last executing test programs: 4.142604834s ago: executing program 2 (id=1411): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r1, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000180)=0x1000, 0x81) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r3, &(0x7f0000000040)={0x24, @short={0x2, 0x0, 0xaaa1}}, 0x14) (async) bind$802154_dgram(r3, &(0x7f0000000040)={0x24, @short={0x2, 0x0, 0xaaa1}}, 0x14) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)="d8000000180081054e81f783db4cb9040a1d080006007c03e8fc55a10a0015000600142603600e120800060000000401a8000800a400000001000000035c0461c1d67f6f94007134cf6efb8000a007a290457f010400000700000000ceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bf9ad809d5e1cace0d81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}, {&(0x7f00000001c0)="9bcc563ea6513952448f6ffcd2b651c06ef0ae58a458249ae92db71d23772e2a060f773abbc069015e09eec8294338d3aad278ec5ce9f2a12c11e4a463c4d644c00c1193860acc74cacaa48b87ac", 0x4e}, {&(0x7f0000000240)="4c2a340592f4691fb6c809051eb368db06806b8e9230d66edb698dfec023a0f2a0a341e09d63b9a890e4b78794077eb08a20f21c0ba7bf94ecdb886d19468a5f1be8f58a1bb52345e9938f66e763f36f2020d63b44e0b6ba39d0cb8b2efcf228a771cb86c78e1ca8b5fae01121bfe41bddc04177cb5e1effe1a4b01a9c45272cb416e7b569410fe0830594a209748e838ed86b6cccdc5a504227", 0x9a}], 0x3}, 0x4880) (async) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)="d8000000180081054e81f783db4cb9040a1d080006007c03e8fc55a10a0015000600142603600e120800060000000401a8000800a400000001000000035c0461c1d67f6f94007134cf6efb8000a007a290457f010400000700000000ceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bf9ad809d5e1cace0d81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}, {&(0x7f00000001c0)="9bcc563ea6513952448f6ffcd2b651c06ef0ae58a458249ae92db71d23772e2a060f773abbc069015e09eec8294338d3aad278ec5ce9f2a12c11e4a463c4d644c00c1193860acc74cacaa48b87ac", 0x4e}, {&(0x7f0000000240)="4c2a340592f4691fb6c809051eb368db06806b8e9230d66edb698dfec023a0f2a0a341e09d63b9a890e4b78794077eb08a20f21c0ba7bf94ecdb886d19468a5f1be8f58a1bb52345e9938f66e763f36f2020d63b44e0b6ba39d0cb8b2efcf228a771cb86c78e1ca8b5fae01121bfe41bddc04177cb5e1effe1a4b01a9c45272cb416e7b569410fe0830594a209748e838ed86b6cccdc5a504227", 0x9a}], 0x3}, 0x4880) 3.854032967s ago: executing program 2 (id=1416): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001340)={&(0x7f0000000280)={0x50, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x404c0c1) r1 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x0, 0xe, 0x53, 0x4, 0x7f, @mcast1, @mcast2={0xff, 0x5}, 0x8, 0x90, 0x7c, 0x6}}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r2 = accept$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000140)=0x14) ioctl$BTRFS_IOC_INO_LOOKUP(r2, 0xd0009412, &(0x7f0000000340)={0x0, 0x200}) unshare(0x2040400) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x100}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r4, 0x29, 0xc8, 0x0, 0xc000000) r5 = socket(0xa, 0x3, 0x3a) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SENDCALLACCPT(r6, 0x89e9) recvfrom(r5, &(0x7f0000000000)=""/2, 0x2, 0x10020, &(0x7f00000001c0)=@isdn={0x22, 0xd, 0x5, 0x9, 0x25}, 0x80) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_CONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b40)={0xb8, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @chandef_params, @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEYS={0x80, 0x51, 0x0, 0x1, [{0x68, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "fa06ba7b11"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_MODE={0x5}, @NL80211_KEY_DEFAULT_TYPES={0x1c, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "21dc7a8c3b178f6374b4c0c9d6"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "7884a30641869be29c535d13c3"}]}, {0x4}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}]}, {0x4}]}]}, 0xb8}}, 0x0) sendmsg$NL80211_CMD_ASSOCIATE(r5, &(0x7f0000001480)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x22881080}, 0xc, &(0x7f0000001440)={&(0x7f0000001400)={0x3c, r8, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_FILS_NONCES={0x24, 0xf3, [0x9, 0x1000, 0x4, 0x33ee, 0x8, 0x4, 0x0, 0xfff9, 0x1, 0x3, 0x4, 0x2, 0xe00, 0x1000, 0x1ff, 0x14]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x1) 3.439127242s ago: executing program 3 (id=1424): r0 = socket(0x10, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newsa={0xf0, 0x10, 0x300, 0x70bd28, 0x0, {{@in=@rand_addr=0x4, @in6=@mcast2, 0x4e24, 0x1, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2c}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x32}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {0x0, 0x0, 0x8, 0x100000001, 0x6, 0x0, 0x2}, {0x0, 0x0, 0x2, 0xfffffffffffffffc}, {0x1}, 0x70bd27, 0xffffffff, 0x2, 0x0, 0x2}}, 0xf0}, 0x1, 0x0, 0x0, 0x484d4}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000031300048008000240000000120800014000000000140003006e657464657673696d30"], 0xac}}, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req={0x0, 0x71, 0x7fffffff, 0x80000001}, 0x10) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r3, &(0x7f0000000280)="f9", 0x1, 0x20000040, &(0x7f0000000040)={0xa, 0x0, 0x2, @private2}, 0x1c) shutdown(r3, 0x1) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f0000000340)={&(0x7f0000000140), 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x3c, r4, 0x100, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x90893afc1b06493}, 0x20008080) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x2}, 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}], 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x1, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x3, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, @ipv4={'\x00', '\xff\xff', @loopback}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8, 0x0, 0x9, 0xffffffff}}) 2.877832523s ago: executing program 2 (id=1425): socket$inet_icmp_raw(0x2, 0x3, 0x1) socketpair(0x1, 0x805, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$inet6(r0, &(0x7f0000001000)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='X'], 0xc8}}], 0x2, 0x20008004) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000040), 0xc) r2 = socket$qrtr(0x2a, 0x2, 0x0) recvmmsg(r1, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x10000, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), r1) connect$qrtr(r2, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) writev(r2, &(0x7f0000000340)=[{&(0x7f0000000080)='>', 0x1}], 0x1) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x2a, 0x2, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000400)=@newtfilter={0x88, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x58, 0x2, [@TCA_FLOWER_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x6, 0x6, 0x7, 0x8}, 0xff}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x88}}, 0x24000000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x9, [@enum={0x4, 0x4, 0x0, 0x6, 0x4, [{0x4, 0x7}, {0x2, 0x4}, {0x4, 0xfffffffc}, {0x8, 0x7}]}]}, {0x0, [0x2e, 0x71, 0x30, 0x61, 0x30, 0x2e, 0x5f]}}, &(0x7f0000000280)=""/95, 0x4d, 0x5f, 0x1, 0x80000001}, 0x28) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r6}, 0x10) r8 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r7}, 0x8) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x16, 0x8, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x6a, 0xa, 0xff00}, [@call={0xc}, @exit, @map_fd, @jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x30}]}, &(0x7f0000000140)='GPL\x00', 0x2, 0x95, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)=ANY=[@ANYRES32=0x0, @ANYRES32=r9, @ANYBLOB="1100"/12, @ANYRES32=r8, @ANYBLOB="0fa56a1034283ab9faa73ea9991b41c61a0911ade660789a3f2cd3685e860e7928144320a39a67bc9f16eba526ae67792538a468c13cbd3920cfd82416ab36d72588e13277f7178efafe220072be26926b838d01ec7b480300000c0000000092c595178c237e1b5d9bd11d7f152275df0c15593190b783f83f5935b5d25fa198be4e6f22dfb40648120c62c4886848f6efa2000000000082000000000000000000", @ANYRES64=0x0], 0x20) 2.864603363s ago: executing program 3 (id=1426): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3f9d00000000fbdbdf25170000002c003080052102000500000014000400de067486d928a27e16fa9e9bf01d2cf00c000180220001000100000008000300", @ANYRES32=r2], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3f9d00000000fbdbdf25170000002c003080052102000500000014000400de067486d928a27e16fa9e9bf01d2cf00c000180220001000100000008000300", @ANYRES32=r2], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)={0xa4, r4, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0x7c, 0x8, 0x0, 0x1, [{0x78, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "105850071e2ab631bd00cf795354cb2c626d8b5be606d39cd0bd2ce6ebd06eb3"}, @WGPEER_A_ALLOWEDIPS={0x2c, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x35}}}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24}]}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) 2.634700307s ago: executing program 3 (id=1429): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, 0x0}], 0x1, 0x0) (async) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/73, 0x49}], 0x1}, 0x0) sendmsg$NFT_MSG_GETTABLE(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, 0x1, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x8000000) (async) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet(r3, &(0x7f0000000000)=[{{&(0x7f0000000040)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000700)=[{&(0x7f00000005c0)='e', 0x1}], 0x1}}], 0x1, 0x4) (async) shutdown(r3, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) (async) setsockopt(r3, 0x84, 0x7d, &(0x7f00000002c0)="aa8e0cf56164be5b", 0x8) (async) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="bc0000001900010000000000000000001c140000fe0000010000000084001200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005001a000d00000008000400", @ANYRES32, @ANYBLOB='\f\x00\t'], 0xbc}}, 0x0) 1.844771648s ago: executing program 2 (id=1433): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000940)=""/215, 0xd7}, {0x0}, {&(0x7f0000000640)=""/234, 0xea}, {&(0x7f0000000e40)=""/187, 0xbb}, {&(0x7f0000000340)=""/213, 0xd5}, {&(0x7f0000000880)=""/189, 0xbd}, {&(0x7f0000000b00)=""/155, 0x9b}, {&(0x7f0000002a00)=""/4060, 0xfdc}, {&(0x7f0000000140)=""/123, 0x7b}], 0x9}, 0x2000) 1.799564653s ago: executing program 4 (id=1434): socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000ce34000000000000000000850000002f00000095"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r0, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010dd010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000005c000000090a010400000000000000000700000008000a40000000030900020073797a31000000000900010073797a300000000008001f4000000021200011800e000100636f6e6e6c696d69740000000c00028008000140fffffff73c0000000c0a01010000000000000000070000000900020073"], 0xe0}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000001d00070f000200000000000007000000", @ANYRES32=r2, @ANYBLOB='\x00\x00w\x00\b\x00\b'], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_emit_ethernet(0xfffffffffffffc85, &(0x7f0000000280)={@local, @empty, @void, {@generic={0xf5, "e68b0c62bbae0176fbcda001fd79bfa1939d59b95b26d79c9f9a1fe59c5703290a5c9a4fc51b51e673c16849a04f5b3089e6316443e00656ba96b406b5255f98604c2c0259e85e3d051a96e4a16ba07e390f4170345110d0e9df9cb1a9c86c8c1c83f2fdd25081fe1678a1a2f86f19954c17daf01d13e0ba0aeebfa66dfeeab0fd36530e9803102fcaad3f555c688bb41a8c95d8b97747fba9dff2de2726592075e5644fbe2cec51f214237de3091f03925db8dd4a614df0bf40a9a3599a19667b4732db6d14df5150025bea5a4ec64b0c7c"}}}, 0x0) 1.718997451s ago: executing program 2 (id=1436): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001a40)=ANY=[@ANYBLOB="5801000010000100030000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000001600"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x158}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xfff3}}}, 0x24}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000080)={0x0, 0x5, 0x1, "fd"}, 0x9) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000180)=ANY=[], 0x9) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2d8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x360, 0xffffffff, 0xffffffff, 0x360, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @remote, [0x0, 0xff], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xe0, 0x110, 0x0, {}, [@common=@unspec=@devgroup={{0x38}, {0x1, 0xcc60, 0x5a, 0x7, 0x10}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x2, 0x2, 0x2}, {0xffffffffffffffff, 0x1, 0x2}, 0x5, 0x2}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@icmp6={{0x28}, {0x0, "c60d", 0x1}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x7, 0xc4}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x338) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010026000000000000000c00007f0c000200020000a4"], &(0x7f0000001f80)=""/226, 0x26, 0xe2, 0x2}, 0x28) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000003c000701fcffffff00000000017c0000100036800c00020008000000007000000c000180060206fe"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc800) 1.58669253s ago: executing program 3 (id=1437): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$kcm(0x29, 0x2, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f00000001c0)=0x2, 0x4) close(r1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x7, 0x4, &(0x7f0000001240)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0xb5}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000240)='kfree_skb\x00', r2, 0x0, 0x8}, 0x18) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r3, &(0x7f0000000300)={{0x6, @rose, 0xffffffff}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000006c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010029bd7000fedbdf255100000008000300", @ANYRES32=r4, @ANYBLOB="056261f707000000918bc3e5227598916a913846ecd8b85310b6c512c4d8ce88dc2e9640b26b49a0031ae282954b29ad1adc244f65b2f67f4283d79ef30bcd00000000000000004f89fb2d5c804073f09a9dfffd60f5bd114bca5082e65a1517bf53c3a1f1"], 0x24}, 0x1, 0x0, 0x0, 0x20000004}, 0xc000) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$sock_SIOCGIFCONF(r6, 0x8912, &(0x7f00000002c0)=@buf={0x31, &(0x7f0000000180)="eb70f02f61d17803f3493ae620832a88d15911e62fee540a97392c97e569ccc7791b42ba1976166140c7815a4cd5ba5124"}) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000080)=0x20) sendmsg$NFT_BATCH(r6, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000780)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSETELEM={0x1184, 0xc, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x8b8, 0x3, 0x0, 0x1, [{0x10c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_USERDATA={0xdd, 0x6, 0x1, 0x0, "7bd7b6dfd5b4dde4cd666962595d1b076d8e23312669f50b158f7206862bcbed3a779089c72d0d98609e50fbb316ec51fade514ee5c149e9f206079719e3923fd1f55f84a64f2e9f7265f30dacd68aa90546b4c7a8e55ce589e37d8185a993a707e3df7a463b9a1102ba8c0bba1af576f2ae8fa31224f0b506625c6758eec9370e6a15e61ee33ef14bb7ff8da3ff8495c020f5ab7c2fb49ee19e32165ed28134868d9fefc11be6d9fddeaf4f03a4d3bd3552db8282c217836fa6116a455a65f5b40a9989ddd4aa141feae806213829d82f067271f0746d3b66"}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}, {0x568, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x260, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VALUE={0xb9, 0x1, "042d79eb44f77d25124e2915881342a8f13c35775eeb03955a38f6e9b1cd6d942ba1afb126bf326e76aa4feefdc366ae630f0b88cd29b8bfbce6184d748cc9a9dccfa014fda5188f557651dc602c78dbf026f0f920fdc8ba9d88685faa2345d2ef8fdd0c55c3e0c128ec553c945a9310d0a9dd40914a40d50404253a610ad9c92df5b6d2a38d851432ed989bf0bbfe10fdc60920bfc5f5a20fd3f51c0a8ce3c9c63ccb0eb7b265266dbc33ffa0cf3a0374d4cc89ab"}, @NFTA_DATA_VALUE={0xf1, 0x1, "1258fc00d6f5f5beda2e4eeedc0632b36c9e769fd344e7730125b14172da0a270f18a474bff3880ad59f574fa548db16340d261893762d5def69e208c55df584b5aa6872949afb6ab317ab21bd4e575877168d5808fda6af8758a737c8f002fc8f77c737e90d95a0b33e62d51cd156e4e46f34ad3b43f7f1dd9112efa719ca786555d9d1a8d1e5b20e38dc5d244f95094aac773d8b1e501e457d7247b3958c163bab0cec228b5d5b822f7ac0cd4fdd75e43661021a87cc74ab72bf253a1f43f4c3cbb88bb97ac6b5f3cf0451c701cff25fb1f294a1f63b8d1671f488392a1f3e937a4109e3d147affc26c75d0f"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x19, 0x1, "bdb8a9bf9e2769f655fa2e13ebe1a69db0b133583f"}]}, @NFTA_SET_ELEM_USERDATA={0xcc, 0x6, 0x1, 0x0, "e08c74aa52e9ecfd38fd27e8e2bbe02d42b9983b633dfb985a01bea19e4feeb4dd5fc1d4b96e320f1a0645c727b2a4f52ebc367e9a6aa52d9be46e31f1863266efc8864e821c88c30dad1a1c67ec7b9c7071974f8abc8983deaf7cfc9fbff21df909c240d0f9ef82fa97ed00bdea563c0019f6013101546be7fe5134fa93d965688bc6104ba0adfe0409617421fecf00a43bc962aa4e1acf8c968f989a61183e177902555c405923286d56c14cc35ef751cf6e413108f2c551afd8cd11a68e0646698fb577be0c2e"}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x6}, @NFTA_SET_ELEM_KEY_END={0xf0, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0xa3, 0x1, "ff7014e92ae8691f930b75c3895cfe4d196686d8c2720074131c434fe170ea2a365b5fe03925ad130fac5a4c47655cd486cb57da37d47b94875f7aac13a2b764c8de2a07bbc090dcccfd043d186ac5b7a8abab15a85764456f4ababcd1d80dd2371eed71c3cd8da173f1278e8a2bf215ffb21f93df2f41b9e050f17400d4fcc126139371f7e0c9e0d39ed754faabd52212dc6afb105e28fe7c239d68a9c980"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_DATA={0x108, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x75, 0x1, "ee1623e522a1be116ad93e7ae6b87e8833de2f30f0bd0f299afd01baa8e01f1cbe8a5eb979d0ea083d91ca81e13fdfa17377171f1be8fce1737f4343833e0b973848974c2e3834ae8e85f758ba9bf8236d6db05fba88f72f0a6da4e469f280eeb43e12894cfd1df3e6df55aee729b79b96"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_EXPR={0x14, 0x7, 0x0, 0x1, @notrack={{0xc}, @val={0x4, 0x2, 0x0, 0x1, ["", "", "", ""]}}}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x3}]}, {0x228, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x32}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_KEY_END={0x1e8, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0xb2, 0x1, "4e914b4c54ea12445101c7fd0f0a3a66d42e14777860fdbc464bddc8b3153a2bf8871ffb57ead3b7d5b0f354605abada0a7b30466603f6f9fc395f0866d70109390c110bdb38198d1ec79e8af5419a369b0064825e33416c09135ed340ca891ca843ffdb8b0a3492365529728ffe908b1ebb3d2525ca8d6e22fc74de3f3bf7f23b45ad42d68fe3bc4e41db0d5bd465666628cfcde3aef40d4fe2d8fa0523501527a1da7fb941d7a86bc4736afc52"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x1}]}, @NFTA_DATA_VALUE={0xac, 0x1, "7786bc2f95bebf5bde973b9ddcf6b225cd192647771c8e6d25f0137197a65c60ba2983336824ac1fb0c94cd1ad6c8e5d31de86f0247a0db9712463c5f588d9a43809ef765f0eadce3144c3179c46b127a6e3976c74507e244fd4e37cb950558f1a44b1c5665eeab92d7549c521f7bd3dfa2b64d976c4bd8dc9c2b82716e8e4447d8a23467567b2be8c1c8371fe10ec0d4e8228049d1934f17ac2319718e5ac58ee91e04c389ae260"}, @NFTA_DATA_VALUE={0x39, 0x1, "621f92cb2c75fb61a578798003bf632c749f624d4469bebf6685c4e8ffda122c2d34e681178f0be788cbb19d87ea8f0f42eddd7111"}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}]}, {0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x898, 0x3, 0x0, 0x1, [{0x1dc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x94, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x3f, 0x1, "34a634ba4fc0ee274ebefa3d766da1158515b6004e86d080e8909331f0508d679cfbcd0714ea014bed65548cc4febf23f08b24f565574084363fc9"}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffff8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x84, 0xb, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @dup={{0x8}, @void}}, {0x74, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x64, 0x2, 0x0, 0x1, [@NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x6}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x200}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0xdfb}, @NFTA_LAST_MSECS={0xc}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x46d}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x7}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x6}, @NFTA_SET_ELEM_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_ELEM_DATA={0x4c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xaa06d425342db32c}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_ELEM_EXPR={0x4c, 0x7, 0x0, 0x1, @tunnel={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_KEY={0x8}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_KEY={0x8}, @NFTA_TUNNEL_KEY={0x8}, @NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_MODE={0x8}]}}}]}, {0x134, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x130, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x5b, 0x1, "1e8eb5e6f397f2d98caf8b8c8603c2b4277f6ca94db7ab170db5e374425495ad42fbc19c08261c9caaadf86486652345da38bd43ec67ef8783f6c26ce10d66e4890af9ad622c6d19f7da641864eafdb574491f1a102d39"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}]}, {0x39c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_KEY={0x168, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0xeb, 0x1, "318e2232dee4f0b47745f5f7c28368f25dfa3d1ab4ae36ed2aa9200c10a34df31851290c639682f6c94f618e6b6ac2e92d1e6eb666a3614ae98417e065d227bd12a85e71252c63f283462603e55e754b34e16ebe06e86f89903e56eecdd79a54cd19e1dca687c7cd5a622172c8debb0b21433bbd65ec2192a67bcdbeac09fc918ab1b7d99fdb15a1b72ceec99f5382665c501b9dc32508e649a1152aae5f5cc1a4a4c16dddb8b85fc6e39ceefe9fb27a25a52537c0e2c95054be94285fa83939425e5142db36e81a93e086732a985225fd40280e0fa6202e3fa5d787f1006ebeccdd062b9d0365"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_DATA={0x74, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x61, 0x1, "1176e225730e0e5c99ff003e9bc589418b0b2bb5bbee2209f98b03890ed71310a1d9357c6b4917a39e7e315adb276f30e42f44091f1e91e957a78b003ca2a161b32369f2b5c9545096f623e0f9c685fc803a32d9b60ba02bb8581795bb"}]}, @NFTA_SET_ELEM_USERDATA={0xc1, 0x6, 0x1, 0x0, "d678df22494d177470ffd759b9cc504b1f2db43883c41da43f4f139ec6d9b03a24b6622bf7295bee98e04d1aeb1f80038c5aad869e0f4a29b04728f0edf2f3201f8a149364a1d274aa8b2419c361dcf15461c75415fda7fd7685e93b2c607e18bb98a9714e4bb953d60175756b77dff7ad32c858927ac2d8b17d82cfb578e7e222bbd368da787f8b206807c0d787effd7e2ee539389b198958945cabd51e6ecb6b304cbe28c36df0f7a23649e2451d6131d7eae85c46513f32d8fccb9d"}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_USERDATA={0x90, 0x6, 0x1, 0x0, "d2082e4d9e4e84a595ff5cf03e1da0ebb67efab703338446ba9e4daa46966f3902697a1ae783ff7dd126eaa71006d2ed81fb5a90bf871c75d587185e497fe62f42cf6554b81de23a69d920bed2a5af483acb630d51f9cec3afbbb1c22ac173e64e5eee7b1f4e7cca564af483e555da1385c79a58d2406d9d64ff5c42feb89e767da8804f90f4697f0d59c6a1"}, @NFTA_SET_ELEM_EXPR={0x4c, 0x7, 0x0, 0x1, @numgen={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x7}]}}}, @NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}]}, {0x1e8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_EXPR={0x20, 0x7, 0x0, 0x1, @counter={{0xc}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x3}]}}}, @NFTA_SET_ELEM_DATA={0x188, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0x90, 0x1, "ebeafea7bca12057e20e64d6b5fcca09e996ab5db9d355110ebe5d6d656860af8c8d1bc488a4fd7b9b405c4595ae02d327bc986c186dc6a05bde84264791ab83b860c24b74b49d9af75c44f3987dab78ffc56b58b3cb550bcd64c470d4e9cb3a94fa35b4825620697c082e324a14d9c6de589af7953ff7c0c8da27c19f5fd62537bc76e1f80cf024ca97f023"}, @NFTA_DATA_VALUE={0x9, 0x1, "ed57930d5f"}, @NFTA_DATA_VALUE={0x1b, 0x1, "66a7458416d6de95c45597e62fa5ddbe215bce8ee01f39"}, @NFTA_DATA_VALUE={0x44, 0x1, "604174167253d1126cb897db15cd2aea261f474648b9042f343e432192cdbd2c63c118805578708046e71540d9995683f80d3ba8517224829388c5ba719179f2"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x28, 0xb, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0x9}]}}}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}, @NFT_MSG_DELFLOWTABLE={0x88, 0x18, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0x24, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x1234}, 0x1, 0x0, 0x0, 0x2400085c}, 0x0) 1.584679478s ago: executing program 0 (id=1438): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001740)=""/4071, 0xfe7}, {&(0x7f00000012c0)=""/165, 0xa5}, {&(0x7f0000001380)=""/127, 0x7f}, {&(0x7f0000001440)=""/131, 0x83}, {&(0x7f0000000000)=""/48, 0x30}], 0x5}, 0x4}], 0x54, 0x12100, 0x0) (fail_nth: 3) 1.576788552s ago: executing program 4 (id=1439): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x17c, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@empty, 0x0, 0x3, 0x2, 0x0, 0x2, 0x0, 0x0, 0x89}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x3}}, [@tmpl={0xc4, 0x5, [{{@in6=@empty, 0x0, 0x32}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0xc}, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0xfffffffd}, {{@in6=@private2, 0x0, 0x32}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @remote}}, {{@in6=@empty, 0x0, 0x2b}, 0x2, @in=@dev, 0xffffffff}]}]}, 0x17c}}, 0x0) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="ac00000012000105000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005c00", @ANYBLOB="00000000000000feffffff0000000000040002005c00010007"], 0xac}}, 0x4000) 1.521124498s ago: executing program 1 (id=1440): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r1}, &(0x7f00000006c0), &(0x7f0000000700)}, 0x20) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r3, 0x890b, &(0x7f0000000280)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0xffff, 'syz1\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xfffffdbd, 0x0, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r4, 0x0, 0x0, 0x20004041, 0x0, 0x0) connect$inet6(r4, 0x0, 0x0) close(r4) socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000100)={0x0, 0xffffedcffff, 0x1000, 0xffffffff, 0x1}, 0x20) r5 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000200)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x5, 0x13, r8, 0x1d20b000) ioctl$FS_IOC_RESVSP(r8, 0x40305829, &(0x7f00000000c0)={0x604, 0x2, 0x3, 0xffffffff}) 982.777888ms ago: executing program 1 (id=1441): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0xfffc}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x8}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x5c}}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f00000005c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000580)={&(0x7f00000003c0)=ANY=[@ANYBLOB="90010200", @ANYRES16=r1, @ANYBLOB="010025bd7000fedbdf251d00000008000300", @ANYRES32=0x0, @ANYBLOB="0c000600010000000100000008000300", @ANYRES32=0x0, @ANYBLOB="50002f800c0002000203aaaaaaaaaaaa08000100fcffffff0c00020000000000000000000c00020000020000000000000c0002000203aaaaaaaaaaaa0c0002000203aaaaaaaaaaaa080001000900000018002f8008000100001000000c0002000000000000000000f8002f801400038008000100030000000800010001000000cc00038008000100000000000c0005001a000000000000000800040080000000400003800c0004000203aaaaaaaaaaaa08000200000000000800020000000000060001000000000006000300feff0000060001000100000006000300a1aa00000500020002000000080004008000000008000400ff000000540003800c0004000200aaaaaaaaaaaa0c0004000200aaaaaaaaaaaa0600030000000000060001000200000006000100000000000c00040000030000000000000c0004000201aaaaaaaaaaaa06000300000000000c0002000203aaaaaaaaaaaa0800010009000000"], 0x190}, 0x1, 0x0, 0x0, 0x4000010}, 0x80) 931.104743ms ago: executing program 4 (id=1442): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000600)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="400000006be577bea4df505d41589e27938482f7e8f05352b8d128a84b6b2c7ae3c16ebf0fc9c0c42e6c735aac827fa3f21aa85a2a3010643c384c9e9951568eff5e3c0be5e11c08d3bec94dd4261a2342ad0d5e9aec9e539ed7", @ANYRES16=r1, @ANYBLOB="150626bd7000ffdbdf252a00000008000200", @ANYRES32=r2, @ANYBLOB="08002f000500000008002f00000000000c00050000000000000000000500360000000000"], 0x40}, 0x1, 0x0, 0x0, 0x801}, 0xc040) (async) r3 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x40}, 0xc) (async) r4 = socket$netlink(0x10, 0x3, 0xf) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x2200c0, 0x0) (async) r6 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x89f1, &(0x7f0000010640)={'tunl0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x2f, 0x5, 0x0, 0x0, 0xf8, 0x0, 0x3, 0xfc, 0x0, 0xff, 0x0, 0x0, 0x0, 0xff, 0xff, 0x45, [0x0, 0x89ff]}}) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r8, 0x5421, 0x110e22fffd) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r8, 0x660c) (async) socketpair$nbd(0x1, 0x1, 0x0, 0x0) (async) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="87cd8a6c", @ANYRES16=r6, @ANYBLOB="0100feffffff0000000001000000100007800c00018008000100", @ANYRES32, @ANYBLOB="0c000200ffff0000000000000c0004000200000000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000000) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0x101, 0x4) (async) r9 = socket$packet(0x11, 0x2, 0x300) (async) r10 = socket(0x29, 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r10, 0x6, 0x14, 0x0, 0x0) r11 = socket$packet(0x11, 0x3, 0x300) (async) r12 = socket$packet(0x11, 0x2, 0x300) (async) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r4, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000740)={0x208, 0x0, 0x0, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xfffffff9, 0xb}}}}, [@NL80211_ATTR_IE={0x26, 0x2a, [@chsw_timing={0x68, 0x4, {0x8, 0x2}}, @mesh_id={0x72, 0x6}, @ibss={0x6, 0x2, 0x9}, @gcr_ga={0xbd, 0x6}, @mesh_chsw={0x76, 0x6, {0x3, 0x2, 0x3c}}]}, @NL80211_ATTR_IE={0x2c, 0x2a, [@link_id={0x65, 0x12, {@random="8e670bf90701", @broadcast, @broadcast}}, @ibss={0x6, 0x2, 0x3}, @mesh_id={0x72, 0x6}, @mesh_chsw={0x76, 0x6, {0x0, 0x1, 0x2, 0x9}}]}, @NL80211_ATTR_IE={0x75, 0x2a, [@mesh_id={0x72, 0xfffffffffffffead}, @prep={0x83, 0x1f, {{}, 0x1, 0x6, @broadcast, 0x0, @void, 0x81, 0xfd, @device_a, 0x300000}}, @preq={0x82, 0x46, {{0x0, 0x1}, 0x3, 0x80, 0x8, @broadcast, 0x101, @void, 0x8fdc, 0x7, 0x4, [{{0x1}, @device_a, 0x1}, {{}, @device_a, 0x10000}, {{0x0, 0x0, 0x1}, @device_b, 0x7}, {{0x1, 0x0, 0x1}, @device_b, 0xfffff54b}]}}]}, @NL80211_ATTR_IE={0x63, 0x2a, [@erp={0x2a, 0x1, {0x1, 0x1}}, @measure_req={0x26, 0x3a, {0x6, 0x8, 0x31, "ece6b62da26342b70972e061a2ba326fd58a32dd4e54d5335f525cba4f2a2122aaf0d59a57cd958f68749ace17e8356f1e3dd87c8c327c"}}, @dsss={0x3, 0x1, 0x9d}, @chsw_timing={0x68, 0x4, {0x5, 0xfff7}}, @rann={0x7e, 0x15, {{0x0, 0x7f}, 0xf, 0x4, @device_a, 0x2, 0x80000000, 0x2}}]}, @NL80211_ATTR_IE={0xb6, 0x2a, [@random={0xf, 0x96, "b5300687c54172b72e2b533ea3236df37b3f96c141739ae888434e310622f007366ee6a331d205d84419d8ec8a7c19a822296a8f888a5f41d7f7789459b9287a38b6f716145816ef8d15630b7ab64b36a1442246e8c067db845d63a35e185a1398f651c62adb2cdc0479baa523c11de0f3ce16aea61072cec88e5fe4a07e42c71808f208a44e67a18be51586e9260473c506d48879fe"}, @rann={0x7e, 0x15, {{0x1, 0x5}, 0x70, 0x0, @broadcast, 0x5, 0x8, 0xd}}, @challenge={0x10, 0x1, 0xc2}]}]}, 0x208}, 0x1, 0x0, 0x0, 0x4048000}, 0x0) setsockopt$packet_fanout(r12, 0x107, 0x12, &(0x7f0000000000), 0x8) (async) setsockopt$packet_fanout(r11, 0x107, 0x12, &(0x7f0000000000)={0x200}, 0x4) setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000000000), 0x8) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000), 0x4) socket$nl_route(0x10, 0x3, 0x0) 930.688085ms ago: executing program 0 (id=1443): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000940)=""/215, 0xd7}, {&(0x7f0000000480)=""/176, 0xb0}, {&(0x7f0000000640)=""/234, 0xea}, {&(0x7f0000000e40)=""/187, 0xbb}, {&(0x7f0000000340)=""/213, 0xd5}, {&(0x7f0000000880)=""/189, 0xbd}, {&(0x7f0000000b00)=""/155, 0x9b}, {&(0x7f0000002a00)=""/4060, 0xfdc}, {&(0x7f0000000140)=""/123, 0x7b}], 0x9}, 0x2000) (fail_nth: 4) 920.189806ms ago: executing program 3 (id=1444): r0 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000048c0)=ANY=[@ANYBLOB="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"], 0x28}}, 0x4010) (async) r3 = socket$packet(0x11, 0x3, 0x300) (async) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000300)) r4 = socket(0x11, 0x3, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) (async) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000380)=0x4, 0x4) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r5}, 0x18) (async) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000080)={0x28, 0x0, 0x2710, @host}, 0x10) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, &(0x7f0000004ac0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f0000000040)=0x0) epoll_create1(0x0) (async) unshare(0x20000400) (async) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) ppoll(&(0x7f0000000200), 0x0, &(0x7f0000000400)={r9, r10+60000000}, 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c89425, &(0x7f00000000c0)={"2302b38adb49c0306280531d2e9fb7cb", r7, r8, {0x1a, 0xe}, {0x82f6, 0x4}, 0xfd, [0x5, 0x9b4, 0x3, 0xfffffffffffeffff, 0x2cf, 0x2, 0xb6f, 0x8, 0xff, 0x89, 0x8001, 0x7, 0x9, 0x7f, 0x6, 0x15bf]}) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000100)={0x3, 0x3}, 0x4) (async) ioctl$ifreq_SIOCGIFINDEX_team(r11, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) unshare(0x40000200) (async) bind$packet(r1, &(0x7f00000001c0)={0x11, 0x0, r12, 0x1, 0x2, 0x6, @broadcast}, 0x14) (async) setsockopt$inet_MCAST_LEAVE_GROUP(r2, 0x0, 0x2d, &(0x7f0000000540)={0x3d, {{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x88) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r11, &(0x7f0000004880)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000004840)={&(0x7f0000004cc0)=ANY=[@ANYBLOB="04328cdf1f605076a679a5", @ANYRES16, @ANYBLOB="000428bd7000ffdbdf256600000008000300", @ANYRES32=r13, @ANYBLOB="2002b98036017f0010014b001febc197ca8aaeea1ce000179d9b6d64266b6082368e2cea09452892011bcd111001eb2a010310015f05e7010b26e4b01b3026450773d69a0d2fd18ba00bfe75ba1ea969fe90c222861a070c12ea8990917815138e1749185aa9516f183b0688e90d46b869a889c12e8ee27c8905155ac00c86b02150a5c99c8f763eba47bb98ff028a880e5a1da013159138b73a88ba1207c78da66688e8b761b99ad55620e2c49e5df82062aa0dd98ca3a6cb1979d8b4dacbac9bd11999a56846a7c9b86daa489318ca4490638a114f21d2aba6e55faa4ca20193608a89be319fb0fb150bc922a0875523f87c8f7cd6f06da04b12f7d2c99b7b3169fc6fe8c32f9d545d592e2501c020fa828b1783e0070879d6c849d0a2651208021100000108021100000108021100000100060202020202020000d9000e008090fa00ffffffffffffffffffffffff2c80e67b3657790a1200cd01040000000000000064000800000601010101010106020900058301300600428c81b3afa5e654b7a1bcebf67fda0978887e2ca2fd8483fbf50b6309f44ee9e6eed3affa6b224544d7be54de9b7187de0974d8a3477bc1d3e6b9e1afe8288a5b3390358616daee8b08e0cabc7149033b01a5d427ea1dfaa2d224a23749871b953460f391c7cff7be357555884902bf21b6c84a5f34f7cb92e1b6c45278f425030002093c040102700372060303030303037107000001ffff08010000000800ba007e7009000800b700c80000000800b700190000000800b7009c0000000800b7005e000000003fb9800c00ba00f8ff05009600060006017f0005d606d4063b2d8f3af2e5884939ac8aefab40b56a8a81d556662cefde98206261d5a566ecd04123140fc3772db3d05ef8e03aefd13796f17030d6a68ba3322e0094fc61042fe622eceee123248f9f56efa22d43cd4f87b0d48468fc9cae0d73a54b7bcf77dec7396ea29b17d9be38266bad21e794fd9b6ae36961a65629d3657b3d7b9960f29557b11ae46c7d2a2433fdac3eb8a7e26491df81dedaf142f51688370ebda09861ec481f8095c07a5477fac20b30ddc733b01c03453ebdca98fd78eddc680addf25382ed854dbc836e57c47def6279b5b3308325400202080211000001090000000802110000000100000005000000080211000001070000002a0100000020028000100167268b0302071a85ecf89baa04ae3376bbd4e8b4aedac574899ed5e3a9300e63b986823c6d8006beadcc5ebcdf86555fa47804d0fd06d956d140e791b447c7c7e9de0a3761a4c0e14f7fcb439e72f2375676656c3297c13efb313a347dce9e11b01ab4b5a010db253828bfaf7476fa1918400a96049b24353795d3ac13804a5b94c2907d79348f94487386fa946a6512ffffffffffffffffffffffff0802110000002662818e09ec860cc2f67209d4f83617be6ae8a7dbb846b4ce8753dcd06805c811e7e1683168fc6af8dd99e1f33b277c6e994807201fe1aee137647681f91fcc36679a309715c82a9caee6c6d99fc3caf195b444988738b293d51827ee8ad7c2dc11a2ad37640702318f586252686561985984f74a82e52864f8d7de9f47d7e08fb9af32264b52e8cbd444c731d5564184bf2f2b5340c438c42670daedf351b6941ec0a2ec259637b5acba21369254982b1bcb5802d9e4530306a487d7a7cd9502083c6b9b3381462225710701000001011020042594784b6a5af068c04223aaf1818115a79f93d48869b7b8c89de0993626dcf96fa65ec1537c2677030820833a92550aa70957530889683f8af3d05104b34788cd3c778c94fae15262e2651228b2542ab6bb4335eb736394ea5e16320f4aaa524c9908fced52951c13bc891f983708db9a0204082bb7fae3165f7d4db201048630942b8f264d49bc71128fd360b06955ad4e2981dfcaa61d76628328ee9ee32503002c00f30180002a010184bd060d00ffffffffffff09000000000000ffffffffffff54030000020000080211000001a20e0000350040ffffffffffff09000000ffffffffffff1a004008021100000101000000080211000000060000ffffffffffffbc0300000900000802110000004cc50000130000ffffffffffff05000000310000ffffffffffffffff0000180000ffffffffffff01000000360040ffffffffffff00080000ffffffffffff3a0000ffffffffffff1b000000100000ffffffffffffff0f0000110006020700651208021100000108021100000108021100000072060303030303032a01027e15d0080208021100000101000000ff7f000001000000dde9d38546487faaf9f998244428103f27aaca4a92ad9fdd971f3076f40262184e92c428f9b0f3813d7fe250d2e08b88c1a5a7306aaaa4d330b7d643f1a663eec89cbcf98b41da957ba717a13302bf7df813a3aac778b3f20a13e1c929e8e78f6014a6e6ac1cbcd8b61f0374fc039643fdba09cb7d822cab600c2a17c5c5c423b65ff519b0917a06dfe8b3b72a2763679ea309078e74eda0a3c0e3eb1be3651fc4d19072692c814f6d1b19cc0c334177fc6c3cbfacecf9b402d257ba7255aea4ab582588055c68caaf7f1748c615b1c5eb5fcdafb032b6211c58875fd60693d8a6e997c88eb03b2fe174e300060202020202020061000f00375b0401b7b57a689d2826dcb113274ce0a7779ae0a5eaa9097e91067c9025ef8212f1049f328e7af28980e08cb0e3625dd52fac8b04936fa5d7a8a8fc3012c28429567bfffec8336fecd6b4c55b16439b0315f902072dfd566fe3c70a00000060010e807c0002006a7a3fb70ae3ab7a8bedd57a1185a4ac80a5cc972206ff61b544eb849f8b9e3916044722f9e8954590458b85cafe738f9b35620080e337c001ca03b8e220e837c3efd93b9d1b0458005bc361734c7480f007c78b02170411cc4a691ebab1d4738ec62b8d81a5593a15e6b1078709f5996cc71f99b8737c9025000300da50b9268f0b5801d52ef4ad16ced2acf561e60d104a6811377cd71a7156a32351000000040001002e000200d5c771c0a984105e63f7b62847ac6152716bc2d7776024eae0e2acdfa5209cc1231d231acb998379b9e40000230002004f6599e8630a5ce273ddbca2be9f0b5deb25d9387aa0a07a353413cd17eae50050000200e5550e96968e91551d5a0cfaac51c0ef5e7da2d059766fa2859dc9fb4e0586fc5386581fe3aca6921fee9058cf43747d07abaa11c285523f1b87651a46a58a31cf37227d79f7da6ac843b6aa0400010004000100040001000400010045022a0029e12b0d66f2a95096ef820057168598995277c9c7e2be3cd409f42a1cd266a05ed9981e40c70e2df24052c2657d743c83076b0ba6f6a8645c270dd21a1f0423d11834f5844689096f99c2244e5684d8f8df17738dc449374e67b8c286cc44a834d0d8f0059106e68c58be918acbe8dbab1d51f4d9de1aa01884c47f9b049853d2c6573d939d74273a65811f20de1d4ba8f161bc28a0ba943eeaf5402410801bd5fee7bddd0faf951e0a9ea813e47a03112a7572a44a3699bfd8b0ae9be2ab6fc58fdb660c959e8ac0a2aec00a5329eeeb743ea3056f47b82e25a60644848188d7e5582d1a0c00070000008000000000fb007f0010000000010008000000027e150d050108021100000100000080bf0000000300000000060202020202026512505050505050ffffffffffffffffffffffff05e0f39a0870c659bfb997b5c1f1bf03a384e6677813f7d6c0cfc906a2034d02c1754582c8ecfe47f38b5e35d0541ffd9c1fae5346f93799c878d64826caadfa63cd7f00181ab928cad8ec04b6a0b7962204e0f8da481998c482d85755bffb307ada0b8dae40f5a14c8e6a3da14a7a237b0140450f3f2b3ad8e3d4d76a14d31878f0da87bc2d0e3dbb3d94d6d99fe3e4df053bfa54fcc1e3753c1ae61b4134de23d80b65d240a41aa4111175f3a74158263c65dcd1dbaf7d86475e99bcb11b446588cf0b275d15d514e95c1281e09352fd21ca7c019387d6dca441d8b4803ae4fa773c0401ffa9038325400602080211000000050000000802110000000400000007000000ffffffffffff030000000000002f008000831f000002080211000001020000000400000004000000ffffffffffff0d00000075080100722a00003a000014012a003e01027206030303030303040600034300080005e900f8099073075f8b882195ea2d6ba950c72341fe921954c83ff4bce4b9361cbf33d10367917e5e3d919b8788a8265ae76bf716c45682bcdb596dde9b59c5eb3c378668c041376b7a531dfd70c9a8c4ead84d3d28782950b71ca2c3281d61f85ed32faee3764e8058e35e4e0f8746a52966fdbe7121dfaf1041c16375134ee8719ccac2bb31621fcbb35260bfbbdf193cb4a4030c89ea96b4609d97fce9c8cbd4ee81f05c760ebcbf4662e14f2d7a0c91dc3d188885bfe52f5ef631bc833fadfebdcf0e38fec0422b830666226bed14136d8f0ffad73d61a7f355f0c380039ec26ad581122c0eb746808c100207263040e8bbd1a1a9b0d522e2dc6a0600ba0004000000ac000e0080040700ffffffffffff08021100000050505050505044000700000000000000ff0106000301ac04060b0bff030000055006e48642083fc40c8c06e1f99fd9908dbf5aa82edb39d8f035f12a892533a7afcd25c857f5ab9d78c10bddb22d6013c26fab61c830c98f7b846e2d6f5c29781acaeb60b2b9451eb8815d86eec30ff85f2a01042d1a2000060000000001000000010005000a000000010003000000c0760608011d000d00330491006be1b035c92a2465ab4df893bf373bb297215b0d5785754fa18636bc06c7179209f03166633e04c32686b4172610367b9e44d34d074cef9c08f3a2828fa4d80d8cae8292e20afcd089bd8ab2ddcbe7d3d17f93557bb35d0e8c828407d75db09c17d84d8efbc7d193245857c71081e1cd4178410b51def9817b58cdc543dc861cc2d284f970184018660700c49c626fad66e5d536258c2d81de990eff871eb533b4e2f86f27d333a37ed0963f0b6fcf445b26cd007b2747e44612943a29a155d6d07473913ae8befcdc3b4b3b7776636b923629287021e8937ccff6ed0ebd95aea7fef3d669d88ebf7ac6214c21a161890f5567588fecbe5d270a94e9e08507e4d13db37b024a3ac93cdb186216f3966d5937c41315407e0bc391d155e891b92ee6fc048e8aed8cd42b52a33536e70bab5f5f3243cf6ada6083c4d1760ada54090fdc3d437d4eca6edaade319b46a095a32395518cd1a49a178555a7feffd49b4669fe25be7111ec68515b748b7d8e74390eca0040a16c7fd5fd0875039359c68c53511af5f932101e7c6610ade0e31c9240296918677f93ab83f988e83f70a9e899fbec56b17b7b7a71241bdcdade70d285f80713133b0e5d0dfe458aeb7d1987524b64884e955b741708aaf051402079016932b12986facc0eb33ab9e9bf2b28c69be1e590837b6cd8dd62446cb63bbe7d0c3e5badfdc53c4dd947893e03da227b1da5de3f1f323f3a4642706b8953a2cdf7135169338600109c37fcaab496aef8f52f53828b9b03e46ca0dd86b2affdc3c4979c599f7a604681260ea1b13f3eb86ae36465c837cf21803adce1988afdf21fa84c89e45e5b7ba0ee87b77b8753ce36f1e42f280f4ee71e91ab72bb0e0d5c2ac39e15d60c04cbbd2bd10cf6bf134c25304420fdaed8313e8ad606fb13bac998319fc4f302af48a49f1aeb71cbe77a795789c824783f842f275596bcadc1d1cf53a79c92644392c19181b7e4afee676ed7c3803c6d53e28a6f4d98f851210b62f07267d6bd00f0f36cd8b8b31c5da1410044453b0d5b4c1b0d00d0e49589861a0e4ab878a1650db8d5d42fcfe179edf40ebb9ed835b245a1da0e8632498c9f5b256842ad63a3588df8ec95b8f65af9f70ac1dd590159c4d453af52e17dba119b8c21720bc35803534d9cb6d19d2fed012b3515458726d26b434014ba5234852df3e2305baab878602e332d6fe59ed929cfdcf026781c0d01c25dc11e512ac01f7845fc1fd4485c0c6d2ab705996ddd95036276e318c13f0f108a51b7aca506706236f1c6f5eb2548af387b478c117eadd0168c6be0ad7d8a3fe5cb7124ff8cdbf6293e524c0d852c2e173a21f317b0078dc4b9790ab5af075d1f103c2dbea877af893ff0025a5c579df2a76f84b4822668f9b487f5397701914dcbd5455c770a6967b3e8d68154d4f34c717acd2f857270cfb623f312991995a0b290a27771f51721e6ad3543b08b3cb57b9fb99bd7f3d3740d9e118aac037e4a3cb630062019100825101cff8e4d6e8e1a445603712ca4fd689c356597aa42e2901a2c1b5cc932ea71d50019f47143feecdd523afc22f1729ae4fecae089cc7112a395fc7b3910863698b834fe7d0257cd4a1fef72fac18713c8b4fce9e3dd67036d2265316cf1f1435f42551db24b80f6651ff9e4d80f2996177b502580c106458e2126fa59fadac75c5e5c11e76142d4e3267ec025514da1231c26c790c2382f5f3273a5939ac58dc662cad85a15cf4f69d3e8bbd076ded83388e73da4fdbb1a5e4cc3c62dfcb7274dde162c8cbf87cccfd5ce94219c3c185aa07c2a89f92f4caefed91a0d521a6785d42aab4d95528f09e659b8975e43f117ce1fd8d5bdccb0c50ed8764b5acaaf127e18ec36fd4903d348c460fd6f5623612b19f06f21f417a06e545e2995565266550b49c77a346c7e1e3ad6eb9168acb786da187aa39d8b7c2877a34ec05525f372e7a78632c2dc0caaa0ce588221dffb7d0be4516e8011eed59c10e000015020e00803c0500ffffffffffff080211000001e87999342f0b970d9b000000000000006400c14a0406d9fd08000900055705830a0068d2149bb79b311277195d2f89750ae5d7f5c127045428142fb67d22ac34ff426241f56a81c42a58aedb23c24e635d788362e6671e9ef239d12df14045d8868eb8feabbfc681cabee73255cbd98c6ac5d42c393c04010b78212d1a004002000001000000000001000100120000000600080000007072060303030303037107010101010108207606810231000000dd9bcdb4b89604c203899042332d1658b5f8ab91cf5103d6659d76f943734acf1003b6f90ce06b185cee1ea8dd23c409c163fe9028b4981d3c8510e9087f460b86f91269e22762cdc761eb51e4d162b28515ee71682382bbcab0189ee7a7d1ba95d60cb22282bd647366b9bf45ddae3282f3d405803649a50346d54186d06eb6a7b46f72932cc40805e1c34c5761fc68b1700ffc392edd2b6b835eddbeddb29ba86acc5a38f69de0732bdb201c880ee5622901004dbd98bbc3640a288bafdcdfc4c4cb1d219956a802b12601a4d83aa22997c8a3725fc6c556125efcd6eb715924e8083aaa81bd451c8b94c1bcef0f4b9975450cfeec3d0e7481425a7e39acd0b1fa867ca4c9d08266eb6222adf15ed05c132d83fdf5668a6ec2fb108a6369fad120f0ef73b3feb0dc6916d206f5455ed9a07f89ceae1041fac568f55e0383899eab7329e57316467909aac275687c56450000000902800007f4fe6a204601e88181b24540bafd76dd68f8bee9fe21e2d900e010a866fc2186d318b4471e2db45b590cf366a44dc5e9b6d6d546a6a943c01e044dde685204560dbb2e333bcde36c83a904f7ee24b2ea8a1ec3427a00035af7b0acaf9128fb8f2ea652adadd304967a0e0bc53783d8d940440ad7510a4a438d26b4cef5c26eccdea603d782e2f95f23cc9ad79cf5e1f8c75a046fbc9984a39eef97c10579a2583d250b8cd018f7bf318d8419e53b33f047156f7ee1c35fc4fc6234b7f6d012c344c34c2af9a0b3a45823e6670ef08c2fbdbd75ab529a35eb6594ec23b5ac6bac22835052fa205b87341b62170e619703ff595736cb6512a849c9bf0807ffffffffffff08021100000037f90708611ad00f9bf615b21552eb57e64fbb39ad79fc75e30b014ef25cce2f50441fe690947cb2d746e14c7996920350accd0ce7af89d0a68ee566392f4c23670892d11ca4a3f066284e591c96d5cb83a41ff5010bb19927b22d0a4e3b7e55e103000320246a34901712d4bc10d68a8e50f9b55a46067b63026e3c16d27a417e62c29d25021bb558ec51e8230dc7e3cd27da3349fee4f91ba465e6ddf774eafee601020bc70420a9aab177b877685abc6d1dc598061e47c5438fe35968dfd1b0cf0a52bd47ca1a01082cbbea517d730d9e032706a18905ea07c3b8d10b0466050c529cf46cd9b05e3457949746a3236a1a332826012b5563bf0f00000038050e0080b80800080211000001ffffffffffff0802110000005400f869098101000080000000006400000600060101010101010106988489369b1603010804061006fbff010406020000250300b6042a01022d1a100003ff7f00000000000000000300130000000100ae4d0000067206030303030303760601053e000200dd1d797d586829c8128bcc60ad78d8ecfff32569e070ff64c38177ed6e3f29dd3eb301faec3134a6fcd89b45ee4cde28f333333b79d3a0bcee87abc3f78068f6d01e50e2d9ab1c14e9ebe9f01b0f9a1af2012f3543529cc9f14376756ae082dda5a25f1945b946be4376f02051471075a38e0427478ea7ccb7f8e3a714922bd6c387c53000aa7036ad7ff2d514c2b5c9b37261080409dc858435c907fb86be44441e3c26317f82e770264ec15297eafa16276ce39abbdbd8a8af98ab964a519e188ee9aa7fc47e43974fc01d0e694cf5f237994c4de3f0cd977494061cf652db97b9515ba4a5ced500fa7286140f46189230f6cba0b4c6c9b07faa5049bff9778ebb791d3cbddda6f31d12738e06b77763851b21fbd316f2d26cff15cc59d8a3849e370597aa67a4e108a1674fd2298b16c10a88df47c83361e5c77cb5c2fcb61ac84d0efa89bff8ec1e760f9ef61b4237be71edc629c71d684cf90f00729275a3ff48c2b42d27cb06ed6e2234e9ec753ad144127486edc861db1fbf73d4b5cbb628759612ae4afedd5ba7faf34b546b43164c6e1d11b606d3be975283022693df608ffbefa3914955ee993c0218ddf882eeae9d7c69ef97fe4dec902b2c6c36f7df3d43089f2b39b0571a5d374ed5f894dec06f6b83d26af447bc05a27ed9987806033e3ebf74173b8df3fa86182b6c02aecfc33228fde719c072292c52df10e4d4b00471767b6d320105d4c31b43bf417890b8ddaf8af9a4d3d224ca94a61139b09486388c3ddb29cb4cd11c4de66e44e99efbc6f40921a3599fb5c882f96922cae3e4966146c9c153438036dfdd6fcaf4cf033a42d39e48a6db3d0f6f989ba0e739ff52f627cae124e50ef497fb5614fead8535a4153945163f206b9ded6f260379b8715e880e4f28fee86708e90630fb15520035f6c2d5db0ff0c46aa54d1cc2698307fd9ff6dd866d760455c923b32cc4e1e608bfc0cf1c9f14f7c88522c7a8f45cc0e0e0b74f95fd06cfbb715d3e6de510c0970ee1c4ea4634fbd59b28948831a51802c43f090971cf56f03aa07c10e0c4c3f53e1e3614b23fcb366892342d52aba24e4ca86c585c24437a4bf37f908cdd1a251318c94c5772dca92c69c13c0ffb75ff4b16b23c1f1abdcb405eddbe54d000d1e245c29eadb40637c9e98f6cd0c6ef7ca8b768e5ce5bb2f034c27ea9ad46e0f0190a133cf8c59b568c06b2d0e5f836f0b0bb35e2f587d31db7c1e30d1644c994caf6f13fe6971b998e199557ecda851ddbac66114af7b4af79afe3c081a5c06dd5ccddc1e41d22b2543ef59e12f8211439e579060b07a163bf0988924a2465ecf0fdcea4ffeca75411e56759ecacedf62ee204068b893299c9343c2ee12421bc0077c36ab3d186e3e6f4511c300f9df3b5dbb8359b9f3eebe897ddc7acecc05c928c0c97633650ca9b6bb3720e18e4d85a392cd765d4b85741d1a9bc9a3a4d9994fc83899179712b31c2992b0853d66b332683a548d43e0a2930a792cde0f492d2b8df9df355444761c6d344c8e73c5fd64048b7d82109e599adc195cead083c1ae19438ae6b97c4e5c7f02029b313f21fded7583b84dcce1cbe8f806ff1dac383dfff779c990dce4b471c99531ff25f16c80e8ccc0660832c145b4cf6fc28767a622e934460d6795d947921c76e81c1194c14a1c28ceca6244230e1e6976abb152289bf000f000005ef4610d50b82300308020002000008021100000003000000f8110000fbffffff0205ffffffffffff0500000001080211000000050000003e0102827d030406000001000802110000011edc000010b500000100008009000802110000000100000001ffffffffffff05000000050802110000010010000004080211000000070000000108021100000101000000000802110000010400000000ffffffffffff0609000005ffffffffffff0300000005ffffffffffff390c0000008200800083254009020802110000011ed40000080211000000040000000a00000008021100000108000000823b0409740a0000000802110000000000010001000000010b00000304ffffffffffff0200000005080211000000000000c001ffffffffffff0300000075180100090003002400afbfc17398def5ddf97a61e7276b731600008b02910035b1e875971af29aca05ef6fb4a95790a54a4b9f723e4566d00510a1bf60b918fcea43634d73ad953c41a11192c72ea2d09df92437c1cf99218ad66106d582f65037057b40e1ddf61f7bd2427b2683efa46d106dd7cd448368e41f70f9317494fda8084e4ee0ba7d69be289effd1b0d6f8196abb8184fd3f7ac8890ce2ac8f07e51253076eb46a8693dad12a56e617141daf3fc4c92588e47db18cb9c918c5e3eef379a52e6887d2d45afbc5ffd1de26982b3d27466e90cde37c756c469a28d4bea7ac4761c591b9fd7a5d41977e84130473a47352190571e920cd16cd1a09477b99e6cc4e6ada4af861f77e598f98dafe564f3812ce25ba4437c64b4bd854f34eec06f16ea840f2e91fbc5fb0e84cb6f3616bedf55223809b6dffacb291a0ecf375e5373997417d88857ad334c330022a95d065a0bf188d739c722a57c65cc89ad7dfb927f0495b6f78d0b09d1fee754e455e2e94172903e61893e38c3d7f861eaa8c2fc0de8781857dd77ac88d014a7c14ff80d26da19af0e70c8ff62844b856fb88bd09598d3b023b0cd2a231d984dc7f6d9d7aaabec3ce5fb2546bfa937b4a02141dc13cb86041b1af7b710b56044e3e40732d9f65428acfe0d31c39860ae2c6438fb3a1eafa2c7cc149456e83f4d674ef8f3e1892a00d889057fefe4a199931b62720a807b7fb92fcb983ac129c74864c807b6d493af799c1dd67ff278de9bbff42d643820f2c5d385e9d6ffee5cc3c8ab44f8b5040f6ac3b56e7f05a6585a620f2d26a9ffec57bacecbf39b5f947298a490b111b19f5f3f1c8b7d1ad9afafec48334e46fd74ee735511f35c0d72a81fe4b2c3d9bf1c61b26500eb607242636bbf64987b2f409d687478de3cd25d06949ff6e05455786961f96da81a5fe34c0784df47f02003f089100ca14564f20bf7fd9f3afc6d99c13a7242729bbe1fbad7e58a0de3ea1a22d7beeea38e85a70ebeb05c020456121a8ade6a054ad578c8f53e81dce01b26ddfa4cc0f7e234d82c414b1e164c2b689a4f6d5766907297b5d43a89e267bdeb2e63e151267c8d9f57f4ca88c8568884bc5d14890018fee2c7ae902401d95f35fc1ae4526c0b926e346b16711658ca1c97ef8c644bd8d7983eb79e0444ebb53edd3d56b045ed82a19730cd7db891e93927a06c88130922ef5d9b3e65b137bed724b5750acabf04936d651599fb30e1533802a74280ec430736df36c308511837bd6395b6dfa869123b1486c074d6108833ad82ecfc09ab5a18397af82cedc006954590b84d0930425180d0c0c767a4ebc5166b3ed64eb360848afc935622796893a329599766f1a1090c4a75c87f6d2842f6afa7408e2758a30ca7287469e1cdbea36ae301d69add75efcf5830eb60e426407e885657aac0b8b1ea1ede3a0cf892bd5cf5a52e974c6f608016c6d862d331ee1d1905c6adcf7b7bc0409ce361704bdd1284dde3fd061591a4e45caed76c67bfa344f0986fcb697e89b613ee24eeb0fed7cba1a317c08c2040c8152d64baaebd11f849d8f8e523a1b138ed71b1a4c15271964f5b7dfaf7046fd2153ac3ccada4b7fdd9667f08c0d1ad469cb114773d0f02859f54a4ee4c2f844ad26314cda62c793c0f3a0a684f61be86acdc90df542738e2717ea25ffad94b2c977c2cec9212607a57fcf588859fd7ce35b5dafa0dc86268b17e6ea8135854bbbfc7e4de798f13abac0ac2a105917769b665e7e1a1213381f44722c74f9350fca0ddcbdb3b56cdcac64dde2facbddfed35fa0b0ad9889d2fcdcb59a6b8a651250b4bc3ce23050fdf81534e521454ea8e0aa0f295bae0ccb0978b7dac8e2bd7c254f2f58c0b1a3727cfa35cb5fb542371d477d5b556a4809b3735608c1ca48c90024f56cf2e1e463e5c244acda4b6ba332fc308932e900e4874d76850e9ee3a899f76067e01e5eb71af4e3e35a9973861bb6460bfd781f713f97bd4b373d742c39f66cdac66c9634e5e76fce3a5da33d93687a1f20afcecbf2991eba1990cef77289605c88fc0bf5beba46dffeb293f0c5446434192171d2b396c8062fdab39c30f270912fca51af344f475a5775a1b5d0cc80f92421f35f344052d0dc59c51ec4fc6fe1b8f240e3f8bafa14b00ba8b8dda60e46120cc1f1ac406902fb07d8ea744dae5c02144c7637e712bde21b549b74784a467715c6e97368304475e6ecab30d77d9358c6a981d4eced410a925544c2c46c0b42f660d48fe6a70d295cabc545d356c0bf5d52ce6f2d1f6294e06c36aca0f37e97c8b13eb6ce360ba3e24dd710b82a64a713ba9140f1296d3ccaa3ec76cf0f6425b246ab9659c5453d74e7b951082c0c87f7ad6f7ac69473e21fd9d66a1c4557e9b3e8514f176477913e6a249069b4250af1ce5269812870f534a45dce8da4ad71af1570eb7699f65045b0b44472812f0e64a14f681a87541349ae1d684139e4611ff2aaa57f9e2c1d50ba4fdc01195a5becb4b452d5e6d6c7f84230eb8d0a64242c8168fbe2dff9c145be722f9f74d867381466707c98f25cf983bc45d2fc4e39883ad78d1dd194f268660f97f3c532de694f80a92092419e8c5c88118f5597a66bfec9c64619623a40a21f529e821fc1afd20c396cc8a2d9075a7e24e584045848304eab24c88becfaf2bdea69ddd6afe7c5a954ebb35850f28b2e821fe18512b4dfc409f7cbf250f947c93ca528cf16c924c2a6cc2524fb7fac0400cf638276d00161e3d1cf563e2be8d9fa60883738ce17cd1394c43ec3fce19c21c0f3e70e0bd655a0e006360ed8dc3d542ef585cbd0663064cf59f38fc4cbcb6b8a7d7ea82ed6e0e62566be928876e814d41bff50f854d892144ed88ac08e4db75620390a29b7a74d70900067950000000000000000213f2241c2ddac553584b794d48ef9d80ac7fc3982c7cc1096b4aeb5632c188a386e27d577290a941e36db18ecea54d2c884c1fcf16f9b64aa208580700d8ae74ef684c15bc96de3f97fc560e4942c82a07f4da36fc3a9b1f1cfccd3428618a5be6736bde1aba64095673535b054ec75d138128430283e3d9dbc05ffb33a4bbb36b3b1f739d684a53e098da8b06ac5769db3a94ed94f80a645f2d8568f23e0c99f708e02336336aa61957aeede2000e90cce9b4a9f672111d3f2554b249bfbc99c1647c94e4301b2c5530d63931b37127cfc8a29159768777d1dd498970576569e51a77b9948dd6b5fe104592b05b33849a4f0f68bdf16f4e41eb76c7b2b2bd97c202975e185340bf2be425ef95b41769f0db5bb3813225d0a7af638c4e3f29a2873e2848d96117b2efef5e899c54c0b35ddeec5029579c4e3fa38f57247d609871b5aa8d2b867dd9596ae8fe594390b4f49d963bb1c0e2c56291f3a384ccc41e811fbe695ccbc2d6e36a2c9217c0f527c4c840852d4130d502d5afb678ebe3bf67b58a5c6ceb49bc5af4b5b9659a64985fdfaca59731727c590a810c871199883d62071f0b356db2569d85c5ae86b10184a95578d205e29684bff57c58d07c59360b94ea3ef59ad40561137d13750da8da60e12bb9e3d487b01f93532a9e45cd523c9af4e1016147b7ded381b0ed578b7812276d1d873c64559418d9164d3cb055d38b4354fdbf79005deab538937012f1c012facf05d114947ed38e4c52ca8a604dc0fafc7d7ee29750574b76c12c97b0e994842201f886442d211e8eabda0e4c7f13c9d8c5507129b50592e7d718eb0d48ceaa8394e56924fe2982245c45b4b718b9c41677144b00dbdf4c83224d708e54a7eae62dd53e11cec06f53a0647c0a422fc315c6932442c4546e5bc6186c0b7774a1461335fbc4a30bc692140f44009be5593c75710a78bf08da4f5f3ba18d07990359a6547abf13d1ae3728d2a774e0877023461f3909d80afac00c701910077e22cf76a4655c5711df3868e3e9e47e940447b5209aaa9a0f81f810f7e71a2ffcfb75b0754d47d5bfcd875e8468456da0883d55cc04820ad914ee099a1a8d71c5761afeae65103464e52d41776e64f73aea2236456aa80531bd7a9a5312ef1a6173e540cfd0e9c7a2dc2b11a238a3391208c7e69699bfe179b220745d4be7d1cb4803a25c907cc845957eeafd94a6d6fdc454015d4aedcf464bb6468012dc3af64c47bbea74682d7bbcd4d4aeb69d814c0de0b51d70586cb41463c25af692491ab204d2c7d21b88ebcc5e8a21a604a027b3fc8f56ada1551a32c903e1a6d7972a2f3ad39c6c529d97136dccb13b70f5cf1c8d37e4dbb5e97f2c50a76fc565a4b1641b121eb98e83e6aedf954574aacb82b7ef2a7b5a1ec1f176778848908f7bb0068090bfa19721bba91a25830ef615655abdcc5dfb12f65c60cf0bf7d9d11763831eb205b170daeb557e24052f04cc77604a105fb1d233a9729e07a2689a2edb0f61e245d8cdd2a3777accc6ee07c02bd2cbad2f93529ab4fa579323d995b0b05e6d2d8aaf62c62ea6628657d89f3ccf8ac114004755b55bc5b870ab009f75dcdee8e88020d92a1200c62684510dd8b8653edf1c31bfdeee985485be434abf833480038012a000006020202020202ddd107b0e7b333e97dd64f36004a75bc2e04088350d1d117d802fc5b15fe7701cab6aee1e4e6a3bbf7ba8e5bfe483fc2169165713a45a9ef6a54b0999e3a86ae98f988b6b54886de66327ea49ff1adb1cca15f0eeb8b3a3dd8720a0d600ca88142df9cbf13110f94fb88be670f74a973d2c024fcbb9d56ce03fa94a2f3f0843ec7f4a046d72cc288a00bc4bfb18e5688263c672ef46e6fe75bc18e402d1eb71f196d72e3322b4928cf072cd64ab9872a3d11df4bb919330fa777902583c58ebfb79374638eda439220cba3beb0ca00ca0e55a672060303030303032635010d038360ae78cab2939637b7f4c9db5febff60952bb19b9f6be617c6cc85b1b1abe922ff89939028ffc29307bb3121d8fcf1495b8c18b80791e6a6c6b4f7782f8d6513a660a54b0179924a284b9325000f00840201002a01048c18af0481a417edc3aeeebc513eb2c04ad65a25612f9eec40bd000000b4020e80040001006b00020081952140b787894ead2189492facabe3add3d2f493ade615258847e0a6a8a6a240281029734b3b3644424223e768ec12b8199f6735f796df13c0d6dc573273840c5dc909ad9579fb9faa2e795816920b52ba5a1d1c4fcfad9214b54253d2880b998793ed2d9c1e009b00020026249620741339752184ae5921280be5d02acedc054122cbb257895ca11684eaefbbf6a689b560ff674261dd714c9f170414f8a958fef942d35719e9b35955186d78e2ad890c19ec6694516966ff687ccf71a7775fd7e7d96e9293ba69e260a9d50ade76201f6d72e70aecf3d94f55c185df44c2cb1a9af4ac1fcb59a71449d9acb1f215789d9d3625567c4191e9816077ddae564f905400fc0002003afa2fc1edacff7b1ed8f6000e67b4dfa02de920595db04f32e0df1ee723ed97935440b25028e420c4cf3c845ad032cc00aa335c1160e5783d9b22d24d64e20d5479d048b6b24b01fd0fe1da57029caa6eed2ae76c1b318f2289118abfb60853a3f670718aa82407fa761f58e546e5b99ee7f851ae4ed332545ff38e559356d0b24e8faa5fea856f79a5b0a6f6e9aa2745d535b4f08604fb2f008ea7fd3af3e52df648a77712e9a9d5a3f933273c4c6c1407cde21f0b79e44001e2c8c67f51c9fc2a19176fdd8d8e25a36c8b203e7ddc686bf439fd09a00a28db9e94bf07dd3d35f9e2af7e2e4c5e40ff638593c6920d9e755f53142921a3a50002007dbb2333a9ab0a07da45f5b6a49df2ee7377182cda0a2022c4bc0652aff9751167d4a0da9770b4216fc6f30c2e939f8b3bdb5a418e30fd1217a0710382fdcf312b582e2f481f9dcf8ac7965460b1eef2ee449fdce0ceaf38486d41b4976a28042425f49d99d6ca19ee0483b536f8a0e43f5033499e1713cad034306ec15b8f298827dc864fe4636668739a8956896e69532dad0980032f6b474e79273a2aa295930000000c022a001001e937e41609023f1849d8ae5c1aac2ef278407f8c1e7720a17ad5e2fa44e54ce2cfb0f156c3157de09461525bb030a393566a2842e129dc4cfdf7a828864a5782d3ba9f7c7aeb63b6e3d835c1b22dbcca17d7e83308040fcf253631ac5855d7c102e4e89743e4010376b5760108502434ee3f22128b03000328eeafce2f75ea283fcf9dce7aafb3664538b5a5d2dde4c453ddbef3337a6820e463d41d1c8d7bd2a50107c2f689d210e261011a5076a8a67d5237b57b6c455d5a01912c3e4002c6cc8557e3f2d10412f25379d61894f3b55b255f2e924d4413fddc030bcdf053c8658d5a2f6abc5c841d03130008021100000002000000270000080211000000090000000f00000802110000011e020000270040080211000001ff03000008021100000023000008021100000000000080170000ffffffffffff070000000d0000080211000000100000003500400802110000000100008008021100000011004008021100000004000000080211000000320000ffffffffffff080000001d0000ffffffffffffffffffff160040080211000001050000000802110000010b0000ffffffffffff0f00000040004008021100000007000000ffffffffffff170000080211000000f21700000b0000080211000001000000003a0000080211000001030000003e004008021100000002000000080211000000160000080211000001030000004000d20080007e15560cbc080211000001000000000400000005000000379c0503f1dae8fe6003e9012ca343e560566ddc0373c70c8d0bd704c05fe4d20f6bf3b36040fd734fea2c64aa3d9dc08104d4e5b023642ee7af9a98067b14b6125e54d6cad9f2dbb9ed3c40046f26538b382def0221f53caa214fcfcab9e5880258f7a11caf811e3832bc17908541b87922425f1248ac031583b35e33421a3b6f7e9e38011db953c82d65f28c17040eee4b7c3875fcb0077c38252217f83c040003b37d25030004fe3e01033e010304060002ff7f0900000019000f00250300400975080000ff01050033003c04011a000900000080020e8004000100f2000200b062e6986e453b8730322f459865769720b61f94c76a2943af35260cbb974a3e39047b64976e7c2868b0f11b20e1b70c55aed808dc57e2bfb4981d15b1b5f49b085caabf31ca9a71f22059b889e73ab62fa4a2b084d4c6200f99410f1dc49568719fac50d28ca8c6a032c227c0b1bcd4ad52db49c8ae3e01e2e3f62af4fa54dd5d88123281c209f59e08aab05941e568e664291d40b658f1c032f0a5a730b8f317d157aa15f870beaed97f721e05a15b59ad00c0b1c3e9d50cecf96d2a0333e40a4482aac6be3050e9b2e43051e9df10e8bdf90324df3617704ecbf87e342bedb36bdb5d508f7a00157a4602ff11000013000300377049b0ea80377b28b3110fd32f6e000500020065000000080003004f06cfc204000100fa00030005892f00ba1d8983ada875f7e7fbf47bd6c4fc696b539f7e2e61147f4fc866a7eeb5531d936a40148b62f7088c6ee2d7486119e68555d29ee11f6297999d30886c50e721ac547b164c44625fec8f4e4efaa2054873a95847bf6af5e4d842411665cbfd8b27c186ad269d560570df3a94c90bc690b40523310d8748e85b5f9fbcaf928f10cdcd90ef2690a8ddce07a5be19a946f69230e5ba5ee1fcab4328b95361dc693b5e46043cbf4d3bb260089727d1329b8cd3669274f6fdbdb88c6745665fb6ab20f47b57c4b2bb37081f45f34765cc00e56cbcb7c0ace88a24ae0e84f14d1c72e5f0000a07d6cb2e1b0b1251fb4409a9b666790000040001004800020070af10e145d80400b4c1caaeebd1e12824b4310a9cf15355d8b4d2ec4176177081c2591280c5347ef29c73e141f9c06d55d135cb127d046e2d277a1e44bde1cf5f210c861200030031bde6a70018514bf003b13c59ff00000c007f0004060324100005003a010e0080b80700080211000000ffffffffffff50505050505003000e00c30001000000000000000000400005a607e80290c6096731f20ecd36cfc60cf70043f5314ff01c967eeed067e7b663957338bc627a6affe82fc77223a6c6813011d08235e0ae7d19c72e32b79fb44785e2f352661f69b59bdb854fe1cb734392b7415d3103ac4710b0ed84003f833631cce8a91ea62bca25148022ccaf5f087e43897728334527c270d701d36fd573b05ab250e6f69ea69f18c6c8a6c7641a40694d5adb9f028c86a5428c3cbfaefb0181c244db7add7206030303030303710700010100010508dd53fb12226790b25e3db1fc3c208dc32f09d6621a5d35316e66d1776ee405742a3be5c9723cca4ab87f5dc90e5c4a2b7cd303cb443cf55639e717edc81a7ba4ce792b5a9331f048c9bfd15f9edae8679ffd8b33eb0000420180002d1a08001f00000000000000802b0002001e000000010001000000b475160100ffffff0343854713975d718bc07805f0ef6b569972060303030303030006010101010101680409000200dd6dac98ccb3bb0341836e8e3dc6c5144fd322e4778b8effd86b0d48055f88981daa7f81a4b3501fd98cd495eabcfdd713b96991be8e5bfd87d93297b3c4ec80105c528463b20c340797c9caa869e7ab3ce1eab7a4cdfc52624f14ea32638e8b8c74b374c48ba5bb36b58672fc94a0027e144a02eb308e3d176962dd943b624edb87408c4eb099b5d89994f2c8c269cadee8b41475fdde0bdcd44d1185853a05eecd7a5d5317ac5860eb267aebc18ba1deb8867658a7fc6d35b89156e67b96985ec0b6b005791ee770fbf927d6519b694cfe53585615a96e6e7dbba2056a13fe436d9c21d11944a39691f372cb14d6010348e08c00002c020e008030f900080211000001ffffffffffff0802110000014d000900000000000000010040000301092a01052d1a020008e0090000000000000800120013000000070400000000a47206030303030303dda670588a4cc971350a0d454be9795dcb827e3a5d994c21ac4d16b78ff9f4e658d3e3b24466f9af328f110672f895b76d8959af37cce3fcf14415b18481138c6f0d7ed90e66bb891cb65e27c886c186435166be37694b715651f7942dcd142757918b3c06a9ea41409926b8fbe5bde3327e2da3b9ee42a0e2c1efaac9f8baf8b91229692a8d7f3f2eb6900b65c29c45f8e21cbfee6473ae74e23a4f339ee5728115548ef485147bddb5427338c7f1c0694846627a4cff70f907ce0a78a02cd66a686ae907acc431f2319d09e8f711f76fdc112244e8f61a951d203ca8c93e6f98294f3ef19bc13f31ba06fe6418173b37e8f5df8826a172eba7a19cf71b641efaaf235dcc8b7245aa84a440a3da9355e1be4e6367211782ba8f484b3abef4bb1f9a2b93be85729c970fa1586db17b5db17be020791e8a05190ba89ed0b94c6873027797a7c8dc23c895b11bd07f67e4c52227477de3762b222071260bf35edd79aa62cdfb3fe42265ce75d68aa28806a021d327682162742e8ea9d3d102fea9c31855bd3cedbadf40f74cf16417eb8d67ae4597f2ac56ca7e3ce70b91056bbfca05c7da73b10eab9e7ca2e2f0860e52c5645695b3e5e8b1c95cfdc56b2968f846ad4dc06161574e0f4484c1ae44c701cf30d4d9624070c5cc65a5089100b7ecb40e4bafc5156ce5d69d0afe14d0b18ca6c1cf12c41796d0684b4fc8cdd576c1ce9ccc24dd43120dc135bd02e07bce24e51c93ec3de67049ef4b358435a174accd0d04c0de6b915754f5c8ab0fc9ebbe030c3ab392279fa626a6fd33c352ec9c5f0f75f64567263cc262654bf21bf66975fbaa9e5e3e5aa3f912ec28551dad7411ef188139686c5a9f69bee12650c844aeefa78cfbd9f4c76abde3756bb9e488cdd69bb0747aa1863f8b3e8c5759fae438b92d31cf91c478607dd3246967761401210f62b4f247c2a892d557d17d016e124cc902053fcc4ab60a47189a8ecb0d40d6f47e0e6ac542bba99ea7959b009b8f61442246f8d93c3fb96856f16bf9bd541991f601d13228d5bc6dae0270ec1b5f63822de915490aca481f2052a3c537a0224b6cf5068bcf985a0cb8111337f10ece0cc52cab4e8aaeed0b286b4a65d5d0a94d851edaf058410142a46047c4b895c3289adefea83920936461d45e08dc5ac44c6c6d982604bf3de1341cb93174c20181609de6041d57278060fb1679c3f4e8405422037efd7e8c68cee6a48115962872d31082b3a7119424de7b51e386c9208c3f9b9d326278e51a94f04bd95ea657dcb4bb1c1972408cf4b28ecef0a2ad14ddf6c780ac95f8c762984791aff4f8784d3183261852b6063aeac37cdfcf6a5130eb68d3b5a2d459924eb9bc62f376613868ad9d149813bea7486aaef0bdd87d1b23623e44caa156a5f6be9fb091b0006f5c753eb83db9db272c790737c78f10712dcc66b72bfa515771e5b6fa5aeb860afc355204513bc1c204ffbe61f8526f255ad470301039f2b50df79b1f3e38101a1352831466ce0de6f3a2183379c6e072edaf4ae37ed72b91793286ebaf9e29d6108304698e4f0e05af09927a00108f265ea3b0f4c553152961dbc93b5ee087d47e3b934d6e48b4119d705a504e229ae8503fa1d9079cda3f34a76610e69304d41e673b4358087519dee7dce8396d1b4e211ce158dcd4a5d7e7cd8537669e57b33c342124a6a7e5efb8b6f506c0e311f98799ef81b8bb75e7603a8bc08dbf11dd2cc55d9a2060b7cefe079d442fc91112ace34f235324524afea16593287605aeebb527b6a448747b0f5e34b4b2b2bf63234ebc0161d08e33f9aa7b7649135813766d98b06e36426af100b1c33b30df051967fa94c0fad969589fff5af15997926c52aead6fcaa249a778f1597457c9061be484ace9233bbce9638f3493dc480e5c03f854aec7f64be31df7be8cd1e995cc170fd301e95cc617c2408489ce1c55520af23ba2b35e3d95ac409f0b072d0cf2592bec8e6f8b5972e43412e6124b34c74fe7dbfa9b003b1492af426aaadf7042b78d3f0295eaa936971850ab3bef7cec0820ffb0035506d3fe46492c4edfabd63fb31fa33310b3d55c370a9ce855e409094d96924ce05362b21d1289ad4b5179c9f7bf12067a4bbe49e1fbea86a5c5cdc8fdc164df1804d9cc9108403d54fc766c61bcae6cab0cc3a10d28ac2afff1e64a670fb7680a79f675894be09b44447b49233b85c7c89023ad62a4399d6948b2b67b93a77ea121d30690bc326e75bbf5aa97784ec67099074629820a74c6257c5a9cc265c54b6836f19a56c3a34e76dac3ba244f001e68319a1752aa12dce6ca1f1c600fc2ac60c5d62439d7f8f47729c33a027595696c3430cc7fd71c22405f766e92ba9c567efc8a18add8c78439e4123366b2262c7a6e9b7e5fe19481f0f447201c8f109b9ab3c81218613a614e209cfce652c52db7e19d39a429b3225de6698c21685744ad232fad862d37d1a623abe355326c8c14fbc9c204a58e8269b8b40d4fc8871f58339b311b6906d4c7e2af21d99609b7ffd15e04f8a697f1903197910864935b63c3b9a8cd0cbd23868bd6cb20cb2d506bb38136160af2797109d8e4439b3c96c698c1f1916e4baf162b01dacfb7fac99fc23999b933381c61701c603cc1c2427ff73bfadb35c9d7ea73385bfe92f4f84512b167e46a1cb7c4e47373295a916a1068e25e52838917f64dc5b3dc5ae82b0400c43115926e8a61cad770aacc18de10e5268a40d6a1233e24e32257b5f6583fe18bbeab8a21d5e13cdd67e12da971109765590a30ca294e07031a2105ebd7b25df44d9be77e8fb45812d89f9ab102c263223c45ac57c015b712551b91f3b0b79258429398786b99f50b86def033a8a0a7ab0b2daf85fec42045f410e4b33155f04becdc565982c1cf03aed1ddec108afd18a830468543c7d0e4b7343b744730bffac344b662a22d90d86c5e6dab81b31ed194c0c45543f23a0198f6491688541079bddc1814117cdf29c33eaecffea26c5441daf6873593cdd1d90fa96ccf06210464a70535bbbe35db4713679d6deebb9cfd487fae60330e08aff8f123218ebdcb8798efecd2caacc9585b5bfb0aff0b908164830829800b6250bf703cb1e5570ea994b49dc69f98c1a5881c005f8f307ce2814fd898b0a4f701b6e24c12a3aaafb8031c0db0f46d23632ae4b14c9d89812d2494dcf5b97793154e34041e37f32fa11461cf971f8b25a40fb7e771ac41aa061b5a1db14fab287139041dae163b250aecc13075f30b416184217f4de51e03644d17b8a7a25dccea01960aa3f12737bdd1e369e329315d061f8c80226b606c81f17c8709c6d8742d9fcbf9c07c7ce0d6394e46bffca74850607e696fbbf0429426e2eddbf32b0002594866cfd001704ce871e817662a5eda3ea304cf92bfc9d1716529bc469401fb1240b7092170f1b2073af81f6a0bf24b4b3588eab94faf5cf6e39e02fecb87980f55249bcd39a549b49da069999c6c9f1282b3bca92151eadf5e8c883ad8f3c0387c1545714198614c9d069d7d2418205c474c5d7b8508013b8d3403feb92100be1210b64c62ba96bf921f3dc091e83ee2661214035e7e6f77b5850dbc02ae7d5a06102753380055913d30ffed2c120a9fe2762d467c95303bb7eb7f7df626636770f832aad96c9f4ccba76c00b5366b85b399cd0613647c6928a47e9b3c877898123d37b5c4a3001969e720fed25f521ed374996828880e85bf4d0be0429c593513b0bf6007dc1feb7f65aeabf7dad2e04558f0cde8a9a0930000001400bb00ff01faff0500020006000f0000000800"], 0x415c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) (async) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) (async) unshare(0x22020600) 845.082282ms ago: executing program 2 (id=1445): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000200)={@initdev={0xfe, 0x88, '\x00', 0xfc, 0x0}, 0x800, 0x0, 0x3, 0x1, 0x0, 0x4}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x380000, @rand_addr=' \x01\x00'}, 0x1c) r1 = socket(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r3, r2, 0x80000001, 0x0) vmsplice(r4, &(0x7f0000000380)=[{&(0x7f0000013580)='\r', 0x1}], 0x1, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xe, 0xfff3}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x2, '\x00', 0x1ff, 0xf, 0x4}}}}]}, 0x48}}, 0x4000000) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000003c0)={{{@in6=@private0, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@private}}, &(0x7f00000000c0)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private=0xa010102, @in=@loopback, 0x4e23, 0x5, 0x4e24, 0x28, 0x2, 0xb6426043d8827d9e, 0xa0, 0x2, r5, r6}, {0x196, 0x1072, 0x5, 0x5, 0x3f, 0x2, 0x5, 0x4}, {0x8001, 0x7ff, 0xe9, 0x54}, 0x2, 0x6e6bbf, 0x2, 0x1, 0x1}, {{@in6=@local, 0x4d3, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3501, 0x3, 0x1, 0xdb, 0x2, 0x6, 0xe0000}}, 0xe8) 555.319497ms ago: executing program 4 (id=1446): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000480)=""/176, 0xb0}, {&(0x7f0000000640)=""/234, 0xea}, {&(0x7f0000000e40)=""/187, 0xbb}, {&(0x7f0000000340)=""/213, 0xd5}, {&(0x7f0000000880)=""/189, 0xbd}, {&(0x7f0000000b00)=""/155, 0x9b}, {&(0x7f0000002a00)=""/4060, 0xfdc}, {&(0x7f0000000140)=""/123, 0x7b}], 0x8}, 0x2000) 554.825138ms ago: executing program 1 (id=1447): socket$igmp6(0xa, 0x3, 0x2) unshare(0x20000400) r0 = epoll_create1(0x0) epoll_pwait(r0, 0xfffffffffffffffc, 0x40, 0x8000005, 0x0, 0x0) (async) epoll_pwait(r0, 0xfffffffffffffffc, 0x40, 0x8000005, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) epoll_create1(0x80000) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="6a0e6435f82b96e120e95ef657c67f3804ab3fd20f854380e05a23b6758439b1bcc2af4612a9ffbedef954ca796197b2ad54eb4aa5e40f7e0679b02c55444cd757567b124e1c78808a05eac11e93d4de328758952e00000000", 0x59) socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000010000507001000000004000000000000", @ANYRES32=r4, @ANYBLOB="00000016010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="68000000100039042cbd7000eaffffff000003e4", @ANYRES32=r4, @ANYBLOB="83000400000000004800128008000100736974003c0002800500090029000000190010"], 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) 510.902371ms ago: executing program 0 (id=1448): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000140), 0x10) sendmmsg$sock(r1, &(0x7f0000003180)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000002c0)="024468f75872dc275c4a865167ce141180f86d6d2d2b667592a3c33936462143e78071d6c161acbb6e42171be6f3bb2c71676866c351e658a3e643", 0x3b}], 0x1}}], 0x1, 0x200000c1) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001800)=ANY=[@ANYBLOB="7eee16b5ff4f"], 0x14}, 0x1, 0x0, 0x0, 0x20008004}, 0x20004000) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_256={{0x303, 0x36}, "f1ff5ef2fe010017", "9e8ecc7bb5352776725e1047711330ff2bb17b5508000000000000009bc400", "dc5d3f00", "46b0dc72b7b1d30e"}, 0x38) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) sendfile(r3, r3, 0x0, 0x856) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x40}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x24, 0x0, 0xa, 0x401, 0x0, 0x0, {0x3}, [@NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x98}, 0x1, 0x0, 0x0, 0x48c0}, 0x0) 484.597564ms ago: executing program 3 (id=1449): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a44, 0x1700) (async) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000002740)=ANY=[], 0x14}], 0x1, 0x0, 0x0, 0x44100}, 0x0) (async) recvmsg(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x12000) (async, rerun: 32) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (rerun: 32) write$cgroup_type(r2, &(0x7f00000000c0), 0x9) (async) sendfile(r2, r0, 0x0, 0x10000) 421.525067ms ago: executing program 4 (id=1450): socket$packet(0x11, 0x2, 0x300) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000ce34000000000000000000850000002f00000095"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe6, 0x847b023adc5ee2e2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000a80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r2, 0x0, 0xd}, 0x18) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x14}}, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000040)=0x8, 0x4) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$unix(r4, &(0x7f0000000100)=@abs={0x27}, 0x6e) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) unshare(0x22020600) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c80)={{0x14}, [@NFT_MSG_NEWTABLE={0xc8, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_TABLE_USERDATA={0xb3, 0x6, "eec67b77d3a92a43385db73ab7860a3828e10644459c7fadf1ffc278b2d87f3485451692e8aef4cea8496c095023c2229f7dffe23cb23ab77582d330ab5237c894eb39147514de395d6df52a5674d37ffbb46b5863527b90444bd1b3414ba8a0a74e01630aab6d9a6a3f51520e0db003d7cd8e614baf2add00e5368196c2da2bdea040edbd077e5a1056df8c90462bc7e853a5e0252c0da9d3ee36aaa1704ee2aca58722ca5f0770b0c0151ac70b57"}]}, @NFT_MSG_DELSET={0x68, 0xb, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_SET_EXPRESSIONS={0x2c, 0x12, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_QTHRESHOLD={0x6, 0x4, 0x1, 0x0, 0x7}]}}}, {0x10, 0x1, 0x0, 0x1, @lookup={{0xb}, @void}}]}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x20}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xf}, @NFTA_SET_EXPR={0x18, 0x11, 0x0, 0x1, @flow_offload={{0x11}, @void}}]}, @NFT_MSG_DELCHAIN={0x28, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2002}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x180}}, 0x0) r7 = socket(0x10, 0x3, 0x0) write(r7, &(0x7f0000000580)="240000001e005f031400ff01000000f80700b3586ff606c2e553797c080008e467dc0000", 0x24) recvmmsg(r7, &(0x7f0000005180), 0x400000000000166, 0x1a000, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000001c0)={0xffffffffffffffff}, 0x4) accept4$ax25(r7, &(0x7f0000000400)={{0x3, @null}, [@remote, @null, @bcast, @null, @rose, @remote, @default, @netrom]}, &(0x7f0000000180)=0x75, 0x800) ioctl$sock_netdev_private(r5, 0x8914, &(0x7f0000000000)) r8 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@null, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) ioctl$sock_rose_SIOCDELRT(r8, 0x890c, &(0x7f00000000c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x6, @null, @bpq0, 0x1, [@bcast, @bcast, @default, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]}) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0xcf}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_MCAST_STATS_ENABLED={0x5, 0x2a, 0xff}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x48105}, 0x0) 279.131764ms ago: executing program 1 (id=1451): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r1}, &(0x7f00000006c0), &(0x7f0000000700)}, 0x20) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r3, 0x890b, &(0x7f0000000280)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0xffff, 'syz1\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xfffffdbd, 0x0, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r4, 0x0, 0x0, 0x20004041, 0x0, 0x0) connect$inet6(r4, 0x0, 0x0) close(r4) socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000100)={0x0, 0xffffedcffff, 0x1000, 0xffffffff, 0x1}, 0x20) r5 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000200)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x5, 0x13, r8, 0x1d20b000) ioctl$FS_IOC_RESVSP(r8, 0x40305829, &(0x7f00000000c0)={0x604, 0x2, 0x3, 0xffffffff}) 273.77058ms ago: executing program 0 (id=1452): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000008c0)=@newsa={0x17c, 0x10, 0x1, 0x0, 0x25dfdbfc, {{@in=@empty, @in6=@dev={0xfe, 0x80, '\x00', 0x16}, 0x0, 0x0, 0x81e, 0x4, 0x0, 0x20, 0x80, 0x21}, {@in=@multicast1, 0x0, 0x33}, @in=@loopback, {0x401, 0x0, 0x8, 0x0, 0xffffffff, 0x3, 0x0, 0x8000000}, {0xfffffffffffffffd, 0x0, 0xfffffffffffffffd, 0x80000001}, {0x0, 0x1, 0xfffffffc}, 0x0, 0x0, 0xa, 0x4, 0x1, 0x40}, [@algo_auth={0x89, 0x1, {{'rmd160\x00'}, 0x208, "d5deb33e8d02d5b4c6cdd277a6d0adde7a89a2677f61d0a96eb8706a52b9fbdc312b5aeab8894c493c358ef76ec179b21865e1b6f29b2da7d564f2bcd96ec67ffc"}}]}, 0x17c}, 0x1, 0x0, 0x0, 0x24040021}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), r2) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="250300000000140001800d"], 0x28}}, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x18, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x81}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) sendmsg$NL80211_CMD_SET_POWER_SAVE(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x40, r5, 0x100, 0xc5f1, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x3, 0x2}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 196.745014ms ago: executing program 0 (id=1453): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f00000006c0), 0x10) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000f80)={{{@in6=@dev, @in=@broadcast}}, {{@in6=@private0}, 0x0, @in6=@dev}}, &(0x7f0000000040)=0xe8) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b70000000c000000bca30000000000002403000020feffff620af8fff8ffffff71a4f8ff000000001f03000000000000e5000300000000002604fdffff02000014010000033800001d130000000000007a0a00fe0000001f0f14000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61623604000000000000006a89adaf17b0a6041bdeebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564163427afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101a3062cd54f9ff51d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a90144022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab540b8d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb11883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcd857ab15e355713767c536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ced301efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0981000000000000ff0f40b1888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fc08001011e32f80fb60e14b9eee094277bbc170882c8890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e3f753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bb25b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963342aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b6ef9d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec035d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b8074bf7df8b5e783637da740800000000000000c55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a2740000000000000000000000000000000000000000000a0009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4100260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb0000000000000005375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d34d3757b1450fdb0a9a69f432e277f3a0386eb2bd3305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07618b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e040000003c3ffad44d2a376def42e41e9fc31678257e040fa7cf32c221aaac08000000000000001a00000000000000000000173570f0c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d641ef02e4d5295d756e110522a7a945b93fb705b95b6aae27a8fb33732ce1da1c0b1af8eb9222a06e984ab1e6984c8bdc12360627137ab67b6b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481efe46a4ce86be0b1d8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0c6cb4bed8594a39bd76d3ef8a7ab014e787596db796bd93a36c2880423291e3bccc86f66ba792ff4d87b3f80e5908779e51c5e9055fc5b23605cd000c723187ef09dcf4b07b06a9342f3f62ee7acddff292082c1f4d8eb9561f80873a09a1ae0c9af1121175e5600f43a1179484502009759264a5729f07c2b218fa36ba2316a99aaad0130df83d0bda1e711290f78c143ea143967b00adcd77e6ad5e48d839ea61aadb83e4d071c54691924a3830d3e7b5c198bb0ed623153590000000000000000004b985ea1702f34f2f85b168c083e810ed567e3f1979b9ed1a4bf6a10dac825c96a0828b335de445a4880bb6474157efd1a72ca46ae4cbe3ab648c9bc4867a5a4cb87d7d6d55475b34b3cb6aa9e2337d4e04a37e35109752522ac9b186ddd80c47da6a2f4ef7bb909c975520000000000000000000000219cf5c1376ab33786f6b856d354e90a2733f78f2d188057cead3480eade49d55b770fad7fa000d23da6275768810b6b2df91d3a991ea98d929d271696c258d5b735d5db11df434e7dd1b7c1ca05cea3977df564115f4ec6ffab1d2ff8a642ca50934b3fbe44b0abeba9df209566984a29dfc0466e439a94e177b3c4d5f6e92b8176b9d6ddeeeb196fa964217f88e1acc180aaa4"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x301, 0x0, 0x0, 0xf8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) 159.617953ms ago: executing program 1 (id=1454): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x17c, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@empty, 0x0, 0x3, 0x2, 0x0, 0x2, 0x0, 0x0, 0x89}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x3}}, [@tmpl={0xc4, 0x5, [{{@in6=@empty, 0x0, 0x32}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0xc}, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0xfffffffd}, {{@in6=@private2, 0x0, 0x32}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @remote}}, {{@in6=@empty, 0x0, 0x2b}, 0x2, @in=@dev, 0xffffffff}]}]}, 0x17c}}, 0x0) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="ac0000001200010500"/56, @ANYBLOB="00000000000000feffffff0000000000040002005c00010007"], 0xac}}, 0x4000) 7.058775ms ago: executing program 0 (id=1455): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001a00010000000000fedbdf2502102000000000000000000005001b000600000008000400", @ANYRES32=0x0, @ANYBLOB="305f2008b49e5b31c029035289cc80e2"], 0x2c}}, 0x20004000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600)}, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x54, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipoib={{0xa}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPOIB_MODE={0x6}, @IFLA_IPOIB_PKEY={0x6, 0x1, 0x3df}, @IFLA_IPOIB_UMCAST={0x6, 0x3, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x34, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'erspan0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x600}, 0x24044800) r11 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x3aa}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r11, 0x84, 0x9, 0x0, 0x0) ioctl$sock_ifreq(r2, 0x0, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_hwaddr=@local}) ioctl$sock_netdev_private(r2, 0x89f0, &(0x7f0000000000)) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000002d00010026bd7000fcdbdf25040000000c0016800800bf00ffffff7f8f123898eb18f287691a2b37414ac3e63cd762fa404584d13567b8d9ea8d0ecbc0ed8c77e93058d67ba4e61c709b546cee7fdb3381e30889a1d32a8d83372c581d9753932b3c396d932c07be53ca41783072a8e6aa09e83050b4c001f181822333"], 0x20}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001280)=[r12, r12]}, 0x90) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xd, 0x5a87, 0x4, 0x3, 0x0, r12}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0x2, r13, 0x0, 0x8000000}, 0x27) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0x1, 0x58, &(0x7f00000002c0)}, 0x10) 6.805764ms ago: executing program 1 (id=1456): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = socket(0x200000000000011, 0x2, 0x0) bind$packet(r1, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r2, &(0x7f00000000c0)={@val={0x8, 0x800}, @val={0x7, 0x3, 0x3, 0x2, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x4, 0x28, 0x0, 0x0, 0x8, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, {{0x8100, 0x88a8, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x20, 0x5}}}}, 0x36) bpf$MAP_CREATE(0x600000000000000, &(0x7f0000000580)=@base={0xf, 0x4, 0x4, 0x20002, 0x0, 0x1, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) 0s ago: executing program 4 (id=1457): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f00000005c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000580)={&(0x7f00000003c0)={0x190, r1, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVKEY={0x50, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xfffffffc}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0x200}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x9}]}, @NL802154_ATTR_SEC_DEVKEY={0x18, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1000}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}]}, @NL802154_ATTR_SEC_DEVKEY={0xf8, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x14, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}, @NL802154_DEVKEY_ATTR_ID={0xcc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1a}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x80}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x40, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x80}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xff}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x54, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0x300}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}]}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x9}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x4000010}, 0x80) (fail_nth: 7) kernel console output (not intermixed with test programs): devsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.898557][ T6291] trusted_key: syz.0.75 sent an empty control message without MSG_MORE. [ 103.966812][ T3579] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.210054][ T3579] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.224779][ T3579] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.259562][ T6262] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.829896][ T6319] bridge2: entered allmulticast mode [ 104.835574][ T6321] sctp: [Deprecated]: syz.0.84 (pid 6321) Use of struct sctp_assoc_value in delayed_ack socket option. [ 104.835574][ T6321] Use struct sctp_sack_info instead [ 105.063314][ T6341] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 105.242163][ T6344] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 105.280779][ T6344] macvtap1: entered allmulticast mode [ 105.319039][ T6344] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 105.417476][ T6344] mac80211_hwsim hwsim10 wlan0: left allmulticast mode [ 105.435547][ T6344] mac80211_hwsim hwsim10 wlan0: left promiscuous mode [ 105.684372][ T6364] smc: net device bond0 applied user defined pnetid SYZ2 [ 105.796209][ T6364] smc: net device bond0 erased user defined pnetid SYZ2 [ 105.822754][ T6366] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 106.296530][ T6386] bridge_slave_0: left allmulticast mode [ 106.350391][ T6386] bridge_slave_0: left promiscuous mode [ 106.356327][ T6386] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.428964][ T6386] bridge_slave_1: left allmulticast mode [ 106.457419][ T6386] bridge_slave_1: left promiscuous mode [ 106.474503][ T6386] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.517725][ T6386] bond0: (slave bond_slave_0): Releasing backup interface [ 106.553146][ T6386] bond0: (slave bond_slave_1): Releasing backup interface [ 106.586787][ T6386] team0: Port device team_slave_0 removed [ 106.634434][ T6386] team0: Port device team_slave_1 removed [ 106.670109][ T6386] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.682039][ T6386] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 106.692815][ T6386] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.704416][ T6386] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 106.813940][ T6386] syz.1.98 (6386) used greatest stack depth: 19832 bytes left [ 107.521772][ T6433] Illegal XDP return value 4294967282 on prog (id 50) dev N/A, expect packet loss! [ 107.601674][ T6438] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 108.615672][ T6481] lo speed is unknown, defaulting to 1000 [ 108.617585][ T6477] syzkaller1: entered promiscuous mode [ 108.636707][ T6477] syzkaller1: entered allmulticast mode [ 108.653209][ T5943] IPVS: starting estimator thread 0... [ 108.678599][ T6485] wg1: entered promiscuous mode [ 108.684405][ T6481] lo speed is unknown, defaulting to 1000 [ 108.691806][ T6485] wg1: entered allmulticast mode [ 108.738987][ T6481] lo speed is unknown, defaulting to 1000 [ 108.769111][ T6481] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 108.802251][ T6481] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 108.871684][ T6486] IPVS: using max 24 ests per chain, 57600 per kthread [ 108.884846][ T6481] lo speed is unknown, defaulting to 1000 [ 108.942196][ T6481] lo speed is unknown, defaulting to 1000 [ 108.973908][ T6481] lo speed is unknown, defaulting to 1000 [ 108.985408][ T6481] lo speed is unknown, defaulting to 1000 [ 109.037984][ T6481] lo speed is unknown, defaulting to 1000 [ 109.065505][ T6481] lo speed is unknown, defaulting to 1000 [ 109.223164][ T6505] __nla_validate_parse: 6 callbacks suppressed [ 109.223185][ T6505] netlink: 60 bytes leftover after parsing attributes in process `syz.0.122'. [ 109.356257][ T6510] netlink: zone id is out of range [ 109.374813][ T6510] netlink: zone id is out of range [ 109.390420][ T6510] netlink: zone id is out of range [ 109.439122][ T6510] netlink: set zone limit has 4 unknown bytes [ 109.695656][ T6520] netlink: 12 bytes leftover after parsing attributes in process `syz.2.128'. [ 109.895599][ T6530] netlink: 44 bytes leftover after parsing attributes in process `syz.2.128'. [ 110.034761][ T6525] bond0: (slave bridge1): Enslaving as an active interface with an up link [ 110.093721][ T6541] netlink: 24 bytes leftover after parsing attributes in process `syz.0.134'. [ 110.235921][ T6548] netlink: 4 bytes leftover after parsing attributes in process `syz.4.135'. [ 110.612785][ T6557] netlink: 'syz.2.139': attribute type 1 has an invalid length. [ 110.813069][ T6557] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 111.682303][ T6603] IPv6: NLM_F_CREATE should be specified when creating new route [ 111.722050][ T6603] netlink: 'syz.0.152': attribute type 1 has an invalid length. [ 111.740434][ T6603] netlink: 'syz.0.152': attribute type 2 has an invalid length. [ 111.776633][ T6603] netlink: 1172 bytes leftover after parsing attributes in process `syz.0.152'. [ 112.339523][ T6623] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 112.566904][ T6633] netlink: 'syz.2.164': attribute type 83 has an invalid length. [ 112.662832][ T6642] pim6reg: entered allmulticast mode [ 112.749435][ T6642] pim6reg: left allmulticast mode [ 113.074420][ T6667] netlink: 24 bytes leftover after parsing attributes in process `syz.3.174'. [ 113.264236][ T6667] netlink: 28 bytes leftover after parsing attributes in process `syz.3.174'. [ 113.289632][ T6667] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 113.311500][ T6667] macsec1: entered promiscuous mode [ 113.318006][ T6667] macsec1: entered allmulticast mode [ 113.326880][ T6667] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 113.748546][ T6686] 8021q: VLANs not supported on nlmon0 [ 113.787314][ T6693] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 113.996329][ T6691] lo speed is unknown, defaulting to 1000 [ 114.041056][ T6695] block nbd1: server does not support multiple connections per device. [ 114.101687][ T6705] netlink: 8 bytes leftover after parsing attributes in process `syz.0.184'. [ 114.121139][ T6695] block nbd1: shutting down sockets [ 114.132545][ T6705] netlink: 8 bytes leftover after parsing attributes in process `syz.0.184'. [ 114.221917][ T6704] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 114.295665][ T6714] netlink: 'syz.3.189': attribute type 10 has an invalid length. [ 114.328184][ T6715] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 114.349337][ T6714] netlink: 'syz.3.189': attribute type 49 has an invalid length. [ 114.926661][ T6737] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 114.954624][ T5947] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 115.187532][ T6741] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 115.209393][ T6743] tipc: Started in network mode [ 115.217344][ T6743] tipc: Node identity 1a6847207e, cluster identity 4711 [ 115.227128][ T6743] tipc: Enabled bearer , priority 0 [ 115.237590][ T6743] syzkaller0: entered promiscuous mode [ 115.249697][ T6743] syzkaller0: entered allmulticast mode [ 115.344208][ T6743] syzkaller0: mtu less than device minimum [ 115.358767][ T6742] tipc: Resetting bearer [ 115.454319][ T6742] tipc: Disabling bearer [ 115.461386][ T24] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 116.243635][ T6775] netlink: 20 bytes leftover after parsing attributes in process `syz.2.205'. [ 116.524789][ T6780] netlink: 8 bytes leftover after parsing attributes in process `syz.1.207'. [ 117.109235][ T6799] netlink: 32 bytes leftover after parsing attributes in process `syz.0.213'. [ 117.573219][ T6818] netlink: 8 bytes leftover after parsing attributes in process `syz.2.219'. [ 117.582431][ T6818] netlink: 40 bytes leftover after parsing attributes in process `syz.2.219'. [ 117.598030][ T6818] netlink: 32 bytes leftover after parsing attributes in process `syz.2.219'. [ 117.751611][ T6821] netlink: 28 bytes leftover after parsing attributes in process `syz.2.219'. [ 117.771047][ T6821] netlink: 28 bytes leftover after parsing attributes in process `syz.2.219'. [ 117.914341][ T6821] erspan0: entered promiscuous mode [ 117.932601][ T6821] batadv_slave_1: entered promiscuous mode [ 118.138853][ T6832] netlink: 8 bytes leftover after parsing attributes in process `syz.2.222'. [ 118.667678][ T6850] tipc: Enabled bearer , priority 0 [ 118.689021][ T6850] syzkaller0: entered promiscuous mode [ 118.699671][ T6850] syzkaller0: entered allmulticast mode [ 118.719866][ T6850] netlink: 36 bytes leftover after parsing attributes in process `syz.4.230'. [ 118.775754][ T6850] tipc: Resetting bearer [ 118.834997][ T6849] tipc: Resetting bearer [ 118.863200][ T6849] tipc: Disabling bearer [ 118.878276][ T6854] tipc: Started in network mode [ 118.883555][ T6854] tipc: Node identity 1a80c4cfbef, cluster identity 4711 [ 118.891312][ T6854] tipc: Enabled bearer , priority 0 [ 118.918151][ T6854] syzkaller0: entered promiscuous mode [ 118.925000][ T6854] syzkaller0: entered allmulticast mode [ 119.014716][ T6854] lo: mtu less than device minimum [ 119.028569][ T6853] tipc: Resetting bearer [ 119.059072][ T6853] tipc: Disabling bearer [ 119.153642][ T6865] netlink: 'syz.1.236': attribute type 6 has an invalid length. [ 119.687018][ T5943] IPVS: starting estimator thread 0... [ 119.790699][ T6898] IPVS: using max 25 ests per chain, 60000 per kthread [ 119.865347][ T6901] lo speed is unknown, defaulting to 1000 [ 120.115472][ T6911] netlink: 'syz.2.249': attribute type 10 has an invalid length. [ 120.145694][ T6912] smc: net device bond0 applied user defined pnetid SYZ [ 120.445174][ T6923] lo speed is unknown, defaulting to 1000 [ 120.849068][ T6937] tipc: Started in network mode [ 120.854283][ T6937] tipc: Node identity 5658f2243c3e, cluster identity 4711 [ 120.862028][ T6937] tipc: Enabled bearer , priority 0 [ 120.889648][ T6937] syzkaller0: entered promiscuous mode [ 120.901086][ T6937] syzkaller0: entered allmulticast mode [ 120.911733][ T6941] tipc: Started in network mode [ 120.918210][ T6941] tipc: Node identity a6619a1de1a3, cluster identity 4711 [ 120.927003][ T6941] tipc: Enabled bearer , priority 0 [ 120.949154][ T6941] syzkaller0: entered promiscuous mode [ 120.960778][ T6941] syzkaller0: entered allmulticast mode [ 120.972545][ T6937] tipc: Resetting bearer [ 120.989253][ T6936] tipc: Resetting bearer [ 121.014751][ T6936] tipc: Disabling bearer [ 121.046894][ T6940] tipc: Resetting bearer [ 121.060860][ T6940] tipc: Disabling bearer [ 121.324987][ T6953] tipc: Enabled bearer , priority 0 [ 121.348013][ T6958] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 121.368700][ T6958] batadv_slave_1: entered promiscuous mode [ 121.406855][ T6964] Bluetooth: MGMT ver 1.23 [ 121.419044][ T6958] __nla_validate_parse: 9 callbacks suppressed [ 121.419061][ T6958] netlink: 8 bytes leftover after parsing attributes in process `syz.3.262'. [ 121.474525][ T6948] syzkaller0: entered promiscuous mode [ 121.501789][ T6948] syzkaller0: entered allmulticast mode [ 121.630348][ T6954] lo speed is unknown, defaulting to 1000 [ 121.708049][ T6948] tipc: Resetting bearer [ 121.756910][ T6947] tipc: Resetting bearer [ 121.820703][ T6982] netlink: 'syz.2.265': attribute type 10 has an invalid length. [ 121.854583][ T6947] tipc: Disabling bearer [ 121.906157][ T6976] warning: `syz.2.265' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 121.982685][ T6982] macvlan0: entered promiscuous mode [ 122.767374][ T7029] netlink: 36 bytes leftover after parsing attributes in process `syz.0.277'. [ 123.093380][ T7041] netlink: 16 bytes leftover after parsing attributes in process `syz.2.281'. [ 123.120802][ T7041] bond0: option resend_igmp: invalid value (18446744072065384451) [ 123.158589][ T7041] bond0: option resend_igmp: allowed values 0 - 255 [ 123.212152][ T7041] tap0: tun_chr_ioctl cmd 1074025677 [ 123.217891][ T7041] tap0: linktype set to 769 [ 123.352130][ T7030] netlink: 24 bytes leftover after parsing attributes in process `syz.1.276'. [ 123.423949][ T7059] netlink: 'syz.4.285': attribute type 28 has an invalid length. [ 123.557191][ T7030] netlink: 4 bytes leftover after parsing attributes in process `syz.1.276'. [ 123.721615][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 123.765555][ T7077] netlink: 12 bytes leftover after parsing attributes in process `syz.4.288'. [ 124.028621][ T7077] 8021q: adding VLAN 0 to HW filter on device bond0 [ 124.085122][ T7077] bond0: (slave rose0): Enslaving as an active interface with an up link [ 124.141932][ T7087] xt_limit: Overflow, try lower: 604147548/4200216962 [ 124.241600][ T7093] sctp: [Deprecated]: syz.1.291 (pid 7093) Use of int in max_burst socket option. [ 124.241600][ T7093] Use struct sctp_assoc_value instead [ 124.273139][ T7089] IPVS: set_ctl: invalid protocol: 135 100.1.1.1:20003 [ 124.305037][ T7094] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 124.341148][ T7097] netlink: 12 bytes leftover after parsing attributes in process `syz.4.293'. [ 124.380109][ T7094] netlink: 'syz.2.292': attribute type 10 has an invalid length. [ 124.635241][ T7117] netlink: 'syz.3.298': attribute type 1 has an invalid length. [ 124.643089][ T7117] netlink: 228 bytes leftover after parsing attributes in process `syz.3.298'. [ 124.655135][ T7119] netlink: 12 bytes leftover after parsing attributes in process `syz.4.297'. [ 124.669821][ T7113] netlink: 28 bytes leftover after parsing attributes in process `syz.3.298'. [ 124.828035][ T7122] IPv6: sit1: Disabled Multicast RS [ 125.258177][ T7146] netlink: 'syz.1.306': attribute type 1 has an invalid length. [ 125.285740][ T7152] netlink: 'syz.0.307': attribute type 1 has an invalid length. [ 125.583956][ T7159] lo speed is unknown, defaulting to 1000 [ 125.609029][ T7161] bridge0: entered promiscuous mode [ 125.622603][ T7161] bridge0: entered allmulticast mode [ 125.637270][ T7161] team0: Port device bridge0 added [ 126.041608][ T7176] netlink: 'syz.0.314': attribute type 39 has an invalid length. [ 126.547370][ T7194] siw: device registration error -23 [ 126.555900][ T7196] netlink: 'syz.4.317': attribute type 1 has an invalid length. [ 126.579983][ T7191] __nla_validate_parse: 8 callbacks suppressed [ 126.580002][ T7191] netlink: 108 bytes leftover after parsing attributes in process `syz.3.318'. [ 126.642074][ T7191] netlink: 108 bytes leftover after parsing attributes in process `syz.3.318'. [ 126.665586][ T7191] netlink: 84 bytes leftover after parsing attributes in process `syz.3.318'. [ 126.784594][ T7196] 8021q: adding VLAN 0 to HW filter on device bond1 [ 126.896203][ T7202] bond1: (slave geneve2): making interface the new active one [ 126.912529][ T7202] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 127.005939][ T7204] lo speed is unknown, defaulting to 1000 [ 127.489201][ T7230] netlink: 'syz.4.329': attribute type 10 has an invalid length. [ 127.544427][ T7226] syzkaller0: entered promiscuous mode [ 127.564806][ T7226] syzkaller0: entered allmulticast mode [ 127.593591][ T7235] netlink: 'syz.4.329': attribute type 10 has an invalid length. [ 127.616446][ T7230] team0: Port device dummy0 added [ 127.680071][ T7235] team0: Port device dummy0 removed [ 127.703455][ T7235] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 129.514407][ T7266] lo speed is unknown, defaulting to 1000 [ 129.748140][ T7284] netlink: 'syz.1.343': attribute type 29 has an invalid length. [ 129.809053][ T7291] netlink: 'syz.0.344': attribute type 3 has an invalid length. [ 129.873517][ T7295] netlink: 64 bytes leftover after parsing attributes in process `syz.1.345'. [ 129.915351][ T7300] netlink: 12 bytes leftover after parsing attributes in process `syz.3.347'. [ 129.938949][ T7300] netlink: 48 bytes leftover after parsing attributes in process `syz.3.347'. [ 130.327539][ T7320] netlink: 'syz.4.355': attribute type 29 has an invalid length. [ 130.398367][ T7323] lo speed is unknown, defaulting to 1000 [ 130.407659][ T7325] netlink: 44 bytes leftover after parsing attributes in process `syz.1.357'. [ 131.002944][ T7359] netlink: 20 bytes leftover after parsing attributes in process `syz.4.366'. [ 131.060087][ T7355] lo speed is unknown, defaulting to 1000 [ 131.322142][ T7367] netlink: 8 bytes leftover after parsing attributes in process `syz.2.370'. [ 131.338005][ T7367] openvswitch: netlink: nsh attr 2560 is out of range max 3 [ 131.360240][ T7367] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 131.398133][ T7369] netlink: 'syz.0.369': attribute type 29 has an invalid length. [ 131.665545][ T7380] netlink: 16399 bytes leftover after parsing attributes in process `syz.0.373'. [ 132.045840][ T7389] netlink: 208 bytes leftover after parsing attributes in process `syz.2.376'. [ 132.063789][ T7389] netlink: 208 bytes leftover after parsing attributes in process `syz.2.376'. [ 132.320233][ T7410] netlink: 'syz.2.383': attribute type 29 has an invalid length. [ 132.329854][ T7410] netlink: 'syz.2.383': attribute type 29 has an invalid length. [ 132.618802][ T7424] netlink: 'syz.2.387': attribute type 5 has an invalid length. [ 132.659936][ T7427] netlink: 'syz.0.388': attribute type 5 has an invalid length. [ 132.692325][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.761164][ T7429] pim6reg9: entered allmulticast mode [ 132.969496][ T7436] syzkaller0: entered promiscuous mode [ 132.978043][ T7436] syzkaller0: entered allmulticast mode [ 132.988934][ T7435] tipc: Enabled bearer , priority 10 [ 133.009501][ T7434] tipc: Disabling bearer [ 134.008815][ T7457] netlink: 32 bytes leftover after parsing attributes in process `syz.1.397'. [ 134.125893][ T7462] netlink: 8 bytes leftover after parsing attributes in process `syz.3.398'. [ 134.430000][ T7451] netlink: 'syz.4.396': attribute type 29 has an invalid length. [ 134.475268][ T7462] dummy0: entered promiscuous mode [ 134.511194][ T7462] macsec2: entered promiscuous mode [ 134.543256][ T7462] macsec2: entered allmulticast mode [ 134.548909][ T7462] dummy0: entered allmulticast mode [ 134.713785][ T7467] team0: Port device sit2 added [ 134.735061][ T7482] syzkaller1: entered promiscuous mode [ 134.742583][ T7482] syzkaller1: entered allmulticast mode [ 134.865809][ T7488] netlink: 100 bytes leftover after parsing attributes in process `syz.1.405'. [ 135.182552][ T7509] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 135.234361][ T7509] netlink: 4 bytes leftover after parsing attributes in process `syz.3.412'. [ 135.256732][ T7509] netlink: 4 bytes leftover after parsing attributes in process `syz.3.412'. [ 135.565388][ T7530] netlink: 'syz.3.420': attribute type 1 has an invalid length. [ 135.614323][ T7526] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.418'. [ 135.666703][ T7526] netlink: 8 bytes leftover after parsing attributes in process `syz.0.418'. [ 136.052791][ T7526] syz.0.418 (7526) used greatest stack depth: 16872 bytes left [ 136.226353][ T7560] netdevsim netdevsim2: Direct firmware load for .. failed with error -2 [ 136.237512][ T7560] netdevsim netdevsim2: Falling back to sysfs fallback for: .. [ 136.414889][ T7571] lo speed is unknown, defaulting to 1000 [ 136.532777][ T7578] tipc: Enabling of bearer rejected, failed to enable media [ 136.665271][ T7587] netlink: 'syz.4.438': attribute type 1 has an invalid length. [ 136.809631][ T7587] __nla_validate_parse: 4 callbacks suppressed [ 136.809650][ T7587] netlink: 28 bytes leftover after parsing attributes in process `syz.4.438'. [ 136.828015][ T7596] netlink: 32 bytes leftover after parsing attributes in process `syz.3.440'. [ 137.021295][ T7600] pimreg: entered allmulticast mode [ 137.586964][ T7630] netlink: 9 bytes leftover after parsing attributes in process `syz.4.448'. [ 137.596388][ T7630] 0·: renamed from hsr0 (while UP) [ 137.612179][ T7630] 0·: entered allmulticast mode [ 137.619085][ T7630] hsr_slave_0: entered allmulticast mode [ 137.625487][ T7630] hsr_slave_1: entered allmulticast mode [ 137.632066][ T7630] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 137.814869][ T7651] netlink: 96 bytes leftover after parsing attributes in process `syz.4.455'. [ 138.228030][ T7664] netlink: 60 bytes leftover after parsing attributes in process `syz.1.459'. [ 138.543390][ T7673] netlink: 12 bytes leftover after parsing attributes in process `syz.3.460'. [ 138.696681][ T7675] netlink: 'syz.3.461': attribute type 4 has an invalid length. [ 138.722532][ T7679] netlink: 4 bytes leftover after parsing attributes in process `syz.1.463'. [ 138.755601][ T7679] batman_adv: batadv0: Adding interface: ipvlan2 [ 138.770876][ T7679] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 138.801880][ T7679] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active [ 138.814823][ T7681] netlink: 'syz.3.461': attribute type 4 has an invalid length. [ 139.128628][ T7691] netlink: 20 bytes leftover after parsing attributes in process `syz.1.468'. [ 139.309525][ T7696] lo speed is unknown, defaulting to 1000 [ 139.379489][ T7702] netlink: 4 bytes leftover after parsing attributes in process `syz.0.470'. [ 139.454179][ T7703] veth1_to_batadv: entered promiscuous mode [ 139.550437][ T7707] block nbd1: server does not support multiple connections per device. [ 139.559073][ T7707] block nbd1: shutting down sockets [ 139.664939][ T7711] netlink: 68 bytes leftover after parsing attributes in process `syz.0.473'. [ 139.774107][ T5852] Bluetooth: hci4: link tx timeout [ 139.780719][ T5852] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 139.795608][ T5853] Bluetooth: hci4: link tx timeout [ 139.801215][ T5853] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 139.938507][ T7720] lo speed is unknown, defaulting to 1000 [ 140.026116][ T5930] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 140.472172][ T7743] can: request_module (can-proto-5) failed. [ 140.579607][ T7754] vxcan1: entered allmulticast mode [ 140.743885][ T7758] tipc: Enabled bearer , priority 0 [ 140.861966][ T7758] syzkaller0: entered promiscuous mode [ 140.873300][ T7758] syzkaller0: entered allmulticast mode [ 140.921228][ T24] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 141.168531][ T7772] macvlan2: entered promiscuous mode [ 141.216930][ T7772] bond0: entered promiscuous mode [ 141.222512][ T7772] bridge1: entered promiscuous mode [ 141.230775][ T7772] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 141.880807][ T5852] Bluetooth: hci4: command 0x0406 tx timeout [ 141.883818][ T5930] tipc: Node number set to 2758853839 [ 142.530627][ T7757] tipc: Resetting bearer [ 142.567808][ T7757] tipc: Disabling bearer [ 142.614899][ T7766] lo speed is unknown, defaulting to 1000 [ 142.638629][ T7788] wg1 speed is unknown, defaulting to 1000 [ 142.663842][ T7788] wg1 speed is unknown, defaulting to 1000 [ 142.704595][ T7788] wg1 speed is unknown, defaulting to 1000 [ 142.749606][ T7788] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 142.798056][ T7788] wg1 speed is unknown, defaulting to 1000 [ 142.947175][ T7788] wg1 speed is unknown, defaulting to 1000 [ 142.963302][ T7788] wg1 speed is unknown, defaulting to 1000 [ 143.043455][ T7788] wg1 speed is unknown, defaulting to 1000 [ 143.058437][ T7788] wg1 speed is unknown, defaulting to 1000 [ 143.067438][ T7788] wg1 speed is unknown, defaulting to 1000 [ 143.083479][ T7788] wg1 speed is unknown, defaulting to 1000 [ 143.105087][ T7796] lo speed is unknown, defaulting to 1000 [ 143.573049][ T7827] __nla_validate_parse: 9 callbacks suppressed [ 143.573069][ T7827] netlink: 4 bytes leftover after parsing attributes in process `syz.0.505'. [ 143.598082][ T7827] geneve2: entered promiscuous mode [ 143.604093][ T7827] geneve2: entered allmulticast mode [ 143.845487][ T7835] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 144.158047][ T7863] lo speed is unknown, defaulting to 1000 [ 144.174550][ T7863] wg1 speed is unknown, defaulting to 1000 [ 144.337363][ T7876] netlink: 'syz.1.518': attribute type 12 has an invalid length. [ 144.348418][ T7876] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.518'. [ 144.407638][ T7877] netlink: 'syz.1.518': attribute type 12 has an invalid length. [ 144.413648][ T7879] netlink: 16 bytes leftover after parsing attributes in process `syz.2.519'. [ 144.415908][ T7877] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.518'. [ 144.614016][ T7888] tipc: Enabling of bearer rejected, failed to enable media [ 144.785247][ T7896] sctp: [Deprecated]: syz.0.524 (pid 7896) Use of int in max_burst socket option. [ 144.785247][ T7896] Use struct sctp_assoc_value instead [ 144.934703][ T7905] tipc: Enabled bearer , priority 0 [ 144.943845][ T7905] syzkaller0: entered promiscuous mode [ 144.949351][ T7905] syzkaller0: entered allmulticast mode [ 144.966875][ T7905] tipc: Resetting bearer [ 145.029500][ T7908] tipc: Resetting bearer [ 145.059946][ T7908] tipc: Disabling bearer [ 145.080921][ T7905] netlink: 1041 bytes leftover after parsing attributes in process `syz.4.529'. [ 145.423752][ T7917] tipc: Enabled bearer , priority 0 [ 145.437824][ T7917] syzkaller0: entered promiscuous mode [ 145.447565][ T7917] syzkaller0: entered allmulticast mode [ 145.474374][ T7921] netlink: 20 bytes leftover after parsing attributes in process `syz.2.534'. [ 145.484081][ T7917] tipc: Resetting bearer [ 145.502202][ T7916] tipc: Resetting bearer [ 145.521627][ T7916] tipc: Disabling bearer [ 145.562337][ T7924] netlink: 'syz.4.533': attribute type 4 has an invalid length. [ 145.592165][ T7924] netlink: 'syz.4.533': attribute type 4 has an invalid length. [ 145.602881][ T5930] lo speed is unknown, defaulting to 1000 [ 145.622628][ T5930] lo speed is unknown, defaulting to 1000 [ 145.628431][ T5930] syz1: Port: 1 Link DOWN [ 145.800117][ T7934] netlink: 4 bytes leftover after parsing attributes in process `syz.0.538'. [ 145.864539][ T7934] netlink: 4 bytes leftover after parsing attributes in process `syz.0.538'. [ 146.052324][ T7948] netlink: 4 bytes leftover after parsing attributes in process `syz.0.542'. [ 146.395495][ T7971] tipc: Enabled bearer , priority 0 [ 146.415358][ T7971] syzkaller0: entered promiscuous mode [ 146.424773][ T7971] syzkaller0: entered allmulticast mode [ 146.518753][ T7977] sch_fq: defrate 257 ignored. [ 146.554996][ T7977] tipc: Resetting bearer [ 146.649060][ T7981] netlink: 'syz.4.551': attribute type 29 has an invalid length. [ 146.700843][ T7978] lo speed is unknown, defaulting to 1000 [ 146.711942][ T7981] netlink: 'syz.4.551': attribute type 29 has an invalid length. [ 146.758549][ T7978] wg1 speed is unknown, defaulting to 1000 [ 146.868663][ T7984] lo speed is unknown, defaulting to 1000 [ 146.889907][ T7989] openvswitch: netlink: Flow key attribute not present in set flow. [ 146.969086][ T7984] wg1 speed is unknown, defaulting to 1000 [ 147.237577][ T7967] tipc: Resetting bearer [ 147.298777][ T7967] tipc: Disabling bearer [ 147.368684][ T8008] netlink: 32 bytes leftover after parsing attributes in process `syz.4.557'. [ 147.724039][ T5853] Bluetooth: hci4: command 0x0406 tx timeout [ 147.803950][ T8007] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.207046][ T8024] netlink: 'syz.2.563': attribute type 8 has an invalid length. [ 148.312249][ T8007] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.476598][ T8029] netlink: 'syz.2.564': attribute type 29 has an invalid length. [ 148.566800][ T8007] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.620709][ T8030] netlink: 'syz.2.564': attribute type 29 has an invalid length. [ 148.727425][ T8007] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.979680][ T1333] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.004185][ T8039] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.567'. [ 149.058039][ T1333] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.135458][ T3579] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.199580][ T8047] netlink: 4 bytes leftover after parsing attributes in process `syz.1.567'. [ 149.220348][ T3579] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.284201][ T8051] netlink: 72 bytes leftover after parsing attributes in process `syz.3.571'. [ 149.587374][ T8070] Bluetooth: MGMT ver 1.23 [ 149.613904][ T8065] netlink: 'syz.2.577': attribute type 29 has an invalid length. [ 149.638466][ T8069] netlink: 'syz.2.577': attribute type 29 has an invalid length. [ 149.826416][ T8083] netlink: 20 bytes leftover after parsing attributes in process `syz.3.579'. [ 149.868417][ T8084] vti0: entered promiscuous mode [ 149.954260][ T8091] tipc: Enabled bearer , priority 0 [ 149.971985][ T8092] syzkaller0: entered promiscuous mode [ 149.979039][ T8095] netlink: 8 bytes leftover after parsing attributes in process `syz.1.582'. [ 149.988308][ T8092] syzkaller0: entered allmulticast mode [ 150.049300][ T8092] tipc: Resetting bearer [ 150.074602][ T8092] tipc: Disabling bearer [ 150.374721][ T8107] netlink: 12 bytes leftover after parsing attributes in process `syz.4.586'. [ 150.547016][ T8116] netlink: 4 bytes leftover after parsing attributes in process `syz.2.589'. [ 150.579335][ T8114] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 150.590713][ T5930] IPVS: starting estimator thread 0... [ 150.627407][ T8116] team1: entered promiscuous mode [ 150.632968][ T8116] team1: entered allmulticast mode [ 150.653066][ T8121] netlink: 'syz.3.590': attribute type 2 has an invalid length. [ 150.671727][ T8121] netlink: 16 bytes leftover after parsing attributes in process `syz.3.590'. [ 150.690653][ T8118] IPVS: using max 25 ests per chain, 60000 per kthread [ 150.931380][ T8132] FAULT_INJECTION: forcing a failure. [ 150.931380][ T8132] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 150.982476][ T8132] CPU: 1 UID: 0 PID: 8132 Comm: syz.4.594 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 150.982520][ T8132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 150.982540][ T8132] Call Trace: [ 150.982549][ T8132] [ 150.982562][ T8132] dump_stack_lvl+0x189/0x250 [ 150.982601][ T8132] ? __pfx____ratelimit+0x10/0x10 [ 150.982632][ T8132] ? __pfx_dump_stack_lvl+0x10/0x10 [ 150.982654][ T8132] ? __pfx__printk+0x10/0x10 [ 150.982681][ T8132] ? __might_fault+0xb0/0x130 [ 150.982725][ T8132] should_fail_ex+0x414/0x560 [ 150.982764][ T8132] _copy_from_user+0x2d/0xb0 [ 150.982795][ T8132] ___sys_sendmsg+0x158/0x2a0 [ 150.982821][ T8132] ? __pfx____sys_sendmsg+0x10/0x10 [ 150.982883][ T8132] ? __fget_files+0x2a/0x420 [ 150.982903][ T8132] ? __fget_files+0x3a0/0x420 [ 150.982935][ T8132] __x64_sys_sendmsg+0x19b/0x260 [ 150.982960][ T8132] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 150.982992][ T8132] ? __pfx_ksys_write+0x10/0x10 [ 150.983019][ T8132] ? rcu_is_watching+0x15/0xb0 [ 150.983058][ T8132] ? do_syscall_64+0xbe/0x3b0 [ 150.983093][ T8132] do_syscall_64+0xfa/0x3b0 [ 150.983123][ T8132] ? lockdep_hardirqs_on+0x9c/0x150 [ 150.983152][ T8132] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.983172][ T8132] ? clear_bhb_loop+0x60/0xb0 [ 150.983198][ T8132] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.983222][ T8132] RIP: 0033:0x7f03edf8eb69 [ 150.983246][ T8132] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 150.983269][ T8132] RSP: 002b:00007f03ebdf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 150.983296][ T8132] RAX: ffffffffffffffda RBX: 00007f03ee1b5fa0 RCX: 00007f03edf8eb69 [ 150.983311][ T8132] RDX: 0000000000008000 RSI: 0000200000000500 RDI: 0000000000000004 [ 150.983323][ T8132] RBP: 00007f03ebdf6090 R08: 0000000000000000 R09: 0000000000000000 [ 150.983336][ T8132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 150.983347][ T8132] R13: 0000000000000000 R14: 00007f03ee1b5fa0 R15: 00007ffe3cef2e78 [ 150.983378][ T8132] [ 151.318275][ T8139] netlink: 'syz.1.596': attribute type 4 has an invalid length. [ 151.327068][ T8139] tc_dump_action: action bad kind [ 151.913598][ T8154] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.921652][ T8154] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.165655][ T8154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 152.179428][ T8190] netlink: 596 bytes leftover after parsing attributes in process `syz.3.609'. [ 152.208312][ T8154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 152.472195][ T8164] pimreg: entered allmulticast mode [ 152.557896][ T8193] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.584109][ T6269] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.592893][ T6269] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.618731][ T6269] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.628117][ T6269] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.742384][ T8193] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.888420][ T8193] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.084850][ T8193] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.148326][ T8231] netlink: 20 bytes leftover after parsing attributes in process `syz.3.621'. [ 153.202785][ T8235] netlink: 'syz.2.622': attribute type 5 has an invalid length. [ 153.223368][ T8235] geneve2: entered promiscuous mode [ 153.228739][ T8235] geneve2: entered allmulticast mode [ 153.245232][ T13] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 153.261773][ T13] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 153.287196][ T13] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 153.308632][ T13] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 153.349945][ T8239] netlink: 'syz.0.624': attribute type 29 has an invalid length. [ 153.372338][ T8239] netlink: 'syz.0.624': attribute type 29 has an invalid length. [ 153.419559][ T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.452885][ T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.496297][ T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.527940][ T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.874125][ T8265] tipc: Enabled bearer , priority 0 [ 153.932022][ T8264] tipc: Disabling bearer [ 154.217235][ T8295] __nla_validate_parse: 40 callbacks suppressed [ 154.217254][ T8295] netlink: 4 bytes leftover after parsing attributes in process `syz.3.641'. [ 154.308539][ T8297] netlink: 'syz.2.643': attribute type 1 has an invalid length. [ 154.319601][ T8297] netlink: 224 bytes leftover after parsing attributes in process `syz.2.643'. [ 154.400069][ T8303] netlink: 12 bytes leftover after parsing attributes in process `syz.0.644'. [ 154.607488][ T8313] netlink: 8 bytes leftover after parsing attributes in process `syz.1.649'. [ 154.625157][ T8312] FAULT_INJECTION: forcing a failure. [ 154.625157][ T8312] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 154.642083][ T8312] CPU: 1 UID: 0 PID: 8312 Comm: syz.0.648 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 154.642111][ T8312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 154.642123][ T8312] Call Trace: [ 154.642132][ T8312] [ 154.642140][ T8312] dump_stack_lvl+0x189/0x250 [ 154.642167][ T8312] ? __pfx____ratelimit+0x10/0x10 [ 154.642197][ T8312] ? __pfx_dump_stack_lvl+0x10/0x10 [ 154.642218][ T8312] ? __pfx__printk+0x10/0x10 [ 154.642244][ T8312] ? __might_fault+0xb0/0x130 [ 154.642287][ T8312] should_fail_ex+0x414/0x560 [ 154.642326][ T8312] _copy_from_iter+0x1db/0x16f0 [ 154.642358][ T8312] ? rcu_is_watching+0x15/0xb0 [ 154.642392][ T8312] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 154.642425][ T8312] ? __pfx__copy_from_iter+0x10/0x10 [ 154.642454][ T8312] ? __build_skb_around+0x257/0x3e0 [ 154.642490][ T8312] ? netlink_sendmsg+0x642/0xb30 [ 154.642520][ T8312] ? skb_put+0x11b/0x210 [ 154.642543][ T8312] netlink_sendmsg+0x6b2/0xb30 [ 154.642585][ T8312] ? __pfx_netlink_sendmsg+0x10/0x10 [ 154.642620][ T8312] ? aa_sock_msg_perm+0x94/0x160 [ 154.642650][ T8312] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 154.642674][ T8312] ? __pfx_netlink_sendmsg+0x10/0x10 [ 154.642707][ T8312] __sock_sendmsg+0x219/0x270 [ 154.642746][ T8312] ____sys_sendmsg+0x505/0x830 [ 154.642775][ T8312] ? __pfx_____sys_sendmsg+0x10/0x10 [ 154.642807][ T8312] ? import_iovec+0x74/0xa0 [ 154.642839][ T8312] ___sys_sendmsg+0x21f/0x2a0 [ 154.642864][ T8312] ? __pfx____sys_sendmsg+0x10/0x10 [ 154.642925][ T8312] ? __fget_files+0x2a/0x420 [ 154.642945][ T8312] ? __fget_files+0x3a0/0x420 [ 154.642975][ T8312] __x64_sys_sendmsg+0x19b/0x260 [ 154.643002][ T8312] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 154.643034][ T8312] ? __pfx_ksys_write+0x10/0x10 [ 154.643062][ T8312] ? rcu_is_watching+0x15/0xb0 [ 154.643100][ T8312] ? do_syscall_64+0xbe/0x3b0 [ 154.643136][ T8312] do_syscall_64+0xfa/0x3b0 [ 154.643165][ T8312] ? lockdep_hardirqs_on+0x9c/0x150 [ 154.643195][ T8312] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.643215][ T8312] ? clear_bhb_loop+0x60/0xb0 [ 154.643240][ T8312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.643261][ T8312] RIP: 0033:0x7fe0de98eb69 [ 154.643279][ T8312] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 154.643296][ T8312] RSP: 002b:00007fe0df75c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 154.643319][ T8312] RAX: ffffffffffffffda RBX: 00007fe0debb5fa0 RCX: 00007fe0de98eb69 [ 154.643334][ T8312] RDX: 0000000000008000 RSI: 0000200000000500 RDI: 0000000000000004 [ 154.643348][ T8312] RBP: 00007fe0df75c090 R08: 0000000000000000 R09: 0000000000000000 [ 154.643360][ T8312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 154.643372][ T8312] R13: 0000000000000000 R14: 00007fe0debb5fa0 R15: 00007ffc75c81888 [ 154.643404][ T8312] [ 154.981695][ T8320] netlink: 16 bytes leftover after parsing attributes in process `syz.1.652'. [ 155.132355][ T8331] netlink: 4 bytes leftover after parsing attributes in process `syz.1.657'. [ 155.265729][ T8337] netlink: 4 bytes leftover after parsing attributes in process `syz.1.657'. [ 155.355384][ T8344] netlink: 60 bytes leftover after parsing attributes in process `syz.4.658'. [ 155.375335][ T8337] bridge3: entered promiscuous mode [ 155.388629][ T8337] macsec2: entered promiscuous mode [ 155.405631][ T8337] macsec2: entered allmulticast mode [ 155.417383][ T8337] bridge3: entered allmulticast mode [ 155.433183][ T8337] bridge3: port 1(macsec2) entered blocking state [ 155.446822][ T8337] bridge3: port 1(macsec2) entered disabled state [ 155.472255][ T8337] bridge3: left allmulticast mode [ 155.484517][ T8337] bridge3: left promiscuous mode [ 155.527612][ T8349] netlink: 68 bytes leftover after parsing attributes in process `syz.3.659'. [ 155.936722][ T8363] FAULT_INJECTION: forcing a failure. [ 155.936722][ T8363] name failslab, interval 1, probability 0, space 0, times 1 [ 155.960727][ T8363] CPU: 1 UID: 0 PID: 8363 Comm: syz.1.665 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 155.960767][ T8363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 155.960780][ T8363] Call Trace: [ 155.960789][ T8363] [ 155.960799][ T8363] dump_stack_lvl+0x189/0x250 [ 155.960828][ T8363] ? __pfx____ratelimit+0x10/0x10 [ 155.960859][ T8363] ? __pfx_dump_stack_lvl+0x10/0x10 [ 155.960882][ T8363] ? __pfx__printk+0x10/0x10 [ 155.960912][ T8363] ? __lock_acquire+0xab9/0xd20 [ 155.960952][ T8363] should_fail_ex+0x414/0x560 [ 155.960994][ T8363] should_failslab+0xa8/0x100 [ 155.961018][ T8363] kmem_cache_alloc_noprof+0x73/0x3c0 [ 155.961048][ T8363] ? skb_clone+0x212/0x3a0 [ 155.961076][ T8363] skb_clone+0x212/0x3a0 [ 155.961104][ T8363] __netlink_deliver_tap+0x404/0x850 [ 155.961150][ T8363] ? netlink_deliver_tap+0x2e/0x1b0 [ 155.961184][ T8363] netlink_deliver_tap+0x19c/0x1b0 [ 155.961218][ T8363] netlink_unicast+0x7fa/0x9e0 [ 155.961258][ T8363] ? __pfx_netlink_unicast+0x10/0x10 [ 155.961288][ T8363] ? netlink_sendmsg+0x642/0xb30 [ 155.961318][ T8363] ? skb_put+0x11b/0x210 [ 155.961347][ T8363] netlink_sendmsg+0x805/0xb30 [ 155.961389][ T8363] ? __pfx_netlink_sendmsg+0x10/0x10 [ 155.961430][ T8363] ? aa_sock_msg_perm+0x94/0x160 [ 155.961462][ T8363] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 155.961487][ T8363] ? __pfx_netlink_sendmsg+0x10/0x10 [ 155.961540][ T8363] __sock_sendmsg+0x219/0x270 [ 155.961572][ T8363] ____sys_sendmsg+0x505/0x830 [ 155.961620][ T8363] ? __pfx_____sys_sendmsg+0x10/0x10 [ 155.961654][ T8363] ? import_iovec+0x74/0xa0 [ 155.961690][ T8363] ___sys_sendmsg+0x21f/0x2a0 [ 155.961716][ T8363] ? __pfx____sys_sendmsg+0x10/0x10 [ 155.961790][ T8363] ? __fget_files+0x2a/0x420 [ 155.961810][ T8363] ? __fget_files+0x3a0/0x420 [ 155.961843][ T8363] __x64_sys_sendmsg+0x19b/0x260 [ 155.961870][ T8363] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 155.961905][ T8363] ? __pfx_ksys_write+0x10/0x10 [ 155.961943][ T8363] ? do_syscall_64+0xbe/0x3b0 [ 155.961981][ T8363] do_syscall_64+0xfa/0x3b0 [ 155.962023][ T8363] ? lockdep_hardirqs_on+0x9c/0x150 [ 155.962052][ T8363] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.962072][ T8363] ? clear_bhb_loop+0x60/0xb0 [ 155.962098][ T8363] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.962118][ T8363] RIP: 0033:0x7f1bb378eb69 [ 155.962137][ T8363] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 155.962154][ T8363] RSP: 002b:00007f1bb4695038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 155.962178][ T8363] RAX: ffffffffffffffda RBX: 00007f1bb39b5fa0 RCX: 00007f1bb378eb69 [ 155.962193][ T8363] RDX: 0000000000008000 RSI: 0000200000000500 RDI: 0000000000000004 [ 155.962206][ T8363] RBP: 00007f1bb4695090 R08: 0000000000000000 R09: 0000000000000000 [ 155.962218][ T8363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 155.962230][ T8363] R13: 0000000000000000 R14: 00007f1bb39b5fa0 R15: 00007ffdf2a774d8 [ 155.962263][ T8363] [ 156.302532][ T8368] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (1048831) [ 156.322589][ T8368] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 156.334629][ T8369] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (1048831) [ 156.346610][ T8369] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 156.365123][ T8368] netlink: 'syz.4.667': attribute type 4 has an invalid length. [ 156.402646][ T8368] netlink: 14345 bytes leftover after parsing attributes in process `syz.4.667'. [ 156.488195][ T10] hid-generic 0005:16C0:5505.0001: hidraw0: BLUETOOTH HID v0.8b Device [syz0] on aa:aa:aa:aa:aa:aa [ 157.001718][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 157.053648][ T8417] FAULT_INJECTION: forcing a failure. [ 157.053648][ T8417] name failslab, interval 1, probability 0, space 0, times 0 [ 157.068326][ T8417] CPU: 0 UID: 0 PID: 8417 Comm: syz.3.679 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 157.068355][ T8417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 157.068368][ T8417] Call Trace: [ 157.068376][ T8417] [ 157.068390][ T8417] dump_stack_lvl+0x189/0x250 [ 157.068418][ T8417] ? __pfx____ratelimit+0x10/0x10 [ 157.068449][ T8417] ? __pfx_dump_stack_lvl+0x10/0x10 [ 157.068470][ T8417] ? __pfx__printk+0x10/0x10 [ 157.068499][ T8417] ? __pfx___might_resched+0x10/0x10 [ 157.068531][ T8417] ? fs_reclaim_acquire+0x7d/0x100 [ 157.068558][ T8417] should_fail_ex+0x414/0x560 [ 157.068596][ T8417] should_failslab+0xa8/0x100 [ 157.068618][ T8417] __kmalloc_noprof+0xcb/0x4f0 [ 157.068648][ T8417] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 157.068680][ T8417] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 157.068713][ T8417] genl_family_rcv_msg_doit+0xb8/0x300 [ 157.068745][ T8417] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 157.068772][ T8417] ? rcu_is_watching+0x15/0xb0 [ 157.068807][ T8417] ? apparmor_capable+0x137/0x1b0 [ 157.068830][ T8417] ? bpf_lsm_capable+0x9/0x20 [ 157.068858][ T8417] ? security_capable+0x7e/0x2e0 [ 157.068892][ T8417] genl_rcv_msg+0x60e/0x790 [ 157.068923][ T8417] ? __pfx_genl_rcv_msg+0x10/0x10 [ 157.068945][ T8417] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 157.068966][ T8417] ? __pfx_nl80211_tx_control_port+0x10/0x10 [ 157.068985][ T8417] ? __pfx_nl80211_post_doit+0x10/0x10 [ 157.069006][ T8417] ? __asan_memcpy+0x40/0x70 [ 157.069027][ T8417] ? __pfx_ref_tracker_free+0x10/0x10 [ 157.069052][ T8417] netlink_rcv_skb+0x205/0x470 [ 157.069076][ T8417] ? __lock_acquire+0xab9/0xd20 [ 157.069101][ T8417] ? __pfx_genl_rcv_msg+0x10/0x10 [ 157.069123][ T8417] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 157.069166][ T8417] ? down_read+0x1ad/0x2e0 [ 157.069188][ T8417] genl_rcv+0x28/0x40 [ 157.069207][ T8417] netlink_unicast+0x82c/0x9e0 [ 157.069243][ T8417] ? __pfx_netlink_unicast+0x10/0x10 [ 157.069282][ T8417] ? netlink_sendmsg+0x642/0xb30 [ 157.069320][ T8417] ? skb_put+0x11b/0x210 [ 157.069340][ T8417] netlink_sendmsg+0x805/0xb30 [ 157.069376][ T8417] ? __pfx_netlink_sendmsg+0x10/0x10 [ 157.069430][ T8417] ? aa_sock_msg_perm+0x94/0x160 [ 157.069458][ T8417] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 157.069480][ T8417] ? __pfx_netlink_sendmsg+0x10/0x10 [ 157.069510][ T8417] __sock_sendmsg+0x219/0x270 [ 157.069540][ T8417] ____sys_sendmsg+0x505/0x830 [ 157.069565][ T8417] ? __pfx_____sys_sendmsg+0x10/0x10 [ 157.069601][ T8417] ? import_iovec+0x74/0xa0 [ 157.069632][ T8417] ___sys_sendmsg+0x21f/0x2a0 [ 157.069656][ T8417] ? __pfx____sys_sendmsg+0x10/0x10 [ 157.069714][ T8417] ? __fget_files+0x2a/0x420 [ 157.069732][ T8417] ? __fget_files+0x3a0/0x420 [ 157.069761][ T8417] __x64_sys_sendmsg+0x19b/0x260 [ 157.069784][ T8417] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 157.069815][ T8417] ? __pfx_ksys_write+0x10/0x10 [ 157.069839][ T8417] ? rcu_is_watching+0x15/0xb0 [ 157.069876][ T8417] ? do_syscall_64+0xbe/0x3b0 [ 157.069911][ T8417] do_syscall_64+0xfa/0x3b0 [ 157.069940][ T8417] ? lockdep_hardirqs_on+0x9c/0x150 [ 157.069967][ T8417] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.069987][ T8417] ? clear_bhb_loop+0x60/0xb0 [ 157.070011][ T8417] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.070030][ T8417] RIP: 0033:0x7fe6b7f8eb69 [ 157.070048][ T8417] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 157.070064][ T8417] RSP: 002b:00007fe6b8e34038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 157.070086][ T8417] RAX: ffffffffffffffda RBX: 00007fe6b81b5fa0 RCX: 00007fe6b7f8eb69 [ 157.070101][ T8417] RDX: 0000000000008000 RSI: 0000200000000500 RDI: 0000000000000004 [ 157.070113][ T8417] RBP: 00007fe6b8e34090 R08: 0000000000000000 R09: 0000000000000000 [ 157.070126][ T8417] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 157.070138][ T8417] R13: 0000000000000000 R14: 00007fe6b81b5fa0 R15: 00007fffcbf0ed08 [ 157.070169][ T8417] [ 157.683210][ T8427] netlink: 'syz.3.681': attribute type 1 has an invalid length. [ 157.730129][ T8427] netlink: 'syz.3.681': attribute type 1 has an invalid length. [ 157.764968][ T8434] lo speed is unknown, defaulting to 1000 [ 157.772706][ T8434] wg1 speed is unknown, defaulting to 1000 [ 157.848801][ T8436] syzkaller0: entered promiscuous mode [ 157.854595][ T8436] syzkaller0: entered allmulticast mode [ 158.057152][ T8450] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 158.128946][ T8453] FAULT_INJECTION: forcing a failure. [ 158.128946][ T8453] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 158.142592][ T8453] CPU: 1 UID: 0 PID: 8453 Comm: syz.2.692 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 158.142620][ T8453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 158.142632][ T8453] Call Trace: [ 158.142639][ T8453] [ 158.142647][ T8453] dump_stack_lvl+0x189/0x250 [ 158.142673][ T8453] ? __pfx____ratelimit+0x10/0x10 [ 158.142701][ T8453] ? __pfx_dump_stack_lvl+0x10/0x10 [ 158.142722][ T8453] ? __pfx__printk+0x10/0x10 [ 158.142742][ T8453] ? trace_sched_exit_tp+0x38/0x120 [ 158.142768][ T8453] ? __schedule+0x1755/0x4d30 [ 158.142805][ T8453] should_fail_ex+0x414/0x560 [ 158.142841][ T8453] strncpy_from_user+0x36/0x290 [ 158.142875][ T8453] strncpy_from_user_nofault+0x72/0x150 [ 158.142903][ T8453] bpf_bprintf_prepare+0xbbc/0x13d0 [ 158.142944][ T8453] ? __pfx_bpf_bprintf_prepare+0x10/0x10 [ 158.142977][ T8453] ? bpf_trace_printk+0xc1/0x190 [ 158.143001][ T8453] bpf_trace_printk+0xdb/0x190 [ 158.143018][ T8453] ? __lock_acquire+0xab9/0xd20 [ 158.143046][ T8453] ? __pfx_bpf_trace_printk+0x10/0x10 [ 158.143067][ T8453] ? bpf_trace_run2+0x186/0x4b0 [ 158.143108][ T8453] bpf_prog_7c77c7e0f6645ad8+0x3e/0x44 [ 158.143127][ T8453] bpf_trace_run2+0x281/0x4b0 [ 158.143152][ T8453] ? bpf_trace_run2+0x186/0x4b0 [ 158.143179][ T8453] ? __pfx_bpf_trace_run2+0x10/0x10 [ 158.143209][ T8453] ? __bpf_trace_contention_begin+0xcd/0x130 [ 158.143233][ T8453] __bpf_trace_contention_begin+0xdc/0x130 [ 158.143252][ T8453] ? __pfx___bpf_trace_contention_begin+0x10/0x10 [ 158.143270][ T8453] ? nl80211_pre_doit+0x5f/0x930 [ 158.143302][ T8453] ? nl80211_pre_doit+0x5f/0x930 [ 158.143333][ T8453] trace_contention_begin+0xf4/0x120 [ 158.143353][ T8453] __mutex_lock+0x198/0x1340 [ 158.143383][ T8453] ? __pfx___nla_validate_parse+0x10/0x10 [ 158.143411][ T8453] ? nl80211_pre_doit+0x5f/0x930 [ 158.143435][ T8453] ? __pfx___mutex_lock+0x10/0x10 [ 158.143477][ T8453] ? __nla_parse+0x40/0x60 [ 158.143503][ T8453] nl80211_pre_doit+0x5f/0x930 [ 158.143521][ T8453] ? genl_family_rcv_msg_attrs_parse+0x212/0x2a0 [ 158.143553][ T8453] genl_family_rcv_msg_doit+0x1bb/0x300 [ 158.143583][ T8453] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 158.143620][ T8453] ? bpf_lsm_capable+0x9/0x20 [ 158.143647][ T8453] ? security_capable+0x7e/0x2e0 [ 158.143679][ T8453] genl_rcv_msg+0x60e/0x790 [ 158.143708][ T8453] ? __pfx_genl_rcv_msg+0x10/0x10 [ 158.143728][ T8453] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 158.143746][ T8453] ? __pfx_nl80211_tx_control_port+0x10/0x10 [ 158.143764][ T8453] ? __pfx_nl80211_post_doit+0x10/0x10 [ 158.143786][ T8453] ? __asan_memcpy+0x40/0x70 [ 158.143810][ T8453] ? __pfx_ref_tracker_free+0x10/0x10 [ 158.143837][ T8453] netlink_rcv_skb+0x205/0x470 [ 158.143863][ T8453] ? __lock_acquire+0xab9/0xd20 [ 158.143889][ T8453] ? __pfx_genl_rcv_msg+0x10/0x10 [ 158.143912][ T8453] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 158.143978][ T8453] ? down_read+0x1ad/0x2e0 [ 158.143999][ T8453] genl_rcv+0x28/0x40 [ 158.144018][ T8453] netlink_unicast+0x82c/0x9e0 [ 158.144055][ T8453] ? __pfx_netlink_unicast+0x10/0x10 [ 158.144083][ T8453] ? netlink_sendmsg+0x642/0xb30 [ 158.144109][ T8453] ? skb_put+0x11b/0x210 [ 158.144133][ T8453] netlink_sendmsg+0x805/0xb30 [ 158.144176][ T8453] ? __pfx_netlink_sendmsg+0x10/0x10 [ 158.144211][ T8453] ? aa_sock_msg_perm+0x94/0x160 [ 158.144241][ T8453] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 158.144264][ T8453] ? __pfx_netlink_sendmsg+0x10/0x10 [ 158.144337][ T8453] __sock_sendmsg+0x219/0x270 [ 158.144369][ T8453] ____sys_sendmsg+0x505/0x830 [ 158.144399][ T8453] ? __pfx_____sys_sendmsg+0x10/0x10 [ 158.144433][ T8453] ? import_iovec+0x74/0xa0 [ 158.144468][ T8453] ___sys_sendmsg+0x21f/0x2a0 [ 158.144493][ T8453] ? __pfx____sys_sendmsg+0x10/0x10 [ 158.144559][ T8453] ? __fget_files+0x2a/0x420 [ 158.144579][ T8453] ? __fget_files+0x3a0/0x420 [ 158.144612][ T8453] __x64_sys_sendmsg+0x19b/0x260 [ 158.144638][ T8453] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 158.144673][ T8453] ? __pfx_ksys_write+0x10/0x10 [ 158.144701][ T8453] ? rcu_is_watching+0x15/0xb0 [ 158.144741][ T8453] ? do_syscall_64+0xbe/0x3b0 [ 158.144778][ T8453] do_syscall_64+0xfa/0x3b0 [ 158.144807][ T8453] ? lockdep_hardirqs_on+0x9c/0x150 [ 158.144837][ T8453] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.144858][ T8453] ? clear_bhb_loop+0x60/0xb0 [ 158.144896][ T8453] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.144916][ T8453] RIP: 0033:0x7f7b9438eb69 [ 158.144934][ T8453] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 158.144951][ T8453] RSP: 002b:00007f7b951f0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 158.144973][ T8453] RAX: ffffffffffffffda RBX: 00007f7b945b5fa0 RCX: 00007f7b9438eb69 [ 158.144988][ T8453] RDX: 0000000000008000 RSI: 0000200000000500 RDI: 0000000000000004 [ 158.145000][ T8453] RBP: 00007f7b951f0090 R08: 0000000000000000 R09: 0000000000000000 [ 158.145012][ T8453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 158.145023][ T8453] R13: 0000000000000000 R14: 00007f7b945b5fa0 R15: 00007fff5fb7fae8 [ 158.145056][ T8453] [ 159.185044][ T8464] lo speed is unknown, defaulting to 1000 [ 159.194347][ T8464] wg1 speed is unknown, defaulting to 1000 [ 159.205627][ T8472] lo speed is unknown, defaulting to 1000 [ 159.245629][ T8490] __nla_validate_parse: 3 callbacks suppressed [ 159.245646][ T8490] netlink: 12 bytes leftover after parsing attributes in process `syz.0.702'. [ 159.268134][ T8472] wg1 speed is unknown, defaulting to 1000 [ 159.414320][ T8490] 8021q: adding VLAN 0 to HW filter on device bond3 [ 159.437976][ T8498] netlink: 144 bytes leftover after parsing attributes in process `syz.1.705'. [ 159.474293][ T8499] netlink: 144 bytes leftover after parsing attributes in process `syz.1.705'. [ 159.589868][ T30] audit: type=1800 audit(1754347817.761:2): pid=8502 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.704" name="x000000000000000300000000000000000000003" dev="tmpfs" ino=696 res=0 errno=0 [ 159.641857][ T30] audit: type=1804 audit(1754347817.771:3): pid=8502 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.704" name="x000000000000000300000000000000000000003" dev="tmpfs" ino=696 res=1 errno=0 [ 159.665904][ T8504] netlink: 'syz.1.705': attribute type 10 has an invalid length. [ 159.746073][ T8482] lo speed is unknown, defaulting to 1000 [ 159.875118][ T8482] wg1 speed is unknown, defaulting to 1000 [ 160.108666][ T8520] !: renamed from dummy0 [ 160.126743][ T8515] lo speed is unknown, defaulting to 1000 [ 160.166157][ T8520] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 160.194295][ T8515] wg1 speed is unknown, defaulting to 1000 [ 160.225858][ T8520] lo speed is unknown, defaulting to 1000 [ 160.288725][ T8520] wg1 speed is unknown, defaulting to 1000 [ 160.699909][ T8537] netlink: 8 bytes leftover after parsing attributes in process `syz.3.717'. [ 160.865650][ T8539] tipc: Enabling of bearer rejected, failed to enable media [ 161.107009][ T8549] vcan0: tx drop: invalid da for name 0x0000000000000004 [ 161.129339][ T8552] netlink: 8 bytes leftover after parsing attributes in process `syz.4.720'. [ 161.581080][ T8567] netlink: 'syz.2.725': attribute type 13 has an invalid length. [ 162.164050][ T8600] netlink: 252 bytes leftover after parsing attributes in process `syz.2.735'. [ 162.293872][ T8610] netlink: 8 bytes leftover after parsing attributes in process `syz.3.737'. [ 162.569141][ T8627] netlink: 'syz.3.743': attribute type 64 has an invalid length. [ 162.579990][ T8627] netlink: 4 bytes leftover after parsing attributes in process `syz.3.743'. [ 162.821326][ T30] audit: type=1800 audit(1754347821.001:4): pid=8630 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.744" name="blkio.bfq.time_recursive" dev="tmpfs" ino=905 res=0 errno=0 [ 163.078755][ T8657] netlink: 'syz.2.748': attribute type 11 has an invalid length. [ 163.159313][ T8659] netlink: 8 bytes leftover after parsing attributes in process `syz.4.750'. [ 163.177183][ T8659] netlink: 104 bytes leftover after parsing attributes in process `syz.4.750'. [ 163.265948][ T8662] IPVS: Scheduler module ip_vs_ not found [ 163.293649][ T8663] tipc: Enabled bearer , priority 0 [ 163.317203][ T8663] syzkaller0: entered promiscuous mode [ 163.334446][ T8663] syzkaller0: entered allmulticast mode [ 163.420560][ T8660] tipc: Resetting bearer [ 163.465902][ T8660] tipc: Disabling bearer [ 163.764229][ T8696] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 163.779857][ T8696] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 163.789898][ T8696] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 163.798309][ T8696] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 163.815429][ T8696] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 163.828666][ T8696] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 163.839223][ T8696] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 163.848960][ T8696] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 163.859626][ T8696] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 163.869058][ T8696] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 164.717388][ T8703] lo speed is unknown, defaulting to 1000 [ 164.727951][ T8703] wg1 speed is unknown, defaulting to 1000 [ 164.846366][ T8710] netlink: 'syz.3.763': attribute type 1 has an invalid length. [ 164.855103][ T8710] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 165.087636][ T8724] lo speed is unknown, defaulting to 1000 [ 165.103184][ T8724] wg1 speed is unknown, defaulting to 1000 [ 165.113106][ T8719] __nla_validate_parse: 4 callbacks suppressed [ 165.113123][ T8719] netlink: 4 bytes leftover after parsing attributes in process `syz.3.766'. [ 165.764914][ T8758] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 165.860975][ T8757] block nbd1: server does not support multiple connections per device. [ 165.875722][ T8757] block nbd1: shutting down sockets [ 167.543816][ T8783] netlink: 60 bytes leftover after parsing attributes in process `syz.1.784'. [ 167.636236][ T8787] netlink: 4 bytes leftover after parsing attributes in process `syz.1.786'. [ 167.655819][ T8791] netlink: 4 bytes leftover after parsing attributes in process `syz.1.786'. [ 167.759944][ T8798] tipc: Enabled bearer , priority 0 [ 167.777177][ T8798] syzkaller0: entered promiscuous mode [ 167.789219][ T8798] syzkaller0: entered allmulticast mode [ 167.875651][ T8806] sctp: [Deprecated]: syz.4.792 (pid 8806) Use of int in max_burst socket option deprecated. [ 167.875651][ T8806] Use struct sctp_assoc_value instead [ 168.011667][ T8807] tipc: Resetting bearer [ 168.041757][ T8800] netlink: 60 bytes leftover after parsing attributes in process `syz.1.790'. [ 168.129843][ T8798] tipc: Resetting bearer [ 168.181202][ T8798] tipc: Disabling bearer [ 168.231524][ T8811] netlink: 4 bytes leftover after parsing attributes in process `syz.2.791'. [ 168.476292][ T8806] netlink: 4 bytes leftover after parsing attributes in process `syz.4.792'. [ 168.526780][ T8824] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.795'. [ 169.459983][ T8871] netlink: 'syz.0.807': attribute type 29 has an invalid length. [ 169.495274][ T8871] netlink: 'syz.0.807': attribute type 29 has an invalid length. [ 169.789954][ T8882] FAULT_INJECTION: forcing a failure. [ 169.789954][ T8882] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 169.817861][ T8879] bond1: entered promiscuous mode [ 169.888646][ T8882] CPU: 0 UID: 0 PID: 8882 Comm: syz.0.812 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 169.888678][ T8882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 169.888691][ T8882] Call Trace: [ 169.888699][ T8882] [ 169.888709][ T8882] dump_stack_lvl+0x189/0x250 [ 169.888736][ T8882] ? __pfx____ratelimit+0x10/0x10 [ 169.888767][ T8882] ? __pfx_dump_stack_lvl+0x10/0x10 [ 169.888787][ T8882] ? __pfx__printk+0x10/0x10 [ 169.888825][ T8882] should_fail_ex+0x414/0x560 [ 169.888863][ T8882] _copy_to_user+0x31/0xb0 [ 169.888895][ T8882] simple_read_from_buffer+0xe1/0x170 [ 169.888933][ T8882] proc_fail_nth_read+0x1b3/0x220 [ 169.888962][ T8882] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 169.888994][ T8882] ? rw_verify_area+0x258/0x650 [ 169.889022][ T8882] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 169.889048][ T8882] vfs_read+0x1fd/0x980 [ 169.889076][ T8882] ? fdget_pos+0x247/0x320 [ 169.889101][ T8882] ? __pfx___mutex_lock+0x10/0x10 [ 169.889143][ T8882] ? __pfx_vfs_read+0x10/0x10 [ 169.889173][ T8882] ? __fget_files+0x2a/0x420 [ 169.889198][ T8882] ? __fget_files+0x3a0/0x420 [ 169.889216][ T8882] ? __fget_files+0x2a/0x420 [ 169.889246][ T8882] ksys_read+0x145/0x250 [ 169.889279][ T8882] ? __pfx_ksys_read+0x10/0x10 [ 169.889305][ T8882] ? rcu_is_watching+0x15/0xb0 [ 169.889342][ T8882] ? do_syscall_64+0xbe/0x3b0 [ 169.889378][ T8882] do_syscall_64+0xfa/0x3b0 [ 169.889407][ T8882] ? lockdep_hardirqs_on+0x9c/0x150 [ 169.889436][ T8882] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.889457][ T8882] ? clear_bhb_loop+0x60/0xb0 [ 169.889483][ T8882] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.889502][ T8882] RIP: 0033:0x7fe0de98d57c [ 169.889521][ T8882] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 169.889538][ T8882] RSP: 002b:00007fe0df75c030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 169.889561][ T8882] RAX: ffffffffffffffda RBX: 00007fe0debb5fa0 RCX: 00007fe0de98d57c [ 169.889576][ T8882] RDX: 000000000000000f RSI: 00007fe0df75c0a0 RDI: 0000000000000003 [ 169.889589][ T8882] RBP: 00007fe0df75c090 R08: 0000000000000000 R09: 0000000000000000 [ 169.889602][ T8882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 169.889613][ T8882] R13: 0000000000000001 R14: 00007fe0debb5fa0 R15: 00007ffc75c81888 [ 169.889646][ T8882] [ 170.209709][ T8889] netlink: 4 bytes leftover after parsing attributes in process `syz.2.815'. [ 170.309787][ T8897] netlink: 4 bytes leftover after parsing attributes in process `syz.1.817'. [ 170.347610][ T8901] netlink: 'syz.3.818': attribute type 29 has an invalid length. [ 170.374849][ T8901] netlink: 'syz.3.818': attribute type 29 has an invalid length. [ 170.501756][ T8899] netlink: 8 bytes leftover after parsing attributes in process `syz.0.819'. [ 170.521777][ T8899] netlink: 8 bytes leftover after parsing attributes in process `syz.0.819'. [ 170.819613][ T8933] ip6_vti0: mtu less than device minimum [ 170.937895][ T8935] netlink: 8 bytes leftover after parsing attributes in process `syz.0.827'. [ 171.262560][ T8950] netlink: 'syz.2.832': attribute type 29 has an invalid length. [ 171.313301][ T8950] netlink: 'syz.2.832': attribute type 29 has an invalid length. [ 171.377950][ T8954] netlink: 4 bytes leftover after parsing attributes in process `syz.4.833'. [ 171.538263][ T8958] netlink: 132 bytes leftover after parsing attributes in process `syz.4.833'. [ 171.797556][ T8963] netlink: 12 bytes leftover after parsing attributes in process `syz.3.836'. [ 171.897954][ T8963] netlink: 'syz.3.836': attribute type 1 has an invalid length. [ 171.971893][ T8967] netlink: 12 bytes leftover after parsing attributes in process `syz.4.838'. [ 172.018162][ T8967] bridge4: entered promiscuous mode [ 172.036371][ T8967] bridge4: entered allmulticast mode [ 172.063655][ T8967] team0: Port device bridge4 added [ 172.109985][ T8977] netlink: 4 bytes leftover after parsing attributes in process `syz.0.839'. [ 172.217611][ T8970] lo speed is unknown, defaulting to 1000 [ 172.224359][ T8977] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 172.230923][ T8981] IPv6: Can't replace route, no match found [ 172.386391][ T8977] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 172.436940][ T8970] wg1 speed is unknown, defaulting to 1000 [ 172.443741][ T8991] netlink: 'syz.4.844': attribute type 29 has an invalid length. [ 172.497761][ T8991] netlink: 'syz.4.844': attribute type 29 has an invalid length. [ 172.519437][ T8997] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode [ 172.897605][ T9013] tipc: Enabled bearer , priority 0 [ 172.905752][ T9016] syzkaller0: entered promiscuous mode [ 172.923918][ T9016] syzkaller0: entered allmulticast mode [ 173.006616][ T9007] tipc: Resetting bearer [ 173.062069][ T9006] tipc: Resetting bearer [ 173.132330][ T9006] tipc: Disabling bearer [ 173.572597][ T9040] netlink: 'syz.4.857': attribute type 29 has an invalid length. [ 173.826426][ T9051] bond0: (slave bond_slave_0): Releasing backup interface [ 173.848675][ T9051] bond0: (slave bond_slave_1): Releasing backup interface [ 173.875556][ T9051] team0: Port device team_slave_0 removed [ 173.891558][ T9051] team0: Port device team_slave_1 removed [ 173.903006][ T9051] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 173.924602][ T9051] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 173.949450][ T9051] team0: Port device bridge0 removed [ 174.632809][ T1208] IPVS: starting estimator thread 0... [ 174.761120][ T9083] IPVS: using max 26 ests per chain, 62400 per kthread [ 174.800108][ T9090] validate_nla: 1 callbacks suppressed [ 174.832541][ T9090] netlink: 'syz.1.872': attribute type 29 has an invalid length. [ 174.869072][ T9090] netlink: 'syz.1.872': attribute type 29 has an invalid length. [ 174.938399][ T9092] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.946821][ T9092] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.627559][ T9139] netlink: 'syz.3.887': attribute type 29 has an invalid length. [ 175.716086][ T9139] netlink: 'syz.3.887': attribute type 29 has an invalid length. [ 175.767873][ T9143] lo speed is unknown, defaulting to 1000 [ 175.809993][ T9143] wg1 speed is unknown, defaulting to 1000 [ 176.177108][ T9165] netlink: 'syz.1.896': attribute type 5 has an invalid length. [ 176.189741][ T9167] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 176.217430][ T9169] __nla_validate_parse: 5 callbacks suppressed [ 176.217452][ T9169] netlink: 40 bytes leftover after parsing attributes in process `syz.4.897'. [ 176.271768][ T9167] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 176.434823][ T9179] netlink: 'syz.4.902': attribute type 29 has an invalid length. [ 176.460466][ T9179] netlink: 'syz.4.902': attribute type 29 has an invalid length. [ 176.495774][ T1208] IPVS: starting estimator thread 0... [ 176.607167][ T9181] IPVS: using max 26 ests per chain, 62400 per kthread [ 176.676965][ T9187] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 176.692936][ T9187] netlink: 16 bytes leftover after parsing attributes in process `syz.4.906'. [ 176.731611][ T9188] netlink: 16 bytes leftover after parsing attributes in process `syz.4.906'. [ 176.848990][ T1313] IPVS: stop unused estimator thread 0... [ 176.941128][ T9207] netlink: 52 bytes leftover after parsing attributes in process `syz.2.912'. [ 176.972059][ T9207] netlink: 16 bytes leftover after parsing attributes in process `syz.2.912'. [ 177.017981][ T9207] netlink: 'syz.2.912': attribute type 13 has an invalid length. [ 177.073365][ T9207] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.080638][ T9207] bridge0: port 2(bridge_slave_1) entered listening state [ 177.088014][ T9207] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.095215][ T9207] bridge0: port 1(bridge_slave_0) entered listening state [ 177.105472][ T5943] ip6_tnl_xmit_ctl: 6554 callbacks suppressed [ 177.105492][ T5943] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 177.124131][ T9207] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.136497][ T9207] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 177.252235][ T9222] netlink: 'syz.4.916': attribute type 29 has an invalid length. [ 177.261722][ T9222] netlink: 'syz.4.916': attribute type 29 has an invalid length. [ 177.979781][ T9265] netlink: 92 bytes leftover after parsing attributes in process `syz.1.932'. [ 178.050805][ T9] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 178.097010][ T9272] netlink: 16 bytes leftover after parsing attributes in process `syz.0.935'. [ 178.206627][ T9273] netlink: 12 bytes leftover after parsing attributes in process `syz.0.935'. [ 179.123907][ T9285] netlink: 20 bytes leftover after parsing attributes in process `syz.1.942'. [ 179.208260][ T9285] netlink: 152 bytes leftover after parsing attributes in process `syz.1.942'. [ 179.382745][ T1333] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 179.469796][ T9309] lo speed is unknown, defaulting to 1000 [ 179.470260][ T1333] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 179.517081][ T1333] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 179.565402][ T9309] wg1 speed is unknown, defaulting to 1000 [ 179.565408][ T1333] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 179.587144][ T9324] tipc: Enabled bearer , priority 0 [ 179.595870][ T9324] syzkaller0: entered promiscuous mode [ 179.601776][ T9322] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 179.605488][ T9324] syzkaller0: entered allmulticast mode [ 179.609012][ T9322] IPv6: NLM_F_CREATE should be set when creating new route [ 179.609089][ T9322] IPv6: NLM_F_CREATE should be set when creating new route [ 179.726500][ T9324] tipc: Resetting bearer [ 179.826374][ T9335] validate_nla: 10 callbacks suppressed [ 179.826394][ T9335] netlink: 'syz.0.955': attribute type 29 has an invalid length. [ 179.925610][ T9335] netlink: 'syz.0.955': attribute type 29 has an invalid length. [ 179.952741][ T9332] tipc: Resetting bearer [ 180.041191][ T9332] tipc: Disabling bearer [ 180.364228][ T9358] netlink: 'syz.1.963': attribute type 29 has an invalid length. [ 180.379163][ T9358] netlink: 'syz.1.963': attribute type 29 has an invalid length. [ 180.463445][ T9356] syzkaller0: mtu less than device minimum [ 180.999700][ T9393] lo speed is unknown, defaulting to 1000 [ 181.008544][ T9393] wg1 speed is unknown, defaulting to 1000 [ 181.035793][ T9396] macsec2: entered promiscuous mode [ 181.041551][ T9396] bond0: entered promiscuous mode [ 181.046887][ T9396] macsec2: entered allmulticast mode [ 181.052784][ T9396] bond0: entered allmulticast mode [ 181.063588][ T9396] bond0: left allmulticast mode [ 181.068594][ T9396] bond0: left promiscuous mode [ 181.077734][ T9398] netlink: 'syz.1.973': attribute type 9 has an invalid length. [ 181.152423][ T9398] hsr0: entered promiscuous mode [ 181.158588][ T9398] macvlan2: entered promiscuous mode [ 181.164358][ T9398] macvlan2: entered allmulticast mode [ 181.169902][ T9398] hsr0: entered allmulticast mode [ 181.178840][ T9398] hsr_slave_0: entered allmulticast mode [ 181.185076][ T9398] hsr_slave_1: entered allmulticast mode [ 181.389819][ T9410] netlink: 'syz.0.977': attribute type 29 has an invalid length. [ 181.515945][ T9410] netlink: 'syz.0.977': attribute type 29 has an invalid length. [ 181.524912][ T9413] sctp: [Deprecated]: syz.2.975 (pid 9413) Use of int in maxseg socket option. [ 181.524912][ T9413] Use struct sctp_assoc_value instead [ 181.652465][ T9415] tipc: Enabled bearer , priority 0 [ 181.667633][ T9418] tipc: Enabling of bearer rejected, failed to enable media [ 181.677930][ T9415] syzkaller0: entered promiscuous mode [ 181.683991][ T9415] syzkaller0: entered allmulticast mode [ 181.691829][ T9417] tipc: Enabling of bearer rejected, failed to enable media [ 181.705925][ T9418] veth1_macvtap: entered allmulticast mode [ 181.920576][ T9433] netlink: 'syz.1.984': attribute type 1 has an invalid length. [ 181.952265][ T9433] __nla_validate_parse: 10 callbacks suppressed [ 181.952284][ T9433] netlink: 204 bytes leftover after parsing attributes in process `syz.1.984'. [ 181.995136][ T9430] tipc: Enabled bearer , priority 0 [ 182.003931][ T9430] syzkaller0: entered promiscuous mode [ 182.010864][ T9430] syzkaller0: entered allmulticast mode [ 182.024920][ T9414] tipc: Resetting bearer [ 182.044741][ T9414] tipc: Disabling bearer [ 182.084795][ T9430] tipc: Resetting bearer [ 182.101566][ T9429] tipc: Resetting bearer [ 182.126644][ T9429] tipc: Disabling bearer [ 182.552696][ T9463] ..@ÿ: renamed from bond_slave_0 [ 182.587130][ T9463] nbd: must specify an index to disconnect [ 182.594698][ T9463] nbd: must specify a device to reconfigure [ 182.647687][ T9472] netlink: 'syz.3.996': attribute type 29 has an invalid length. [ 182.674118][ T9472] netlink: 'syz.3.996': attribute type 29 has an invalid length. [ 182.936600][ T9489] netlink: 368 bytes leftover after parsing attributes in process `syz.1.1003'. [ 182.953587][ T9491] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1000'. [ 182.975575][ T9491] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 184.070028][ T9565] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1024'. [ 184.098404][ T9568] tipc: Enabled bearer , priority 0 [ 184.133744][ T9569] syzkaller0: entered promiscuous mode [ 184.167271][ T9569] syzkaller0: entered allmulticast mode [ 184.235867][ T9564] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1023'. [ 184.294629][ T9570] tipc: Resetting bearer [ 184.365595][ T9567] tipc: Resetting bearer [ 184.386052][ T9567] tipc: Disabling bearer [ 184.405887][ T9564] macsec2: entered promiscuous mode [ 184.411668][ T9564] macsec2: entered allmulticast mode [ 184.468062][ T9582] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1030'. [ 184.627006][ T9591] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1034'. [ 184.640021][ T9591] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1034'. [ 184.669267][ T9593] team0: Mode changed to "loadbalance" [ 184.775293][ T9597] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1038'. [ 185.017284][ T9614] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1044'. [ 185.079347][ T9618] validate_nla: 11 callbacks suppressed [ 185.079370][ T9618] netlink: 'syz.0.1046': attribute type 29 has an invalid length. [ 185.118292][ T9618] netlink: 'syz.0.1046': attribute type 29 has an invalid length. [ 185.148266][ T9624] netlink: 'syz.1.1048': attribute type 29 has an invalid length. [ 185.161772][ T9624] netlink: 'syz.1.1048': attribute type 29 has an invalid length. [ 185.242965][ T9626] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 185.635481][ T9649] netlink: 'syz.0.1062': attribute type 29 has an invalid length. [ 185.645420][ T9649] netlink: 'syz.0.1062': attribute type 29 has an invalid length. [ 185.988525][ T9666] tipc: Enabling of bearer rejected, failed to enable media [ 186.213697][ T9680] ipvlan3: entered promiscuous mode [ 186.220830][ T9680] bridge0: port 1(ipvlan3) entered blocking state [ 186.227511][ T9680] bridge0: port 1(ipvlan3) entered disabled state [ 186.238319][ T9680] ipvlan3: entered allmulticast mode [ 186.244014][ T9680] bridge0: entered allmulticast mode [ 186.252242][ T9680] ipvlan3: left allmulticast mode [ 186.259399][ T9680] bridge0: left allmulticast mode [ 186.604176][ T9692] netlink: 'syz.0.1076': attribute type 29 has an invalid length. [ 186.623575][ T9692] netlink: 'syz.0.1076': attribute type 29 has an invalid length. [ 186.850444][ T9700] tipc: Can't bind to reserved service type 2 [ 187.368607][ T9730] __nla_validate_parse: 6 callbacks suppressed [ 187.368624][ T9730] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1086'. [ 187.384759][ T9724] lo speed is unknown, defaulting to 1000 [ 187.410041][ T9724] wg1 speed is unknown, defaulting to 1000 [ 187.434620][ T9732] C: renamed from team_slave_0 (while UP) [ 187.459065][ T9732] netlink: 'syz.2.1087': attribute type 2 has an invalid length. [ 187.467998][ T9732] netlink: 116 bytes leftover after parsing attributes in process `syz.2.1087'. [ 187.477349][ T9732] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 187.587138][ T9730] lo speed is unknown, defaulting to 1000 [ 187.619618][ T9645] lo speed is unknown, defaulting to 1000 [ 187.668524][ T9730] wg1 speed is unknown, defaulting to 1000 [ 187.668540][ T9738] netlink: 'syz.2.1088': attribute type 29 has an invalid length. [ 187.728948][ T9645] wg1 speed is unknown, defaulting to 1000 [ 187.930348][ T9745] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1090'. [ 187.979552][ T9745] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1090'. [ 187.993970][ T9745] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1090'. [ 188.005361][ T9745] nbd: socks must be embedded in a SOCK_ITEM attr [ 188.200458][ T5853] Bluetooth: hci4: command 0x0406 tx timeout [ 188.528436][ T9770] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1098'. [ 188.825762][ T9785] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1102'. [ 188.970081][ T9800] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1106'. [ 189.363540][ T9821] tipc: Enabled bearer , priority 0 [ 189.390770][ T9821] syzkaller0: entered promiscuous mode [ 189.396291][ T9821] syzkaller0: entered allmulticast mode [ 189.576201][ T9820] tipc: Resetting bearer [ 189.615893][ T9842] siw: device registration error -23 [ 189.643507][ T9820] tipc: Disabling bearer [ 190.091658][ T9866] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1126'. [ 190.106448][ T9867] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1127'. [ 190.119500][ T9867] nbd: must specify a size in bytes for the device [ 190.482230][ T9879] validate_nla: 9 callbacks suppressed [ 190.482249][ T9879] netlink: 'syz.1.1133': attribute type 12 has an invalid length. [ 190.579723][ T9897] netlink: 'syz.4.1139': attribute type 29 has an invalid length. [ 190.588745][ T9897] netlink: 'syz.4.1139': attribute type 29 has an invalid length. [ 191.549648][ T9925] netlink: 'syz.1.1150': attribute type 29 has an invalid length. [ 191.579005][ T9925] netlink: 'syz.1.1150': attribute type 29 has an invalid length. [ 191.899579][ T9949] netlink: 'syz.3.1158': attribute type 29 has an invalid length. [ 191.946077][ T9949] netlink: 'syz.3.1158': attribute type 29 has an invalid length. [ 192.128540][ T9952] lo speed is unknown, defaulting to 1000 [ 192.143823][ T9952] wg1 speed is unknown, defaulting to 1000 [ 192.312164][ T9974] netlink: 'syz.3.1165': attribute type 29 has an invalid length. [ 192.327737][ T9979] netlink: 'syz.3.1165': attribute type 29 has an invalid length. [ 192.352349][ T9977] vlan0: entered promiscuous mode [ 192.357620][ T9977] vlan0: entered allmulticast mode [ 192.388426][ T9977] hsr_slave_1: entered allmulticast mode [ 192.576758][ T9993] sctp: [Deprecated]: syz.4.1172 (pid 9993) Use of struct sctp_assoc_value in delayed_ack socket option. [ 192.576758][ T9993] Use struct sctp_sack_info instead [ 192.914144][T10009] netlink: 'syz.2.1174': attribute type 10 has an invalid length. [ 193.025362][T10009] team0: Port device dummy0 added [ 193.159190][ T24] hid-generic 0005:16BF:5505.0002: unknown main item tag 0x0 [ 193.233664][ T24] hid-generic 0005:16BF:5505.0002: unknown main item tag 0x0 [ 193.279247][ T24] hid-generic 0005:16BF:5505.0002: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa [ 193.512100][T10040] lo speed is unknown, defaulting to 1000 [ 193.519672][T10040] wg1 speed is unknown, defaulting to 1000 [ 193.574975][T10046] tipc: Invalid UDP bearer configuration [ 193.575041][T10046] tipc: Enabling of bearer rejected, failed to enable media [ 193.732886][T10057] 8021q: adding VLAN 0 to HW filter on device bond2 [ 194.407567][T10102] __nla_validate_parse: 6 callbacks suppressed [ 194.407585][T10102] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1200'. [ 197.121299][T10104] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1203'. [ 197.257737][T10110] 8021q: VLANs not supported on caif0 [ 197.330023][T10116] validate_nla: 5 callbacks suppressed [ 197.330042][T10116] netlink: 'syz.1.1207': attribute type 29 has an invalid length. [ 197.387446][T10123] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1208'. [ 197.431492][T10116] netlink: 'syz.1.1207': attribute type 29 has an invalid length. [ 197.565271][T10131] ±ÿ: renamed from batadv_slave_1 (while UP) [ 197.759654][T10145] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 197.838880][T10130] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1212'. [ 197.963748][T10154] RDS: rds_bind could not find a transport for fe88::2, load rds_tcp or rds_rdma? [ 198.145175][T10167] netlink: 'syz.1.1223': attribute type 29 has an invalid length. [ 198.186879][T10167] netlink: 'syz.1.1223': attribute type 29 has an invalid length. [ 198.366216][T10170] netlink: 196 bytes leftover after parsing attributes in process `syz.2.1225'. [ 198.533265][T10183] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1230'. [ 198.689040][T10193] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1231'. [ 198.881768][T10170] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.889118][T10170] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.330701][T10170] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 199.431306][T10170] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 199.712496][T10170] macvlan0: left promiscuous mode [ 200.061062][T10170] bond0: left promiscuous mode [ 200.065892][T10170] bridge1: left promiscuous mode [ 200.074397][T10170] macvlan2: left promiscuous mode [ 200.105462][T10170] team1: left promiscuous mode [ 200.112239][T10170] geneve2: left promiscuous mode [ 200.209284][T10193] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 200.241671][ T5943] wg1 speed is unknown, defaulting to 1000 [ 200.247534][ T5943] syz0: Port: 1 Link DOWN [ 200.253837][ T3579] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.262884][ T3579] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0 [ 200.274697][ T3579] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.288107][ T3579] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0 [ 200.308703][T10182] lo speed is unknown, defaulting to 1000 [ 200.316512][T10211] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1232'. [ 200.326290][ T3579] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.326326][ T3579] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0 [ 200.327059][ T3579] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.327095][ T3579] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0 [ 200.351729][T10182] wg1 speed is unknown, defaulting to 1000 [ 200.542673][T10216] openvswitch: netlink: IPv4 tun info is not correct [ 200.564352][T10216] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 200.795452][T10226] netlink: 'syz.0.1237': attribute type 29 has an invalid length. [ 200.805428][T10234] netlink: 'syz.0.1237': attribute type 29 has an invalid length. [ 200.820000][T10224] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 200.828046][T10224] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 201.307493][T10258] netlink: 212 bytes leftover after parsing attributes in process `syz.0.1248'. [ 201.575910][T10276] netlink: 252 bytes leftover after parsing attributes in process `syz.4.1247'. [ 201.785346][T10283] netlink: 'syz.1.1255': attribute type 29 has an invalid length. [ 201.797873][T10283] netlink: 'syz.1.1255': attribute type 29 has an invalid length. [ 202.129073][T10298] lo speed is unknown, defaulting to 1000 [ 202.162770][T10298] wg1 speed is unknown, defaulting to 1000 [ 202.193412][T10304] tipc: Enabled bearer , priority 0 [ 202.223996][T10304] syzkaller0: entered promiscuous mode [ 202.229665][T10304] syzkaller0: entered allmulticast mode [ 202.287680][T10311] netlink: 'syz.0.1261': attribute type 6 has an invalid length. [ 202.296806][T10304] syzkaller0: mtu less than device minimum [ 202.321140][T10302] tipc: Resetting bearer [ 202.368956][T10302] tipc: Disabling bearer [ 202.468205][T10323] netlink: 'syz.1.1268': attribute type 13 has an invalid length. [ 202.536667][T10319] lo speed is unknown, defaulting to 1000 [ 203.027795][T10323] batman_adv: batadv0: Interface activated: ipvlan2 [ 203.114232][T10323] 8021q: adding VLAN 0 to HW filter on device bond1 [ 203.128069][T10323] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 203.136310][T10323] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 203.158746][T10319] wg1 speed is unknown, defaulting to 1000 [ 203.167561][T10330] netlink: 'syz.3.1270': attribute type 29 has an invalid length. [ 203.203651][T10315] lo speed is unknown, defaulting to 1000 [ 203.203670][T10331] netlink: 'syz.3.1270': attribute type 29 has an invalid length. [ 203.417318][T10315] wg1 speed is unknown, defaulting to 1000 [ 204.284871][T10352] geneve3: entered promiscuous mode [ 204.308891][T10353] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 204.324546][T10353] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.352964][T10356] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 204.407375][ T3579] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.425101][ T3579] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.544180][T10353] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 204.561490][T10353] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.585355][ T3579] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.619278][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.685792][T10353] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 204.696637][T10353] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.814139][T10353] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 204.825141][T10379] openvswitch: netlink: IPv4 tun info is not correct [ 204.846133][T10353] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.905254][T10377] netlink: 'syz.2.1287': attribute type 29 has an invalid length. [ 204.943796][T10381] netlink: 'syz.2.1287': attribute type 29 has an invalid length. [ 205.111611][ T1333] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 205.119845][ T1333] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.162301][ T1333] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 205.174071][T10392] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1289'. [ 205.179597][ T1333] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.219702][ T1333] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 205.254943][ T1333] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.274700][T10397] FAULT_INJECTION: forcing a failure. [ 205.274700][T10397] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 205.322206][ T1313] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 205.336552][T10397] CPU: 0 UID: 0 PID: 10397 Comm: syz.4.1291 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 205.336582][T10397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 205.336594][T10397] Call Trace: [ 205.336602][T10397] [ 205.336611][T10397] dump_stack_lvl+0x189/0x250 [ 205.336637][T10397] ? __pfx____ratelimit+0x10/0x10 [ 205.336665][T10397] ? __pfx_dump_stack_lvl+0x10/0x10 [ 205.336684][T10397] ? __pfx__printk+0x10/0x10 [ 205.336708][T10397] ? __might_fault+0xb0/0x130 [ 205.336746][T10397] should_fail_ex+0x414/0x560 [ 205.336781][T10397] _copy_from_user+0x2d/0xb0 [ 205.336808][T10397] ___sys_sendmsg+0x158/0x2a0 [ 205.336844][T10397] ? __pfx____sys_sendmsg+0x10/0x10 [ 205.336900][T10397] ? __fget_files+0x2a/0x420 [ 205.336918][T10397] ? __fget_files+0x3a0/0x420 [ 205.336948][T10397] __x64_sys_sendmsg+0x19b/0x260 [ 205.336971][T10397] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 205.337002][T10397] ? __pfx_ksys_write+0x10/0x10 [ 205.337028][T10397] ? rcu_is_watching+0x15/0xb0 [ 205.337062][T10397] ? do_syscall_64+0xbe/0x3b0 [ 205.337094][T10397] do_syscall_64+0xfa/0x3b0 [ 205.337121][T10397] ? lockdep_hardirqs_on+0x9c/0x150 [ 205.337148][T10397] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.337167][T10397] ? clear_bhb_loop+0x60/0xb0 [ 205.337190][T10397] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.337208][T10397] RIP: 0033:0x7f03edf8eb69 [ 205.337225][T10397] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 205.337240][T10397] RSP: 002b:00007f03ebdf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 205.337262][T10397] RAX: ffffffffffffffda RBX: 00007f03ee1b5fa0 RCX: 00007f03edf8eb69 [ 205.337276][T10397] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000004 [ 205.337288][T10397] RBP: 00007f03ebdf6090 R08: 0000000000000000 R09: 0000000000000000 [ 205.337299][T10397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 205.337311][T10397] R13: 0000000000000000 R14: 00007f03ee1b5fa0 R15: 00007ffe3cef2e78 [ 205.337340][T10397] [ 205.338766][ T1313] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.635192][T10402] RDS: rds_bind could not find a transport for ::ffff:172.30.0.5, load rds_tcp or rds_rdma? [ 205.662280][T10409] FAULT_INJECTION: forcing a failure. [ 205.662280][T10409] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 205.678218][T10409] CPU: 0 UID: 0 PID: 10409 Comm: syz.3.1295 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 205.678244][T10409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 205.678254][T10409] Call Trace: [ 205.678260][T10409] [ 205.678267][T10409] dump_stack_lvl+0x189/0x250 [ 205.678290][T10409] ? __pfx____ratelimit+0x10/0x10 [ 205.678314][T10409] ? __pfx_dump_stack_lvl+0x10/0x10 [ 205.678331][T10409] ? __pfx__printk+0x10/0x10 [ 205.678365][T10409] should_fail_ex+0x414/0x560 [ 205.678400][T10409] _copy_to_user+0x31/0xb0 [ 205.678428][T10409] simple_read_from_buffer+0xe1/0x170 [ 205.678462][T10409] proc_fail_nth_read+0x1b3/0x220 [ 205.678488][T10409] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 205.678510][T10409] ? rw_verify_area+0x258/0x650 [ 205.678534][T10409] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 205.678556][T10409] vfs_read+0x1fd/0x980 [ 205.678598][T10409] ? fdget_pos+0x247/0x320 [ 205.678618][T10409] ? __pfx___mutex_lock+0x10/0x10 [ 205.678645][T10409] ? __pfx_vfs_read+0x10/0x10 [ 205.678671][T10409] ? __fget_files+0x2a/0x420 [ 205.678706][T10409] ? __fget_files+0x3a0/0x420 [ 205.678722][T10409] ? __fget_files+0x2a/0x420 [ 205.678747][T10409] ksys_read+0x145/0x250 [ 205.678773][T10409] ? __pfx_ksys_read+0x10/0x10 [ 205.678804][T10409] ? rcu_is_watching+0x15/0xb0 [ 205.678839][T10409] ? do_syscall_64+0xbe/0x3b0 [ 205.678870][T10409] do_syscall_64+0xfa/0x3b0 [ 205.678896][T10409] ? lockdep_hardirqs_on+0x9c/0x150 [ 205.678922][T10409] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.678939][T10409] ? clear_bhb_loop+0x60/0xb0 [ 205.678959][T10409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.678994][T10409] RIP: 0033:0x7fe6b7f8d57c [ 205.679011][T10409] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 205.679028][T10409] RSP: 002b:00007fe6b8e34030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 205.679049][T10409] RAX: ffffffffffffffda RBX: 00007fe6b81b5fa0 RCX: 00007fe6b7f8d57c [ 205.679062][T10409] RDX: 000000000000000f RSI: 00007fe6b8e340a0 RDI: 0000000000000006 [ 205.679073][T10409] RBP: 00007fe6b8e34090 R08: 0000000000000000 R09: 0000000000000000 [ 205.679085][T10409] R10: 000000000000003e R11: 0000000000000246 R12: 0000000000000001 [ 205.679097][T10409] R13: 0000000000000000 R14: 00007fe6b81b5fa0 R15: 00007fffcbf0ed08 [ 205.679129][T10409] [ 206.076246][T10415] tipc: Enabled bearer , priority 0 [ 206.113570][T10415] syzkaller0: entered promiscuous mode [ 206.130846][T10415] syzkaller0: entered allmulticast mode [ 206.138785][T10419] netlink: 'syz.1.1299': attribute type 29 has an invalid length. [ 206.152118][T10419] netlink: 'syz.1.1299': attribute type 29 has an invalid length. [ 206.178213][T10417] lo speed is unknown, defaulting to 1000 [ 206.231108][T10422] lo speed is unknown, defaulting to 1000 [ 206.263981][T10417] wg1 speed is unknown, defaulting to 1000 [ 206.383154][T10432] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1303'. [ 206.416791][T10422] wg1 speed is unknown, defaulting to 1000 [ 206.425263][T10423] tipc: Resetting bearer [ 206.457824][T10415] tipc: Resetting bearer [ 206.534622][T10415] tipc: Disabling bearer [ 206.568783][T10437] FAULT_INJECTION: forcing a failure. [ 206.568783][T10437] name failslab, interval 1, probability 0, space 0, times 0 [ 206.627600][T10437] CPU: 1 UID: 0 PID: 10437 Comm: syz.1.1305 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 206.627632][T10437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 206.627646][T10437] Call Trace: [ 206.627654][T10437] [ 206.627663][T10437] dump_stack_lvl+0x189/0x250 [ 206.627691][T10437] ? __pfx____ratelimit+0x10/0x10 [ 206.627720][T10437] ? __pfx_dump_stack_lvl+0x10/0x10 [ 206.627742][T10437] ? __pfx__printk+0x10/0x10 [ 206.627773][T10437] ? __pfx___might_resched+0x10/0x10 [ 206.627810][T10437] should_fail_ex+0x414/0x560 [ 206.627847][T10437] should_failslab+0xa8/0x100 [ 206.627869][T10437] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 206.627901][T10437] ? __alloc_skb+0x112/0x2d0 [ 206.627936][T10437] __alloc_skb+0x112/0x2d0 [ 206.627972][T10437] netlink_sendmsg+0x5c6/0xb30 [ 206.628013][T10437] ? __pfx_netlink_sendmsg+0x10/0x10 [ 206.628048][T10437] ? aa_sock_msg_perm+0x94/0x160 [ 206.628077][T10437] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 206.628101][T10437] ? __pfx_netlink_sendmsg+0x10/0x10 [ 206.628133][T10437] __sock_sendmsg+0x219/0x270 [ 206.628164][T10437] ____sys_sendmsg+0x505/0x830 [ 206.628192][T10437] ? __pfx_____sys_sendmsg+0x10/0x10 [ 206.628224][T10437] ? import_iovec+0x74/0xa0 [ 206.628257][T10437] ___sys_sendmsg+0x21f/0x2a0 [ 206.628282][T10437] ? __pfx____sys_sendmsg+0x10/0x10 [ 206.628341][T10437] ? __fget_files+0x2a/0x420 [ 206.628362][T10437] ? __fget_files+0x3a0/0x420 [ 206.628393][T10437] __x64_sys_sendmsg+0x19b/0x260 [ 206.628418][T10437] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 206.628459][T10437] ? __pfx_ksys_write+0x10/0x10 [ 206.628486][T10437] ? rcu_is_watching+0x15/0xb0 [ 206.628524][T10437] ? do_syscall_64+0xbe/0x3b0 [ 206.628559][T10437] do_syscall_64+0xfa/0x3b0 [ 206.628588][T10437] ? lockdep_hardirqs_on+0x9c/0x150 [ 206.628621][T10437] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.628642][T10437] ? clear_bhb_loop+0x60/0xb0 [ 206.628668][T10437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.628687][T10437] RIP: 0033:0x7f1bb378eb69 [ 206.628707][T10437] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 206.628725][T10437] RSP: 002b:00007f1bb4695038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 206.628749][T10437] RAX: ffffffffffffffda RBX: 00007f1bb39b5fa0 RCX: 00007f1bb378eb69 [ 206.628764][T10437] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000004 [ 206.628777][T10437] RBP: 00007f1bb4695090 R08: 0000000000000000 R09: 0000000000000000 [ 206.628790][T10437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 206.628802][T10437] R13: 0000000000000000 R14: 00007f1bb39b5fa0 R15: 00007ffdf2a774d8 [ 206.628833][T10437] [ 207.393648][T10466] netlink: 'syz.2.1311': attribute type 13 has an invalid length. [ 207.527069][T10465] netlink: 'syz.1.1313': attribute type 29 has an invalid length. [ 207.611628][T10466] 8021q: adding VLAN 0 to HW filter on device team0 [ 207.655372][T10466] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 207.684769][T10468] netlink: 'syz.1.1313': attribute type 29 has an invalid length. [ 207.733859][T10195] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 207.821449][T10474] openvswitch: netlink: Message has 16 unknown bytes. [ 207.876962][T10476] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1317'. [ 208.002072][T10482] sctp: [Deprecated]: syz.2.1321 (pid 10482) Use of struct sctp_assoc_value in delayed_ack socket option. [ 208.002072][T10482] Use struct sctp_sack_info instead [ 208.021045][ T3579] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 208.248948][T10497] FAULT_INJECTION: forcing a failure. [ 208.248948][T10497] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 208.271514][T10500] netlink: 'syz.4.1326': attribute type 29 has an invalid length. [ 208.287764][T10497] CPU: 1 UID: 0 PID: 10497 Comm: syz.3.1329 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 208.287797][T10497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 208.287810][T10497] Call Trace: [ 208.287819][T10497] [ 208.287828][T10497] dump_stack_lvl+0x189/0x250 [ 208.287854][T10497] ? __pfx____ratelimit+0x10/0x10 [ 208.287885][T10497] ? __pfx_dump_stack_lvl+0x10/0x10 [ 208.287907][T10497] ? __pfx__printk+0x10/0x10 [ 208.287933][T10497] ? __might_fault+0xb0/0x130 [ 208.287977][T10497] should_fail_ex+0x414/0x560 [ 208.288015][T10497] _copy_from_iter+0x1db/0x16f0 [ 208.288047][T10497] ? rcu_is_watching+0x15/0xb0 [ 208.288081][T10497] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 208.288115][T10497] ? __pfx__copy_from_iter+0x10/0x10 [ 208.288144][T10497] ? __build_skb_around+0x257/0x3e0 [ 208.288180][T10497] ? netlink_sendmsg+0x642/0xb30 [ 208.288211][T10497] ? skb_put+0x11b/0x210 [ 208.288235][T10497] netlink_sendmsg+0x6b2/0xb30 [ 208.288277][T10497] ? __pfx_netlink_sendmsg+0x10/0x10 [ 208.288323][T10497] ? aa_sock_msg_perm+0x94/0x160 [ 208.288354][T10497] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 208.288378][T10497] ? __pfx_netlink_sendmsg+0x10/0x10 [ 208.288411][T10497] __sock_sendmsg+0x219/0x270 [ 208.288442][T10497] ____sys_sendmsg+0x505/0x830 [ 208.288471][T10497] ? __pfx_____sys_sendmsg+0x10/0x10 [ 208.288504][T10497] ? import_iovec+0x74/0xa0 [ 208.288538][T10497] ___sys_sendmsg+0x21f/0x2a0 [ 208.288563][T10497] ? __pfx____sys_sendmsg+0x10/0x10 [ 208.288627][T10497] ? __fget_files+0x2a/0x420 [ 208.288647][T10497] ? __fget_files+0x3a0/0x420 [ 208.288680][T10497] __x64_sys_sendmsg+0x19b/0x260 [ 208.288705][T10497] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 208.288739][T10497] ? __pfx_ksys_write+0x10/0x10 [ 208.288767][T10497] ? rcu_is_watching+0x15/0xb0 [ 208.288805][T10497] ? do_syscall_64+0xbe/0x3b0 [ 208.288841][T10497] do_syscall_64+0xfa/0x3b0 [ 208.288871][T10497] ? lockdep_hardirqs_on+0x9c/0x150 [ 208.288899][T10497] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.288920][T10497] ? clear_bhb_loop+0x60/0xb0 [ 208.288947][T10497] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.288966][T10497] RIP: 0033:0x7fe6b7f8eb69 [ 208.288984][T10497] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 208.289002][T10497] RSP: 002b:00007fe6b8e34038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 208.289026][T10497] RAX: ffffffffffffffda RBX: 00007fe6b81b5fa0 RCX: 00007fe6b7f8eb69 [ 208.289041][T10497] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000004 [ 208.289055][T10497] RBP: 00007fe6b8e34090 R08: 0000000000000000 R09: 0000000000000000 [ 208.289068][T10497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 208.289080][T10497] R13: 0000000000000000 R14: 00007fe6b81b5fa0 R15: 00007fffcbf0ed08 [ 208.289114][T10497] [ 208.312209][T10500] netlink: 'syz.4.1326': attribute type 29 has an invalid length. [ 208.600439][ T5943] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 208.622408][T10508] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1332'. [ 208.917651][T10523] tipc: Enabled bearer , priority 0 [ 209.002553][T10523] tipc: Resetting bearer [ 209.009303][T10527] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 209.026943][T10523] tipc: Disabling bearer [ 209.088582][ T6269] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 209.116975][ T6269] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 209.161985][T10195] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 209.261522][T10538] netlink: 'syz.4.1345': attribute type 29 has an invalid length. [ 209.293708][T10538] netlink: 'syz.4.1345': attribute type 29 has an invalid length. [ 209.361668][T10541] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1346'. [ 210.001100][T10568] netlink: 'syz.0.1356': attribute type 10 has an invalid length. [ 210.009049][T10568] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1356'. [ 210.088526][T10568] dummy0: entered promiscuous mode [ 210.132870][T10568] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 210.188494][T10572] netlink: 'syz.3.1358': attribute type 29 has an invalid length. [ 210.212470][T10576] netlink: 'syz.3.1358': attribute type 29 has an invalid length. [ 210.403869][T10583] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 210.499000][T10585] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1360'. [ 210.653574][T10589] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1361'. [ 210.667302][T10590] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1355'. [ 210.687744][T10589] veth1_macvtap: left promiscuous mode [ 210.771295][T10584] netlink: 'syz.0.1361': attribute type 1 has an invalid length. [ 210.779279][T10584] nbd: error processing sock list [ 210.786193][T10584] block nbd1: shutting down sockets [ 210.809963][T10593] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1364'. [ 210.822465][T10599] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1365'. [ 211.023748][T10610] FAULT_INJECTION: forcing a failure. [ 211.023748][T10610] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 211.060380][T10610] CPU: 1 UID: 0 PID: 10610 Comm: syz.1.1369 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 211.060413][T10610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 211.060426][T10610] Call Trace: [ 211.060435][T10610] [ 211.060444][T10610] dump_stack_lvl+0x189/0x250 [ 211.060472][T10610] ? __pfx____ratelimit+0x10/0x10 [ 211.060504][T10610] ? __pfx_dump_stack_lvl+0x10/0x10 [ 211.060526][T10610] ? __pfx__printk+0x10/0x10 [ 211.060553][T10610] ? __might_fault+0xb0/0x130 [ 211.060597][T10610] should_fail_ex+0x414/0x560 [ 211.060638][T10610] _copy_from_user+0x2d/0xb0 [ 211.060669][T10610] ___sys_sendmsg+0x158/0x2a0 [ 211.060696][T10610] ? __pfx____sys_sendmsg+0x10/0x10 [ 211.060759][T10610] ? __fget_files+0x2a/0x420 [ 211.060779][T10610] ? __fget_files+0x3a0/0x420 [ 211.060812][T10610] __x64_sys_sendmsg+0x19b/0x260 [ 211.060838][T10610] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 211.060872][T10610] ? __pfx_ksys_write+0x10/0x10 [ 211.060900][T10610] ? rcu_is_watching+0x15/0xb0 [ 211.060939][T10610] ? do_syscall_64+0xbe/0x3b0 [ 211.060976][T10610] do_syscall_64+0xfa/0x3b0 [ 211.061006][T10610] ? lockdep_hardirqs_on+0x9c/0x150 [ 211.061046][T10610] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.061068][T10610] ? clear_bhb_loop+0x60/0xb0 [ 211.061095][T10610] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.061115][T10610] RIP: 0033:0x7f1bb378eb69 [ 211.061135][T10610] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 211.061154][T10610] RSP: 002b:00007f1bb4695038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 211.061179][T10610] RAX: ffffffffffffffda RBX: 00007f1bb39b5fa0 RCX: 00007f1bb378eb69 [ 211.061195][T10610] RDX: 0000000000000080 RSI: 00002000000005c0 RDI: 0000000000000004 [ 211.061212][T10610] RBP: 00007f1bb4695090 R08: 0000000000000000 R09: 0000000000000000 [ 211.061226][T10610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 211.061239][T10610] R13: 0000000000000000 R14: 00007f1bb39b5fa0 R15: 00007ffdf2a774d8 [ 211.061273][T10610] [ 211.148525][T10615] lo speed is unknown, defaulting to 1000 [ 211.341549][T10615] wg1 speed is unknown, defaulting to 1000 [ 211.561135][ T5848] Bluetooth: hci1: command 0x0406 tx timeout [ 211.567333][ T5851] Bluetooth: hci2: command 0x0406 tx timeout [ 211.567347][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 211.996471][T10662] __nla_validate_parse: 2 callbacks suppressed [ 211.996491][T10662] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1382'. [ 212.375830][T10677] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 212.530293][T10677] validate_nla: 9 callbacks suppressed [ 212.530311][T10677] netlink: 'syz.1.1389': attribute type 1 has an invalid length. [ 212.549770][T10677] nbd: error processing sock list [ 212.568705][T10677] block nbd1: shutting down sockets [ 212.584361][T10688] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1389'. [ 212.822983][T10698] netlink: 'syz.4.1393': attribute type 29 has an invalid length. [ 212.836634][T10698] netlink: 'syz.4.1393': attribute type 29 has an invalid length. [ 212.840472][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 213.155205][T10704] lo speed is unknown, defaulting to 1000 [ 213.196731][T10704] wg1 speed is unknown, defaulting to 1000 [ 213.359455][T10716] netlink: 'syz.4.1399': attribute type 64 has an invalid length. [ 213.440444][T10720] netlink: 'syz.1.1401': attribute type 29 has an invalid length. [ 213.459457][T10720] netlink: 'syz.1.1401': attribute type 29 has an invalid length. [ 213.492244][T10719] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1399'. [ 213.561383][T10719] pimreg: left allmulticast mode [ 213.765951][T10730] netlink: 'syz.2.1412': attribute type 29 has an invalid length. [ 213.781425][T10735] netlink: 'syz.2.1412': attribute type 29 has an invalid length. [ 213.933619][T10741] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 213.967078][T10738] bond2: entered promiscuous mode [ 213.973074][T10738] 8021q: adding VLAN 0 to HW filter on device bond2 [ 213.980704][T10744] netlink: 'syz.1.1407': attribute type 29 has an invalid length. [ 214.007911][T10747] netlink: 'syz.2.1408': attribute type 29 has an invalid length. [ 214.041215][T10749] FAULT_INJECTION: forcing a failure. [ 214.041215][T10749] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 214.075313][T10749] CPU: 0 UID: 0 PID: 10749 Comm: syz.2.1408 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 214.075344][T10749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 214.075356][T10749] Call Trace: [ 214.075363][T10749] [ 214.075372][T10749] dump_stack_lvl+0x189/0x250 [ 214.075397][T10749] ? __pfx____ratelimit+0x10/0x10 [ 214.075426][T10749] ? __pfx_dump_stack_lvl+0x10/0x10 [ 214.075457][T10749] ? __pfx__printk+0x10/0x10 [ 214.075479][T10749] ? __might_fault+0xb0/0x130 [ 214.075536][T10749] should_fail_ex+0x414/0x560 [ 214.075570][T10749] _copy_from_user+0x2d/0xb0 [ 214.075599][T10749] ___sys_recvmsg+0x12e/0x510 [ 214.075626][T10749] ? __pfx____sys_recvmsg+0x10/0x10 [ 214.075673][T10749] ? __fget_files+0x3a0/0x420 [ 214.075702][T10749] __x64_sys_recvmsg+0x198/0x260 [ 214.075740][T10749] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 214.075771][T10749] ? __pfx_ksys_write+0x10/0x10 [ 214.075805][T10749] ? do_syscall_64+0xbe/0x3b0 [ 214.075838][T10749] do_syscall_64+0xfa/0x3b0 [ 214.075864][T10749] ? lockdep_hardirqs_on+0x9c/0x150 [ 214.075891][T10749] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.075910][T10749] ? clear_bhb_loop+0x60/0xb0 [ 214.075938][T10749] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.075975][T10749] RIP: 0033:0x7f7b9438eb69 [ 214.075994][T10749] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 214.076012][T10749] RSP: 002b:00007f7b951cf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 214.076035][T10749] RAX: ffffffffffffffda RBX: 00007f7b945b6080 RCX: 00007f7b9438eb69 [ 214.076050][T10749] RDX: 0000000000002000 RSI: 0000200000000000 RDI: 0000000000000003 [ 214.076063][T10749] RBP: 00007f7b951cf090 R08: 0000000000000000 R09: 0000000000000000 [ 214.076076][T10749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 214.076088][T10749] R13: 0000000000000001 R14: 00007f7b945b6080 R15: 00007fff5fb7fae8 [ 214.076120][T10749] [ 214.297119][T10751] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1406'. [ 214.377841][T10751] veth1_macvtap: left promiscuous mode [ 214.450611][T10741] nbd: error processing sock list [ 214.456377][T10741] block nbd1: shutting down sockets [ 214.467725][T10765] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1410'. [ 214.771034][T10775] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1418'. [ 214.955461][T10787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 215.253214][T10799] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1424'. [ 215.262513][T10799] netlink: 7 bytes leftover after parsing attributes in process `syz.3.1424'. [ 215.329780][T10802] netlink: 199976 bytes leftover after parsing attributes in process `syz.3.1424'. [ 215.350473][T10801] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1422'. [ 216.085790][T10820] lo speed is unknown, defaulting to 1000 [ 216.097541][T10820] wg1 speed is unknown, defaulting to 1000 [ 216.255379][T10835] vti1: entered promiscuous mode [ 216.261093][T10835] vti1: entered allmulticast mode [ 216.355802][T10840] FAULT_INJECTION: forcing a failure. [ 216.355802][T10840] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 216.386052][T10840] CPU: 1 UID: 0 PID: 10840 Comm: syz.1.1432 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 216.386084][T10840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 216.386098][T10840] Call Trace: [ 216.386106][T10840] [ 216.386114][T10840] dump_stack_lvl+0x189/0x250 [ 216.386143][T10840] ? __pfx____ratelimit+0x10/0x10 [ 216.386173][T10840] ? __pfx_dump_stack_lvl+0x10/0x10 [ 216.386194][T10840] ? __pfx__printk+0x10/0x10 [ 216.386220][T10840] ? __might_fault+0xb0/0x130 [ 216.386262][T10840] should_fail_ex+0x414/0x560 [ 216.386300][T10840] _copy_from_iter+0x1db/0x16f0 [ 216.386331][T10840] ? rcu_is_watching+0x15/0xb0 [ 216.386364][T10840] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 216.386399][T10840] ? __pfx__copy_from_iter+0x10/0x10 [ 216.386426][T10840] ? __build_skb_around+0x257/0x3e0 [ 216.386470][T10840] ? netlink_sendmsg+0x642/0xb30 [ 216.386501][T10840] ? skb_put+0x11b/0x210 [ 216.386524][T10840] netlink_sendmsg+0x6b2/0xb30 [ 216.386565][T10840] ? __pfx_netlink_sendmsg+0x10/0x10 [ 216.386599][T10840] ? __lock_acquire+0xab9/0xd20 [ 216.386625][T10840] ? aa_sock_msg_perm+0x94/0x160 [ 216.386655][T10840] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 216.386678][T10840] ? __pfx_netlink_sendmsg+0x10/0x10 [ 216.386711][T10840] __sock_sendmsg+0x219/0x270 [ 216.386743][T10840] ____sys_sendmsg+0x505/0x830 [ 216.386771][T10840] ? __pfx_____sys_sendmsg+0x10/0x10 [ 216.386803][T10840] ? import_iovec+0x74/0xa0 [ 216.386835][T10840] ___sys_sendmsg+0x21f/0x2a0 [ 216.386871][T10840] ? __pfx____sys_sendmsg+0x10/0x10 [ 216.386928][T10840] ? __fget_files+0x2a/0x420 [ 216.386945][T10840] ? __fget_files+0x3a0/0x420 [ 216.386974][T10840] __x64_sys_sendmsg+0x19b/0x260 [ 216.386998][T10840] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 216.387028][T10840] ? __pfx_ksys_write+0x10/0x10 [ 216.387053][T10840] ? rcu_is_watching+0x15/0xb0 [ 216.387099][T10840] ? do_syscall_64+0xbe/0x3b0 [ 216.387129][T10840] do_syscall_64+0xfa/0x3b0 [ 216.387154][T10840] ? lockdep_hardirqs_on+0x9c/0x150 [ 216.387180][T10840] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.387197][T10840] ? clear_bhb_loop+0x60/0xb0 [ 216.387220][T10840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.387237][T10840] RIP: 0033:0x7f1bb378eb69 [ 216.387253][T10840] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 216.387269][T10840] RSP: 002b:00007f1bb4695038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 216.387307][T10840] RAX: ffffffffffffffda RBX: 00007f1bb39b5fa0 RCX: 00007f1bb378eb69 [ 216.387321][T10840] RDX: 0000000000000080 RSI: 00002000000005c0 RDI: 0000000000000004 [ 216.387333][T10840] RBP: 00007f1bb4695090 R08: 0000000000000000 R09: 0000000000000000 [ 216.387345][T10840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 216.387356][T10840] R13: 0000000000000000 R14: 00007f1bb39b5fa0 R15: 00007ffdf2a774d8 [ 216.387386][T10840] [ 217.008701][T10849] þ`Ì: entered promiscuous mode [ 217.056009][T10857] FAULT_INJECTION: forcing a failure. [ 217.056009][T10857] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 217.071186][T10857] CPU: 0 UID: 0 PID: 10857 Comm: syz.0.1438 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 217.071219][T10857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 217.071232][T10857] Call Trace: [ 217.071240][T10857] [ 217.071250][T10857] dump_stack_lvl+0x189/0x250 [ 217.071278][T10857] ? __pfx____ratelimit+0x10/0x10 [ 217.071309][T10857] ? __pfx_dump_stack_lvl+0x10/0x10 [ 217.071332][T10857] ? __pfx__printk+0x10/0x10 [ 217.071361][T10857] ? fs_reclaim_acquire+0x7d/0x100 [ 217.071403][T10857] should_fail_ex+0x414/0x560 [ 217.071444][T10857] prepare_alloc_pages+0x213/0x610 [ 217.071477][T10857] __alloc_frozen_pages_noprof+0x123/0x370 [ 217.071506][T10857] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 217.071554][T10857] ? policy_nodemask+0x27c/0x720 [ 217.071583][T10857] ? __lock_acquire+0xab9/0xd20 [ 217.071619][T10857] alloc_pages_mpol+0x232/0x4a0 [ 217.071657][T10857] vma_alloc_folio_noprof+0xe4/0x200 [ 217.071693][T10857] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 217.071741][T10857] folio_prealloc+0x30/0x180 [ 217.071775][T10857] __handle_mm_fault+0x2c88/0x5620 [ 217.071827][T10857] ? __pfx___handle_mm_fault+0x10/0x10 [ 217.071880][T10857] ? find_vma+0xe7/0x160 [ 217.071909][T10857] ? __pfx_find_vma+0x10/0x10 [ 217.071942][T10857] handle_mm_fault+0x40a/0x8e0 [ 217.071982][T10857] do_user_addr_fault+0x764/0x1390 [ 217.072032][T10857] exc_page_fault+0x76/0xf0 [ 217.072065][T10857] asm_exc_page_fault+0x26/0x30 [ 217.072084][T10857] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 217.072109][T10857] Code: cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 217.072127][T10857] RSP: 0018:ffffc900040cf4f8 EFLAGS: 00050206 [ 217.072148][T10857] RAX: ffffffff84c2ad01 RBX: ffff888034b2c000 RCX: 00000000000005dc [ 217.072163][T10857] RDX: 0000000000000000 RSI: ffff888034b2c8c0 RDI: 0000200000002000 [ 217.072177][T10857] RBP: ffffc900040cf650 R08: ffff888034b2ce9b R09: 1ffff110069659d3 [ 217.072192][T10857] R10: dffffc0000000000 R11: ffffed10069659d4 R12: dffffc0000000000 [ 217.072208][T10857] R13: 0000000000000000 R14: 00007ffffffff000 R15: 0000000000000e9c [ 217.072230][T10857] ? _copy_to_iter+0x441/0x16f0 [ 217.072276][T10857] _copy_to_iter+0x484/0x16f0 [ 217.072312][T10857] ? __pfx__copy_to_iter+0x10/0x10 [ 217.072353][T10857] ? __skb_try_recv_from_queue+0x2b2/0x730 [ 217.072385][T10857] ? __skb_try_recv_datagram+0x3da/0x4e0 [ 217.072426][T10857] __skb_datagram_iter+0xf8/0x990 [ 217.072453][T10857] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 217.072488][T10857] skb_copy_datagram_iter+0xc5/0x230 [ 217.072518][T10857] netlink_recvmsg+0x2ab/0xa30 [ 217.072562][T10857] ? __pfx_netlink_recvmsg+0x10/0x10 [ 217.072599][T10857] ? __lock_acquire+0xab9/0xd20 [ 217.072626][T10857] ? aa_sock_msg_perm+0x94/0x160 [ 217.072656][T10857] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 217.072679][T10857] ? security_socket_recvmsg+0x7e/0x2e0 [ 217.072701][T10857] ? __pfx_netlink_recvmsg+0x10/0x10 [ 217.072733][T10857] sock_recvmsg+0x229/0x270 [ 217.072766][T10857] ____sys_recvmsg+0x1c9/0x460 [ 217.072799][T10857] ? __pfx_____sys_recvmsg+0x10/0x10 [ 217.072840][T10857] ? import_iovec+0x74/0xa0 [ 217.072873][T10857] ___sys_recvmsg+0x1b5/0x510 [ 217.072903][T10857] ? __pfx____sys_recvmsg+0x10/0x10 [ 217.072955][T10857] ? __fget_files+0x3a0/0x420 [ 217.072988][T10857] do_recvmmsg+0x307/0x770 [ 217.073020][T10857] ? __pfx_do_recvmmsg+0x10/0x10 [ 217.073058][T10857] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 217.073110][T10857] __x64_sys_recvmmsg+0x190/0x240 [ 217.073137][T10857] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 217.073158][T10857] ? rcu_is_watching+0x15/0xb0 [ 217.073197][T10857] ? do_syscall_64+0xbe/0x3b0 [ 217.073232][T10857] do_syscall_64+0xfa/0x3b0 [ 217.073261][T10857] ? lockdep_hardirqs_on+0x9c/0x150 [ 217.073290][T10857] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.073310][T10857] ? clear_bhb_loop+0x60/0xb0 [ 217.073335][T10857] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.073355][T10857] RIP: 0033:0x7fe0de98eb69 [ 217.073373][T10857] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 217.073391][T10857] RSP: 002b:00007fe0df75c038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 217.073422][T10857] RAX: ffffffffffffffda RBX: 00007fe0debb5fa0 RCX: 00007fe0de98eb69 [ 217.073437][T10857] RDX: 0000000000000054 RSI: 0000200000004b40 RDI: 0000000000000003 [ 217.073450][T10857] RBP: 00007fe0df75c090 R08: 0000000000000000 R09: 0000000000000000 [ 217.073463][T10857] R10: 0000000000012100 R11: 0000000000000246 R12: 0000000000000001 [ 217.073475][T10857] R13: 0000000000000000 R14: 00007fe0debb5fa0 R15: 00007ffc75c81888 [ 217.073508][T10857] [ 217.588038][T10864] validate_nla: 8 callbacks suppressed [ 217.588056][T10864] netlink: 'syz.0.1443': attribute type 29 has an invalid length. [ 217.602618][T10864] FAULT_INJECTION: forcing a failure. [ 217.602618][T10864] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 217.615728][T10864] CPU: 0 UID: 0 PID: 10864 Comm: syz.0.1443 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 217.615753][T10864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 217.615764][T10864] Call Trace: [ 217.615772][T10864] [ 217.615779][T10864] dump_stack_lvl+0x189/0x250 [ 217.615803][T10864] ? __pfx____ratelimit+0x10/0x10 [ 217.615830][T10864] ? __pfx_dump_stack_lvl+0x10/0x10 [ 217.615849][T10864] ? __pfx__printk+0x10/0x10 [ 217.615872][T10864] ? __might_fault+0xb0/0x130 [ 217.615909][T10864] should_fail_ex+0x414/0x560 [ 217.615943][T10864] _copy_to_iter+0x575/0x16f0 [ 217.615976][T10864] ? __pfx__copy_to_iter+0x10/0x10 [ 217.615997][T10864] ? __skb_try_recv_from_queue+0x2b2/0x730 [ 217.616025][T10864] ? __skb_try_recv_datagram+0x3da/0x4e0 [ 217.616052][T10864] __skb_datagram_iter+0xf8/0x990 [ 217.616075][T10864] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 217.616125][T10864] skb_copy_datagram_iter+0xc5/0x230 [ 217.616152][T10864] netlink_recvmsg+0x2ab/0xa30 [ 217.616192][T10864] ? __pfx_netlink_recvmsg+0x10/0x10 [ 217.616227][T10864] ? aa_sock_msg_perm+0x94/0x160 [ 217.616256][T10864] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 217.616278][T10864] ? security_socket_recvmsg+0x7e/0x2e0 [ 217.616297][T10864] ? __pfx_netlink_recvmsg+0x10/0x10 [ 217.616335][T10864] sock_recvmsg+0x229/0x270 [ 217.616367][T10864] ____sys_recvmsg+0x1c9/0x460 [ 217.616397][T10864] ? __pfx_____sys_recvmsg+0x10/0x10 [ 217.616435][T10864] ? import_iovec+0x74/0xa0 [ 217.616466][T10864] ___sys_recvmsg+0x1b5/0x510 [ 217.616493][T10864] ? __pfx____sys_recvmsg+0x10/0x10 [ 217.616540][T10864] ? __fget_files+0x3a0/0x420 [ 217.616569][T10864] __x64_sys_recvmsg+0x198/0x260 [ 217.616595][T10864] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 217.616626][T10864] ? __pfx_ksys_write+0x10/0x10 [ 217.616652][T10864] ? rcu_is_watching+0x15/0xb0 [ 217.616687][T10864] ? do_syscall_64+0xbe/0x3b0 [ 217.616721][T10864] do_syscall_64+0xfa/0x3b0 [ 217.616748][T10864] ? lockdep_hardirqs_on+0x9c/0x150 [ 217.616775][T10864] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.616794][T10864] ? clear_bhb_loop+0x60/0xb0 [ 217.616817][T10864] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.616836][T10864] RIP: 0033:0x7fe0de98eb69 [ 217.616853][T10864] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 217.616869][T10864] RSP: 002b:00007fe0df75c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 217.616892][T10864] RAX: ffffffffffffffda RBX: 00007fe0debb5fa0 RCX: 00007fe0de98eb69 [ 217.616906][T10864] RDX: 0000000000002000 RSI: 0000200000000000 RDI: 0000000000000003 [ 217.616919][T10864] RBP: 00007fe0df75c090 R08: 0000000000000000 R09: 0000000000000000 [ 217.616931][T10864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 217.616942][T10864] R13: 0000000000000000 R14: 00007fe0debb5fa0 R15: 00007ffc75c81888 [ 217.616972][T10864] [ 217.617039][T10864] netlink: 'syz.0.1443': attribute type 29 has an invalid length. [ 217.874074][T10875] netlink: zone id is out of range [ 218.021038][T10881] netlink: 'syz.4.1446': attribute type 29 has an invalid length. [ 218.030014][T10881] netlink: 'syz.4.1446': attribute type 29 has an invalid length. [ 218.365114][T10906] bridge6: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 218.554256][T10915] netlink: 'syz.0.1455': attribute type 1 has an invalid length. [ 218.576139][T10918] FAULT_INJECTION: forcing a failure. [ 218.576139][T10918] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 218.577087][T10918] [ 218.577094][T10918] ====================================================== [ 218.577100][T10918] WARNING: possible circular locking dependency detected [ 218.577110][T10918] 6.16.0-syzkaller-06574-gd9104cec3e8f #0 Not tainted [ 218.577119][T10918] ------------------------------------------------------ [ 218.577124][T10918] syz.4.1457/10918 is trying to acquire lock: [ 218.577132][T10918] ffffffff8e130720 (console_owner){-.-.}-{0:0}, at: console_flush_all+0x13a/0xc40 [ 218.577184][T10918] [ 218.577184][T10918] but task is already holding lock: [ 218.577191][T10918] ffff8880b8639f58 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 218.577245][T10918] [ 218.577245][T10918] which lock already depends on the new lock. [ 218.577245][T10918] [ 218.577253][T10918] [ 218.577253][T10918] the existing dependency chain (in reverse order) is: [ 218.577261][T10918] [ 218.577261][T10918] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 218.577289][T10918] lock_acquire+0x120/0x360 [ 218.577316][T10918] _raw_spin_lock_nested+0x32/0x50 [ 218.577341][T10918] raw_spin_rq_lock_nested+0x2a/0x140 [ 218.577360][T10918] task_rq_lock+0xbc/0x470 [ 218.577379][T10918] cgroup_move_task+0x92/0x2a0 [ 218.577391][T10918] css_set_move_task+0x658/0x9e0 [ 218.577405][T10918] cgroup_post_fork+0x1ef/0x790 [ 218.577419][T10918] copy_process+0x3862/0x3c00 [ 218.577431][T10918] kernel_clone+0x21e/0x840 [ 218.577443][T10918] user_mode_thread+0xdd/0x140 [ 218.577456][T10918] rest_init+0x23/0x300 [ 218.577468][T10918] start_kernel+0x3a9/0x410 [ 218.577488][T10918] x86_64_start_reservations+0x24/0x30 [ 218.577503][T10918] x86_64_start_kernel+0x143/0x1c0 [ 218.577517][T10918] common_startup_64+0x13e/0x147 [ 218.577533][T10918] [ 218.577533][T10918] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 218.577559][T10918] lock_acquire+0x120/0x360 [ 218.577577][T10918] _raw_spin_lock_irqsave+0xa7/0xf0 [ 218.577594][T10918] try_to_wake_up+0x6e/0x1290 [ 218.577608][T10918] __wake_up_common_lock+0x137/0x1f0 [ 218.577625][T10918] tty_port_default_wakeup+0xa2/0xf0 [ 218.577642][T10918] serial8250_tx_chars+0x72e/0x970 [ 218.577656][T10918] serial8250_handle_irq+0x633/0xbb0 [ 218.577671][T10918] serial8250_default_handle_irq+0xbf/0x1e0 [ 218.577689][T10918] serial8250_interrupt+0x8d/0x160 [ 218.577710][T10918] __handle_irq_event_percpu+0x289/0x980 [ 218.577726][T10918] handle_irq_event+0x8b/0x1e0 [ 218.577740][T10918] handle_edge_irq+0x23b/0x9f0 [ 218.577752][T10918] __common_interrupt+0x143/0x250 [ 218.577771][T10918] common_interrupt+0xb6/0xe0 [ 218.577785][T10918] asm_common_interrupt+0x26/0x40 [ 218.577798][T10918] pv_native_safe_halt+0x13/0x20 [ 218.577816][T10918] default_idle+0x13/0x20 [ 218.577827][T10918] default_idle_call+0x74/0xb0 [ 218.577840][T10918] do_idle+0x1e8/0x510 [ 218.577860][T10918] cpu_startup_entry+0x44/0x60 [ 218.577880][T10918] rest_init+0x2de/0x300 [ 218.577893][T10918] start_kernel+0x3a9/0x410 [ 218.577912][T10918] x86_64_start_reservations+0x24/0x30 [ 218.577927][T10918] x86_64_start_kernel+0x143/0x1c0 [ 218.577942][T10918] common_startup_64+0x13e/0x147 [ 218.577958][T10918] [ 218.577958][T10918] -> #2 (&tty->write_wait){-.-.}-{3:3}: [ 218.577978][T10918] lock_acquire+0x120/0x360 [ 218.577996][T10918] _raw_spin_lock_irqsave+0xa7/0xf0 [ 218.578012][T10918] __wake_up_common_lock+0x2f/0x1f0 [ 218.578028][T10918] tty_port_default_wakeup+0xa2/0xf0 [ 218.578044][T10918] serial8250_tx_chars+0x72e/0x970 [ 218.578058][T10918] serial8250_handle_irq+0x633/0xbb0 [ 218.578073][T10918] serial8250_default_handle_irq+0xbf/0x1e0 [ 218.578090][T10918] serial8250_interrupt+0x8d/0x160 [ 218.578111][T10918] __handle_irq_event_percpu+0x289/0x980 [ 218.578126][T10918] handle_irq_event+0x8b/0x1e0 [ 218.578140][T10918] handle_edge_irq+0x23b/0x9f0 [ 218.578152][T10918] __common_interrupt+0x143/0x250 [ 218.578171][T10918] common_interrupt+0xb6/0xe0 [ 218.578185][T10918] asm_common_interrupt+0x26/0x40 [ 218.578197][T10918] pv_native_safe_halt+0x13/0x20 [ 218.578215][T10918] default_idle+0x13/0x20 [ 218.578226][T10918] default_idle_call+0x74/0xb0 [ 218.578256][T10918] do_idle+0x1e8/0x510 [ 218.578276][T10918] cpu_startup_entry+0x44/0x60 [ 218.578297][T10918] rest_init+0x2de/0x300 [ 218.578310][T10918] start_kernel+0x3a9/0x410 [ 218.578357][T10918] x86_64_start_reservations+0x24/0x30 [ 218.578380][T10918] x86_64_start_kernel+0x143/0x1c0 [ 218.578403][T10918] common_startup_64+0x13e/0x147 [ 218.578427][T10918] [ 218.578427][T10918] -> #1 (&port_lock_key){-.-.}-{3:3}: [ 218.578457][T10918] lock_acquire+0x120/0x360 [ 218.578476][T10918] _raw_spin_lock_irqsave+0xa7/0xf0 [ 218.578493][T10918] serial8250_console_write+0x17e/0x1ba0 [ 218.578510][T10918] console_flush_all+0x728/0xc40 [ 218.578525][T10918] console_unlock+0xc4/0x270 [ 218.578537][T10918] vprintk_emit+0x5b7/0x7a0 [ 218.578557][T10918] _printk+0xcf/0x120 [ 218.578573][T10918] register_console+0xa8b/0xf90 [ 218.578588][T10918] univ8250_console_init+0x3a/0x70 [ 218.578604][T10918] console_init+0x10e/0x430 [ 218.578618][T10918] start_kernel+0x254/0x410 [ 218.578638][T10918] x86_64_start_reservations+0x24/0x30 [ 218.578654][T10918] x86_64_start_kernel+0x143/0x1c0 [ 218.578669][T10918] common_startup_64+0x13e/0x147 [ 218.578687][T10918] [ 218.578687][T10918] -> #0 (console_owner){-.-.}-{0:0}: [ 218.578707][T10918] validate_chain+0xb9b/0x2140 [ 218.578719][T10918] __lock_acquire+0xab9/0xd20 [ 218.578738][T10918] lock_acquire+0x120/0x360 [ 218.578756][T10918] console_flush_all+0x6d2/0xc40 [ 218.578770][T10918] console_unlock+0xc4/0x270 [ 218.578782][T10918] vprintk_emit+0x5b7/0x7a0 [ 218.578794][T10918] _printk+0xcf/0x120 [ 218.578810][T10918] should_fail_ex+0x3f5/0x560 [ 218.578832][T10918] copy_to_user_nofault+0x89/0x160 [ 218.578849][T10918] bpf_prog_c7763bb3f68e5cb3+0x41/0x47 [ 218.578861][T10918] bpf_trace_run4+0x28e/0x4a0 [ 218.578878][T10918] __bpf_trace_sched_switch+0x17a/0x1e0 [ 218.578894][T10918] __traceiter_sched_switch+0x9a/0xd0 [ 218.578910][T10918] __schedule+0x23a7/0x4d30 [ 218.578927][T10918] schedule+0x165/0x360 [ 218.578944][T10918] schedule_preempt_disabled+0x13/0x30 [ 218.578963][T10918] __mutex_lock+0x7e3/0x1340 [ 218.578983][T10918] nl802154_pre_doit+0xbc/0xa00 [ 218.579002][T10918] genl_family_rcv_msg_doit+0x1bb/0x300 [ 218.579019][T10918] genl_rcv_msg+0x60e/0x790 [ 218.579034][T10918] netlink_rcv_skb+0x205/0x470 [ 218.579054][T10918] genl_rcv+0x28/0x40 [ 218.579067][T10918] netlink_unicast+0x82c/0x9e0 [ 218.579085][T10918] netlink_sendmsg+0x805/0xb30 [ 218.579106][T10918] __sock_sendmsg+0x219/0x270 [ 218.579123][T10918] ____sys_sendmsg+0x505/0x830 [ 218.579136][T10918] ___sys_sendmsg+0x21f/0x2a0 [ 218.579149][T10918] __x64_sys_sendmsg+0x19b/0x260 [ 218.579163][T10918] do_syscall_64+0xfa/0x3b0 [ 218.579183][T10918] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.579197][T10918] [ 218.579197][T10918] other info that might help us debug this: [ 218.579197][T10918] [ 218.579202][T10918] Chain exists of: [ 218.579202][T10918] console_owner --> &p->pi_lock --> &rq->__lock [ 218.579202][T10918] [ 218.579226][T10918] Possible unsafe locking scenario: [ 218.579226][T10918] [ 218.579231][T10918] CPU0 CPU1 [ 218.579235][T10918] ---- ---- [ 218.579240][T10918] lock(&rq->__lock); [ 218.579250][T10918] lock(&p->pi_lock); [ 218.579261][T10918] lock(&rq->__lock); [ 218.579272][T10918] lock(console_owner); [ 218.579282][T10918] [ 218.579282][T10918] *** DEADLOCK *** [ 218.579282][T10918] [ 218.579286][T10918] 7 locks held by syz.4.1457/10918: [ 218.579295][T10918] #0: ffffffff8f56e3f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 218.579333][T10918] #1: ffffffff8f56e208 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 218.579370][T10918] #2: ffffffff8f509008 (rtnl_mutex){+.+.}-{4:4}, at: nl802154_pre_doit+0xbc/0xa00 [ 218.579410][T10918] #3: ffff8880b8639f58 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 218.579474][T10918] #4: ffffffff8e13c4e0 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run4+0x19c/0x4a0 [ 218.579528][T10918] #5: ffffffff8e130780 (console_lock){+.+.}-{0:0}, at: _printk+0xcf/0x120 [ 218.579579][T10918] #6: ffffffff8e018050 (console_srcu){....}-{0:0}, at: console_flush_all+0x13a/0xc40 [ 218.579615][T10918] [ 218.579615][T10918] stack backtrace: [ 218.579623][T10918] CPU: 0 UID: 0 PID: 10918 Comm: syz.4.1457 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 218.579640][T10918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 218.579649][T10918] Call Trace: [ 218.579655][T10918] [ 218.579661][T10918] dump_stack_lvl+0x189/0x250 [ 218.579678][T10918] ? __pfx_dump_stack_lvl+0x10/0x10 [ 218.579692][T10918] ? __pfx__printk+0x10/0x10 [ 218.579710][T10918] ? print_lock_name+0xde/0x100 [ 218.579729][T10918] print_circular_bug+0x2ee/0x310 [ 218.579745][T10918] check_noncircular+0x134/0x160 [ 218.579762][T10918] validate_chain+0xb9b/0x2140 [ 218.579784][T10918] __lock_acquire+0xab9/0xd20 [ 218.579806][T10918] ? console_flush_all+0x13a/0xc40 [ 218.579821][T10918] lock_acquire+0x120/0x360 [ 218.579840][T10918] ? console_flush_all+0x13a/0xc40 [ 218.579878][T10918] ? do_raw_spin_unlock+0x122/0x240 [ 218.579895][T10918] ? console_flush_all+0x13a/0xc40 [ 218.579911][T10918] console_flush_all+0x6d2/0xc40 [ 218.579926][T10918] ? console_flush_all+0x13a/0xc40 [ 218.579944][T10918] ? console_flush_all+0x13a/0xc40 [ 218.579962][T10918] ? __pfx_console_flush_all+0x10/0x10 [ 218.579983][T10918] ? is_printk_cpu_sync_owner+0x32/0x40 [ 218.580003][T10918] console_unlock+0xc4/0x270 [ 218.580018][T10918] ? __pfx_console_unlock+0x10/0x10 [ 218.580033][T10918] ? is_printk_cpu_sync_owner+0x32/0x40 [ 218.580053][T10918] vprintk_emit+0x5b7/0x7a0 [ 218.580068][T10918] ? __pfx_vprintk_emit+0x10/0x10 [ 218.580085][T10918] ? __pfx_sched_balance_rq+0x10/0x10 [ 218.580111][T10918] _printk+0xcf/0x120 [ 218.580136][T10918] ? __pfx____ratelimit+0x10/0x10 [ 218.580167][T10918] ? __pfx__printk+0x10/0x10 [ 218.580193][T10918] ? from_kuid+0x1b0/0x640 [ 218.580222][T10918] should_fail_ex+0x3f5/0x560 [ 218.580257][T10918] copy_to_user_nofault+0x89/0x160 [ 218.580287][T10918] bpf_prog_c7763bb3f68e5cb3+0x41/0x47 [ 218.580302][T10918] bpf_trace_run4+0x28e/0x4a0 [ 218.580320][T10918] ? do_raw_spin_lock+0x121/0x290 [ 218.580336][T10918] ? bpf_trace_run4+0x19c/0x4a0 [ 218.580354][T10918] ? __pfx_bpf_trace_run4+0x10/0x10 [ 218.580376][T10918] ? __bpf_trace_sched_switch+0x15f/0x1e0 [ 218.580395][T10918] __bpf_trace_sched_switch+0x17a/0x1e0 [ 218.580413][T10918] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 218.580430][T10918] ? psi_group_change+0xab8/0x1050 [ 218.580448][T10918] ? __schedule+0x22fd/0x4d30 [ 218.580469][T10918] ? tracing_record_taskinfo_sched_switch+0x7d/0x370 [ 218.580488][T10918] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 218.580505][T10918] __traceiter_sched_switch+0x9a/0xd0 [ 218.580524][T10918] __schedule+0x23a7/0x4d30 [ 218.580555][T10918] ? __lock_acquire+0xab9/0xd20 [ 218.580588][T10918] ? schedule+0x165/0x360 [ 218.580616][T10918] ? __lock_acquire+0xab9/0xd20 [ 218.580655][T10918] ? __pfx___schedule+0x10/0x10 [ 218.580686][T10918] ? schedule+0x91/0x360 [ 218.580706][T10918] schedule+0x165/0x360 [ 218.580725][T10918] schedule_preempt_disabled+0x13/0x30 [ 218.580744][T10918] __mutex_lock+0x7e3/0x1340 [ 218.580768][T10918] ? __mutex_lock+0x5b6/0x1340 [ 218.580794][T10918] ? nl802154_pre_doit+0xbc/0xa00 [ 218.580816][T10918] ? __pfx___mutex_lock+0x10/0x10 [ 218.580846][T10918] nl802154_pre_doit+0xbc/0xa00 [ 218.580867][T10918] ? __nla_parse+0x40/0x60 [ 218.580883][T10918] ? __pfx_nl802154_pre_doit+0x10/0x10 [ 218.580903][T10918] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 218.580926][T10918] genl_family_rcv_msg_doit+0x1bb/0x300 [ 218.580945][T10918] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 218.580968][T10918] ? bpf_lsm_capable+0x9/0x20 [ 218.580990][T10918] ? security_capable+0x7e/0x2e0 [ 218.581012][T10918] genl_rcv_msg+0x60e/0x790 [ 218.581031][T10918] ? __pfx_genl_rcv_msg+0x10/0x10 [ 218.581047][T10918] ? __pfx_nl802154_pre_doit+0x10/0x10 [ 218.581066][T10918] ? __pfx_nl802154_add_llsec_devkey+0x10/0x10 [ 218.581089][T10918] ? __pfx_nl802154_post_doit+0x10/0x10 [ 218.581114][T10918] netlink_rcv_skb+0x205/0x470 [ 218.581135][T10918] ? __lock_acquire+0xab9/0xd20 [ 218.581155][T10918] ? __pfx_genl_rcv_msg+0x10/0x10 [ 218.581172][T10918] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 218.581201][T10918] ? down_read+0x1ad/0x2e0 [ 218.581215][T10918] genl_rcv+0x28/0x40 [ 218.581230][T10918] netlink_unicast+0x82c/0x9e0 [ 218.581253][T10918] ? __pfx_netlink_unicast+0x10/0x10 [ 218.581273][T10918] ? netlink_sendmsg+0x642/0xb30 [ 218.581298][T10918] netlink_sendmsg+0x805/0xb30 [ 218.581323][T10918] ? __pfx_netlink_sendmsg+0x10/0x10 [ 218.581346][T10918] ? __lock_acquire+0xab9/0xd20 [ 218.581365][T10918] ? aa_sock_msg_perm+0x94/0x160 [ 218.581385][T10918] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 218.581401][T10918] ? __pfx_netlink_sendmsg+0x10/0x10 [ 218.581423][T10918] __sock_sendmsg+0x219/0x270 [ 218.581442][T10918] ____sys_sendmsg+0x505/0x830 [ 218.581459][T10918] ? __pfx_____sys_sendmsg+0x10/0x10 [ 218.581477][T10918] ? import_iovec+0x74/0xa0 [ 218.581499][T10918] ___sys_sendmsg+0x21f/0x2a0 [ 218.581514][T10918] ? __pfx____sys_sendmsg+0x10/0x10 [ 218.581559][T10918] ? __fget_files+0x2a/0x420 [ 218.581573][T10918] ? __fget_files+0x3a0/0x420 [ 218.581590][T10918] __x64_sys_sendmsg+0x19b/0x260 [ 218.581606][T10918] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 218.581624][T10918] ? __pfx_ksys_write+0x10/0x10 [ 218.581644][T10918] ? rcu_is_watching+0x15/0xb0 [ 218.581698][T10918] ? do_syscall_64+0xbe/0x3b0 [ 218.581733][T10918] do_syscall_64+0xfa/0x3b0 [ 218.581764][T10918] ? lockdep_hardirqs_on+0x9c/0x150 [ 218.581790][T10918] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.581805][T10918] ? clear_bhb_loop+0x60/0xb0 [ 218.581833][T10918] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.581847][T10918] RIP: 0033:0x7f03edf8eb69 [ 218.581859][T10918] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 218.581872][T10918] RSP: 002b:00007f03ebdf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 218.581888][T10918] RAX: ffffffffffffffda RBX: 00007f03ee1b5fa0 RCX: 00007f03edf8eb69 [ 218.581899][T10918] RDX: 0000000000000080 RSI: 00002000000005c0 RDI: 0000000000000004 [ 218.581908][T10918] RBP: 00007f03ebdf6090 R08: 0000000000000000 R09: 0000000000000000 [ 218.581917][T10918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 218.581926][T10918] R13: 0000000000000000 R14: 00007f03ee1b5fa0 R15: 00007ffe3cef2e78 [ 218.581943][T10918] [ 220.049715][T10918] CPU: 0 UID: 0 PID: 10918 Comm: syz.4.1457 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 220.049736][T10918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 220.049746][T10918] Call Trace: [ 220.049754][T10918] [ 220.049762][T10918] dump_stack_lvl+0x189/0x250 [ 220.049793][T10918] ? __pfx____ratelimit+0x10/0x10 [ 220.049812][T10918] ? __pfx_dump_stack_lvl+0x10/0x10 [ 220.049826][T10918] ? __pfx__printk+0x10/0x10 [ 220.049843][T10918] ? from_kuid+0x1b0/0x640 [ 220.049863][T10918] should_fail_ex+0x414/0x560 [ 220.049887][T10918] copy_to_user_nofault+0x89/0x160 [ 220.049905][T10918] bpf_prog_c7763bb3f68e5cb3+0x41/0x47 [ 220.049917][T10918] bpf_trace_run4+0x28e/0x4a0 [ 220.049935][T10918] ? do_raw_spin_lock+0x121/0x290 [ 220.049949][T10918] ? bpf_trace_run4+0x19c/0x4a0 [ 220.049966][T10918] ? __pfx_bpf_trace_run4+0x10/0x10 [ 220.049985][T10918] ? __bpf_trace_sched_switch+0x15f/0x1e0 [ 220.050002][T10918] __bpf_trace_sched_switch+0x17a/0x1e0 [ 220.050018][T10918] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 220.050034][T10918] ? psi_group_change+0xab8/0x1050 [ 220.050050][T10918] ? __schedule+0x22fd/0x4d30 [ 220.050069][T10918] ? tracing_record_taskinfo_sched_switch+0x7d/0x370 [ 220.050086][T10918] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 220.050101][T10918] __traceiter_sched_switch+0x9a/0xd0 [ 220.050124][T10918] __schedule+0x23a7/0x4d30 [ 220.050148][T10918] ? __lock_acquire+0xab9/0xd20 [ 220.050167][T10918] ? schedule+0x165/0x360 [ 220.050184][T10918] ? __lock_acquire+0xab9/0xd20 [ 220.050202][T10918] ? __pfx___schedule+0x10/0x10 [ 220.050225][T10918] ? schedule+0x91/0x360 [ 220.050243][T10918] schedule+0x165/0x360 [ 220.050261][T10918] schedule_preempt_disabled+0x13/0x30 [ 220.050278][T10918] __mutex_lock+0x7e3/0x1340 [ 220.050301][T10918] ? __mutex_lock+0x5b6/0x1340 [ 220.050321][T10918] ? nl802154_pre_doit+0xbc/0xa00 [ 220.050361][T10918] ? __pfx___mutex_lock+0x10/0x10 [ 220.050391][T10918] nl802154_pre_doit+0xbc/0xa00 [ 220.050412][T10918] ? __nla_parse+0x40/0x60 [ 220.050428][T10918] ? __pfx_nl802154_pre_doit+0x10/0x10 [ 220.050448][T10918] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 220.050470][T10918] genl_family_rcv_msg_doit+0x1bb/0x300 [ 220.050490][T10918] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 220.050512][T10918] ? bpf_lsm_capable+0x9/0x20 [ 220.050534][T10918] ? security_capable+0x7e/0x2e0 [ 220.050555][T10918] genl_rcv_msg+0x60e/0x790 [ 220.050574][T10918] ? __pfx_genl_rcv_msg+0x10/0x10 [ 220.050590][T10918] ? __pfx_nl802154_pre_doit+0x10/0x10 [ 220.050609][T10918] ? __pfx_nl802154_add_llsec_devkey+0x10/0x10 [ 220.050632][T10918] ? __pfx_nl802154_post_doit+0x10/0x10 [ 220.050657][T10918] netlink_rcv_skb+0x205/0x470 [ 220.050678][T10918] ? __lock_acquire+0xab9/0xd20 [ 220.050698][T10918] ? __pfx_genl_rcv_msg+0x10/0x10 [ 220.050715][T10918] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 220.050744][T10918] ? down_read+0x1ad/0x2e0 [ 220.050758][T10918] genl_rcv+0x28/0x40 [ 220.050772][T10918] netlink_unicast+0x82c/0x9e0 [ 220.050795][T10918] ? __pfx_netlink_unicast+0x10/0x10 [ 220.050816][T10918] ? netlink_sendmsg+0x642/0xb30 [ 220.050839][T10918] netlink_sendmsg+0x805/0xb30 [ 220.050865][T10918] ? __pfx_netlink_sendmsg+0x10/0x10 [ 220.050888][T10918] ? __lock_acquire+0xab9/0xd20 [ 220.050907][T10918] ? aa_sock_msg_perm+0x94/0x160 [ 220.050928][T10918] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 220.050944][T10918] ? __pfx_netlink_sendmsg+0x10/0x10 [ 220.050967][T10918] __sock_sendmsg+0x219/0x270 [ 220.050987][T10918] ____sys_sendmsg+0x505/0x830 [ 220.051005][T10918] ? __pfx_____sys_sendmsg+0x10/0x10 [ 220.051023][T10918] ? import_iovec+0x74/0xa0 [ 220.051045][T10918] ___sys_sendmsg+0x21f/0x2a0 [ 220.051060][T10918] ? __pfx____sys_sendmsg+0x10/0x10 [ 220.051089][T10918] ? __fget_files+0x2a/0x420 [ 220.051104][T10918] ? __fget_files+0x3a0/0x420 [ 220.051126][T10918] __x64_sys_sendmsg+0x19b/0x260 [ 220.051143][T10918] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 220.051162][T10918] ? __pfx_ksys_write+0x10/0x10 [ 220.051183][T10918] ? rcu_is_watching+0x15/0xb0 [ 220.051208][T10918] ? do_syscall_64+0xbe/0x3b0 [ 220.051232][T10918] do_syscall_64+0xfa/0x3b0 [ 220.051253][T10918] ? lockdep_hardirqs_on+0x9c/0x150 [ 220.051273][T10918] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.051288][T10918] ? clear_bhb_loop+0x60/0xb0 [ 220.051304][T10918] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.051319][T10918] RIP: 0033:0x7f03edf8eb69 [ 220.051333][T10918] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 220.051347][T10918] RSP: 002b:00007f03ebdf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 220.051364][T10918] RAX: ffffffffffffffda RBX: 00007f03ee1b5fa0 RCX: 00007f03edf8eb69 [ 220.051376][T10918] RDX: 0000000000000080 RSI: 00002000000005c0 RDI: 0000000000000004 [ 220.051386][T10918] RBP: 00007f03ebdf6090 R08: 0000000000000000 R09: 0000000000000000 [ 220.051395][T10918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 220.051404][T10918] R13: 0000000000000000 R14: 00007f03ee1b5fa0 R15: 00007ffe3cef2e78 [ 220.051422][T10918] [ 220.550420][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 220.574926][T10915] veth3: entered promiscuous mode [ 220.621563][T10919] erspan0: entered allmulticast mode [ 220.676735][T10915] netlink: 'syz.0.1455': attribute type 11 has an invalid length. [ 220.694767][T10915] ieee80211 phy22: Selected rate control algorithm 'minstrel_ht' [ 220.725391][T10921] syzkaller1: entered promiscuous mode [ 220.730991][T10921] syzkaller1: entered allmulticast mode