Use struct sctp_assoc_value instead [ 442.491579][T16176] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2733'. [ 442.843863][T16186] sctp: [Deprecated]: syz.0.2738 (pid 16186) Use of struct sctp_assoc_value in delayed_ack socket option. [ 442.843863][T16186] Use struct sctp_sack_info instead [ 442.861451][T16188] sctp: [Deprecated]: syz.0.2738 (pid 16188) Use of struct sctp_assoc_value in delayed_ack socket option. [ 442.861451][T16188] Use struct sctp_sack_info instead [ 442.892093][T16186] netlink: 'syz.0.2738': attribute type 36 has an invalid length. [ 442.932981][T16188] netlink: 'syz.0.2738': attribute type 36 has an invalid length. [ 443.116910][T16074] lo speed is unknown, defaulting to 1000 [ 443.152738][T16074] xfrm0 speed is unknown, defaulting to 1000 [ 443.670091][T16205] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2745'. [ 443.750769][ T5625] Bluetooth: hci6: command tx timeout [ 444.104500][T16216] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 444.282214][T16074] bridge0: port 1(bridge_slave_0) entered blocking state [ 444.291380][T16074] bridge0: port 1(bridge_slave_0) entered disabled state [ 444.311327][T16074] bridge_slave_0: entered allmulticast mode [ 444.332384][T16074] bridge_slave_0: entered promiscuous mode [ 444.366645][T16074] bridge0: port 2(bridge_slave_1) entered blocking state [ 444.387861][T16074] bridge0: port 2(bridge_slave_1) entered disabled state [ 444.426002][T16074] bridge_slave_1: entered allmulticast mode [ 444.454049][T16074] bridge_slave_1: entered promiscuous mode [ 444.611253][T16074] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 444.674464][T16074] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 444.805599][T16074] team0: Port device team_slave_0 added [ 444.840792][T16074] team0: Port device team_slave_1 added [ 444.957845][T16074] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 444.965951][T16074] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 444.997049][T16074] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 445.062242][T16074] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 445.071988][T16074] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 445.104598][T16074] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 445.163886][T16240] netlink: 'syz.0.2755': attribute type 64 has an invalid length. [ 445.191473][ T5747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.265353][T16074] hsr_slave_0: entered promiscuous mode [ 445.275471][T16074] hsr_slave_1: entered promiscuous mode [ 445.282840][T16074] debugfs: 'hsr0' already exists in 'hsr' [ 445.289119][T16074] Cannot create hsr debugfs directory [ 445.337831][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88807844fc00: rx timeout, send abort [ 445.355558][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff88807844fc00: 0x0f001: (3) A timeout occurred and this is the connection abort to close the session. [ 445.372291][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88807e7cf000: rx timeout, send abort [ 445.383998][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff88807e7cf000: 0x0f002: (3) A timeout occurred and this is the connection abort to close the session. [ 445.813473][T16250] netlink: 'syz.5.2757': attribute type 1 has an invalid length. [ 445.828845][ T5625] Bluetooth: hci6: command tx timeout [ 445.896211][T16250] bond5: entered promiscuous mode [ 445.902080][T16250] 8021q: adding VLAN 0 to HW filter on device bond5 [ 446.008325][T16074] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 446.056257][T16074] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 446.067128][T16074] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 446.115829][T16074] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 446.125251][T16074] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 446.167546][T16074] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 446.183138][T16074] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 446.200901][T16074] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 446.783564][T16074] 8021q: adding VLAN 0 to HW filter on device bond0 [ 446.941132][T16074] 8021q: adding VLAN 0 to HW filter on device team0 [ 447.014886][T10552] bridge0: port 1(bridge_slave_0) entered blocking state [ 447.022230][T10552] bridge0: port 1(bridge_slave_0) entered forwarding state [ 447.052450][T10552] bridge0: port 2(bridge_slave_1) entered blocking state [ 447.060532][T10552] bridge0: port 2(bridge_slave_1) entered forwarding state [ 447.383229][T16292] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2768'. [ 447.501259][T16296] vlan2: entered promiscuous mode [ 447.506759][T16296] bridge0: entered promiscuous mode [ 447.847998][T16306] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.858979][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.909577][ T5625] Bluetooth: hci6: command tx timeout [ 448.652160][T16074] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 449.256506][T16074] veth0_vlan: entered promiscuous mode [ 449.320066][T16074] veth1_vlan: entered promiscuous mode [ 449.425308][T16344] netlink: 'syz.5.2781': attribute type 1 has an invalid length. [ 449.454281][T16074] veth0_macvtap: entered promiscuous mode [ 449.486047][T16074] veth1_macvtap: entered promiscuous mode [ 449.542485][T16074] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 449.565503][T16074] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 449.606475][T10550] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.631782][T10550] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.659598][T10550] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.684813][T10550] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.032860][T16353] bond7: entered promiscuous mode [ 450.045528][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 450.082001][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 450.086589][T16355] macvlan5: entered promiscuous mode [ 450.096094][T16355] macvlan5: entered allmulticast mode [ 450.103198][T16357] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2785'. [ 450.104427][T16355] bond7: (slave macvlan5): Opening slave failed [ 450.158663][T16353] x_tables: duplicate underflow at hook 2 [ 450.242362][T16353] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 450.265775][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 450.274408][T16353] netlink: 'syz.0.2784': attribute type 21 has an invalid length. [ 450.285714][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 450.289684][T16353] IPv6: NLM_F_CREATE should be specified when creating new route [ 450.307440][T16353] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2784'. [ 450.317109][T16361] pim6reg: entered allmulticast mode [ 450.399596][T16361] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2786'. [ 450.949022][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 450.983436][T16378] syzkaller1: entered promiscuous mode [ 450.989170][T16378] syzkaller1: entered allmulticast mode [ 451.015103][T16378] openvswitch: netlink: Tunnel attr 3 has unexpected len 8 expected 1 [ 451.424703][T16387] smbdirect: ib_dev[syz2] removed [ 451.746549][T16400] rdma_rxe: rxe_newlink: failed to add team0 [ 451.777134][T16402] rdma_rxe: rxe_newlink: failed to add team0 [ 452.072355][T16413] netlink: 'syz.5.2801': attribute type 12 has an invalid length. [ 452.223074][T16413] bond6: option primary_reselect: invalid value (255) [ 452.257529][T16413] bond6 (unregistering): Released all slaves [ 452.369407][T16421] netlink: 'syz.0.2805': attribute type 1 has an invalid length. [ 452.378940][T16421] netlink: 'syz.0.2805': attribute type 1 has an invalid length. [ 452.597091][T16429] xt_TCPMSS: Only works on TCP SYN packets [ 452.722219][T16425] syzkaller0: entered promiscuous mode [ 452.751053][T16425] syzkaller0: entered allmulticast mode [ 454.796529][ T5747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.363511][T16449] tipc: Enabling of bearer rejected, already enabled [ 456.376784][T16450] mac80211_hwsim hwsim18 syzkaller0: entered promiscuous mode [ 456.386884][T16450] mac80211_hwsim hwsim18 syzkaller0: entered allmulticast mode [ 456.426098][T16449] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2812'. [ 456.454121][T16449] tipc: Resetting bearer [ 456.828018][T16459] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2817'. [ 456.912168][ T50] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 456.924679][ T50] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 456.936846][ T50] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 456.945124][ T50] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 456.954726][ T50] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 457.472251][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88805997f400: rx timeout, send abort [ 457.481375][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88805997f400: 0x0f001: (3) A timeout occurred and this is the connection abort to close the session. [ 457.496076][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888057019800: rx timeout, send abort [ 457.504963][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff888057019800: 0x0f002: (3) A timeout occurred and this is the connection abort to close the session. [ 457.988983][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 458.020945][T16463] lo speed is unknown, defaulting to 1000 [ 458.064137][T16484] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2821'. [ 458.342487][T16493] FAULT_INJECTION: forcing a failure. [ 458.342487][T16493] name failslab, interval 1, probability 0, space 0, times 0 [ 458.377468][T16493] CPU: 1 UID: 0 PID: 16493 Comm: syz.0.2823 Not tainted syzkaller #0 PREEMPT(full) [ 458.377499][T16493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 458.377512][T16493] Call Trace: [ 458.377521][T16493] [ 458.377530][T16493] dump_stack_lvl+0xe8/0x150 [ 458.377574][T16493] should_fail_ex+0x40c/0x560 [ 458.377612][T16493] should_failslab+0xa8/0x100 [ 458.377646][T16493] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 458.377670][T16493] ? local_lock_release+0x9c/0x160 [ 458.377801][T16493] ? __alloc_skb+0x1d7/0x7a0 [ 458.377826][T16493] ? __alloc_skb+0x1d7/0x7a0 [ 458.377859][T16493] __alloc_skb+0x1d7/0x7a0 [ 458.377892][T16493] _sctp_make_chunk+0x59/0x290 [ 458.377977][T16493] sctp_make_heartbeat+0xc4/0x4b0 [ 458.378012][T16493] ? __pfx_sctp_make_heartbeat+0x10/0x10 [ 458.378043][T16493] ? is_bpf_text_address+0x26/0x2b0 [ 458.378078][T16493] ? is_bpf_text_address+0x292/0x2b0 [ 458.378104][T16493] ? is_bpf_text_address+0x26/0x2b0 [ 458.378135][T16493] sctp_sf_do_prm_requestheartbeat+0x2e/0x280 [ 458.378187][T16493] sctp_do_sm+0x239/0x5d50 [ 458.378209][T16493] ? arch_stack_walk+0xfb/0x150 [ 458.378246][T16493] ? __pfx_sctp_pname+0x10/0x10 [ 458.378311][T16493] ? __pfx_sctp_do_sm+0x10/0x10 [ 458.378333][T16493] ? __lock_acquire+0x683/0x2cf0 [ 458.378406][T16493] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 458.378428][T16493] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 458.378446][T16493] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 458.378468][T16493] ? sctp_v6_addr_to_user+0x217/0x420 [ 458.378521][T16493] sctp_primitive_REQUESTHEARTBEAT+0x98/0xc0 [ 458.378549][T16493] sctp_apply_peer_addr_params+0xd4/0x1880 [ 458.378610][T16493] sctp_setsockopt_peer_addr_params+0x622/0x980 [ 458.378644][T16493] sctp_setsockopt+0x759/0x12c0 [ 458.378663][T16493] ? sock_common_setsockopt+0x36/0xc0 [ 458.378687][T16493] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 458.378716][T16493] do_sock_setsockopt+0x17c/0x1b0 [ 458.378797][T16493] __x64_sys_setsockopt+0x13d/0x1b0 [ 458.378830][T16493] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.378854][T16493] do_syscall_64+0x174/0x580 [ 458.378877][T16493] ? trace_irq_disable+0x3b/0x140 [ 458.378903][T16493] ? clear_bhb_loop+0x40/0x90 [ 458.378929][T16493] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.378950][T16493] RIP: 0033:0x7f2f9ad9de99 [ 458.378971][T16493] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 458.378988][T16493] RSP: 002b:00007f2f9bc69028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 458.379011][T16493] RAX: ffffffffffffffda RBX: 00007f2f9b026090 RCX: 00007f2f9ad9de99 [ 458.379026][T16493] RDX: 0000000000000009 RSI: 0000000000000084 RDI: 0000000000000003 [ 458.379038][T16493] RBP: 00007f2f9bc69090 R08: 000000000000009c R09: 0000000000000000 [ 458.379051][T16493] R10: 0000200000000a00 R11: 0000000000000246 R12: 0000000000000001 [ 458.379064][T16493] R13: 00007f2f9b026128 R14: 00007f2f9b026090 R15: 00007ffcb1278e98 [ 458.379097][T16493] [ 458.806488][T16497] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2825'. [ 459.014071][T16502] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2827'. [ 459.029431][ T50] Bluetooth: hci7: command tx timeout [ 459.187921][T16499] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2827'. [ 459.305945][T16463] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.319701][T16463] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.328076][T16463] bridge_slave_0: entered allmulticast mode [ 459.337257][T16463] bridge_slave_0: entered promiscuous mode [ 459.347842][T16463] bridge0: port 2(bridge_slave_1) entered blocking state [ 459.356996][T16463] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.366274][T16463] bridge_slave_1: entered allmulticast mode [ 459.418206][T16463] bridge_slave_1: entered promiscuous mode [ 459.731311][T16463] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 459.765391][T16463] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 459.876681][T16463] team0: Port device team_slave_0 added [ 459.891091][T16463] team0: Port device team_slave_1 added [ 460.043826][T16531] xt_NFQUEUE: number of total queues is 0 [ 460.051043][T16531] netlink: 232 bytes leftover after parsing attributes in process `syz.0.2835'. [ 460.091706][T16463] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 460.101774][T16463] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 460.157285][T16463] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 460.179904][T16463] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 460.186997][T16463] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 460.216703][T16463] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 460.292842][T16463] hsr_slave_0: entered promiscuous mode [ 460.304630][T16463] hsr_slave_1: entered promiscuous mode [ 460.331949][T16463] debugfs: 'hsr0' already exists in 'hsr' [ 460.352450][T16463] Cannot create hsr debugfs directory [ 461.027626][T16555] netlink: 'syz.6.2841': attribute type 4 has an invalid length. [ 461.121786][ T50] Bluetooth: hci7: command tx timeout [ 461.316224][T16559] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2842'. [ 461.339300][T16559] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2842'. [ 461.402556][T16561] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.2843'. [ 461.550194][T16567] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2844'. [ 461.586861][T16567] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2844'. [ 461.779064][T16570] syzkaller1: entered promiscuous mode [ 461.786080][T16570] syzkaller1: entered allmulticast mode [ 461.976701][T16576] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2846'. [ 462.006548][T16575] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2847'. [ 462.016967][T16576] netlink: 13 bytes leftover after parsing attributes in process `syz.0.2846'. [ 462.091332][T16576] veth9: entered promiscuous mode [ 462.193553][T16463] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 462.219518][T16463] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 462.247967][T16463] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 462.314960][T16463] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 462.346789][T16463] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 462.414303][T16463] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 462.490952][T16584] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2850'. [ 462.504492][T16584] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2850'. [ 462.506204][T16463] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 462.516816][T16584] netlink: 'syz.0.2850': attribute type 15 has an invalid length. [ 462.561689][ T5625] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 462.576410][ T5625] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 462.588158][ T5625] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 462.589288][T16589] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2851'. [ 462.596409][ T5625] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 462.615381][ T5625] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 462.655648][T16463] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 462.855882][T10550] netdevsim netdevsim0 netdevsim0: set [0, 1] type 1 family 0 port 256 - 0 [ 462.939530][T10550] netdevsim netdevsim0 netdevsim1: set [0, 1] type 1 family 0 port 256 - 0 [ 462.975841][T10550] netdevsim netdevsim0 netdevsim2: set [0, 1] type 1 family 0 port 256 - 0 [ 463.042475][T10550] netdevsim netdevsim0 netdevsim3: set [0, 1] type 1 family 0 port 256 - 0 [ 463.188806][ T5625] Bluetooth: hci7: command tx timeout [ 463.337669][T16608] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2852'. [ 463.473607][T16463] 8021q: adding VLAN 0 to HW filter on device bond0 [ 463.591812][T16463] 8021q: adding VLAN 0 to HW filter on device team0 [ 463.657593][T10550] bridge0: port 1(bridge_slave_0) entered blocking state [ 463.664874][T10550] bridge0: port 1(bridge_slave_0) entered forwarding state [ 463.712554][T10550] bridge0: port 2(bridge_slave_1) entered blocking state [ 463.719826][T10550] bridge0: port 2(bridge_slave_1) entered forwarding state [ 464.389845][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 464.492077][T16637] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 464.565234][T16638] IPVS: persistence engine module ip_vs_pe_À not found [ 464.705284][T16586] lo speed is unknown, defaulting to 1000 [ 464.719399][ T5625] Bluetooth: hci8: command tx timeout [ 465.150603][T16654] veth1_macvtap: left promiscuous mode [ 465.270581][ T5625] Bluetooth: hci7: command tx timeout [ 466.250177][T16686] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 466.254741][T16586] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.289658][T16586] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.297450][T16586] bridge_slave_0: entered allmulticast mode [ 466.311624][T16586] bridge_slave_0: entered promiscuous mode [ 466.323008][T16586] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.337207][T16586] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.345389][T16586] bridge_slave_1: entered allmulticast mode [ 466.354068][T16586] bridge_slave_1: entered promiscuous mode [ 466.390448][T16463] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 466.445949][T16586] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 466.512883][T16586] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 466.737888][T16586] team0: Port device team_slave_0 added [ 466.760873][T16586] team0: Port device team_slave_1 added [ 466.789217][ T5625] Bluetooth: hci8: command tx timeout [ 466.911610][T16586] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 466.926347][T16586] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 467.001964][T16586] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 467.053245][T16586] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 467.074879][T16586] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 467.106030][T16586] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 467.687101][T16586] hsr_slave_0: entered promiscuous mode [ 467.695685][T16586] hsr_slave_1: entered promiscuous mode [ 467.746674][T16586] debugfs: 'hsr0' already exists in 'hsr' [ 467.775540][T16586] Cannot create hsr debugfs directory [ 467.958981][T16732] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2879'. [ 468.399226][T16742] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2881'. [ 468.534648][T16750] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2884'. [ 468.545280][T16750] nbd: illegal input index 65508 [ 468.869934][ T5625] Bluetooth: hci8: command tx timeout [ 469.143332][T16463] veth0_vlan: entered promiscuous mode [ 469.227597][T16463] veth1_vlan: entered promiscuous mode [ 469.641329][T16463] veth0_macvtap: entered promiscuous mode [ 469.710040][T16586] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 469.722568][T16586] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 469.735218][T16463] veth1_macvtap: entered promiscuous mode [ 469.744701][T16586] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 469.818135][T16586] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 469.855788][T16586] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 469.882435][T16586] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 469.950545][T16586] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 470.002087][T16586] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 470.052929][T16788] syzkaller0: entered promiscuous mode [ 470.060589][T16788] syzkaller0: entered allmulticast mode [ 470.140176][T16463] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 470.392604][T16463] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 470.517481][ T1174] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.546824][ T1174] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.614508][T12073] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.636632][T12073] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.898865][T16820] netlink: 216 bytes leftover after parsing attributes in process `syz.5.2898'. [ 470.950650][ T5625] Bluetooth: hci8: command tx timeout [ 471.246504][T16828] netlink: 244 bytes leftover after parsing attributes in process `syz.6.2900'. [ 471.271229][ T1174] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 471.271400][T16830] netlink: 180 bytes leftover after parsing attributes in process `syz.5.2901'. [ 471.306932][ T1174] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 471.315453][T16586] 8021q: adding VLAN 0 to HW filter on device bond0 [ 471.544508][T16835] Cannot find add_set index 65532 as target [ 471.674819][T12073] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 471.702425][T16586] 8021q: adding VLAN 0 to HW filter on device team0 [ 471.728689][T12073] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 471.858116][T12073] bridge0: port 1(bridge_slave_0) entered blocking state [ 471.865352][T12073] bridge0: port 1(bridge_slave_0) entered forwarding state [ 471.925863][T16843] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2903'. [ 471.979374][T16848] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2903'. [ 472.011857][T12075] bridge0: port 2(bridge_slave_1) entered blocking state [ 472.019252][T12075] bridge0: port 2(bridge_slave_1) entered forwarding state [ 472.051531][T16843] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2903'. [ 472.077696][T16848] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2903'. [ 472.247926][T16848] netlink: 'syz.5.2903': attribute type 1 has an invalid length. [ 472.343198][T16851] syzkaller0: entered promiscuous mode [ 472.373500][T16851] syzkaller0: entered allmulticast mode [ 473.349942][T12075] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 473.996186][ T5357] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.914268][ C1] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 476.015267][T16881] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2912'. [ 476.041432][T16880] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2913'. [ 476.195749][T16880] blkio.reset_stats is deprecated [ 476.235268][T16880] sctp: [Deprecated]: syz.7.2913 (pid 16880) Use of int in max_burst socket option deprecated. [ 476.235268][T16880] Use struct sctp_assoc_value instead [ 476.382273][T16881] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2912'. [ 476.382579][T16885] pimreg: entered allmulticast mode [ 477.570228][T16921] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2920'. [ 477.742518][T16926] netlink: 'syz.0.2922': attribute type 1 has an invalid length. [ 477.773026][T16926] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2922'. [ 477.796141][T16926] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2922'. [ 477.858927][T16929] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2923'. [ 477.874854][T16929] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2923'. [ 478.000060][T16926] 8021q: adding VLAN 0 to HW filter on device bond8 [ 478.031824][T16586] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 478.475401][T16947] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2927'. [ 479.533807][T16968] netlink: 'syz.7.2930': attribute type 3 has an invalid length. [ 479.563797][T16968] netlink: 666 bytes leftover after parsing attributes in process `syz.7.2930'. [ 479.584959][T16958] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 479.742256][T16973] netlink: 'syz.5.2931': attribute type 1 has an invalid length. [ 479.795727][T16586] veth0_vlan: entered promiscuous mode [ 479.854780][T16586] veth1_vlan: entered promiscuous mode [ 479.981529][T16586] veth0_macvtap: entered promiscuous mode [ 480.045701][T16586] veth1_macvtap: entered promiscuous mode [ 480.132118][T16586] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 480.167343][T16586] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 480.257171][T10550] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.297307][T10550] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.325401][T10550] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.381649][T10550] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.472434][T16984] syzkaller0: entered promiscuous mode [ 480.507190][T16984] syzkaller0: entered allmulticast mode [ 480.788700][ T5625] Bluetooth: hci0: command 0x0406 tx timeout [ 480.809055][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 480.872412][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 481.036612][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 481.069049][T16823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 481.183238][T17001] netlink: 'syz.6.2942': attribute type 3 has an invalid length. [ 481.221058][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 481.248626][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 481.441855][T17005] __nla_validate_parse: 3 callbacks suppressed [ 481.441876][T17005] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2944'. [ 481.506990][T17007] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2943'. [ 481.608260][T17007] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2943'. [ 481.648919][T17007] netlink: 'syz.0.2943': attribute type 11 has an invalid length. [ 481.661150][T17007] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2943'. [ 481.714884][T17005] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2944'. [ 481.717083][T17007] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2943'. [ 481.734505][T17005] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2944'. [ 481.749387][T17007] netlink: 'syz.0.2943': attribute type 11 has an invalid length. [ 481.795325][T17007] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2943'. [ 482.052511][T17020] syzkaller0: entered promiscuous mode [ 482.067626][T17020] syzkaller0: entered allmulticast mode [ 482.236518][ T30] audit: type=1804 audit(1784720078.090:12): pid=17020 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.8.2947" name="/newroot/1/cgroup.controllers" dev="tmpfs" ino=23 res=1 errno=0 [ 482.347084][ T30] audit: type=1800 audit(1784720078.090:13): pid=17020 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2947" name="cgroup.controllers" dev="tmpfs" ino=23 res=0 errno=0 [ 482.797229][ T50] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 482.810461][ T50] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 482.823853][ T50] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 482.834653][ T50] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 482.846234][ T50] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 483.033506][T17045] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2954'. [ 483.200986][T17050] netlink: 164 bytes leftover after parsing attributes in process `syz.6.2957'. [ 483.504720][T17057] netlink: 'syz.8.2959': attribute type 1 has an invalid length. [ 483.914203][T17066] syzkaller0: entered promiscuous mode [ 483.945600][T17066] syzkaller0: entered allmulticast mode [ 484.072609][T17073] xt_connbytes: Forcing CT accounting to be enabled [ 484.950190][ T5625] Bluetooth: hci9: command tx timeout [ 485.407551][T17113] FAULT_INJECTION: forcing a failure. [ 485.407551][T17113] name failslab, interval 1, probability 0, space 0, times 0 [ 485.444684][T17113] CPU: 1 UID: 0 PID: 17113 Comm: syz.6.2973 Not tainted syzkaller #0 PREEMPT(full) [ 485.444715][T17113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 485.444725][T17113] Call Trace: [ 485.444734][T17113] [ 485.444742][T17113] dump_stack_lvl+0xe8/0x150 [ 485.444778][T17113] should_fail_ex+0x40c/0x560 [ 485.444806][T17113] should_failslab+0xa8/0x100 [ 485.444838][T17113] __kmalloc_cache_noprof+0xa8/0x660 [ 485.444864][T17113] ? sctp_auth_asoc_copy_shkeys+0x14e/0x5a0 [ 485.444891][T17113] ? sctp_auth_asoc_copy_shkeys+0x14e/0x5a0 [ 485.444925][T17113] sctp_auth_asoc_copy_shkeys+0x14e/0x5a0 [ 485.444951][T17113] ? sctp_stream_interleave_init+0x55/0x90 [ 485.444991][T17113] sctp_association_new+0x15be/0x25d0 [ 485.445024][T17113] sctp_connect_new_asoc+0x2e4/0x6b0 [ 485.445050][T17113] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 485.445072][T17113] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 485.445093][T17113] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 485.445112][T17113] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 485.445132][T17113] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 485.445191][T17113] ? security_sctp_bind_connect+0x7e/0x2c0 [ 485.445264][T17113] sctp_sendmsg+0x159b/0x2d00 [ 485.445309][T17113] ? __pfx_sctp_sendmsg+0x10/0x10 [ 485.445336][T17113] ? aa_sk_perm+0x6d5/0x900 [ 485.445394][T17113] ? __might_fault+0xaf/0x130 [ 485.445420][T17113] ? sock_rps_record_flow+0x19/0x350 [ 485.445527][T17113] ? inet_sendmsg+0x298/0x320 [ 485.445556][T17113] ? __pfx_inet_sendmsg+0x10/0x10 [ 485.445582][T17113] sock_sendmsg_nosec+0x10e/0x180 [ 485.445610][T17113] __sys_sendto+0x408/0x5a0 [ 485.445638][T17113] ? ksys_write+0x1e6/0x270 [ 485.445674][T17113] ? __pfx___sys_sendto+0x10/0x10 [ 485.445700][T17113] ? __mutex_unlock_slowpath+0x731/0x900 [ 485.445773][T17113] ? __pfx_ksys_write+0x10/0x10 [ 485.445809][T17113] __x64_sys_sendto+0xde/0x100 [ 485.445845][T17113] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.445868][T17113] do_syscall_64+0x174/0x580 [ 485.445888][T17113] ? clear_bhb_loop+0x40/0x90 [ 485.445913][T17113] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.445933][T17113] RIP: 0033:0x7fd37939de99 [ 485.445952][T17113] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 485.445977][T17113] RSP: 002b:00007fd3775f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 485.445999][T17113] RAX: ffffffffffffffda RBX: 00007fd379625fa0 RCX: 00007fd37939de99 [ 485.446013][T17113] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 0000000000000003 [ 485.446025][T17113] RBP: 00007fd3775f6090 R08: 000020000005ffe4 R09: 000000000000001c [ 485.446037][T17113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 485.446049][T17113] R13: 00007fd379626038 R14: 00007fd379625fa0 R15: 00007ffcfeb429e8 [ 485.446081][T17113] [ 485.866191][T17116] IPv6: sit1: Disabled Multicast RS [ 485.873010][T17116] sit1: entered allmulticast mode [ 485.964512][T17117] bond0: invalid NS target ff00:: specified for addition [ 485.971878][T17117] bond0: option ns_ip6_target: invalid value (18446744073709551615) [ 485.992232][T17124] bond0: invalid NS target ff00:: specified for addition [ 486.001548][T17124] bond0: option ns_ip6_target: invalid value (18446744073709551615) [ 486.232614][ T5625] Bluetooth: hci5: link tx timeout [ 486.240976][ T5625] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 486.767798][T17152] __nla_validate_parse: 8 callbacks suppressed [ 486.767818][T17152] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2982'. [ 486.840655][T17156] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2984'. [ 486.896825][T17156] netlink: 'syz.8.2984': attribute type 1 has an invalid length. [ 486.930627][T17156] netlink: 'syz.8.2984': attribute type 1 has an invalid length. [ 487.028881][ T5625] Bluetooth: hci9: command tx timeout [ 487.060669][T17162] IPVS: length: 239 != 24 [ 487.620287][T17037] lo speed is unknown, defaulting to 1000 [ 488.313584][ T5625] Bluetooth: hci5: command 0x0406 tx timeout [ 488.532654][T17188] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2995'. [ 488.546377][T17192] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2997'. [ 488.815467][T17201] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2998'. [ 489.108766][ T50] Bluetooth: hci9: command tx timeout [ 489.279727][T17209] pim6reg1: entered promiscuous mode [ 489.290541][T17209] pim6reg1: entered allmulticast mode [ 489.350907][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 489.930252][T17230] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3005'. [ 489.962731][T17235] sctp: [Deprecated]: syz.6.3003 (pid 17235) Use of int in max_burst socket option. [ 489.962731][T17235] Use struct sctp_assoc_value instead [ 489.963909][T17234] FAULT_INJECTION: forcing a failure. [ 489.963909][T17234] name failslab, interval 1, probability 0, space 0, times 0 [ 490.064240][T17037] bridge0: port 1(bridge_slave_0) entered blocking state [ 490.088193][T17234] CPU: 1 UID: 0 PID: 17234 Comm: syz.7.3006 Not tainted syzkaller #0 PREEMPT(full) [ 490.088220][T17234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 490.088232][T17234] Call Trace: [ 490.088239][T17234] [ 490.088247][T17234] dump_stack_lvl+0xe8/0x150 [ 490.088288][T17234] should_fail_ex+0x40c/0x560 [ 490.088317][T17234] should_failslab+0xa8/0x100 [ 490.088347][T17234] __kmalloc_cache_noprof+0xa8/0x660 [ 490.088371][T17234] ? __kmalloc_cache_noprof+0x32d/0x660 [ 490.088395][T17234] ? sctp_transport_new+0x7e/0x620 [ 490.088417][T17234] ? sctp_transport_new+0x7e/0x620 [ 490.088446][T17234] sctp_transport_new+0x7e/0x620 [ 490.088481][T17234] sctp_assoc_add_peer+0x257/0x1380 [ 490.088504][T17234] ? sctp_bind_addr_copy+0x380/0x3c0 [ 490.088596][T17234] sctp_connect_new_asoc+0x329/0x6b0 [ 490.088621][T17234] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 490.088643][T17234] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 490.088663][T17234] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 490.088680][T17234] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 490.088701][T17234] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 490.088724][T17234] ? security_sctp_bind_connect+0x7e/0x2c0 [ 490.088755][T17234] sctp_sendmsg+0x159b/0x2d00 [ 490.088792][T17234] ? __pfx_sctp_sendmsg+0x10/0x10 [ 490.088818][T17234] ? aa_sk_perm+0x6d5/0x900 [ 490.088853][T17234] ? __might_fault+0xaf/0x130 [ 490.088878][T17234] ? sock_rps_record_flow+0x19/0x350 [ 490.088908][T17234] ? inet_sendmsg+0x298/0x320 [ 490.088937][T17234] ? __pfx_inet_sendmsg+0x10/0x10 [ 490.088961][T17234] sock_sendmsg_nosec+0x10e/0x180 [ 490.088989][T17234] __sys_sendto+0x408/0x5a0 [ 490.089016][T17234] ? ksys_write+0x1e6/0x270 [ 490.089048][T17234] ? __pfx___sys_sendto+0x10/0x10 [ 490.089073][T17234] ? __mutex_unlock_slowpath+0x731/0x900 [ 490.089123][T17234] ? __pfx_ksys_write+0x10/0x10 [ 490.089158][T17234] __x64_sys_sendto+0xde/0x100 [ 490.089186][T17234] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.089208][T17234] do_syscall_64+0x174/0x580 [ 490.089227][T17234] ? trace_irq_disable+0x3b/0x140 [ 490.089251][T17234] ? clear_bhb_loop+0x40/0x90 [ 490.089275][T17234] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.089295][T17234] RIP: 0033:0x7f148919de99 [ 490.089314][T17234] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 490.089330][T17234] RSP: 002b:00007f1489fcb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 490.089352][T17234] RAX: ffffffffffffffda RBX: 00007f1489425fa0 RCX: 00007f148919de99 [ 490.089366][T17234] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 0000000000000003 [ 490.089378][T17234] RBP: 00007f1489fcb090 R08: 000020000005ffe4 R09: 000000000000001c [ 490.089392][T17234] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 490.089403][T17234] R13: 00007f1489426038 R14: 00007f1489425fa0 R15: 00007ffc49d5ef98 [ 490.089436][T17234] [ 490.414560][T17037] bridge0: port 1(bridge_slave_0) entered disabled state [ 490.421953][T17037] bridge_slave_0: entered allmulticast mode [ 490.430519][T17037] bridge_slave_0: entered promiscuous mode [ 490.441313][T17037] bridge0: port 2(bridge_slave_1) entered blocking state [ 490.448548][T17037] bridge0: port 2(bridge_slave_1) entered disabled state [ 490.455852][T17037] bridge_slave_1: entered allmulticast mode [ 490.520790][T17037] bridge_slave_1: entered promiscuous mode [ 490.531083][T17239] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 490.564896][T17037] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 490.578111][T17037] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 490.621182][T17037] team0: Port device team_slave_0 added [ 490.632752][T17037] team0: Port device team_slave_1 added [ 490.671535][T17037] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 490.678575][T17037] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 490.704664][T17037] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 490.721013][T17037] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 490.731377][T17037] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 490.816414][T17037] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 490.843727][T16823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.064833][T17245] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3008'. [ 491.188500][ T50] Bluetooth: hci9: command tx timeout [ 491.234080][T17037] hsr_slave_0: entered promiscuous mode [ 491.255767][T17037] hsr_slave_1: entered promiscuous mode [ 491.276647][T17037] debugfs: 'hsr0' already exists in 'hsr' [ 491.292439][T17037] Cannot create hsr debugfs directory [ 491.548168][T17254] veth0: entered promiscuous mode [ 491.922544][T17265] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3011'. [ 492.001953][T17254] bond1: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 492.052215][T17265] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3011'. [ 492.082551][T17254] bond1 (unregistering): Released all slaves [ 492.246061][T17265] bond6: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 492.324646][T17265] bond6 (unregistering): Released all slaves [ 492.625272][T17253] veth0: left promiscuous mode [ 492.925318][T17292] FAULT_INJECTION: forcing a failure. [ 492.925318][T17292] name failslab, interval 1, probability 0, space 0, times 0 [ 492.946082][T17292] CPU: 1 UID: 0 PID: 17292 Comm: syz.5.3018 Not tainted syzkaller #0 PREEMPT(full) [ 492.946110][T17292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 492.946123][T17292] Call Trace: [ 492.946131][T17292] [ 492.946139][T17292] dump_stack_lvl+0xe8/0x150 [ 492.946176][T17292] should_fail_ex+0x40c/0x560 [ 492.946205][T17292] should_failslab+0xa8/0x100 [ 492.946236][T17292] __kmalloc_cache_noprof+0xa8/0x660 [ 492.946260][T17292] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 492.946288][T17292] ? sctp_add_bind_addr+0x8c/0x370 [ 492.946312][T17292] ? sctp_add_bind_addr+0x8c/0x370 [ 492.946345][T17292] sctp_add_bind_addr+0x8c/0x370 [ 492.946377][T17292] sctp_copy_local_addr_list+0x31a/0x4e0 [ 492.946406][T17292] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 492.946444][T17292] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 492.946473][T17292] ? sctp_v6_is_any+0x64/0x80 [ 492.946503][T17292] ? sctp_copy_one_addr+0x93/0x360 [ 492.946532][T17292] sctp_bind_addr_copy+0xb3/0x3c0 [ 492.946560][T17292] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 492.946589][T17292] sctp_connect_new_asoc+0x2ff/0x6b0 [ 492.946613][T17292] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 492.946641][T17292] ? __local_bh_enable_ip+0xd0/0x130 [ 492.946704][T17292] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 492.946726][T17292] ? security_sctp_bind_connect+0x7e/0x2c0 [ 492.946758][T17292] sctp_sendmsg+0x159b/0x2d00 [ 492.946795][T17292] ? __pfx_sctp_sendmsg+0x10/0x10 [ 492.946822][T17292] ? aa_sk_perm+0x6d5/0x900 [ 492.946857][T17292] ? __might_fault+0xaf/0x130 [ 492.946883][T17292] ? sock_rps_record_flow+0x19/0x350 [ 492.946916][T17292] ? inet_sendmsg+0x298/0x320 [ 492.946955][T17292] ? __pfx_inet_sendmsg+0x10/0x10 [ 492.946981][T17292] sock_sendmsg_nosec+0x10e/0x180 [ 492.947009][T17292] __sys_sendto+0x408/0x5a0 [ 492.947037][T17292] ? ksys_write+0x1e6/0x270 [ 492.947069][T17292] ? __pfx___sys_sendto+0x10/0x10 [ 492.947094][T17292] ? __mutex_unlock_slowpath+0x731/0x900 [ 492.947145][T17292] ? __pfx_ksys_write+0x10/0x10 [ 492.947184][T17292] __x64_sys_sendto+0xde/0x100 [ 492.947213][T17292] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.947236][T17292] do_syscall_64+0x174/0x580 [ 492.947253][T17292] ? trace_irq_disable+0x3b/0x140 [ 492.947278][T17292] ? clear_bhb_loop+0x40/0x90 [ 492.947302][T17292] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.947322][T17292] RIP: 0033:0x7f537b79de99 [ 492.947342][T17292] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 492.947358][T17292] RSP: 002b:00007f537c667028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 492.947381][T17292] RAX: ffffffffffffffda RBX: 00007f537ba25fa0 RCX: 00007f537b79de99 [ 492.947396][T17292] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 0000000000000003 [ 492.947408][T17292] RBP: 00007f537c667090 R08: 000020000005ffe4 R09: 000000000000001c [ 492.947421][T17292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 492.947431][T17292] R13: 00007f537ba26038 R14: 00007f537ba25fa0 R15: 00007ffe19993268 [ 492.947464][T17292] [ 493.276131][T17296] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3019'. [ 493.317028][T17293] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 493.324548][T17293] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 493.369539][T17293] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 493.377007][T17293] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 494.341598][T17321] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3027'. [ 494.526490][T17037] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 494.604884][T17037] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 494.643418][T17037] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.691658][T17037] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 494.734506][T17037] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 494.887233][T17321] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3027'. [ 494.943090][T17321] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3027'. [ 495.247995][T17341] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3028'. [ 495.259434][T17037] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 495.289565][T17342] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3029'. [ 495.310618][T17037] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 495.341340][T17037] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.368020][T17037] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 495.405300][T17037] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 495.843606][T17037] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 495.915310][T17037] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 495.943721][T17037] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.986898][T17037] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 496.025628][T17037] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 496.396423][ T5834] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 496.436240][T17037] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 496.445919][T17366] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 496.474203][T17365] netlink: 'syz.7.3032': attribute type 2 has an invalid length. [ 496.485236][T17037] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 496.535292][T17037] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.597493][T17037] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 496.654226][T17037] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 497.279347][T17389] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3040'. [ 497.429233][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.503011][T17392] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3039'. [ 497.702153][T17401] xt_addrtype: ipv6 does not support BROADCAST matching [ 497.718501][T17389] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3040'. [ 497.768628][T17389] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3040'. [ 497.888149][T17401] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3042'. [ 498.197486][T17037] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 498.541449][T17426] netlink: 'syz.6.3048': attribute type 1 has an invalid length. [ 498.590111][T17037] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 498.616304][T17037] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 498.745956][T17037] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 498.882221][T17433] FAULT_INJECTION: forcing a failure. [ 498.882221][T17433] name failslab, interval 1, probability 0, space 0, times 0 [ 498.897515][T17433] CPU: 0 UID: 0 PID: 17433 Comm: syz.7.3049 Not tainted syzkaller #0 PREEMPT(full) [ 498.897539][T17433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 498.897549][T17433] Call Trace: [ 498.897556][T17433] [ 498.897563][T17433] dump_stack_lvl+0xe8/0x150 [ 498.897593][T17433] should_fail_ex+0x40c/0x560 [ 498.897618][T17433] should_failslab+0xa8/0x100 [ 498.897644][T17433] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 498.897662][T17433] ? local_lock_release+0x9c/0x160 [ 498.897688][T17433] ? __alloc_skb+0x1d7/0x7a0 [ 498.897708][T17433] ? __alloc_skb+0x1d7/0x7a0 [ 498.897735][T17433] __alloc_skb+0x1d7/0x7a0 [ 498.897761][T17433] sctp_packet_transmit+0x2ef/0x2b30 [ 498.897781][T17433] ? __sctp_packet_append_chunk+0x943/0xcf0 [ 498.897812][T17433] ? sctp_packet_append_chunk+0xafc/0x1070 [ 498.897838][T17433] sctp_packet_singleton+0x22f/0x340 [ 498.897862][T17433] ? __pfx_sctp_packet_singleton+0x10/0x10 [ 498.897891][T17433] ? sctp_outq_select_transport+0x485/0x590 [ 498.897913][T17433] ? sctp_transport_burst_limited+0x19c/0x280 [ 498.897940][T17433] sctp_outq_flush+0x4fb/0x3300 [ 498.897975][T17433] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 498.897998][T17433] ? __pfx_sctp_outq_flush+0x10/0x10 [ 498.898027][T17433] ? sctp_outq_uncork+0x4d/0xa0 [ 498.898049][T17433] sctp_do_sm+0x552a/0x5d50 [ 498.898068][T17433] ? __kmalloc_cache_noprof+0x32d/0x660 [ 498.898105][T17433] ? __pfx_sctp_do_sm+0x10/0x10 [ 498.898165][T17433] ? __sk_mem_raise_allocated+0x6f9/0x1250 [ 498.898197][T17433] sctp_primitive_ASSOCIATE+0x95/0xc0 [ 498.898222][T17433] sctp_sendmsg_to_asoc+0x13fb/0x1880 [ 498.898251][T17433] ? sctp_assoc_add_peer+0xcbd/0x1380 [ 498.898282][T17433] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 498.898297][T17433] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 498.898316][T17433] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 498.898332][T17433] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 498.898347][T17433] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 498.898364][T17433] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 498.898383][T17433] ? security_sctp_bind_connect+0x7e/0x2c0 [ 498.898418][T17433] sctp_sendmsg+0x1bb5/0x2d00 [ 498.898450][T17433] ? __pfx_sctp_sendmsg+0x10/0x10 [ 498.898472][T17433] ? aa_sk_perm+0x6d5/0x900 [ 498.898503][T17433] ? __might_fault+0xaf/0x130 [ 498.898525][T17433] ? sock_rps_record_flow+0x19/0x350 [ 498.898551][T17433] ? inet_sendmsg+0x298/0x320 [ 498.898575][T17433] ? __pfx_inet_sendmsg+0x10/0x10 [ 498.898596][T17433] sock_sendmsg_nosec+0x10e/0x180 [ 498.898620][T17433] __sys_sendto+0x408/0x5a0 [ 498.898642][T17433] ? ksys_write+0x1e6/0x270 [ 498.898670][T17433] ? __pfx___sys_sendto+0x10/0x10 [ 498.898691][T17433] ? __mutex_unlock_slowpath+0x731/0x900 [ 498.898720][T17433] ? irqentry_exit+0x218/0x8f0 [ 498.898809][T17433] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.898833][T17433] __x64_sys_sendto+0xde/0x100 [ 498.898861][T17433] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.898882][T17433] do_syscall_64+0x174/0x580 [ 498.898902][T17433] ? clear_bhb_loop+0x40/0x90 [ 498.898926][T17433] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.898946][T17433] RIP: 0033:0x7f148919de99 [ 498.898966][T17433] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 498.898981][T17433] RSP: 002b:00007f1489fcb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 498.899003][T17433] RAX: ffffffffffffffda RBX: 00007f1489425fa0 RCX: 00007f148919de99 [ 498.899017][T17433] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 0000000000000003 [ 498.899030][T17433] RBP: 00007f1489fcb090 R08: 000020000005ffe4 R09: 000000000000001c [ 498.899043][T17433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 498.899054][T17433] R13: 00007f1489426038 R14: 00007f1489425fa0 R15: 00007ffc49d5ef98 [ 498.899085][T17433] [ 498.901614][T17426] 8021q: adding VLAN 0 to HW filter on device bond1 [ 499.362810][T17429] bond1: (slave gretap1): making interface the new active one [ 499.374971][T17429] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 499.387912][T17037] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 499.407472][T17037] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 499.419521][T17037] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 499.438866][T17037] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 499.663662][T17444] netlink: 'syz.6.3051': attribute type 21 has an invalid length. [ 499.685916][T17444] netlink: 128 bytes leftover after parsing attributes in process `syz.6.3051'. [ 499.762734][T17444] netlink: 'syz.6.3051': attribute type 5 has an invalid length. [ 499.843040][T17444] netlink: 3 bytes leftover after parsing attributes in process `syz.6.3051'. [ 500.047721][T17457] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3052'. [ 500.312991][T17037] 8021q: adding VLAN 0 to HW filter on device bond0 [ 500.612221][T17037] 8021q: adding VLAN 0 to HW filter on device team0 [ 500.656081][T17468] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3056'. [ 500.756959][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 500.764231][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 501.007816][T17485] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3060'. [ 501.135482][T17485] veth3: entered promiscuous mode [ 501.326323][T17482] 8021q: adding VLAN 0 to HW filter on device bond6 [ 501.382443][T17482] bridge0: port 3(bond6) entered blocking state [ 501.440272][T17482] bridge0: port 3(bond6) entered disabled state [ 501.471533][T17482] bond6: entered allmulticast mode [ 501.522425][T12075] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 501.546151][T17482] bond6: entered promiscuous mode [ 501.564928][T17482] bridge0: port 3(bond6) entered blocking state [ 501.573292][T17482] bridge0: port 3(bond6) entered forwarding state [ 501.601589][ T116] bridge0: port 2(bridge_slave_1) entered blocking state [ 501.608869][ T116] bridge0: port 2(bridge_slave_1) entered forwarding state [ 501.647805][ T116] bridge0: port 3(bond6) entered disabled state [ 502.289896][T17519] __nla_validate_parse: 1 callbacks suppressed [ 502.289926][T17519] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3066'. [ 503.174724][T17533] bond2: option arp_all_targets: invalid value (18446744073709551613) [ 503.221489][T17533] bond2 (unregistering): Released all slaves [ 503.349086][T17545] tipc: MTU too low for tipc bearer [ 503.390239][T17540] vxcan1 speed is unknown, defaulting to 1000 [ 503.464788][T17540] vxcan1 speed is unknown, defaulting to 1000 [ 503.520521][T17540] vxcan1 speed is unknown, defaulting to 1000 [ 503.717937][T17557] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3073'. [ 503.776865][T17557] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3073'. [ 503.850397][T17563] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3075'. [ 504.316888][T17570] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3077'. [ 505.035270][T17540] infiniband syz2: set active [ 505.040175][ T5733] vxcan1 speed is unknown, defaulting to 1000 [ 505.087293][T17540] infiniband syz2: added vxcan1 [ 505.166565][T17540] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 505.196570][T17540] infiniband syz2: Couldn't open port 1 [ 505.250463][T17540] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 505.332200][T17540] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 505.366626][T12075] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 505.441741][T17540] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 505.616000][T17037] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 505.654869][T17540] RDS/IB: syz2: added [ 505.688043][T17540] smc: adding ib device syz2 with port count 1 [ 505.734418][T17540] smc: ib device syz2 port 1 has no pnetid [ 505.806195][ T5733] vxcan1 speed is unknown, defaulting to 1000 [ 505.857518][T17540] vxcan1 speed is unknown, defaulting to 1000 [ 506.067245][T17037] veth0_vlan: entered promiscuous mode [ 506.147806][T17037] veth1_vlan: entered promiscuous mode [ 506.177902][T17615] netlink: 52 bytes leftover after parsing attributes in process `syz.6.3083'. [ 506.424660][T17037] veth0_macvtap: entered promiscuous mode [ 506.491997][T17037] veth1_macvtap: entered promiscuous mode [ 506.644892][ T6279] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.664647][T17037] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 506.806200][T17037] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 506.942679][ T116] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.993628][ T116] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.002483][ T116] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.022868][ T116] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.054503][T17631] netlink: 'syz.7.3086': attribute type 1 has an invalid length. [ 507.243670][T17631] 8021q: adding VLAN 0 to HW filter on device bond1 [ 507.315583][T17540] vxcan1 speed is unknown, defaulting to 1000 [ 507.379620][T17636] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3087'. [ 507.791855][ T116] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 507.847952][ T116] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 508.023219][T12080] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 508.038161][T17653] syzkaller0: entered promiscuous mode [ 508.058226][T12080] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 508.067581][T17653] syzkaller0: entered allmulticast mode [ 508.738280][T17674] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3092'. [ 509.089081][T17540] vxcan1 speed is unknown, defaulting to 1000 [ 509.612632][T17690] netlink: 524 bytes leftover after parsing attributes in process `syz.7.3095'. [ 510.059855][T17706] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3099'. [ 510.486688][T17716] syzkaller0: entered promiscuous mode [ 510.492582][T17716] syzkaller0: entered allmulticast mode [ 511.076722][T17540] vxcan1 speed is unknown, defaulting to 1000 [ 511.453128][T17741] bridge0: port 2(bridge_slave_1) entered disabled state [ 511.461605][T17741] bridge0: port 1(bridge_slave_0) entered disabled state [ 511.772460][T17750] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3113'. [ 512.030665][T17758] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3115'. [ 512.362093][T17540] vxcan1 speed is unknown, defaulting to 1000 [ 512.390274][T10552] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 512.420012][T17765] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3118'. [ 512.492966][T17765] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 512.517921][T17762] syzkaller0: entered promiscuous mode [ 512.539019][T17762] syzkaller0: entered allmulticast mode [ 512.557933][T16823] netdevsim netdevsim7 netdevsim0: entered promiscuous mode [ 513.494449][T17802] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3127'. [ 513.542638][T17804] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3125'. [ 513.562256][T17802] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3127'. [ 513.742105][T17808] geneve2: entered promiscuous mode [ 513.747522][T17808] geneve2: entered allmulticast mode [ 513.768920][T10550] netdevsim netdevsim7 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 513.815405][T10550] netdevsim netdevsim7 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 513.865047][T10550] netdevsim netdevsim7 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 513.904129][T10550] netdevsim netdevsim7 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 514.431477][T17829] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3132'. [ 514.473132][T17830] syzkaller0: entered promiscuous mode [ 514.486928][T17830] syzkaller0: entered allmulticast mode [ 514.520650][T17540] vxcan1 speed is unknown, defaulting to 1000 [ 515.473508][T17866] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3145'. [ 515.833176][T17872] syzkaller1: entered promiscuous mode [ 515.860472][T17872] syzkaller1: entered allmulticast mode [ 516.047285][T17880] syzkaller0: entered promiscuous mode [ 516.074005][T17880] syzkaller0: entered allmulticast mode [ 516.298573][T17540] vxcan1 speed is unknown, defaulting to 1000 [ 516.307295][T17887] netlink: 'syz.6.3151': attribute type 4 has an invalid length. [ 516.886381][T17902] xt_l2tp: missing protocol rule (udp|l2tpip) [ 516.979361][T17902] x_tables: ip6_tables: eui64 match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT/FORWARD [ 517.049288][T17908] netlink: 45349 bytes leftover after parsing attributes in process `syz.7.3158'. [ 517.200374][T17915] lo: entered promiscuous mode [ 517.301037][T17915] netlink: 'syz.8.3161': attribute type 2 has an invalid length. [ 517.332327][T17915] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 517.377356][T17908] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 517.411506][T17908] 0ªX¹¦Dö»: entered allmulticast mode [ 517.524588][ T5834] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.034994][T17968] netlink: 56 bytes leftover after parsing attributes in process `syz.7.3169'. [ 519.185369][T17958] syzkaller0: entered promiscuous mode [ 519.215248][T17958] syzkaller0: entered allmulticast mode [ 519.386648][ T5625] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 519.400420][ T5625] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 519.417864][ T5625] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 519.431763][ T5625] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 519.439799][ T5625] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 519.532475][T17968] bond2 (unregistering): Released all slaves [ 521.529380][ T5625] Bluetooth: hci0: command tx timeout [ 521.994585][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 523.043678][T17540] vxcan1 speed is unknown, defaulting to 1000 [ 523.050779][T17984] bridge_slave_1: left allmulticast mode [ 523.059983][T17984] bridge_slave_1: left promiscuous mode [ 523.082578][T17984] bridge0: port 2(bridge_slave_1) entered disabled state [ 523.129660][T17984] bridge_slave_0: left allmulticast mode [ 523.140056][T17984] bridge_slave_0: left promiscuous mode [ 523.146018][T17984] bridge0: port 1(bridge_slave_0) entered disabled state [ 523.270206][T11462] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 523.301526][T17999] IPv6: Can't replace route, no match found [ 523.333641][T17999] IPv6: Can't replace route, no match found [ 523.588987][ T5625] Bluetooth: hci0: command tx timeout [ 524.516384][T17540] vxcan1 speed is unknown, defaulting to 1000 [ 525.096541][T18037] syzkaller0: entered promiscuous mode [ 525.107159][T18037] syzkaller0: entered allmulticast mode [ 525.252913][T18039] xt_hashlimit: max too large, truncated to 1048576 [ 525.282226][T18039] No such timeout policy "syz1" [ 525.535934][T17540] vxcan1 speed is unknown, defaulting to 1000 [ 525.566464][T18047] netlink: 52 bytes leftover after parsing attributes in process `syz.6.3188'. [ 525.638625][T18047] bridge0: port 2(bridge_slave_1) entered disabled state [ 525.646071][T18047] bridge0: port 1(bridge_slave_0) entered disabled state [ 525.672538][ T5625] Bluetooth: hci0: command tx timeout [ 525.782407][T18049] netlink: 52 bytes leftover after parsing attributes in process `syz.6.3188'. [ 526.105232][T18058] netlink: 220 bytes leftover after parsing attributes in process `syz.0.3191'. [ 526.151621][T18058] netlink: 220 bytes leftover after parsing attributes in process `syz.0.3191'. [ 526.195491][T18058] netlink: 220 bytes leftover after parsing attributes in process `syz.0.3191'. [ 526.635584][T18071] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3195'. [ 526.659374][T17977] lo speed is unknown, defaulting to 1000 [ 526.900223][T18078] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 526.912429][T18076] syzkaller0: entered promiscuous mode [ 526.949109][T18076] syzkaller0: entered allmulticast mode [ 527.217873][T18087] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3200'. [ 527.241746][T18091] netlink: 'syz.7.3200': attribute type 1 has an invalid length. [ 527.265540][T18092] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3199'. [ 527.750617][ T5625] Bluetooth: hci0: command tx timeout [ 527.805645][T18109] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3204'. [ 527.998768][T18118] openvswitch: netlink: IP tunnel TTL not specified. [ 528.044623][T17977] vxcan1 speed is unknown, defaulting to 1000 [ 528.312337][T18121] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 528.626434][T18133] syzkaller0: entered promiscuous mode [ 528.648926][T18133] syzkaller0: entered allmulticast mode [ 528.773590][T18136] veth0: entered promiscuous mode [ 528.796811][T18140] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3212'. [ 528.944440][T18140] hsr_slave_1 (unregistering): left promiscuous mode [ 529.027083][T18135] veth0: left promiscuous mode [ 529.036873][ T116] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.431824][T18154] pimreg: entered allmulticast mode [ 529.495962][T18158] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 530.723030][T18185] syzkaller0: entered promiscuous mode [ 530.736287][T18185] syzkaller0: entered allmulticast mode [ 530.885173][T18195] smc: ib device syz2 ibport 1 applied user defined pnetid SYZ2 [ 530.991381][T18183] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 531.255576][T18202] netlink: 'syz.8.3229': attribute type 1 has an invalid length. [ 532.311223][ T5625] Bluetooth: hci0: command 0x0c20 tx timeout [ 534.407234][T17540] bond2: (slave syz_tun): Removing an active aggregator [ 534.429816][T17540] bond2: (slave syz_tun): Releasing backup interface [ 534.459704][T18202] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 534.461022][T18195] netlink: 'syz.6.3226': attribute type 22 has an invalid length. [ 534.517395][T18195] __nla_validate_parse: 3 callbacks suppressed [ 534.517414][T18195] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3226'. [ 534.791826][T10550] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 535.013749][T18195] netlink: 'syz.6.3226': attribute type 22 has an invalid length. [ 535.025016][T18195] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3226'. [ 535.045875][T10550] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 535.057934][T18223] netlink: 'syz.8.3233': attribute type 1 has an invalid length. [ 535.066416][T10550] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 535.066955][T18225] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3234'. [ 535.076158][T10550] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 535.076203][T10550] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 535.245734][ T1010] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.423327][T18238] netlink: 'syz.0.3236': attribute type 33 has an invalid length. [ 535.503145][T18228] bond1: (slave veth0_to_bond): making interface the new active one [ 535.525522][T18228] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 535.587027][T18243] netlink: 'syz.7.3238': attribute type 1 has an invalid length. [ 535.599602][T18243] netlink: 240 bytes leftover after parsing attributes in process `syz.7.3238'. [ 535.611738][T18243] netlink: 'syz.7.3238': attribute type 1 has an invalid length. [ 535.616453][T18238] bond1: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 535.620097][T18243] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3238'. [ 535.645599][T18238] bond1 (unregistering): Released all slaves [ 535.704893][T18245] netlink: 'syz.7.3238': attribute type 7 has an invalid length. [ 535.734067][T18245] netlink: 140 bytes leftover after parsing attributes in process `syz.7.3238'. [ 535.925536][ T1010] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.253684][T18262] netlink: 'syz.0.3240': attribute type 1 has an invalid length. [ 536.712702][T18262] 8021q: adding VLAN 0 to HW filter on device bond1 [ 536.765402][T18262] netlink: 'syz.0.3240': attribute type 1 has an invalid length. [ 536.786510][T18262] netlink: 5120 bytes leftover after parsing attributes in process `syz.0.3240'. [ 536.806791][T18274] bond1: (slave geneve2): making interface the new active one [ 536.825058][T18274] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 536.924571][ T1010] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.015045][T18257] syzkaller0: entered promiscuous mode [ 537.036819][T18257] syzkaller0: entered allmulticast mode [ 537.047437][T18282] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 537.060816][T18282] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 537.086915][T18282] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 537.141548][T18291] netlink: 'syz.7.3246': attribute type 1 has an invalid length. [ 537.353414][T10550] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 540.374995][T18288] gretap0: entered promiscuous mode [ 540.382913][T18288] vlan2: entered promiscuous mode [ 540.556444][ T5834] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 540.595245][T18291] 8021q: adding VLAN 0 to HW filter on device bond2 [ 540.690506][ T1010] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.475949][T18318] 0ªX¹¦Dö»: left allmulticast mode [ 541.723094][T18318] bridge0: port 2(bridge_slave_1) entered disabled state [ 541.730951][T18318] bridge0: port 1(bridge_slave_0) entered disabled state [ 541.786310][T18318] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 542.288509][T17977] bridge0: port 1(bridge_slave_0) entered blocking state [ 542.341689][T17977] bridge0: port 1(bridge_slave_0) entered disabled state [ 542.380228][T17977] bridge_slave_0: entered allmulticast mode [ 542.409276][T17977] bridge_slave_0: entered promiscuous mode [ 542.444910][T17977] bridge0: port 2(bridge_slave_1) entered blocking state [ 542.467148][T17977] bridge0: port 2(bridge_slave_1) entered disabled state [ 542.508888][T17977] bridge_slave_1: entered allmulticast mode [ 542.527378][T17977] bridge_slave_1: entered promiscuous mode [ 542.547988][T12073] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.596289][T11462] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.624524][T18359] syzkaller1: entered promiscuous mode [ 542.632330][T18359] syzkaller1: entered allmulticast mode [ 542.767635][T12073] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.790099][T17977] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 542.830838][T17977] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 542.930420][T18373] openvswitch: netlink: IP tunnel TTL not specified. [ 542.965649][T17977] team0: Port device team_slave_0 added [ 542.971879][T12073] netdevsim netdevsim5 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.999934][T17977] team0: Port device team_slave_1 added [ 543.045566][ T1010] bond6: left allmulticast mode [ 543.054889][ T1010] bond6: left promiscuous mode [ 543.064810][ T1010] bridge0: port 3(bond6) entered disabled state [ 543.084863][ T1010] bridge_slave_1: left allmulticast mode [ 543.091046][ T1010] bridge_slave_1: left promiscuous mode [ 543.098883][ T1010] bridge0: port 2(bridge_slave_1) entered disabled state [ 543.125926][ T1010] bridge_slave_0: left allmulticast mode [ 543.132534][ T1010] bridge_slave_0: left promiscuous mode [ 543.138533][ T1010] bridge0: port 1(bridge_slave_0) entered disabled state [ 543.166808][ T1010] pim6reg: left allmulticast mode [ 543.530224][ T1010] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 543.542794][ T1010] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 543.562121][ T1010] bond0 (unregistering): Released all slaves [ 543.577455][ T1010] bond1 (unregistering): (slave lo): Releasing backup interface [ 543.590306][ T1010] bond1 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 543.607085][ T1010] bond1 (unregistering): Released all slaves [ 543.637048][ T1010] bond2 (unregistering): Released all slaves [ 543.664977][ T1010] bond3 (unregistering): Released all slaves [ 543.694437][ T1010] bond4 (unregistering): Released all slaves [ 543.722044][ T1010] bond5 (unregistering): Released all slaves [ 543.753573][ T1010] bond6 (unregistering): Released all slaves [ 543.871177][T18373] netlink: 30218 bytes leftover after parsing attributes in process `syz.8.3259'. [ 543.894731][T18373] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3259'. [ 543.907145][T18373] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3259'. [ 544.056375][T18328] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 544.066289][T17977] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 544.133898][T17977] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 544.137741][T18375] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3260'. [ 544.248065][T17977] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 544.281360][T17977] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 544.293185][T17977] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 544.360276][T17977] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 544.419464][T18382] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 544.456192][ T1010] tipc: Disabling bearer [ 544.466566][ T1010] tipc: Left network mode [ 544.659760][T18375] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3260'. [ 544.702112][T18375] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3260'. [ 545.008389][T11462] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 545.050165][T11462] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 545.113053][T17977] hsr_slave_0: entered promiscuous mode [ 545.174955][T17977] hsr_slave_1: entered promiscuous mode [ 545.225503][T17977] debugfs: 'hsr0' already exists in 'hsr' [ 545.246632][T17977] Cannot create hsr debugfs directory [ 545.373285][T11462] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 545.406841][T11462] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 545.486688][T18399] team0: Device ipvlan2 failed to register rx_handler [ 545.516108][T18401] veth1: entered promiscuous mode [ 547.094629][T18451] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3277'. [ 547.171951][T18453] FAULT_INJECTION: forcing a failure. [ 547.171951][T18453] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 547.207187][T18453] CPU: 1 UID: 0 PID: 18453 Comm: syz.7.3279 Not tainted syzkaller #0 PREEMPT(full) [ 547.207216][T18453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 547.207228][T18453] Call Trace: [ 547.207236][T18453] [ 547.207245][T18453] dump_stack_lvl+0xe8/0x150 [ 547.207281][T18453] should_fail_ex+0x40c/0x560 [ 547.207310][T18453] _copy_from_user+0x2d/0xb0 [ 547.207419][T18453] ___sys_sendmsg+0x1c6/0x360 [ 547.207439][T18453] ? __lock_acquire+0x683/0x2cf0 [ 547.207471][T18453] ? __pfx____sys_sendmsg+0x10/0x10 [ 547.207489][T18453] ? __lock_acquire+0x683/0x2cf0 [ 547.207519][T18453] ? kstrtouint+0x6e/0xe0 [ 547.207608][T18453] __sys_sendmmsg+0x273/0x4d0 [ 547.207636][T18453] ? __pfx___sys_sendmmsg+0x10/0x10 [ 547.207666][T18453] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 547.207723][T18453] ? ksys_write+0x242/0x270 [ 547.207758][T18453] ? __pfx_ksys_write+0x10/0x10 [ 547.207795][T18453] __x64_sys_sendmmsg+0xa0/0xc0 [ 547.207815][T18453] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.207837][T18453] do_syscall_64+0x174/0x580 [ 547.207855][T18453] ? trace_irq_disable+0x3b/0x140 [ 547.207880][T18453] ? clear_bhb_loop+0x40/0x90 [ 547.207905][T18453] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.207925][T18453] RIP: 0033:0x7f148919de99 [ 547.207944][T18453] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 547.207962][T18453] RSP: 002b:00007f1489fcb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 547.207985][T18453] RAX: ffffffffffffffda RBX: 00007f1489425fa0 RCX: 00007f148919de99 [ 547.208007][T18453] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000007 [ 547.208022][T18453] RBP: 00007f1489fcb090 R08: 0000000000000000 R09: 0000000000000000 [ 547.208034][T18453] R10: 00000000000000e0 R11: 0000000000000246 R12: 0000000000000001 [ 547.208045][T18453] R13: 00007f1489426038 R14: 00007f1489425fa0 R15: 00007ffc49d5ef98 [ 547.208082][T18453] [ 547.658231][T18462] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3281'. [ 547.811829][T18465] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3282'. [ 547.952208][ T5286] 8021q: adding VLAN 0 to HW filter on device eth1 [ 547.972043][T18451] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3277'. [ 548.738761][ T1010] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 548.750172][ T1010] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 548.766396][ T1010] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 548.797343][ T1010] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 548.900031][ T1010] veth1_macvtap: left promiscuous mode [ 548.907702][ T1010] veth0_macvtap: left promiscuous mode [ 548.920227][ T1010] veth1_vlan: left promiscuous mode [ 548.925623][ T1010] veth0_vlan: left promiscuous mode [ 549.703036][ T1010] team0 (unregistering): Port device team_slave_1 removed [ 549.742020][ T1010] team0 (unregistering): Port device team_slave_0 removed [ 549.896492][ T6279] smc: removing ib device syz2 [ 549.989771][ T6279] smbdirect: ib_dev[syz2] removed [ 550.248874][T18481] netlink: 'syz.6.3285': attribute type 4 has an invalid length. [ 550.267531][T18486] netlink: 'syz.6.3285': attribute type 5 has an invalid length. [ 550.326341][T18490] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 550.351553][T18500] tipc: Started in network mode [ 550.357960][T18490] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 550.376366][T18500] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 550.400344][T18500] tipc: Enabled bearer , priority 10 [ 550.404123][T18490] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 550.430268][ T5357] vxcan1 speed is unknown, defaulting to 1000 [ 550.436406][ T5357] syz2: Port: 1 Link DOWN [ 551.621908][T18342] tipc: Node number set to 10136234 [ 551.995210][T18540] netlink: 'syz.6.3298': attribute type 1 has an invalid length. [ 552.013239][T18540] __nla_validate_parse: 5 callbacks suppressed [ 552.013262][T18540] netlink: 224 bytes leftover after parsing attributes in process `syz.6.3298'. [ 552.040352][T18540] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3298'. [ 552.661308][T17977] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 552.817419][T17977] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 552.889621][T17977] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 552.982289][T17977] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 553.187305][T17977] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 553.251483][T17977] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 553.293314][T17977] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 553.374486][T17977] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 554.459690][T18587] syzkaller0: entered promiscuous mode [ 554.516521][T18587] syzkaller0: entered allmulticast mode [ 554.933573][T18598] netlink: 76 bytes leftover after parsing attributes in process `syz.6.3309'. [ 554.981668][T18598] nbd: illegal input index 65508 [ 555.146335][T18604] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3310'. [ 559.731776][ T5286] 8021q: adding VLAN 0 to HW filter on device eth2 [ 559.896024][T17977] 8021q: adding VLAN 0 to HW filter on device bond0 [ 560.025679][T17977] 8021q: adding VLAN 0 to HW filter on device team0 [ 560.114946][ T176] bridge0: port 1(bridge_slave_0) entered blocking state [ 560.122190][ T176] bridge0: port 1(bridge_slave_0) entered forwarding state [ 560.196624][ T176] bridge0: port 2(bridge_slave_1) entered blocking state [ 560.203894][ T176] bridge0: port 2(bridge_slave_1) entered forwarding state [ 560.391831][ T1010] IPVS: stop unused estimator thread 0... [ 560.898205][T18649] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3322'. [ 560.942020][T18649] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3322'. [ 561.023166][T18655] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3321'. [ 561.035748][T18653] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3320'. [ 561.224632][T18662] syzkaller0: entered promiscuous mode [ 561.249869][T18662] syzkaller0: entered allmulticast mode [ 561.279333][T18653] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3320'. [ 561.315681][T18653] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3320'. [ 561.406537][T18666] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3324'. [ 561.425045][T18666] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3324'. [ 561.458154][T18666] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3324'. [ 561.475746][T18666] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3324'. [ 561.802451][T18655] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 562.286218][T18688] syzkaller0: entered allmulticast mode [ 562.396565][T18692] netlink: 'syz.7.3330': attribute type 20 has an invalid length. [ 562.665247][T18687] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 562.679460][T18687] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.746740][T18692] netlink: 'syz.7.3330': attribute type 20 has an invalid length. [ 562.760026][T18697] lo: left promiscuous mode [ 562.776751][T18697] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 562.808537][ T176] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 562.851613][ T176] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 562.950814][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 563.036561][T18703] vxcan0: tx address claim with different name [ 563.109840][ T50] Bluetooth: hci0: command 0x0c20 tx timeout [ 563.126310][T18687] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 563.171713][T18687] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.363930][ T176] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 563.406109][ T176] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 563.566296][T17977] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 563.762682][T18687] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 563.834078][T18687] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.921557][ T5286] 8021q: adding VLAN 0 to HW filter on device eth3 [ 564.057251][T18719] syzkaller0: entered promiscuous mode [ 564.083919][T18719] syzkaller0: entered allmulticast mode [ 565.031356][ T50] Bluetooth: hci6: command 0x0406 tx timeout [ 568.032990][T18687] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 568.079669][T18687] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.162654][T18744] netlink: 'syz.0.3338': attribute type 1 has an invalid length. [ 568.480727][ T29] IPVS: starting estimator thread 0... [ 568.486701][T18756] __nla_validate_parse: 5 callbacks suppressed [ 568.486720][T18756] netlink: 198796 bytes leftover after parsing attributes in process `syz.0.3341'. [ 568.568127][T18756] netlink: 'syz.0.3341': attribute type 2 has an invalid length. [ 568.598800][T18757] IPVS: using max 29 ests per chain, 69600 per kthread [ 568.621083][T18758] Bluetooth: MGMT ver 1.23 [ 568.654255][T18756] xt_ecn: cannot match TCP bits for non-tcp packets [ 568.748951][T18754] syzkaller0: entered promiscuous mode [ 568.765162][T18754] syzkaller0: entered allmulticast mode [ 568.813107][T11462] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 568.862021][T11462] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.008636][ T6279] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 569.039693][ T6279] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.115800][T12075] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 569.137721][T12075] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.187698][T17977] veth0_vlan: entered promiscuous mode [ 569.234308][T17977] veth1_vlan: entered promiscuous mode [ 569.351296][ T6279] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 569.370875][T12075] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 569.397746][T12075] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.545454][T17977] veth0_macvtap: entered promiscuous mode [ 569.586055][T17977] veth1_macvtap: entered promiscuous mode [ 569.684716][ T5286] 8021q: adding VLAN 0 to HW filter on device eth4 [ 569.716913][T17977] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 569.770062][T17977] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 570.129921][T18794] netlink: 232 bytes leftover after parsing attributes in process `syz.0.3347'. [ 571.446636][T18801] syzkaller0: entered promiscuous mode [ 571.477450][T18801] syzkaller0: entered allmulticast mode [ 571.490197][ T36] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.498203][T18820] netlink: 132 bytes leftover after parsing attributes in process `syz.7.3350'. [ 571.517662][ T36] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.542961][T18820] netlink: zone id is out of range [ 571.717806][T18820] xt_hashlimit: max too large, truncated to 1048576 [ 571.779851][T18820] No such timeout policy "syz1" [ 572.561224][ T31] INFO: task syz.3.2565:15588 blocked for more than 143 seconds. [ 572.569610][ T31] Not tainted syzkaller #0 [ 572.576867][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 572.585610][ T31] task:syz.3.2565 state:D stack:26016 pid:15588 tgid:15583 ppid:5632 task_flags:0x400140 flags:0x00080002 [ 572.598258][ T31] Call Trace: [ 572.604332][ T31] [ 572.607337][ T31] __schedule+0x17d9/0x56c0 [ 572.612074][ T31] ? __lock_acquire+0x683/0x2cf0 [ 572.617099][ T31] ? irqentry_exit+0x218/0x8f0 [ 572.622001][ T31] ? lockdep_hardirqs_on+0x7a/0x110 [ 572.627343][ T31] ? __pfx___schedule+0x10/0x10 [ 572.637643][ T31] ? schedule+0x90/0x2b0 [ 572.642351][ T31] ? schedule+0x90/0x2b0 [ 572.646791][ T31] schedule+0x164/0x2b0 [ 572.651499][ T31] schedule_preempt_disabled+0x13/0x30 [ 572.657154][ T31] __mutex_lock+0x7bf/0x1550 [ 572.664442][ T31] ? __mutex_lock+0x5d4/0x1550 [ 572.669563][ T31] ? nfsd_nl_version_set_doit+0xcd/0x7a0 [ 572.676073][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 572.681779][ T31] ? rcu_is_watching+0x15/0xb0 [ 572.686864][ T31] nfsd_nl_version_set_doit+0xcd/0x7a0 [ 572.694047][ T31] ? __kmalloc_noprof+0x396/0x720 [ 572.699863][ T31] ? __pfx_nfsd_nl_version_set_doit+0x10/0x10 [ 572.706144][ T31] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 572.714082][ T31] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 572.721934][ T31] genl_family_rcv_msg_doit+0x233/0x340 [ 572.727911][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 572.734341][ T31] ? bpf_lsm_capable+0x9/0x20 [ 572.739418][ T31] ? security_capable+0x7e/0x2c0 [ 572.744550][ T31] genl_rcv_msg+0x614/0x7a0 [ 572.750444][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 572.755608][ T31] ? __pfx_nfsd_nl_version_set_doit+0x10/0x10 [ 572.763643][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 572.769353][ T31] netlink_rcv_skb+0x226/0x4a0 [ 572.774385][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 572.779682][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 572.785068][ T31] ? down_read+0x2be/0x330 [ 572.791202][ T31] genl_rcv+0x28/0x40 [ 572.795262][ T31] netlink_unicast+0x7bb/0x940 [ 572.800957][ T31] netlink_sendmsg+0x813/0xb40 [ 572.805801][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 572.811407][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 572.816420][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 572.822193][ T31] sock_sendmsg_nosec+0x13a/0x180 [ 572.827380][ T31] ____sys_sendmsg+0x54e/0x850 [ 572.833367][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 572.839870][ T31] ? import_iovec+0x73/0xa0 [ 572.844510][ T31] ___sys_sendmsg+0x2a5/0x360 [ 572.851648][ T31] ? __lock_acquire+0x683/0x2cf0 [ 572.856671][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 572.862987][ T31] ? futex_wait+0x2a2/0x390 [ 572.870837][ T31] ? __fget_files+0x2a/0x420 [ 572.875529][ T31] ? __fget_files+0x3a2/0x420 [ 572.881071][ T31] __x64_sys_sendmsg+0x1b1/0x290 [ 572.886184][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 572.892107][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 572.898247][ T31] do_syscall_64+0x174/0x580 [ 572.903068][ T31] ? clear_bhb_loop+0x40/0x90 [ 572.907851][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 572.914328][ T31] RIP: 0033:0x7f698659de99 [ 572.918959][ T31] RSP: 002b:00007f698738f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 572.927435][ T31] RAX: ffffffffffffffda RBX: 00007f6986826090 RCX: 00007f698659de99 [ 572.937015][ T31] RDX: 0000000004008090 RSI: 0000200000000140 RDI: 000000000000000a [ 572.947859][ T31] RBP: 00007f6986633eaf R08: 0000000000000000 R09: 0000000000000000 [ 572.957068][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 572.966275][ T31] R13: 00007f6986826128 R14: 00007f6986826090 R15: 00007ffcf9e6a958 [ 572.978801][ T31] [ 572.981965][ T31] [ 572.981965][ T31] Showing all locks held in the system: [ 572.989780][ T31] 1 lock held by rcu_exp_gp_kthr/18: [ 572.995106][ T31] 1 lock held by khungtaskd/31: [ 573.000182][ T31] #0: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 573.010401][ T31] 3 locks held by kworker/u8:2/36: [ 573.015552][ T31] #0: ffff888036be9140 ((wq_completion)udp_tunnel_nic){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 573.027447][ T31] #1: ffffc90000ac7c40 ((work_completion)(&utn->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 573.040298][ T31] #2: ffffffff9002cd80 (rtnl_mutex){+.+.}-{4:4}, at: udp_tunnel_nic_device_sync_work+0x29/0xa20 [ 573.053410][ T31] 6 locks held by kworker/u8:8/1174: [ 573.059879][ T31] #0: ffff8880b873b160 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2d/0x160 [ 573.074033][ T31] #1: ffff8880b8724440 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x57/0x7d0 [ 573.084438][ T31] #2: ffff8880b8726058 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x904/0xed0 [ 573.094657][ T31] #3: ffffffff9a997ee0 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0xb7/0x420 [ 573.105214][ T31] #4: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 573.116154][ T31] #5: ffff88813fffbf58 (&zone->lock){-.-.}-{3:3}, at: __rmqueue_pcplist+0x497/0x1b90 [ 573.126040][ T31] 1 lock held by dhcpcd/5286: [ 573.131002][ T31] #0: ffffffff9002cd80 (rtnl_mutex){+.+.}-{4:4}, at: inet6_rtm_newaddr+0x65e/0xdf0 [ 573.140726][ T31] 2 locks held by getty/5382: [ 573.145601][ T31] #0: ffff8880366c10a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 573.156987][ T31] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 573.170235][ T31] 4 locks held by kworker/u8:10/6279: [ 573.177977][ T31] #0: ffff8880b863b160 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2d/0x160 [ 573.214938][ T31] #1: ffff8880b8624440 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x57/0x7d0 [ 573.224025][ T31] #2: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: net_tx_action+0x5bb/0xc30 [ 573.234156][ T31] #3: ffff88807b81d170 (&sch->root_lock_key#570){+.-.}-{3:3}, at: net_tx_action+0x69e/0xc30 [ 573.245467][ T31] 5 locks held by kworker/u8:12/10550: [ 573.251249][ T31] 3 locks held by kworker/u8:14/11462: [ 573.256857][ T31] #0: ffff88801b06c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 573.273135][ T31] #1: ffffc9000ce5fc40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 573.290098][ T31] #2: ffffffff9002cd80 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 573.299543][ T31] 3 locks held by kworker/u8:17/12075: [ 573.306023][ T31] #0: ffff888032687940 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 573.317989][ T31] #1: ffffc9000586fc40 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 573.332981][ T31] #2: ffffffff9002cd80 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x116/0x15c0 [ 573.342601][ T31] 2 locks held by syz.4.1682/12136: [ 573.349813][ T31] #0: ffffffff9009d608 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 573.358162][ T31] #1: ffffffff8ee8e5e0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x135/0x1750 [ 573.370256][ T31] 2 locks held by syz.3.2565/15588: [ 573.378981][ T31] #0: ffffffff9009d608 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 573.388213][ T31] #1: ffffffff8ee8e5e0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_set_doit+0xcd/0x7a0 [ 573.400106][ T31] 2 locks held by syz.2.2730/16149: [ 573.406078][ T31] #0: ffffffff9009d608 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 573.415566][ T31] #1: ffffffff8ee8e5e0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_unlock_export_doit+0x2cf/0x530 [ 573.426454][ T31] 3 locks held by syz.1.2765/16284: [ 573.432020][ T31] #0: ffffffff9009d608 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 573.440772][ T31] #1: ffff88807ac1f6e8 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0xf4/0x7b0 [ 573.451651][ T31] #2: ffffffff8ee8e5e0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_rpc_status_get_dumpit+0xdc/0x13b0 [ 573.463147][ T31] 1 lock held by syz-executor/17977: [ 573.468598][ T31] #0: ffffffff9002cd80 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x464/0x19e0 [ 573.478174][ T31] 2 locks held by syz.8.3349/18796: [ 573.485696][ T31] #0: ffffffff9002cd80 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 573.496924][ T31] #1: ffffffff8eb5ff68 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 573.508104][ T31] 2 locks held by syz.6.3352/18829: [ 573.514089][ T31] #0: ffff8880573a26e8 (nlk_cb_mutex-ROUTE){+.+.}-{4:4}, at: __netlink_dump_start+0xf4/0x7b0 [ 573.525721][ T31] #1: ffffffff9002cd80 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dumpit+0x92/0x200 [ 573.534820][ T31] 1 lock held by syz.0.3355/18836: [ 573.541370][ T31] #0: ffffffff9002cd80 (rtnl_mutex){+.+.}-{4:4}, at: fib_delrule+0x4c1/0x1d60 [ 573.552403][ T31] 3 locks held by syz.7.3356/18839: [ 573.557678][ T31] #0: ffffffff9009d608 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 573.566147][ T31] #1: ffff88802229c6e8 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0xf4/0x7b0 [ 573.577249][ T31] #2: ffffffff9002cd80 (rtnl_mutex){+.+.}-{4:4}, at: nl80211_prepare_wdev_dump+0x3f7/0x680 [ 573.590166][ T31] 1 lock held by syz.7.3356/18840: [ 573.595528][ T31] #0: ffffffff9002cd80 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x767/0xc00 [ 573.606176][ T31] 1 lock held by syz.7.3356/18841: [ 573.611462][ T31] #0: ffffffff9002cd80 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a3/0x1bd0 [ 573.620819][ T31] [ 573.623210][ T31] ============================================= [ 573.623210][ T31] [ 573.631828][ T31] NMI backtrace for cpu 1 [ 573.631848][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 573.631870][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 573.631881][ T31] Call Trace: [ 573.631891][ T31] [ 573.631901][ T31] dump_stack_lvl+0xe8/0x150 [ 573.631935][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 573.632060][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 573.632090][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 573.632117][ T31] sys_info+0x135/0x170 [ 573.632138][ T31] watchdog+0xfd7/0x1030 [ 573.632168][ T31] ? watchdog+0x1c7/0x1030 [ 573.632196][ T31] kthread+0x388/0x470 [ 573.632221][ T31] ? __pfx_watchdog+0x10/0x10 [ 573.632240][ T31] ? __pfx_kthread+0x10/0x10 [ 573.632265][ T31] ret_from_fork+0x514/0xb70 [ 573.632295][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 573.632319][ T31] ? __switch_to+0xc89/0x1420 [ 573.632344][ T31] ? __pfx_kthread+0x10/0x10 [ 573.632370][ T31] ret_from_fork_asm+0x1a/0x30 [ 573.632404][ T31] [ 573.632411][ T31] Sending NMI from CPU 1 to CPUs 0: [ 573.745804][ C0] NMI backtrace for cpu 0 [ 573.745823][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 573.745841][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 573.745851][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 573.745880][ C0] Code: dc 7f 02 e9 13 05 03 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d d3 aa 19 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 573.745894][ C0] RSP: 0018:ffffffff8e807de0 EFLAGS: 00000246 [ 573.745910][ C0] RAX: 00000000004f24b7 RBX: ffffffff819ab450 RCX: 0000000080000001 [ 573.745922][ C0] RDX: 0000000000000001 RSI: ffffffff8e22ba9f RDI: ffffffff8c4bda80 [ 573.745934][ C0] RBP: ffffffff8e807eb8 R08: ffff8880b86338db R09: 1ffff110170c671b [ 573.745945][ C0] R10: dffffc0000000000 R11: ffffed10170c671c R12: 0000000000000000 [ 573.745956][ C0] R13: 1ffffffff1d11de8 R14: 1ffffffff1d00fc4 R15: dffffc0000000000 [ 573.745968][ C0] FS: 0000000000000000(0000) GS:ffff888124f54000(0000) knlGS:0000000000000000 [ 573.745981][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 573.745992][ C0] CR2: 00007f1489f89d58 CR3: 00000000745c4000 CR4: 00000000003526f0 [ 573.746008][ C0] Call Trace: [ 573.746015][ C0] [ 573.746021][ C0] default_idle+0x9/0x20 [ 573.746037][ C0] default_idle_call+0x72/0xb0 [ 573.746053][ C0] do_idle+0x2e0/0x540 [ 573.746076][ C0] ? __pfx_do_idle+0x10/0x10 [ 573.746097][ C0] ? do_idle+0xc/0x540 [ 573.746116][ C0] cpu_startup_entry+0x43/0x60 [ 573.746135][ C0] rest_init+0x2de/0x300 [ 573.746153][ C0] start_kernel+0x392/0x3e0 [ 573.746241][ C0] x86_64_start_reservations+0x24/0x30 [ 573.746300][ C0] x86_64_start_kernel+0x137/0x1b0 [ 573.746319][ C0] common_startup_64+0x13e/0x157 [ 573.746344][ C0] [ 573.933677][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 573.940650][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 573.949876][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 573.960037][ T31] Call Trace: [ 573.963332][ T31] [ 573.966282][ T31] vpanic+0x56c/0xa60 [ 573.970299][ T31] ? __pfx___schedule+0x10/0x10 [ 573.975270][ T31] ? __pfx_vpanic+0x10/0x10 [ 573.979804][ T31] ? nmi_trigger_cpumask_backtrace+0x207/0x380 [ 573.986031][ T31] panic+0xc5/0xd0 [ 573.989784][ T31] ? __pfx_panic+0x10/0x10 [ 573.994237][ T31] ? preempt_schedule_common+0x82/0xd0 [ 573.999729][ T31] ? preempt_schedule_thunk+0x16/0x40 [ 574.005125][ T31] ? nmi_trigger_cpumask_backtrace+0x314/0x380 [ 574.011570][ T31] ? nmi_trigger_cpumask_backtrace+0x319/0x380 [ 574.017841][ T31] watchdog+0x1030/0x1030 [ 574.022203][ T31] ? watchdog+0x1c7/0x1030 [ 574.026657][ T31] kthread+0x388/0x470 [ 574.030758][ T31] ? __pfx_watchdog+0x10/0x10 [ 574.035554][ T31] ? __pfx_kthread+0x10/0x10 [ 574.040173][ T31] ret_from_fork+0x514/0xb70 [ 574.044877][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 574.050015][ T31] ? __switch_to+0xc89/0x1420 [ 574.054710][ T31] ? __pfx_kthread+0x10/0x10 [ 574.059341][ T31] ret_from_fork_asm+0x1a/0x30 [ 574.064133][ T31] [ 574.067331][ T31] Kernel Offset: disabled [ 574.071678][ T31] Rebooting in 86400 seconds..