last executing test programs: 5.193566836s ago: executing program 0 (id=3966): r0 = socket$inet(0xa, 0x801, 0x84) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r3}, 0x10) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r5}, 0x10) close(r4) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) (async) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xe0000000, 0x5, 0xb7, 0x2, 0x1, 0x1, 0x4, 0x3, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x4000) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002840)=ANY=[@ANYBLOB="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"/3222], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffec2}, 0x48) (async) r10 = socket(0x10, 0x803, 0x0) (async) r11 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@newtfilter={0x60, 0x2c, 0xd2b, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0xf}, {}, {0x1, 0xfff3}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x30, 0x2, [@TCA_CGROUP_EMATCHES={0x2c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0xff, 0x2, 0x1}, {0xfff8, 0x0, 0x2}}}, @TCF_EM_CONTAINER={0xc, 0x3, 0x0, 0x0, {{0x7, 0x0, 0xc}}}]}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x81}, 0x800) sendmmsg$inet_sctp(r0, &(0x7f0000001780)=[{&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @private2}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000140)="86", 0x1}], 0x1, &(0x7f0000000540)=[@dstaddrv6={0x20, 0x84, 0x8, @loopback}, @dstaddrv4={0x18, 0x84, 0x7, @private=0xa010101}], 0x38}], 0x1, 0x0) 4.749738792s ago: executing program 0 (id=3969): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002000)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="50000000090601020000000000000000030000000900020073797a31000000000500010007000000280007800c00018008000140e00000010c"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008000000"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{r3, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000040)='%-010d \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r4}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b91f04076003008cb89e00f086dd", 0x0, 0x1, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000080)=@newtaction={0x4c, 0x30, 0x101, 0x0, 0x0, {}, [{0x38, 0x1, [@m_connmark={0x34, 0x1, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x4c}}, 0x0) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff03c}, {0x6, 0x3, 0x80, 0xfffffc}]}, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="01002abd7000fedbdf250900000008000500be0000001400038005000800ff0000000800010001"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x5) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x4, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000008500000029000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r8, &(0x7f0000001300)={0x0, 0x0, &(0x7f00000012c0)={&(0x7f00000000c0)={0x18, 0x14, 0x1, 0x0, 0x0, {0x1e}, [@INET_DIAG_REQ_BYTECODE={0x4}]}, 0x18}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r7, 0x0, 0xe, 0x0, &(0x7f0000000180)="e4e647c9d9b8e9a2f2ab30da5800", 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x20, 0x52, 0x1, 0x0, 0x0, {0xa}, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x5}]}, 0x20}}, 0x40010) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x20000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="a0000000110001002cbd7000fedbdf25000000"], 0xa0}, 0x1, 0x0, 0x0, 0xc000}, 0x40) syz_emit_ethernet(0x3e, &(0x7f0000000280)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, "d3624e", 0x8, 0x11, 0xfe, @private0, @ipv4={'\x00', '\xff\xff', @multicast2}, {[], {0x4e24, 0x4e23, 0x8}}}}}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="44000000190001090000000020000000021800080002fd010000000008000100ac1414"], 0x44}}, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) 4.652657676s ago: executing program 3 (id=3971): socket$inet6(0x10, 0x3, 0x0) (async) r0 = socket$inet6(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_OCB(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r2, 0x903, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) (async) sendmsg$NL80211_CMD_LEAVE_OCB(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r2, 0x903, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, 0x0, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004040}, 0x0) (async) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, 0x0, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004040}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)=@gettfilter={0x44, 0x2e, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0xe, 0x3}, {0x9, 0x2}, {0x7, 0x9}}, [{0x8, 0xb, 0x3}, {0x8, 0xb, 0xfffffffc}, {0x8, 0xb, 0x80000000}, {0x8, 0xb, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="700200003f0007010000000000000000027c00000400fe80580201"], 0x270}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) 4.529646789s ago: executing program 0 (id=3972): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r1, 0x6, 0x1f, &(0x7f0000000040)="8d", 0x1) setsockopt$inet6_int(r1, 0x29, 0x4, &(0x7f0000000080)=0xfffffffd, 0x4) close(0x3) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1908000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000b08ed344bfc375ec0d43820000000000000000000018110000", @ANYRES32=r0, @ANYRES8=r2], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000200)='9p_protocol_dump\x00', r3}, 0x18) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='syzkaller\x00'}, 0x94) 4.178993391s ago: executing program 3 (id=3975): unshare(0x6a040000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) unshare(0x20000400) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="6801000000010104000000000000000002000000080003400000100e08000740000000002400028014000180080001"], 0x168}}, 0x4010) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001100050000000000feffffff07000000", @ANYRES32=r3, @ANYBLOB="003000000000000014001a80100004800c"], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) r4 = openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000080)={[{0x2b, 'cpu'}]}, 0x5) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000180)='cpu.weight\x00', 0x2, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[], 0x1c}}, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'macvtap0\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000640)=ANY=[@ANYBLOB="4400000010000305fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="05030200157e0000140012800c0001006d616376746170000400028008000500", @ANYRES32=r8, @ANYBLOB="080004"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x48094) write$cgroup_subtree(r4, &(0x7f0000000240)=ANY=[@ANYBLOB="2d73707520abfebe94227a5032732a3e98a9ef70a32b556ca2ff4f14615d2c2ae0c655cdb3bdab435d119e42aac091aa3e7f0ee19bb30ea27070b6b445fb6d61262362f7bcd38f68b2da495c1ff4ef79abe4b882ec0e1f40f4f4bce54286d7621b7b9d93699bdb1d2912f746b65bcefd1962ac4d5459"], 0x5) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r10, 0x29, 0x8, &(0x7f0000000000)=0x80000000, 0x4) getsockopt$inet6_buf(r10, 0x29, 0x6, &(0x7f0000001800)=""/31, &(0x7f0000000240)=0x24) poll(&(0x7f0000000040)=[{r6, 0x42}], 0x1, 0x23f679b6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, r5, 0x94173000) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r1) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)={0x190, r11, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x40004}, 0x240000c4) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x437, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x2b509}}, 0x20}, 0x1, 0x0, 0x0, 0x11}, 0x40004) 3.592741647s ago: executing program 0 (id=3980): r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) listen(r0, 0xffffffff) (async) r1 = socket$netlink(0x10, 0x3, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000810400"/20, @ANYRES32=0x0, @ANYBLOB="2084040000000000240012800b0001006d6163736563000014000280050003000800000005000a"], 0x44}}, 0x0) (async) write(r1, &(0x7f00000000c0)="29000000140005b7ff000000040860eb0101b6ff02159f02c26ed638eeb738256e06a40e07fff0797e", 0x140) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000200)=""/80, 0x50}, {&(0x7f0000000280)=""/201, 0xc9}, {&(0x7f0000000380)=""/152, 0x98}], 0x3) 3.340326287s ago: executing program 0 (id=3982): socket$inet_icmp(0x2, 0x2, 0x1) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[], 0x154}, 0x1, 0x0, 0x0, 0x24000804}, 0x400c010) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x40, &(0x7f00000000c0)=0xd95, 0x4019e2060d4e3ac7) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000018c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001240)=""/29, 0x1d}, 0xffff7fff}], 0x1, 0x20102, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000300)={'wpan4\x00'}) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x90000, 0x0) syz_emit_ethernet(0x2a, 0x0, 0x0) socket(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="64000000020605000a0000000000000000000000100003006269746d61703a706f72740005000400000000000900020073797a3000000000050005000000000005000100060000001c000780060004400000000006000540100000000800084000000074"], 0x64}}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000002c0)={'pim6reg0\x00'}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000580), r5) sendmsg$IEEE802154_LIST_PHY(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000000c0)={0x14, r6, 0x30b, 0x0, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x2400c0c3}, 0x20060000) syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), r5) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000100)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}, 0x1}, 0x18) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) read(r7, &(0x7f0000000340)=""/49, 0x31) sendmsg$IPSET_CMD_SAVE(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000080601080000000000000004000000040500010006"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="08002dbd7000fd6395aebeb50fcd6adddc5ac31ed0d1e0dbdf2517000000"], 0x14}, 0x1, 0x0, 0x0, 0x4040811}, 0x0) 2.914463379s ago: executing program 2 (id=3985): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1a, 0xc, &(0x7f0000000a40)=ANY=[@ANYRESDEC=r0], &(0x7f0000000600)='GPL\x00', 0x10000, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) 2.723209178s ago: executing program 2 (id=3987): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'tunl0\x00', &(0x7f0000000040)={'ip_vti0\x00', 0x0, 0x7, 0x20, 0x2, 0x8, {{0x36, 0x4, 0x1, 0x9, 0xd8, 0x68, 0x0, 0x0, 0x4, 0x0, @empty, @rand_addr=0x64010100, {[@ssrr={0x89, 0x7, 0x23, [@broadcast]}, @timestamp={0x44, 0x1c, 0x32, 0x0, 0x1, [0x3, 0x0, 0x7, 0x1, 0x0, 0x4]}, @ssrr={0x89, 0x23, 0xfb, [@empty, @local, @multicast2, @empty, @local, @remote, @broadcast, @multicast2]}, @noop, @timestamp_prespec={0x44, 0x14, 0x24, 0x3, 0x7, [{@local, 0x4}, {@dev={0xac, 0x14, 0x14, 0x38}, 0x1000}]}, @timestamp={0x44, 0xc, 0x1f, 0x0, 0xb, [0x81, 0x7]}, @timestamp_addr={0x44, 0x1c, 0x88, 0x1, 0x9, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3ec}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}, {@private=0xa010100, 0xfff}]}, @rr={0x7, 0xb, 0x57, [@private=0xa010101, @remote]}, @timestamp_prespec={0x44, 0x34, 0x10, 0x3, 0x6, [{@dev={0xac, 0x14, 0x14, 0x31}, 0x8}, {@local, 0xd}, {@local, 0x6}, {@private=0xa010100, 0x8}, {@local, 0x5}, {@broadcast, 0x70}]}, @end]}}}}}) sendmsg$nl_route_sched_retired(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)=@delqdisc={0xd4, 0x25, 0x10, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0x0, 0xc}, {0xb, 0x6}, {0x9, 0x2}}, [@q_dsmark={{0xb}, {0x40, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x32}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x5}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x26}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0xc}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xa}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x28, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x9}, @TCA_DSMARK_INDICES={0x6, 0x1, 0xc}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x20}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x24}]}}, @q_dsmark={{0xb}, {0x24, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x9}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x24}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x4}]}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x8000}, 0x28060800) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000300)) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x0, 0x4, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000800}, 0x40000) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000440)={0x0, 0x2}, &(0x7f0000000480)=0x8) setsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000004c0)=@assoc_value={r3}, 0x8) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x80000, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REQ_SET_REG(r5, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x24, 0x0, 0x20, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x19}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x40000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r6, &(0x7f00000008c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000880)={&(0x7f0000000680)={0x1c4, 0x1, 0x2, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}, [@CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x7}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x2}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x7}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}, @CTA_EXPECT_MASTER={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_NAT={0x84, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}, @CTA_EXPECT_NAT_TUPLE={0x4}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @remote}}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8}]}, @CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_NAT={0xc4, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x80, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x2a}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x3b}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @rand_addr=0x64010100}}}]}, @CTA_EXPECT_NAT_TUPLE={0x28, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0xc}]}, @CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}]}, 0x1c4}}, 0x40040802) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000900)={r3, 0x400, 0x2, 0x7, 0xdce, 0x1}, &(0x7f0000000940)=0x14) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000000980)={r7, @in={{0x2, 0x4e22, @multicast1}}, 0xb, 0x1, 0xfffffffa, 0x33de, 0x2e1}, &(0x7f0000000a40)=0x98) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000ac0), r5) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r8, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x28, r9, 0x200, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4085}, 0x20044000) socket$unix(0x1, 0x2, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r8, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x34, 0x0, 0x20, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xe}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008000}, 0x10000010) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r10, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x20, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x20}}, 0x80) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000dc0)={'wlan1\x00', 0x1}) shutdown(r4, 0x0) r11 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r11, 0x5411, &(0x7f0000000e00)) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e80), r5) sendmsg$NL80211_CMD_SET_KEY(r8, &(0x7f0000000f80)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000ec0)={0x68, r12, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x3f}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "f51336afc692f123e2ddbcc016"}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "aa65dad3b824c239ea0964ef3d"}]}, 0x68}}, 0x2000040) 2.264302812s ago: executing program 2 (id=3989): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) r1 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40088a01, &(0x7f0000002200)=0xc0100100) r2 = socket(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0xdd, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_STATION(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)={0x30, r8, 0xb97534d5fe9704cf, 0x70bd29, 0xfffffffc, {{0x12}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r7}]}, 0x30}, 0x1, 0x0, 0x0, 0x41}, 0x4000040) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r4}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="7a0a00ff00000000711044000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x5, 0xfffffffb}, 0x10) write(r2, &(0x7f0000000000)="240000001a005f0214f9f407000901000000000000000005000000000800040001000000", 0x24) close(0x3) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x843}, 0x44040) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002100)=ANY=[@ANYBLOB="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"], 0x1128}}, 0x28044800) 1.728354008s ago: executing program 1 (id=3993): r0 = socket(0x14, 0x2, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x42000004, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000001d40)={0x0, 0x0, &(0x7f0000001d00)={&(0x7f0000000c00)={0x14, 0x1, 0xb, 0x101, 0x70bd26, 0x25dfdbfe, {0x3, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x20048881}, 0x0) unshare(0x20000400) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x13, r2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x10, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000001400a5aae247370c6a5640000a0000c8", @ANYRES32=r5, @ANYBLOB="14000200ff020000000000000000000000000001"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r9 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r9, 0x89f8, &(0x7f0000004b80)={'tunl0\x00', &(0x7f0000004ac0)={'syztnl2\x00', 0x0, 0x8000, 0x7800, 0x0, 0x2, {{0x5, 0x4, 0x3, 0x3, 0x14, 0x64, 0x0, 0x9, 0x4, 0x0, @empty, @remote}}}}) sendmsg$DEVLINK_CMD_RATE_GET(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x34, r8, 0x701, 0x70bd25, 0x2, {0xb}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2004c840}, 0x800) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r11, {}, {}, {0xfff3}}}, 0x24}}, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2101}, 0xc, &(0x7f0000000000)={&(0x7f0000000440)={0x288, r6, 0x200, 0x70bd2b, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x9}, {0x6, 0x16, 0x7fff}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x44a}, {0x6, 0x16, 0x88}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0xd}, {0x6, 0x16, 0xff}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x100}, {0x6}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x4}, {0x6, 0x16, 0x6}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x8}, {0x6, 0x16, 0x8}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x2}, {0x6, 0x16, 0x80}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x8000}, {0x6, 0x16, 0x5}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0xfff}, {0x6, 0x16, 0x1}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x6}, {0x6, 0x16, 0x8000}, {0x5}}]}, 0x288}, 0x1, 0x0, 0x0, 0x10880}, 0x7cc9a5e0f2a96ff2) r12 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r12, 0x89f1, &(0x7f0000000700)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x9076, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0xfffd, 0xfe, 0x0, 0x0, @broadcast, @private=0xa010101}}}}) ioctl$INCFS_IOC_PERMIT_FILL(r1, 0x40046721, &(0x7f0000000240)={r0}) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000180009002dbd7000feffffdf1c140000fea0d976"], 0x1c}}, 0x4800) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) 1.649108032s ago: executing program 3 (id=3994): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x3, 0x20000000000000b9, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffefb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='console\x00', r0}, 0x18) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) r1 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000400)={r3, r2, 0x26, 0x0, @val=@netfilter={0x0, 0x1, 0xea}}, 0x20) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x108}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="280000001c00010000000000ffdbdf2507000000", @ANYRES32=r4, @ANYBLOB="805e4d0d9616aa6027c4b177a4196a5ab802e4e47ca561f0de0c1b0fd18891cbef7b2dab9bed1b0c0436698fe55b0890225993592e694e5ac1e94e810679c73422a17b5f79a5bd602313fc8648680d5ab62ae363c43a680bb378cd9d6508993ed2f9f12c84ee23f356384a31bfbbd048439aa88f2203b5b0f3c7db1ff50f1964ffb0801ab8dbac8cf76fe16b278c448a04c7fd61467aa830290700000000000000f8d895365ebd5a544a4e0c5fe9c12402e7dcc0f40235c300"/200, @ANYRES16=r6], 0x28}}, 0x40800) unshare(0xc040400) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r7, 0x107, 0xd, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000000)=0x7, 0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r8, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10001}, 0xc, &(0x7f0000000440)={&(0x7f0000000dc0)={0x2cc, r9, 0x100, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0xee, 0x74}}}}, [@NL80211_ATTR_TX_RATES={0x2a4, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0x0, 0x6, 0x8000, 0x4, 0x1000, 0x8, 0x6]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x9d20, 0x100, 0xf6, 0xfff, 0x6d2, 0x3, 0xc]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x7, 0x4, 0x1, 0x40b, 0x5, 0xfff9, 0x6]}}]}, @NL80211_BAND_60GHZ={0x38, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0xffff, 0x3, 0x9, 0x8, 0x1, 0x2, 0x9]}}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x1, 0x9, 0x60, 0x4, 0x64, 0x6c, 0x5, 0x6, 0x4, 0x60, 0x33, 0x5]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0xb8}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x64, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x6, 0x6c, 0x1, 0x13, 0x0, 0x4, 0x1b, 0x18, 0x6c, 0x6, 0x9, 0x4, 0xb, 0x6, 0xc]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfff, 0xc, 0x9, 0x2, 0xa, 0x3, 0x4, 0xff80]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x36, 0x6c, 0xa, 0x60, 0xc, 0x1, 0x30, 0x16, 0x9, 0x24]}]}, @NL80211_BAND_2GHZ={0x118, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x8e1, 0x7, 0x531, 0xf15e, 0x7, 0x8, 0x5]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x7f, 0x2, 0x1000, 0x384, 0x8069, 0x100, 0x8d20]}}, @NL80211_TXRATE_HT={0x3d, 0x2, [{0x3, 0x6}, {0x4, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x2, 0xa}, {0x0, 0x8}, {0x2, 0x8}, {0x2, 0x4}, {0x1, 0x6}, {0x4, 0x7}, {0x7, 0x4}, {0x2, 0x2}, {0x4, 0x7}, {0x2, 0x6}, {0x6, 0x1}, {0x0, 0x6}, {0x2, 0x13}, {0x6, 0x5}, {0x0, 0x2}, {0x3}, {0x1, 0xa}, {0x3, 0xa}, {0x1, 0x8}, {0x5, 0x7}, {0x6, 0x3}, {0x6, 0x3}, {0x7, 0x2}, {0x5}, {0x7}, {0x2, 0xa}, {0x2, 0xa}, {0x6, 0x9}, {0x1, 0xa}, {0x5, 0x7}, {0x1, 0x2}, {0x5, 0x3}, {0x3, 0x4}, {0x5, 0x6}, {0x6, 0x5}, {0x1, 0x8}, {0x0, 0x7}, {0x1, 0x3}, {0x7, 0x3}, {0x6, 0x1}, {0x0, 0x9}, {0x1, 0x4}, {0x0, 0x8}, {0x5, 0x1}, {0x3, 0xa}, {0x0, 0x3}, {0x3, 0x3}, {0x0, 0x7}, {0x6, 0x5}, {0x2, 0x9}, {0x0, 0xa}, {0x6, 0xa}, {0x5, 0xa}]}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x24, 0x9, 0x4, 0x5, 0xc, 0x60, 0x12, 0x24, 0x24, 0x30, 0x12, 0x36, 0x6c, 0x9, 0x6, 0x30, 0x48, 0x6c, 0x48, 0x5, 0x60, 0x6, 0x12, 0x12, 0x9, 0x1, 0x9, 0x48, 0x5, 0xc, 0x3, 0x60]}, @NL80211_TXRATE_HT={0x44, 0x2, [{0x4, 0x2}, {0x4, 0x3}, {0x5, 0x1}, {0x1, 0x8}, {0x5, 0x2}, {0x2}, {0x1, 0x4}, {0x3, 0x3}, {0x5, 0x9}, {0x4}, {0x6, 0x2}, {0x2, 0x7}, {0x2, 0x3}, {0x0, 0x8}, {0x1, 0x5}, {0x0, 0xa}, {0x7, 0x15}, {0x0, 0x3}, {0x2, 0x7}, {0x6, 0x8}, {0x4, 0xa}, {0x3, 0x4}, {0x6}, {0x5, 0x3}, {0x4, 0x7}, {0x1, 0x3}, {0x7, 0x1}, {0x1, 0x1}, {0x3, 0x8}, {0x1, 0x1}, {0x1, 0x3}, {0x7, 0x1}, {0x0, 0x4}, {0x6, 0x4}, {0x1, 0x4}, {0x0, 0x9}, {0x2, 0x9}, {0x4, 0x6}, {0x0, 0x2}, {0x4}, {0x4, 0x3}, {0x7, 0x7}, {0x2, 0x1}, {0x6, 0x5}, {0x3, 0x2}, {0x2, 0xa}, {0x5, 0x1}, {0x1}, {0x4, 0x6}, {0x0, 0x2}, {0x0, 0x3}, {0x7, 0x7}, {0x1, 0x7}, {0x1, 0x6}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x6, 0x1}, {0x3}, {0x0, 0x8}, {0x4, 0x5}, {0x1, 0x4}, {0x3, 0x4}, {0x4, 0x2}]}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x0, 0x4, 0x12, 0x24, 0xb, 0xb, 0x1b, 0x16, 0xb, 0x24, 0x48, 0xc, 0x48, 0x36, 0x12, 0x14, 0x16, 0x18, 0x1, 0x16]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7fff, 0x2, 0x2, 0x3c, 0x1, 0x0, 0x101]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x1c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x14, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_5GHZ={0x48, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xff, 0x8, 0x10, 0x81, 0x96f0, 0xd, 0x4, 0x7f]}}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x9, 0x3, 0x6c, 0x9, 0x3, 0x6, 0x0, 0x5, 0x18, 0x24, 0xc, 0x9, 0xc, 0x16, 0x48, 0x4]}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x30, 0x2, 0x3, 0x36, 0x1, 0x30, 0x3, 0x48, 0x9, 0x24, 0x4, 0xc, 0x6, 0x3, 0x9, 0x12, 0x1, 0x36, 0x60, 0x16, 0x12, 0x24, 0x6]}]}, @NL80211_BAND_6GHZ={0x2c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xb, 0x1, [0x40, 0x18, 0x1, 0x1b, 0x1b, 0x1, 0x12]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x34, 0x8000, 0x7ff, 0x4, 0x81, 0x2, 0x43]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}]}, 0x2cc}, 0x1, 0x0, 0x0, 0x4044805}, 0xc84) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000004000000040000000600000000000000", @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000062e136c42c15163a54afb10562235e83e0f501c190390427323882910e", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000380)={r11, 0x0, 0x0, 0x4}, 0x20) r12 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r12, 0x10c, 0x3, &(0x7f0000000080)=0x80, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r13, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) 1.561818215s ago: executing program 4 (id=3995): r0 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000d80)={0x7, {{0x2, 0x4e21, @multicast2}}, 0x1, 0x1, [{{0x2, 0x4e21, @multicast2}}]}, 0x90) 1.344219932s ago: executing program 2 (id=3996): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, &(0x7f0000000080)='\x00\x00', 0xfdef, 0x8080, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x2, 0xb, 0x38, 0x66, 0x0, 0x8, 0x1, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x17}}, @redirect={0x5, 0x2, 0x0, @loopback, {0x5, 0x4, 0x3, 0x17, 0x501, 0x66, 0x7f2, 0x48, 0x2f, 0xf, @empty, @remote}, "000022eb00000000"}}}}}, 0x0) sendmmsg$inet(r0, &(0x7f0000002c40)=[{{0x0, 0xffffffffffffff8c, &(0x7f0000000500)=[{&(0x7f0000000240)="a4e80a0f0cb7221a55fa11a7774edce647d4ce55e54a4a1f702e2529442db1df2bb4861b7a046daebd2e285783bba51cbb5a0b440a367a481dd299e22e6166500a3ef315b39217084c", 0x49}, {&(0x7f0000000380)="9a9dc1421462c27098d2444c3e2eeff649e942f43c9df768395a66284830aeefb11a79fb155fad2c55f808010cd0f04899e97059a0642a124686f461bc65c3597eea51a8ac832ad81639b5bc123c84eedaaa62290deae53b961d528544bc6cdd9770f12575358e22989a93ade7b6d659e90f6516de53674df3a68959be5018b5c30c7b85ecde35149d25ddef2e3aa97581915a6cf84416a1db90c18a8f3102e7bf585a3cb6615ff3d715e2d42943428e6ab0f690ff33fb73432b", 0xba}, {&(0x7f00000001c0)="11d754ff8c", 0x5}, {&(0x7f00000007c0)="39e4002f666948eb7a4c25bcc1bf120531dacc287df0a7956bf34adfd0bd0370dc5fb47800f1b9f3b8c48bf7ff5d9af8d201782eef205a5caff7cad3c3b44b383700e5cdc1751add33d0ae69491bafceaa6dc7fa997720c6e7f638d828a86ab68909264b5e117b25d1623c179cf55be2ad5d7a82cec8e8cc11584d8c11c841d9206afdbc6a6bbff6c97b9e082eba70c0c09650", 0x93}, {&(0x7f0000000580)="3daea5b8894265737bd53a6ec5c93e011772dd5f39ebbc43d6a81d511d1a8261fe08b75b67e9410faa7025396bf564a191051578cb83e66b81d97d066173968254227aa7a40618b7206bef03304c5e5bb6ff6a99ab401e661744", 0x5a}], 0x5}}], 0x1, 0x40000) r1 = socket(0x15, 0x5, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'macvlan1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r2, @ANYBLOB="800202000a00020057"], 0x48}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x40) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r5, &(0x7f0000000180), 0x400008a, 0x0) sendmsg$key(r5, &(0x7f0000000000)={0x9, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)={0x2, 0x9, 0x0, 0x9, 0x2, 0x0, 0xffffffff, 0x25dfdbfe}, 0x10}}, 0x0) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r6}, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r7, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) getsockopt(r1, 0x200000000114, 0x2710, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x600000b, 0x6e071, 0xffffffffffffffff, 0x80000000) socket$alg(0x26, 0x5, 0x0) 1.302632298s ago: executing program 4 (id=3997): r0 = socket(0x22, 0x2, 0x24) socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="210f2cbd70e9ff0000002000000008000300", @ANYRES32=r4, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000) sendmsg$NL80211_CMD_DEL_TX_TS(r0, &(0x7f0000001180)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001140)={&(0x7f0000000540)=ANY=[@ANYBLOB="98000000682c0f9368648e982d6e94a9fa6b6a9aac2b54e7294c47499f776c026106c370a47b", @ANYRES16=r3, @ANYBLOB="20002dbd7000ffdbdf256a0000000c00990003000000270000000a00060008021100000100000500d200060000000a00060008021100000100000a00060008021100000000000a00060008021100000100000a00060008021100000000000a00060008021100000000000a00060008021100000000000a000600ffffffffffff0000"], 0x88}, 0x1, 0x0, 0x0, 0x40}, 0x48044) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x220, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0x4c, 0x2, [@TCA_FLOWER_KEY_CVLAN_ID={0x6, 0x4d, 0xfa7}, @TCA_FLOWER_KEY_ETH_DST={0xa}, @TCA_FLOWER_KEY_CT_MARK={0x8, 0x5f, 0x2}, @TCA_FLOWER_KEY_ARP_SIP_MASK={0x8, 0x3a, 0xffffffff}, @TCA_FLOWER_KEY_IPV6_SRC_MASK={0x14, 0xf, [0xff000000, 0x0, 0xffffffff, 0xffffff00]}, @TCA_FLOWER_KEY_ICMPV6_TYPE={0x5}, @TCA_FLOWER_KEY_MPLS_LABEL={0x8, 0x46, 0xa1}]}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x194, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_ACT={0x90, 0x1, [@m_mirred={0x5c, 0x5, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xcdf, 0x1, 0x10000000, 0x2, 0xfffff001}, 0x4}}]}, {0xd, 0x6, "d527360c37d81b077c"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x4}}}}, @m_skbmod={0x30, 0xa, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x5, 0x1}}}}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x3}, @TCA_BPF_ACT={0xf0, 0x1, [@m_ctinfo={0xec, 0x19, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0xffff}]}, {0xb5, 0x6, "ed5c1eb99390e7d0a8730c2f4ad7eab8a255351b763e5585c30ef05596ff09fd3ea6975074d4baa7805a08bfdd7f7fa2634cbcdbba1c88eea89d70023a7b9d8d2a94daf79fa1e5bffdc60fbea174f1aa7372acb7f356da638e68d8cc0dfa35b1ef1879e8526f439300c841829ae601a7811d02b21fcc5aaa7951b03466f8a1800a4b912630d3eb9f282786ef340f4e3cb08280f71f4ee2941ec13001a2c7884372e6ba0fb2f0aaa4766f88f4e7f768d299"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}]}, 0x220}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) socket(0x10, 0x803, 0x0) (async) r5 = socket(0x10, 0x803, 0x0) sendto(r5, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) sendto(r5, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0x4, 0x4, 0xfffffffd, 0x1}, 0x10) write(r1, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000fe0000000002000008", 0x1d) (async) write(r1, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000fe0000000002000008", 0x1d) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x11, &(0x7f0000000000)=0x100000001, 0x4) (async) setsockopt$inet6_tcp_int(r7, 0x6, 0x11, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x200, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7fff}}, 0x0, 0x0, 0x3f, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a015444a131f4da58ada6556dd38ea0800000000000000d09240005c6776267517308a3d40aa1c7800"}, 0xd8) (async) setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x200, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7fff}}, 0x0, 0x0, 0x3f, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a015444a131f4da58ada6556dd38ea0800000000000000d09240005c6776267517308a3d40aa1c7800"}, 0xd8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) (async) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$int_in(r7, 0x5421, &(0x7f0000000140)=0x1) writev(r7, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) (async) writev(r7, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) close(0x4) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @multicast2}]}, &(0x7f0000000140)=0x10) 1.264851921s ago: executing program 1 (id=3998): r0 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) r1 = socket$inet(0xa, 0x801, 0x0) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000500)={0x400, {{0x2, 0x4e24, @empty}}, {{0x2, 0x4e23, @remote}}}, 0x108) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1211018c}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r3, 0x20, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3ff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x1) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x403, 0xfffefffc, 0x3d, {0x0, 0x0, 0x0, 0x0, 0x2b9}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004}, 0x4044840) 1.143845909s ago: executing program 1 (id=3999): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000001280)="b7f2288a91", 0x5) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000001040)=[{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000080)="c16a22213bc7", 0x6}, {&(0x7f0000000a80)="7ba863ad0844e1bd4dbef819ad938d2eee02cc1497ea33634963307c75b71ef12b9fbbea39f886b64512ad1872b4a443bc9cc208de87c837a95fd97febf6075d78c0403a08a84d9a3ba8cbb6ea4a407c45d4dc24888128c42aa1d6717e0edd917db8439b8b5f51eee2dceaab1ef9d195286d1b5764996c37012da4", 0x7b}], 0x2, 0x0, 0x0, 0x4c004}], 0x1, 0x51) recvmmsg(r2, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0}, 0xffffff0b}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000028c0)=""/4096, 0x1000}], 0x1}, 0xf}], 0x2, 0x2101, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x54dd5e54}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) close(0x3) 1.036621163s ago: executing program 4 (id=4000): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xc0}}, 0x0) (fail_nth: 8) 1.00836837s ago: executing program 1 (id=4001): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000000)={0x18, 0x6, {0x6, @struct={0x0, 0x2}, 0x0, 0x7c7dba40, 0x0, 0x9, 0x6, 0x3, 0x6, @struct={0xd9, 0x7f}, 0x2, 0x8, [0x1000, 0x40, 0x7, 0x10001, 0x1ff, 0x3ff]}, {0xa53, @struct={0x7fff, 0x4}, 0x0, 0x1, 0x60000, 0xffffffffffff8000, 0x4, 0x3, 0x446, @struct={0x2a18, 0x7}, 0x80000001, 0x8001, [0xfffffffffffffff5, 0x1000, 0x10, 0xc3, 0x9fab, 0x5]}, {0x0, @struct={0xa, 0x9}, 0x0, 0x80000001, 0xfba, 0x1, 0x1000, 0x6, 0x88, @struct={0xf2, 0x1c}, 0x7, 0x1, [0x2, 0x1f, 0x80000000, 0x8, 0x5, 0x40]}, {0xff, 0x5, 0x9}}) (async) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000400)={0x0, 0x9, 0x42c, 0x1}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000800)={0x0, 0x4, 0xcd}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000c00)={0xb, 0x2, {0x763, @usage=0x100000000, r1, 0x5, 0x1, 0x7fffffff, 0x3, 0x2, 0x1, @usage=0x5, 0x6, 0x3a2, [0x9, 0xd10, 0x2, 0x7fffffffffffffff, 0x6, 0x8]}, {0x7, @usage=0x8096, r2, 0x7fff, 0xfa, 0x1, 0x10000000000000, 0x0, 0x441, @struct={0x57, 0x1}, 0x6, 0xffff, [0x3, 0x2, 0x7, 0x3, 0x0, 0x7]}, {0x9, @usage=0x9, r3, 0x3, 0x6, 0x72a, 0xead5, 0x0, 0x80, @usage=0x9, 0x9, 0x7, [0x2, 0x2, 0x7, 0x4, 0x101, 0x7f]}, {0x5, 0x1, 0x9}}) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000001000)=0x2, 0x4) (async) pipe(&(0x7f0000001040)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f0000001080)={0x60000003}) getsockname$qrtr(r4, &(0x7f00000010c0), &(0x7f0000001100)=0xc) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000002, 0x10010, r6, 0x750f5000) (async) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000001180), r5) (async) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f00000011c0)=0x0) (async) r9 = getpid() r10 = ioctl$NS_GET_PARENT(r4, 0xb702, 0x0) (async) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000001200)={0x0}, &(0x7f0000001240)=0xc) (async) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000001280)=0x0) (async) r13 = getpid() sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000001480)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001440)={&(0x7f00000012c0)={0x170, r7, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r9}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r10}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r11}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r12}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r13}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r5}}]}, 0x170}, 0x1, 0x0, 0x0, 0x4010}, 0x40000) r14 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000014c0), r14) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000001500)={'veth1_to_bridge\x00'}) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r5, 0x28, 0x1, &(0x7f0000001540)=0x7678, 0x8) (async) sendmsg$DEVLINK_CMD_RATE_GET(r14, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x1c, r7, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x804}, 0xc000) (async) r15 = syz_genetlink_get_family_id$tipc2(&(0x7f00000016c0), r4) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000017c0)={&(0x7f0000001700)={0xac, r15, 0x200, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x6c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x91}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x84}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xfffffff8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x28}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x48805}, 0x5) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) recvfrom$inet(r5, &(0x7f0000001840)=""/38, 0x26, 0x2, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 574.052451ms ago: executing program 4 (id=4002): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x80002, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001840), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x18, r3, 0xe1a0b80db4190737, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8091}, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0xe20, 0x0, @remote}, 0x1c) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xfff3}}}, 0x24}}, 0x0) setsockopt$inet6_udp_int(r1, 0x88, 0x1, &(0x7f0000000080), 0x4) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40002000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000840)={0x150, 0x1, 0x2, 0x3, 0x0, 0x0, {0x3, 0x0, 0x7}, [@CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x4}, @CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @CTA_EXPECT_TUPLE={0x40, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3f}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x7}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x1}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x2}, @CTA_EXPECT_MASK={0xa8, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x3}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_HELP_NAME={0x9, 0x6, 'syz0\x00'}]}, 0x150}, 0x1, 0x0, 0x0, 0x4008801}, 0x8000) 488.605266ms ago: executing program 3 (id=4003): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, 0x0, 0x5}, 0x94) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b595000000000000000002000000", @ANYRES32=r0, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x20008824}, 0x4800) syz_emit_ethernet(0x76, &(0x7f0000000880)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4a300", 0x40, 0x3a, 0x1, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x6, {0xc, 0x6, "f6cd53", 0x200, 0x2c, 0xff, @dev={0xfe, 0x80, '\x00', 0x35}, @local, [@routing={0x2f, 0x0, 0x0, 0x5}], "13d86558da0a7f6b"}}}}}}}, 0x0) 439.512999ms ago: executing program 3 (id=4004): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="020300060c00000000000000000000200200080000000000fd00000fccc3aa000300060000000000e1000000ac141400000100ffffffffffc5de00002003000500000000000200000000feff00000000000000000000000000000080000000007016f873ff456047de7034e26bc288afc7be9f08f313a120517bcb3bf24055c361259abc0947c82629497f198fc3660d6312da4f8f358e8b5196a09da046bc381568d8aec2179141993e3ebd8f"], 0x60}, 0x1, 0x7}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000078c0)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x2}, {0x9, 0xffff}, {0xc}}}, 0x24}}, 0x0) 344.982082ms ago: executing program 0 (id=4005): bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x10, 0x6, &(0x7f0000000180)=ANY=[@ANYBLOB="180200000000000000000000000000000000080001000000950000000000000e850000002c00009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x11}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xb, &(0x7f00000009c0)=@framed={{}, [@printk={@llx, {0x3, 0x0, 0x6, 0xa, 0x1, 0xfff8, 0xa1}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe00}, {}, {}, {0x85, 0x0, 0x0, 0x76}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r1, &(0x7f0000000380)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}, {{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @private0, 0x80000001}, 0x1c, &(0x7f0000000800)=[{&(0x7f0000000180)="ed", 0x1}], 0x1}}], 0x2, 0x0) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x82, &(0x7f0000000340), &(0x7f0000000480)=0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000200001032b02000000000000001e00000008000b00341fffffffffffffff7f00"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xe8001, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) ioctl$TUNSETOFFLOAD(r2, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000000)) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r5, 0x0, 0x19, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000001400000100000000fbdbdf2502cc49cb", @ANYRES32=r4, @ANYBLOB="08000200ac1e00011400030065727370616e3000000000000000000008000400ffffffff"], 0x3c}}, 0x0) socket$inet6(0xa, 0x80000, 0x9) syz_emit_ethernet(0x3b6, &(0x7f0000000a40)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd60122d9203803afffe8000000000000000000000000000bbff02000000000000000000000000000186009078000000000000000000000000000aa78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af030200010000000500000000260004000018fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978001d06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000000b17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f0032107b8a3e100908f61640000000200fec000000000000000000000008879e66485201a0015ca83747357a0274500040000000000000000000000145e14f0e7302d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c0005d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed2bccdac38ed52867ed2665f7048df88b1bc57f96221f3f0208e674aa"], 0x0) 288.70665ms ago: executing program 2 (id=4006): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x72}, 0x2c) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, r3, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0xffffffff}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)=0x0) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r8, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) ioctl$TUNGETIFF(r8, 0x800454d2, &(0x7f0000000080)={'bridge_slave_0\x00'}) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r9) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r11], 0x1c}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0x0) sendmsg$NFC_CMD_LLC_SDREQ(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="14030000", @ANYRES16=0x0, @ANYBLOB="000029bd7000fddbdf251300000008000100", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r11, @ANYBLOB="6001138064000080070001006c6300000400010005000100260000000d0001006e6c3830323135340000000009000100405e26401a0000000d0001006e6c3830323135340000000007000100265d2d000c000100657468746f6f6c0004000100050001005c000000580000800c0001007b2a2d3a3a2a255b0d00010040295b2ccc245e2e1c0000000700010073680000040001000d0001006e6c383032313534000000000c000100657468746f6f6c000700010073680000050001007d0000004c0000800a0001007770616e330000000b00010024292f3a7d255c00070001006c6300000700010073680000040001000a0001007770616e33000000070001006c63000006000100212f0000140000800700010073680000070001007368000040000080070001006c6300000a0001007770616e330000000a00010029695d30282d0000080001003a5b5b230a0001007770616e33000000070001006c630000300013802c00008007000100736800000c000100657468746f6f6c0006000100212600000c000100657468746f6f6c0008000100", @ANYRES32=r12, @ANYBLOB="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"], 0x314}, 0x1, 0x0, 0x0, 0x24008000}, 0x4) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="639e3541", @ANYRES16=r5, @ANYBLOB="1b00000000000300000005000000180001801400020073797a5f74756e00000000000000000008000500ff0300000800038004000380"], 0x3c}}, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e1f, 0x3, 'lc\x00', 0x4, 0x81, 0x5}, {@rand_addr=0x64010102, 0x4e26, 0x0, 0xcb, 0x12d5c, 0x12d5c}}, 0x44) r13 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000300), r9) sendmsg$NLBL_CIPSOV4_C_ADD(r9, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB="e9000000", @ANYRES16=r13, @ANYBLOB="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"], 0x130}, 0x1, 0x0, 0x0, 0x8004}, 0x40800) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'sh\x00', 0x0, 0x60000000, 0xc}, {@rand_addr=0x64010102, 0x4e26, 0x12002, 0x0, 0x8001, 0x1}}, 0x44) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x200000a, 0xc3072, 0xffffffffffffffff, 0x2fd15000) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x2000) 288.479ms ago: executing program 1 (id=4007): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x44884) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd2d, 0x25dfdffd, {0x0, 0x0, 0x0, r1, {0x6}, {}, {0x8, 0xffe0}}}, 0x24}}, 0x2000c800) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 258.218381ms ago: executing program 3 (id=4008): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r0, 0x0, 0x9}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000180)) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000070"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20f42, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000002c0)='task_rename\x00', r2}, 0x18) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r3, 0x6, 0x1f, &(0x7f0000000000)='f', 0x1) bind$inet6(r3, &(0x7f0000000240)={0xa, 0x4e1c, 0xf, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x5}, 0x1c) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='task_rename\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x10, 0x4, 0x8, 0x7, 0x0, 0x1}, 0x48) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="020000000400000008000000010000008000"], 0x17) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x1d}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r5, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 191.851833ms ago: executing program 4 (id=4009): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d0000100000000000000000000000080012000200020000000000000000001000320003000000000000000000000010002b00050000000000000000000000fc020000000000000000000000000000030005000000000002000000ac1414aa0000000000000000030006000000000002"], 0x80}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00'}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001d00070f000000200300000007000000", @ANYRES32=r1, @ANYBLOB="5a0067080600050002"], 0x24}}, 0x428c4) 115.768583ms ago: executing program 1 (id=4010): r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000080)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0xd, @remote, 0x5}}, 0x24) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000002d80)={0x0, 0x0, &(0x7f0000002d40)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000000203010200000000000000000000000009000200000000470200000008000340000000000800010001"], 0x30}}, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x4, &(0x7f00000000c0)=[{0x7, 0x0, 0x9}, {0x2, 0x5, 0x2c, 0x40006}, {0xfac3, 0xee, 0x4, 0x5}, {0x1, 0x7f, 0x1, 0x80000002}]}) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2000000002030500000000000000000000000000090002"], 0x20}}, 0x0) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000005140)={0x60, r5, 0x1, 0x70bd2a, 0x3, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}, @NBD_ATTR_SOCKETS={0x40, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}, {0x30, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0x48, 0x1, 0x0, 0x1, {0x7, 0x1, r2}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4081}, 0x0) (async) connect$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}}, 0x24) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r7, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000980)={{r8, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) (async) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r10, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4) (async) shutdown(r10, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000001d80)={'nat\x00', 0x0, 0x4, 0xe8, [0xcc, 0x2, 0x2, 0x8, 0x8b77, 0x4], 0x0, 0x0, &(0x7f0000001c80)=""/232}, 0x0) (async) recvmmsg(r10, &(0x7f0000001980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/26, 0x11}}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/47}, {&(0x7f0000000100)=""/224}, {&(0x7f0000000200)=""/4096}, {&(0x7f0000001200)=""/124}, {&(0x7f0000001280)=""/60}]}}, {{&(0x7f0000001380)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x0, &(0x7f0000001840)=[{&(0x7f0000001400)=""/149}, {&(0x7f0000001b00)=""/118}, {&(0x7f0000001540)=""/188}, {&(0x7f0000001600)=""/57}, {&(0x7f0000001640)=""/135}, {&(0x7f00000014c0)=""/101}, {&(0x7f0000001780)=""/171}], 0x0, &(0x7f00000018c0)=""/176}}], 0x15cbc1ab4c0933f, 0x0, 0x0) (async) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000ffffffff18110000", @ANYRES32=r9, @ANYBLOB="0000000000000000d6080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f00000004c0)='syzkaller\x00', 0x8, 0x1001, &(0x7f00000024c0)=""/4097, 0x0, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1fd}, 0x94) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r11, 0x0, 0x2, 0x0, 0x0) sendmmsg(r11, &(0x7f00000016c0)=[{{&(0x7f0000000340)=@pptp={0x18, 0x2, {0x2, @remote}}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000240)="6509763b8e65ea3c", 0x8}], 0x1}}, {{&(0x7f0000000580)=@ethernet={0x6, @broadcast}, 0x80, &(0x7f0000000600)=[{&(0x7f00000003c0)="c7e51ad15d648b5b80e7506624aac2494bd984", 0x13}], 0x1}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000006c0)="61b4aa1b996a1e65b0ebea41db2150c20d480f72a6f124fbf4d1966b25014c7b04767b5ca3816d875c316c56990811f4271a49cae87bc2b6da940586da", 0x3d}], 0x1, &(0x7f00000009c0)=[{0x50, 0x10e, 0x78000000, "01ca374c9c7441224528fef8c7e7b189da3cd076a478534f9251578b7058d2a4881713340af3e74e6f60e208b9075646abed25963759bbcd52ae720764"}, {0x88, 0x0, 0x8, "11bf5d49626399a0c3ade778fca74cb16267ad1ca2bff0f1a3ea17a6f7c96c12eec3eec9e55d50728510168396df4426759ffa3efd408174977f93a99a226f47f8db807838e670828b5d7d27f1ed13cfd6f0da8f06d8d3ab8905ad36d85e2046fa45d97d9d4f27fed5482c3e70f21e46a5ad30"}, {0x108, 0x119, 0x0, "56be87363b10b367abe57f4917c93050d431442ab074409e3913caed3077b939391757111b537e643b5f2be75cedbf1f5cdd383050f523809979780fee72297cfb7c7bb76ea0605ebcb4012e254c0c520da040b2a13ba5bf633e11f718cc400a3afad83a9934e6c5c2fb3fd3eff5005a551c92cb1217783ddc3cd724575ecd1f4cb2bbbeb01fbdb990f550878f1699bf7808616d1ad77243eb21fbc0eb6863bfc4d5625502470a8f2e4c3d8ac46ac7a821b2868bc260b7c068c6690d883f13d0b9103e5017f530af813812b2d97cc80bf06024768b7d7391f33406e39ea3ae61ccf23d7f10b971f3b704ab9d7ac3aee7149ea0249f"}, {0x18, 0x10d, 0x8, "8d"}, {0x78, 0x10c, 0x5c, "2c413ce7edbfd1d77ee2311ff5b44a89bf5257953a11aaa822e5201e60c898e27e9f10514d01fc71e278b80abfbc467b4e81978169a8b6bcc31e0cf9c285b6d9c3998ec3e61ae12ba359e23b800d760f7635bfb344319c358338a7cbc0afb9166e9328e48c"}, {0x100, 0x0, 0x1, "39c0e8d517d36c5f179d52a6740a3adc4ad6206d6940fb5decba61f792c087d32b8bdae2be315f65e1be24ccc65ecb3790e0b70e5727bae0739fdc34b76350becf5daef7911269937b680d0614b48ea4bf98cf9e0bbfb1577c4007b72048b4b326513c1cafbe6dd9ef161355a11c7fdf45ef60c333a05a21d0aa6396a11c51954330c0d6d78c6909fd7776548d72cbadf04e270368496f83d6203eaf3f0f30004eb083dfc83f49106453b3ab5331727aac65276b2aec39aefab9cca86575cebaddbf564b92db790f32a0b6e007e885ec409fdd2716d8e5c7ac9eb36d9375f163938ee5826e501c3c56c08e21ff56"}, {0xe8, 0x10e, 0x10000, "e0de8b9dea8d27cd62fbe3b89d88e96ac6dffabb4c53ad581cc60d472362829837cb1e84f9ad06c7d29ce921af9cbd4a7616f9c0e6d3e07e987a2270d39b0ba02162debe7698789b1ab2e791c0efc73961d8748b5346bf29b2cb895c24800bb9454ade380bec72dfe58159ca70d01435d1fd07a7d7cb4ce5ca447d1cd8444c320135506108e74305b4352689a3a12b60d9b0d42be0bb5cec52725c624fcac1bee03cbd9bfa0bc1c0083842b96065b385a177c2f1e9adc959a1e4043fcbc683f646e8b137cf16290d3219a9aafcf320ee70d15303f092"}, {0x38, 0x113, 0xa07, "1ffa8feece692d589c6e8391c45f2ef4f9a132a07b7ca45346ceff6d76b5426b8815e0303cc0a58f"}, {0xb0, 0x118, 0xff, "781a64f8559a1640f42a82267609cdeb2ec1c47cca0b426f7b5abd82f848923cc9adec7d15c4087ff9cb848c08371b9394c3c91758f30b43d661d11cf52c09c05d27c2341cfcc679470735c8da798c06a8feca9ef6bb3c1e5e5fba55191556c3924d4ec255275c8a762d64bd8f7b035626c78876dd82b90270ffc8931c9999c7fb140b5de16a16400894901325eaaf180be3e385c5f6ca32cec4f5f14c"}, {0x108, 0x0, 0x5, "11dda6bb3cc2bf77a40ffe057550a27119bbdd974be7053016150589d166ba03cbcd9e838512eda49933c22a9bab8155c079198954aa84f3cceade16d1d276c81f44a3d0739e3e24faf0e3235b45e49c56335221210973de03c14658a8ea91c9df7aea978a9c1f4528fa49f4c4ad407264cdb6f7d4326bac63496dc956d89d6291b7e022e9ee32735cdc21214b1c3d9a511bc90d1acada1ae1dea027794c266302b7e124b5ed6f068253d623580a7ad1a4e630402702f0142e27e4236e0c11c2593ed456297e3e4fc61b1d952f367071f2e5a6018c2624a3635c81eea1eaf849788d5a24d3de8609b41134e2adfb9c1dd03150"}], 0x648}}, {{&(0x7f0000000740)=@generic={0x10, "6d40aa4601847719a32dfd39b2998812b9de67c3261377b844699642f1f5c84af36d7ab665eddfcd9b490e185a1bbabff8f05da5f72d7733593ecd5ff620159df80ed01f8137f9c612457ffe8dabe74e148bd72ed3ca4547369027d1c34984085f85b063da29990ad34043f42ccf797251958ebdff685b68dda00fd792bf"}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000840)="1377cdd309fc51653c5118d6f6ae740ce5237c4051dde8d4a6fc579ec69e620c9abf917f508653effb121a60cc097ea595cd9918cd2c5b8b9020ccf187515f15e8e5da5bc24d78f9e21a56a6e8ebd61d04c8ba2f13ac7787e203e4cb82ad4b357a71de7185192e5cbef6f045b8b942ec54bb64bcf5f0d3b313756e5ba4e11799e44a7958d8a9e395f37251d7957663fbe6655fe3316fbc4353fc45e6d7d40f06c34e9c40db76d4e5999818bd51c1d1ef34b8d5eda760b7e3a7e055", 0xbb}, {&(0x7f0000000900)="d95a74e600c108477e287d780204f822bd049b5250fceeb75e8539a2", 0x1c}], 0x2, &(0x7f0000001040)=[{0x48, 0x1, 0x1ff, "d0c9bfd5aad09e6b407275810f045758fab6a1df2c55605b5b83ed6d55813a439abc5bc96a0524342c00227d8ef01d501b67eaa96d7794"}, {0xc8, 0x103, 0x10, "e3aa3bb93fece0b388c46457b1416ac34b5ed35e1f806524b5ec718386da14909ec7c3c4e29eddaf8d2dfadb4350e3ac7e854d67d5e5eaa31e461fd363032530e7bf479d50447ff93c5f33103a5f1d6992de1c44a336e01aaa64f65506e998c7661fb3bc7f158aa05ac9be12bcd895c0e3a738bc3abbbb896170be835e7192751d484601eb6a502966001a37411b86baa7490a497d8fdda9cb2e6a6cf4dbc2032a623aaa8cc488e1ca24aeead25643d97138"}, {0x40, 0x0, 0xfba3, "c4daadcbc2c84b474c719def262c9914b34225860459203f10ca1d1db173b57599cf89fa5889d3b746ab23e13063af59"}, {0xd8, 0x29, 0x7, "0eefabfb02b5fe3445a5671bcf3b266fb7d3a60e0e2912685a9f946986ea87c807598381badc14e0ed905e88dcce0156fc481646f8fe410283d73bb071e6abde93362c5b27da5bf392328b51253c80061ac5d0bba1ebcf4acbe15ce1c3d07f904f2e2255c0ea731083b2123d4fad4605f08775d3db2019c5359ba25a704deed3c3a12c127f7dabbac43c84f4eacf35d8f7a086433c1522687dc173cadcd542955cd82d31603f73ea355f05e24cd2999ee17de1633667e441fc1ef5061d618aaebaa2"}, {0x110, 0x0, 0xa7, "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"}, {0x108, 0x114, 0x2, "e4127f88906e6e25ef646c98dfbd7a27f3d74b4bd5ccdc69886e27d75798520ef99133dfceb0e91c8311f60a35a2a0c00acddecc1db6c36a391500adafa7f79d0dd9e14816e3f642620831332b801abdf9cbd8a9d094c2c53e6f48dfc3ca1c3d848226f9690b1f0046efd117a9d1d408afbc6a926599d2be98bcf54764c1a3922cf59aa46cce24290206b1838ba8df544944058d78effe8bba6772835690ee5d1a80edf1aa997454271c149b3d6b822b692dec36d6cc2b0f45635c96009fbc5a88a47c6cb3c5c8ac66b4dc0e1fdb6218eb1af0952badea46ab180f301a7d164597426fa14c62afc8c342aa85a5c8ecf835"}, {0x28, 0x1, 0xa9, "69bb429b4462bd34a0d5a4cd964bedeaed89f96f8fcc44"}, {0x78, 0x118, 0x5, "01b63d1540c80c4896b83fcb0484b085c9b34d6c7c693fd49236ef1cb0d7881606d728ef0edaeb12bde0cbc4c3ba500bcb25765dad15fb7f49f83e3b64913cc0fed4c0ff9eb81aeaf3caedfc8f9f164b0a062759065853a9e565c8e7b77fdca6d97784412f94"}], 0x4e0}}, {{&(0x7f0000001540)=@hci={0x1f, 0x1}, 0x80, &(0x7f0000001680)=[{&(0x7f00000015c0)="3f819af9cb1c71e6524549d688f2e62262fc3a1773fa00bc41ee62f5b78ba0535c21a734fb91a5a5c572972d80c2aea1586ae6edd6e4715d1cf1eba324b7019b9bdb50d9f27170a8e834ed7878e72c2c4a779bf90f6a6e84ca2d4d74ac1a9f431457269286155505047e55724576b978ea2dfa849d79f41fbc8420ecd56f1fdea2487ffaf4dbfd49f77288eedd", 0x8d}], 0x1, &(0x7f0000001b00)=[{0xa8, 0x1, 0x3, "113c59d27541aa1be9d065a66bfdab42d5ba8e2c25ada4c0f0913174af880c551f926458f50e8331cafdb038f6e53e8469a5385daad3434fb6e8f2ab0b4a7385f6547c3915d4e737695903985a39d5083dc56977bef1ed227c66e444620d4d4b53b02c329a453171e05b02e41cf01c5a7026289570b4c57ae5d96bb12aee1a6b4ab82591abdcfde28f37853e67e7cc01d68be7422e39"}, {0x98, 0x119, 0x7ff, "475e4eb14bae7a769e53b795587149e103a24c5fdb81d1c6b9ecedc265677773e693bdfbf289fdc78804b81ff80d216fc65f29f364fe0940bf32f0b52c3f7085ffdb46c4fb2359d47dc438f0d4b19e1b85937f579fd656f3e963e808b39bc82d3013713b9567d622a9b74bb3cca845daff9c7dfae67208e10674a90c40ed58ba4d"}, {0xe8, 0x6, 0x7, "6cbcac2bc45ffaa4e3f971bbc46d3f043aaa53e7c39b5e9a0f0ca9506d2508ebd457bc1baf93483e99846c011ca77014c378a99b73b48628967a0328538ed3533cf86008337cf1f654953c3c06d25f9231ec9ca3696463f902f08678b99a6a50e309055f15a521214af248ec955fde45c03b75e73c54cefaad16f7df471e9691c59444ba701cdfe0189a0aa386b246592e103c37d620843c462af8f2b718ff36c44a584e9ad5e3ced46eed8aba097767aed683ae75cce8075eeff6a4ae0631ca1e35efed12de69c2339bdf95b7f06eb0db158cb239b661"}, {0x70, 0x6, 0x7, "819ac8f478a7ae6b4bffd55aedd605bf5fe74889ef57c30f80fcc80ee684c91b51b6a7d1a57bcbacea3e039befb196c3422bcc0a66a8799ed7d46e04bce0c7f21891d7e225a6d884cfe8bbc5483788316a69f875820889e8b56e3d66c2136dc0"}, {0x80, 0x10d, 0x3, "955ac73e5c5f9218f36d8c72ff7a86603aec3ec844d0b65642dbc60f373d51a66f6a64a5b5c4680059dc4fbaf508815ba2ef2eb9181ac9783b50b313c0e7d0925ec38b80a3de10e7f5e6a3b62411897a66a66bce37768881635f6b913902c010d25e6943ee512f951173"}, {0x80, 0x10b, 0x8, "5e33afad0f96b7fa225864bf90f9103636c8e6887035702c1b0ee21556330aa704084d5e6db6db03c1c0d91ad600ebc9dfb7c8f90eaf8836a2a1f549c75e5fa5f6fdcd81570fe9184a280e893c8741d63af65bc23ba7acec40c7cf4313805f27a16b75e047519de6ff18752dc85868a4"}, {0x80, 0x10a, 0x0, "eba50b647c93ea54dab044f812ff03705abe4f43da6c20adae5f08b1fbc727f8dad29dc1d09eab180cbddc53673155f8eb4125a72c4202ef239d19dd3a611e43e6a2139472507a0d8184b0ed248d547a7583784a5f437d91c364ecf0d6dba93bebf9e6ed97debd9c3e191b71d7"}], 0x418}}], 0x5, 0x4c054) 487.86µs ago: executing program 4 (id=4011): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000a8a100000000000007010000f8ffe8ffb702000008000000b7030000000000838526000071009f400400009500000000000000304e72289319dea25a91f7755d379f0c4529ba97f0a1e4e99c5cf74856576dd6e6d7ae6e44b3adc0bd1fce84d52636b5de40ba644d8c181502aee10df4305ff27d95c4d10180000000000000585a3f57c1df2a240a444e7b693ebee7e282a750ff7c99824391a2d6e10bcba854bcb1a92c9622e4d61722fd6b77d5ff4944d4955cb519514d09d4875e0428a44a26a72228c2f005009f9b21bf027279d4ad428628796a71055fc5ee1f8c57c89ecc24d18c385e3eb12c3d0b8adbd7b87b9062be35c2160d9cb2d2f8221e7da747000000000000000000000000001bf58812126f1d5bde0a2a374c3aa3064407f75080074357b329bcfaf1795b876ea9882c9058f250c5b912fb7b87a5e8ab3b45d5b5f6ff5da2b932c023ad30b1f8537ef6dd8a7442d4c9154a552a3fa26f03172cdd2d2ba7c8f4fc142a998fb8d9cf54e3333721dc0f2dec21915eb19874208247721766981084c4d310e23fb7ea2a11b79425af53ff6c41493d58d1b729ae2957c7e56f96616c969f0718929a157c6253e9de5e2856f039de5963486a52e69c2d9eb1936c48f1231f0e004e924d4ca3fe59f275724129cdaea7cf4a5155"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) recvmsg(r1, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001880)}, 0x2) connect$packet(r1, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x82}, 0x14) r2 = accept4$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14, 0x800) setsockopt$packet_buf(r2, 0x107, 0x1, &(0x7f00000002c0)="889c29d5efbaf3a2d9e01a4ae26efc751f827c32148a344dddd5539d7ba2578f20e4d76113579dea47d5fca1", 0x2c) shutdown(r1, 0x1) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000817000001"], 0x50) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x4, 0xfc, 0x6, 0x8, 0x10, @private0, @local, 0x700, 0x40, 0x5, 0x9}}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@gettaction={0x30, 0x32, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xffffa8b4}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4804}, 0x8000) r4 = socket$rds(0x15, 0x5, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'wg1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0x10, 0xffff}, {0x1, 0x8}}}, 0x24}}, 0x40) bind$rds(r4, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r7 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180), 0x4) r8 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000002c0)="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", 0x1c0}, {&(0x7f0000000a40)="d4fa0c511aad03aa5ed217677bc41c027d9c830c439c7f821ddd78b6915cb170e7603acf9e433c2903bb6773f4b0130668a1e5b5e08d21d0b69c28ca3455aed65855c86f3d1e5789d26375a0d85eaf5e92e19c9affcf76e7a94e76556d2b104ebf645747fadc91460f4b3c94e1a89b51be4a6aa4c65285f988329a8163b69c51b801500a5bacd0463976e2960e2679ef2feee5e6ce6bb78a51fb0e15820d13e4a5aa9e0742a6f8d677ad28fea356657bb550c8311b682d9003c82267a15aa7334bc53b65b9119a1a7d905c7dd365b85c230bbad0d5d0a79819e112637819d9a187cfdf782c6127d2d4281926ab0e22f7346b616fe28ed0b9f4a0c9fdac6d3a90a9c38b5e31448a45546388c95045bc2261c238a5159ea98db9c00aeef644ae98a8cb8da3ff3b7ba14d7971910b559623af829524d83bf19f18628464076329140e0203fc75859185ccd019302afb784e41e16cf2d31db7aba83d0f500ce25fc2d7f524a04cfaa0015ea8a297477a5517f8a4ac167083a321c78070974afc897fb738fbcfeac369844fd7fc11fff502c02b7607007ead2007a18006a6ca8dc2d0119f01d7083c2ab5760ac7b24d7bf26b9030cf455a08385f9e662cbe0c3ca6e6fd4ac0c8566c0fca986c68ef7016a11d3e44253b6f2d07d53505ed58b8ad410f89425046321b4a9b27b5e767bdfa0ebf7abf3d91b319129c48853d8e5cbc4a2c5c560b007eafe03e3332f6017f3164c7f602180aad23dfe5e770fe8855f45925e342b7dfd7ddaa68b65065465cdf4d5b8d995d6e6a7042ebea3d139c6a616232eb4efd1a50d0e6db3188a8e98375fda2a7ebd4cd59b9ea626c13685b05e6cf4d484e32869fd7c7167dbfa48b1529e5dd5f5a02673c", 0x275}], 0x2}, 0x4) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r9}, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="180000002d000100000000000000000004000080040012"], 0x18}], 0x1, 0x0, 0x0, 0x24000810}, 0x4000084) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r10 = socket(0x10, 0x803, 0x0) sendto(r10, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) 0s ago: executing program 2 (id=4012): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xc0}}, 0x0) (fail_nth: 9) kernel console output (not intermixed with test programs): 8] veth0_vlan: entered promiscuous mode [ 564.840312][T16640] Bluetooth: hci4: command 0x040f tx timeout [ 564.852853][T17878] veth1_vlan: entered promiscuous mode [ 564.871063][ T9809] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 564.881326][ T9809] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 564.929666][T17878] veth0_macvtap: entered promiscuous mode [ 564.949167][T17878] veth1_macvtap: entered promiscuous mode [ 564.995501][T17878] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 565.043769][T17878] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 565.078864][ T9802] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.091508][T18119] nbd4: detected capacity change from 0 to 63 [ 565.113422][T18124] block nbd4: NBD_DISCONNECT [ 565.119535][T18124] block nbd4: Disconnected due to user request. [ 565.127673][ T9802] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.131754][T18124] block nbd4: shutting down sockets [ 565.213452][T18127] bond13: entered promiscuous mode [ 565.218736][T18127] bond13: entered allmulticast mode [ 565.241416][T18127] 8021q: adding VLAN 0 to HW filter on device bond13 [ 565.262438][ T9802] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.272079][T18135] __nla_validate_parse: 39 callbacks suppressed [ 565.272174][T18135] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3027'. [ 565.298029][ T9802] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.604635][T18149] netlink: 'syz.0.3031': attribute type 1 has an invalid length. [ 565.790141][T18149] vlan4: entered allmulticast mode [ 565.795756][T18149] bond7: entered allmulticast mode [ 565.827098][T18163] netlink: 'syz.4.3035': attribute type 1 has an invalid length. [ 565.844784][T18163] netlink: 180 bytes leftover after parsing attributes in process `syz.4.3035'. [ 565.915981][T18156] 8021q: adding VLAN 0 to HW filter on device bond0 [ 565.931339][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 565.971326][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 566.038093][T18162] syzkaller1: entered promiscuous mode [ 566.046783][T18162] syzkaller1: entered allmulticast mode [ 566.241031][ T9806] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 566.248945][ T9806] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 566.349319][T18182] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3039'. [ 566.921985][T16640] Bluetooth: hci4: command 0x040f tx timeout [ 567.196868][T18201] netlink: 184 bytes leftover after parsing attributes in process `syz.3.3045'. [ 567.326256][T18201] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3045'. [ 567.386351][T18206] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3047'. [ 567.450346][T18206] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3047'. [ 567.459371][T18206] tipc: Invalid UDP bearer configuration [ 567.459442][T18206] tipc: Enabling of bearer rejected, failed to enable media [ 567.633447][T18208] netlink: 'syz.4.3047': attribute type 3 has an invalid length. [ 568.043396][ T5872] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 568.054200][ T5872] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 568.063993][ T5872] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 568.075239][ T5872] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 568.083575][ T5872] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 568.987209][T18218] chnl_net:caif_netlink_parms(): no params data found [ 569.000521][ T5872] Bluetooth: hci4: command 0x040f tx timeout [ 569.396740][T18218] bridge0: port 1(bridge_slave_0) entered blocking state [ 569.416148][T18218] bridge0: port 1(bridge_slave_0) entered disabled state [ 569.459990][T18218] bridge_slave_0: entered allmulticast mode [ 569.492131][T18218] bridge_slave_0: entered promiscuous mode [ 569.521193][T18218] bridge0: port 2(bridge_slave_1) entered blocking state [ 569.540423][T18261] netlink: 'syz.1.3061': attribute type 1 has an invalid length. [ 569.549640][T18218] bridge0: port 2(bridge_slave_1) entered disabled state [ 569.576126][T18218] bridge_slave_1: entered allmulticast mode [ 569.593140][T18218] bridge_slave_1: entered promiscuous mode [ 569.644132][T18261] 8021q: adding VLAN 0 to HW filter on device bond2 [ 569.710453][T18260] bond2: (slave ip6erspan0): making interface the new active one [ 569.749548][T18260] bond2: (slave ip6erspan0): Enslaving as an active interface with an up link [ 569.916846][T18218] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 569.982213][T18218] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 570.122827][ T5872] Bluetooth: hci1: command tx timeout [ 570.284775][T18278] dvmrp0: entered allmulticast mode [ 570.355124][T18218] team0: Port device team_slave_0 added [ 570.382380][T18218] team0: Port device team_slave_1 added [ 570.538731][T18218] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 570.553537][T18218] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 570.719801][T18218] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 570.734089][T18218] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 570.749844][T18218] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 570.784771][T18218] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 571.055734][T18218] hsr_slave_0: entered promiscuous mode [ 571.065763][T18218] hsr_slave_1: entered promiscuous mode [ 571.077765][T18218] debugfs: 'hsr0' already exists in 'hsr' [ 571.085185][T18218] Cannot create hsr debugfs directory [ 571.271584][T18302] FAULT_INJECTION: forcing a failure. [ 571.271584][T18302] name failslab, interval 1, probability 0, space 0, times 0 [ 571.317434][T18302] CPU: 1 UID: 0 PID: 18302 Comm: syz.4.3071 Not tainted syzkaller #0 PREEMPT(full) [ 571.317485][T18302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 571.317500][T18302] Call Trace: [ 571.317509][T18302] [ 571.317519][T18302] dump_stack_lvl+0x189/0x250 [ 571.317550][T18302] ? __pfx____ratelimit+0x10/0x10 [ 571.317576][T18302] ? __pfx_dump_stack_lvl+0x10/0x10 [ 571.317601][T18302] ? __pfx__printk+0x10/0x10 [ 571.317632][T18302] ? __pfx___might_resched+0x10/0x10 [ 571.317665][T18302] ? fs_reclaim_acquire+0x7d/0x100 [ 571.317702][T18302] should_fail_ex+0x414/0x560 [ 571.317739][T18302] should_failslab+0xa8/0x100 [ 571.317770][T18302] __kmalloc_noprof+0xcb/0x4f0 [ 571.317796][T18302] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 571.317837][T18302] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 571.317877][T18302] genl_family_rcv_msg_doit+0xb8/0x300 [ 571.317917][T18302] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 571.317959][T18302] ? apparmor_capable+0x137/0x1b0 [ 571.317986][T18302] ? bpf_lsm_capable+0x9/0x20 [ 571.318012][T18302] ? security_capable+0x7e/0x2e0 [ 571.318051][T18302] genl_rcv_msg+0x60e/0x790 [ 571.318090][T18302] ? __pfx_genl_rcv_msg+0x10/0x10 [ 571.318120][T18302] ? __pfx_ieee802154_add_iface+0x10/0x10 [ 571.318174][T18302] netlink_rcv_skb+0x208/0x470 [ 571.318196][T18302] ? __lock_acquire+0xab9/0xd20 [ 571.318226][T18302] ? __pfx_genl_rcv_msg+0x10/0x10 [ 571.318259][T18302] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 571.318307][T18302] ? down_read+0x1ad/0x2e0 [ 571.318337][T18302] genl_rcv+0x28/0x40 [ 571.318366][T18302] netlink_unicast+0x82c/0x9e0 [ 571.318399][T18302] ? __pfx_netlink_unicast+0x10/0x10 [ 571.318424][T18302] ? netlink_sendmsg+0x642/0xb30 [ 571.318447][T18302] ? skb_put+0x11b/0x210 [ 571.318488][T18302] netlink_sendmsg+0x805/0xb30 [ 571.318525][T18302] ? __pfx_netlink_sendmsg+0x10/0x10 [ 571.318556][T18302] ? aa_sock_msg_perm+0xf1/0x1d0 [ 571.318592][T18302] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 571.318613][T18302] ? __pfx_netlink_sendmsg+0x10/0x10 [ 571.318638][T18302] __sock_sendmsg+0x219/0x270 [ 571.318675][T18302] ____sys_sendmsg+0x505/0x830 [ 571.318711][T18302] ? __pfx_____sys_sendmsg+0x10/0x10 [ 571.318752][T18302] ? import_iovec+0x74/0xa0 [ 571.318783][T18302] ___sys_sendmsg+0x21f/0x2a0 [ 571.318815][T18302] ? __pfx____sys_sendmsg+0x10/0x10 [ 571.318890][T18302] ? __fget_files+0x2a/0x420 [ 571.318921][T18302] ? __fget_files+0x3a0/0x420 [ 571.318966][T18302] __x64_sys_sendmsg+0x19b/0x260 [ 571.318999][T18302] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 571.319041][T18302] ? __pfx_ksys_write+0x10/0x10 [ 571.319066][T18302] ? rcu_is_watching+0x15/0xb0 [ 571.319093][T18302] ? do_syscall_64+0xbe/0x3b0 [ 571.319124][T18302] do_syscall_64+0xfa/0x3b0 [ 571.319148][T18302] ? lockdep_hardirqs_on+0x9c/0x150 [ 571.319172][T18302] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 571.319194][T18302] ? clear_bhb_loop+0x60/0xb0 [ 571.319222][T18302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 571.319243][T18302] RIP: 0033:0x7f353e58eec9 [ 571.319263][T18302] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 571.319283][T18302] RSP: 002b:00007f353f454038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 571.319306][T18302] RAX: ffffffffffffffda RBX: 00007f353e7e5fa0 RCX: 00007f353e58eec9 [ 571.319322][T18302] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000004 [ 571.319335][T18302] RBP: 00007f353f454090 R08: 0000000000000000 R09: 0000000000000000 [ 571.319349][T18302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 571.319362][T18302] R13: 00007f353e7e6038 R14: 00007f353e7e5fa0 R15: 00007ffdbb4e71c8 [ 571.319399][T18302] [ 571.436661][T18305] sctp: [Deprecated]: syz.3.3072 (pid 18305) Use of struct sctp_assoc_value in delayed_ack socket option. [ 571.436661][T18305] Use struct sctp_sack_info instead [ 571.790367][T18304] netlink: 120 bytes leftover after parsing attributes in process `syz.3.3072'. [ 571.913959][T18218] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 572.023617][T18218] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 572.133142][T18218] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 572.185656][T18326] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3078'. [ 572.206497][ T5872] Bluetooth: hci1: command tx timeout [ 572.237063][T18218] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 572.391291][T18338] FAULT_INJECTION: forcing a failure. [ 572.391291][T18338] name failslab, interval 1, probability 0, space 0, times 0 [ 572.418575][T18338] CPU: 0 UID: 0 PID: 18338 Comm: syz.3.3082 Not tainted syzkaller #0 PREEMPT(full) [ 572.418610][T18338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 572.418624][T18338] Call Trace: [ 572.418633][T18338] [ 572.418649][T18338] dump_stack_lvl+0x189/0x250 [ 572.418680][T18338] ? __pfx____ratelimit+0x10/0x10 [ 572.418712][T18338] ? __pfx_dump_stack_lvl+0x10/0x10 [ 572.418744][T18338] ? __pfx__printk+0x10/0x10 [ 572.418774][T18338] ? do_raw_spin_lock+0x121/0x290 [ 572.418801][T18338] ? __pfx_klist_class_dev_put+0x10/0x10 [ 572.418851][T18338] ? __pfx_klist_class_dev_put+0x10/0x10 [ 572.418887][T18338] should_fail_ex+0x414/0x560 [ 572.418925][T18338] should_failslab+0xa8/0x100 [ 572.418959][T18338] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 572.418995][T18338] ? __pfx_class_find_device+0x10/0x10 [ 572.419025][T18338] ? __alloc_skb+0x112/0x2d0 [ 572.419056][T18338] __alloc_skb+0x112/0x2d0 [ 572.419087][T18338] ieee802154_nl_new_reply+0x2e/0x100 [ 572.419123][T18338] ieee802154_add_iface+0x287/0x7d0 [ 572.419165][T18338] ? __pfx_ieee802154_add_iface+0x10/0x10 [ 572.419215][T18338] ? __nla_parse+0x40/0x60 [ 572.419242][T18338] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 572.419286][T18338] genl_family_rcv_msg_doit+0x212/0x300 [ 572.419328][T18338] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 572.419377][T18338] ? bpf_lsm_capable+0x9/0x20 [ 572.419404][T18338] ? security_capable+0x7e/0x2e0 [ 572.419445][T18338] genl_rcv_msg+0x60e/0x790 [ 572.419485][T18338] ? __pfx_genl_rcv_msg+0x10/0x10 [ 572.419515][T18338] ? __pfx_ieee802154_add_iface+0x10/0x10 [ 572.419569][T18338] netlink_rcv_skb+0x208/0x470 [ 572.419593][T18338] ? __lock_acquire+0xab9/0xd20 [ 572.419623][T18338] ? __pfx_genl_rcv_msg+0x10/0x10 [ 572.419669][T18338] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 572.419723][T18338] ? down_read+0x1ad/0x2e0 [ 572.419753][T18338] genl_rcv+0x28/0x40 [ 572.419782][T18338] netlink_unicast+0x82c/0x9e0 [ 572.419816][T18338] ? __pfx_netlink_unicast+0x10/0x10 [ 572.419840][T18338] ? netlink_sendmsg+0x642/0xb30 [ 572.419862][T18338] ? skb_put+0x11b/0x210 [ 572.419893][T18338] netlink_sendmsg+0x805/0xb30 [ 572.419931][T18338] ? __pfx_netlink_sendmsg+0x10/0x10 [ 572.419962][T18338] ? aa_sock_msg_perm+0xf1/0x1d0 [ 572.420000][T18338] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 572.420022][T18338] ? __pfx_netlink_sendmsg+0x10/0x10 [ 572.420049][T18338] __sock_sendmsg+0x219/0x270 [ 572.420089][T18338] ____sys_sendmsg+0x505/0x830 [ 572.420126][T18338] ? __pfx_____sys_sendmsg+0x10/0x10 [ 572.420166][T18338] ? import_iovec+0x74/0xa0 [ 572.420199][T18338] ___sys_sendmsg+0x21f/0x2a0 [ 572.420231][T18338] ? __pfx____sys_sendmsg+0x10/0x10 [ 572.420303][T18338] ? __fget_files+0x2a/0x420 [ 572.420334][T18338] ? __fget_files+0x3a0/0x420 [ 572.420378][T18338] __x64_sys_sendmsg+0x19b/0x260 [ 572.420411][T18338] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 572.420453][T18338] ? __pfx_ksys_write+0x10/0x10 [ 572.420479][T18338] ? rcu_is_watching+0x15/0xb0 [ 572.420506][T18338] ? do_syscall_64+0xbe/0x3b0 [ 572.420534][T18338] do_syscall_64+0xfa/0x3b0 [ 572.420554][T18338] ? lockdep_hardirqs_on+0x9c/0x150 [ 572.420575][T18338] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 572.420595][T18338] ? clear_bhb_loop+0x60/0xb0 [ 572.420620][T18338] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 572.420646][T18338] RIP: 0033:0x7fc6e798eec9 [ 572.420664][T18338] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 572.420682][T18338] RSP: 002b:00007fc6e885c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 572.420703][T18338] RAX: ffffffffffffffda RBX: 00007fc6e7be5fa0 RCX: 00007fc6e798eec9 [ 572.420718][T18338] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000004 [ 572.420730][T18338] RBP: 00007fc6e885c090 R08: 0000000000000000 R09: 0000000000000000 [ 572.420742][T18338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 572.420754][T18338] R13: 00007fc6e7be6038 R14: 00007fc6e7be5fa0 R15: 00007ffcf9c0d1e8 [ 572.420787][T18338] [ 573.621679][T18218] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 573.665780][T18218] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 573.687322][T18218] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 573.728419][T18218] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 573.764587][T18380] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3092'. [ 573.825232][T18377] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3090'. [ 573.877094][T18383] bond8: entered promiscuous mode [ 573.884639][T18383] bond8: entered allmulticast mode [ 573.891447][T18383] 8021q: adding VLAN 0 to HW filter on device bond8 [ 573.899062][T18389] netlink: 'syz.4.3093': attribute type 3 has an invalid length. [ 573.906938][T18389] netlink: 61211 bytes leftover after parsing attributes in process `syz.4.3093'. [ 574.082660][T18383] bond8 (unregistering): Released all slaves [ 574.245806][T18404] Bluetooth: MGMT ver 1.23 [ 574.280200][ T5872] Bluetooth: hci1: command tx timeout [ 574.292793][T18406] openvswitch: netlink: Message has 5424 unknown bytes. [ 574.321614][T18406] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 574.357078][T18218] 8021q: adding VLAN 0 to HW filter on device bond0 [ 574.392686][T18218] 8021q: adding VLAN 0 to HW filter on device team0 [ 574.434005][ T9808] bridge0: port 1(bridge_slave_0) entered blocking state [ 574.441296][ T9808] bridge0: port 1(bridge_slave_0) entered forwarding state [ 574.470339][ T9808] bridge0: port 2(bridge_slave_1) entered blocking state [ 574.477664][ T9808] bridge0: port 2(bridge_slave_1) entered forwarding state [ 574.517571][T18218] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 574.529149][T18218] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 574.734430][T18416] tipc: Enabled bearer , priority 0 [ 574.758341][T18416] syzkaller0: entered promiscuous mode [ 574.775893][T18416] syzkaller0: entered allmulticast mode [ 574.789655][T18419] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3099'. [ 574.812697][T18419] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3099'. [ 574.826075][T18416] tipc: Resetting bearer [ 574.857881][T18415] tipc: Resetting bearer [ 574.896661][T18415] tipc: Disabling bearer [ 575.039115][T18419] bond1: entered promiscuous mode [ 575.048773][T18419] bond1: entered allmulticast mode [ 575.054702][T18419] 8021q: adding VLAN 0 to HW filter on device bond1 [ 575.263811][T18218] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 575.323920][T18438] netlink: 176 bytes leftover after parsing attributes in process `syz.0.3104'. [ 575.363296][T18438] ip6gretap0: entered promiscuous mode [ 575.369645][T18438] netlink: 176 bytes leftover after parsing attributes in process `syz.0.3104'. [ 575.620243][T18448] bond1: option mode: unable to set because the bond device has slaves [ 575.693262][T18218] veth0_vlan: entered promiscuous mode [ 575.740109][T18218] veth1_vlan: entered promiscuous mode [ 575.913327][T18451] syzkaller0: entered promiscuous mode [ 575.919230][T18451] syzkaller0: entered allmulticast mode [ 576.012629][T18465] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3112'. [ 576.072323][T18470] openvswitch: netlink: Message has 4 unknown bytes. [ 576.184159][T18465] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.198913][T18474] netlink: 'syz.4.3111': attribute type 13 has an invalid length. [ 576.360162][ T5872] Bluetooth: hci1: command tx timeout [ 576.473348][T18218] veth0_macvtap: entered promiscuous mode [ 576.504254][T18465] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.527482][T18218] veth1_macvtap: entered promiscuous mode [ 576.608351][T18465] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.669412][T18218] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 576.725070][T18465] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.751299][T18218] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 576.796509][ T9808] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.830962][ T9808] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.864523][ T9808] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.880455][ T9808] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 577.152879][ T9806] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 577.212250][ T49] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 577.250093][T18505] netlink: 'syz.3.3123': attribute type 29 has an invalid length. [ 577.356607][ T9806] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 577.407462][ T9806] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 577.441280][ T9802] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 577.449525][ T9802] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 577.505929][ T9806] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 577.527477][ T9806] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 577.971636][T18530] __nla_validate_parse: 1 callbacks suppressed [ 577.971657][T18530] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3131'. [ 578.008473][T18530] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3131'. [ 578.579272][T18548] netlink: 6 bytes leftover after parsing attributes in process `syz.0.3135'. [ 578.617188][T18548] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 579.702129][T16640] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 579.713064][T16640] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 579.723310][T16640] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 579.733077][T16640] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 579.746075][T16640] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 580.398809][T18611] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3151'. [ 580.443909][T18606] netlink: 'syz.1.3149': attribute type 4 has an invalid length. [ 580.636505][T18574] chnl_net:caif_netlink_parms(): no params data found [ 580.761162][T18631] netlink: 'syz.3.3155': attribute type 9 has an invalid length. [ 580.960741][T18574] bridge0: port 1(bridge_slave_0) entered blocking state [ 580.968898][T18574] bridge0: port 1(bridge_slave_0) entered disabled state [ 580.978691][T18574] bridge_slave_0: entered allmulticast mode [ 580.987637][T18574] bridge_slave_0: entered promiscuous mode [ 580.997021][T18574] bridge0: port 2(bridge_slave_1) entered blocking state [ 581.005911][T18574] bridge0: port 2(bridge_slave_1) entered disabled state [ 581.015004][T18574] bridge_slave_1: entered allmulticast mode [ 581.024171][T18574] bridge_slave_1: entered promiscuous mode [ 581.070944][T18643] netlink: 136 bytes leftover after parsing attributes in process `syz.3.3158'. [ 581.085637][T18639] netlink: 'syz.0.3157': attribute type 1 has an invalid length. [ 581.126841][T18574] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 581.156507][T18574] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 581.284508][T18649] net veth1_virt_wifi ªªªªª: renamed from virt_wifi0 [ 581.303240][T18574] team0: Port device team_slave_0 added [ 581.311051][T18654] FAULT_INJECTION: forcing a failure. [ 581.311051][T18654] name failslab, interval 1, probability 0, space 0, times 0 [ 581.328023][T18574] team0: Port device team_slave_1 added [ 581.336465][T18654] CPU: 0 UID: 0 PID: 18654 Comm: syz.1.3161 Not tainted syzkaller #0 PREEMPT(full) [ 581.336498][T18654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 581.336511][T18654] Call Trace: [ 581.336520][T18654] [ 581.336529][T18654] dump_stack_lvl+0x189/0x250 [ 581.336560][T18654] ? __pfx____ratelimit+0x10/0x10 [ 581.336585][T18654] ? __pfx_dump_stack_lvl+0x10/0x10 [ 581.336610][T18654] ? __pfx__printk+0x10/0x10 [ 581.336648][T18654] ? __pfx___might_resched+0x10/0x10 [ 581.336688][T18654] should_fail_ex+0x414/0x560 [ 581.336726][T18654] should_failslab+0xa8/0x100 [ 581.336759][T18654] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 581.336798][T18654] ? __alloc_skb+0x112/0x2d0 [ 581.336829][T18654] __alloc_skb+0x112/0x2d0 [ 581.336859][T18654] ppp_write+0xb1/0x400 [ 581.336882][T18654] ? vfs_write+0x261/0xb30 [ 581.336907][T18654] ? __pfx_ppp_write+0x10/0x10 [ 581.336934][T18654] vfs_write+0x27e/0xb30 [ 581.336972][T18654] ? __pfx_vfs_write+0x10/0x10 [ 581.337002][T18654] ? __fget_files+0x2a/0x420 [ 581.337038][T18654] ? __fget_files+0x2a/0x420 [ 581.337074][T18654] ? __fget_files+0x3a0/0x420 [ 581.337104][T18654] ? __fget_files+0x2a/0x420 [ 581.337146][T18654] ksys_write+0x145/0x250 [ 581.337182][T18654] ? __pfx_ksys_write+0x10/0x10 [ 581.337207][T18654] ? rcu_is_watching+0x15/0xb0 [ 581.337233][T18654] ? do_syscall_64+0xbe/0x3b0 [ 581.337264][T18654] do_syscall_64+0xfa/0x3b0 [ 581.337288][T18654] ? lockdep_hardirqs_on+0x9c/0x150 [ 581.337311][T18654] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 581.337332][T18654] ? clear_bhb_loop+0x60/0xb0 [ 581.337359][T18654] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 581.337378][T18654] RIP: 0033:0x7f647098eec9 [ 581.337396][T18654] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 581.337414][T18654] RSP: 002b:00007f647173f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 581.337436][T18654] RAX: ffffffffffffffda RBX: 00007f6470be5fa0 RCX: 00007f647098eec9 [ 581.337452][T18654] RDX: 0000000000000002 RSI: 0000200000000300 RDI: 0000000000000003 [ 581.337466][T18654] RBP: 00007f647173f090 R08: 0000000000000000 R09: 0000000000000000 [ 581.337479][T18654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 581.337492][T18654] R13: 00007f6470be6038 R14: 00007f6470be5fa0 R15: 00007ffcd0f1a228 [ 581.337526][T18654] [ 581.714342][T18574] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 581.722135][T18574] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 581.749506][T18574] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 581.765239][T18574] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 581.772634][T18574] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 581.799999][T18574] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 581.810689][ T5872] Bluetooth: hci3: command tx timeout [ 582.257148][T18574] hsr_slave_0: entered promiscuous mode [ 582.264721][T18574] hsr_slave_1: entered promiscuous mode [ 582.271741][T18574] debugfs: 'hsr0' already exists in 'hsr' [ 582.277708][T18574] Cannot create hsr debugfs directory [ 582.285167][T18676] bond0: (slave gretap0): Error: Device type is different from other slaves [ 582.321484][ T9802] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 582.329473][ T9802] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 582.581775][T18690] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3170'. [ 582.628854][T18690] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3170'. [ 583.064606][T18702] netlink: 'syz.2.3174': attribute type 1 has an invalid length. [ 583.115069][T18702] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3174'. [ 583.324145][T18709] netlink: 'syz.3.3175': attribute type 1 has an invalid length. [ 583.342444][T18709] netlink: 244 bytes leftover after parsing attributes in process `syz.3.3175'. [ 583.359073][T18709] NCSI netlink: No device for ifindex 0 [ 583.494506][T18719] netlink: 'syz.2.3176': attribute type 1 has an invalid length. [ 583.747624][T18714] gretap1: entered promiscuous mode [ 583.773756][T18574] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 583.807231][T18574] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 583.831556][T18574] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 583.896391][ T5872] Bluetooth: hci3: command tx timeout [ 584.093964][T18574] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 584.176739][T18736] sctp: [Deprecated]: syz.1.3180 (pid 18736) Use of int in max_burst socket option deprecated. [ 584.176739][T18736] Use struct sctp_assoc_value instead [ 584.218719][T18731] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3179'. [ 584.497842][T18574] 8021q: adding VLAN 0 to HW filter on device bond0 [ 584.611320][T18574] 8021q: adding VLAN 0 to HW filter on device team0 [ 584.625783][ T9806] bridge0: port 1(bridge_slave_0) entered blocking state [ 584.633054][ T9806] bridge0: port 1(bridge_slave_0) entered forwarding state [ 584.673922][ T9806] bridge0: port 2(bridge_slave_1) entered blocking state [ 584.681190][ T9806] bridge0: port 2(bridge_slave_1) entered forwarding state [ 585.190134][T18774] netlink: 5636 bytes leftover after parsing attributes in process `syz.0.3187'. [ 585.223617][T18773] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3188'. [ 585.280679][T18778] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3188'. [ 585.341228][T18773] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3188'. [ 585.407448][T18781] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3189'. [ 585.633975][T18789] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 585.718112][T18574] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 585.731647][T18792] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3192'. [ 585.867246][T18799] geneve0: entered promiscuous mode [ 585.965737][ T5872] Bluetooth: hci3: command tx timeout [ 586.197988][T18809] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3194'. [ 586.401676][T18812] netlink: 'syz.1.3195': attribute type 1 has an invalid length. [ 586.465769][T18812] 8021q: adding VLAN 0 to HW filter on device bond3 [ 586.520776][T18816] bond3: (slave geneve0): making interface the new active one [ 586.534725][T18816] bond3: (slave geneve0): Enslaving as an active interface with an up link [ 586.688597][T18574] veth0_vlan: entered promiscuous mode [ 586.753273][T18574] veth1_vlan: entered promiscuous mode [ 586.910987][T18826] tipc: Started in network mode [ 586.929415][T18826] tipc: Node identity ee36c73e5a13, cluster identity 4711 [ 586.938115][T18826] tipc: Enabled bearer , priority 0 [ 587.042798][T18826] tipc: Disabling bearer [ 587.086286][T18574] veth0_macvtap: entered promiscuous mode [ 587.088851][T18837] netlink: 'syz.0.3201': attribute type 2 has an invalid length. [ 587.109611][T18839] netlink: 'syz.3.3202': attribute type 8 has an invalid length. [ 587.123407][T18574] veth1_macvtap: entered promiscuous mode [ 587.144205][T18839] bond0: entered promiscuous mode [ 587.151401][T18839] bond_slave_0: entered promiscuous mode [ 587.162522][T18839] bond_slave_1: entered promiscuous mode [ 587.171768][T18839] bond0: left promiscuous mode [ 587.176587][T18839] bond_slave_0: left promiscuous mode [ 587.182639][T18839] bond_slave_1: left promiscuous mode [ 587.306457][T18574] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 587.329267][T18574] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 587.390578][ T9806] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.399394][ T9806] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.456181][ T9806] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.477390][ T9806] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.664378][T18857] syzkaller1: entered promiscuous mode [ 587.673863][T18857] syzkaller1: entered allmulticast mode [ 587.692213][ T9803] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 587.725663][ T9803] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 587.792209][T18861] netlink: 'syz.0.3209': attribute type 12 has an invalid length. [ 587.910801][ T9803] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 587.920601][ T9803] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 588.040608][ T5872] Bluetooth: hci3: command tx timeout [ 588.101147][T18867] block nbd3: server does not support multiple connections per device. [ 588.136383][T18867] block nbd3: shutting down sockets [ 588.287885][T18873] tipc: Enabled bearer , priority 0 [ 588.308781][T18881] syzkaller0: entered promiscuous mode [ 588.320268][T18881] syzkaller0: entered allmulticast mode [ 588.389060][T18873] tipc: Resetting bearer [ 588.450308][T18871] tipc: Resetting bearer [ 588.512989][T18871] tipc: Disabling bearer [ 589.656401][T18946] netlink: 'syz.4.3223': attribute type 63 has an invalid length. [ 589.683307][T18946] __nla_validate_parse: 7 callbacks suppressed [ 589.683330][T18946] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3223'. [ 589.834890][T18951] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3224'. [ 589.994493][T16640] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 590.007226][T16640] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 590.022383][T16640] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 590.056430][T16640] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 590.070628][T16640] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 590.538183][T18974] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3226'. [ 590.568150][ T9806] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 590.706393][ T9806] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 590.735586][T18982] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3231'. [ 590.769368][T18983] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3231'. [ 590.824664][ T9806] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 590.908928][ T9806] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 591.144282][T18997] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3233'. [ 591.339217][ T9808] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 591.369841][ T9808] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20001 - 0 [ 591.413795][T18957] chnl_net:caif_netlink_parms(): no params data found [ 591.472242][ T9808] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 591.499088][ T9808] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20001 - 0 [ 591.643826][T19010] bond2: up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms [ 591.654277][T19010] bond2: down delay (4) is not a multiple of miimon (100), value rounded to 0 ms [ 591.669495][ T9808] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 591.690510][ T9808] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20001 - 0 [ 591.753719][ T9806] vlan3: left allmulticast mode [ 591.758933][ T9806] veth1: left allmulticast mode [ 591.787877][ T9806] vlan3: left promiscuous mode [ 591.793306][ T9806] veth1: left promiscuous mode [ 591.800233][ T9806] bridge2: port 1(vlan3) entered disabled state [ 592.120621][ T5872] Bluetooth: hci2: command tx timeout [ 592.170699][T19047] IPv6: Can't replace route, no match found [ 592.223466][T19048] netlink: 92 bytes leftover after parsing attributes in process `syz.2.3246'. [ 592.311494][ T9806] bond0 (unregistering): (slave gretap1): Releasing active interface [ 593.004739][ T9806] bond1 (unregistering): (slave vcan1): Releasing backup interface [ 593.015460][ T9806] bond1 (unregistering): (slave vcan2): Releasing backup interface [ 593.026012][ T9806] bond1 (unregistering): Released all slaves [ 593.041128][ T9806] bond2 (unregistering): Released all slaves [ 593.154959][ T9806] bond3 (unregistering): Released all slaves [ 593.170342][ T9806] bond4 (unregistering): Released all slaves [ 593.287879][ T9806] bond0 (unregistering): Released all slaves [ 593.304009][ T9806] bond5 (unregistering): Released all slaves [ 593.414000][ T9806] bond6 (unregistering): Released all slaves [ 593.428030][ T9806] bond7 (unregistering): Released all slaves [ 593.443065][ T9806] bond8 (unregistering): Released all slaves [ 593.479503][ T9798] netdevsim netdevsim0 eth4: set [0, 0] type 1 family 0 port 8472 - 0 [ 593.490033][ T9798] netdevsim netdevsim0 eth4: set [1, 0] type 2 family 0 port 20001 - 0 [ 593.697454][ T9806] tipc: Disabling bearer [ 593.723747][ T9806] tipc: Left network mode [ 593.970807][T19063] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3251'. [ 594.080846][T19063] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3251'. [ 594.084997][T19071] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3254'. [ 594.100564][T18957] bridge0: port 1(bridge_slave_0) entered blocking state [ 594.108167][T18957] bridge0: port 1(bridge_slave_0) entered disabled state [ 594.115946][T18957] bridge_slave_0: entered allmulticast mode [ 594.128756][T18957] bridge_slave_0: entered promiscuous mode [ 594.174869][T19071] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 594.201506][ T5872] Bluetooth: hci2: command tx timeout [ 594.231990][T19077] netlink: 'syz.1.3255': attribute type 1 has an invalid length. [ 594.243644][T19071] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 594.299299][T18957] bridge0: port 2(bridge_slave_1) entered blocking state [ 594.307193][T18957] bridge0: port 2(bridge_slave_1) entered disabled state [ 594.316054][T18957] bridge_slave_1: entered allmulticast mode [ 594.329629][T18957] bridge_slave_1: entered promiscuous mode [ 594.442071][T19078] bond4: (slave gretap1): making interface the new active one [ 594.461362][T19078] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 594.564100][T19079] vlan2: entered allmulticast mode [ 594.569398][T19079] bond4: entered allmulticast mode [ 594.575194][T19079] gretap1: entered allmulticast mode [ 594.583667][T19079] bond4: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 594.642764][T19089] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 594.668808][T18957] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 594.694696][T18957] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 594.749637][T19087] veth1_macvtap: left promiscuous mode [ 594.785059][T19087] macsec0: entered promiscuous mode [ 594.791365][T19087] macsec0: entered allmulticast mode [ 594.833213][T19091] veth1_macvtap: entered promiscuous mode [ 594.844545][T19091] veth1_macvtap: entered allmulticast mode [ 594.852887][T19091] macsec0: left promiscuous mode [ 594.858556][T19091] macsec0: left allmulticast mode [ 594.864319][T19091] veth1_macvtap: left allmulticast mode [ 594.934098][T18957] team0: Port device team_slave_0 added [ 595.021794][T18957] team0: Port device team_slave_1 added [ 595.196664][T18957] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 595.210588][T18957] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 595.242168][T18957] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 595.397491][T18957] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 595.480904][T18957] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 595.551080][T18957] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 595.889806][ T9806] hsr_slave_0: left promiscuous mode [ 595.926503][ T9806] pim6reg (unregistering): left allmulticast mode [ 596.029412][T19123] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3265'. [ 596.280290][ T5872] Bluetooth: hci2: command tx timeout [ 596.879198][T18957] hsr_slave_0: entered promiscuous mode [ 596.887110][T18957] hsr_slave_1: entered promiscuous mode [ 596.895266][T18957] debugfs: 'hsr0' already exists in 'hsr' [ 596.901449][T18957] Cannot create hsr debugfs directory [ 597.054807][T19134] netlink: 'syz.2.3269': attribute type 1 has an invalid length. [ 597.136561][T19134] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 597.148696][T19134] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 597.175898][T19136] gretap1: entered promiscuous mode [ 597.184703][T19136] bond3: (slave gretap1): making interface the new active one [ 597.194788][T19136] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 597.334992][T19139] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3270'. [ 597.380493][ T9806] IPVS: stop unused estimator thread 0... [ 597.409672][T19141] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3271'. [ 597.419662][T19141] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3271'. [ 597.424690][T18957] netdevsim netdevsim0 eth4 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 597.443407][T18957] netdevsim netdevsim0 eth4 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 597.588982][T19141] bond1: entered promiscuous mode [ 597.594949][T19141] bond1: entered allmulticast mode [ 597.600881][T19141] 8021q: adding VLAN 0 to HW filter on device bond1 [ 597.684593][T18957] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 597.711861][T18957] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 597.752219][T19149] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3273'. [ 597.811477][T19141] netlink: 428 bytes leftover after parsing attributes in process `syz.4.3271'. [ 597.854365][T18957] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 597.873895][T19154] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3275'. [ 597.875970][T18957] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 597.907670][T19141] netlink: 428 bytes leftover after parsing attributes in process `syz.4.3271'. [ 598.028681][T18957] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 598.053248][T18957] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 598.101790][T19157] bridge0: entered promiscuous mode [ 598.107530][T19157] macsec1: entered promiscuous mode [ 598.114555][T19157] bridge0: port 3(macsec1) entered blocking state [ 598.122160][T19157] bridge0: port 3(macsec1) entered disabled state [ 598.129195][T19157] macsec1: entered allmulticast mode [ 598.134954][T19157] bridge0: entered allmulticast mode [ 598.145145][T19157] macsec1: left allmulticast mode [ 598.152380][T19157] bridge0: left allmulticast mode [ 598.160834][T19157] bridge0: left promiscuous mode [ 598.205603][T19165] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3277'. [ 598.361445][ T5872] Bluetooth: hci2: command tx timeout [ 598.553964][T19177] netlink: 'syz.3.3281': attribute type 12 has an invalid length. [ 599.021996][T19190] 8021q: adding VLAN 0 to HW filter on device bond2 [ 599.050527][T19191] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 599.129907][ T9809] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 599.254162][ T9809] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 599.264842][T18957] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 599.367471][T18957] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 599.410550][T19214] tipc: Started in network mode [ 599.415578][T19214] tipc: Node identity 16999c4f68b9, cluster identity 4711 [ 599.423844][T19214] tipc: Enabled bearer , priority 0 [ 599.431411][T18957] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 599.478811][T18957] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 599.570809][T19214] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3286'. [ 599.597770][T19224] tipc: Resetting bearer [ 599.766136][T19210] tipc: Disabling bearer [ 600.055903][T18957] 8021q: adding VLAN 0 to HW filter on device bond0 [ 600.125363][T18957] 8021q: adding VLAN 0 to HW filter on device team0 [ 600.182297][ T9808] bridge0: port 1(bridge_slave_0) entered blocking state [ 600.189540][ T9808] bridge0: port 1(bridge_slave_0) entered forwarding state [ 600.247756][ T9813] bridge0: port 2(bridge_slave_1) entered blocking state [ 600.255051][ T9813] bridge0: port 2(bridge_slave_1) entered forwarding state [ 600.318495][T19257] bridge0: entered promiscuous mode [ 600.885715][T19284] netlink: 'syz.4.3307': attribute type 14 has an invalid length. [ 600.897366][T19284] netlink: 'syz.4.3307': attribute type 11 has an invalid length. [ 600.957749][T19285] netlink: 'syz.2.3306': attribute type 16 has an invalid length. [ 600.966144][T19285] netlink: 'syz.2.3306': attribute type 17 has an invalid length. [ 601.018802][T19285] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 601.044675][T18957] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 601.060969][T19289] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 601.068668][T19291] netlink: 'syz.3.3309': attribute type 4 has an invalid length. [ 601.080664][ T7636] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 601.085525][T19291] __nla_validate_parse: 6 callbacks suppressed [ 601.085546][T19291] netlink: 17 bytes leftover after parsing attributes in process `syz.3.3309'. [ 601.126974][T19289] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 601.147685][T19297] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3309'. [ 601.161896][T15806] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 601.185648][T19294] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3310'. [ 601.276003][T18957] veth0_vlan: entered promiscuous mode [ 601.282328][ T5957] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 601.367393][T18957] veth1_vlan: entered promiscuous mode [ 601.514591][T18957] veth0_macvtap: entered promiscuous mode [ 601.558483][T18957] veth1_macvtap: entered promiscuous mode [ 601.595929][T19310] pim6reg1: entered allmulticast mode [ 601.628001][T18957] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 601.654970][T19310] netlink: 'syz.3.3314': attribute type 39 has an invalid length. [ 601.678438][T18957] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 601.770714][ T9809] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 601.788593][ T9809] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 601.804825][T19326] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3318'. [ 601.853541][ T9809] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 601.885789][ T9809] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 601.917721][T19329] netlink: 'syz.1.3319': attribute type 1 has an invalid length. [ 601.977526][T19329] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 602.062496][T19340] netlink: 'syz.2.3321': attribute type 11 has an invalid length. [ 602.071104][ T9806] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 602.078944][ T9806] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 602.158498][ T9809] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 602.166957][ T9809] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 602.576150][T19356] syzkaller1: entered promiscuous mode [ 602.587402][T19356] syzkaller1: entered allmulticast mode [ 602.759440][T19368] vlan2: entered promiscuous mode [ 602.787098][T19368] geneve1: entered promiscuous mode [ 602.814032][T19368] vlan2: entered allmulticast mode [ 602.824138][T19368] geneve1: entered allmulticast mode [ 603.771476][T19418] netlink: 'syz.1.3344': attribute type 1 has an invalid length. [ 603.782832][T19412] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3342'. [ 603.791356][T19418] netlink: 228 bytes leftover after parsing attributes in process `syz.1.3344'. [ 603.792219][T19413] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3342'. [ 603.855216][T19420] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 604.176663][T19428] IPVS: Scheduler module ip_vs_sip not found [ 604.382253][T19447] openvswitch: netlink: Missing valid actions attribute. [ 604.460771][T19447] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 604.941739][T19464] netlink: 'syz.0.3353': attribute type 1 has an invalid length. [ 605.011676][T19469] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3353'. [ 605.024810][T19468] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3353'. [ 605.258108][T19476] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3354'. [ 605.412510][T19478] bond1: option tlb_dynamic_lb: invalid value (71) [ 605.423470][T19478] bond1 (unregistering): Released all slaves [ 605.529170][T19490] openvswitch: netlink: Message has 12 unknown bytes. [ 605.892865][T19504] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 605.978344][T19512] bond4: entered promiscuous mode [ 605.984089][T19512] bond4: entered allmulticast mode [ 605.991678][T19512] 8021q: adding VLAN 0 to HW filter on device bond4 [ 606.153394][T19520] __nla_validate_parse: 10 callbacks suppressed [ 606.153417][T19520] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3365'. [ 606.222255][T19517] netlink: 428 bytes leftover after parsing attributes in process `syz.2.3363'. [ 606.238261][T19524] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3366'. [ 606.260984][T19525] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3365'. [ 606.285345][T19517] netlink: 428 bytes leftover after parsing attributes in process `syz.2.3363'. [ 606.315989][T19528] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3365'. [ 606.447271][T19536] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3365'. [ 606.553269][T19540] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3368'. [ 606.624696][T19545] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3369'. [ 606.725570][T19545] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3369'. [ 606.841163][T19548] dvmrp0: entered allmulticast mode [ 606.918328][T19555] syzkaller0: entered promiscuous mode [ 606.927982][T19555] syzkaller0: entered allmulticast mode [ 607.545258][T19590] !: renamed from dummy0 (while UP) [ 608.189427][T19609] tipc: Started in network mode [ 608.195735][T19609] tipc: Node identity 6e9cc07aa97e, cluster identity 4711 [ 608.208539][T19609] tipc: Enabled bearer , priority 0 [ 608.254077][T19622] netlink: 'syz.3.3393': attribute type 10 has an invalid length. [ 608.277014][T19609] tipc: Resetting bearer [ 608.296873][T19622] 8021q: adding VLAN 0 to HW filter on device team0 [ 608.312124][T19622] bond0: (slave team0): Enslaving as an active interface with an up link [ 608.357239][T19608] tipc: Disabling bearer [ 608.451594][T19629] Bluetooth: MGMT ver 1.23 [ 608.490995][T19630] vlan2: entered allmulticast mode [ 608.739318][T19637] ip6gre1: entered allmulticast mode [ 608.909383][T19643] veth1_macvtap: left promiscuous mode [ 608.915375][T19643] macsec0: entered promiscuous mode [ 608.921069][T19643] macsec0: entered allmulticast mode [ 608.967623][T19643] veth1_macvtap: entered promiscuous mode [ 608.997277][T19643] veth1_macvtap: entered allmulticast mode [ 609.058940][T19643] macsec0: left promiscuous mode [ 609.067418][T19643] macsec0: left allmulticast mode [ 609.082460][T19656] IPVS: set_ctl: invalid protocol: 135 224.0.0.2:20001 [ 609.101536][T19643] veth1_macvtap: left allmulticast mode [ 609.139974][T19658] tipc: Started in network mode [ 609.145063][T19658] tipc: Node identity 6e94ad91a242, cluster identity 4711 [ 609.152576][T19658] tipc: Enabled bearer , priority 0 [ 609.363471][T19665] tipc: Enabled bearer , priority 0 [ 609.373526][T19665] syzkaller0: entered promiscuous mode [ 609.381069][T19665] syzkaller0: entered allmulticast mode [ 609.448228][T19665] tipc: Resetting bearer [ 609.492618][T19664] tipc: Resetting bearer [ 609.538835][T19664] tipc: Disabling bearer [ 609.575804][T19674] pim6reg1: entered allmulticast mode [ 609.657159][T19638] tipc: Disabling bearer [ 610.084652][T19705] erspan0: entered promiscuous mode [ 610.105253][T19705] erspan0: left promiscuous mode [ 610.748297][T19733] bond5: entered promiscuous mode [ 610.761524][T19733] bond5: entered allmulticast mode [ 610.770517][T19733] 8021q: adding VLAN 0 to HW filter on device bond5 [ 610.840625][T19741] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 610.861414][T19741] batadv_slave_0: entered promiscuous mode [ 611.160332][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 611.194576][T19760] __nla_validate_parse: 14 callbacks suppressed [ 611.194598][T19760] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3435'. [ 611.233639][T19756] bridge1: entered allmulticast mode [ 611.283033][T19756] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 611.356729][T19756] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3435'. [ 611.387210][T19756] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3435'. [ 611.485482][T19768] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3437'. [ 611.770904][T19776] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3441'. [ 611.838033][T19772] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3439'. [ 611.872291][T19776] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3441'. [ 611.954909][T19776] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3441'. [ 611.980137][T19776] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3441'. [ 612.077934][T19776] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3441'. [ 612.631755][T19776] bridge0: port 2(bridge_slave_1) entered disabled state [ 612.639826][T19776] bridge0: port 1(bridge_slave_0) entered disabled state [ 613.099637][T19776] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 613.515513][ T9808] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.624392][ T9808] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.704268][T19830] bond3: entered promiscuous mode [ 613.709383][T19830] bond3: entered allmulticast mode [ 613.723270][T19830] 8021q: adding VLAN 0 to HW filter on device bond3 [ 613.735746][ T9808] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.774027][ T9808] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 614.577883][T19859] bridge_slave_0: left promiscuous mode [ 614.584849][T19859] bridge0: port 1(bridge_slave_0) entered disabled state [ 614.625972][T19859] bridge_slave_1: left allmulticast mode [ 614.651990][T19859] bridge_slave_1: left promiscuous mode [ 614.657900][T19859] bridge0: port 2(bridge_slave_1) entered disabled state [ 614.741023][T19859] bond0: (slave bond_slave_0): Releasing backup interface [ 614.771398][T19859] bond0: (slave bond_slave_1): Releasing backup interface [ 614.906624][T19859] team0: Port device team_slave_0 removed [ 615.077390][T19859] team0: Port device team_slave_1 removed [ 615.112848][T19859] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 615.124486][T19859] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 615.135330][T19859] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 615.143637][T19859] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 615.154712][T19859] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 615.305437][T19872] netlink: 'syz.4.3459': attribute type 1 has an invalid length. [ 615.395546][T19869] A link change request failed with some changes committed already. Interface macvlan1 may have been left with an inconsistent configuration, please check. [ 615.796577][T19884] netlink: 'syz.0.3461': attribute type 13 has an invalid length. [ 615.828953][T19884] netlink: 'syz.0.3461': attribute type 17 has an invalid length. [ 615.846665][T19884] lo: entered promiscuous mode [ 615.883953][T19884] lo: entered allmulticast mode [ 615.913513][T19884] tunl0: entered promiscuous mode [ 615.918634][T19884] tunl0: entered allmulticast mode [ 615.945846][T19884] gre0: entered promiscuous mode [ 615.975198][T19884] gre0: entered allmulticast mode [ 615.984464][T19884] gretap0: entered promiscuous mode [ 615.989914][T19884] gretap0: entered allmulticast mode [ 616.005309][T19884] erspan0: entered promiscuous mode [ 616.011487][T19884] erspan0: entered allmulticast mode [ 616.024422][T19884] ip_vti0: entered promiscuous mode [ 616.030462][T19884] ip_vti0: entered allmulticast mode [ 616.038646][T19884] ip6_vti0: entered promiscuous mode [ 616.044870][T19884] ip6_vti0: entered allmulticast mode [ 616.052230][T19884] sit0: entered promiscuous mode [ 616.059227][T19884] sit0: entered allmulticast mode [ 616.066283][T19884] ip6tnl0: entered promiscuous mode [ 616.072406][T19884] ip6tnl0: entered allmulticast mode [ 616.079607][T19884] ip6gre0: entered promiscuous mode [ 616.085168][T19884] ip6gre0: entered allmulticast mode [ 616.094133][T19884] syz_tun: entered promiscuous mode [ 616.099639][T19884] syz_tun: entered allmulticast mode [ 616.118194][T19884] ip6gretap0: entered promiscuous mode [ 616.123979][T19884] ip6gretap0: entered allmulticast mode [ 616.145872][T19884] bridge0: entered promiscuous mode [ 616.151308][T19884] bridge0: entered allmulticast mode [ 616.170344][T19884] vcan0: entered promiscuous mode [ 616.175529][T19884] vcan0: entered allmulticast mode [ 616.192794][T19884] bond0: entered promiscuous mode [ 616.198058][T19884] bond0: entered allmulticast mode [ 616.206977][T19884] team0: entered promiscuous mode [ 616.212439][T19884] team0: entered allmulticast mode [ 616.221078][T19884] dummy0: entered promiscuous mode [ 616.226343][T19884] dummy0: entered allmulticast mode [ 616.234232][T19884] nlmon0: entered promiscuous mode [ 616.240512][T19884] nlmon0: entered allmulticast mode [ 616.253285][T19884] caif0: entered promiscuous mode [ 616.258449][T19884] caif0: entered allmulticast mode [ 616.263781][T19884] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 616.501420][T19894] __nla_validate_parse: 156 callbacks suppressed [ 616.501443][T19894] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3464'. [ 616.605125][T19897] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3465'. [ 616.651635][T19899] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3467'. [ 616.664464][T19899] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3467'. [ 616.896014][T19899] bond2: entered promiscuous mode [ 616.928355][T19899] bond2: entered allmulticast mode [ 616.933885][T19916] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3471'. [ 616.984019][T19899] 8021q: adding VLAN 0 to HW filter on device bond2 [ 617.003046][T19921] netlink: 'syz.3.3471': attribute type 1 has an invalid length. [ 617.033588][T19921] netlink: 'syz.3.3471': attribute type 11 has an invalid length. [ 617.052377][T19921] netlink: 220 bytes leftover after parsing attributes in process `syz.3.3471'. [ 617.071026][T19923] IPVS: set_ctl: invalid protocol: 43 224.0.0.2:0 [ 617.085337][T19905] netlink: 428 bytes leftover after parsing attributes in process `syz.4.3467'. [ 617.127437][T19920] netlink: 'syz.1.3470': attribute type 3 has an invalid length. [ 617.136506][T19923] tipc: Enabling of bearer rejected, failed to enable media [ 617.166071][T19905] netlink: 428 bytes leftover after parsing attributes in process `syz.4.3467'. [ 617.178503][T19925] netdevsim netdevsim3: loading /lib/firmware// failed with error -22 [ 617.193024][T19925] netdevsim netdevsim3: Direct firmware load for / failed with error -22 [ 617.203450][T19925] netdevsim netdevsim3: Falling back to sysfs fallback for: / [ 617.365787][T19926] vlan2: entered allmulticast mode [ 617.422151][T19931] tc_dump_action: action bad kind [ 617.448237][T19936] netlink: 'syz.2.3474': attribute type 10 has an invalid length. [ 617.485972][T19935] mac80211_hwsim hwsim50 wlan0: entered allmulticast mode [ 617.550774][T19936] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 617.562886][T19939] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3475'. [ 617.676776][T19946] netlink: 240 bytes leftover after parsing attributes in process `syz.1.3477'. [ 617.998740][T19963] syzkaller0: entered promiscuous mode [ 618.025878][T19963] syzkaller0: entered allmulticast mode [ 618.097399][T19965] bond5: entered promiscuous mode [ 618.105468][T19965] bond5: entered allmulticast mode [ 618.112052][T19965] 8021q: adding VLAN 0 to HW filter on device bond5 [ 618.188674][ T9802] nci: nci_rx_work: unknown MT 0x1 [ 618.709505][T19992] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 619.089218][T20007] bond6: entered promiscuous mode [ 619.097833][T20007] bond6: entered allmulticast mode [ 619.105114][T20007] 8021q: adding VLAN 0 to HW filter on device bond6 [ 619.325324][T20024] veth1_to_bond: entered allmulticast mode [ 619.585864][T19818] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0 [ 619.601231][T19818] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0 [ 619.639325][T19818] hid-generic 0005:16BF:5505.0001: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa [ 619.753325][T20025] veth1_to_bond (unregistering): left allmulticast mode [ 620.420685][T20075] veth0_to_bond: entered allmulticast mode [ 620.558941][T20080] netlink: 'syz.1.3514': attribute type 3 has an invalid length. [ 620.591444][T20084] netlink: 'syz.4.3517': attribute type 10 has an invalid length. [ 620.608011][T20084] dummy0: entered promiscuous mode [ 620.641739][T20084] bridge0: port 3(dummy0) entered blocking state [ 620.648463][T20084] bridge0: port 3(dummy0) entered disabled state [ 620.656508][T20084] dummy0: entered allmulticast mode [ 621.245467][T20115] bridge0: port 3(dummy0) entered blocking state [ 621.252081][T20115] bridge0: port 3(dummy0) entered forwarding state [ 621.261807][T20115] bridge0: left promiscuous mode [ 621.273518][T20115] 8021q: adding VLAN 0 to HW filter on device bond0 [ 621.281907][T20115] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 621.754884][T20140] __nla_validate_parse: 27 callbacks suppressed [ 621.754905][T20140] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3533'. [ 622.060206][T20169] tipc: Enabled bearer , priority 6 [ 622.327370][T20185] netlink: 'syz.4.3542': attribute type 1 has an invalid length. [ 622.424124][T20185] 8021q: adding VLAN 0 to HW filter on device bond3 [ 622.468978][T20195] bond3: (slave gretap1): making interface the new active one [ 622.479121][T20195] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 622.689286][T20193] bridge0: port 2(bridge_slave_1) entered disabled state [ 622.697228][T20193] bridge0: port 1(bridge_slave_0) entered disabled state [ 622.804617][T20193] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 622.823437][T20193] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 622.927810][T20193] gretap1: left promiscuous mode [ 622.935020][T20193] bond4: left promiscuous mode [ 622.940736][T20193] bond4: left allmulticast mode [ 622.949179][T20193] bond5: left promiscuous mode [ 622.954534][T20193] bond5: left allmulticast mode [ 622.961296][T20193] bond6: left promiscuous mode [ 622.966175][T20193] bond6: left allmulticast mode [ 622.981839][T20213] tipc: Enabled bearer , priority 0 [ 622.992271][ T8178] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.020590][ T9809] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.042510][ T9809] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.060114][T19818] tipc: Node number set to 3436621201 [ 623.066060][ T9809] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.114359][T20213] tipc: Disabling bearer [ 623.171396][T20234] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3552'. [ 623.243546][T20237] netlink: 'syz.3.3554': attribute type 1 has an invalid length. [ 623.316959][T20237] 8021q: adding VLAN 0 to HW filter on device bond4 [ 623.366201][T20243] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3554'. [ 623.404660][T20245] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3557'. [ 623.462392][T20246] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3557'. [ 623.471831][T20252] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3559'. [ 623.475190][T20251] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3558'. [ 623.497009][T20240] bond4: (slave veth3): Enslaving as an active interface with a down link [ 623.499834][T20251] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3558'. [ 623.520082][T20253] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3556'. [ 623.542086][T20252] bond7: entered promiscuous mode [ 623.547749][T20252] 8021q: adding VLAN 0 to HW filter on device bond7 [ 623.581463][T20240] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 623.588568][T20240] bond4: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 623.659392][T20251] bond1: entered promiscuous mode [ 623.667160][T20251] bond1: entered allmulticast mode [ 623.672840][T20251] 8021q: adding VLAN 0 to HW filter on device bond1 [ 623.715396][T20257] netlink: 428 bytes leftover after parsing attributes in process `syz.0.3558'. [ 623.871990][T20262] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 623.879637][T20262] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 623.887351][T20262] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 623.895030][T20262] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 623.902723][T20262] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 623.910406][T20262] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 623.918008][T20262] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 623.925703][T20262] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 623.933381][T20262] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 624.406101][ T8178] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 624.415713][ T8178] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 624.427398][T20298] veth1_macvtap: left promiscuous mode [ 624.461884][ T8178] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 624.473836][ T8178] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 625.253920][T20348] netlink: 'syz.0.3584': attribute type 23 has an invalid length. [ 625.638630][T20374] netlink: 'syz.4.3591': attribute type 5 has an invalid length. [ 625.781639][T20374] geneve2: entered promiscuous mode [ 625.811159][T20374] geneve2: entered allmulticast mode [ 625.869876][ T9802] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0 [ 625.903698][ T9802] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0 [ 625.950553][ T9802] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0 [ 625.969014][ T9802] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0 [ 626.291102][T20394] netlink: 'syz.0.3594': attribute type 10 has an invalid length. [ 626.330263][T20394] mac80211_hwsim hwsim51 wlan1: entered promiscuous mode [ 626.337960][T20394] mac80211_hwsim hwsim51 wlan1: entered allmulticast mode [ 626.373276][T20411] batadv_slave_1: entered promiscuous mode [ 626.388216][T20411] batadv_slave_1: left promiscuous mode [ 626.532101][T20419] netlink: 'syz.4.3601': attribute type 16 has an invalid length. [ 626.885128][T20447] __nla_validate_parse: 13 callbacks suppressed [ 626.885152][T20447] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3606'. [ 627.136360][T20454] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3608'. [ 627.187605][T20449] bridge6: port 1(veth0_to_bond) entered blocking state [ 627.218922][T20449] bridge6: port 1(veth0_to_bond) entered disabled state [ 627.240825][T20449] veth0_to_bond: entered allmulticast mode [ 627.271503][T20449] veth0_to_bond: entered promiscuous mode [ 627.280514][T20466] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3610'. [ 627.289439][T20466] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3610'. [ 627.310391][T20465] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3610'. [ 627.330552][T20453] vlan3: entered allmulticast mode [ 627.336867][T20453] veth1: entered allmulticast mode [ 627.346255][T20453] bridge6: port 2(vlan3) entered blocking state [ 627.349494][T20465] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3610'. [ 627.364977][T20453] bridge6: port 2(vlan3) entered disabled state [ 627.390030][T20466] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3610'. [ 627.403920][T20453] vlan3: entered promiscuous mode [ 627.409323][T20466] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3610'. [ 627.418497][T20453] veth1: entered promiscuous mode [ 627.427651][T20454] netlink: 576 bytes leftover after parsing attributes in process `syz.1.3608'. [ 627.508052][T20465] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3610'. [ 628.041808][T20490] netlink: 'syz.1.3617': attribute type 13 has an invalid length. [ 628.653444][T20518] netlink: 'syz.3.3623': attribute type 142 has an invalid length. [ 628.759204][T20490] tipc: Resetting bearer [ 629.241884][T20490] team0: left allmulticast mode [ 629.253443][T20490] team0: left promiscuous mode [ 629.938758][ T9808] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 631.510970][ T9808] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 631.520016][T20564] C: renamed from team_slave_0 [ 631.528783][T20564] netlink: 'syz.0.3633': attribute type 3 has an invalid length. [ 631.542762][T20564] net_ratelimit: 298 callbacks suppressed [ 631.542784][T20564] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 631.620616][ T9808] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 631.682409][ T9808] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.484716][T20595] netlink: 'syz.4.3644': attribute type 2 has an invalid length. [ 632.503540][T20596] rdma_op ffff8880227571f0 conn xmit_rdma 0000000000000000 [ 632.517587][T20598] __nla_validate_parse: 15 callbacks suppressed [ 632.517608][T20598] netlink: 9 bytes leftover after parsing attributes in process `syz.1.3643'. [ 632.558008][T20598] ..0·: renamed from hsr0 [ 632.565995][T20598] ..0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 632.577344][T20598] ..0·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 632.593133][T20598] ..0·: entered allmulticast mode [ 632.598317][T20598] hsr_slave_0: entered allmulticast mode [ 632.605197][T20598] hsr_slave_1: entered allmulticast mode [ 632.615441][T20598] A link change request failed with some changes committed already. Interface ..0· may have been left with an inconsistent configuration, please check. [ 633.735580][T20645] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3658'. [ 633.868124][T20651] netlink: 'syz.3.3660': attribute type 10 has an invalid length. [ 633.902394][T20651] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 633.922379][T20651] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 633.938840][T20652] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 633.947776][T20652] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 633.982997][T20652] bond0: (slave batadv0): Releasing backup interface [ 634.248819][T20659] syzkaller1: entered promiscuous mode [ 634.269846][T20659] syzkaller1: entered allmulticast mode [ 634.363818][T20665] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3667'. [ 634.506156][T20670] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3667'. [ 634.596788][T20681] netlink: 'syz.1.3668': attribute type 17 has an invalid length. [ 634.611323][T20681] netlink: 'syz.1.3668': attribute type 27 has an invalid length. [ 634.865205][T20694] gtp0: entered promiscuous mode [ 634.883423][T20694] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3672'. [ 635.080031][T20704] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 635.090529][T20707] netlink: 'syz.3.3675': attribute type 4 has an invalid length. [ 635.338321][T20716] dvmrp8: entered allmulticast mode [ 635.475684][T20725] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3678'. [ 636.115964][T20756] netlink: 'syz.1.3686': attribute type 1 has an invalid length. [ 636.145216][T20755] sctp: [Deprecated]: syz.3.3687 (pid 20755) Use of struct sctp_assoc_value in delayed_ack socket option. [ 636.145216][T20755] Use struct sctp_sack_info instead [ 636.249981][ T30] audit: type=1107 audit(1759362907.363:11): pid=20760 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 636.250852][T20761] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3688'. [ 636.282389][T20761] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3688'. [ 636.498906][T20761] bond4: entered promiscuous mode [ 636.508971][T20774] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3690'. [ 636.534310][T20761] bond4: entered allmulticast mode [ 636.542140][T20761] 8021q: adding VLAN 0 to HW filter on device bond4 [ 636.596153][T20776] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3691'. [ 636.989488][T20785] macvtap3: entered promiscuous mode [ 637.018359][T20785] veth1_to_hsr: entered promiscuous mode [ 637.038919][T20785] macvtap3: entered allmulticast mode [ 637.060088][T20785] veth1_to_hsr: entered allmulticast mode [ 637.888227][T20815] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3699'. [ 638.445941][T20828] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3702'. [ 638.807191][T20832] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3702'. [ 639.106056][T20842] tipc: Enabled bearer , priority 0 [ 639.140793][T20842] syzkaller0: entered promiscuous mode [ 639.146903][T20842] syzkaller0: entered allmulticast mode [ 639.203524][T20846] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3707'. [ 639.219019][T20842] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3704'. [ 639.226037][T20846] netlink: 'syz.4.3707': attribute type 1 has an invalid length. [ 639.321962][T20847] delete_channel: no stack [ 639.340130][T20851] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3707'. [ 639.435603][T20856] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3707'. [ 639.487452][T20842] tipc: Resetting bearer [ 639.508851][T20849] gretap2: entered allmulticast mode [ 639.523420][T20849] bond5: (slave gretap2): making interface the new active one [ 639.533386][T20849] bond5: (slave gretap2): Enslaving as an active interface with an up link [ 639.817471][T20841] tipc: Resetting bearer [ 639.884989][T20870] netlink: 576 bytes leftover after parsing attributes in process `syz.4.3712'. [ 639.900771][T20841] tipc: Disabling bearer [ 640.173227][T20875] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3715'. [ 640.210886][T20876] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3715'. [ 640.940296][T20918] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 641.051963][ T9798] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 641.070547][ T9798] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 641.105896][T20924] batadv0: entered promiscuous mode [ 641.114641][T20924] macvtap1: entered promiscuous mode [ 641.122004][T20924] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 641.168266][T20924] batadv0: left promiscuous mode [ 641.214887][T20929] @0Ù: renamed from bond_slave_1 [ 641.282729][T20933] tipc: Enabling of bearer rejected, failed to enable media [ 641.427673][T20940] netlink: 'syz.2.3733': attribute type 13 has an invalid length. [ 641.456349][T20940] netlink: 'syz.2.3733': attribute type 17 has an invalid length. [ 641.734945][T20940] 8021q: adding VLAN 0 to HW filter on device bond0 [ 641.745591][T20940] 8021q: adding VLAN 0 to HW filter on device team0 [ 641.762516][T20940] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 642.047061][T20948] netlink: 'syz.0.3735': attribute type 13 has an invalid length. [ 642.067005][T20948] netlink: 'syz.0.3735': attribute type 17 has an invalid length. [ 642.106130][T20948] lo: left promiscuous mode [ 642.141013][T20948] lo: left allmulticast mode [ 642.158897][T20948] tunl0: left promiscuous mode [ 642.183655][T20948] tunl0: left allmulticast mode [ 642.246085][T20948] gre0: left promiscuous mode [ 642.255214][T20948] gre0: left allmulticast mode [ 642.280786][T20948] gretap0: left promiscuous mode [ 642.286330][T20948] gretap0: left allmulticast mode [ 642.320187][T20948] erspan0: left promiscuous mode [ 642.325842][T20948] erspan0: left allmulticast mode [ 642.346155][T20948] ip_vti0: left promiscuous mode [ 642.358076][T20948] ip_vti0: left allmulticast mode [ 642.365540][T20948] ip6_vti0: left promiscuous mode [ 642.372431][T20948] ip6_vti0: left allmulticast mode [ 642.378829][T20948] sit0: left promiscuous mode [ 642.383782][T20948] sit0: left allmulticast mode [ 642.389544][T20948] ip6tnl0: left promiscuous mode [ 642.396682][T20948] ip6tnl0: left allmulticast mode [ 642.403708][T20948] ip6gre0: left promiscuous mode [ 642.408818][T20948] ip6gre0: left allmulticast mode [ 642.416846][T20948] syz_tun: left promiscuous mode [ 642.422721][T20948] syz_tun: left allmulticast mode [ 642.428843][T20948] ip6gretap0: left promiscuous mode [ 642.434475][T20948] ip6gretap0: left allmulticast mode [ 642.440994][T20948] bridge0: left promiscuous mode [ 642.447109][T20948] vcan0: left promiscuous mode [ 642.453326][T20948] vcan0: left allmulticast mode [ 642.459531][T20948] bond0: left promiscuous mode [ 642.464550][T20948] bond0: left allmulticast mode [ 642.471403][T20948] team0: left promiscuous mode [ 642.476342][T20948] team0: left allmulticast mode [ 642.483792][T20948] dummy0: left promiscuous mode [ 642.488804][T20948] dummy0: left allmulticast mode [ 642.495164][T20948] nlmon0: left promiscuous mode [ 642.500564][T20948] nlmon0: left allmulticast mode [ 642.506927][T20948] caif0: left promiscuous mode [ 642.512867][T20948] caif0: left allmulticast mode [ 642.517887][T20948] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 642.881548][T20984] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 643.183684][T20993] __nla_validate_parse: 5 callbacks suppressed [ 643.183708][T20993] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3748'. [ 643.210014][T20993] openvswitch: netlink: Key 2 has unexpected len 72 expected 4 [ 643.403529][T21011] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3750'. [ 643.594138][T20982] netlink: 'syz.0.3744': attribute type 6 has an invalid length. [ 643.645210][T21011] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3750'. [ 643.747767][T21021] macsec0: entered promiscuous mode [ 643.753673][T21021] macsec0: entered allmulticast mode [ 643.770241][T21021] veth1_macvtap: entered allmulticast mode [ 643.776547][T21021] macsec0: left promiscuous mode [ 643.782783][T21021] macsec0: left allmulticast mode [ 643.788027][T21021] veth1_macvtap: left allmulticast mode [ 644.029630][T21026] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3756'. [ 644.038345][T21024] netlink: 'syz.2.3755': attribute type 1 has an invalid length. [ 644.089442][T21026] netlink: 248 bytes leftover after parsing attributes in process `syz.0.3756'. [ 644.119141][T21024] bond9: (slave veth7): Enslaving as an active interface with a down link [ 644.707962][T21052] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3761'. [ 644.780479][T21057] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3764'. [ 644.809986][T21057] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3764'. [ 645.018135][T21076] netlink: 312 bytes leftover after parsing attributes in process `syz.0.3770'. [ 645.093117][T21080] netem: incorrect ge model size [ 645.100961][T21080] netem: change failed [ 645.184184][T21084] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3770'. [ 645.260858][T21084] dummy0: entered promiscuous mode [ 645.269279][T21084] macvtap1: entered promiscuous mode [ 645.307224][T21084] macvtap1: entered allmulticast mode [ 645.315280][T21084] dummy0: entered allmulticast mode [ 645.383566][T21088] dummy0: left allmulticast mode [ 645.407989][T21088] dummy0: left promiscuous mode [ 645.449468][T21091] ip6tnl1: entered promiscuous mode [ 645.455282][T21091] ip6tnl1: entered allmulticast mode [ 645.462840][T21091] team0: Refused to change device type [ 646.171709][T21125] tipc: Enabled bearer , priority 0 [ 646.361271][T21126] syzkaller0: entered promiscuous mode [ 646.374089][T21126] syzkaller0: entered allmulticast mode [ 646.391085][T21126] tipc: Resetting bearer [ 646.404782][T21139] tun0: tun_chr_ioctl cmd 2148553947 [ 646.461600][T21144] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 646.477621][T21126] tipc: Resetting bearer [ 647.734465][T21170] netlink: 'syz.4.3794': attribute type 1 has an invalid length. [ 648.431946][T21126] tipc: Disabling bearer [ 648.608755][T21177] __nla_validate_parse: 4 callbacks suppressed [ 648.608778][T21177] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3796'. [ 648.723871][T21182] netlink: 'syz.4.3799': attribute type 6 has an invalid length. [ 648.733880][T21182] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3799'. [ 648.739307][T21189] netlink: 'syz.1.3795': attribute type 1 has an invalid length. [ 648.746712][T21182] netlink: 'syz.4.3799': attribute type 6 has an invalid length. [ 648.771260][T21189] netlink: 228 bytes leftover after parsing attributes in process `syz.1.3795'. [ 649.003567][T21201] tc_dump_action: action bad kind [ 649.055367][T21204] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3804'. [ 649.197180][T21211] netlink: 'syz.4.3806': attribute type 10 has an invalid length. [ 649.249882][T21212] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 649.285050][T21212] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 649.603096][T21236] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3810'. [ 649.894799][T21252] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3816'. [ 649.921217][T21252] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3816'. [ 650.141398][T21264] netlink: 'syz.3.3819': attribute type 16 has an invalid length. [ 650.149416][T21264] netlink: 'syz.3.3819': attribute type 17 has an invalid length. [ 650.186193][T21264] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 650.422876][T21276] netlink: 'syz.0.3823': attribute type 1 has an invalid length. [ 650.436027][T21276] netlink: 228 bytes leftover after parsing attributes in process `syz.0.3823'. [ 650.461624][T21276] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3823'. [ 650.478533][T21276] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3823'. [ 650.726883][T21287] netlink: 'syz.1.3826': attribute type 1 has an invalid length. [ 651.299438][T21305] syz_tun: entered allmulticast mode [ 651.336541][T21305] dvmrp8: entered allmulticast mode [ 651.360481][T21309] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 651.360972][ T9809] bond0: (slave bond_slave_0): interface is now down [ 651.384197][ T9809] bond0: (slave bond_slave_1): interface is now down [ 651.442423][ T9809] bond0: (slave bond_slave_0): interface is now down [ 651.454166][ T9809] bond0: (slave bond_slave_1): interface is now down [ 651.480613][ T9798] bond0: (slave bond_slave_0): interface is now down [ 651.491501][ T9798] bond0: (slave bond_slave_1): interface is now down [ 651.513162][ T9798] bond0: now running without any active interface! [ 651.549133][T21316] veth1_to_bond: entered allmulticast mode [ 651.621290][T21305] netlink: 'syz.0.3831': attribute type 23 has an invalid length. [ 651.989502][T21330] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 652.135824][T21304] syz_tun: left allmulticast mode [ 652.154519][T21304] dvmrp8: left allmulticast mode [ 652.240833][T21312] veth1_to_bond: left allmulticast mode [ 652.776357][T21357] bond0: entered promiscuous mode [ 652.796099][T21357] bond_slave_0: entered promiscuous mode [ 652.802834][T21357] @0Ù: entered promiscuous mode [ 652.810781][T21357] syz_tun: entered promiscuous mode [ 652.819302][T21357] bond0: left promiscuous mode [ 652.825570][T21357] bond_slave_0: left promiscuous mode [ 652.832672][T21357] @0Ù: left promiscuous mode [ 652.837774][T21357] syz_tun: left promiscuous mode [ 652.969414][T21366] bond0: entered promiscuous mode [ 652.984407][T21366] bond_slave_0: entered promiscuous mode [ 652.991966][T21366] @0Ù: entered promiscuous mode [ 652.997262][T21366] syz_tun: entered promiscuous mode [ 653.008009][T21366] bond0: left promiscuous mode [ 653.014775][T21366] bond_slave_0: left promiscuous mode [ 653.027950][T21366] @0Ù: left promiscuous mode [ 653.037070][T21366] syz_tun: left promiscuous mode [ 653.063991][T21385] FAULT_INJECTION: forcing a failure. [ 653.063991][T21385] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 653.068248][T21368] : entered promiscuous mode [ 653.085697][T21385] CPU: 0 UID: 0 PID: 21385 Comm: syz.3.3856 Not tainted syzkaller #0 PREEMPT(full) [ 653.085729][T21385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 653.085744][T21385] Call Trace: [ 653.085753][T21385] [ 653.085763][T21385] dump_stack_lvl+0x189/0x250 [ 653.085802][T21385] ? __pfx____ratelimit+0x10/0x10 [ 653.085828][T21385] ? __pfx_dump_stack_lvl+0x10/0x10 [ 653.085853][T21385] ? __pfx__printk+0x10/0x10 [ 653.085883][T21385] ? __might_fault+0xb0/0x130 [ 653.085926][T21385] should_fail_ex+0x414/0x560 [ 653.085964][T21385] _copy_from_user+0x2d/0xb0 [ 653.085993][T21385] ___sys_recvmsg+0x12e/0x510 [ 653.086032][T21385] ? __pfx____sys_recvmsg+0x10/0x10 [ 653.086092][T21385] ? __fget_files+0x3a0/0x420 [ 653.086138][T21385] do_recvmmsg+0x307/0x770 [ 653.086179][T21385] ? __pfx_do_recvmmsg+0x10/0x10 [ 653.086225][T21385] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 653.086274][T21385] __x64_sys_recvmmsg+0x190/0x240 [ 653.086309][T21385] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 653.086337][T21385] ? rcu_is_watching+0x15/0xb0 [ 653.086364][T21385] ? do_syscall_64+0xbe/0x3b0 [ 653.086394][T21385] do_syscall_64+0xfa/0x3b0 [ 653.086419][T21385] ? lockdep_hardirqs_on+0x9c/0x150 [ 653.086442][T21385] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 653.086465][T21385] ? clear_bhb_loop+0x60/0xb0 [ 653.086493][T21385] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 653.086515][T21385] RIP: 0033:0x7fc6e798eec9 [ 653.086534][T21385] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 653.086554][T21385] RSP: 002b:00007fc6e885c038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 653.086577][T21385] RAX: ffffffffffffffda RBX: 00007fc6e7be5fa0 RCX: 00007fc6e798eec9 [ 653.086593][T21385] RDX: 0000000000000002 RSI: 0000200000002600 RDI: 0000000000000003 [ 653.086607][T21385] RBP: 00007fc6e885c090 R08: 0000000000000000 R09: 0000000000000000 [ 653.086620][T21385] R10: 0000000000010162 R11: 0000000000000246 R12: 0000000000000001 [ 653.086633][T21385] R13: 00007fc6e7be6038 R14: 00007fc6e7be5fa0 R15: 00007ffcf9c0d1e8 [ 653.086668][T21385] [ 653.458321][T21372] IPv6: sit1: Disabled Multicast RS [ 653.491183][T21372] sit1: entered allmulticast mode [ 653.656400][T21392] __nla_validate_parse: 17 callbacks suppressed [ 653.656424][T21392] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3858'. [ 654.532479][T21416] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3866'. [ 655.039085][T21428] IPVS: set_ctl: invalid protocol: 11 8.0.0.0:3072 [ 655.113743][T21433] FAULT_INJECTION: forcing a failure. [ 655.113743][T21433] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 655.159901][T21433] CPU: 1 UID: 0 PID: 21433 Comm: syz.3.3869 Not tainted syzkaller #0 PREEMPT(full) [ 655.159930][T21433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 655.159942][T21433] Call Trace: [ 655.159949][T21433] [ 655.159957][T21433] dump_stack_lvl+0x189/0x250 [ 655.159983][T21433] ? __pfx____ratelimit+0x10/0x10 [ 655.160004][T21433] ? __pfx_dump_stack_lvl+0x10/0x10 [ 655.160025][T21433] ? __pfx__printk+0x10/0x10 [ 655.160049][T21433] ? __might_fault+0xb0/0x130 [ 655.160084][T21433] should_fail_ex+0x414/0x560 [ 655.160116][T21433] _copy_from_user+0x2d/0xb0 [ 655.160140][T21433] ___sys_recvmsg+0x12e/0x510 [ 655.160171][T21433] ? __pfx____sys_recvmsg+0x10/0x10 [ 655.160229][T21433] ? __might_fault+0xb0/0x130 [ 655.160256][T21433] do_recvmmsg+0x307/0x770 [ 655.160290][T21433] ? __pfx_do_recvmmsg+0x10/0x10 [ 655.160328][T21433] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 655.160379][T21433] __x64_sys_recvmmsg+0x190/0x240 [ 655.160409][T21433] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 655.160433][T21433] ? rcu_is_watching+0x15/0xb0 [ 655.160456][T21433] ? do_syscall_64+0xbe/0x3b0 [ 655.160482][T21433] do_syscall_64+0xfa/0x3b0 [ 655.160501][T21433] ? lockdep_hardirqs_on+0x9c/0x150 [ 655.160521][T21433] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 655.160539][T21433] ? clear_bhb_loop+0x60/0xb0 [ 655.160562][T21433] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 655.160580][T21433] RIP: 0033:0x7fc6e798eec9 [ 655.160597][T21433] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 655.160615][T21433] RSP: 002b:00007fc6e885c038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 655.160635][T21433] RAX: ffffffffffffffda RBX: 00007fc6e7be5fa0 RCX: 00007fc6e798eec9 [ 655.160649][T21433] RDX: 0000000000000002 RSI: 0000200000002600 RDI: 0000000000000003 [ 655.160661][T21433] RBP: 00007fc6e885c090 R08: 0000000000000000 R09: 0000000000000000 [ 655.160673][T21433] R10: 0000000000010162 R11: 0000000000000246 R12: 0000000000000001 [ 655.160684][T21433] R13: 00007fc6e7be6038 R14: 00007fc6e7be5fa0 R15: 00007ffcf9c0d1e8 [ 655.160715][T21433] [ 655.674281][T21453] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3874'. [ 655.685410][T21453] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3874'. [ 656.074085][T21477] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3879'. [ 656.289025][T21477] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3879'. [ 656.449024][T21495] FAULT_INJECTION: forcing a failure. [ 656.449024][T21495] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 656.499803][T21495] CPU: 1 UID: 0 PID: 21495 Comm: syz.1.3883 Not tainted syzkaller #0 PREEMPT(full) [ 656.499835][T21495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 656.499847][T21495] Call Trace: [ 656.499856][T21495] [ 656.499866][T21495] dump_stack_lvl+0x189/0x250 [ 656.499896][T21495] ? __pfx____ratelimit+0x10/0x10 [ 656.499921][T21495] ? __pfx_dump_stack_lvl+0x10/0x10 [ 656.499945][T21495] ? __pfx__printk+0x10/0x10 [ 656.499974][T21495] ? __might_fault+0xb0/0x130 [ 656.500017][T21495] should_fail_ex+0x414/0x560 [ 656.500056][T21495] _copy_from_user+0x2d/0xb0 [ 656.500084][T21495] kstrtouint_from_user+0xc4/0x170 [ 656.500111][T21495] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 656.500155][T21495] proc_fail_nth_write+0x88/0x200 [ 656.500179][T21495] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 656.500210][T21495] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 656.500236][T21495] vfs_write+0x27e/0xb30 [ 656.500276][T21495] ? __pfx_vfs_write+0x10/0x10 [ 656.500306][T21495] ? __fget_files+0x2a/0x420 [ 656.500344][T21495] ? __fget_files+0x3a0/0x420 [ 656.500374][T21495] ? __fget_files+0x2a/0x420 [ 656.500417][T21495] ksys_write+0x145/0x250 [ 656.500448][T21495] ? __pfx_ksys_write+0x10/0x10 [ 656.500473][T21495] ? rcu_is_watching+0x15/0xb0 [ 656.500509][T21495] ? do_syscall_64+0xbe/0x3b0 [ 656.500540][T21495] do_syscall_64+0xfa/0x3b0 [ 656.500564][T21495] ? lockdep_hardirqs_on+0x9c/0x150 [ 656.500587][T21495] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 656.500610][T21495] ? clear_bhb_loop+0x60/0xb0 [ 656.500637][T21495] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 656.500658][T21495] RIP: 0033:0x7f647098d97f [ 656.500678][T21495] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 656.500698][T21495] RSP: 002b:00007f647173f030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 656.500721][T21495] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f647098d97f [ 656.500736][T21495] RDX: 0000000000000001 RSI: 00007f647173f0a0 RDI: 0000000000000004 [ 656.500750][T21495] RBP: 00007f647173f090 R08: 0000000000000000 R09: 0000000000000000 [ 656.500764][T21495] R10: 0000000000010162 R11: 0000000000000293 R12: 0000000000000001 [ 656.500777][T21495] R13: 00007f6470be6038 R14: 00007f6470be5fa0 R15: 00007ffcd0f1a228 [ 656.500815][T21495] [ 657.101547][T21512] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3888'. [ 657.188106][T21512] 8021q: adding VLAN 0 to HW filter on device bond8 [ 657.423301][T21525] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3891'. [ 657.451496][T21525] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3891'. [ 657.462541][T21525] validate_nla: 2 callbacks suppressed [ 657.462564][T21525] netlink: 'syz.3.3891': attribute type 19 has an invalid length. [ 657.514327][T21525] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3891'. [ 657.863086][T21542] netlink: 'syz.1.3894': attribute type 13 has an invalid length. [ 658.131818][T21564] netlink: 'syz.3.3899': attribute type 1 has an invalid length. [ 658.214658][T21564] 8021q: adding VLAN 0 to HW filter on device bond6 [ 658.228076][T21563] bond6: (slave wlan0): Enslaving as an active interface with a down link [ 658.344390][T21576] IPv6: addrconf: prefix option has invalid lifetime [ 658.393107][T21575] netlink: 'syz.0.3903': attribute type 1 has an invalid length. [ 658.788045][T21594] netlink: 'syz.3.3906': attribute type 32 has an invalid length. [ 658.809059][T21594] __nla_validate_parse: 6 callbacks suppressed [ 658.809101][T21594] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3906'. [ 658.845208][T21595] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3907'. [ 658.910068][T21595] netlink: 260 bytes leftover after parsing attributes in process `syz.0.3907'. [ 659.096845][T21602] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3907'. [ 659.329041][T21615] netlink: 'syz.2.3911': attribute type 1 has an invalid length. [ 659.335985][T21617] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3912'. [ 659.517253][T21622] bond10: (slave vcan1): The slave device specified does not support setting the MAC address [ 659.528114][T21622] bond10: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 659.579438][T21622] bond10: (slave vcan1): making interface the new active one [ 659.588172][T21622] bond10: (slave vcan1): Enslaving as an active interface with an up link [ 659.636149][T21615] bond10: (slave vcan2): The slave device specified does not support setting the MAC address [ 659.651544][T21615] bond10: (slave vcan2): Enslaving as a backup interface with an up link [ 659.678427][T21626] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3913'. [ 660.032380][ T9802] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 660.035794][T21629] netlink: 'syz.3.3916': attribute type 1 has an invalid length. [ 660.066657][ T9802] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 660.189938][T13508] bond6: (slave wlan0): failed to get link speed/duplex [ 660.320131][T13508] bond6: (slave wlan0): failed to get link speed/duplex [ 660.430242][ T49] bond6: (slave wlan0): failed to get link speed/duplex [ 660.488221][T21671] netlink: 'syz.4.3921': attribute type 10 has an invalid length. [ 660.504769][T21671] team0: Device ipvlan1 failed to register rx_handler [ 660.560104][ T9806] bond6: (slave wlan0): failed to get link speed/duplex [ 660.672118][ T49] bond6: (slave wlan0): failed to get link speed/duplex [ 660.782411][ T9809] bond6: (slave wlan0): failed to get link speed/duplex [ 660.900286][ T9806] bond6: (slave wlan0): failed to get link speed/duplex [ 660.919606][T21684] geneve2: entered promiscuous mode [ 660.947595][T21687] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3928'. [ 660.967584][T21684] geneve2: entered allmulticast mode [ 660.999600][T21689] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3928'. [ 661.083905][T21693] netlink: 'syz.3.3928': attribute type 2 has an invalid length. [ 661.102222][T21693] netlink: 'syz.3.3928': attribute type 2 has an invalid length. [ 663.969580][T21695] 8021q: adding VLAN 0 to HW filter on device bond0 [ 663.992895][T21695] 8021q: adding VLAN 0 to HW filter on device team0 [ 664.033257][T21695] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 664.070727][ T49] bond6: (slave wlan0): failed to get link speed/duplex [ 664.193165][T21718] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3935'. [ 664.221365][T21720] 8021q: adding VLAN 0 to HW filter on device bond2 [ 664.231461][ T9806] bond6: (slave wlan0): failed to get link speed/duplex [ 664.427899][T21729] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3939'. [ 664.478517][T21718] hsr_slave_1 (unregistering): left promiscuous mode [ 664.512021][ T9806] bond6: (slave wlan0): failed to get link speed/duplex [ 664.721211][T21736] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3941'. [ 664.878505][ T9809] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 664.930412][ T9806] bond6: (slave wlan0): failed to get link speed/duplex [ 664.968998][T21741] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3943'. [ 665.068899][T21749] validate_nla: 2 callbacks suppressed [ 665.068922][T21749] netlink: 'syz.4.3945': attribute type 1 has an invalid length. [ 665.137376][T21744] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3944'. [ 665.147077][T21744] sch_fq: defrate 0 ignored. [ 665.253559][T21753] bond6: (slave vxcan1): The slave device specified does not support setting the MAC address [ 665.267248][T21753] bond6: (slave vxcan1): Error -95 calling set_mac_address [ 665.269971][T21761] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3948'. [ 665.304043][T21755] gretap3: entered promiscuous mode [ 665.313856][T21755] bond6: (slave gretap3): making interface the new active one [ 665.326393][T21755] bond6: (slave gretap3): Enslaving as an active interface with an up link [ 665.360032][ T9798] bond6: (slave wlan0): failed to get link speed/duplex [ 665.375345][T21749] macvlan2: entered promiscuous mode [ 665.382456][T21749] macvlan2: entered allmulticast mode [ 665.393603][T21749] bond6: entered promiscuous mode [ 665.408647][T21749] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 665.438646][T21749] bond6: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap3 [ 665.454094][T21749] bond6: left promiscuous mode [ 665.580316][ T8178] bond6: (slave wlan0): failed to get link speed/duplex [ 665.664900][ T30] audit: type=1107 audit(1759362936.793:12): pid=21777 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 665.689817][ T9798] bond6: (slave wlan0): failed to get link speed/duplex [ 665.730490][T21782] netlink: 'syz.4.3953': attribute type 1 has an invalid length. [ 665.739093][T21782] netlink: 236 bytes leftover after parsing attributes in process `syz.4.3953'. [ 665.820256][ T9798] bond6: (slave wlan0): failed to get link speed/duplex [ 665.887197][T21791] FAULT_INJECTION: forcing a failure. [ 665.887197][T21791] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 665.904891][T21791] CPU: 0 UID: 0 PID: 21791 Comm: syz.2.3956 Not tainted syzkaller #0 PREEMPT(full) [ 665.904922][T21791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 665.904936][T21791] Call Trace: [ 665.904944][T21791] [ 665.904954][T21791] dump_stack_lvl+0x189/0x250 [ 665.904984][T21791] ? __pfx____ratelimit+0x10/0x10 [ 665.905009][T21791] ? __pfx_dump_stack_lvl+0x10/0x10 [ 665.905034][T21791] ? __pfx__printk+0x10/0x10 [ 665.905079][T21791] should_fail_ex+0x414/0x560 [ 665.905116][T21791] _copy_from_user+0x2d/0xb0 [ 665.905145][T21791] memdup_sockptr_noprof+0x95/0x100 [ 665.905171][T21791] ip_set_mcast_msfilter+0xcc/0x320 [ 665.905202][T21791] do_ip_setsockopt+0x19e7/0x2d00 [ 665.905232][T21791] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 665.905260][T21791] ? aa_sk_perm+0x81e/0x950 [ 665.905299][T21791] ? __pfx_aa_sk_perm+0x10/0x10 [ 665.905336][T21791] ? __fget_files+0x2a/0x420 [ 665.905374][T21791] ? aa_sock_opt_perm+0xff/0x1b0 [ 665.905399][T21791] ip_setsockopt+0x66/0x110 [ 665.905420][T21791] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 665.905447][T21791] do_sock_setsockopt+0x17c/0x1b0 [ 665.905482][T21791] __x64_sys_setsockopt+0x13f/0x1b0 [ 665.905517][T21791] do_syscall_64+0xfa/0x3b0 [ 665.905541][T21791] ? lockdep_hardirqs_on+0x9c/0x150 [ 665.905565][T21791] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 665.905587][T21791] ? clear_bhb_loop+0x60/0xb0 [ 665.905619][T21791] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 665.905641][T21791] RIP: 0033:0x7f05f9f8eec9 [ 665.905660][T21791] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 665.905680][T21791] RSP: 002b:00007f05fad97038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 665.905702][T21791] RAX: ffffffffffffffda RBX: 00007f05fa1e5fa0 RCX: 00007f05f9f8eec9 [ 665.905718][T21791] RDX: 0000000000000030 RSI: 0000000000000000 RDI: 0000000000000003 [ 665.905731][T21791] RBP: 00007f05fad97090 R08: 0000000000000110 R09: 0000000000000000 [ 665.905744][T21791] R10: 0000200000000d80 R11: 0000000000000246 R12: 0000000000000001 [ 665.905757][T21791] R13: 00007f05fa1e6038 R14: 00007f05fa1e5fa0 R15: 00007ffec0bf6e48 [ 665.905794][T21791] [ 666.130301][ T9798] bond6: (slave wlan0): failed to get link speed/duplex [ 666.268470][T21806] FAULT_INJECTION: forcing a failure. [ 666.268470][T21806] name failslab, interval 1, probability 0, space 0, times 0 [ 666.285734][T21806] CPU: 0 UID: 0 PID: 21806 Comm: syz.3.3962 Not tainted syzkaller #0 PREEMPT(full) [ 666.285766][T21806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 666.285780][T21806] Call Trace: [ 666.285789][T21806] [ 666.285798][T21806] dump_stack_lvl+0x189/0x250 [ 666.285829][T21806] ? __pfx____ratelimit+0x10/0x10 [ 666.285854][T21806] ? __pfx_dump_stack_lvl+0x10/0x10 [ 666.285879][T21806] ? __pfx__printk+0x10/0x10 [ 666.285910][T21806] ? __lock_acquire+0xab9/0xd20 [ 666.285952][T21806] should_fail_ex+0x414/0x560 [ 666.285989][T21806] should_failslab+0xa8/0x100 [ 666.286022][T21806] kmem_cache_alloc_noprof+0x73/0x3c0 [ 666.286049][T21806] ? skb_clone+0x212/0x3a0 [ 666.286085][T21806] skb_clone+0x212/0x3a0 [ 666.286120][T21806] __netlink_deliver_tap+0x404/0x850 [ 666.286161][T21806] ? netlink_deliver_tap+0x2e/0x1b0 [ 666.286189][T21806] netlink_deliver_tap+0x19c/0x1b0 [ 666.286216][T21806] netlink_unicast+0x7fa/0x9e0 [ 666.286249][T21806] ? __pfx_netlink_unicast+0x10/0x10 [ 666.286275][T21806] ? netlink_sendmsg+0x642/0xb30 [ 666.286298][T21806] ? skb_put+0x11b/0x210 [ 666.286329][T21806] netlink_sendmsg+0x805/0xb30 [ 666.286367][T21806] ? __pfx_netlink_sendmsg+0x10/0x10 [ 666.286398][T21806] ? aa_sock_msg_perm+0xf1/0x1d0 [ 666.286436][T21806] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 666.286457][T21806] ? __pfx_netlink_sendmsg+0x10/0x10 [ 666.286484][T21806] __sock_sendmsg+0x219/0x270 [ 666.286522][T21806] ____sys_sendmsg+0x505/0x830 [ 666.286558][T21806] ? __pfx_____sys_sendmsg+0x10/0x10 [ 666.286599][T21806] ? import_iovec+0x74/0xa0 [ 666.286631][T21806] ___sys_sendmsg+0x21f/0x2a0 [ 666.286671][T21806] ? __pfx____sys_sendmsg+0x10/0x10 [ 666.286751][T21806] ? __fget_files+0x2a/0x420 [ 666.286781][T21806] ? __fget_files+0x3a0/0x420 [ 666.286826][T21806] __x64_sys_sendmsg+0x19b/0x260 [ 666.286859][T21806] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 666.286900][T21806] ? __pfx_ksys_write+0x10/0x10 [ 666.286925][T21806] ? rcu_is_watching+0x15/0xb0 [ 666.286953][T21806] ? do_syscall_64+0xbe/0x3b0 [ 666.286984][T21806] do_syscall_64+0xfa/0x3b0 [ 666.287008][T21806] ? lockdep_hardirqs_on+0x9c/0x150 [ 666.287031][T21806] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 666.287053][T21806] ? clear_bhb_loop+0x60/0xb0 [ 666.287080][T21806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 666.287101][T21806] RIP: 0033:0x7fc6e798eec9 [ 666.287122][T21806] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 666.287141][T21806] RSP: 002b:00007fc6e885c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 666.287165][T21806] RAX: ffffffffffffffda RBX: 00007fc6e7be5fa0 RCX: 00007fc6e798eec9 [ 666.287181][T21806] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 666.287195][T21806] RBP: 00007fc6e885c090 R08: 0000000000000000 R09: 0000000000000000 [ 666.287209][T21806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 666.287222][T21806] R13: 00007fc6e7be6038 R14: 00007fc6e7be5fa0 R15: 00007ffcf9c0d1e8 [ 666.287259][T21806] [ 666.630467][T21809] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3963'. [ 666.666218][T21811] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3964'. [ 666.675790][T21811] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3964'. [ 666.816954][T21811] bond7: entered promiscuous mode [ 666.825614][T21811] bond7: entered allmulticast mode [ 666.834716][T21811] 8021q: adding VLAN 0 to HW filter on device bond7 [ 667.104219][T21834] netlink: 'syz.1.3967': attribute type 12 has an invalid length. [ 667.315384][ C1] vcan0: j1939_tp_rxtimer: 0xffff888024853c00: rx timeout, send abort [ 667.435720][T21842] FAULT_INJECTION: forcing a failure. [ 667.435720][T21842] name failslab, interval 1, probability 0, space 0, times 0 [ 667.454611][T21842] CPU: 1 UID: 0 PID: 21842 Comm: syz.2.3970 Not tainted syzkaller #0 PREEMPT(full) [ 667.454645][T21842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 667.454660][T21842] Call Trace: [ 667.454669][T21842] [ 667.454679][T21842] dump_stack_lvl+0x189/0x250 [ 667.454709][T21842] ? __pfx____ratelimit+0x10/0x10 [ 667.454734][T21842] ? __pfx_dump_stack_lvl+0x10/0x10 [ 667.454759][T21842] ? __pfx__printk+0x10/0x10 [ 667.454794][T21842] ? __pfx___might_resched+0x10/0x10 [ 667.454827][T21842] ? fs_reclaim_acquire+0x7d/0x100 [ 667.454865][T21842] should_fail_ex+0x414/0x560 [ 667.454903][T21842] should_failslab+0xa8/0x100 [ 667.454936][T21842] __kmalloc_noprof+0xcb/0x4f0 [ 667.454961][T21842] ? set_mcast_msfilter+0x3b/0x380 [ 667.454991][T21842] set_mcast_msfilter+0x3b/0x380 [ 667.455012][T21842] ? _copy_from_user+0x94/0xb0 [ 667.455042][T21842] ip_set_mcast_msfilter+0x242/0x320 [ 667.455072][T21842] do_ip_setsockopt+0x19e7/0x2d00 [ 667.455103][T21842] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 667.455129][T21842] ? aa_sk_perm+0x81e/0x950 [ 667.455166][T21842] ? __pfx_aa_sk_perm+0x10/0x10 [ 667.455200][T21842] ? __fget_files+0x2a/0x420 [ 667.455229][T21842] ? aa_sock_opt_perm+0xff/0x1b0 [ 667.455253][T21842] ip_setsockopt+0x66/0x110 [ 667.455274][T21842] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 667.455301][T21842] do_sock_setsockopt+0x17c/0x1b0 [ 667.455335][T21842] __x64_sys_setsockopt+0x13f/0x1b0 [ 667.455370][T21842] do_syscall_64+0xfa/0x3b0 [ 667.455393][T21842] ? lockdep_hardirqs_on+0x9c/0x150 [ 667.455416][T21842] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 667.455436][T21842] ? clear_bhb_loop+0x60/0xb0 [ 667.455463][T21842] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 667.455485][T21842] RIP: 0033:0x7f05f9f8eec9 [ 667.455506][T21842] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 667.455526][T21842] RSP: 002b:00007f05fad97038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 667.455557][T21842] RAX: ffffffffffffffda RBX: 00007f05fa1e5fa0 RCX: 00007f05f9f8eec9 [ 667.455574][T21842] RDX: 0000000000000030 RSI: 0000000000000000 RDI: 0000000000000003 [ 667.455587][T21842] RBP: 00007f05fad97090 R08: 0000000000000110 R09: 0000000000000000 [ 667.455601][T21842] R10: 0000200000000d80 R11: 0000000000000246 R12: 0000000000000001 [ 667.455614][T21842] R13: 00007f05fa1e6038 R14: 00007f05fa1e5fa0 R15: 00007ffec0bf6e48 [ 667.455653][T21842] [ 667.769318][T21854] FAULT_INJECTION: forcing a failure. [ 667.769318][T21854] name failslab, interval 1, probability 0, space 0, times 0 [ 667.782296][T21854] CPU: 1 UID: 0 PID: 21854 Comm: syz.2.3974 Not tainted syzkaller #0 PREEMPT(full) [ 667.782326][T21854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 667.782339][T21854] Call Trace: [ 667.782347][T21854] [ 667.782355][T21854] dump_stack_lvl+0x189/0x250 [ 667.782385][T21854] ? __pfx____ratelimit+0x10/0x10 [ 667.782409][T21854] ? __pfx_dump_stack_lvl+0x10/0x10 [ 667.782435][T21854] ? __pfx__printk+0x10/0x10 [ 667.782471][T21854] ? __pfx___might_resched+0x10/0x10 [ 667.782503][T21854] ? fs_reclaim_acquire+0x7d/0x100 [ 667.782551][T21854] should_fail_ex+0x414/0x560 [ 667.782588][T21854] should_failslab+0xa8/0x100 [ 667.782621][T21854] kmem_cache_alloc_noprof+0x73/0x3c0 [ 667.782648][T21854] ? skb_clone+0x212/0x3a0 [ 667.782684][T21854] skb_clone+0x212/0x3a0 [ 667.782711][T21854] ? nfnetlink_rcv+0x4ba/0x2590 [ 667.782736][T21854] nfnetlink_rcv+0x4ec/0x2590 [ 667.782761][T21854] ? __dev_queue_xmit+0x27b/0x3b50 [ 667.782794][T21854] ? __dev_queue_xmit+0x1d79/0x3b50 [ 667.782835][T21854] ? __dev_queue_xmit+0x27b/0x3b50 [ 667.782881][T21854] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 667.782923][T21854] ? ref_tracker_free+0x63a/0x7d0 [ 667.782958][T21854] ? __asan_memcpy+0x40/0x70 [ 667.782981][T21854] ? __pfx_ref_tracker_free+0x10/0x10 [ 667.783034][T21854] ? skb_clone+0x246/0x3a0 [ 667.783068][T21854] ? __netlink_deliver_tap+0x807/0x850 [ 667.783094][T21854] ? netlink_deliver_tap+0x2e/0x1b0 [ 667.783141][T21854] netlink_unicast+0x82c/0x9e0 [ 667.783174][T21854] ? __pfx_netlink_unicast+0x10/0x10 [ 667.783198][T21854] ? netlink_sendmsg+0x642/0xb30 [ 667.783221][T21854] ? skb_put+0x11b/0x210 [ 667.783251][T21854] netlink_sendmsg+0x805/0xb30 [ 667.783289][T21854] ? __pfx_netlink_sendmsg+0x10/0x10 [ 667.783319][T21854] ? aa_sock_msg_perm+0xf1/0x1d0 [ 667.783357][T21854] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 667.783380][T21854] ? __pfx_netlink_sendmsg+0x10/0x10 [ 667.783406][T21854] __sock_sendmsg+0x219/0x270 [ 667.783445][T21854] ____sys_sendmsg+0x505/0x830 [ 667.783480][T21854] ? __pfx_____sys_sendmsg+0x10/0x10 [ 667.783520][T21854] ? import_iovec+0x74/0xa0 [ 667.783562][T21854] ___sys_sendmsg+0x21f/0x2a0 [ 667.783593][T21854] ? __pfx____sys_sendmsg+0x10/0x10 [ 667.783665][T21854] ? __fget_files+0x2a/0x420 [ 667.783695][T21854] ? __fget_files+0x3a0/0x420 [ 667.783740][T21854] __x64_sys_sendmsg+0x19b/0x260 [ 667.783772][T21854] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 667.783813][T21854] ? __pfx_ksys_write+0x10/0x10 [ 667.783839][T21854] ? rcu_is_watching+0x15/0xb0 [ 667.783865][T21854] ? do_syscall_64+0xbe/0x3b0 [ 667.783896][T21854] do_syscall_64+0xfa/0x3b0 [ 667.783920][T21854] ? lockdep_hardirqs_on+0x9c/0x150 [ 667.783944][T21854] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 667.783966][T21854] ? clear_bhb_loop+0x60/0xb0 [ 667.783993][T21854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 667.784015][T21854] RIP: 0033:0x7f05f9f8eec9 [ 667.784035][T21854] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 667.784055][T21854] RSP: 002b:00007f05fad97038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 667.784079][T21854] RAX: ffffffffffffffda RBX: 00007f05fa1e5fa0 RCX: 00007f05f9f8eec9 [ 667.784095][T21854] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 667.784110][T21854] RBP: 00007f05fad97090 R08: 0000000000000000 R09: 0000000000000000 [ 667.784123][T21854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 667.784136][T21854] R13: 00007f05fa1e6038 R14: 00007f05fa1e5fa0 R15: 00007ffec0bf6e48 [ 667.784173][T21854] [ 668.140672][ C1] vcan0: j1939_tp_rxtimer: 0xffff888040c76000: rx timeout, send abort [ 668.148943][ C1] vcan0: j1939_tp_rxtimer: 0xffff888024853c00: abort rx timeout. Force session deactivation [ 668.438068][T21871] syzkaller1: entered promiscuous mode [ 668.449552][T21871] syzkaller1: entered allmulticast mode [ 668.466983][T21872] macvtap1: entered allmulticast mode [ 668.472628][T21872] veth0_macvtap: entered allmulticast mode [ 668.648943][ C1] vcan0: j1939_tp_rxtimer: 0xffff888040c76000: abort rx timeout. Force session deactivation [ 668.679928][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 668.867710][ T9806] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 668.885773][ T9806] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 669.227795][T21911] FAULT_INJECTION: forcing a failure. [ 669.227795][T21911] name failslab, interval 1, probability 0, space 0, times 0 [ 669.258265][T21911] CPU: 1 UID: 0 PID: 21911 Comm: syz.4.3986 Not tainted syzkaller #0 PREEMPT(full) [ 669.258306][T21911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 669.258321][T21911] Call Trace: [ 669.258330][T21911] [ 669.258339][T21911] dump_stack_lvl+0x189/0x250 [ 669.258371][T21911] ? __pfx____ratelimit+0x10/0x10 [ 669.258396][T21911] ? __pfx_dump_stack_lvl+0x10/0x10 [ 669.258421][T21911] ? __pfx__printk+0x10/0x10 [ 669.258458][T21911] ? __pfx___might_resched+0x10/0x10 [ 669.258496][T21911] should_fail_ex+0x414/0x560 [ 669.258535][T21911] should_failslab+0xa8/0x100 [ 669.258568][T21911] __kmalloc_noprof+0xcb/0x4f0 [ 669.258595][T21911] ? __kasan_kmalloc+0x93/0xb0 [ 669.258621][T21911] ? nla_strdup+0x9d/0x140 [ 669.258647][T21911] nla_strdup+0x9d/0x140 [ 669.258672][T21911] nf_tables_newchain+0x1998/0x2900 [ 669.258723][T21911] ? __pfx_nf_tables_newchain+0x10/0x10 [ 669.258796][T21911] ? nfnl_pernet+0x23/0x240 [ 669.258844][T21911] ? __nla_parse+0x40/0x60 [ 669.258872][T21911] nfnetlink_rcv+0x11d6/0x2590 [ 669.258937][T21911] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 669.259021][T21911] ? netlink_deliver_tap+0x2e/0x1b0 [ 669.259070][T21911] netlink_unicast+0x82c/0x9e0 [ 669.259104][T21911] ? __pfx_netlink_unicast+0x10/0x10 [ 669.259130][T21911] ? netlink_sendmsg+0x642/0xb30 [ 669.259153][T21911] ? skb_put+0x11b/0x210 [ 669.259185][T21911] netlink_sendmsg+0x805/0xb30 [ 669.259223][T21911] ? __pfx_netlink_sendmsg+0x10/0x10 [ 669.259260][T21911] ? aa_sock_msg_perm+0xf1/0x1d0 [ 669.259308][T21911] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 669.259331][T21911] ? __pfx_netlink_sendmsg+0x10/0x10 [ 669.259359][T21911] __sock_sendmsg+0x219/0x270 [ 669.259398][T21911] ____sys_sendmsg+0x505/0x830 [ 669.259435][T21911] ? __pfx_____sys_sendmsg+0x10/0x10 [ 669.259476][T21911] ? import_iovec+0x74/0xa0 [ 669.259508][T21911] ___sys_sendmsg+0x21f/0x2a0 [ 669.259542][T21911] ? __pfx____sys_sendmsg+0x10/0x10 [ 669.259616][T21911] ? __fget_files+0x2a/0x420 [ 669.259648][T21911] ? __fget_files+0x3a0/0x420 [ 669.259689][T21911] __x64_sys_sendmsg+0x19b/0x260 [ 669.259720][T21911] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 669.259760][T21911] ? __pfx_ksys_write+0x10/0x10 [ 669.259782][T21911] ? rcu_is_watching+0x15/0xb0 [ 669.259809][T21911] ? do_syscall_64+0xbe/0x3b0 [ 669.259839][T21911] do_syscall_64+0xfa/0x3b0 [ 669.259863][T21911] ? lockdep_hardirqs_on+0x9c/0x150 [ 669.259887][T21911] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 669.259909][T21911] ? clear_bhb_loop+0x60/0xb0 [ 669.259936][T21911] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 669.259957][T21911] RIP: 0033:0x7f15b5f8eec9 [ 669.259977][T21911] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 669.259996][T21911] RSP: 002b:00007f15b6d9b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 669.260019][T21911] RAX: ffffffffffffffda RBX: 00007f15b61e5fa0 RCX: 00007f15b5f8eec9 [ 669.260036][T21911] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 669.260049][T21911] RBP: 00007f15b6d9b090 R08: 0000000000000000 R09: 0000000000000000 [ 669.260063][T21911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 669.260076][T21911] R13: 00007f15b61e6038 R14: 00007f15b61e5fa0 R15: 00007fff24b5faf8 [ 669.260204][T21911] [ 669.591184][ T9802] net_ratelimit: 8 callbacks suppressed [ 669.591209][ T9802] bond6: (slave wlan0): failed to get link speed/duplex [ 669.710220][ T9798] bond6: (slave wlan0): failed to get link speed/duplex [ 669.820023][ T9802] bond6: (slave wlan0): failed to get link speed/duplex [ 670.001614][T13508] bond6: (slave wlan0): failed to get link speed/duplex [ 670.120483][ T9802] bond6: (slave wlan0): failed to get link speed/duplex [ 670.303044][ T9802] bond6: (slave wlan0): failed to get link speed/duplex [ 670.333204][T21935] __nla_validate_parse: 2 callbacks suppressed [ 670.333226][T21935] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3993'. [ 670.560079][T21938] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3994'. [ 670.691258][ T9798] bond6: (slave wlan0): failed to get link speed/duplex [ 670.848515][T21952] delete_channel: no stack [ 670.853206][ T9798] bond6: (slave wlan0): failed to get link speed/duplex [ 670.941868][T21958] FAULT_INJECTION: forcing a failure. [ 670.941868][T21958] name failslab, interval 1, probability 0, space 0, times 0 [ 670.959941][ T9798] bond6: (slave wlan0): failed to get link speed/duplex [ 670.982741][T21958] CPU: 0 UID: 0 PID: 21958 Comm: syz.4.4000 Not tainted syzkaller #0 PREEMPT(full) [ 670.982779][T21958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 670.982794][T21958] Call Trace: [ 670.982804][T21958] [ 670.982815][T21958] dump_stack_lvl+0x189/0x250 [ 670.982846][T21958] ? __pfx____ratelimit+0x10/0x10 [ 670.982872][T21958] ? __pfx_dump_stack_lvl+0x10/0x10 [ 670.982896][T21958] ? __pfx__printk+0x10/0x10 [ 670.982934][T21958] ? __pfx___might_resched+0x10/0x10 [ 670.982973][T21958] should_fail_ex+0x414/0x560 [ 670.983010][T21958] ? nf_tables_newchain+0x1b7e/0x2900 [ 670.983040][T21958] should_failslab+0xa8/0x100 [ 670.983073][T21958] __kvmalloc_node_noprof+0x161/0x5f0 [ 670.983105][T21958] ? nf_tables_newchain+0x1b7e/0x2900 [ 670.983142][T21958] nf_tables_newchain+0x1b7e/0x2900 [ 670.983201][T21958] ? __pfx_nf_tables_newchain+0x10/0x10 [ 670.983273][T21958] ? nfnl_pernet+0x23/0x240 [ 670.983319][T21958] ? __nla_parse+0x40/0x60 [ 670.983361][T21958] nfnetlink_rcv+0x11d6/0x2590 [ 670.983425][T21958] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 670.983508][T21958] ? netlink_deliver_tap+0x2e/0x1b0 [ 670.983556][T21958] netlink_unicast+0x82c/0x9e0 [ 670.983589][T21958] ? __pfx_netlink_unicast+0x10/0x10 [ 670.983614][T21958] ? netlink_sendmsg+0x642/0xb30 [ 670.983639][T21958] ? skb_put+0x11b/0x210 [ 670.983670][T21958] netlink_sendmsg+0x805/0xb30 [ 670.983708][T21958] ? __pfx_netlink_sendmsg+0x10/0x10 [ 670.983739][T21958] ? aa_sock_msg_perm+0xf1/0x1d0 [ 670.983776][T21958] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 670.983799][T21958] ? __pfx_netlink_sendmsg+0x10/0x10 [ 670.983827][T21958] __sock_sendmsg+0x219/0x270 [ 670.983867][T21958] ____sys_sendmsg+0x505/0x830 [ 670.983904][T21958] ? __pfx_____sys_sendmsg+0x10/0x10 [ 670.983946][T21958] ? import_iovec+0x74/0xa0 [ 670.983979][T21958] ___sys_sendmsg+0x21f/0x2a0 [ 670.984012][T21958] ? __pfx____sys_sendmsg+0x10/0x10 [ 670.984085][T21958] ? __fget_files+0x2a/0x420 [ 670.984116][T21958] ? __fget_files+0x3a0/0x420 [ 670.984161][T21958] __x64_sys_sendmsg+0x19b/0x260 [ 670.984202][T21958] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 670.984243][T21958] ? __pfx_ksys_write+0x10/0x10 [ 670.984270][T21958] ? rcu_is_watching+0x15/0xb0 [ 670.984295][T21958] ? do_syscall_64+0xbe/0x3b0 [ 670.984327][T21958] do_syscall_64+0xfa/0x3b0 [ 670.984351][T21958] ? lockdep_hardirqs_on+0x9c/0x150 [ 670.984376][T21958] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 670.984399][T21958] ? clear_bhb_loop+0x60/0xb0 [ 670.984427][T21958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 670.984450][T21958] RIP: 0033:0x7f15b5f8eec9 [ 670.984470][T21958] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 670.984490][T21958] RSP: 002b:00007f15b6d9b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 670.984516][T21958] RAX: ffffffffffffffda RBX: 00007f15b61e5fa0 RCX: 00007f15b5f8eec9 [ 670.984534][T21958] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 670.984548][T21958] RBP: 00007f15b6d9b090 R08: 0000000000000000 R09: 0000000000000000 [ 670.984563][T21958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 670.984577][T21958] R13: 00007f15b61e6038 R14: 00007f15b61e5fa0 R15: 00007fff24b5faf8 [ 670.984613][T21958] [ 671.394192][T13508] bond6: (slave wlan0): failed to get link speed/duplex [ 671.464189][T21962] netlink: 'syz.3.4003': attribute type 1 has an invalid length. [ 671.472359][T21962] netlink: 'syz.3.4003': attribute type 2 has an invalid length. [ 671.482755][T21962] netlink: 'syz.3.4003': attribute type 1 has an invalid length. [ 671.491095][T21962] netlink: 'syz.3.4003': attribute type 2 has an invalid length. [ 671.535083][T21963] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4002'. [ 671.689204][T19806] IPVS: starting estimator thread 0... [ 671.779937][T21973] IPVS: using max 27 ests per chain, 64800 per kthread [ 671.828322][T21981] syzkaller1: tun_chr_ioctl cmd 2147767520 [ 672.010805][T21991] netlink: 'syz.1.4010': attribute type 1 has an invalid length. [ 672.024034][T21991] netlink: 'syz.1.4010': attribute type 1 has an invalid length. [ 672.033069][T21991] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4010'. [ 672.043287][T21999] FAULT_INJECTION: forcing a failure. [ 672.043287][T21999] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 672.044854][T21999] [ 672.044865][T21999] ====================================================== [ 672.044874][T21999] WARNING: possible circular locking dependency detected [ 672.044889][T21999] syzkaller #0 Not tainted [ 672.044900][T21999] ------------------------------------------------------ [ 672.044908][T21999] syz.2.4012/21999 is trying to acquire lock: [ 672.044919][T21999] ffffffff8e12e320 (console_owner){-.-.}-{0:0}, at: console_flush_all+0x13a/0xc40 [ 672.044976][T21999] [ 672.044976][T21999] but task is already holding lock: [ 672.044983][T21999] ffff8880b8639f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 672.045038][T21999] [ 672.045038][T21999] which lock already depends on the new lock. [ 672.045038][T21999] [ 672.045046][T21999] [ 672.045046][T21999] the existing dependency chain (in reverse order) is: [ 672.045054][T21999] [ 672.045054][T21999] -> #5 (&rq->__lock){-.-.}-{2:2}: [ 672.045082][T21999] lock_acquire+0x120/0x360 [ 672.045110][T21999] _raw_spin_lock_nested+0x32/0x50 [ 672.045131][T21999] raw_spin_rq_lock_nested+0x2a/0x140 [ 672.045160][T21999] task_rq_lock+0xbc/0x470 [ 672.045194][T21999] cgroup_move_task+0x92/0x2a0 [ 672.045212][T21999] css_set_move_task+0x658/0x9e0 [ 672.045233][T21999] cgroup_post_fork+0x1ef/0x790 [ 672.045253][T21999] copy_process+0x3862/0x3c00 [ 672.045271][T21999] kernel_clone+0x21e/0x840 [ 672.045291][T21999] user_mode_thread+0xdd/0x140 [ 672.045312][T21999] rest_init+0x23/0x300 [ 672.045339][T21999] start_kernel+0x3a9/0x410 [ 672.045367][T21999] x86_64_start_reservations+0x24/0x30 [ 672.045390][T21999] x86_64_start_kernel+0x143/0x1c0 [ 672.045410][T21999] common_startup_64+0x13e/0x147 [ 672.045435][T21999] [ 672.045435][T21999] -> #4 (&p->pi_lock){-.-.}-{2:2}: [ 672.045463][T21999] lock_acquire+0x120/0x360 [ 672.045490][T21999] _raw_spin_lock_irqsave+0xa7/0xf0 [ 672.045508][T21999] try_to_wake_up+0x67/0x12b0 [ 672.045529][T21999] create_worker+0x503/0x720 [ 672.045553][T21999] workqueue_init+0x3f0/0x6a0 [ 672.045577][T21999] kernel_init_freeable+0x302/0x4b0 [ 672.045606][T21999] kernel_init+0x1d/0x1d0 [ 672.045632][T21999] ret_from_fork+0x439/0x7d0 [ 672.045649][T21999] ret_from_fork_asm+0x1a/0x30 [ 672.045674][T21999] [ 672.045674][T21999] -> #3 (&pool->lock){-.-.}-{2:2}: [ 672.045699][T21999] lock_acquire+0x120/0x360 [ 672.045724][T21999] _raw_spin_lock+0x2e/0x40 [ 672.045739][T21999] __queue_work+0x809/0xfb0 [ 672.045754][T21999] queue_work_on+0x181/0x270 [ 672.045771][T21999] rpm_suspend+0xe54/0x1720 [ 672.045791][T21999] __pm_runtime_idle+0x12f/0x1a0 [ 672.045811][T21999] __device_attach+0x342/0x400 [ 672.045833][T21999] bus_probe_device+0x185/0x260 [ 672.045862][T21999] device_add+0x7b6/0xb50 [ 672.045881][T21999] serial_base_port_add+0x2e3/0x410 [ 672.045905][T21999] serial_core_register_port+0x369/0x27c0 [ 672.045935][T21999] serial8250_register_8250_port+0x16db/0x2050 [ 672.045962][T21999] serial_pnp_probe+0x527/0x790 [ 672.045990][T21999] pnp_device_probe+0x308/0x4c0 [ 672.046019][T21999] really_probe+0x26a/0x9e0 [ 672.046043][T21999] __driver_probe_device+0x18c/0x2f0 [ 672.046067][T21999] driver_probe_device+0x4f/0x430 [ 672.046091][T21999] __driver_attach+0x452/0x700 [ 672.046113][T21999] bus_for_each_dev+0x230/0x2b0 [ 672.046142][T21999] bus_add_driver+0x345/0x640 [ 672.046179][T21999] driver_register+0x23a/0x320 [ 672.046205][T21999] serial8250_init+0x8f/0x160 [ 672.046227][T21999] do_one_initcall+0x233/0x820 [ 672.046249][T21999] do_initcall_level+0x104/0x190 [ 672.046279][T21999] do_initcalls+0x59/0xa0 [ 672.046304][T21999] kernel_init_freeable+0x334/0x4b0 [ 672.046332][T21999] kernel_init+0x1d/0x1d0 [ 672.046357][T21999] ret_from_fork+0x439/0x7d0 [ 672.046372][T21999] ret_from_fork_asm+0x1a/0x30 [ 672.046394][T21999] [ 672.046394][T21999] -> #2 (&dev->power.lock){-.-.}-{3:3}: [ 672.046415][T21999] lock_acquire+0x120/0x360 [ 672.046435][T21999] _raw_spin_lock_irqsave+0xa7/0xf0 [ 672.046449][T21999] __pm_runtime_resume+0x10f/0x180 [ 672.046465][T21999] __uart_start+0x171/0x460 [ 672.046487][T21999] uart_write+0xdc/0x130 [ 672.046499][T21999] n_tty_write+0xd29/0x1200 [ 672.046517][T21999] file_tty_write+0x551/0xa20 [ 672.046539][T21999] vfs_write+0x5c6/0xb30 [ 672.046557][T21999] ksys_write+0x145/0x250 [ 672.046575][T21999] do_syscall_64+0xfa/0x3b0 [ 672.046592][T21999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 672.046607][T21999] [ 672.046607][T21999] -> #1 (&port_lock_key){-.-.}-{3:3}: [ 672.046627][T21999] lock_acquire+0x120/0x360 [ 672.046647][T21999] _raw_spin_lock_irqsave+0xa7/0xf0 [ 672.046660][T21999] serial8250_console_write+0x17e/0x1ba0 [ 672.046675][T21999] console_flush_all+0x728/0xc40 [ 672.046691][T21999] console_unlock+0xc4/0x270 [ 672.046704][T21999] vprintk_emit+0x5b7/0x7a0 [ 672.046717][T21999] _printk+0xcf/0x120 [ 672.046735][T21999] register_console+0xa8b/0xf90 [ 672.046750][T21999] univ8250_console_init+0x3a/0x70 [ 672.046767][T21999] console_init+0x10e/0x430 [ 672.046781][T21999] start_kernel+0x254/0x410 [ 672.046802][T21999] x86_64_start_reservations+0x24/0x30 [ 672.046818][T21999] x86_64_start_kernel+0x143/0x1c0 [ 672.046833][T21999] common_startup_64+0x13e/0x147 [ 672.046851][T21999] [ 672.046851][T21999] -> #0 (console_owner){-.-.}-{0:0}: [ 672.046871][T21999] validate_chain+0xb9b/0x2140 [ 672.046884][T21999] __lock_acquire+0xab9/0xd20 [ 672.046904][T21999] lock_acquire+0x120/0x360 [ 672.046924][T21999] console_flush_all+0x6d2/0xc40 [ 672.046942][T21999] console_unlock+0xc4/0x270 [ 672.046954][T21999] vprintk_emit+0x5b7/0x7a0 [ 672.046967][T21999] _printk+0xcf/0x120 [ 672.046985][T21999] should_fail_ex+0x3f5/0x560 [ 672.047005][T21999] strncpy_from_user+0x36/0x290 [ 672.047025][T21999] strncpy_from_user_nofault+0x72/0x150 [ 672.047041][T21999] bpf_probe_read_user_str+0x2a/0x70 [ 672.047064][T21999] bpf_prog_bc7c5c6b9645592f+0x3e/0x44 [ 672.047077][T21999] bpf_trace_run4+0x28b/0x4a0 [ 672.047094][T21999] __bpf_trace_sched_switch+0x17a/0x1e0 [ 672.047111][T21999] __traceiter_sched_switch+0x9d/0xd0 [ 672.047128][T21999] __schedule+0x238f/0x4cc0 [ 672.047141][T21999] schedule+0x165/0x360 [ 672.047154][T21999] synchronize_rcu_expedited+0x583/0x730 [ 672.047177][T21999] synchronize_rcu+0x11a/0x310 [ 672.047190][T21999] nf_tables_abort+0x74cd/0x88a0 [ 672.047210][T21999] nfnetlink_rcv+0x1d15/0x2590 [ 672.047223][T21999] netlink_unicast+0x82c/0x9e0 [ 672.047237][T21999] netlink_sendmsg+0x805/0xb30 [ 672.047253][T21999] __sock_sendmsg+0x219/0x270 [ 672.047276][T21999] ____sys_sendmsg+0x505/0x830 [ 672.047295][T21999] ___sys_sendmsg+0x21f/0x2a0 [ 672.047314][T21999] __x64_sys_sendmsg+0x19b/0x260 [ 672.047332][T21999] do_syscall_64+0xfa/0x3b0 [ 672.047349][T21999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 672.047364][T21999] [ 672.047364][T21999] other info that might help us debug this: [ 672.047364][T21999] [ 672.047369][T21999] Chain exists of: [ 672.047369][T21999] console_owner --> &p->pi_lock --> &rq->__lock [ 672.047369][T21999] [ 672.047393][T21999] Possible unsafe locking scenario: [ 672.047393][T21999] [ 672.047398][T21999] CPU0 CPU1 [ 672.047403][T21999] ---- ---- [ 672.047408][T21999] lock(&rq->__lock); [ 672.047417][T21999] lock(&p->pi_lock); [ 672.047428][T21999] lock(&rq->__lock); [ 672.047439][T21999] lock(console_owner); [ 672.047449][T21999] [ 672.047449][T21999] *** DEADLOCK *** [ 672.047449][T21999] [ 672.047460][T21999] 6 locks held by syz.2.4012/21999: [ 672.047470][T21999] #0: ffff88802f36d0d8 (&nft_net->commit_mutex){+.+.}-{4:4}, at: nf_tables_valid_genid+0x3b/0x100 [ 672.047513][T21999] #1: ffffffff8e13fb78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730 [ 672.047549][T21999] #2: ffff8880b8639f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 672.047592][T21999] #3: ffffffff8e13a0e0 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run4+0x19c/0x4a0 [ 672.047630][T21999] #4: ffffffff8e12e380 (console_lock){+.+.}-{0:0}, at: _printk+0xcf/0x120 [ 672.047669][T21999] #5: ffffffff8e015c50 (console_srcu){....}-{0:0}, at: console_flush_all+0x13a/0xc40 [ 672.047706][T21999] [ 672.047706][T21999] stack backtrace: [ 672.047716][T21999] CPU: 0 UID: 0 PID: 21999 Comm: syz.2.4012 Not tainted syzkaller #0 PREEMPT(full) [ 672.047734][T21999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 672.047744][T21999] Call Trace: [ 672.047750][T21999] [ 672.047757][T21999] dump_stack_lvl+0x189/0x250 [ 672.047776][T21999] ? __pfx_dump_stack_lvl+0x10/0x10 [ 672.047794][T21999] ? __pfx__printk+0x10/0x10 [ 672.047815][T21999] ? print_lock_name+0xde/0x100 [ 672.047838][T21999] print_circular_bug+0x2ee/0x310 [ 672.047856][T21999] check_noncircular+0x134/0x160 [ 672.047874][T21999] validate_chain+0xb9b/0x2140 [ 672.047900][T21999] __lock_acquire+0xab9/0xd20 [ 672.047925][T21999] ? console_flush_all+0x13a/0xc40 [ 672.047942][T21999] lock_acquire+0x120/0x360 [ 672.047964][T21999] ? console_flush_all+0x13a/0xc40 [ 672.047984][T21999] ? do_raw_spin_unlock+0x122/0x240 [ 672.048002][T21999] ? console_flush_all+0x13a/0xc40 [ 672.048020][T21999] console_flush_all+0x6d2/0xc40 [ 672.048036][T21999] ? console_flush_all+0x13a/0xc40 [ 672.048054][T21999] ? console_flush_all+0x13a/0xc40 [ 672.048074][T21999] ? __pfx_console_flush_all+0x10/0x10 [ 672.048096][T21999] ? is_printk_cpu_sync_owner+0x32/0x40 [ 672.048118][T21999] console_unlock+0xc4/0x270 [ 672.048134][T21999] ? __pfx_console_unlock+0x10/0x10 [ 672.048151][T21999] ? is_printk_cpu_sync_owner+0x32/0x40 [ 672.048182][T21999] vprintk_emit+0x5b7/0x7a0 [ 672.048198][T21999] ? __pfx_vprintk_emit+0x10/0x10 [ 672.048222][T21999] _printk+0xcf/0x120 [ 672.048241][T21999] ? __pfx____ratelimit+0x10/0x10 [ 672.048259][T21999] ? __pfx__printk+0x10/0x10 [ 672.048285][T21999] should_fail_ex+0x3f5/0x560 [ 672.048308][T21999] strncpy_from_user+0x36/0x290 [ 672.048335][T21999] strncpy_from_user_nofault+0x72/0x150 [ 672.048358][T21999] bpf_probe_read_user_str+0x2a/0x70 [ 672.048382][T21999] bpf_prog_bc7c5c6b9645592f+0x3e/0x44 [ 672.048394][T21999] bpf_trace_run4+0x28b/0x4a0 [ 672.048413][T21999] ? bpf_trace_run4+0x19c/0x4a0 [ 672.048430][T21999] ? __pfx_bpf_trace_run4+0x10/0x10 [ 672.048447][T21999] ? sched_clock_cpu+0x74/0x430 [ 672.048471][T21999] ? trace_pelt_se_tp+0x39/0x130 [ 672.048488][T21999] ? __bpf_trace_sched_switch+0x15f/0x1e0 [ 672.048507][T21999] __bpf_trace_sched_switch+0x17a/0x1e0 [ 672.048527][T21999] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 672.048545][T21999] ? psi_group_change+0xab8/0x1050 [ 672.048573][T21999] ? __schedule+0x22e9/0x4cc0 [ 672.048588][T21999] ? tracing_record_taskinfo_sched_switch+0x7d/0x370 [ 672.048607][T21999] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 672.048625][T21999] __traceiter_sched_switch+0x9d/0xd0 [ 672.048644][T21999] __schedule+0x238f/0x4cc0 [ 672.048664][T21999] ? do_raw_spin_lock+0x121/0x290 [ 672.048683][T21999] ? __lock_acquire+0xab9/0xd20 [ 672.048704][T21999] ? __pfx___schedule+0x10/0x10 [ 672.048725][T21999] ? schedule+0x91/0x360 [ 672.048740][T21999] schedule+0x165/0x360 [ 672.048755][T21999] synchronize_rcu_expedited+0x583/0x730 [ 672.048772][T21999] ? __pfx_synchronize_rcu_expedited+0x10/0x10 [ 672.048794][T21999] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 672.048817][T21999] ? __pfx___might_resched+0x10/0x10 [ 672.048840][T21999] ? __pfx_autoremove_wake_function+0x10/0x10 [ 672.048863][T21999] synchronize_rcu+0x11a/0x310 [ 672.048878][T21999] ? __pfx_synchronize_rcu+0x10/0x10 [ 672.048893][T21999] ? nft_pernet+0x23/0x240 [ 672.048914][T21999] ? nft_pernet+0x23/0x240 [ 672.048940][T21999] nf_tables_abort+0x74cd/0x88a0 [ 672.048970][T21999] ? __pfx_nf_tables_abort+0x10/0x10 [ 672.048998][T21999] ? __kasan_kmalloc+0x93/0xb0 [ 672.049021][T21999] nfnetlink_rcv+0x1d15/0x2590 [ 672.049050][T21999] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 672.049083][T21999] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 672.049103][T21999] ? netlink_deliver_tap+0x2e/0x1b0 [ 672.049127][T21999] netlink_unicast+0x82c/0x9e0 [ 672.049145][T21999] ? __pfx_netlink_unicast+0x10/0x10 [ 672.049160][T21999] ? netlink_sendmsg+0x642/0xb30 [ 672.049182][T21999] ? skb_put+0x11b/0x210 [ 672.049202][T21999] netlink_sendmsg+0x805/0xb30 [ 672.049223][T21999] ? __pfx_netlink_sendmsg+0x10/0x10 [ 672.049242][T21999] ? aa_sock_msg_perm+0xf1/0x1d0 [ 672.049268][T21999] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 672.049283][T21999] ? __pfx_netlink_sendmsg+0x10/0x10 [ 672.049301][T21999] __sock_sendmsg+0x219/0x270 [ 672.049326][T21999] ____sys_sendmsg+0x505/0x830 [ 672.049348][T21999] ? __pfx_____sys_sendmsg+0x10/0x10 [ 672.049371][T21999] ? import_iovec+0x74/0xa0 [ 672.049391][T21999] ___sys_sendmsg+0x21f/0x2a0 [ 672.049412][T21999] ? __pfx____sys_sendmsg+0x10/0x10 [ 672.049447][T21999] ? __fget_files+0x2a/0x420 [ 672.049468][T21999] ? __fget_files+0x3a0/0x420 [ 672.049494][T21999] __x64_sys_sendmsg+0x19b/0x260 [ 672.049515][T21999] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 672.049539][T21999] ? __pfx_ksys_write+0x10/0x10 [ 672.049556][T21999] ? rcu_is_watching+0x15/0xb0 [ 672.049572][T21999] ? do_syscall_64+0xbe/0x3b0 [ 672.049591][T21999] do_syscall_64+0xfa/0x3b0 [ 672.049608][T21999] ? lockdep_hardirqs_on+0x9c/0x150 [ 672.049623][T21999] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 672.049638][T21999] ? clear_bhb_loop+0x60/0xb0 [ 672.049656][T21999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 672.049681][T21999] RIP: 0033:0x7f05f9f8eec9 [ 672.049699][T21999] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 672.049714][T21999] RSP: 002b:00007f05fad97038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 672.049729][T21999] RAX: ffffffffffffffda RBX: 00007f05fa1e5fa0 RCX: 00007f05f9f8eec9 [ 672.049740][T21999] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 672.049750][T21999] RBP: 00007f05fad97090 R08: 0000000000000000 R09: 0000000000000000 [ 672.049760][T21999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 672.049769][T21999] R13: 00007f05fa1e6038 R14: 00007f05fa1e5fa0 R15: 00007ffec0bf6e48 [ 672.049788][T21999] [ 673.471200][T21999] CPU: 0 UID: 0 PID: 21999 Comm: syz.2.4012 Not tainted syzkaller #0 PREEMPT(full) [ 673.471222][T21999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 673.471232][T21999] Call Trace: [ 673.471240][T21999] [ 673.471248][T21999] dump_stack_lvl+0x189/0x250 [ 673.471269][T21999] ? __pfx____ratelimit+0x10/0x10 [ 673.471287][T21999] ? __pfx_dump_stack_lvl+0x10/0x10 [ 673.471303][T21999] ? __pfx__printk+0x10/0x10 [ 673.471328][T21999] should_fail_ex+0x414/0x560 [ 673.471352][T21999] strncpy_from_user+0x36/0x290 [ 673.471374][T21999] strncpy_from_user_nofault+0x72/0x150 [ 673.471393][T21999] bpf_probe_read_user_str+0x2a/0x70 [ 673.471418][T21999] bpf_prog_bc7c5c6b9645592f+0x3e/0x44 [ 673.471431][T21999] bpf_trace_run4+0x28b/0x4a0 [ 673.471450][T21999] ? bpf_trace_run4+0x19c/0x4a0 [ 673.471468][T21999] ? __pfx_bpf_trace_run4+0x10/0x10 [ 673.471485][T21999] ? sched_clock_cpu+0x74/0x430 [ 673.471510][T21999] ? trace_pelt_se_tp+0x39/0x130 [ 673.471526][T21999] ? __bpf_trace_sched_switch+0x15f/0x1e0 [ 673.471547][T21999] __bpf_trace_sched_switch+0x17a/0x1e0 [ 673.471566][T21999] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 673.471585][T21999] ? psi_group_change+0xab8/0x1050 [ 673.471612][T21999] ? __schedule+0x22e9/0x4cc0 [ 673.471628][T21999] ? tracing_record_taskinfo_sched_switch+0x7d/0x370 [ 673.471647][T21999] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 673.471665][T21999] __traceiter_sched_switch+0x9d/0xd0 [ 673.471685][T21999] __schedule+0x238f/0x4cc0 [ 673.471705][T21999] ? do_raw_spin_lock+0x121/0x290 [ 673.471725][T21999] ? __lock_acquire+0xab9/0xd20 [ 673.471746][T21999] ? __pfx___schedule+0x10/0x10 [ 673.471767][T21999] ? schedule+0x91/0x360 [ 673.471782][T21999] schedule+0x165/0x360 [ 673.471797][T21999] synchronize_rcu_expedited+0x583/0x730 [ 673.471815][T21999] ? __pfx_synchronize_rcu_expedited+0x10/0x10 [ 673.471837][T21999] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 673.471860][T21999] ? __pfx___might_resched+0x10/0x10 [ 673.471883][T21999] ? __pfx_autoremove_wake_function+0x10/0x10 [ 673.471906][T21999] synchronize_rcu+0x11a/0x310 [ 673.471920][T21999] ? __pfx_synchronize_rcu+0x10/0x10 [ 673.471935][T21999] ? nft_pernet+0x23/0x240 [ 673.471957][T21999] ? nft_pernet+0x23/0x240 [ 673.471981][T21999] nf_tables_abort+0x74cd/0x88a0 [ 673.472011][T21999] ? __pfx_nf_tables_abort+0x10/0x10 [ 673.472039][T21999] ? __kasan_kmalloc+0x93/0xb0 [ 673.472068][T21999] nfnetlink_rcv+0x1d15/0x2590 [ 673.472098][T21999] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 673.472133][T21999] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 673.472152][T21999] ? netlink_deliver_tap+0x2e/0x1b0 [ 673.472181][T21999] netlink_unicast+0x82c/0x9e0 [ 673.472200][T21999] ? __pfx_netlink_unicast+0x10/0x10 [ 673.472215][T21999] ? netlink_sendmsg+0x642/0xb30 [ 673.472231][T21999] ? skb_put+0x11b/0x210 [ 673.472251][T21999] netlink_sendmsg+0x805/0xb30 [ 673.472272][T21999] ? __pfx_netlink_sendmsg+0x10/0x10 [ 673.472292][T21999] ? aa_sock_msg_perm+0xf1/0x1d0 [ 673.472316][T21999] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 673.472331][T21999] ? __pfx_netlink_sendmsg+0x10/0x10 [ 673.472349][T21999] __sock_sendmsg+0x219/0x270 [ 673.472374][T21999] ____sys_sendmsg+0x505/0x830 [ 673.472397][T21999] ? __pfx_____sys_sendmsg+0x10/0x10 [ 673.472420][T21999] ? import_iovec+0x74/0xa0 [ 673.472440][T21999] ___sys_sendmsg+0x21f/0x2a0 [ 673.472460][T21999] ? __pfx____sys_sendmsg+0x10/0x10 [ 673.472495][T21999] ? __fget_files+0x2a/0x420 [ 673.472517][T21999] ? __fget_files+0x3a0/0x420 [ 673.472543][T21999] __x64_sys_sendmsg+0x19b/0x260 [ 673.472563][T21999] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 673.472587][T21999] ? __pfx_ksys_write+0x10/0x10 [ 673.472605][T21999] ? rcu_is_watching+0x15/0xb0 [ 673.472620][T21999] ? do_syscall_64+0xbe/0x3b0 [ 673.472640][T21999] do_syscall_64+0xfa/0x3b0 [ 673.472657][T21999] ? lockdep_hardirqs_on+0x9c/0x150 [ 673.472673][T21999] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 673.472688][T21999] ? clear_bhb_loop+0x60/0xb0 [ 673.472705][T21999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 673.472720][T21999] RIP: 0033:0x7f05f9f8eec9 [ 673.472734][T21999] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 673.472748][T21999] RSP: 002b:00007f05fad97038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 673.472765][T21999] RAX: ffffffffffffffda RBX: 00007f05fa1e5fa0 RCX: 00007f05f9f8eec9 [ 673.472776][T21999] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 673.472786][T21999] RBP: 00007f05fad97090 R08: 0000000000000000 R09: 0000000000000000 [ 673.472795][T21999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 673.472804][T21999] R13: 00007f05fa1e6038 R14: 00007f05fa1e5fa0 R15: 00007ffec0bf6e48 [ 673.472823][T21999] [ 673.476986][T21991] block nbd3: shutting down sockets [ 673.952326][T22001] netlink: 1041 bytes leftover after parsing attributes in process `syz.4.4011'. [ 674.649886][ T8178] net_ratelimit: 11 callbacks suppressed [ 674.649911][ T8178] bond6: (slave wlan0): failed to get link speed/duplex [ 674.769929][ T8178] bond6: (slave wlan0): failed to get link speed/duplex [ 674.880204][ T9802] bond6: (slave wlan0): failed to get link speed/duplex [ 674.989867][ T9802] bond6: (slave wlan0): failed to get link speed/duplex [ 675.099955][ T9802] bond6: (slave wlan0): failed to get link speed/duplex [ 675.210169][T13508] bond6: (slave wlan0): failed to get link speed/duplex [ 675.319916][ T9798] bond6: (slave wlan0): failed to get link speed/duplex [ 675.429896][T13508] bond6: (slave wlan0): failed to get link speed/duplex [ 675.549907][ T9802] bond6: (slave wlan0): failed to get link speed/duplex [ 675.560023][T16640] Bluetooth: hci2: command 0x0405 tx timeout [ 675.660079][ T9802] bond6: (slave wlan0): failed to get link speed/duplex [ 677.079874][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 679.759939][ T8178] net_ratelimit: 36 callbacks suppressed [ 679.759961][ T8178] bond6: (slave wlan0): failed to get link speed/duplex [ 679.879993][ T8178] bond6: (slave wlan0): failed to get link speed/duplex [ 679.989877][ T8178] bond6: (slave wlan0): failed to get link speed/duplex [ 680.109890][ T8178] bond6: (slave wlan0): failed to get link speed/duplex [ 680.220176][ T9798] bond6: (slave wlan0): failed to get link speed/duplex [ 680.329921][ T9798] bond6: (slave wlan0): failed to get link speed/duplex [ 680.439853][ T8178] bond6: (slave wlan0): failed to get link speed/duplex [ 680.549896][ T9798] bond6: (slave wlan0): failed to get link speed/duplex [ 680.659841][ T9798] bond6: (slave wlan0): failed to get link speed/duplex [ 680.769863][ T9802] bond6: (slave wlan0): failed to get link speed/duplex