last executing test programs: 17.43583183s ago: executing program 3 (id=1435): r0 = socket$alg(0x26, 0x5, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x38, 0x3e, 0x1, 0x70bd29, 0x25dfdbfe, {0x1}, [@typed={0x4}, @nested={0x14, 0x1, 0x0, 0x1, [@nested={0x10, 0x10, 0x0, 0x1, [@nested={0x4, 0x6}, @typed={0x8, 0xe2, 0x0, 0x0, @uid}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) (async) accept4(r0, &(0x7f00000000c0)=@nfc_llcp, &(0x7f0000000140)=0x80, 0x81000) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@empty, 0x0, 0x3}}, 0xe8) (async) r3 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) (async) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x4040) (async) r4 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000280)={{{@in=@private=0xa010101, @in=@multicast2, 0x0, 0x966, 0x0, 0xfffc, 0xa}, {0x1, 0x4, 0x0, 0x80000000, 0x6, 0x9, 0x0, 0x40000000000000}, {0x0, 0x9, 0x53e5, 0x23}, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1}, {{@in6=@mcast1, 0x0, 0x32}, 0x2, @in=@multicast1, 0x1502, 0x4, 0x0, 0x0, 0x4, 0xfffffffd, 0x1}}, 0xe8) (async) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0x8}}}, 0xb8}}, 0x0) 17.432440236s ago: executing program 1 (id=1436): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) (async, rerun: 32) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="010029bd7000ffdbdf25010000000806"], 0x1c}, 0x1, 0x0, 0x0, 0x4000800}, 0x404) (async, rerun: 32) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0xfffffffc, {{@in=@multicast1=0xe0000002, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, 0x0, 0x0, 0xffff, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0xfffffffffffffffb}, {}, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) (async, rerun: 32) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000680), r2) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000003080)={0x0, 0x0, &(0x7f0000003040)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002dbd7000fedbdf250600000008000d00080000000800010030"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x40804) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000200)=0x0) sendmsg$NFC_CMD_LLC_SET_PARAMS(r1, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x5c, r3, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0x8}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x180}, @NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0x1}, @NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0x4}, @NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0x81}, @NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0x6}, @NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8) 17.279211914s ago: executing program 1 (id=1439): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000040)='contention_end\x00', r0, 0x0, 0x9}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000002180)={0x0, 0x0, &(0x7f0000002140)={&(0x7f0000001cc0)={0x14, 0x30, 0x303, 0x1070bd25, 0x25dfdbfc, {0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x8) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000640)={'ip6tnl0\x00', 0x0, 0x4, 0x2, 0x1, 0xcf57, 0xff00, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, @mcast2, 0x8000, 0x0, 0x0, 0x300}}) bind$bt_hci(r3, &(0x7f0000000a00)={0x1f, 0x7}, 0xffffffffffffffc0) ioctl$sock_bt_hci(r2, 0x400448e7, 0x0) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000000c80)=0x200001, 0x4) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x8, 0x1, 0x6, 0x1, {{0x9, 0x4, 0x1, 0x14, 0x24, 0x65, 0x0, 0x5, 0x29, 0x0, @remote, @loopback, {[@ssrr={0x89, 0xf, 0x3b, [@loopback, @multicast1, @rand_addr=0x64010101]}]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000480)=ANY=[@ANYRES32=r5], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x34, 0x0, 0x1, 0x70bd2b, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4044050}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000cc0)=ANY=[], 0x50}}, 0x4000850) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xa, 0x1e, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@func, @initr0={0x18, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x1000}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000380)='syzkaller\x00', 0x538, 0x5c, &(0x7f0000000680)=""/92, 0x41000, 0x1, '\x00', r5, @fallback=0x20, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000700)={0x4, 0x9, 0x6, 0x9a1}, 0x10, 0x0, 0xffffffffffffffff, 0x5, 0x0, &(0x7f0000000740)=[{0x4, 0x4, 0x2, 0x6}, {0x0, 0x3, 0x6, 0x5}, {0x4, 0x5, 0x4, 0x9}, {0x5, 0x4, 0xd, 0x3}, {0x2, 0x1, 0x4, 0xa}], 0x10, 0xc}, 0x94) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), r1) sendmsg$ETHTOOL_MSG_WOL_GET(r4, &(0x7f00000009c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000580)={0x34, r8, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x20000004) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)=@deltclass={0x48, 0x29, 0x220, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xb}, {0xfff3, 0x7}}, [@tclass_kind_options=@c_ingress={0xc}, @tclass_kind_options=@c_tbf={0x8}, @tclass_kind_options=@c_fq_codel={0xd}]}, 0x48}, 0x1, 0x0, 0x0, 0x40001}, 0x4800) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000a80), r3) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r1, &(0x7f0000000c40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x108, r10, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x7}, {0x6, 0x16, 0x120}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xff}, {0x6, 0x16, 0x4}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x8}, {0x6, 0x16, 0x1}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xff}, {0x6, 0x16, 0x1}, {0x5, 0x12, 0x1}}]}, 0x108}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x0, 0xfa, 0x0, &(0x7f0000000880)="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", 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x9, 0x3}, 0x50) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="4000000010001fff005990000000000000000000513ac735b67a5f828e676d59215f8651fd9e6523847bea3d3041e51a79f8ac9aa9529bb3bf5cb320c5a897576bbd26e68ce3661d48827a6b7d", @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800c0001006d6163766c616e00100002800a0004000180c20000010000"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r11, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x0, 0x0) 17.278001706s ago: executing program 3 (id=1440): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, 0x0, &(0x7f0000000040)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0xc41, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) ioctl$FS_IOC_GETFSSYSFSPATH(r0, 0x80811501, &(0x7f0000000440)={0x80}) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}}, 0x10) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, &(0x7f0000000080)={0x8, {{0xa, 0x0, 0x7, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1, 0x2}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2c, &(0x7f0000000200)={0x8, {{0xa, 0x0, 0x400, @mcast1={0xff, 0x7}}}, {{0xa, 0xffff, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, 0x0) 17.167038566s ago: executing program 0 (id=1441): r0 = socket$inet6(0xa, 0x6, 0x2b2) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x30e2, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000013c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001340), &(0x7f0000001380)}, 0x20) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001400)={&(0x7f00000000c0)="8267d108bbe54f80471aa1d193fd3539f7e3158cc7c794f3cba3ad5e6648648053c9cd2dd1cd3d3af303a1873d4d7f17fecb092efb3b1b4d5eb6842bec71d7cec844e1eda1e80ed7723d82e04316d61e93d72ece0bb87ec61831b89327d5f0b81ebdb28da08886ebdae7710689dc9e2f83bcc2099ad71a2e22ed996489834061dc4229a1de04a67ed85e59abeaf7b73091cac3e38fc431c9b0ecf6e7a78fc5905029f2bb6c6dd5c7bb68e404c7bfcbd5957335939da65d18f714299853790adedfdaf02c47394b3fa36c89deb2ef7c9b6dea95c3fe29f86db765228eb4a8e7b4c92075db4587841fda2a6ab72cad1178d3cf43d6165e2c5fe6198378601ce300058408634735942112a6b0bf89aecf789a3324c4a9d685db4f4f082762ce86e4649626e212d6e90f0867dc11ff8dfb99913cd0f10089d620ddf3cc152ae425c91fc17eb5bf091934af34c244ec9fadb63bd5cb9d9f75cf6d32ba3d448dbf184e392d4d671ddb24e58015679db1d7a446a8dd09fd7ad353d53af4a319003d3a7d94f0a72df36e2e10b9289c02644780cb5d44bad3e71fe99c9358c0d2430c27cb0394457e5aa93b120ce8b31e8b6cd18924e1fe2ad06f11ced45c34e3ffa9b1e459aaa1e862c3a8a14a571eef88436250763570774291d819e2dccc8c9f48b495102a3fb8cb593c473d8180fcb22f2eda7acd6cb425e1c0f759cdda374501699b8c6f5f18c29d1a17bab927f87e7c7b70de552672867cdbb56bbc2b00a2662e23b26a9804d58d98fb10e850ed4d5917f3b7e3f262855beca327ac7098313dc06087362477fc2524291f0c72e5b961f894df39a37d756f9ad4175f42b693bec22f1d0ddd8682eef61687d48cd142c2f910314fba152fb1ceef892d74cde51557f710760adacbb80e47d9dc7ce066805439489d1ea2690fbc8cc63d5489733b1549103e315cbbf5f75cd9163904e81a2abaa231635136d86f5344c57bdaf47b25ef46d76e9fb2575aecb54662bec09dd935a01cb43bbf7cf1ca8ee4bba873c8a43e92a0d74f7be80fb0773b87b6835678455fd40ecf7dfc22ed333368278b78bf7f046c89d921fba97c603ed1a2f711d6fe0ec102fcbf1fb6112ce4517a71895a5a4bce826dabd2bb7f21f59bddef1f019c0d482e962ecefa4f6033760596340ee0142cbf37ea0a7bc6cd92649c4643b5942fca0d3bd629840a42a285d2029d61fd19e89ceab20a90ad7ac81fcb6462365d6342d1875c08ca456690fbee9fc8a65da65732cdeb18c1d757653e745be1afe933e0670b64a2d9eb3aa5f1a6c58c4a73fac752deac82436bc18981402821f2511edbdbd0d28a622a16175ac6c3016864e8f099802c5abdef69ac622cb198c2cdcc4fd4e972052d95e1595f63fbfa1b6d25484aa7aaee8caaf32be71feff39402834d74bf6e6584a309370ecbc3ab227bdaa5526878b80f2fd5e752f4945c02e46002975a4933ca7dd89422d14ba9f530a9afa964bf67c101694bd3dabdd4d9d190bb45c4fe83eb9e5bee813a25a3b412c74d01f9ef6b1538d0e02f2934c50e88ae80e1e519ab02d594a8c9a99dafde41038fe3cfd9f0413fc4699b034f7d0e40533f5a23668ebffc6aa5c9c1329386e9c7fb47a614f504da2db77d4848b7bc5e4199bab829d8bbe883c7fd6fb21c4236205858643088cbf8f8ad8bab07bd2129ac9d44c84d46575bca034014ffeb50105efc625ebfc8a1eafea3e89c89bc119ab4a305c832fb4a461dde7948420990d244d72aa0a1814d06715d39c6e34f34640a44ebb3b6667a53e847b45a5b053da540b4a92fb466c15eb9433cf6e6ee65c4ad3df68941e70c53f450c2466fb94c48bbcea149b1a31f80c43a53e26f25de964c5deb69e1b1324fe524f347a362136c72680ac1ad0d3463dae3a405919ee914e6d51c7ef61258496b3908bba2f44412f5375a02e0c2276213654ac0bb74aeec03068ca3ef8f026d2316e40d8ca9d8590ed5ac05f5220de1f20583b8e0332f9331f69275750f44640ea4bc147c5797d08b00d0a5c2a49e897be76443b267b171012d932e8db5920d9b7d808d4969ba3a124887f7d2def4d124e9cfa4773648b4522f83be66890e087afa928865301ab8f2e770f1e1f3d2a1ab5b52d52af1f3c4b3abe38e427b6c87ab6304fe532ec32e2b5d239735fad13bdd6987dc7c4e565b811c857bba1790d875140900f74f534eb447bd22e4ffd776ff577d74df3287199890b8144fde3901d9249e4edd8a9303de970596576e5c257acd44e33a376596b9e627792732b13e9be8af68b0b31ac4b9393e953705422d30bd2d9c18a4d9a4148d91a335aa4000f736379669b1a5579cad6b4b0ab0916bb9f7f0a2e1667b6815539aaa88e1c069cf7440a95c9546f6e032f081e08a4715453ecef1d98be046516ce5ea50c5793231449102f290a9b401e5fc6c1fcff457773681cf0b57a90e796c6bee8692db5e77edab0137fd1f0faf99d698b46a643bbff842da3f228e5b51ac9f9ac99ddb5569a9cb04f16c28131c0b1013160e736435360e0bbc745870cc702570de8c559c3f1d7d86c7cd5eb557e37a44445c018f7c5db193bc08e908f1ba0fef1d2e45f45479a0c07d6f04cbf0c2315a959ce4aa5e12ea829e11ee9e48c94abcfcd2c2446d2f289fe878dda54b6316dcdfe9906a81d7de95561678c701afc27f7d4459377ef2049d5664ed9473b6d64247552a053b4a18a6bb4847f2b588174cfd3dff768fad3e9304f5d2edd1201548b8bd459b4d7479d14745aa2dccfdb1e69438d3b34f4ef970e61d9dd67eac6ec6ac78278d987b054c76a07dadbb8d88ebfc213d176d5b440e79e3b0b7e4267161109374cd63fba58c3567915106410f4ba8f8cf72e07c0cbf32d7f3195c2252623e6727563dceec7e6ca2de2941af3a9ec8a91b0ee2b5c4577576af6ab85367f84fd25e79860ec1f5bd1081b1e4dba2e1ce52647c890ee617c3d7c0dcef62abf1e2efd0f150a74fcab17133b776d45074d502248f0d62113db0613f1afb6b617fb7ce0e9faef50ca4ed3fd35ec1d0dfd1f370c2067f8bd7d6e4a9642d0ebfd2a67f54ba598efc66e3cfdd7d85252bca262180560329d999f5304e4b2689bb1e6ebb59627a43d39079cb6a8b8cd3f8993d7a69fbe083fcdc2985610963660a92e9ecd66603717deb1215bfc1b2630f4fa470ed791fc3cf126ffe1cf8195b26d8939c8d8cf60e5dfd2575f44cc60b7ed0fa43d1fd4441a3a402227b5e7184f6c3efd5f00e15b1ae6de54a121d4485410ca227b89a589bced0df0f1657df0e3e1b596dbc0093456385cfae1e8528d62442ed8a2a30d6673110f9f2dc20304bbb73564c328e2474cce92539513212888efc748ebe453a9a1cac4037da844fc387e76782486759c61c6ecdb208d10b8a21dc3f0c0c6a4dbd2b7bd3714cf42a423c15232df5ff3e64301e94deceb155e71eafefd5c5490ed32ebce453d4a86e48568560c2052ab516135b37061fec94f0d3771a417d9ed0aa6c7379f1a80fd6efe9d579260bd47cb86292333ffd290b13298a0f2d450de5f6751b417602543568395296fa9bf2b46adb75cdb7450eada17273d6d09b041ca34cf1021b47e11de621c789b7896c4ab8bb75ec47cca92a6e35dc5828a9a35e63ab1f5303e8e89bf0f307b91b4f4532d4a11b47808cc4126c972a177aaad46dee8972feb25fd6694f48865281fff894d10cbe4660832d26715a061c4f1ca56ea1808b1bfc2c6a8f34dbf03adcb5158208879a19e31503c6fffd25b0109e57490e8a73e34461738a5ff2192b116b86f05c7f2139e4f2fdd905e41ee4759271884c4a47e16b9faaa0b7920f92dfa6b699b622f96e55878c1f4299ca5b62e695381828510c98463ae80051532ee94f1c4cc5b61061b9c407d1a7cebac8eae91153088f3877dca42a37cae6d00964e89f9ce15d59ea1ef488796033607316509f1b8e03d1a61c036c9769bfe12e30331648f034c5bc6ca6d3b516805e42f2b369ef4795e5fa4e50300f35001fc82e8fad15db4ebd3413c59b4bab409878a6946e0902e611196378a61f39452ac6a506a1e3cbebafe7f3fe25e2e82042ca237e433938760fe0c1bff5b11c354adc0c5e31561d0e66d62d1a71f0d0407e17f3760eb151d966aa2f3bf512041b56926c11319cad94592202c98a49afa1e0a4554141ed226c78131504224894793a6a1604b7e554356f81339eb2332fb3079e5025e051b662633048dad74fa62a004da3c93f5b5486f504156a51c409dc905f3b539dda78418a81adaeef490ebdf2e8bde9277584262417468df912567ad6a5ceadf772cb9e41acbfc763d1d0e69422794105b52fea3ad8c609985c6ae1da22abce03c0b464aeb6657c7dc39eebf9854dc6302152dac824f8775c4439c0104d0e3c75a38bf690343767fa0385fed692139949d8e578b4c95f71264791ac1bfb62a923442fbdeeca2fd51c0c04afa9fa5390c8fcf5ad6256ad6be964e7f98d7386b0bc95013d626abf16b662e4d8fa996639a9e3526d21e637f44e61a92e33d03d417f202520930c82d933d99236f461a34dd613fae1b2d997432a94a39b968a87bb735866e0516cae9e2de60e1feee35466a7e9d8517b47464ca0d64ccbda11ebfa134ee6c86a3a6588f4b1b72307a1cbc244fa59997a6e73aa88f52e2ca1677a2f7274c0cc0890b7f02eb1a5650cb54c8547ad94c50d96334be7a66a9b41f7090e7a1edd80f6d31e00f198aebd10c372c81bc876c4c5677b6d4d259159b4e36f5f1a38b18a51a5c823af262a09ca7435add95700e4e1ae28c0e05b37e572ede3b2b4d7dcb61ed0cdcc088f0772da4c2e78f11379f57a5a71038b328c62f19caebd801091daa8b1a7dd7b1f6507c2bc0233c597e4be72762f5a6161a27c50a12ed542abca6487845fdd1387a7d4f4d8d7de244b0cd407870ba8bb1bf9d50018e0e6870e8909c174988df447caed78a2e8b8129067cdb77e861f8efe278c37e25a6217f9c23efbab823b5fa5f1a35e47221d97c1e33fea6c04f0d1a45297c75de30daf6766d2ad8f7296f31d6e6997b86b3214c7a9304d3b2e69245d65ac045dda2cd7fd10f7f555710a9a8ed16be8e5c0496acea4d3840b3d6fc4fb743e1d4b1710a29309014573166ab75ce2834171cd96d59e5ed5a19732c23505a100af99222c1fa4f54291a0768c91b141cb08eb2fe968e4c1168ee5d965297370e195851b3239a57727acdfd6eec6291e86e83f63dedfd2ea5afea0280321b4df7554d0f878d7518d74f2aadd295de760790e643a77ae28237e2de7f68525a434c3cf5681fb235408fa9f365c27b4c0cba3cf54a8a9e27cbcec5f6fdf82f1dc405761fe52a44e13ceca3776953c8272d621269e1b03466a66e325339fd19d09d424749b88a23dbce1764c6d4637ca64da47f96aabba20a94819ab45d29c2b96b804f31e73de8a7ba7fb9cfbd95c50327d549058c48215af4f8b3e3ca212e1e759ab7dd4e0d49850960e0dea9332217c1e7ce0e80d5c0afb2d836fb91d9e5fe58884ebbca03f0a956a676559886074db6badb6fb1e69dab46902d9c5eb5d33fb4c83c211faa9074665b7e9ade5cbfdd73080a5084d36fab0693d8f274d24135883d26a579e7d16905c3bffc7c3d82a4cbea9ea8a7ed2cfd8366f231b6abe8495ccd367f216ef4e8adf424ffab3ff152c170e0ffecf720e9c4982551039e75a4023bd3f7d1228b97457649d074c5aa256e303136432183b32d2414066d0f69e25ee27c254745eaf10ceed688410b35944", &(0x7f00000010c0)=""/253, &(0x7f00000011c0)="ed4991e8fd57150253c339db5fd95133c8aab3098e44d2c7e4f58431a7dbd7866ff1485f7a221b685b77bfb436eabbdb7bd8ee4a37c17701b7d38bb8f39ff177957b90817b12da65d67413e5dac4f5bdc371cddb13e15011bbce4e203c57eeb507b4c5b8a394c2acbeda87700b9128f667eaab5f584ad086eb04673568835a6478ab19eac3271daac672164eccbd18efca04b1afb0a5920480f6dcc44437ee731c7566fed3328af9decb4c6d43", &(0x7f0000001280)="77c51ac70f99a8fb6fc661d4be97db7fd30fa16d27285fdc73860ead942a30091886c3f6612cff001179c60bfca25bf1fba3cf5604c60a6e0f81cb38d40cdc0a69c9a6c5eb1d902eddfe9ffd8bfdcb2286d38efcd45f0a35588d07ac1f7e479c01f544301f5a7fc9c21f67092f078234af849713786dc7c4a3254de530fa7f259a3ebb80d50f5f9dda3299e65352ee0145e2bc147ed792140a8bf8ff537c", 0x16b150da, r1, 0x4}, 0x38) pipe(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$bt_BT_VOICE(r3, 0x112, 0xb, &(0x7f0000001480)=0x4, &(0x7f00000014c0)=0x2) socket$inet(0x2, 0x5, 0xb) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000001540)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f0000001600)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x40010000}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x34, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x40005}, 0x31) ioctl$SIOCAX25NOUID(r3, 0x89e3, &(0x7f0000001640)=0x1) r5 = socket$kcm(0x29, 0x8, 0x0) sendmsg$kcm(r5, &(0x7f0000001dc0)={&(0x7f0000001680)=@in={0x2, 0x4e22, @multicast1}, 0x80, &(0x7f0000001d00)=[{&(0x7f0000001700)="595c3ac7b09d1114cf25988f8aec59e854f54bcd292f79c65fef3304c49d68038c1ae6a2b847c11a1518bef3ad62712da57a1d1736a66a7a0e2984cfe54d8a9ff0650384ab8f179401aeac13fd1485f9fda384fbc0ee6d4591353aafbd2fb23acac9bb2c97dc94b9d39a02b9dffec0382ab61f6e9b7eadcf3f7f611a0851da5cb985949258dd7bfe40203e5d81e3e05ef2b2a8411dba8ddf238bb238b7bad0cbf2d470ced12b2f6b3173f7b0b3d10934588f68520e3ce7e956b201a8c17d01073b6ec278f15670fd67", 0xc9}, {&(0x7f0000001800)="504bdb257f909eca22c02a4fd33d065664d1a6701d3042dbf909dcfc41d9c640595353d0f1d849e2332be0785cedfc2534d8ebe6bffc6d266c7c85fe326a1a77d3e3fc62c7e55906ea3770a010a384a3c5e2796195747492692a24bdf67e49b2cd86bdd00cbc2269d768cb592d8d8686b75187be13d6759d3dd0e526fae338e36dc07f238543b7f186f1", 0x8a}, {&(0x7f00000018c0)="7f853e2808a07df8511fc62bf5645f2180f7845487e06e471b4f3a43fee71f33f4808035887393796a6656e7cc2d5c31f3fc532de78c09748255a7d0fd93f1e9dc1c9b0fef289042fcfc0033d2c94807f7e20b76dd9fbfc229ae89f1bd23b78c9b423ba29ddb84fcd975e04b18c3c3b6ae0e94a895c67b0aa5d0370a443738f1f5435a65480825496549dfade7f9f1daee4afab41975ae23d212a306b38ba04f60881753b1e89e01", 0xa8}, {&(0x7f0000001980)="55b683bf477ab59b5befa5179c814f4cd14f1cbec814bff68c978dce69b7884621989d867e072be3c327521578406465e8a2769c5738d88b8cd76b997793fe53a6806fb48e48534ff0d1d8b01f5d398858953d6422e1893ee03089d97fc00b688f970541f8410e0f2b", 0x69}, {&(0x7f0000001a00)="72431e49f5a4bbc44e5484bb22bd8a6c882dbe07810419fc38f1e72ee3a6b5190e97819dfd51463b86b5c3e1a0b7877d6e77060037e89195a095f019b095e92633c6f8bceea1175b7e41a7a03b281869887e5546658676f6518f54213a62d5053b1c48105ef8e7034318c917e682f180009e372814854277593053c53e45a6fad8f1a667993bc71c7d8d2601b584e4688294a1e4ce351ebd1447103ce85de6412e6aa782a63c9fda72492376185cf6e1865efa41a3424c84062b9e104167bc0d5f0782ab074be770c3845e90b56a976f46bb1b5d6fc49fb7751d7831dfdfa85c72c075317f86f9cca28b6e8727dbb898ad8d83a504", 0xf5}, {&(0x7f0000001b00)="cf3c595c21dd9351bfd9c7f6a0003816e47ce4d3f2a4e3856ae6d688731a62b24398075242df8e9628ab9795704d5d468abf789e7f6a64c8ef8334be6de277411fbf9930a120da0dc126698cf1a8bb3a1525d418225112e178538d23b2530138db75c5fc271b965f85d7b899444da5aa", 0x70}, {&(0x7f0000001b80)="89aaadf64e70a2732fdc8c5518f6406b", 0x10}, {&(0x7f0000001bc0)="8b660255460826a8772c5476cc63b466d5e9f6d4f2da396383ce1460999ddf5443a791311e93a1f1ecab585682b3d9c4e1e31aa34af29a6a00558981ddcc0cdfd7008656960485da7b3e7a4a8604584a8d0572a8e72f92003cc25f0d7f12aa2b19bb42585e2210fb65ee17fe34cbe3c77eaa", 0x72}, {&(0x7f0000001c40)="cbe7024541475726c976cdf2541afdd954f5219c5c848e32e5f4afabfc08481fe88e3d86b61e1060a8fb", 0x2a}, {&(0x7f0000001c80)="c6ce4cbe2ae9b6baea1b239329ad78052926ff3d16df01ec8fdd0e6870581a8425280b8c54ab469923a8fd7a612bf95acdcc8ff824f7e9b47b2335ff9a13478525969c82c86d184f8d6031e7bab2881f8d43df3a9d5d49de9bd200f3", 0x5c}], 0xa}, 0xc080) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001e40), r2) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000001e80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001f40)={&(0x7f0000001e00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001f00)={&(0x7f0000001ec0)={0x40, r6, 0x2, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x2, 0x77}}}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0xa, 0xcd, [0x200, 0x9, 0x80]}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}]]}, 0x40}, 0x1, 0x0, 0x0, 0x804}, 0x4004000) sendmsg$NL80211_CMD_SET_NOACK_MAP(r2, &(0x7f0000002080)={&(0x7f0000001f80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002040)={&(0x7f0000001fc0)={0x5c, r6, 0x2, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x8}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x6}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x5}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x9}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x200}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x4f}, @NL80211_ATTR_NOACK_MAP={0x6}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x42ee}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x9}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc014) r8 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r8, &(0x7f00000020c0)={0x2, 0x0, @private=0xa010102, 0x2}, 0x10) sendmsg$NL80211_CMD_PROBE_CLIENT(r3, &(0x7f00000021c0)={&(0x7f0000002100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002180)={&(0x7f0000002140)={0x2c, r6, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044084}, 0x4) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000002240), r3) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000002300)={&(0x7f0000002200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000022c0)={&(0x7f0000002280)={0x1c, r9, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x80) r10 = socket$netlink(0x10, 0x3, 0x8) getpeername$netlink(r10, &(0x7f0000002340), &(0x7f0000002380)=0xc) sendmsg$key(0xffffffffffffffff, &(0x7f0000002440)={0x0, 0x0, &(0x7f0000002400)={&(0x7f00000023c0)={0x2, 0x4, 0x8, 0x5, 0x4, 0x0, 0x70bd25, 0x25dfdbfe, [@sadb_sa={0x2, 0x1, 0x4d4, 0x7, 0x6, 0x9d, 0x3}]}, 0x20}}, 0x1) ioctl$sock_SIOCGPGRP(r8, 0x8904, &(0x7f0000002480)=0x0) syz_open_procfs$namespace(r11, &(0x7f00000024c0)='ns/cgroup\x00') r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000002540), r2) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000002600)={&(0x7f0000002500)={0x10, 0x0, 0x0, 0xe8a774a4d89a8e07}, 0xc, &(0x7f00000025c0)={&(0x7f0000002580)={0x30, r12, 0x4, 0x70bd27, 0x25dfdbff, {{}, {}, {0x14, 0x19, {0x200, 0x800, 0x511, 0xffff8000}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x60000080}, 0x4008054) 17.087869148s ago: executing program 3 (id=1443): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair(0x23, 0x1, 0x0, &(0x7f0000000440)) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0xa8, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x80, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x48, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x38, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x10, 0x5, 0x0, 0x1, [@NFTA_DATA_VALUE={0xb, 0x1, "8baae571312448"}]}, @NFTA_BITWISE_MASK={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "8a95"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x11c}}, 0x0) 17.023321687s ago: executing program 1 (id=1444): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x1, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x2b, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x1, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x2b, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={r1, 0x0, 0x0}, 0x20) close(0x3) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "ef"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xb8}, 0x1, 0x0, 0x0, 0x20004001}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r3}, 0x38) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000280), &(0x7f0000000000)=""/6, 0x2}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000280), &(0x7f0000000000)=""/6, 0x2}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) (async) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_mreqsrc(r4, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty}, 0xc) epoll_create1(0x0) (async) epoll_create1(0x0) socket(0x1, 0x80802, 0x0) socket$xdp(0x2c, 0x3, 0x0) epoll_create1(0x0) (async) epoll_create1(0x0) socket$netlink(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) socket$kcm(0x29, 0x6, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$alg(0x26, 0x5, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x48010) (async) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x48010) 17.011374356s ago: executing program 3 (id=1445): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x6, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4000) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0xd1, @ipv4={'\x00', '\xff\xff', @loopback}, 0x104}, 0x1c) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c0000001400050925bd5000fcdbdf250a06ff004e"], 0x4c}}, 0x4814) bind$alg(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(r0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x601}, '\x00', "5193bb672965593497c186a80e00", '\x00\x00=*', "1202000000040030"}, 0x38) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="1400003a", @ANYRES16=0x0, @ANYBLOB="00022dbd7000ffdfdf2508000000"], 0x14}, 0x1, 0x0, 0x0, 0x20004005}, 0x2000c800) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/pid\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r4, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/pid_for_children\x00') mkdirat$cgroup(r5, &(0x7f0000000000)='syz0\x00', 0x1ff) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='workqueue_activate_work\x00', r6, 0x0, 0x2}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) sendmsg$can_raw(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000180)={0x1d, r7}, 0x10, &(0x7f0000000140)={&(0x7f0000000340)=@canfd={{0x4, 0x1, 0x1, 0x1}, 0x6, 0x3, 0x0, 0x0, "555390508bff2b9e63477a98784ca217bae7ae597ea6ea5b806fcd257ce7cb9e0346b0e1ec5064937df2a6f9dd768ae61274d13f2ddf486eaacfb6af356771b9"}, 0x48}, 0x2, 0x0, 0x0, 0x844}, 0x4000855) r8 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNDEL(r8, 0x400442c9, &(0x7f0000000040)={0x51, @remote}) 16.843373992s ago: executing program 0 (id=1447): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x3, 0x8, @loopback, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001800010029bd7000fedbdf251d01050008000e00c6c8115820c476a1fc1e029c38a0d6c0d570f9ee4646", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="150004000400000003030000918a76e1efa19e910500000008000900", @ANYRES32=0x0, @ANYBLOB], 0x44}}, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_128={{0x304}, "c545c3c0c4bcea62", "95cb867c7f6187aa0cba88661c2e67fd", "6abdc0a1", "d2b520241694601b"}, 0x28) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@ip_tos_int={{0x14, 0x11a, 0x1, 0x2}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}], 0x30}, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000300000000000000403fd03f180100002020782500000000002020207b1af8ff000000006d0afeff000000000701b092f8ffffffb702000008000000b70300000f200000a500feff0600000095"], &(0x7f0000000080)='GPL\x00', 0xb, 0x101a, &(0x7f0000000840)=""/4122, 0x41100, 0x28, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @private, @private}, &(0x7f0000000100)=0xc) 16.842880662s ago: executing program 1 (id=1448): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300a7cc4affeeaf541d002007000000", @ANYRES32=r3, @ANYBLOB="00000000100000001c001a800800", @ANYRES16=r4], 0x44}}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000300)=r1, 0x4) sendmsg$nl_xfrm(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="f800000059d961"], 0xf8}}, 0x0) 16.794530334s ago: executing program 0 (id=1449): syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x6, [@enum64={0x3, 0x1, 0x0, 0x13, 0x0, 0x8, [{0x3, 0x8, 0x5}]}]}, {0x0, [0x61, 0x61, 0x61, 0x0]}}, 0x0, 0x36, 0x0, 0x0, 0x9b2987a6}, 0x28) (async) socket(0xb, 0x5, 0xb) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union]}}, 0x0, 0x26}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x30, &(0x7f00000001c0), 0x10}, 0x71) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=@ipv6_newrule={0x40, 0x20, 0x5bfddf52a8fa8e87, 0x70bd2d, 0x25dfdbfe, {0xa, 0x20, 0x0, 0x4, 0x6, 0x0, 0x0, 0x0, 0x2}, [@FRA_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x2c}}, @FIB_RULE_POLICY=@FRA_FWMARK={0x8, 0xa, 0x1}, @FIB_RULE_POLICY=@FRA_FWMASK={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x40840}, 0x4008040) 16.723491623s ago: executing program 1 (id=1451): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00'}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_udp_int(r1, 0x11, 0xb, 0x0, &(0x7f00000059c0)) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYBLOB="240000001e00210000000000fcdbdf250a000000050000000000000008000d80"], 0x24}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01001800000000005f4539000018000000180000000400000001000000010000840400000000000000060000000c00000000612e00"], &(0x7f0000000f40)=""/4079, 0x34, 0xfef, 0x1}, 0x28) 16.695295455s ago: executing program 0 (id=1452): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00\x00\x00\x00 '}) (async, rerun: 64) r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x224400, 0x0) (async) syz_emit_ethernet(0x82, &(0x7f0000000680)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @local, {[@rr={0x7, 0x3}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private=0xa010133}, {@multicast1, 0x1000}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@multicast1}, {}, {@dev}, {@private}]}]}}}}}}}, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) (async) ioctl$PPPIOCSNPMODE(r1, 0x4008744b, &(0x7f0000000200)={0x57, 0x2}) (async) r3 = socket(0x1d, 0x1, 0xfffffffc) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x4}}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}}, 0x0, @in=@local}}, 0xe8) (async) syz_emit_ethernet(0x66, &(0x7f0000000080)={@multicast, @random="07a24f79ee3f", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, ' \x00', 0x30, 0x2f, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, {[], {0x0, 0x883e, 0x30, 0x0, @opaque="86f79dbf77ab802c7f3cec19c5a8d8bedef27dc4d05e14deb36cbe369e251292a7baebcaa954dcf6"}}}}}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="b80000001000210400000000fedbdf25000000002356949204bb53447e407dff5a305a077030050c4fa3a349acea94552b024ccb1bc98cd3bd3e711dabd57cb999c0f9caed6e790fc739b6f53fd4ed090bb401de023675137655f7a7377fc6af8d3f7b0e9537af11fad9be8232b808753d273d855db76b9115677eea22d2d1f24255", @ANYRES32=0x0, @ANYBLOB="adffa888e16000009000128009000100766c616e00000000800002800c0002000e0000000a000000340004802000390017900000020000000c000100f04ae965cb0b00000c00010004000000002000000c000100001000000900000006000100020000000c0002000a0000000c000000280003800c00010008000000090000000c00010009000000030000000c000100090000000080000008000500", @ANYRES32=r4], 0xb8}, 0x1, 0x0, 0x0, 0x2000}, 0x12) 16.567201028s ago: executing program 0 (id=1453): r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_int(r0, 0x29, 0x10, &(0x7f00000000c0)=0x8, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @empty}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve0\x00'}]}, 0x5c}}, 0x2000000) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="1a0000000212a277", 0x8) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-512-generic\x00'}, 0x68) r4 = accept4(r3, 0x0, 0x0, 0x80800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d38d26b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) 16.4912719s ago: executing program 1 (id=1454): setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000000c0)={0x41, 0x12}, 0x10) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)={0x41}, 0x1be) bind$tipc(r1, 0x0, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) r4 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000f36400000000000000"], 0x48) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r4, 0xc96df000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x18) recvmmsg(0xffffffffffffffff, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000}, 0xf5ff}], 0xf00, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@ipv6_newaddrlabel={0x38, 0x48, 0x611, 0x70bd2c, 0x25dfdbfd, {0xa, 0x0, 0x78, 0x0, 0x0, 0x7}, [@IFAL_LABEL={0x8, 0x2, 0xc}, @IFAL_ADDRESS={0x14, 0x1, @mcast2}]}, 0x38}}, 0x0) r6 = accept(r0, &(0x7f0000000180)=@l2={0x1f, 0x0, @none}, &(0x7f00000002c0)=0x80) sendmsg$AUDIT_SIGNAL_INFO(r6, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x10, 0x3f2, 0x100, 0x70bd27, 0x25dfdbfe, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x1}, 0x240490d5) shutdown(0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x0) setsockopt$MRT_FLUSH(r2, 0x0, 0xd4, &(0x7f00000003c0)=0xa, 0x4) r7 = syz_init_net_socket$ax25(0x3, 0x2, 0xc4) ioctl$SIOCAX25DELUID(r7, 0x89e2, &(0x7f0000001000)={0x3, @null}) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r8, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r8, 0x84, 0xb, &(0x7f0000000100)={0x66, 0xfe, 0x4, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9}, 0xe) shutdown(r8, 0x1) recvmmsg(r8, &(0x7f0000005000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x13}, 0x3}], 0x4000169, 0x60, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000080)) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40050) 16.487020446s ago: executing program 2 (id=1455): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=@deltclass={0x94, 0x29, 0x100, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xb, 0xfff3}, {0x2}, {0x2, 0xfff2}}, [@tclass_kind_options=@c_prio={0x9}, @TCA_RATE={0x6, 0x5, {0x28, 0x1}}, @TCA_RATE={0x6, 0x5, {0x8, 0xfe}}, @tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x5}}}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_cake={0x9}, @tclass_kind_options=@c_qfq={{0x8}, {0x14, 0x2, [@TCA_QFQ_WEIGHT={0x8, 0x1, 0x7}, @TCA_QFQ_LMAX={0x8, 0x2, 0x6}]}}, @tclass_kind_options=@c_skbprio={0xc}]}, 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x400c084) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xffffffffffffffc0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="44000000190001022cbd7000fedbdf250a141409fc03ff09001400000c00168008000300cd00000000001500050000001400050000000000000000050000000000000001"], 0x44}}, 0x440088c4) 16.423883877s ago: executing program 4 (id=1456): syz_emit_ethernet(0x5e, &(0x7f00000001c0)={@local, @remote, @void, {@ipv6={0x86dd, @dccp_packet={0x0, 0x6, "f91e2e", 0x28, 0x3c, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[@srh={0x2c, 0x2, 0x4, 0x1, 0x5, 0x50, 0x4, [@mcast2]}], {{0x4e21, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "706a01", 0x0, "cc1978"}}}}}}}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r1, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x1) 16.37152725s ago: executing program 2 (id=1457): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="600000000206010800000000000000000100000a1200030023ebb0dd4fb17a65289288c17a8637dc686173683a6e65742c706f72740000000900020073797a300000000005000100070000000500040000000000050005000200000014000780"], 0x60}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x8000) 16.296675858s ago: executing program 4 (id=1458): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'nicvf0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x3c}}, 0x40048a4) r4 = socket$unix(0x1, 0x2, 0x0) connect$unix(r4, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r4, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r5, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0xa, 0x8800}, 0x4000080) syz_genetlink_get_family_id$ethtool(&(0x7f0000007540), 0xffffffffffffffff) socket$inet(0x10, 0x3, 0x0) r6 = socket$kcm(0xa, 0x2, 0x0) r7 = socket(0x2, 0x80805, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x640100ff, 0x4e20, 0x3, 'lblcr\x00', 0x20, 0xa7e, 0x70}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x1, 0xcd}}, 0x44) sendmsg$sock(r6, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) socket$unix(0x1, 0x2, 0x0) (async) bind$unix(r0, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000008c0)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'nicvf0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x3c}}, 0x40048a4) (async) socket$unix(0x1, 0x2, 0x0) (async) connect$unix(r4, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) sendmmsg(r4, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) (async) socket$unix(0x1, 0x2, 0x0) (async) sendmsg$unix(r5, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0xa, 0x8800}, 0x4000080) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000007540), 0xffffffffffffffff) (async) socket$inet(0x10, 0x3, 0x0) (async) socket$kcm(0xa, 0x2, 0x0) (async) socket(0x2, 0x80805, 0x0) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x640100ff, 0x4e20, 0x3, 'lblcr\x00', 0x20, 0xa7e, 0x70}, 0x2c) (async) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x1, 0xcd}}, 0x44) (async) sendmsg$sock(r6, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) (async) 16.285697239s ago: executing program 2 (id=1459): r0 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)=0x2) r1 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r1, 0x4004f50d, &(0x7f0000000040)) setsockopt$sock_int(r0, 0x1, 0x3b, &(0x7f0000000080)=0x3ff, 0x4) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f00000000c0)={0x2b, 0x4, 0x1, 0x7, 0x0, [@empty, @local]}, 0x28) r2 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_buf(r2, 0x6, 0xd, &(0x7f0000000100)=""/133, &(0x7f00000001c0)=0x85) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000280)=@mangle={'mangle\x00', 0x1f, 0x6, 0x560, 0x0, 0xf8, 0x0, 0x0, 0x1f8, 0x4c8, 0x4c8, 0x4c8, 0x4c8, 0x4c8, 0x6, &(0x7f0000000200), {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x4, 0x0, 0x149884c1, 0x1}}, @common=@addrtype={{0x30}, {0x20, 0x101, 0x1, 0x1}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x20, 0x7, 0x2}}}, {{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ttl={{0x28}, {0x3, 0x3}}, @common=@unspec=@connlimit={{0x40}, {[0xffffffff, 0xff000000, 0xffffffff, 0xffffff00], 0xfffffffd, 0x0, {0x5}}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x10, 0x1}}}, {{@ip={@rand_addr=0x64010100, @broadcast, 0xff, 0xffffffff, 'ipvlan1\x00', 'rose0\x00', {0xff}, {}, 0x5c, 0x3, 0x34}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x62c366b9573ab8ec}}, @inet=@rpfilter={{0x28}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x4, 0x1}}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x3}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @random="b92721d11ea7", 0x110, 0x3, [0x9, 0x18, 0x30, 0x11, 0x23, 0xf, 0x2d, 0x38, 0x23, 0x8, 0x1e, 0x2f, 0x7, 0x29, 0xa, 0x3b], 0x0, 0xfffeffff, 0x100000001}}}, {{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@ah={{0x30}, {[0xc94997d9, 0x3]}}, @inet=@rpfilter={{0x28}, {0x18436ca753d72be1}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x2, 0x5}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x5c0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r2, 0x40049366, &(0x7f0000000840)=0x2) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000880)='bbr\x00', 0x4) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f00000008c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r3, 0x4, 0x4, 0x2, 0x3, {0xa, 0x4e22, 0x3, @local, 0xffffffff}}}, 0x3a) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r5, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x20, 0x3, 0x8, 0x101, 0x0, 0x0, {0x7, 0x0, 0x7}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x4000000) r6 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r6, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x50, 0x453, 0x400, 0x70bd2c, 0x25dfdbfe, "f9aa8f04baa222b030d342393b9aac9948adb6c68ef7dda0845d0c95f5c8852e600b65bb3d6ef6b39ec1f2ce0011021dfc70d7ded17fc3e52ff311f0a39c", [""]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x4800) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000b40)={0x0, 0x471}, &(0x7f0000000b80)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r7, 0x84, 0xa, &(0x7f0000000bc0)={0x3, 0x3ff, 0x8, 0x8, 0x3, 0x8, 0x7, 0x7, r8}, &(0x7f0000000c00)=0x20) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000f80)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000f40)={&(0x7f0000000c80)={0x298, 0x1, 0x1, 0x401, 0x0, 0x0, {0x3, 0x0, 0x4}, [@CTA_FILTER={0x2c, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x540}, @CTA_FILTER_ORIG_FLAGS={0x8}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x40}, @CTA_FILTER_REPLY_FLAGS={0x8}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x30}]}, @CTA_TUPLE_ORIG={0xdc, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @local}}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}]}, @CTA_SYNPROXY={0x44, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0xfffffffb}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x1ff}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x3}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x7}]}, @CTA_NAT_DST={0x74, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @rand_addr=0x64010100}, @CTA_NAT_V6_MINIP={0x14, 0x4, @mcast2}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @empty}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @rand_addr=0x64010102}, @CTA_NAT_V6_MINIP={0x14, 0x4, @local}]}, @CTA_TUPLE_ORIG={0x70, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x40, 0x0}}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_FILTER={0x54, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x98}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x30}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x200}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x40}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x14}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0xc00}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x1}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x9a0}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x404}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x9e8}]}]}, 0x298}, 0x1, 0x0, 0x0, 0x24000000}, 0x10) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r4, 0x80489439, &(0x7f0000000fc0)) sendfile(r4, r1, &(0x7f0000001040)=0x61, 0x4) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000001100)={r8, 0x78, &(0x7f0000001080)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e20, @loopback}, @in6={0xa, 0x4e24, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7fff}, @in={0x2, 0x4e23, @local}, @in6={0xa, 0x4e20, 0x6, @mcast1, 0x5}, @in={0x2, 0x4e21, @remote}]}, &(0x7f0000001140)=0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001240)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)=@ipmr_getroute={0x1c, 0x1a, 0x200, 0x70bd28, 0x25dfdbfc, {0x80, 0x14, 0x0, 0x5, 0xff, 0x2, 0xfd, 0xa, 0x400}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40001}, 0x20000000) r10 = accept4(r6, &(0x7f0000001280)=@phonet, &(0x7f0000001300)=0x80, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000001380)=0x0, &(0x7f00000013c0)=0x4) sendmsg$nl_route(r10, &(0x7f0000001480)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001440)={&(0x7f0000001400)=@RTM_GETMDB={0x18, 0x56, 0x800, 0x70bd25, 0x25dfdbff, {0x7, r11}, ["", "", "", "", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x28000}, 0x4041094) 16.088940292s ago: executing program 4 (id=1460): socket(0x15, 0x5, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x30, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x3c, 0x1e, 0xa, 0x105, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb4}}, 0x40000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) syz_emit_ethernet(0x48, &(0x7f0000000780)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "0000fa", 0x12, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, [{0x5}]}}}}}}, 0x0) sendmmsg$sock(r1, &(0x7f0000005a40)=[{{&(0x7f0000000240)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(aegis256)\x00'}, 0x80, &(0x7f0000002840)=[{&(0x7f00000002c0)="2618c6e79b8b1d6c9180db90912bd9ef93f22fb55cec89b868230ffade72af8124a5ef718c8ffea6b053b3bae2172c6a651a5670493156532f2c069ac590db0713cdb27aa662004bc27ac257b7befa9422a23efb6e8474d1d9bc0f2a7d9bb5ac6d402a97628621398f6a57b1107895bb280d08fd44eb5559c4d9d3e9b8e404ed6e543504453f4a5d432da0b3c51848758bfff70ac6584b73b6cb7a10578d630a6d1d50a4b92e24ee71fe7f79a42f29f16a1c1058fefaa679e91dedc4e1243363bdd41cfe1d50e47557a696df447ad6", 0xcf}, {&(0x7f00000003c0)="f9c7ed70b3af48e6dd07c8079c8b936bfc15266d4a2cb187753134fa1b03f92e315e1142", 0x24}, {&(0x7f0000000400)="10ac14171496b0e465a1f257b850958cf748dcc2266241e240efd2e6b21bc18fb080839567cc151ae37e563b1111205b9ff50184c051b00f1a8f993a82d5c76110b402c358b0107f2b2fd4e55a19c9cead6d6e6513a35b6405fc955a9583a07de2f06b610e393be716081d6e9da7f6461a78215d201e7a9319728d46ef2ca52e22bc55", 0x83}, {&(0x7f0000000840)="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", 0x1000}, {&(0x7f00000004c0)="66c12bb5790968d36adfaf0f68353c9d3d810585a07032064c4dda1c00937d7395afb02192375a2a8d1e75d2a1c6518c2e586bec0a8c5b15571e4d542bb6cb248feed976b50584069862fc1d66b042fd4f73b91bc53640b993d6cfbd7d2cb9812e70b98a10c4a7645cedefdc048716f8652f3b7ada78c3552d7f563b6debe57eb575814fe0852c972ada14f339b87de927aff540abed4bb4af20a8ebaa33bc107bbe217a6cd57f3575c9487662ef5d89", 0xb0}, {&(0x7f0000000580)="1ec10b041b6e43b97d72dd6458266750bce72af5f3ef89f5702841cd4e91ac1af6972e27762f5ef4029b57697fc0b7bf733dc9da28870e221e9c60568577af0758a662851e190400daa96dd84aea712d6dcca5a825ba3c7d22badda1f2983821ecdebdddfe9405176a9d3108c33b8518375860c2d163fe123142f1", 0x7b}, {&(0x7f0000001840)="53989629ca605d731d6c2c9cda763460ad7f25b63ff7a89e234a08bbc380586b456ebf942ca3f8b5239541b117c40dea9b25a791c75488a582ab3e210919e3feda3c5b4c6fb6bc791258251231527103866ca687261a4aaf8ffbeaf3772d69e1d8cddb7573dd45c1aef52716241519dab9abc7089d4228421903db1a225667c5c9467b025f223eb422ead684e7ec7e41b00bd76c6e525b385e19461a6881c6c60780e76508d4c2783586bb32d04bb873316e24b9821b16dcaaaa8df9efdd2734408346aca137f3c8fdccb6a93e65c5326bd03bb6f0a44f7452e012bc5dc3ad55273d5dc67e815ced36e8e65f7ba1d613724f5880f5e78fcd8d480106048ce80ddf7c9e4edee7ffdbef4225cc4ab81f92ffb66d8f228f077bcf030f7af172b0a59a339c2f63f7cd9277be6a6ea073e71996fbe8c8fcff0dd76532fe77eeb4018eef20c617c3cda1d67f9eacd29e7dae92aefbce92a69a44daeee5f9eb64bd80ca6e737632e23c7269fde427a1bf9cbd58bb4f82e0f97975a7becb5bd85821658d94d470fd4956d6ff11d78108d4a384d87f53563faac37f2ba4feef5d9adf51ad7c2be55030c37fdb8e9a8631ffe6363c4756606d929ffe9d8d28bf74b0ba726869711a120537cb37849554c0b5ff59e655baef1b2cd7acbc11732fa507c7aa52ae899146ba0c13922dd053ef20b6e914a5e32487bb7170e6e3a710272dc933822d69e786a76c17eec190e4596f844c9fcd52ba6728066f0dfe0edf8523cf2fcf9a585ccf1441a90b7ca9ac7c523b5d22d3070042d889b20a109978470f920b1f3b83daa5a6fa9413efcfcf2f80b1f087a7267826d994319fe8b1e19de59abf012a452599f3030d61461a81d362991d2e499429b6298ada95b306a0ea21170703c77ae3ae83f22f983d007d729c650b00b23b663852d1fb58aa50f88a21b7a25f15da9fc5f6663d9283c91120af0ce2d81a23b30c6a7b730fd6788efe5f69c80f0922ccd44ad761ac92b53ee389c9942c13307ab7552e79e53b60b076171dc5222cd1bd4f3e6a8bcea7e7f7169286085b5d85f60099164471ab73eabb71e77cf1958d492d5b7eeaa66c9ed9e173e53d64f0512369a2be48c1984f89d33697b88d2313fe5b9e1bcf6cd9b4b71debe8029a9fd60e4d7463b5fbec8e660a3fff91855f31ce7ec33476e9f3f6f9f3e8e5a57e6f9303cf8d36c8225cf0d5d4bc69becf034575570ed87021e10d7d2b56042dbfb897d44828fa7edc6456947346133eb862e6c38daef71d51531d74405e09319efeaf43e0ae91ca94ca3c786b279df4fb2179532a06f3a77bf757229707cf4a505be36c455f3a412b777cb575de30d6514c90559548dce471f4fe1a4d9a1cc2835e8c03c64dbf7f1f78ee8d9705ee572901842ec30e2b2d8abcbc68841a9bf6447683106713be9630cd964491f6e433858643d526c319f1d20c32a5eaa2a824c447f6fadbcd5a1b78ce2c13899ce64ea6d60b6428a06ef5cc56ed103fd38f7d0e47122f2b324bd8e0e00859bee5953bb123311cc95987f5e3cb3f7e87c12914366984b88af0341a5990041e26bd1c68d3e8561aab3ba4258ab2404a455909098c22bdad9d5e7de66e2fc192a0fb85d4c8171467e889d206fb8610d3e7aea43512bf62289b1660022deacc6583d26a286c21d955e9db43a4b9649a6cf91c17249c2299a02dbf3892902dd8f40732c7d17495817d60496d9b8846f950170efc5e1fe576477f202272987794e83c64a22089fe423b87b87c57bd20f6612afd11ef0a6467bd80940a84d8dbb546893cbcfb0b1e164907ce505019f9deb7f49ed9bd4ea9394f40a23729c84b9a3004536bb72de714ca45b32e06ae2d0c109d53311261d750c3b9561953312d0663275d99b2aadf05616d95be197fc8d71fec44eef098361a31b6e09df9a057b5fbef6e3e1aa9c3b3b11408dada87f869e6910cfa8059240bbfbd6a8465bed93c1481dc11962c9f21184bb82de9c022e6df7d89fe20739e2662db4b3fcdf389ec1b13e6402a95448de0ecd08c49f624e4c04e6978e9970024a9e220a36501aa3a6e2862dbe628e197f1ae062f59749dab034a0c6086890c6ac9a65ac74900dedb6c972a4db4c005a803f5773e73c6b6ebd4464595401f384122e918831122f9986188c8f20c1083b791c4743c867c2ffd4c4e59860d56ee8b5ca9410f7cc796ae539524742a09dfffcf981c86a91dc665e8cb2116ee16baeada1804324e7f9dbba4158baa5a14e50513d1e584a40fed958b7ec253de282df06d742c2beee6150c6916d0787477dc0c40f5cfd16f05d3fca09e989303629fbe8e7f6f2452a9b40bf283775aa156648934602b6050bcabe97ce8105a20de3fcf4c4b96900ecac87ca5c413c4af44a5bbf0bb63412299330773dc3dfa76931afc17d020ebe6dafa420b7d6ad24bd1ee1ad0e486452e1842f47fc7316b6809e68f344f2bec9e8835304cfed0e0299e9e7352537861c3d010b2c21b3c606074232e4419567a6c5e921b6fa7b16d0261f88d2bfe2dbd3c75bc65917ea0ec8e2faa23e550fc06cdb35423057f152afba3d86ceba516dd97c2c0e7c6629283930f80267ef0ba8e1f20b1afa24d6d419fed58f57192955cef6e75ffe5a1277bb4bf7ca386a8dc6a5c7fc5341fc83bbe5efc3e76f73bc57c45e7c5cd0107ef8dc71db12c4ce32cf99abba00300f3094fc1ea766a0341ad76d380b6c5a846b48abc79a727428a797e917ec30f11d981c304ffe3a13de109b010d6a1e868eab3035de65ed672d0585ce2794f2ff7e21b58a33a46cc1120abfb73df43e1d41778ea2b70dcaed83a69ec03075456755cd9c797072affdaed7c15acc16e15aed5fcf154c8c5004f9e9246554cbd2cc5a85b66f5a402031a15a6a0709042526ad9209a050286a1704ba293bee6af2a8df45a871570c69bd1eb80557b6a5e586e12df9cb4070da212466d60dd769e2d7ef0af464399b8831cf62f2e54d50c86f6e7e2ae60d82e7bdf8a15a67ee807d787ae93338b37770e67fae562e68b7d1282784e48144d889b20394b4144dc961963257c1a97a61c80c46969d616602088cf220af8667bd550820774fcf5703b5adb34f00f9fa27fbbf9280e1e8e7f134f8dd32d5feb31ef5016690df79726e30bfe3963277b39f29fcc42a2c862b575efcd8f761eba43f8d54b8045fda527ea36644c721a418ff9100e039abaa8aef1d03f86b6f9a5d7d6764a717e8adf753d14d9c199ac35fa83b5bbb2e0b5df8854310803a3d1fa10a11ad43b008d7a6bd34dd0d4ab6c6bf41d5686f791d0ab00db2ff2bf5fc290fbfffbeafdd71eddb09baa573ef3083a527b60f58aa83030ee286048bb5010ba66c7fd9c73709b8de7f07c2ea755e50f59665a790c47521c3b4e9956289a2163355b5c5f6301b2163aaf839197a24aececb974403617e20405c35c7bf5a80f2a17cc9b717ef789f6c810c2d53d63a9e5be7046e31864646a6b6f21fb02afa5ce1b450563d6926b9d53b33217c8918c5c2aa8e78cdbe553de5df3e413eec72a452c663f82f93b3c8302b976e3d7df370831aefb17f8f6187d5bec937c19d72e93e9b73c9b88812b386cbd02a9c149baf88978145853228e61815da6ff8dc5f79294d1f686140ec22e2fb74b13235b460c41dcb33a7f37736cbe4ca76549bfd6dc48a2f591efe394d8ff57518bcb86f7cabafadae9671383df4cc64980543047d00052caff88d0fd7ced1bee09a32146b4bc6ae1124313e12ccf3a5a564e415be796fad6a51c9f0539cb66db8db0afb09229d12d47dfb87c1d74931d9571335651fa8eccbaad96f559a232424c2b3ceca9e29ae991a0ad4c5e034e06aab8ebc482143a4fd1f9bee34d7242f7cf8e353bdd4629ac00493979f61b6535ab6611a6dae5c5c820d71c292f7476560a8f095ed061ad2aa8eccf519da48b8998edcf45b2dd8230038bf4ec89b9b5c7c76d2876d112a4b165aaa610aa4cbb4bd6d72134ece8da8e7d664abab4448d5cdf62b4413185349d3828dd7178a41f85da8a42168a041627347f7ddc9b56f5b1f4d8630166d659b1f82ba98c43c9cf96d741c52ccea130454b67f2f3f91d609f0b1a00664254b50e7ddf3db086d01e24f1ac751b5755d63f1d13d08e4dff1d0a2f01baad4f05ed81cd37ec4a0614fa589aec733fac9125bb2a1efe952db81fea5c887a6ea9cc5a845663ddc6e382027afd9d3bf65370e0375c023c3a334f7f7cadff9dfb1ee86eb45c184cda1e9b0b98206ab0997138a2880f01fc4fb4a69ef6cd4db0fd93945905ff38ba202ff3d1f14bb39f33769dfc1fa9a075c51aad6761c6fc97b5042224664968f05f57f9dbb0ca7712f79116180888f81543635e7ed31468637e5f94cf666a63b92917a729a04ba78cf96d97c5b79673646174311a035cb9c14a4738002d202a98fb3788ea71cacb07f6ea1e13f5397a57e1f801cc795820fbbeb646b589986ef6537457c45f2cd11193fa134a3b238ba26bdf3e1b32484df3815c330811be54873c4d9aa78354eed897f5f2fa7f70b1cbc44a5d65862421e43dfaa66b0e223ea2dee2f302a03e8cd04a6efc975a0c26605ab4ff710c1d1fe4efb3be52f27b70e4680a6daad5cbef5b859219bf14d0fc1e85a684779949cf1b42c24265e968c77d19c447c3336801a402f7226014b3952d13c361351d1d879f481611868ebf56edd4c968b4121ab1c119c93e72f55f074b3dd29af0ab3fffb2ef3dbbc21851c1710c5fc9942a39250f3d63245df03d878de99e8dfe332f54065d5b1bc16ea365c50206ffbbb3f12bff7328ca6904b9151721b5ec50b1def241d8098ecf789fe08a022db34ca2517955e8a690d532efe328aa9801b3a4c2e11242182fb0836400fc1a10ffc3f6bc8a637e86735b3c913c302293424b9b5cb7ef3f6e4fa3f3aa193d0f8e1af43dc7e94eb2de2becb77614319cfc42930eba3ef2139f240a14394ad6e72bd22363b9933b3b458afd6f054bfe31682878d9d7869daa8a7f9a8d4bbc47249aa1dd1286bc0fc7d3e8fe9008665daad2e43120bce26f4dcf52a7b677915c1196c6dc33bb587ef3b9f649e391fb90202349e56211b8addf0237f2cf0dace26ad8de321016ef982427e043d1194e1025b2fdc06278ea23a2d1bc2a5c28f7a8bcdc6f7f49e6ce887cfb583a6a0e192bdfaf6d6181af88e003964c30b26ca9756f1a909d1a29f1ead3ee21975870b523ee61ac86600bb4f7b57c76f64095a80d3f52c1a2ff4b4edb7fdadee646f6c862714c2a0220b07dd4aab686a17b67293767ab7db4156763aeda5d8144dd6e02fb35105a944c5ec3a804f994b484256c68a6f3c0a2c0dfccd1ed26ea5f2ea0dbb6b62547046bb0ac14976f4d9cbcc38c884ccb10abccc8b01d939c85fe0a3e16819182ff2702336afa0a6e3ff721ceab453f9dd5846fad8d2dde4a66acb3dcd8eb101007d2f952a04832b20be9c45375639b8ecd1fb0516d3e3ff8c14bc2cc2c3189ef50777ce031315b668dc9ab999668d46c763128631cec1bc531d1def2560a6b1d128d9cd186169e8e82e6fac1fbedf448637f7b3371a2aa42094290bab8e647090b3cdd1adce0288eb139e819e1c183b7f5d6c0861af15adada6733c72292abcc50f4d15451ac369b9b4c8aacbccb687007ddf34caff0fc75208b5a917f4aed54fb2f9308a83bb8682dfae3bdf90529e95cfde5c5b3ab4f94cfc7a3684e1700a8a76464a1f10eea1dd66ec32f9df6c6b5e93dc1f5132b9a0bca8a2df9f3af1b8e16ac0784b8ef8ce240", 0x1000}, {&(0x7f0000000600)="7b260fac763deeeb821cd9355af66e36ff47418231e33eaea0a0cc02557be6feb3bf17e2", 0x24}, {&(0x7f0000000640)="8d8ddc8dbcaf7bee1052a6ccc306a7f737ef17c9be924e977f1350cb2acd62fd38eff80544641dd212f7413bb89d97ee0ad36abc6e6ce7496f4e67a131f94549f45079d094d76578f5521c103e2ec59134e050a5e134d8503c9d23bf253b1c52ccb3000808d18353372906738077574eaba9bdc3170437902a6fdf6e1b4c9adba0dccea78ed5065ba3d79b", 0x8b}], 0x9, &(0x7f0000000700)=[@txtime={{0x18, 0x1, 0x3d, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}], 0x48}}, {{0x0, 0x0, &(0x7f0000002a80)=[{&(0x7f0000002900)="ff856a98e1e766d570bd0899bd6828c58a0f5c4c758d6ac24aa6afb37c71e8c9031d658c910e42f0b809ed3ec9bee221ac46f256315b5a99432b136b33924c0e261de7ac20b1366940c29bb29486166deadf1cda9ea63a0125f1c30a808ec6b762831cc2b46ae45ee79e1a38a1254bda586c3f7b989e71dc6ed36fa75482b44ebd9d8dae00a5d2cb52cf966733f966443c86ec7d5737df103d0d447b37b1b5231a20c4215b5e77a804f398e93c822cdb7e9cb8ed59edaade5dde17fe721f49672df7a47c6e26120f9db7fc83fe0f6796d17d1cea9ffe73eab1", 0xd9}, {&(0x7f0000002a00)="98c482f4e9e329e635dbfc81a9e86c61b77a5c2a75cfc85691cce4de554ebcff1ed7f5908c368db0eb4ef771bacf3034651a09db13", 0x35}], 0x2, &(0x7f0000002ac0)=[@txtime={{0x18, 0x1, 0x3d, 0xf4a}}], 0x18}}, {{0x0, 0x0, &(0x7f0000003dc0)=[{&(0x7f0000002b00)="6725884f5de31be5348e476af29f4ee1668993b4196bab9d2526b2b9b87a1fcd9ca9932d633c3016658665322bb42d888876582796e164f4c867c208d40f51490841bb18840c2fc03aaabcecc498b910f47bbbe41c04b30a9e011e78e17241aa128f8025c5ca3fdc576dac0a9326b0b185541506163bdedcb5c476b8cd3951df719af0ec7b0353cbb4a48f142bdab710819fa9", 0x93}, {&(0x7f0000002bc0)="32eedc3252774dd60df6c6f2ddbcdb870f338fedc51a73a20a12a4e7829c50c4b92a69dc732bd3aa73328d0c9be3356e23db5e6720c853cee416b4fbdcede0", 0x3f}, {0x0}, {&(0x7f0000002d00)="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", 0x1000}, {&(0x7f0000003d00)="b8f7ea306581d829438d04d2d53fc8bbe71c68670798601e841eb69254f2a1c3e6a131b62d884964eb4a7cc99c9271741acd022a68e1cfcb00dccde46550412ef9b00dc4aba03757e43f9329078be3e47514e2146d068d844965e01ce2b72405076f57a1a6efaa4959402a3b13c9413768580930bad794aa937e28b381dca5ecd1d44c82e4a00b4a4f763e6ad26ce978d6d8144ebd697d0a0efdaa6f600c323d225338aaead9", 0xa6}], 0x5, &(0x7f0000003e40)=[@txtime={{0x18}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}, @mark={{0x14, 0x1, 0x24, 0xff}}], 0x48}}, {{0x0, 0x0, &(0x7f0000005380)=[{&(0x7f0000003ec0)}, {&(0x7f0000003f80)="a6aecbaad183cb53ba6e19fe38912dc8254b0a703029cdf4e6878634bc6f4bbb5de1914ddeb9758afe7d76e4e4cfc4effa2f5b1b44f28dcc508f461c046ab853bd3dbae16097325255314b908f3cb614fe54c73ec4cf0d9e001e4d01f8199b782e65026146da1ae9239c5d5822f80d772a39a6b09ea8a10d39e77c6ec4d48a5bc5638a8beee65184c5539c0e2e1df2358818f921c66ab374ec7f8bccf4dc8905b2b3a53b4b3aaf4b788b52148e251f7bfd02f44c3cf7409971c417c9c512c80ccc15ac4b8e7d41eb6ab53c86e4e4a2007ac95e173564d0cc3b3eace9d2dfd0163de0ed83726718bb5e115970e8b4ed93a61e939e52e54d81c7bf6ddb7e66", 0xfe}, {&(0x7f0000004080)="d47a1738a0d91cd5ac11c3121c36150379830a728d6ae7bc2175b25f56154c7eb89ffc12f40f6f259cb40e7d215a9538277d24bf53d4438c28e557b3afd0a1bddf95ac5d72ec3dda153ae6545c4ef8e6e74445c5440c4635699e521e13851cf51a377f63cad77df6a2c43dab4172dca36a79cca27d4373f2545635ec", 0x7c}, {&(0x7f00000041c0)}, {&(0x7f00000051c0)="3655cf7baa35822d8f0a430a0b68a2cd67d97b41287933395505fc17d5a3331b9ead9b8f8834fd7dfcc299536f49e440a47a85b18c92f76f7b20ad6c7204a24fca2b17a0c5830bab85ad8bccea156b60d05adf4a215e5b4be7b34ac71a105433b439f05997258ea954c2a1b05dfa68f993c78c42b680b741a98da02c963b2b19a1d1cda34f99698ef1752646a7b4487b88b9e4f0e1535c40ed34a6a8f1414e8c8710b49e59bc78b67ca9db21ddd9978290a1444c7ba06fcd865a347e19f0dac515c01c81c785ddc7b3de40ed22720536d95daa83872b4eea2ba3294511f03114dea0e3077c52e22c0596", 0xea}, {&(0x7f00000052c0)="e41fc83e48114b365de7080aaace5591f311970244182d04547b68020b0051fe0578ba1d866f80025eeb74dcaffa8d1d9e4aa9d9444605ec58a9f31f86dbad1c1c28f5ffb6a55a5e9194bb87cd2abd6ed2960288a03588ea76937d36e0cc60a437769e7ea4dc41eb923b40b5a92b120ff79ea2488156f9cf", 0x78}, {&(0x7f0000005340)="70699af05f9ec995ae7070e5a38c77df1c900f2a600d260cc7d8cdbcf451b966", 0x20}], 0x7, &(0x7f0000005400)=[@timestamping={{0x14, 0x1, 0x25, 0x10001}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0x7fff}}, @txtime={{0x18, 0x1, 0x3d, 0xe71}}, @txtime={{0x18, 0x1, 0x3d, 0x1ff}}, @mark={{0x14, 0x1, 0x24, 0x3}}, @mark={{0x14, 0x1, 0x24, 0x9}}], 0xc0}}, {{&(0x7f00000054c0)=@sco={0x1f, @none}, 0x80, &(0x7f0000005840)=[{&(0x7f0000005540)="d24b17d29d7368c800026d136c5cb25d73434b6783ead35c5fdbb1f2685785b6d69aaf7ada2028eee295c6d53c92e7a833a68241b2213a7971d2bbb3e9d15bb6bf3ec913a42d9a2c94aaa2f76bc6955124bf984cc4d8c25c34b1d1c0ccb2419e5ff527b0bcab5527e36b6aed64e8c64a070465afd9ff9a8640c67616e2b2c2cfdba808add6ea3008ecefc2815288f8b36a6b8db996f906f248b42609d0f6d5464b1e4bf879e973e0cbc1b5904ed5345df6139cb68f0d39591de36eeee26525cb4e6575", 0xc3}, {&(0x7f0000005640)="92d79859d03c3714fe25d961d14a2677063a6712034120bcc6a0c0bf8821d5aafe7e9501b314dd0205a444ffe41b9b7eda1b8debcfd351b00c8b3bb39f9aed5b74e90b74d597150ffb84590e7730746e400b17996bfc04e282f804288cc6ef3ccfc43eb337f2df9dfd2da718e93b02ead5c7479f0e7c52e56e09860c3e05d2546587f5124289394406d9cfb0188e28644a1bf41a8769ab4a06837397c4cf25218345e460ffbbec6fdc86b04f263c8f5d8e5da4364d96f3fa8f674105f5dd94f9c7d9cf5112ad74cabbcc79a9fe99a1e882324d051dc7d6cef1fbbe", 0xdb}, {&(0x7f0000005740)="be0fb32479b7352968bb6bb2f645ab6897c3924c2412c7a2e8f8c854e4d1c0b9d3b702380fc33dcd7f7621ac987923e32265de1a78cee2bab2ca913506a6c276829d1584df4453efd35bfc7b49ebd19818744d4600ebfb834c2322750ddff044b96513898cfdd1725fc88f281c4bde00a813673cc2d831c9e8cf7658b3546ac31e0e11cf03ad337a37d9b82c", 0x8c}, {&(0x7f0000005800)="dbe423b0721c07a886acbcc7ecbe8fff2e26c4e09b08719cfce72dc327402766d1ee79a959a44b7fc5e39207d9", 0x2d}], 0x4, &(0x7f0000005880)=[@txtime={{0x18, 0x1, 0x3d, 0x8000000000000001}}], 0x18}}, {{&(0x7f00000058c0)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @multicast1}, 0x1, 0x1, 0x0, 0x4}}, 0x80, &(0x7f0000005980)=[{&(0x7f0000005940)="ac8a04fb7ecf807b0a43bda2c73b1416dcf0fc888d6c1f15ba57b68264806ce8d54a7801dcaa5acaa71ef66814eceb76b8", 0x31}], 0x1, &(0x7f00000059c0)=[@mark={{0x14, 0x1, 0x24, 0x6b}}, @txtime={{0x18, 0x1, 0x3d, 0xf}}, @mark={{0x14}}], 0x48}}], 0x6, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair(0x29, 0x5, 0x6, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f0000005c00)={0x81, {{0x2, 0x4e24, @local}}, 0x1, 0x1, [{{0x2, 0x4e21, @loopback}}]}, 0x110) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x4e}]}) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r3, &(0x7f0000000000)=ANY=[], 0x6) 16.06531207s ago: executing program 2 (id=1461): bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="05000000050000000100000004"], 0x48) socket(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000240), &(0x7f00000003c0)=r5}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r1, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00000005c0)={@broadcast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x0, 0x0, 0x0, 0x65, 0x4}}}}}, 0x0) 16.044527146s ago: executing program 3 (id=1462): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f00000001c0), 0x37) (async) listen(r0, 0x0) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000040), 0x4) write(0xffffffffffffffff, &(0x7f0000000240)="680816677bc49d39f79dd223dc0d6044ae26bf548b256409a96d5cfa3aead53b4fbb4174a2528df9a32679d742c30c503d3024c49bc0f91a64c2d24ab1570a9a5a5fd61503d1cce76d010f89ce14cd82bd53aaa98acbe4ea83ed6e08331d37770de22477d7259a4e0ce087104484bbebb87326bde15ac0ede68c3e40121e204a1b2e0056bfc0e29c", 0x88) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) (async) r4 = socket$alg(0x26, 0x5, 0x0) close(0x3) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r5, &(0x7f0000000440), 0x10) (async) listen(r5, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, 0x0, 0x0) (async) connect$vsock_stream(r6, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) (async) r8 = accept4(r4, 0x0, 0x0, 0x0) recvmmsg(r8, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffc4c, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f0000000740)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r9, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x6c00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r10, 0x0) (async) splice(r1, 0x0, r2, &(0x7f00000002c0), 0x6, 0x0) 15.967839708s ago: executing program 4 (id=1463): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000016000000b40000007f"], 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x2012, r1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r0, @ANYBLOB="00000000000000006100ed0000000000180000000000000000000000000000009500000000000000b50a00000000000095000000000000001315c1"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x900, r1}, 0x94) 15.919403743s ago: executing program 0 (id=1464): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x2, 0x5, 0x0, 0x2, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x1}, @sadb_address={0x5, 0x5, 0x0, 0x20, 0x0, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffffffc}}]}, 0x70}}, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x3, 0xfffff000}, {0x6, 0x0, 0x0, 0xffffffed}]}, 0x10) 15.868218773s ago: executing program 2 (id=1465): r0 = socket$netlink(0x10, 0x3, 0x9) r1 = epoll_create1(0x0) epoll_pwait(r1, &(0x7f0000000080)=[{}], 0x1, 0x81, 0x0, 0x0) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) accept$netrom(r2, &(0x7f00000000c0)={{0x3, @netrom}, [@default, @remote, @remote, @netrom, @null, @default, @null, @default]}, &(0x7f0000000140)=0x48) ioctl$FS_IOC_SETFLAGS(r1, 0x40088a01, &(0x7f0000000000)=0x10) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0xe000200d}) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000001}, 0x800) 15.793720955s ago: executing program 4 (id=1466): ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x3, 'bridge_slave_0\x00', {0x2}, 0x50}) socketpair(0x25, 0x6, 0x2, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f0000000080)=0x6, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0x1, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000140)}, 0x20) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x80000000, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x3607}, 0x50) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000480)={0x0, 0xa, 0xc}, 0xc) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0xf, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x59d}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffa}, @jmp={0x5, 0x0, 0x8, 0xb, 0x4, 0x4, 0x8}]}, &(0x7f0000000240)='syzkaller\x00', 0x5, 0x99, &(0x7f0000000280)=""/153, 0x41100, 0x4c, '\x00', r5, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x6, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x5, 0x3, 0x83, 0x3}, 0x10, 0x0, 0x0, 0x8, &(0x7f00000004c0)=[r6, r7, 0x1, 0x1], &(0x7f0000000500)=[{0x1, 0x5, 0x3, 0x9}, {0x4, 0x5, 0x6, 0xc}, {0x2, 0x4, 0x5, 0x2}, {0x5, 0x3, 0x2, 0x9}, {0x2, 0x3, 0x2, 0x9}, {0x5, 0x2, 0xd, 0x8}, {0x4, 0x4, 0xa, 0x8}, {0x2, 0x3, 0xf, 0x8}], 0x10, 0xb}, 0x94) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000640), &(0x7f0000000680)=0x4) bind$rds(r0, &(0x7f00000006c0)={0x2, 0x4e22, @empty}, 0x10) (async) connect$unix(r2, &(0x7f0000000700)=@file={0x1, './file0\x00'}, 0x6e) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r1, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x81000000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x48, 0x1406, 0x100, 0x70bd27, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x40040c0) getsockname(r1, &(0x7f00000008c0)=@l2tp={0x2, 0x0, @broadcast}, &(0x7f0000000940)=0x80) (async) sendto$rose(r0, &(0x7f0000000980)="289457df78a310c587d25469b4c5dcebd02f69f92c16d50cdc67acc2ad5744c5360e8abdbbd13c6d0b19fc20ea230833a5565726e0702f7d11bcff2bb82c7577b8a0c2f4cccd5a51fb1f63ccb04198e34d7d068842f963a09828beaa0a2c079b16aabe4e92352b4b7ffc7ca0634281cadf505f36c6a8c90a91f6b7bc08dad41932fc6afc9f8866c38c", 0x89, 0x4048000, 0x0, 0x0) (async) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000a40)=r8, 0x4) r9 = socket(0x2b, 0xa, 0x6) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r0, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x60, 0x140e, 0x200, 0x70bd26, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0xc051}, 0x60008801) (async, rerun: 32) bpf$TOKEN_CREATE(0x24, &(0x7f0000000bc0)={0x0, r0}, 0x8) (async, rerun: 32) socket$l2tp6(0xa, 0x2, 0x73) (async) pwritev(r3, &(0x7f0000000d80)=[{&(0x7f0000000c00)="244cd7d09ac3c2e5b72736b7db13532c7ab8a2d7be37c5b52307eb405c5f4d9a6b7019c3fbe9b161e748bde493b51c32ea4ea1a9f7bea637e6012cd4081f0455e57766c9b1c0f1aab0ec856c2b54185d60e2bb2c0e1063aa8d5dbe18e2c8689cb5772277c9b842f278f289ebfd13170a", 0x70}, {&(0x7f0000000c80)="27e908af", 0x4}, {&(0x7f0000000cc0)="bf68944754300126a5e8947588e2f8213ae82931d32e0dd84ea82c433020101b9e4eb480d171c7e16d7ab1ae91bcd6497714970a58c8eb99d976597eda2d8833320e02488235b2278241373ac88c52c87fd4ec6e5c1e31ae92ed3161e8a3c6bf68210af0ab5b9238ae787fbb1d933286b8e5cfcfa190ca933225eea4a378ba625b13492c31feaccf48095ace89d6af9db8fae85cead5e8dded9ac467901d37b34799838c54eb0fc735a85f00", 0xac}], 0x3, 0x1, 0x3846228a) (async) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000dc0)={0x1b, 0x0, 0x0, 0x200, 0x0, r4, 0x9, '\x00', r5, 0xffffffffffffffff, 0x3}, 0x50) (async) r11 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000fc0), 0x4) r12 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001080)={0x3, 0x4, 0x4, 0xa, 0x0, r4, 0xe, '\x00', r5, 0xffffffffffffffff, 0x4, 0x5}, 0x50) r13 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001200)={0x6, 0x1c, &(0x7f0000000e40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r10}}, {}, [@map_fd={0x18, 0x6, 0x1, 0x0, r6}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xe}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3}, @generic={0x5, 0x9, 0x4, 0x90, 0x7}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000f40)='syzkaller\x00', 0x101, 0x6, &(0x7f0000000f80)=""/6, 0x41000, 0x16, '\x00', 0x0, 0x25, r11, 0x8, &(0x7f0000001000)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000001040)={0x2, 0xe, 0xff, 0x4}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000001100)=[r7, r4, r4, r12], &(0x7f0000001140)=[{0x0, 0x4, 0xb}, {0x3, 0x5, 0xf, 0xc}, {0x1, 0x4, 0x1, 0xb}, {0x2, 0x2, 0xb, 0x9}, {0x0, 0x3, 0x10, 0x3}, {0x3, 0x1, 0x0, 0x6}, {0x2, 0x3, 0xb}, {0x4, 0x1, 0xf, 0x5}, {0x5, 0x4, 0xe, 0x1}], 0x10, 0x80}, 0x94) setsockopt$kcm_KCM_RECV_DISABLE(r9, 0x119, 0x1, &(0x7f00000012c0)=0x6, 0x4) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001400)={@fallback=r6, 0x4, 0x0, 0x2, &(0x7f0000001300)=[0x0], 0x1, 0x0, &(0x7f0000001340)=[0x0, 0x0, 0x0], &(0x7f0000001380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000013c0)=[0x0], 0x0}, 0x40) r15 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001480)={r8, 0xffffffffffffffff, 0x16, 0x0, @void}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001440)={@fallback=r13, r8, 0x2c, 0x2010, 0x0, @value=r15, @void, @void, @void, r14}, 0x20) 15.719126966s ago: executing program 3 (id=1467): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000700)={0x0, 0x81, 0x10}, &(0x7f0000000040)=0xc) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r3, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0xa, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000003000000000000000000000085100000feffffff185a000008000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095000000000000003eb3ea73d2baf85116411b992fc4589bbadb864f359774e31d3707059e0f39cea868f6890caab9d999434de37758f41aa249c41a8363fe3abbac5a38a6f6213f0de40cb2f07654a9926ec285ce8ea30fb9049510b3eb94fa1675fc0a81168c3f867434e250beb3ce76a7034a6256023412090314a41b15a7c60747a48d6728b3e981dbcdcf4e5a0e231ec01631182f3366804dd8dcdbcc4b31e5c3820cb7c9526d29138ae0b69a2255eb"], &(0x7f0000000680)='GPL\x00', 0x9, 0x11, &(0x7f00000007c0)=""/17, 0x40f00, 0x53, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000a40)={0x5, 0x9, 0x5, 0x4}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000d80)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000dc0)=[{0x5, 0x5, 0x9, 0x1}, {0x3, 0x2, 0x7, 0x2}, {0x5, 0x4, 0x4, 0x7}, {0x3, 0x4, 0x0, 0x4}], 0x10, 0x5}, 0x94) bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000140)={r5, 0xffffffffffffffff, 0x24}, 0xc) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="0800d90700000000000000bd5656", 0xe) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x9, 0x53d591fabfac7677, 0xffffffffffffffff, 0x0) unshare(0x62040200) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x2c}, @NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x1}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @broadcast, @from_mac, {0x0, 0x2}}, 0x0, @random=0x90, 0x1, @void, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x2e) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, 0x0) 15.682607881s ago: executing program 2 (id=1468): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000800030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xc4}, 0x890) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x2100, {0x3, 0x1, 0x2}}]}}, 0x0, 0x32, 0x0, 0x8, 0xdd6}, 0x28) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="14000000100001e456b8aa00000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440080000000900010073797a3000000000080003400000000114000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x20000804}, 0x4004000) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000840)={0x28, 0x13, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000000) 15.656590825s ago: executing program 4 (id=1469): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000001540), 0xffffffffffffffff) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) 1.229857462s ago: executing program 32 (id=1454): setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000000c0)={0x41, 0x12}, 0x10) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)={0x41}, 0x1be) bind$tipc(r1, 0x0, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) r4 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000f36400000000000000"], 0x48) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r4, 0xc96df000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x18) recvmmsg(0xffffffffffffffff, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000}, 0xf5ff}], 0xf00, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@ipv6_newaddrlabel={0x38, 0x48, 0x611, 0x70bd2c, 0x25dfdbfd, {0xa, 0x0, 0x78, 0x0, 0x0, 0x7}, [@IFAL_LABEL={0x8, 0x2, 0xc}, @IFAL_ADDRESS={0x14, 0x1, @mcast2}]}, 0x38}}, 0x0) r6 = accept(r0, &(0x7f0000000180)=@l2={0x1f, 0x0, @none}, &(0x7f00000002c0)=0x80) sendmsg$AUDIT_SIGNAL_INFO(r6, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x10, 0x3f2, 0x100, 0x70bd27, 0x25dfdbfe, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x1}, 0x240490d5) shutdown(0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x0) setsockopt$MRT_FLUSH(r2, 0x0, 0xd4, &(0x7f00000003c0)=0xa, 0x4) r7 = syz_init_net_socket$ax25(0x3, 0x2, 0xc4) ioctl$SIOCAX25DELUID(r7, 0x89e2, &(0x7f0000001000)={0x3, @null}) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r8, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r8, 0x84, 0xb, &(0x7f0000000100)={0x66, 0xfe, 0x4, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9}, 0xe) shutdown(r8, 0x1) recvmmsg(r8, &(0x7f0000005000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x13}, 0x3}], 0x4000169, 0x60, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000080)) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40050) 197.143277ms ago: executing program 33 (id=1464): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x2, 0x5, 0x0, 0x2, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x1}, @sadb_address={0x5, 0x5, 0x0, 0x20, 0x0, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffffffc}}]}, 0x70}}, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x3, 0xfffff000}, {0x6, 0x0, 0x0, 0xffffffed}]}, 0x10) 144.109806ms ago: executing program 34 (id=1468): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000800030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xc4}, 0x890) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x2100, {0x3, 0x1, 0x2}}]}}, 0x0, 0x32, 0x0, 0x8, 0xdd6}, 0x28) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="14000000100001e456b8aa00000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440080000000900010073797a3000000000080003400000000114000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x20000804}, 0x4004000) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000840)={0x28, 0x13, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000000) 76.120904ms ago: executing program 35 (id=1467): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000700)={0x0, 0x81, 0x10}, &(0x7f0000000040)=0xc) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r3, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0xa, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000003000000000000000000000085100000feffffff185a000008000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095000000000000003eb3ea73d2baf85116411b992fc4589bbadb864f359774e31d3707059e0f39cea868f6890caab9d999434de37758f41aa249c41a8363fe3abbac5a38a6f6213f0de40cb2f07654a9926ec285ce8ea30fb9049510b3eb94fa1675fc0a81168c3f867434e250beb3ce76a7034a6256023412090314a41b15a7c60747a48d6728b3e981dbcdcf4e5a0e231ec01631182f3366804dd8dcdbcc4b31e5c3820cb7c9526d29138ae0b69a2255eb"], &(0x7f0000000680)='GPL\x00', 0x9, 0x11, &(0x7f00000007c0)=""/17, 0x40f00, 0x53, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000a40)={0x5, 0x9, 0x5, 0x4}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000d80)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000dc0)=[{0x5, 0x5, 0x9, 0x1}, {0x3, 0x2, 0x7, 0x2}, {0x5, 0x4, 0x4, 0x7}, {0x3, 0x4, 0x0, 0x4}], 0x10, 0x5}, 0x94) bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000140)={r5, 0xffffffffffffffff, 0x24}, 0xc) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="0800d90700000000000000bd5656", 0xe) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x9, 0x53d591fabfac7677, 0xffffffffffffffff, 0x0) unshare(0x62040200) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x2c}, @NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x1}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @broadcast, @from_mac, {0x0, 0x2}}, 0x0, @random=0x90, 0x1, @void, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x2e) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, 0x0) 0s ago: executing program 36 (id=1469): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000001540), 0xffffffffffffffff) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) kernel console output (not intermixed with test programs): m0 [ 79.601333][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.608526][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.622989][ T5864] Bluetooth: hci4: command tx timeout [ 79.628407][ T5864] Bluetooth: hci2: command tx timeout [ 79.633945][ T5870] Bluetooth: hci3: command tx timeout [ 79.653967][ T5860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.692600][ T1144] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.699814][ T1144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.762541][ T5860] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.839217][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.846400][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.862598][ T5856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.906714][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.913870][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.969143][ T5857] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.991111][ T5856] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.061897][ T5860] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 80.073417][ T5860] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.100627][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.107727][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.147488][ T5857] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.171493][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.178659][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.251999][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.259191][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.287371][ T5855] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.341565][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.348726][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.428146][ T5858] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.502459][ T5855] veth0_vlan: entered promiscuous mode [ 80.528448][ T5860] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.558910][ T5855] veth1_vlan: entered promiscuous mode [ 80.736942][ T5860] veth0_vlan: entered promiscuous mode [ 80.763403][ T5855] veth0_macvtap: entered promiscuous mode [ 80.800793][ T5855] veth1_macvtap: entered promiscuous mode [ 80.825241][ T5860] veth1_vlan: entered promiscuous mode [ 80.886828][ T5856] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.919378][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.941714][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.989920][ T62] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.011516][ T62] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.049292][ T62] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.072395][ T5857] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.087515][ T62] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.099044][ T5860] veth0_macvtap: entered promiscuous mode [ 81.124688][ T5860] veth1_macvtap: entered promiscuous mode [ 81.179893][ T5856] veth0_vlan: entered promiscuous mode [ 81.204861][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.231804][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.249108][ T5856] veth1_vlan: entered promiscuous mode [ 81.289864][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.299727][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.329918][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.333807][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.340703][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.358357][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.437542][ T5857] veth0_vlan: entered promiscuous mode [ 81.455492][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.469707][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.514664][ T5857] veth1_vlan: entered promiscuous mode [ 81.529803][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.552928][ T5864] Bluetooth: hci1: command tx timeout [ 81.561133][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.571810][ T5858] veth0_vlan: entered promiscuous mode [ 81.599507][ T5856] veth0_macvtap: entered promiscuous mode [ 81.623767][ T5864] Bluetooth: hci0: command tx timeout [ 81.636349][ T5855] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 81.698592][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.703963][ T5864] Bluetooth: hci2: command tx timeout [ 81.710194][ T5858] veth1_vlan: entered promiscuous mode [ 81.711810][ T5864] Bluetooth: hci3: command tx timeout [ 81.722726][ T5877] Bluetooth: hci4: command tx timeout [ 81.729104][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.758562][ T5856] veth1_macvtap: entered promiscuous mode [ 81.846995][ T5857] veth0_macvtap: entered promiscuous mode [ 81.942757][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.979960][ T5857] veth1_macvtap: entered promiscuous mode [ 82.011501][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.025852][ T5978] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3'. [ 82.070713][ T62] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.085135][ T62] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.107132][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.126925][ T62] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.139025][ T62] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.155466][ T5858] veth0_macvtap: entered promiscuous mode [ 82.178905][ T5858] veth1_macvtap: entered promiscuous mode [ 82.195258][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.247699][ T1331] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.256659][ T1331] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.294768][ T1331] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.309262][ T1331] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.332232][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.430876][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.436255][ T5985] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 82.456191][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.467583][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.496957][ T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.509809][ T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.530162][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.538993][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.554495][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.562418][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.620839][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.645609][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.719044][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.732464][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.771934][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.785803][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.828048][ T5978] delete_channel: no stack [ 82.880998][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.911171][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.978200][ T5994] netlink: 'syz.2.7': attribute type 12 has an invalid length. [ 83.142113][ T5999] netlink: 'syz.1.8': attribute type 1 has an invalid length. [ 83.192424][ T5995] IPVS: persistence engine module ip_vs_pe_ not found [ 83.219452][ T24] IPVS: starting estimator thread 0... [ 83.323384][ T6003] IPVS: using max 29 ests per chain, 69600 per kthread [ 83.427788][ T6006] Bluetooth: MGMT ver 1.23 [ 83.623685][ T5864] Bluetooth: hci1: command tx timeout [ 83.703299][ T5864] Bluetooth: hci0: command tx timeout [ 83.785368][ T5864] Bluetooth: hci3: command tx timeout [ 83.790883][ T5870] Bluetooth: hci4: command tx timeout [ 83.796723][ T5877] Bluetooth: hci2: command tx timeout [ 84.690762][ T6021] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551615) [ 84.711234][ T6021] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647 [ 84.747413][ T6028] warning: `syz.4.11' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 84.782097][ T6027] syz.3.15 uses obsolete (PF_INET,SOCK_PACKET) [ 84.833716][ T6024] netlink: 20 bytes leftover after parsing attributes in process `syz.2.14'. [ 84.937209][ T6041] netlink: 36 bytes leftover after parsing attributes in process `syz.3.15'. [ 85.135329][ T6044] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12'. [ 85.165668][ T6046] Zero length message leads to an empty skb [ 85.281104][ T6025] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.289437][ T6025] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.521127][ T6025] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 85.538033][ T6025] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 85.748011][ T6044] hsr_slave_0: left promiscuous mode [ 85.756031][ T6044] hsr_slave_1: left promiscuous mode [ 85.841691][ T6055] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 85.937143][ T62] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.975320][ T1144] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.029629][ T6057] netlink: 12 bytes leftover after parsing attributes in process `syz.3.21'. [ 86.061380][ T1144] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.072573][ T1144] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.112528][ T6061] netlink: 8 bytes leftover after parsing attributes in process `syz.0.23'. [ 86.162196][ T6061] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.170472][ T6061] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.191469][ T6057] netlink: 'syz.3.21': attribute type 1 has an invalid length. [ 86.345167][ T6069] netlink: 8 bytes leftover after parsing attributes in process `syz.3.26'. [ 86.355986][ T6069] netlink: 4 bytes leftover after parsing attributes in process `syz.3.26'. [ 86.385943][ T1331] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 86.386065][ T6069] netlink: 8 bytes leftover after parsing attributes in process `syz.3.26'. [ 86.402757][ T1331] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 86.415320][ T62] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 86.428432][ T6069] netlink: 4 bytes leftover after parsing attributes in process `syz.3.26'. [ 86.453039][ T1331] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 86.467652][ T6072] netlink: 'syz.3.26': attribute type 1 has an invalid length. [ 86.587523][ T6077] netlink: 'syz.4.28': attribute type 1 has an invalid length. [ 86.669036][ T43] cfg80211: failed to load regulatory.db [ 86.775907][ T6072] veth3: entered promiscuous mode [ 86.902672][ T6077] veth3: entered promiscuous mode [ 87.133897][ T6105] __nla_validate_parse: 2 callbacks suppressed [ 87.133915][ T6105] netlink: 12 bytes leftover after parsing attributes in process `syz.1.34'. [ 87.206658][ T6109] bridge_slave_0: left allmulticast mode [ 87.212341][ T6109] bridge_slave_0: left promiscuous mode [ 87.219425][ T6109] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.322114][ T6109] bridge_slave_1: left allmulticast mode [ 87.343755][ T6109] bridge_slave_1: left promiscuous mode [ 87.364054][ T6109] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.434228][ T6109] bond0: (slave bond_slave_0): Releasing backup interface [ 87.449492][ T6109] bond0: (slave bond_slave_1): Releasing backup interface [ 87.485776][ T6109] team0: Port device team_slave_0 removed [ 87.506260][ T6109] team0: Port device team_slave_1 removed [ 87.516205][ T6109] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.526377][ T6109] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 87.539811][ T6109] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 87.559138][ T6109] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 87.594895][ T6105] netlink: 12 bytes leftover after parsing attributes in process `syz.1.34'. [ 87.601171][ T1144] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 87.641078][ T6126] netlink: 'syz.3.41': attribute type 1 has an invalid length. [ 87.713049][ T1144] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 87.734115][ T6134] netlink: 12 bytes leftover after parsing attributes in process `syz.4.42'. [ 87.765725][ T1331] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 87.813647][ T1331] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 87.822366][ T6140] tc_dump_action: action bad kind [ 88.186387][ T6160] netlink: 20 bytes leftover after parsing attributes in process `syz.2.48'. [ 88.233514][ T6128] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 88.314362][ T6166] netlink: 4 bytes leftover after parsing attributes in process `syz.2.48'. [ 88.563525][ T6166] bridge_slave_1: left allmulticast mode [ 88.589584][ T6166] bridge_slave_1: left promiscuous mode [ 88.595954][ T6166] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.607834][ T6166] bridge_slave_0: left allmulticast mode [ 88.615935][ T6166] bridge_slave_0: left promiscuous mode [ 88.621618][ T6166] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.684481][ T6182] RDS: rds_bind could not find a transport for ::ffff:172.30.1.5, load rds_tcp or rds_rdma? [ 88.701121][ T6182] netlink: 14 bytes leftover after parsing attributes in process `syz.4.50'. [ 89.030696][ T6189] netlink: 8 bytes leftover after parsing attributes in process `syz.2.53'. [ 89.066816][ T6189] netlink: 8 bytes leftover after parsing attributes in process `syz.2.53'. [ 89.161637][ T6182] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 89.203357][ T6182] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 89.244531][ T6182] bond0 (unregistering): Released all slaves [ 89.552854][ T5864] Bluetooth: hci0: command 0x0c1a tx timeout [ 89.565856][ T6214] veth2: entered allmulticast mode [ 89.647210][ T6217] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 89.810785][ T6228] netlink: 288 bytes leftover after parsing attributes in process `syz.4.61'. [ 89.854244][ T6235] tipc: Enabling of bearer rejected, failed to enable media [ 89.910526][ T6237] netlink: 32 bytes leftover after parsing attributes in process `syz.3.65'. [ 90.172389][ T6251] tipc: Started in network mode [ 90.182027][ T6251] tipc: Node identity dacb060af4c, cluster identity 4711 [ 90.206943][ T6251] tipc: Enabled bearer , priority 0 [ 90.227412][ T6258] syzkaller0: entered promiscuous mode [ 90.235730][ T6258] syzkaller0: entered allmulticast mode [ 90.279279][ T6251] tipc: Resetting bearer [ 90.300671][ T6250] tipc: Resetting bearer [ 90.338835][ T6250] tipc: Disabling bearer [ 90.402579][ T6261] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 90.411155][ T6264] netlink: 'syz.4.73': attribute type 1 has an invalid length. [ 90.994272][ T6281] syzkaller0: entered promiscuous mode [ 91.012994][ T6281] syzkaller0: entered allmulticast mode [ 91.270687][ T30] audit: type=1800 audit(1756989876.968:2): pid=6294 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.83" name="x000000000000000300000000000000000000003" dev="tmpfs" ino=134 res=0 errno=0 [ 91.296165][ T30] audit: type=1804 audit(1756989876.978:3): pid=6294 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.83" name="x000000000000000300000000000000000000003" dev="tmpfs" ino=134 res=1 errno=0 [ 93.116941][ T6350] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 93.491976][ T6375] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 94.005916][ T6395] __nla_validate_parse: 10 callbacks suppressed [ 94.005941][ T6395] netlink: 4 bytes leftover after parsing attributes in process `syz.4.103'. [ 94.063090][ T6398] netlink: 16 bytes leftover after parsing attributes in process `syz.0.100'. [ 94.323934][ T6411] netlink: 20 bytes leftover after parsing attributes in process `syz.1.107'. [ 94.362750][ T6413] Illegal XDP return value 4294967274 on prog (id 43) dev N/A, expect packet loss! [ 94.562007][ T6430] netlink: 8 bytes leftover after parsing attributes in process `syz.4.113'. [ 94.589651][ T6431] netlink: 64 bytes leftover after parsing attributes in process `syz.4.113'. [ 94.655094][ T6434] netlink: 84 bytes leftover after parsing attributes in process `syz.2.112'. [ 94.730740][ T6427] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.951475][ T6427] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.106936][ T6427] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.127802][ T6458] netlink: 40 bytes leftover after parsing attributes in process `syz.1.119'. [ 95.162377][ T6458] netlink: 'syz.1.119': attribute type 2 has an invalid length. [ 95.199241][ T6427] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.253180][ T6459] bridge0: port 3(batadv1) entered blocking state [ 95.261512][ T6459] bridge0: port 3(batadv1) entered disabled state [ 95.301105][ T6459] batadv1: entered allmulticast mode [ 95.327398][ T6459] batadv1: entered promiscuous mode [ 95.494447][ T44] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.507226][ T44] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.539785][ T6468] netlink: 'syz.0.122': attribute type 12 has an invalid length. [ 95.564026][ T6365] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.620543][ T6365] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.674054][ T6479] netlink: 'syz.0.124': attribute type 1 has an invalid length. [ 95.734879][ T6355] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 95.744466][ T6355] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 95.817415][ T6479] 8021q: adding VLAN 0 to HW filter on device bond1 [ 95.859083][ T6486] netlink: 'syz.2.125': attribute type 11 has an invalid length. [ 95.868390][ T6482] 8021q: adding VLAN 0 to HW filter on device bond1 [ 95.875607][ T6482] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 95.887756][ T6482] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 96.060090][ T6485] bond1: (slave bridge1): Enslaving as an active interface with a down link [ 96.629771][ T6512] netlink: 76 bytes leftover after parsing attributes in process `syz.3.133'. [ 96.747082][ T6518] netlink: 12 bytes leftover after parsing attributes in process `syz.0.135'. [ 96.994955][ T6524] vlan2: entered promiscuous mode [ 97.000019][ T6524] syz_tun: entered promiscuous mode [ 97.160257][ T6533] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 97.331575][ T6540] syzkaller0: entered promiscuous mode [ 97.359914][ T6540] syzkaller0: entered allmulticast mode [ 97.453785][ T6541] veth1_macvtap: mtu less than device minimum [ 98.259995][ T6587] 8021q: VLANs not supported on sit0 [ 98.596667][ T6598] netlink: 8 bytes leftover after parsing attributes in process `syz.4.153'. [ 99.448498][ T6618] bridge1: entered promiscuous mode [ 99.504539][ T6618] bridge1: entered allmulticast mode [ 99.543621][ T5870] Bluetooth: hci4: command 0x0405 tx timeout [ 99.600999][ T6631] netlink: 4388 bytes leftover after parsing attributes in process `syz.0.160'. [ 99.612138][ T6599] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 99.894302][ T6646] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 4, id = 0 [ 99.961481][ T6643] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 100.196552][ T6664] netlink: 'syz.1.165': attribute type 6 has an invalid length. [ 100.930035][ T6699] netlink: 48 bytes leftover after parsing attributes in process `syz.3.173'. [ 101.001579][ T6699] netlink: 'syz.3.173': attribute type 8 has an invalid length. [ 101.173777][ T6707] netlink: 'syz.4.176': attribute type 10 has an invalid length. [ 101.207622][ T6709] netlink: 64 bytes leftover after parsing attributes in process `syz.2.177'. [ 101.544779][ T6728] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 101.963404][ T6754] netlink: zone id is out of range [ 101.969444][ T6754] netlink: zone id is out of range [ 101.975179][ T6754] netlink: zone id is out of range [ 101.981221][ T6754] netlink: zone id is out of range [ 101.986740][ T6754] netlink: zone id is out of range [ 101.994467][ T6754] netlink: zone id is out of range [ 102.000559][ T6754] netlink: zone id is out of range [ 102.200369][ T6765] netlink: 24 bytes leftover after parsing attributes in process `syz.1.188'. [ 102.365222][ T6771] pim6reg4: entered allmulticast mode [ 102.870861][ T6783] tipc: Started in network mode [ 102.908803][ T6783] tipc: Node identity 22e7ca4fb0aa, cluster identity 4711 [ 102.955486][ T6783] tipc: Enabled bearer , priority 0 [ 102.989129][ T6794] netlink: 'syz.3.196': attribute type 11 has an invalid length. [ 102.998722][ T6794] netlink: 44 bytes leftover after parsing attributes in process `syz.3.196'. [ 103.021134][ T6791] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 103.023788][ T6796] bridge_slave_0: left allmulticast mode [ 103.034851][ T6791] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 103.044147][ T6791] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 103.060829][ T6796] bridge_slave_0: left promiscuous mode [ 103.077305][ T6796] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.146528][ T6796] bridge_slave_1: left allmulticast mode [ 103.161216][ T6796] bridge_slave_1: left promiscuous mode [ 103.171101][ T6796] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.199904][ T6796] team0: Port device team_slave_0 removed [ 103.212655][ T6796] team0: Port device team_slave_1 removed [ 103.219952][ T6796] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.230093][ T6796] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 103.249297][ T6796] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.257314][ T6796] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 103.398616][ T6805] tipc: Enabling of bearer rejected, failed to enable media [ 103.427516][ T6806] netlink: 'syz.4.197': attribute type 3 has an invalid length. [ 103.454424][ T6806] netlink: 'syz.4.197': attribute type 3 has an invalid length. [ 103.512490][ T6783] tipc: Disabling bearer [ 103.613692][ T6813] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode active-backup(1) [ 104.382451][ T6855] netlink: 88 bytes leftover after parsing attributes in process `syz.1.208'. [ 104.458689][ T6854] netlink: 666 bytes leftover after parsing attributes in process `syz.4.209'. [ 104.509909][ T6854] netlink: 4 bytes leftover after parsing attributes in process `syz.4.209'. [ 104.904994][ T6876] netlink: 'syz.4.213': attribute type 5 has an invalid length. [ 105.335710][ T6897] veth0: entered promiscuous mode [ 105.358919][ T6897] netlink: 16 bytes leftover after parsing attributes in process `syz.0.222'. [ 105.392567][ T6897] net_ratelimit: 6 callbacks suppressed [ 105.392583][ T6897] openvswitch: netlink: Missing key (keys=40, expected=80) [ 105.411835][ T6895] raw_sendmsg: syz.3.220 forgot to set AF_INET. Fix it! [ 105.505211][ T6897] netlink: 'syz.0.222': attribute type 2 has an invalid length. [ 106.237410][ T6891] veth0: left promiscuous mode [ 106.485804][ T6955] netlink: 'syz.3.236': attribute type 13 has an invalid length. [ 106.512860][ T6955] netlink: 'syz.3.236': attribute type 17 has an invalid length. [ 106.898077][ T6955] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 107.570034][ T6999] netlink: 8 bytes leftover after parsing attributes in process `syz.3.252'. [ 107.626261][ T43] IPVS: starting estimator thread 0... [ 107.743957][ T7003] IPVS: using max 31 ests per chain, 74400 per kthread [ 107.786427][ T7011] netdevsim netdevsim0: Direct firmware load for .. failed with error -2 [ 107.843279][ T7011] netdevsim netdevsim0: Falling back to sysfs fallback for: .. [ 108.080665][ T7017] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 108.977618][ T7047] syz.4.264 (7047) used obsolete PPPIOCDETACH ioctl [ 109.286448][ T7060] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 109.436520][ T7064] netlink: 8 bytes leftover after parsing attributes in process `syz.3.269'. [ 109.953747][ T7085] netlink: 12 bytes leftover after parsing attributes in process `syz.3.273'. [ 111.043444][ T7126] af_packet: tpacket_rcv: packet too big, clamped from 2 to 4294967272. macoff=96 [ 111.577032][ T7141] netlink: 'syz.4.283': attribute type 30 has an invalid length. [ 111.638062][ T7148] netlink: 20 bytes leftover after parsing attributes in process `syz.4.283'. [ 111.689038][ T7141] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 111.718589][ T7141] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 111.749616][ T7151] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.286'. [ 111.821108][ T7151] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 111.879423][ T7151] openvswitch: netlink: Message has 1 unknown bytes. [ 111.939849][ T7160] netlink: 16 bytes leftover after parsing attributes in process `syz.3.287'. [ 112.214563][ T7170] netlink: 56 bytes leftover after parsing attributes in process `syz.2.290'. [ 112.688029][ T7194] dvmrp0: entered allmulticast mode [ 112.712404][ T7197] netlink: 28 bytes leftover after parsing attributes in process `syz.0.295'. [ 113.550991][ T7220] netlink: 16 bytes leftover after parsing attributes in process `syz.4.300'. [ 113.666227][ T7220] syzkaller0: entered promiscuous mode [ 113.671785][ T7220] syzkaller0: entered allmulticast mode [ 115.431516][ T7243] netlink: 'syz.3.306': attribute type 1 has an invalid length. [ 115.447681][ T7255] netlink: 1 bytes leftover after parsing attributes in process `syz.1.309'. [ 115.723430][ T7263] netlink: 8 bytes leftover after parsing attributes in process `syz.1.311'. [ 115.896512][ T7279] netlink: 12 bytes leftover after parsing attributes in process `syz.2.316'. [ 115.980020][ T7285] netlink: 8 bytes leftover after parsing attributes in process `syz.4.318'. [ 116.318830][ T7300] netlink: 'syz.0.324': attribute type 4 has an invalid length. [ 116.701612][ T7319] __nla_validate_parse: 3 callbacks suppressed [ 116.701629][ T7319] netlink: 8 bytes leftover after parsing attributes in process `syz.3.330'. [ 116.884790][ T7324] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 117.057982][ T7330] netlink: 4 bytes leftover after parsing attributes in process `syz.2.331'. [ 117.375200][ T7339] netlink: 8 bytes leftover after parsing attributes in process `syz.2.334'. [ 117.598085][ T7346] netlink: 8 bytes leftover after parsing attributes in process `syz.3.335'. [ 117.755364][ T7348] netlink: 'syz.0.337': attribute type 1 has an invalid length. [ 117.779648][ T7342] netlink: 'syz.3.335': attribute type 10 has an invalid length. [ 117.871908][ T7342] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 117.950303][ T7361] bridge1: entered allmulticast mode [ 118.595587][ T7388] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.348'. [ 118.918901][ T7410] netlink: 4 bytes leftover after parsing attributes in process `syz.4.352'. [ 119.037069][ T7412] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 119.234668][ T7433] netlink: 308 bytes leftover after parsing attributes in process `syz.2.356'. [ 119.275116][ T7433] netlink: 8 bytes leftover after parsing attributes in process `syz.2.356'. [ 119.314817][ T7433] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 120.062256][ T7473] netlink: 4 bytes leftover after parsing attributes in process `syz.3.361'. [ 120.382545][ T7490] bridge1: entered allmulticast mode [ 120.876804][ T7498] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 120.890720][ T7498] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.008607][ T7498] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 121.035865][ T7498] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.355640][ T7540] netlink: 100 bytes leftover after parsing attributes in process `syz.4.376'. [ 121.450579][ T7498] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 121.507328][ T7498] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.889315][ T7551] netlink: 'syz.0.383': attribute type 10 has an invalid length. [ 121.940495][ T7498] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 121.968362][ T7552] netlink: 'syz.0.383': attribute type 10 has an invalid length. [ 121.973172][ T7498] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.038594][ T7551] team0: Port device dummy0 added [ 122.110955][ T7552] team0: Port device dummy0 removed [ 122.127872][ T7552] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 122.315288][ T6365] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.348582][ T6365] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.408628][ T6365] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.428608][ T6365] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.484146][ T1144] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.492449][ T1144] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.544559][ T6365] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.560309][ T6365] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.682010][ T7581] netlink: 'syz.3.391': attribute type 4 has an invalid length. [ 122.812468][ T7586] netlink: 876 bytes leftover after parsing attributes in process `syz.1.393'. [ 123.536613][ T7619] sch_tbf: burst 5 is lower than device lo mtu (65550) ! [ 123.640194][ T7623] netlink: 28 bytes leftover after parsing attributes in process `syz.4.406'. [ 123.681034][ T7623] netlink: 'syz.4.406': attribute type 1 has an invalid length. [ 123.706852][ T7626] netlink: 20 bytes leftover after parsing attributes in process `syz.1.407'. [ 123.835974][ T7632] netlink: 8 bytes leftover after parsing attributes in process `syz.3.411'. [ 123.962024][ T7638] FAULT_INJECTION: forcing a failure. [ 123.962024][ T7638] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 124.010911][ T7638] CPU: 0 UID: 0 PID: 7638 Comm: syz.3.413 Not tainted syzkaller #0 PREEMPT(full) [ 124.010934][ T7638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 124.010950][ T7638] Call Trace: [ 124.010957][ T7638] [ 124.010965][ T7638] dump_stack_lvl+0x189/0x250 [ 124.010994][ T7638] ? __pfx____ratelimit+0x10/0x10 [ 124.011012][ T7638] ? __pfx_dump_stack_lvl+0x10/0x10 [ 124.011032][ T7638] ? __pfx__printk+0x10/0x10 [ 124.011068][ T7638] should_fail_ex+0x414/0x560 [ 124.011095][ T7638] _copy_to_user+0x31/0xb0 [ 124.011116][ T7638] simple_read_from_buffer+0xe1/0x170 [ 124.011143][ T7638] proc_fail_nth_read+0x1b3/0x220 [ 124.011166][ T7638] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 124.011189][ T7638] ? rw_verify_area+0x2a6/0x4d0 [ 124.011207][ T7638] ? __lock_acquire+0xab9/0xd20 [ 124.011227][ T7638] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 124.011247][ T7638] vfs_read+0x1fd/0xa30 [ 124.011266][ T7638] ? fdget_pos+0x247/0x320 [ 124.011289][ T7638] ? __pfx___mutex_lock+0x10/0x10 [ 124.011307][ T7638] ? __pfx_vfs_read+0x10/0x10 [ 124.011329][ T7638] ? __fget_files+0x2a/0x420 [ 124.011348][ T7638] ? __fget_files+0x3a0/0x420 [ 124.011368][ T7638] ? __fget_files+0x2a/0x420 [ 124.011393][ T7638] ksys_read+0x145/0x250 [ 124.011416][ T7638] ? __pfx_ksys_read+0x10/0x10 [ 124.011433][ T7638] ? rcu_is_watching+0x15/0xb0 [ 124.011455][ T7638] ? do_syscall_64+0xbe/0x3b0 [ 124.011477][ T7638] do_syscall_64+0xfa/0x3b0 [ 124.011493][ T7638] ? lockdep_hardirqs_on+0x9c/0x150 [ 124.011509][ T7638] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.011525][ T7638] ? clear_bhb_loop+0x60/0xb0 [ 124.011546][ T7638] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.011562][ T7638] RIP: 0033:0x7fcfbef8d5fc [ 124.011582][ T7638] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 124.011596][ T7638] RSP: 002b:00007fcfbfe18030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 124.011618][ T7638] RAX: ffffffffffffffda RBX: 00007fcfbf1c5fa0 RCX: 00007fcfbef8d5fc [ 124.011630][ T7638] RDX: 000000000000000f RSI: 00007fcfbfe180a0 RDI: 0000000000000004 [ 124.011640][ T7638] RBP: 00007fcfbfe18090 R08: 0000000000000000 R09: 0000000000000000 [ 124.011650][ T7638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 124.011659][ T7638] R13: 00007fcfbf1c6038 R14: 00007fcfbf1c5fa0 R15: 00007ffd4b6d6e68 [ 124.011690][ T7638] [ 124.829383][ T7660] vlan2: entered allmulticast mode [ 124.848890][ T7648] netlink: 4 bytes leftover after parsing attributes in process `syz.0.415'. [ 124.972234][ T7648] macvtap1: entered promiscuous mode [ 124.989241][ T7648] team0: entered promiscuous mode [ 125.018370][ T7648] macvtap1: entered allmulticast mode [ 125.043149][ T7648] team0: entered allmulticast mode [ 125.066612][ T7648] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 125.099894][ T7665] team0: left allmulticast mode [ 125.118226][ T7665] team0: left promiscuous mode [ 125.386337][ T7683] netlink: 68 bytes leftover after parsing attributes in process `syz.1.423'. [ 125.406050][ T7690] netlink: 8 bytes leftover after parsing attributes in process `syz.0.426'. [ 125.458401][ T7690] netlink: 28 bytes leftover after parsing attributes in process `syz.0.426'. [ 125.493426][ T7693] netlink: 'syz.4.427': attribute type 1 has an invalid length. [ 125.609977][ T7693] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.649444][ T7699] bond0: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 125.659235][ T7690] netlink: 8 bytes leftover after parsing attributes in process `syz.0.426'. [ 125.668199][ T7690] netlink: 28 bytes leftover after parsing attributes in process `syz.0.426'. [ 125.714318][ T6365] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 125.933435][ T1144] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 126.145710][ T7718] openvswitch: netlink: Flow key attr not present in new flow. [ 126.745070][ T7736] tipc: Can't bind to reserved service type 1 [ 126.781280][ T7734] syzkaller0: entered promiscuous mode [ 126.801569][ T7734] syzkaller0: entered allmulticast mode [ 128.874109][ T7776] __nla_validate_parse: 10 callbacks suppressed [ 128.874126][ T7776] netlink: 12 bytes leftover after parsing attributes in process `syz.3.446'. [ 129.202360][ T7793] macvlan2: entered allmulticast mode [ 129.215278][ T7793] veth1_vlan: entered allmulticast mode [ 129.224858][ T7793] veth1_vlan: left allmulticast mode [ 129.849997][ T7823] dvmrp0: entered allmulticast mode [ 130.271694][ T7839] netlink: 256 bytes leftover after parsing attributes in process `syz.3.455'. [ 130.321785][ T7844] netlink: 36 bytes leftover after parsing attributes in process `syz.0.456'. [ 130.379824][ T7844] 8021q: VLANs not supported on ipvlan1 [ 130.532958][ T7856] netlink: 4 bytes leftover after parsing attributes in process `syz.1.459'. [ 130.866947][ T7866] Bluetooth: MGMT ver 1.23 [ 130.970198][ T7866] geneve2: entered promiscuous mode [ 131.230519][ T7885] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.466'. [ 131.602618][ T7900] netlink: 4 bytes leftover after parsing attributes in process `syz.4.471'. [ 131.690160][ T7906] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 132.122939][ T7922] netlink: 44 bytes leftover after parsing attributes in process `syz.0.472'. [ 132.409739][ T7939] trusted_key: syz.4.481 sent an empty control message without MSG_MORE. [ 132.749870][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.763116][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.156059][ T7963] netlink: 'syz.1.487': attribute type 29 has an invalid length. [ 133.262730][ T7960] netlink: 36 bytes leftover after parsing attributes in process `syz.1.487'. [ 133.268634][ T7958] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 133.734443][ T10] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0 [ 133.801720][ T10] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0 [ 133.884342][ T10] hid-generic 0005:16BF:5505.0001: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa [ 134.238206][ T7989] fido_id[7989]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci4/hci4:200/report_descriptor': No such file or directory [ 134.455782][ T8012] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.500'. [ 135.077518][ T8028] netlink: 8 bytes leftover after parsing attributes in process `syz.2.502'. [ 135.172854][ T5864] Bluetooth: hci0: command 0x0c1a tx timeout [ 135.337470][ T5941] hid-generic 0005:16C0:0009.0002: unknown main item tag 0x0 [ 135.386369][ T5941] hid-generic 0005:16C0:0009.0002: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 136.140771][ T8067] netlink: 28 bytes leftover after parsing attributes in process `syz.3.512'. [ 136.168658][ T8067] netlink: 4 bytes leftover after parsing attributes in process `syz.3.512'. [ 136.647364][ T8092] netlink: 8 bytes leftover after parsing attributes in process `syz.2.519'. [ 136.681964][ T8095] netlink: 8 bytes leftover after parsing attributes in process `syz.3.520'. [ 136.713199][ T8098] netlink: 8 bytes leftover after parsing attributes in process `syz.0.522'. [ 136.976347][ T8113] netlink: 20 bytes leftover after parsing attributes in process `syz.3.526'. [ 137.190262][ T8118] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 137.204897][ T8118] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 137.227117][ T8127] netlink: 4 bytes leftover after parsing attributes in process `syz.3.531'. [ 137.427346][ T8132] netlink: 'syz.0.533': attribute type 1 has an invalid length. [ 137.505701][ T8132] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 137.520631][ T8132] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 137.555254][ T8145] gretap1: entered promiscuous mode [ 137.563849][ T8145] bond2: (slave gretap1): making interface the new active one [ 137.571855][ T8145] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 137.615818][ T8147] netlink: 4 bytes leftover after parsing attributes in process `syz.3.536'. [ 137.774426][ T8110] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 137.781289][ T8151] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 138.378509][ T8184] netlink: 'syz.3.546': attribute type 2 has an invalid length. [ 138.427384][ T8184] k*]: entered promiscuous mode [ 138.854489][ T8206] netlink: 'syz.0.554': attribute type 1 has an invalid length. [ 138.890953][ T8206] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 139.040990][ T8214] veth3: entered promiscuous mode [ 141.119898][ T8299] netlink: 'syz.1.573': attribute type 1 has an invalid length. [ 141.311948][ T8319] __nla_validate_parse: 3 callbacks suppressed [ 141.311966][ T8319] netlink: 4 bytes leftover after parsing attributes in process `syz.1.573'. [ 141.463073][ T8308] netlink: 8 bytes leftover after parsing attributes in process `syz.2.575'. [ 141.507155][ T8299] 8021q: adding VLAN 0 to HW filter on device bond1 [ 141.571778][ T8327] IPVS: persistence engine module ip_vs_pe_ not found [ 141.586466][ T43] IPVS: starting estimator thread 0... [ 141.645358][ T8315] bond1: (slave veth5): Enslaving as an active interface with a down link [ 141.693906][ T8340] IPVS: using max 29 ests per chain, 69600 per kthread [ 141.723545][ T8325] netlink: 2 bytes leftover after parsing attributes in process `syz.3.578'. [ 141.769599][ T8308] netlink: 'syz.2.575': attribute type 2 has an invalid length. [ 142.189323][ T8358] syzkaller1: entered promiscuous mode [ 142.198281][ T8361] netlink: 8 bytes leftover after parsing attributes in process `syz.3.585'. [ 142.212373][ T8358] syzkaller1: entered allmulticast mode [ 142.221910][ T8364] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 142.223204][ T8365] netlink: 'syz.2.584': attribute type 4 has an invalid length. [ 142.223886][ T8361] netlink: 4 bytes leftover after parsing attributes in process `syz.3.585'. [ 142.271439][ T8365] netlink: 17 bytes leftover after parsing attributes in process `syz.2.584'. [ 143.440753][ T8385] netlink: 260 bytes leftover after parsing attributes in process `syz.0.589'. [ 143.480740][ T8385] netlink: 260 bytes leftover after parsing attributes in process `syz.0.589'. [ 143.831283][ T8389] netlink: 'syz.1.592': attribute type 2 has an invalid length. [ 144.199304][ T8422] netlink: 'syz.2.602': attribute type 29 has an invalid length. [ 144.225501][ T8422] netlink: 'syz.2.602': attribute type 29 has an invalid length. [ 144.241282][ T8422] netlink: 488 bytes leftover after parsing attributes in process `syz.2.602'. [ 144.338968][ T8427] netlink: 12 bytes leftover after parsing attributes in process `syz.2.604'. [ 144.421277][ T8424] tipc: Started in network mode [ 144.438553][ T8424] tipc: Node identity 46b5b0a44459, cluster identity 4711 [ 144.467874][ T8424] tipc: Enabled bearer , priority 0 [ 144.510880][ T8425] syzkaller0: entered promiscuous mode [ 144.549034][ T8425] syzkaller0: entered allmulticast mode [ 144.583575][ T8424] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 144.647664][ T8424] tipc: Resetting bearer [ 144.848478][ T8423] tipc: Resetting bearer [ 144.924706][ T8423] tipc: Disabling bearer [ 145.178693][ T8442] IPVS: set_ctl: invalid protocol: 29 172.20.20.170:20003 [ 145.199869][ T8440] netlink: 'syz.3.608': attribute type 12 has an invalid length. [ 145.280539][ T8440] tipc: Enabled bearer , priority 0 [ 145.328461][ T8440] syzkaller0: entered promiscuous mode [ 145.359402][ T8440] syzkaller0: entered allmulticast mode [ 145.498309][ T8440] tipc: Resetting bearer [ 145.579018][ T8464] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 145.588191][ T8439] tipc: Resetting bearer [ 145.595254][ T5975] IPVS: starting estimator thread 0... [ 145.618003][ T8439] tipc: Disabling bearer [ 145.693366][ T8470] IPVS: using max 32 ests per chain, 76800 per kthread [ 146.416406][ T8499] erspan0: entered promiscuous mode [ 146.433579][ T8499] erspan0: left promiscuous mode [ 146.835046][ T8529] __nla_validate_parse: 8 callbacks suppressed [ 146.835063][ T8529] netlink: 12 bytes leftover after parsing attributes in process `syz.0.635'. [ 146.882468][ T8529] netlink: 'syz.0.635': attribute type 1 has an invalid length. [ 146.923159][ T8529] netlink: 'syz.0.635': attribute type 2 has an invalid length. [ 146.954985][ T8537] netlink: 'syz.0.635': attribute type 1 has an invalid length. [ 146.964954][ T8537] netlink: 'syz.0.635': attribute type 2 has an invalid length. [ 147.746137][ T8582] FAULT_INJECTION: forcing a failure. [ 147.746137][ T8582] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 147.761203][ T8582] CPU: 1 UID: 0 PID: 8582 Comm: syz.2.651 Not tainted syzkaller #0 PREEMPT(full) [ 147.761226][ T8582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 147.761236][ T8582] Call Trace: [ 147.761243][ T8582] [ 147.761259][ T8582] dump_stack_lvl+0x189/0x250 [ 147.761284][ T8582] ? __pfx____ratelimit+0x10/0x10 [ 147.761305][ T8582] ? __pfx_dump_stack_lvl+0x10/0x10 [ 147.761324][ T8582] ? __pfx__printk+0x10/0x10 [ 147.761360][ T8582] should_fail_ex+0x414/0x560 [ 147.761387][ T8582] _copy_from_user+0x2d/0xb0 [ 147.761408][ T8582] bpf_test_init+0xf8/0x170 [ 147.761429][ T8582] bpf_prog_test_run_skb+0x1e9/0x1560 [ 147.761445][ T8582] ? __fget_files+0x2a/0x420 [ 147.761463][ T8582] ? __fget_files+0x2a/0x420 [ 147.761485][ T8582] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 147.761508][ T8582] bpf_prog_test_run+0x2c7/0x340 [ 147.761532][ T8582] __sys_bpf+0x581/0x870 [ 147.761552][ T8582] ? __pfx___sys_bpf+0x10/0x10 [ 147.761584][ T8582] ? ksys_write+0x22a/0x250 [ 147.761606][ T8582] ? __pfx_ksys_write+0x10/0x10 [ 147.761620][ T8582] ? rcu_is_watching+0x15/0xb0 [ 147.761643][ T8582] __x64_sys_bpf+0x7c/0x90 [ 147.761661][ T8582] do_syscall_64+0xfa/0x3b0 [ 147.761675][ T8582] ? lockdep_hardirqs_on+0x9c/0x150 [ 147.761690][ T8582] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.761704][ T8582] ? clear_bhb_loop+0x60/0xb0 [ 147.761723][ T8582] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.761737][ T8582] RIP: 0033:0x7f268038ebe9 [ 147.761752][ T8582] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 147.761764][ T8582] RSP: 002b:00007f26812d4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 147.761782][ T8582] RAX: ffffffffffffffda RBX: 00007f26805c5fa0 RCX: 00007f268038ebe9 [ 147.761794][ T8582] RDX: 0000000000000050 RSI: 0000200000000140 RDI: 000000000000000a [ 147.761804][ T8582] RBP: 00007f26812d4090 R08: 0000000000000000 R09: 0000000000000000 [ 147.761815][ T8582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 147.761824][ T8582] R13: 00007f26805c6038 R14: 00007f26805c5fa0 R15: 00007ffd402e8b88 [ 147.761854][ T8582] [ 148.336714][ T8595] netlink: 'syz.4.654': attribute type 28 has an invalid length. [ 148.386632][ T8595] netlink: 8 bytes leftover after parsing attributes in process `syz.4.654'. [ 148.650614][ T8609] bridge: RTM_NEWNEIGH with invalid ether address [ 148.830199][ T8619] FAULT_INJECTION: forcing a failure. [ 148.830199][ T8619] name failslab, interval 1, probability 0, space 0, times 1 [ 148.890922][ T8619] CPU: 1 UID: 0 PID: 8619 Comm: syz.2.662 Not tainted syzkaller #0 PREEMPT(full) [ 148.890946][ T8619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 148.890956][ T8619] Call Trace: [ 148.890963][ T8619] [ 148.891006][ T8619] dump_stack_lvl+0x189/0x250 [ 148.891032][ T8619] ? __pfx____ratelimit+0x10/0x10 [ 148.891049][ T8619] ? __pfx_dump_stack_lvl+0x10/0x10 [ 148.891067][ T8619] ? __pfx__printk+0x10/0x10 [ 148.891093][ T8619] ? __pfx___might_resched+0x10/0x10 [ 148.891113][ T8619] should_fail_ex+0x414/0x560 [ 148.891139][ T8619] should_failslab+0xa8/0x100 [ 148.891163][ T8619] __kmalloc_noprof+0xcb/0x4f0 [ 148.891183][ T8619] ? sk_prot_alloc+0xe7/0x220 [ 148.891205][ T8619] sk_prot_alloc+0xe7/0x220 [ 148.891220][ T8619] ? sk_alloc+0x24/0x370 [ 148.891236][ T8619] sk_alloc+0x3a/0x370 [ 148.891334][ T8619] ? bpf_ctx_init+0x167/0x1d0 [ 148.891353][ T8619] bpf_prog_test_run_skb+0x2ed/0x1560 [ 148.891369][ T8619] ? __fget_files+0x2a/0x420 [ 148.891397][ T8619] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 148.891420][ T8619] bpf_prog_test_run+0x2c7/0x340 [ 148.891446][ T8619] __sys_bpf+0x581/0x870 [ 148.891468][ T8619] ? __pfx___sys_bpf+0x10/0x10 [ 148.891501][ T8619] ? ksys_write+0x22a/0x250 [ 148.891524][ T8619] ? __pfx_ksys_write+0x10/0x10 [ 148.891541][ T8619] ? rcu_is_watching+0x15/0xb0 [ 148.891563][ T8619] __x64_sys_bpf+0x7c/0x90 [ 148.891583][ T8619] do_syscall_64+0xfa/0x3b0 [ 148.891600][ T8619] ? lockdep_hardirqs_on+0x9c/0x150 [ 148.891616][ T8619] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.891632][ T8619] ? clear_bhb_loop+0x60/0xb0 [ 148.891652][ T8619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.891667][ T8619] RIP: 0033:0x7f268038ebe9 [ 148.891683][ T8619] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 148.891696][ T8619] RSP: 002b:00007f26812d4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 148.891714][ T8619] RAX: ffffffffffffffda RBX: 00007f26805c5fa0 RCX: 00007f268038ebe9 [ 148.891727][ T8619] RDX: 0000000000000050 RSI: 0000200000000140 RDI: 000000000000000a [ 148.891737][ T8619] RBP: 00007f26812d4090 R08: 0000000000000000 R09: 0000000000000000 [ 148.891746][ T8619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 148.891756][ T8619] R13: 00007f26805c6038 R14: 00007f26805c5fa0 R15: 00007ffd402e8b88 [ 148.891784][ T8619] [ 149.370558][ T8635] netlink: 'syz.1.670': attribute type 1 has an invalid length. [ 149.436773][ T8636] netlink: 'syz.1.670': attribute type 1 has an invalid length. [ 149.700129][ T8641] netlink: 20 bytes leftover after parsing attributes in process `syz.0.672'. [ 149.825234][ T8639] tipc: Enabled bearer , priority 0 [ 149.880901][ T8638] tipc: Disabling bearer [ 150.012866][ T8638] delete_channel: no stack [ 150.120723][ T8658] netlink: 248 bytes leftover after parsing attributes in process `syz.3.677'. [ 150.382404][ T8670] 8021q: VLANs not supported on wg2 [ 150.617712][ T8685] netlink: 20 bytes leftover after parsing attributes in process `syz.3.682'. [ 150.680359][ T8685] netlink: 20 bytes leftover after parsing attributes in process `syz.3.682'. [ 151.188691][ T8709] netlink: 3 bytes leftover after parsing attributes in process `syz.4.688'. [ 151.316327][ T8709] batadv1: entered promiscuous mode [ 151.321571][ T8709] batadv1: entered allmulticast mode [ 151.729907][ T8723] netlink: 'syz.3.691': attribute type 4 has an invalid length. [ 151.938067][ T8730] netlink: 16 bytes leftover after parsing attributes in process `syz.3.693'. [ 152.425077][ T8751] ieee802154 phy0 wpan0: encryption failed: -22 [ 152.563673][ T8756] netlink: 'syz.2.700': attribute type 13 has an invalid length. [ 152.579920][ T8756] netlink: 'syz.2.700': attribute type 17 has an invalid length. [ 152.760358][ T8750] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.188137][ T8787] netlink: 8 bytes leftover after parsing attributes in process `syz.3.705'. [ 153.340333][ T8756] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 153.459059][ T8750] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.704904][ T8750] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.884651][ T8803] netlink: 36 bytes leftover after parsing attributes in process `syz.4.709'. [ 153.908888][ T8750] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.142044][ T8812] netlink: 4 bytes leftover after parsing attributes in process `syz.4.713'. [ 154.325459][ T8817] erspan0: entered promiscuous mode [ 154.331000][ T8817] macsec1: entered promiscuous mode [ 154.349688][ T8817] erspan0: left promiscuous mode [ 154.360029][ T8821] netlink: 'syz.3.716': attribute type 2 has an invalid length. [ 154.395227][ T8821] netlink: 132 bytes leftover after parsing attributes in process `syz.3.716'. [ 154.411073][ T1331] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.436534][ T1331] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.453053][ T1331] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.513249][ T1144] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.692223][ T8833] netlink: 32 bytes leftover after parsing attributes in process `syz.3.719'. [ 154.715218][ T8833] netlink: 20 bytes leftover after parsing attributes in process `syz.3.719'. [ 154.732096][ T8830] netlink: 8 bytes leftover after parsing attributes in process `syz.0.720'. [ 154.747032][ T8830] netlink: 4 bytes leftover after parsing attributes in process `syz.0.720'. [ 155.149234][ T8850] netlink: 'syz.3.725': attribute type 21 has an invalid length. [ 155.277344][ T8855] netlink: 48 bytes leftover after parsing attributes in process `syz.2.726'. [ 155.621865][ T8849] syz.0.724 (8849) used greatest stack depth: 17864 bytes left [ 155.723874][ T8874] netlink: 'syz.2.731': attribute type 1 has an invalid length. [ 155.922739][ T8879] tipc: Enabled bearer , priority 10 [ 156.187836][ T8894] 8021q: adding VLAN 0 to HW filter on device bond3 [ 156.196866][ T8894] bond0: (slave bond3): Enslaving as an active interface with an up link [ 156.471481][ T8917] netlink: 'syz.2.742': attribute type 10 has an invalid length. [ 156.575782][ T8917] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 156.624490][ T8926] IPVS: set_ctl: invalid protocol: 59 172.20.20.187:20002 [ 156.772425][ T8932] netlink: 'syz.2.747': attribute type 4 has an invalid length. [ 156.834315][ T8935] IPv6: Can't replace route, no match found [ 157.041958][ T5941] tipc: Node number set to 49066148 [ 157.216342][ T8955] FAULT_INJECTION: forcing a failure. [ 157.216342][ T8955] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 157.266392][ T8955] CPU: 0 UID: 0 PID: 8955 Comm: syz.4.755 Not tainted syzkaller #0 PREEMPT(full) [ 157.266416][ T8955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 157.266424][ T8955] Call Trace: [ 157.266431][ T8955] [ 157.266438][ T8955] dump_stack_lvl+0x189/0x250 [ 157.266463][ T8955] ? __pfx____ratelimit+0x10/0x10 [ 157.266480][ T8955] ? __pfx_dump_stack_lvl+0x10/0x10 [ 157.266499][ T8955] ? __pfx__printk+0x10/0x10 [ 157.266533][ T8955] should_fail_ex+0x414/0x560 [ 157.266559][ T8955] _copy_to_user+0x31/0xb0 [ 157.266581][ T8955] simple_read_from_buffer+0xe1/0x170 [ 157.266608][ T8955] proc_fail_nth_read+0x1b3/0x220 [ 157.266631][ T8955] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 157.266652][ T8955] ? rw_verify_area+0x2a6/0x4d0 [ 157.266671][ T8955] ? __lock_acquire+0xab9/0xd20 [ 157.266690][ T8955] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 157.266711][ T8955] vfs_read+0x1fd/0xa30 [ 157.266731][ T8955] ? fdget_pos+0x247/0x320 [ 157.266750][ T8955] ? __pfx___mutex_lock+0x10/0x10 [ 157.266768][ T8955] ? __pfx_vfs_read+0x10/0x10 [ 157.266789][ T8955] ? __fget_files+0x2a/0x420 [ 157.266806][ T8955] ? __fget_files+0x3a0/0x420 [ 157.266818][ T8955] ? __fget_files+0x2a/0x420 [ 157.266842][ T8955] ksys_read+0x145/0x250 [ 157.266864][ T8955] ? __pfx_ksys_read+0x10/0x10 [ 157.266882][ T8955] ? rcu_is_watching+0x15/0xb0 [ 157.266904][ T8955] ? do_syscall_64+0xbe/0x3b0 [ 157.266925][ T8955] do_syscall_64+0xfa/0x3b0 [ 157.266940][ T8955] ? lockdep_hardirqs_on+0x9c/0x150 [ 157.266956][ T8955] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.266972][ T8955] ? clear_bhb_loop+0x60/0xb0 [ 157.266992][ T8955] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.267008][ T8955] RIP: 0033:0x7fa0fbd8d5fc [ 157.267023][ T8955] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 157.267037][ T8955] RSP: 002b:00007fa0fcc99030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 157.267055][ T8955] RAX: ffffffffffffffda RBX: 00007fa0fbfc5fa0 RCX: 00007fa0fbd8d5fc [ 157.267067][ T8955] RDX: 000000000000000f RSI: 00007fa0fcc990a0 RDI: 0000000000000004 [ 157.267077][ T8955] RBP: 00007fa0fcc99090 R08: 0000000000000000 R09: 0000000000000000 [ 157.267087][ T8955] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 157.267096][ T8955] R13: 00007fa0fbfc6038 R14: 00007fa0fbfc5fa0 R15: 00007ffd5ce5fce8 [ 157.267126][ T8955] [ 157.653369][ T8968] __nla_validate_parse: 2 callbacks suppressed [ 157.653386][ T8968] netlink: 36 bytes leftover after parsing attributes in process `syz.0.762'. [ 158.587217][ T9012] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 158.594515][ T9012] IPv6: NLM_F_CREATE should be set when creating new route [ 158.601750][ T9012] IPv6: NLM_F_CREATE should be set when creating new route [ 158.606839][ T9014] netlink: 28 bytes leftover after parsing attributes in process `syz.1.771'. [ 158.771490][ T9020] netlink: 'syz.0.773': attribute type 13 has an invalid length. [ 158.787027][ T9020] netlink: 'syz.0.773': attribute type 17 has an invalid length. [ 158.872633][ T9021] netlink: 8 bytes leftover after parsing attributes in process `syz.2.775'. [ 158.976512][ T9031] netlink: 124 bytes leftover after parsing attributes in process `syz.3.777'. [ 158.999351][ T9020] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 159.201280][ T9036] netlink: 44 bytes leftover after parsing attributes in process `syz.1.780'. [ 159.222437][ T9037] netlink: 4 bytes leftover after parsing attributes in process `syz.3.779'. [ 159.295228][ T9039] netlink: 4 bytes leftover after parsing attributes in process `syz.1.780'. [ 159.343983][ T9038] FAULT_INJECTION: forcing a failure. [ 159.343983][ T9038] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 159.362468][ T9038] CPU: 0 UID: 0 PID: 9038 Comm: syz.4.778 Not tainted syzkaller #0 PREEMPT(full) [ 159.362491][ T9038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 159.362500][ T9038] Call Trace: [ 159.362508][ T9038] [ 159.362515][ T9038] dump_stack_lvl+0x189/0x250 [ 159.362540][ T9038] ? __pfx____ratelimit+0x10/0x10 [ 159.362558][ T9038] ? __pfx_dump_stack_lvl+0x10/0x10 [ 159.362576][ T9038] ? __pfx__printk+0x10/0x10 [ 159.362600][ T9038] ? fs_reclaim_acquire+0x7d/0x100 [ 159.362634][ T9038] should_fail_ex+0x414/0x560 [ 159.362661][ T9038] prepare_alloc_pages+0x213/0x610 [ 159.362686][ T9038] __alloc_frozen_pages_noprof+0x123/0x370 [ 159.362708][ T9038] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 159.362743][ T9038] alloc_pages_mpol+0x232/0x4a0 [ 159.362775][ T9038] alloc_pages_noprof+0xa9/0x190 [ 159.362798][ T9038] pte_alloc_one+0x21/0x170 [ 159.362820][ T9038] __pte_alloc+0x25/0x1a0 [ 159.362841][ T9038] __handle_mm_fault+0x49b3/0x5440 [ 159.362876][ T9038] ? __pfx___handle_mm_fault+0x10/0x10 [ 159.362917][ T9038] ? __pfx___might_resched+0x10/0x10 [ 159.362940][ T9038] handle_mm_fault+0x40a/0x8e0 [ 159.362969][ T9038] __get_user_pages+0x1699/0x2ce0 [ 159.362986][ T9038] ? __lock_acquire+0xab9/0xd20 [ 159.363046][ T9038] __gup_longterm_locked+0xde9/0x1660 [ 159.363079][ T9038] ? sanity_check_pinned_pages+0x1241/0x1300 [ 159.363101][ T9038] ? gup_fast_fallback+0x195f/0x2010 [ 159.363125][ T9038] gup_fast_fallback+0x1e6a/0x2010 [ 159.363180][ T9038] ? __pfx_gup_fast_fallback+0x10/0x10 [ 159.363197][ T9038] ? blake2b_compress_generic+0x20db/0x2110 [ 159.363232][ T9038] ? pin_user_pages_fast+0x4d/0xb0 [ 159.363254][ T9038] iov_iter_extract_pages+0x35a/0x5e0 [ 159.363283][ T9038] extract_iter_to_sg+0xe46/0x24e0 [ 159.363317][ T9038] ? sanity_check_pinned_pages+0x123a/0x1300 [ 159.363342][ T9038] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 159.363366][ T9038] ? unpin_user_page+0xc9/0x1d0 [ 159.363383][ T9038] ? __pfx_unpin_user_page+0x10/0x10 [ 159.363413][ T9038] ? __asan_memset+0x22/0x50 [ 159.363434][ T9038] hash_sendmsg+0x4f4/0x11d0 [ 159.363480][ T9038] ? __pfx_hash_sendmsg+0x10/0x10 [ 159.363500][ T9038] __sock_sendmsg+0x219/0x270 [ 159.363526][ T9038] ____sys_sendmsg+0x52d/0x830 [ 159.363551][ T9038] ? __pfx_____sys_sendmsg+0x10/0x10 [ 159.363580][ T9038] ? import_iovec+0x74/0xa0 [ 159.363603][ T9038] ___sys_sendmsg+0x21f/0x2a0 [ 159.363625][ T9038] ? __pfx____sys_sendmsg+0x10/0x10 [ 159.363686][ T9038] ? __fget_files+0x2a/0x420 [ 159.363701][ T9038] ? __fget_files+0x3a0/0x420 [ 159.363727][ T9038] __sys_sendmmsg+0x227/0x430 [ 159.363751][ T9038] ? __pfx___sys_sendmmsg+0x10/0x10 [ 159.363767][ T9038] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 159.363815][ T9038] ? ksys_write+0x22a/0x250 [ 159.363838][ T9038] ? __pfx_ksys_write+0x10/0x10 [ 159.363856][ T9038] ? rcu_is_watching+0x15/0xb0 [ 159.363881][ T9038] __x64_sys_sendmmsg+0xa0/0xc0 [ 159.363903][ T9038] do_syscall_64+0xfa/0x3b0 [ 159.363919][ T9038] ? lockdep_hardirqs_on+0x9c/0x150 [ 159.363935][ T9038] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.363952][ T9038] ? clear_bhb_loop+0x60/0xb0 [ 159.363972][ T9038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.363988][ T9038] RIP: 0033:0x7fa0fbd8ebe9 [ 159.364004][ T9038] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 159.364017][ T9038] RSP: 002b:00007fa0fcc78038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 159.364035][ T9038] RAX: ffffffffffffffda RBX: 00007fa0fbfc6090 RCX: 00007fa0fbd8ebe9 [ 159.364047][ T9038] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000007 [ 159.364057][ T9038] RBP: 00007fa0fcc78090 R08: 0000000000000000 R09: 0000000000000000 [ 159.364067][ T9038] R10: 0000000000040800 R11: 0000000000000246 R12: 0000000000000001 [ 159.364077][ T9038] R13: 00007fa0fbfc6128 R14: 00007fa0fbfc6090 R15: 00007ffd5ce5fce8 [ 159.364109][ T9038] [ 159.778196][ T9045] netlink: 40 bytes leftover after parsing attributes in process `syz.2.782'. [ 159.962061][ T9053] netlink: 12 bytes leftover after parsing attributes in process `syz.4.784'. [ 160.020289][ T9053] bridge0: port 1(batadv1) entered blocking state [ 160.027076][ T9053] bridge0: port 1(batadv1) entered disabled state [ 160.033891][ T9053] batadv1: entered allmulticast mode [ 160.041158][ T9053] batadv1: entered promiscuous mode [ 160.193676][ T9063] openvswitch: netlink: Missing key (keys=44, expected=200000) [ 160.325971][ T9065] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 160.452336][ T9071] netlink: 'syz.2.790': attribute type 1 has an invalid length. [ 160.545123][ T1039] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 160.554840][ T1039] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 160.832673][ T9071] 8021q: adding VLAN 0 to HW filter on device bond1 [ 160.899431][ T9091] netlink: 'syz.4.793': attribute type 2 has an invalid length. [ 160.934967][ T9079] bond1: entered promiscuous mode [ 160.952889][ T9079] bond1: entered allmulticast mode [ 161.093950][ T9084] dvmrp8: entered allmulticast mode [ 161.107590][ T9092] netlink: 8 bytes leftover after parsing attributes in process `syz.3.794'. [ 161.116836][ T9084] dvmrp8: left allmulticast mode [ 161.127220][ T9092] netlink: 'syz.3.794': attribute type 30 has an invalid length. [ 161.294229][ T9101] netlink: 'syz.4.797': attribute type 5 has an invalid length. [ 161.344460][ T9092] netlink: 'syz.3.794': attribute type 30 has an invalid length. [ 161.741604][ T9118] tipc: Enabling of bearer rejected, failed to enable media [ 161.834266][ T9125] syzkaller0: entered promiscuous mode [ 161.874352][ T9125] syzkaller0: entered allmulticast mode [ 162.003525][ T9131] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 162.084645][ T9136] netlink: 'syz.3.810': attribute type 1 has an invalid length. [ 162.243690][ T9139] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 162.395362][ T9141] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 162.466861][ T9141] tipc: Failed to remove unknown binding: 66,1,1/0:3177933072/3177933074 [ 162.512234][ T9141] tipc: Failed to remove unknown binding: 66,1,1/0:3177933072/3177933074 [ 162.521186][ T9141] tipc: Failed to remove unknown binding: 66,1,1/0:3177933072/3177933074 [ 163.131333][ T9166] tipc: Enabled bearer , priority 0 [ 163.330662][ T9176] __nla_validate_parse: 12 callbacks suppressed [ 163.330679][ T9176] netlink: 8 bytes leftover after parsing attributes in process `syz.2.819'. [ 163.350840][ T9166] tipc: Resetting bearer [ 163.366710][ T9165] tipc: Disabling bearer [ 163.550276][ T9183] netlink: 16 bytes leftover after parsing attributes in process `syz.3.822'. [ 163.653371][ T9189] netlink: 20 bytes leftover after parsing attributes in process `syz.3.822'. [ 163.669450][ T9189] netlink: 8 bytes leftover after parsing attributes in process `syz.3.822'. [ 163.684126][ T9189] netlink: 8 bytes leftover after parsing attributes in process `syz.3.822'. [ 163.695088][ T9183] IPv6: sit1: Disabled Multicast RS [ 163.701398][ T9183] sit1: entered allmulticast mode [ 163.763825][ T9183] tipc: Enabled bearer , priority 10 [ 163.777168][ T9193] netlink: 4 bytes leftover after parsing attributes in process `syz.1.825'. [ 164.050205][ T9201] netlink: 'syz.4.829': attribute type 3 has an invalid length. [ 164.093127][ T9201] netlink: 132 bytes leftover after parsing attributes in process `syz.4.829'. [ 164.341568][ T9213] netlink: 12 bytes leftover after parsing attributes in process `syz.1.832'. [ 164.647453][ T9235] netlink: 8 bytes leftover after parsing attributes in process `syz.0.837'. [ 164.656667][ T9235] netlink: 7 bytes leftover after parsing attributes in process `syz.0.837'. [ 164.884790][ T43] tipc: Node number set to 772474378 [ 165.069972][ T9247] netlink: 'syz.3.839': attribute type 7 has an invalid length. [ 165.102646][ T9247] netlink: 'syz.3.839': attribute type 8 has an invalid length. [ 165.538748][ T9257] sctp: [Deprecated]: syz.0.842 (pid 9257) Use of struct sctp_assoc_value in delayed_ack socket option. [ 165.538748][ T9257] Use struct sctp_sack_info instead [ 165.670393][ T9269] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 165.700800][ T9269] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.827615][ T9269] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 165.859210][ T9269] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.058905][ T9269] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 166.079306][ T9269] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.200408][ T9269] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 166.241090][ T9269] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.387924][ T1331] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.396582][ T1331] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.406148][ T9297] netlink: 'syz.0.851': attribute type 29 has an invalid length. [ 166.439987][ T1331] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.449051][ T1331] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.508835][ T1331] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.518042][ T1331] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.582201][ T1144] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.653046][ T1144] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.340552][ T9352] veth0_virt_wifi: renamed from ipvlan1 [ 168.414053][ T9356] netlink: 'syz.1.866': attribute type 39 has an invalid length. [ 168.591205][ T9363] __nla_validate_parse: 4 callbacks suppressed [ 168.591243][ T9363] netlink: 12 bytes leftover after parsing attributes in process `syz.3.868'. [ 168.649072][ T9363] netlink: 24 bytes leftover after parsing attributes in process `syz.3.868'. [ 169.494056][ T9388] syzkaller0: entered promiscuous mode [ 169.519888][ T9388] syzkaller0: entered allmulticast mode [ 170.131440][ T9410] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 170.159504][ T9410] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.247704][ T9421] netlink: 20 bytes leftover after parsing attributes in process `syz.2.882'. [ 170.371912][ T9410] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 170.409624][ T9410] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.479901][ T9429] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 170.533382][ T9431] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 170.573531][ T9410] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 170.583549][ T9410] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.644226][ T9410] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 170.682431][ T9410] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.895364][ T12] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.921202][ T12] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.999694][ T6353] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 171.017791][ T6353] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.031265][ T9440] netlink: 132 bytes leftover after parsing attributes in process `syz.2.889'. [ 171.156529][ T9443] netlink: 16 bytes leftover after parsing attributes in process `syz.1.890'. [ 171.195610][ T1039] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 171.207531][ T1039] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.288974][ T1039] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 171.302249][ T1039] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.483072][ T9451] netlink: 28 bytes leftover after parsing attributes in process `syz.2.894'. [ 171.505437][ T9451] netlink: 28 bytes leftover after parsing attributes in process `syz.2.894'. [ 171.527619][ T9459] netlink: 'syz.3.895': attribute type 6 has an invalid length. [ 171.540080][ T9459] netlink: 176 bytes leftover after parsing attributes in process `syz.3.895'. [ 171.664003][ T9458] macsec0: entered promiscuous mode [ 171.669485][ T9458] batadv0: entered promiscuous mode [ 171.691001][ T9458] macsec0: entered allmulticast mode [ 171.716549][ T9458] batadv0: entered allmulticast mode [ 171.754383][ T9458] batadv0: left allmulticast mode [ 171.767547][ T9458] batadv0: left promiscuous mode [ 171.920593][ T9470] netlink: 16 bytes leftover after parsing attributes in process `syz.3.900'. [ 171.961035][ T9470] netlink: 16 bytes leftover after parsing attributes in process `syz.3.900'. [ 172.169457][ T9481] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 172.262106][ T9488] netlink: 'syz.0.906': attribute type 4 has an invalid length. [ 172.275440][ T9486] netlink: 'syz.0.906': attribute type 4 has an invalid length. [ 173.173513][ T6355] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 173.251511][ T6355] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 173.409954][ T6355] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 173.461303][ T1144] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 173.656265][ T9515] __nla_validate_parse: 5 callbacks suppressed [ 173.656283][ T9515] netlink: 84 bytes leftover after parsing attributes in process `syz.0.914'. [ 174.175791][ T9554] netlink: 92 bytes leftover after parsing attributes in process `syz.3.921'. [ 174.205861][ T9554] netlink: 92 bytes leftover after parsing attributes in process `syz.3.921'. [ 174.431323][ T9565] netlink: 40 bytes leftover after parsing attributes in process `syz.2.924'. [ 174.531394][ T9569] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 174.961026][ T9574] tipc: Enabled bearer , priority 0 [ 174.999950][ T9574] dvmrp0: left allmulticast mode [ 175.138087][ T9570] tipc: Disabling bearer [ 175.229892][ T9597] netlink: 12 bytes leftover after parsing attributes in process `syz.1.932'. [ 175.821986][ T9620] bond0: entered promiscuous mode [ 175.828151][ T9620] bond_slave_0: entered promiscuous mode [ 175.839224][ T9620] bond_slave_1: entered promiscuous mode [ 175.842392][ T9630] netlink: 16 bytes leftover after parsing attributes in process `syz.3.941'. [ 175.847659][ T9620] batadv0: entered promiscuous mode [ 175.869190][ T9620] debugfs: 'hsr0' already exists in 'hsr' [ 175.880570][ T9620] Cannot create hsr debugfs directory [ 175.889463][ T9620] hsr0: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 175.906049][ T9620] hsr0: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 175.918471][ T9620] hsr0: entered allmulticast mode [ 175.932142][ T9620] bond0: entered allmulticast mode [ 175.939586][ T9620] bond_slave_0: entered allmulticast mode [ 175.949575][ T9620] bond_slave_1: entered allmulticast mode [ 175.955948][ T9620] batadv0: entered allmulticast mode [ 175.961749][ T9633] netlink: 8 bytes leftover after parsing attributes in process `syz.3.941'. [ 175.962088][ T9620] 8021q: adding VLAN 0 to HW filter on device hsr0 [ 175.980131][ T9620] bond0: left promiscuous mode [ 175.985686][ T9620] bond_slave_0: left promiscuous mode [ 175.994002][ T9620] bond_slave_1: left promiscuous mode [ 176.001116][ T9620] batadv0: left promiscuous mode [ 176.044894][ T9623] pim6reg: entered allmulticast mode [ 176.119444][ T9626] pim6reg: left allmulticast mode [ 176.169055][ T9628] netlink: 8 bytes leftover after parsing attributes in process `syz.0.940'. [ 176.340548][ T9638] netlink: 32 bytes leftover after parsing attributes in process `syz.4.943'. [ 176.370792][ T9642] netlink: 32 bytes leftover after parsing attributes in process `syz.4.943'. [ 176.406940][ T9641] FAULT_INJECTION: forcing a failure. [ 176.406940][ T9641] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 176.448685][ T9641] CPU: 1 UID: 0 PID: 9641 Comm: syz.0.942 Not tainted syzkaller #0 PREEMPT(full) [ 176.448707][ T9641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 176.448717][ T9641] Call Trace: [ 176.448724][ T9641] [ 176.448731][ T9641] dump_stack_lvl+0x189/0x250 [ 176.448755][ T9641] ? __pfx____ratelimit+0x10/0x10 [ 176.448773][ T9641] ? __pfx_dump_stack_lvl+0x10/0x10 [ 176.448791][ T9641] ? __pfx__printk+0x10/0x10 [ 176.448812][ T9641] ? __might_fault+0xb0/0x130 [ 176.448845][ T9641] should_fail_ex+0x414/0x560 [ 176.448871][ T9641] _copy_to_iter+0x589/0x1790 [ 176.448904][ T9641] ? __pfx__copy_to_iter+0x10/0x10 [ 176.448919][ T9641] ? __skb_try_recv_from_queue+0x2b2/0x730 [ 176.448946][ T9641] ? __skb_try_recv_datagram+0x3da/0x4e0 [ 176.448972][ T9641] __skb_datagram_iter+0xf8/0x990 [ 176.448993][ T9641] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 176.449022][ T9641] skb_copy_datagram_iter+0xc5/0x230 [ 176.449046][ T9641] netlink_recvmsg+0x2ab/0xa30 [ 176.449074][ T9641] ? __pfx_netlink_recvmsg+0x10/0x10 [ 176.449096][ T9641] ? __lock_acquire+0xab9/0xd20 [ 176.449116][ T9641] ? aa_sock_msg_perm+0xf1/0x1d0 [ 176.449134][ T9641] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 176.449151][ T9641] ? security_socket_recvmsg+0x7e/0x2e0 [ 176.449170][ T9641] ? __pfx_netlink_recvmsg+0x10/0x10 [ 176.449187][ T9641] sock_recvmsg+0x229/0x270 [ 176.449213][ T9641] ____sys_recvmsg+0x1c9/0x460 [ 176.449242][ T9641] ? __pfx_____sys_recvmsg+0x10/0x10 [ 176.449277][ T9641] ? import_iovec+0x74/0xa0 [ 176.449300][ T9641] ___sys_recvmsg+0x1b5/0x510 [ 176.449325][ T9641] ? __pfx____sys_recvmsg+0x10/0x10 [ 176.449371][ T9641] ? __fget_files+0x3a0/0x420 [ 176.449398][ T9641] do_recvmmsg+0x307/0x770 [ 176.449427][ T9641] ? __pfx_do_recvmmsg+0x10/0x10 [ 176.449459][ T9641] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 176.449495][ T9641] __x64_sys_recvmmsg+0x190/0x240 [ 176.449517][ T9641] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 176.449543][ T9641] ? do_syscall_64+0xbe/0x3b0 [ 176.449565][ T9641] do_syscall_64+0xfa/0x3b0 [ 176.449588][ T9641] ? lockdep_hardirqs_on+0x9c/0x150 [ 176.449605][ T9641] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.449621][ T9641] ? clear_bhb_loop+0x60/0xb0 [ 176.449644][ T9641] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.449659][ T9641] RIP: 0033:0x7fc17098ebe9 [ 176.449674][ T9641] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 176.449687][ T9641] RSP: 002b:00007fc16ebd5038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 176.449704][ T9641] RAX: ffffffffffffffda RBX: 00007fc170bc6090 RCX: 00007fc17098ebe9 [ 176.449717][ T9641] RDX: 0000000000000004 RSI: 0000200000001c00 RDI: 0000000000000003 [ 176.449726][ T9641] RBP: 00007fc16ebd5090 R08: 0000000000000000 R09: 0000000000000000 [ 176.449735][ T9641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 176.449745][ T9641] R13: 00007fc170bc6128 R14: 00007fc170bc6090 R15: 00007ffe67d7cdd8 [ 176.449774][ T9641] [ 176.946790][ T9658] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 177.608342][ T9683] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 177.626128][ T9683] team0: Device macvtap2 is already an upper device of the team interface [ 178.198111][ T9711] tipc: Enabled bearer , priority 0 [ 178.216123][ T9711] syzkaller0: entered promiscuous mode [ 178.221619][ T9711] syzkaller0: entered allmulticast mode [ 178.297375][ T9707] tipc: Resetting bearer [ 178.339142][ T9707] tipc: Disabling bearer [ 178.427329][ T9727] netlink: 'syz.1.959': attribute type 1 has an invalid length. [ 178.844897][ T9747] __nla_validate_parse: 7 callbacks suppressed [ 178.844914][ T9747] netlink: 8 bytes leftover after parsing attributes in process `syz.3.970'. [ 178.976665][ T9747] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 179.134722][ T9756] netlink: 'syz.1.973': attribute type 4 has an invalid length. [ 179.147002][ T9756] netlink: 17 bytes leftover after parsing attributes in process `syz.1.973'. [ 179.168846][ T9761] netlink: 8 bytes leftover after parsing attributes in process `syz.3.975'. [ 179.216559][ T9761] netlink: 28 bytes leftover after parsing attributes in process `syz.3.975'. [ 179.301480][ T9761] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.324689][ T9761] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.357184][ T9761] tipc: Resetting bearer [ 179.363425][ T9761] tipc: Resetting bearer [ 179.381946][ T9763] netlink: 'syz.1.973': attribute type 12 has an invalid length. [ 179.439448][ T9768] 8021q: adding VLAN 0 to HW filter on device bond2 [ 179.577276][ T9784] FAULT_INJECTION: forcing a failure. [ 179.577276][ T9784] name failslab, interval 1, probability 0, space 0, times 0 [ 179.612876][ T9784] CPU: 1 UID: 0 PID: 9784 Comm: syz.2.980 Not tainted syzkaller #0 PREEMPT(full) [ 179.612900][ T9784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 179.612909][ T9784] Call Trace: [ 179.612916][ T9784] [ 179.612924][ T9784] dump_stack_lvl+0x189/0x250 [ 179.612949][ T9784] ? __pfx____ratelimit+0x10/0x10 [ 179.612968][ T9784] ? __pfx_dump_stack_lvl+0x10/0x10 [ 179.612987][ T9784] ? __pfx__printk+0x10/0x10 [ 179.613005][ T9784] ? trace_contention_end+0x39/0x120 [ 179.613039][ T9784] should_fail_ex+0x414/0x560 [ 179.613066][ T9784] should_failslab+0xa8/0x100 [ 179.613091][ T9784] kmem_cache_alloc_noprof+0x73/0x3c0 [ 179.613110][ T9784] ? skb_clone+0x212/0x3a0 [ 179.613135][ T9784] skb_clone+0x212/0x3a0 [ 179.613158][ T9784] __netlink_deliver_tap+0x404/0x850 [ 179.613189][ T9784] ? netlink_deliver_tap+0x2e/0x1b0 [ 179.613208][ T9784] netlink_deliver_tap+0x19c/0x1b0 [ 179.613227][ T9784] netlink_dump+0x92b/0xe90 [ 179.613256][ T9784] ? __pfx_netlink_dump+0x10/0x10 [ 179.613293][ T9784] ? kmem_cache_free+0x18f/0x400 [ 179.613319][ T9784] netlink_recvmsg+0x676/0xa30 [ 179.613345][ T9784] ? __pfx_netlink_recvmsg+0x10/0x10 [ 179.613368][ T9784] ? __lock_acquire+0xab9/0xd20 [ 179.613387][ T9784] ? aa_sock_msg_perm+0xf1/0x1d0 [ 179.613406][ T9784] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 179.613422][ T9784] ? security_socket_recvmsg+0x7e/0x2e0 [ 179.613441][ T9784] ? __pfx_netlink_recvmsg+0x10/0x10 [ 179.613459][ T9784] sock_recvmsg+0x229/0x270 [ 179.613485][ T9784] ____sys_recvmsg+0x1c9/0x460 [ 179.613514][ T9784] ? __pfx_____sys_recvmsg+0x10/0x10 [ 179.613551][ T9784] ? import_iovec+0x74/0xa0 [ 179.613573][ T9784] ___sys_recvmsg+0x1b5/0x510 [ 179.613605][ T9784] ? __pfx____sys_recvmsg+0x10/0x10 [ 179.613651][ T9784] ? __fget_files+0x3a0/0x420 [ 179.613679][ T9784] do_recvmmsg+0x307/0x770 [ 179.613708][ T9784] ? __pfx_do_recvmmsg+0x10/0x10 [ 179.613741][ T9784] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 179.613779][ T9784] __x64_sys_recvmmsg+0x190/0x240 [ 179.613802][ T9784] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 179.613820][ T9784] ? rcu_is_watching+0x15/0xb0 [ 179.613843][ T9784] ? do_syscall_64+0xbe/0x3b0 [ 179.613865][ T9784] do_syscall_64+0xfa/0x3b0 [ 179.613881][ T9784] ? lockdep_hardirqs_on+0x9c/0x150 [ 179.613898][ T9784] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.613914][ T9784] ? clear_bhb_loop+0x60/0xb0 [ 179.613935][ T9784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.613952][ T9784] RIP: 0033:0x7f268038ebe9 [ 179.613967][ T9784] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 179.613981][ T9784] RSP: 002b:00007f26812d4038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 179.613999][ T9784] RAX: ffffffffffffffda RBX: 00007f26805c5fa0 RCX: 00007f268038ebe9 [ 179.614012][ T9784] RDX: 0000000000000004 RSI: 0000200000001c00 RDI: 0000000000000003 [ 179.614022][ T9784] RBP: 00007f26812d4090 R08: 0000000000000000 R09: 0000000000000000 [ 179.614033][ T9784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 179.614043][ T9784] R13: 00007f26805c6038 R14: 00007f26805c5fa0 R15: 00007ffd402e8b88 [ 179.614073][ T9784] [ 180.186319][ T9807] netlink: 'syz.4.987': attribute type 1 has an invalid length. [ 180.333035][ T9807] 8021q: adding VLAN 0 to HW filter on device bond1 [ 180.360046][ T9818] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 180.580464][ T9810] bond1: (slave gretap1): making interface the new active one [ 180.618106][ T9810] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 180.677470][ T9823] netlink: 100 bytes leftover after parsing attributes in process `syz.3.990'. [ 180.817269][ T9830] netlink: 8 bytes leftover after parsing attributes in process `syz.3.992'. [ 180.844754][ T9830] netlink: 4 bytes leftover after parsing attributes in process `syz.3.992'. [ 180.858413][ T9830] netlink: 'syz.3.992': attribute type 13 has an invalid length. [ 180.971149][ T9830] netlink: 'syz.3.992': attribute type 11 has an invalid length. [ 181.382618][ T9846] netlink: 'syz.2.997': attribute type 10 has an invalid length. [ 181.501125][ T9846] 8021q: adding VLAN 0 to HW filter on device team0 [ 181.522497][ T9846] bond0: (slave team0): Enslaving as an active interface with an up link [ 181.839354][ T9869] netlink: 4392 bytes leftover after parsing attributes in process `syz.3.1003'. [ 181.850242][ T9871] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1004'. [ 181.884691][ T9869] openvswitch: netlink: Flow key attr not present in new flow. [ 181.916382][ T9869] netlink: 'syz.3.1003': attribute type 10 has an invalid length. [ 181.924336][ T9869] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1003'. [ 181.985625][ T9869] tipc: Resetting bearer [ 182.050796][ T9869] tipc: Resetting bearer [ 182.092268][ T9869] team0: Port device geneve0 added [ 182.137349][ T9869] tipc: Resetting bearer [ 182.288086][ T9893] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 183.776472][ T9922] netlink: 'syz.4.1019': attribute type 30 has an invalid length. [ 183.895568][ T9930] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.001068][ T9935] netlink: 'syz.4.1023': attribute type 10 has an invalid length. [ 184.023069][ T9935] __nla_validate_parse: 4 callbacks suppressed [ 184.023083][ T9935] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1023'. [ 184.111938][ T9930] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.179430][ T9935] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 184.282474][ T9930] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.486938][ T9930] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.622661][ T1331] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.671235][ T1331] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.701288][ T1331] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.788114][ T9953] macvtap0: entered allmulticast mode [ 184.794107][ T9953] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 184.802993][ T9953] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 184.850283][ T1331] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.888330][ T9973] tipc: Enabling of bearer rejected, failed to enable media [ 184.929003][ T9979] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1032'. [ 185.068143][ T9987] 8021q: adding VLAN 0 to HW filter on device bond1 [ 185.874927][T10030] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1048'. [ 185.946060][T10034] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.007552][T10039] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1053'. [ 186.028086][T10041] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1052'. [ 186.094275][T10044] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1052'. [ 186.281710][T10034] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.339817][T10043] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1054'. [ 186.730292][T10034] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.809074][T10068] tipc: Started in network mode [ 186.821539][T10068] tipc: Node identity , cluster identity 4711 [ 186.839711][T10068] tipc: Failed to obtain node identity [ 186.849762][T10068] tipc: Enabling of bearer rejected, failed to enable media [ 186.935100][T10034] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.069926][ T1331] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.111427][ T1331] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.137700][ T1039] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.168446][ T1331] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.336440][T10089] netlink: 'syz.3.1060': attribute type 1 has an invalid length. [ 187.556371][T10098] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1064'. [ 188.005474][T10129] FAULT_INJECTION: forcing a failure. [ 188.005474][T10129] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 188.059516][T10129] CPU: 1 UID: 0 PID: 10129 Comm: syz.4.1072 Not tainted syzkaller #0 PREEMPT(full) [ 188.059541][T10129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 188.059550][T10129] Call Trace: [ 188.059557][T10129] [ 188.059565][T10129] dump_stack_lvl+0x189/0x250 [ 188.059590][T10129] ? __pfx____ratelimit+0x10/0x10 [ 188.059616][T10129] ? __pfx_dump_stack_lvl+0x10/0x10 [ 188.059634][T10129] ? __pfx__printk+0x10/0x10 [ 188.059655][T10129] ? __might_fault+0xb0/0x130 [ 188.059688][T10129] should_fail_ex+0x414/0x560 [ 188.059713][T10129] _copy_from_user+0x2d/0xb0 [ 188.059732][T10129] ___sys_recvmsg+0x12e/0x510 [ 188.059758][T10129] ? __pfx____sys_recvmsg+0x10/0x10 [ 188.059807][T10129] ? __might_fault+0xb0/0x130 [ 188.059831][T10129] do_recvmmsg+0x307/0x770 [ 188.059858][T10129] ? __pfx_do_recvmmsg+0x10/0x10 [ 188.059889][T10129] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 188.059926][T10129] __x64_sys_recvmmsg+0x190/0x240 [ 188.059949][T10129] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 188.059966][T10129] ? rcu_is_watching+0x15/0xb0 [ 188.059988][T10129] ? do_syscall_64+0xbe/0x3b0 [ 188.060010][T10129] do_syscall_64+0xfa/0x3b0 [ 188.060025][T10129] ? lockdep_hardirqs_on+0x9c/0x150 [ 188.060041][T10129] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.060057][T10129] ? clear_bhb_loop+0x60/0xb0 [ 188.060076][T10129] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.060092][T10129] RIP: 0033:0x7fa0fbd8ebe9 [ 188.060107][T10129] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 188.060119][T10129] RSP: 002b:00007fa0fcc99038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 188.060137][T10129] RAX: ffffffffffffffda RBX: 00007fa0fbfc5fa0 RCX: 00007fa0fbd8ebe9 [ 188.060149][T10129] RDX: 0000000000000004 RSI: 0000200000001c00 RDI: 0000000000000003 [ 188.060159][T10129] RBP: 00007fa0fcc99090 R08: 0000000000000000 R09: 0000000000000000 [ 188.060169][T10129] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 188.060179][T10129] R13: 00007fa0fbfc6038 R14: 00007fa0fbfc5fa0 R15: 00007ffd5ce5fce8 [ 188.060207][T10129] [ 188.406774][T10142] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1077'. [ 188.468788][T10145] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 188.476070][T10145] IPv6: NLM_F_CREATE should be set when creating new route [ 188.483395][T10145] IPv6: NLM_F_CREATE should be set when creating new route [ 188.841396][T10154] syzkaller0: entered promiscuous mode [ 188.847741][T10154] syzkaller0: entered allmulticast mode [ 189.011068][T10168] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1086'. [ 189.084092][T10171] IPv6: NLM_F_CREATE should be specified when creating new route [ 189.215613][T10167] FAULT_INJECTION: forcing a failure. [ 189.215613][T10167] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 189.228937][T10171] netlink: 'syz.0.1089': attribute type 12 has an invalid length. [ 189.229757][T10167] CPU: 1 UID: 0 PID: 10167 Comm: syz.3.1087 Not tainted syzkaller #0 PREEMPT(full) [ 189.229778][T10167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 189.229787][T10167] Call Trace: [ 189.229793][T10167] [ 189.229801][T10167] dump_stack_lvl+0x189/0x250 [ 189.229825][T10167] ? __pfx____ratelimit+0x10/0x10 [ 189.229842][T10167] ? __pfx_dump_stack_lvl+0x10/0x10 [ 189.229861][T10167] ? __pfx__printk+0x10/0x10 [ 189.229882][T10167] ? __might_fault+0xb0/0x130 [ 189.229913][T10167] should_fail_ex+0x414/0x560 [ 189.229940][T10167] _copy_from_user+0x2d/0xb0 [ 189.229958][T10167] ___sys_recvmsg+0x12e/0x510 [ 189.229983][T10167] ? __pfx____sys_recvmsg+0x10/0x10 [ 189.230032][T10167] ? __might_fault+0xb0/0x130 [ 189.230056][T10167] do_recvmmsg+0x307/0x770 [ 189.230083][T10167] ? __pfx_do_recvmmsg+0x10/0x10 [ 189.230113][T10167] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 189.230148][T10167] __x64_sys_recvmmsg+0x190/0x240 [ 189.230170][T10167] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 189.230193][T10167] ? do_syscall_64+0xbe/0x3b0 [ 189.230214][T10167] do_syscall_64+0xfa/0x3b0 [ 189.230229][T10167] ? lockdep_hardirqs_on+0x9c/0x150 [ 189.230244][T10167] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.230260][T10167] ? clear_bhb_loop+0x60/0xb0 [ 189.230279][T10167] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.230293][T10167] RIP: 0033:0x7fcfbef8ebe9 [ 189.230308][T10167] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 189.230321][T10167] RSP: 002b:00007fcfbfdf7038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 189.230338][T10167] RAX: ffffffffffffffda RBX: 00007fcfbf1c6090 RCX: 00007fcfbef8ebe9 [ 189.230350][T10167] RDX: 0000000000000004 RSI: 0000200000001c00 RDI: 0000000000000003 [ 189.230360][T10167] RBP: 00007fcfbfdf7090 R08: 0000000000000000 R09: 0000000000000000 [ 189.230370][T10167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 189.230378][T10167] R13: 00007fcfbf1c6128 R14: 00007fcfbf1c6090 R15: 00007ffd4b6d6e68 [ 189.230406][T10167] [ 189.572179][T10175] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1090'. [ 189.650911][T10185] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 189.700939][T10181] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1092'. [ 189.784888][T10185] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1092'. [ 190.219385][T10206] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1098'. [ 190.288022][T10214] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1102'. [ 190.341045][T10214] (unnamed net_device) (uninitialized): option lacp_active: invalid value (5) [ 190.394052][T10218] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1103'. [ 190.476175][T10210] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 190.710627][T10230] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1105'. [ 191.420725][T10246] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1111'. [ 191.906644][T10278] netlink: 'syz.4.1119': attribute type 13 has an invalid length. [ 191.917262][T10278] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1119'. [ 191.931851][T10276] bridge0: port 3(hsr_slave_0) entered blocking state [ 191.939739][T10276] bridge0: port 3(hsr_slave_0) entered disabled state [ 191.946874][T10276] hsr_slave_0: entered allmulticast mode [ 191.955107][T10276] hsr_slave_0: entered promiscuous mode [ 192.010681][T10278] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 192.040868][T10281] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1120'. [ 192.165851][T10279] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 192.291680][T10294] bond0: (slave team0): Releasing backup interface [ 192.336581][T10294] bond0: (slave bond_slave_0): Releasing backup interface [ 192.360577][T10294] bond0: (slave bond_slave_1): Releasing backup interface [ 192.394879][T10294] team0: Port device team_slave_0 removed [ 192.431695][T10294] team0: Port device team_slave_1 removed [ 192.451801][T10294] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 192.465752][T10294] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 192.479978][T10294] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 192.490472][T10294] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 192.502616][T10308] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 192.515860][T10308] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 192.526308][T10294] bond0: (slave wlan1): Releasing backup interface [ 192.549230][T10298] team0: Mode changed to "broadcast" [ 192.582058][T10304] syzkaller1: entered promiscuous mode [ 192.605909][T10304] syzkaller1: entered allmulticast mode [ 192.614983][T10308] bond0: entered promiscuous mode [ 192.620091][T10308] dummy0: entered promiscuous mode [ 192.628420][T10308] bond3: entered promiscuous mode [ 192.636246][T10308] bond0: entered allmulticast mode [ 192.642347][T10308] dummy0: entered allmulticast mode [ 192.650644][T10308] bond3: entered allmulticast mode [ 192.653933][T10311] netlink: 'syz.1.1127': attribute type 1 has an invalid length. [ 192.667742][T10311] netlink: 'syz.1.1127': attribute type 39 has an invalid length. [ 192.831051][T10317] macvlan2: entered allmulticast mode [ 192.849487][T10317] veth1_vlan: entered allmulticast mode [ 192.875880][T10317] veth1_vlan: left allmulticast mode [ 192.964122][T10326] tipc: Started in network mode [ 192.969035][T10326] tipc: Node identity 0e797b7e6007, cluster identity 4711 [ 192.977027][T10326] tipc: Enabled bearer , priority 0 [ 193.067795][T10326] syzkaller0: entered promiscuous mode [ 193.082023][T10326] syzkaller0: entered allmulticast mode [ 193.229312][T10334] tipc: Resetting bearer [ 193.552422][T10360] netlink: 'syz.1.1143': attribute type 26 has an invalid length. [ 193.679718][T10366] tipc: Enabled bearer , priority 0 [ 193.687669][T10366] syzkaller0: entered promiscuous mode [ 193.693719][T10366] syzkaller0: entered allmulticast mode [ 193.789397][T10366] tipc: Resetting bearer [ 193.798337][T10364] tipc: Resetting bearer [ 193.817053][T10364] tipc: Disabling bearer [ 194.082931][ T5920] tipc: Node number set to 1853782910 [ 194.187215][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.194094][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 201.383256][ T5869] Bluetooth: hci1: command 0x0406 tx timeout [ 201.386535][ T5875] Bluetooth: hci3: command 0x0406 tx timeout [ 201.390083][ T5871] Bluetooth: hci2: command 0x0406 tx timeout [ 247.842349][T10369] __nla_validate_parse: 36 callbacks suppressed [ 247.842366][T10369] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1147'. [ 247.888491][T10379] openvswitch: netlink: IP tunnel dst address not specified [ 247.963328][T10371] can: request_module (can-proto-0) failed. [ 247.999529][T10371] tc_dump_action: action bad kind [ 248.060990][T10379] can: request_module (can-proto-0) failed. [ 248.114225][T10383] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.229414][T10383] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.306703][T10398] netlink: 'syz.4.1152': attribute type 1 has an invalid length. [ 248.315181][T10398] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1152'. [ 248.380705][T10396] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 248.418857][T10396] bridge1: left allmulticast mode [ 248.520092][T10383] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.623441][T10383] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.832042][ T44] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.851440][T10417] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1159'. [ 248.916539][ T44] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.957804][ T44] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.989837][ T44] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.266269][T10431] netlink: 'syz.2.1164': attribute type 10 has an invalid length. [ 249.329260][T10433] tipc: Enabling of bearer rejected, already enabled [ 249.631679][T10443] sctp: [Deprecated]: syz.1.1170 (pid 10443) Use of int in maxseg socket option. [ 249.631679][T10443] Use struct sctp_assoc_value instead [ 249.674683][T10457] veth0_vlan: entered allmulticast mode [ 249.755602][T10462] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1176'. [ 250.053459][T10487] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1184'. [ 250.062485][T10487] openvswitch: netlink: nsh attribute has 65520 unknown bytes. [ 250.088939][T10489] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1184'. [ 250.103736][T10489] openvswitch: netlink: nsh attribute has 65520 unknown bytes. [ 250.111362][ T1331] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 250.125315][T10487] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 250.141009][ T1331] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 250.151898][T10489] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 250.257008][T10497] netlink: del zone limit has 4 unknown bytes [ 250.338858][T10504] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1189'. [ 250.412095][T10509] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1189'. [ 250.535814][T10516] netlink: 'syz.0.1192': attribute type 1 has an invalid length. [ 250.679098][T10530] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1196'. [ 250.808228][T10536] bridge0: entered promiscuous mode [ 250.815977][T10536] macvtap1: entered allmulticast mode [ 250.821591][T10536] bridge0: entered allmulticast mode [ 250.836413][T10536] bridge0: port 2(macvtap1) entered blocking state [ 250.848196][T10536] bridge0: port 2(macvtap1) entered disabled state [ 250.867104][T10536] bridge0: left allmulticast mode [ 250.872332][T10536] bridge0: left promiscuous mode [ 250.900283][T10534] bridge0: port 1(veth0_to_bridge) entered blocking state [ 250.911258][T10534] bridge0: port 1(veth0_to_bridge) entered disabled state [ 250.921434][T10534] veth0_to_bridge: entered allmulticast mode [ 250.929408][T10534] veth0_to_bridge: entered promiscuous mode [ 250.938425][T10534] bridge0: port 1(veth0_to_bridge) entered blocking state [ 250.945698][T10534] bridge0: port 1(veth0_to_bridge) entered forwarding state [ 251.071525][T10555] netlink: 'syz.0.1203': attribute type 4 has an invalid length. [ 251.462511][T10578] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1207'. [ 251.472903][T10577] !: renamed from dummy0 (while UP) [ 251.576456][T10583] netlink: 'syz.1.1212': attribute type 1 has an invalid length. [ 251.623321][ T5877] Bluetooth: hci4: command 0x0405 tx timeout [ 251.634077][T10583] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 251.647333][T10583] bond2: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 251.658399][T10583] bond2: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 251.959525][T10599] veth0_to_bridge: left allmulticast mode [ 251.976881][T10599] veth0_to_bridge: left promiscuous mode [ 251.996410][T10599] bridge0: port 1(veth0_to_bridge) entered disabled state [ 252.037732][T10601] smc: net device bond0 applied user defined pnetid SYZ2 [ 252.087688][T10599] team0: Mode changed to "loadbalance" [ 252.128903][T10611] netlink: 'syz.1.1219': attribute type 1 has an invalid length. [ 252.143959][T10611] netlink: 'syz.1.1219': attribute type 1 has an invalid length. [ 252.151843][T10611] netlink: 'syz.1.1219': attribute type 2 has an invalid length. [ 253.532577][T10666] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 253.563523][T10670] __nla_validate_parse: 3 callbacks suppressed [ 253.563539][T10670] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1242'. [ 254.413548][ T6353] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7 [ 254.454041][ T6353] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7 [ 254.561647][T10720] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1250'. [ 255.059006][T10742] veth6: entered allmulticast mode [ 255.286745][T10753] tipc: Started in network mode [ 255.317839][T10753] tipc: Node identity 6ef2dc16f0a3, cluster identity 4711 [ 255.353074][T10753] tipc: Enabled bearer , priority 0 [ 255.413618][T10758] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 255.510194][T10760] IPVS: stopping backup sync thread 7060 ... [ 255.630214][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.640139][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.048561][T10753] tipc: Disabling bearer [ 256.060165][T10759] tipc: Enabling of bearer rejected, already enabled [ 256.074238][T10770] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1262'. [ 256.172842][ T1144] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.192456][ T1144] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.212681][ T1144] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.260250][ T1144] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.314562][T10773] netlink: 'syz.1.1263': attribute type 1 has an invalid length. [ 256.342913][T10777] netlink: 'syz.4.1265': attribute type 9 has an invalid length. [ 256.368018][T10780] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1263'. [ 256.394085][T10781] netlink: 'syz.3.1266': attribute type 1 has an invalid length. [ 256.519269][T10781] 8021q: adding VLAN 0 to HW filter on device bond2 [ 256.541150][T10785] ipvlan0: entered allmulticast mode [ 256.558741][T10785] bond2: entered allmulticast mode [ 256.592368][T10781] bond2: (slave gretap2): making interface the new active one [ 256.603382][T10781] gretap2: entered allmulticast mode [ 256.609924][T10793] netlink: 248 bytes leftover after parsing attributes in process `syz.0.1270'. [ 256.609960][T10781] bond2: (slave gretap2): Enslaving as an active interface with an up link [ 256.748051][T10801] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1271'. [ 256.818766][T10806] netlink: 'syz.1.1273': attribute type 1 has an invalid length. [ 256.826503][T10799] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1270'. [ 256.826522][T10799] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1270'. [ 256.933699][T10801] batadv1: left allmulticast mode [ 256.980592][T10801] batadv1: left promiscuous mode [ 257.007447][T10801] bridge0: port 3(batadv1) entered disabled state [ 257.038623][T10806] IPVS: set_ctl: invalid protocol: 94 224.0.0.1:20001 [ 257.110675][T10801] bridge_slave_1: left allmulticast mode [ 257.125450][T10801] bridge_slave_1: left promiscuous mode [ 257.134304][T10801] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.149325][T10801] bridge_slave_0: left allmulticast mode [ 257.155381][T10801] bridge_slave_0: left promiscuous mode [ 257.161298][T10801] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.654909][T10799] bond4: entered promiscuous mode [ 257.659973][T10799] bond4: entered allmulticast mode [ 257.667176][T10799] 8021q: adding VLAN 0 to HW filter on device bond4 [ 257.818085][T10831] syzkaller1: entered promiscuous mode [ 257.823851][T10831] syzkaller1: entered allmulticast mode [ 257.832231][T10831] netlink: 'syz.2.1278': attribute type 4 has an invalid length. [ 257.841003][T10831] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1278'. [ 257.877369][T10831] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 257.977872][T10837] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1281'. [ 257.998414][T10837] ip6tnl1: entered promiscuous mode [ 258.003852][T10837] ip6tnl1: entered allmulticast mode [ 258.094749][T10839] netem: unknown loss type 12 [ 258.189492][T10844] netlink: 'syz.3.1284': attribute type 1 has an invalid length. [ 258.224928][T10844] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 258.627059][T10877] netlink: 'syz.0.1294': attribute type 8 has an invalid length. [ 258.691243][T10877] __nla_validate_parse: 1 callbacks suppressed [ 258.691261][T10877] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1294'. [ 258.869571][ T1144] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 259.097710][T10909] netlink: 'syz.1.1303': attribute type 2 has an invalid length. [ 259.110080][T10909] k*: entered promiscuous mode [ 259.129479][T10908] 8021q: adding VLAN 0 to HW filter on device bond0 [ 259.137883][T10908] 8021q: adding VLAN 0 to HW filter on device team0 [ 259.154726][T10908] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 259.979727][T10931] netlink: 'syz.1.1312': attribute type 11 has an invalid length. [ 260.311892][ T5941] IPVS: starting estimator thread 0... [ 260.434313][T10953] IPVS: using max 30 ests per chain, 72000 per kthread [ 260.981875][T10974] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1321'. [ 261.238633][T10993] netlink: 'syz.0.1325': attribute type 3 has an invalid length. [ 261.246422][T10994] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1327'. [ 261.247434][T10994] netlink: 209592 bytes leftover after parsing attributes in process `syz.4.1327'. [ 261.290565][T10993] dvmrp0: left allmulticast mode [ 261.379059][T11000] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1328'. [ 261.427881][T10996] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 261.451591][T10996] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 261.529099][T10993] bond0: left promiscuous mode [ 261.543558][T10993] !: left promiscuous mode [ 261.551051][T10993] bond3: left promiscuous mode [ 261.559236][T10993] bond0: left allmulticast mode [ 261.572413][T10993] !: left allmulticast mode [ 261.577797][T10993] bond3: left allmulticast mode [ 261.673626][T10993] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 262.158310][T11009] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1331'. [ 262.293125][T11029] 0: renamed from bond_slave_1 [ 263.063949][T11050] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1342'. [ 263.368343][T11070] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1348'. [ 263.378543][T11070] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1348'. [ 263.522696][T11077] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 263.672964][T11079] 8021q: VLANs not supported on vcan0 [ 264.494485][T11099] validate_nla: 1 callbacks suppressed [ 264.494505][T11099] netlink: 'syz.0.1358': attribute type 13 has an invalid length. [ 264.557003][T11098] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1357'. [ 264.592051][T11099] netlink: 'syz.0.1358': attribute type 17 has an invalid length. [ 264.742560][T11112] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1361'. [ 264.782219][T11114] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 264.798695][T11099] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 264.843329][T11103] geneve3: entered promiscuous mode [ 265.068681][T11120] bridge_slave_0: left promiscuous mode [ 265.098087][T11120] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.121393][T11116] netlink: 'syz.1.1362': attribute type 10 has an invalid length. [ 265.135114][T11120] bridge_slave_1: left allmulticast mode [ 265.151973][T11120] bridge_slave_1: left promiscuous mode [ 265.179321][T11129] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1366'. [ 265.183605][T11120] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.209257][T11120] bond0: (slave bond_slave_0): Releasing backup interface [ 265.242332][T11120] bond_slave_0: left allmulticast mode [ 265.250932][T11120] bond0: (slave bond_slave_1): Releasing backup interface [ 265.267082][T11120] bond_slave_1: left allmulticast mode [ 265.276109][T11120] team0: Port device team_slave_0 removed [ 265.286990][T11120] team0: Port device team_slave_1 removed [ 265.290252][T11137] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1367'. [ 265.293819][T11120] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 265.309988][T11120] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 265.317860][T11120] hsr_slave_0: left allmulticast mode [ 265.323648][T11120] hsr_slave_0: left promiscuous mode [ 265.329160][T11120] bridge0: port 3(hsr_slave_0) entered disabled state [ 265.347531][T11120] bond1: (slave veth5): Releasing active interface [ 265.379321][T11116] 8021q: adding VLAN 0 to HW filter on device bond0 [ 265.392266][T11116] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 265.400077][T11116] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 265.448202][T11137] bond0: (slave bond_slave_0): Releasing backup interface [ 265.485635][T11137] bond0: (slave bond_slave_1): Releasing backup interface [ 265.514917][T11143] netlink: 216 bytes leftover after parsing attributes in process `syz.2.1369'. [ 265.524818][T11143] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1369'. [ 265.528067][T11137] team0: Port device team_slave_0 removed [ 265.534346][T11143] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1369'. [ 265.558342][T11137] team0: Port device team_slave_1 removed [ 265.566445][T11137] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 265.575943][T11137] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 265.585192][T11137] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 265.592645][T11137] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 265.607264][T11137] tipc: Resetting bearer [ 265.616131][T11137] tipc: Resetting bearer [ 265.621937][T11137] tipc: Resetting bearer [ 265.630079][T11137] team0: Port device geneve0 removed [ 265.638536][T11137] bond0: (slave wlan1): Releasing backup interface [ 265.656880][T11137] bond2: (slave gretap2): Releasing active interface [ 265.663986][T11137] gretap2: left allmulticast mode [ 266.487017][T11179] netlink: 'syz.2.1381': attribute type 4 has an invalid length. [ 266.538919][T11187] netlink: 'syz.2.1381': attribute type 4 has an invalid length. [ 266.596602][T11182] netlink: 'syz.4.1382': attribute type 13 has an invalid length. [ 266.609405][T11182] netlink: 'syz.4.1382': attribute type 17 has an invalid length. [ 266.649686][T11188] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 266.770129][T11182] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 267.038594][T11206] IPVS: set_ctl: invalid protocol: 12 224.0.0.1:20004 [ 267.620650][T11222] ip6_vti0: Master is either lo or non-ether device [ 267.995734][T11241] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1396'. [ 268.047663][T11241] netlink: 'syz.4.1396': attribute type 1 has an invalid length. [ 268.539986][T11268] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1404'. [ 268.630312][T11271] netlink: 'syz.4.1403': attribute type 13 has an invalid length. [ 268.653950][T11271] netlink: 'syz.4.1403': attribute type 17 has an invalid length. [ 268.682109][T11271] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 268.871214][T11284] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1403'. [ 268.919769][T11271] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 269.039795][T11271] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 269.157307][T11271] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 270.760441][T11356] __nla_validate_parse: 1 callbacks suppressed [ 270.760459][T11356] netlink: 260 bytes leftover after parsing attributes in process `syz.0.1426'. [ 270.803094][T11356] netlink: 260 bytes leftover after parsing attributes in process `syz.0.1426'. [ 270.889315][T11344] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1421'. [ 270.975114][T11360] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1425'. [ 271.305734][T11381] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1429'. [ 271.465031][T11358] veth3: left promiscuous mode [ 271.486959][T11358] tipc: Resetting bearer [ 271.504382][T11358] syzkaller0: left promiscuous mode [ 271.509621][T11358] syzkaller0: left allmulticast mode [ 271.559897][T11360] hsr_slave_0: left promiscuous mode [ 271.568307][T11360] hsr_slave_1: left promiscuous mode [ 271.589293][ T6355] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.606637][ T6355] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.638576][ T1039] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.672899][ T1039] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.679001][T11391] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1431'. [ 271.691512][T11390] netlink: 'syz.2.1431': attribute type 1 has an invalid length. [ 271.699915][T11390] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1431'. [ 271.727417][T11394] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1432'. [ 271.755868][T11392] netlink: 'syz.2.1431': attribute type 4 has an invalid length. [ 271.782737][T11392] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.1431'. [ 271.906998][T11406] netlink: 212288 bytes leftover after parsing attributes in process `syz.1.1436'. [ 271.914325][T11405] openvswitch: netlink: Tunnel attr 226 out of range max 16 [ 272.322976][T11435] 8021q: VLANs not supported on vxcan0 [ 272.335536][T11433] 8021q: VLANs not supported on vxcan0 [ 272.580141][T11456] tipc: Enabled bearer , priority 0 [ 272.590011][T11456] syzkaller0: entered promiscuous mode [ 272.595810][T11456] syzkaller0: entered allmulticast mode [ 272.631053][T11456] tipc: Resetting bearer [ 272.648650][T11455] tipc: Resetting bearer [ 272.687592][T11455] tipc: Disabling bearer [ 273.099019][ T30] audit: type=1107 audit(1756990058.798:4): pid=11476 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='"0B9;HƎݠ] ȅ.` e=n' [ 273.676168][T11509] netlink: 'syz.3.1467': attribute type 13 has an invalid length. [ 273.686468][T11509] netlink: 'syz.3.1467': attribute type 17 has an invalid length. [ 273.926928][T11516] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 274.015524][T11516] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 288.410912][ T5864] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 288.423542][ T5864] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 288.431968][ T5864] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 288.440816][ T5864] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 288.450788][ T5864] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 289.839303][ T5877] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 289.850287][ T5877] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 289.866777][ T5870] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 289.868248][ T5871] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 289.885397][ T5871] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 289.893564][ T5871] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 289.908599][ T5871] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 289.933469][ T5870] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 289.942368][ T5870] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 289.953507][ T5870] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 289.988897][ T5877] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 289.998384][ T5877] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 290.013759][ T5877] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 290.027081][ T5877] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 290.035156][ T5877] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 290.127224][ T5877] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 290.136491][ T5877] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 290.144876][ T5877] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 290.158869][ T5877] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 290.167251][ T5877] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 290.503206][ T5871] Bluetooth: hci5: command tx timeout [ 291.943193][ T5871] Bluetooth: hci6: command tx timeout [ 292.026337][ T5871] Bluetooth: hci7: command tx timeout [ 292.103892][ T5871] Bluetooth: hci8: command tx timeout [ 292.583560][ T5871] Bluetooth: hci5: command tx timeout [ 294.022949][ T5871] Bluetooth: hci6: command tx timeout [ 294.103356][ T5871] Bluetooth: hci7: command tx timeout [ 294.183318][ T5871] Bluetooth: hci8: command tx timeout [ 294.663155][ T5871] Bluetooth: hci5: command tx timeout [ 296.113113][ T5871] Bluetooth: hci6: command tx timeout [ 296.183207][ T5871] Bluetooth: hci7: command tx timeout [ 296.263234][ T5871] Bluetooth: hci8: command tx timeout [ 296.743421][ T5871] Bluetooth: hci5: command tx timeout [ 298.183221][ T5871] Bluetooth: hci6: command tx timeout [ 298.263255][ T5871] Bluetooth: hci7: command tx timeout [ 298.343137][ T5871] Bluetooth: hci8: command tx timeout [ 317.070005][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.076438][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 348.937562][ T5864] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 348.946938][ T5864] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 348.958453][ T5864] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 348.967574][ T5864] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 348.981865][ T5864] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 350.374380][ T5869] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 350.388423][ T5869] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 350.396822][ T5869] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 350.406096][ T5869] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 350.414430][ T5869] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 350.479793][ T5875] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 350.493594][ T5875] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 350.501472][ T5875] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 350.514580][ T5875] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 350.522523][ T5875] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 350.543980][ T5876] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 350.553189][ T5876] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 350.561263][ T5876] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 350.570474][ T5876] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 350.579268][ T5876] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 350.678725][ T5875] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 350.693108][ T5875] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 350.701461][ T5875] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 350.710172][ T5875] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 350.718347][ T5875] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 378.472793][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 378.479751][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P11494 [ 378.487413][ C1] rcu: (detected by 1, t=10502 jiffies, g=36861, q=2852 ncpus=2) [ 378.495198][ C1] task:syz.0.1464 state:R running task stack:26688 pid:11494 tgid:11489 ppid:5856 task_flags:0x400140 flags:0x00004006 [ 378.509334][ C1] Call Trace: [ 378.512600][ C1] [ 378.515424][ C1] sched_show_task+0x49d/0x630 [ 378.520173][ C1] ? __pfx_sched_show_task+0x10/0x10 [ 378.525446][ C1] ? rcu_dump_cpu_stacks+0x79/0x4e0 [ 378.530096][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.530678][ C1] ? wq_watchdog_touch+0xef/0x180 [ 378.537093][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.541895][ C1] print_other_cpu_stall+0xf7a/0x1340 [ 378.553480][ C1] ? __bpf_trace_rcu_utilization+0x94/0xf0 [ 378.559285][ C1] ? __pfx_print_other_cpu_stall+0x10/0x10 [ 378.565087][ C1] ? __pfx___bpf_trace_rcu_utilization+0x10/0x10 [ 378.571406][ C1] rcu_sched_clock_irq+0xa47/0x11b0 [ 378.576593][ C1] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 378.582216][ C1] update_process_times+0x23c/0x2f0 [ 378.587406][ C1] tick_nohz_handler+0x39a/0x520 [ 378.592326][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 378.597765][ C1] __hrtimer_run_queues+0x4e0/0xc60 [ 378.602960][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 378.608659][ C1] ? read_tsc+0x9/0x20 [ 378.612720][ C1] hrtimer_interrupt+0x45b/0xaa0 [ 378.617665][ C1] __sysvec_apic_timer_interrupt+0x108/0x410 [ 378.623630][ C1] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 378.629697][ C1] [ 378.632608][ C1] [ 378.635530][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 378.641499][ C1] RIP: 0010:__xfrm_state_lookup+0x328/0x8d0 [ 378.647379][ C1] Code: 4c 8d b3 42 01 00 00 4c 89 f0 48 c1 e8 03 42 0f b6 04 20 84 c0 0f 85 7c 03 00 00 45 0f b7 36 44 89 f7 44 89 ee e8 28 c7 9e f7 <66> 45 39 ee 0f 85 2f 01 00 00 4c 8d b3 c4 00 00 00 4c 89 f0 48 c1 [ 378.666967][ C1] RSP: 0018:ffffc9001c5375c0 EFLAGS: 00000297 [ 378.673022][ C1] RAX: ffffffff8a20e588 RBX: ffff88823b46d028 RCX: 0000000000000002 [ 378.680985][ C1] RDX: ffff8880703b3c00 RSI: 000000000000000a RDI: 0000000000003b46 [ 378.688939][ C1] RBP: ffffc9001c5376b0 R08: dffffc0000000000 R09: 0000000000000002 [ 378.696901][ C1] R10: 000000000000000a R11: 0000000000000002 R12: dffffc0000000000 [ 378.704877][ C1] R13: 000000000000000a R14: 0000000000003b46 R15: 0000000000000000 [ 378.712849][ C1] ? __xfrm_state_lookup+0x328/0x8d0 [ 378.718145][ C1] ? __pfx___xfrm_state_lookup+0x10/0x10 [ 378.723767][ C1] ? xfrm_state_lookup+0x45/0x1e0 [ 378.728783][ C1] xfrm_state_lookup+0x11e/0x1e0 [ 378.733715][ C1] pfkey_get+0x2ae/0x880 [ 378.737952][ C1] pfkey_sendmsg+0xbfe/0x1090 [ 378.742615][ C1] ? trace_sched_exit_tp+0x36/0x110 [ 378.747813][ C1] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 378.752929][ C1] ? aa_sock_msg_perm+0xf1/0x1d0 [ 378.757869][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 378.763143][ C1] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 378.768236][ C1] __sock_sendmsg+0x219/0x270 [ 378.772917][ C1] ____sys_sendmsg+0x505/0x830 [ 378.777672][ C1] ? __pfx_____sys_sendmsg+0x10/0x10 [ 378.782969][ C1] ? import_iovec+0x74/0xa0 [ 378.787457][ C1] ___sys_sendmsg+0x21f/0x2a0 [ 378.792115][ C1] ? __pfx____sys_sendmsg+0x10/0x10 [ 378.797322][ C1] ? __fget_files+0x2a/0x420 [ 378.801892][ C1] ? __fget_files+0x3a0/0x420 [ 378.806556][ C1] __x64_sys_sendmsg+0x19b/0x260 [ 378.811480][ C1] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 378.816935][ C1] ? do_syscall_64+0xbe/0x3b0 [ 378.821596][ C1] do_syscall_64+0xfa/0x3b0 [ 378.826080][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 378.831266][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.837315][ C1] ? clear_bhb_loop+0x60/0xb0 [ 378.841978][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.847848][ C1] RIP: 0033:0x7fc17098ebe9 [ 378.852245][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 378.871834][ C1] RSP: 002b:00007fc16ebf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 378.880232][ C1] RAX: ffffffffffffffda RBX: 00007fc170bc5fa0 RCX: 00007fc17098ebe9 [ 378.888212][ C1] RDX: 0000000000000000 RSI: 00002000005f5000 RDI: 0000000000000005 [ 378.896180][ C1] RBP: 00007fc170a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 378.904150][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 378.912113][ C1] R13: 00007fc170bc6038 R14: 00007fc170bc5fa0 R15: 00007ffe67d7cdd8 [ 378.920098][ C1]