last executing test programs: 2m56.967537362s ago: executing program 0 (id=5028): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x25dfdbfc, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x2, 0x8000000, 0x0, {}, {0x0, 0x0, 0x0, 0xd170}}}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x1}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xf0}}, 0x0) 2m56.779460328s ago: executing program 0 (id=5031): close(0x3) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x675f, 0x9, 0x3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001300)=@newtfilter={0x88, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xc, 0xfff3}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x4, 0x7, 0xb, 0xdc}, 0x2, r8}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x8080) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27032400dc0f14000e0003000024c1020000ff1107c2fb7fe0400018534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) 2m56.263295289s ago: executing program 0 (id=5038): socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r2, &(0x7f0000000000)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) listen(r2, 0x5) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="00070800010000000000140008004500003c002c01004084ca2502020202ac14000104d2321000000000000000000100001c11223344000800000005000500000005000c0007"], 0x4a) 2m55.920831772s ago: executing program 0 (id=5041): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r2, 0x0, 0x480, &(0x7f0000000080), &(0x7f00000000c0)=0x40) setsockopt$packet_int(r0, 0x107, 0xe, &(0x7f0000000000)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x38, r5, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x5, 0x1}]}]}]}, 0x38}}, 0x4000) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000001740)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001700)={&(0x7f0000000340)={0x1394, r5, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x400}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}]}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x80}]}, @TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x421}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd44}]}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffffff81}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}]}, @TIPC_NLA_SOCK={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xa}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_NODE={0x1dc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xfb, 0x3, "6f3eb8374313cd01776c195592229d9e8497a7989c7b2f81bdc4029df99738b73388ae97f9a8da1bba0c864e31e194b41504ffabb7fc04239f76ef85b5c46541484bc9722d7c0cf608ffc68f8b6e04059e34f8bebc42dfdb6db355b1c8daae57f809c001ab3402a0e0ad6ea949a448779f0618c8c2ac3f50b7ec08d3d10677218d66d344af1ff22c2f3f6d90591e4b2b62b1efbb829bc30102947f2133da56802fe43f05fd7b11c3931b6b996ba6a2fa54da8bdcf94901b5758e2e0e5be58411674f50bb14f2976570cd25e53834cb4beead9c965954d036dad74f83745bf44bb27c21a0f5a8ad6b2422df257fc18396ae16d9c4d81db9"}, @TIPC_NLA_NODE_ID={0x4}, @TIPC_NLA_NODE_ID={0xbe, 0x3, "599a00f189ec85d5c1c00e80f689c7af3c1e3c019e0682834269a9f427d2e85a5418dd5b89e0ac52f01d627563907ee65097c5e389e6e2ffb4cd49e3d981396f7486f98a77cc8ff2cfdeeab47b1b0eeac3463c5ad5506c186a40973b106f8e6884319ab05f5fa49bbf7b3bea8eddb7452c859fa3e2db31f501d5be5100aed7756d2ce8d29a8bf68878eb3d16ec390de78c9cd5b43af899f813d663cc0ad9f76f76542804d32742bb025df3872f42693c18310fe3f58800382989"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1}, @TIPC_NLA_NODE_ID={0xa, 0x3, "6a893d5121f8"}]}, @TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_NODE={0x1028, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2c}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x6}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x23509bb1}]}, @TIPC_NLA_MEDIA={0x60, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x547}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x1394}, 0x1, 0x0, 0x0, 0x40}, 0x5bd8571c1e0e5820) sendto$packet(r0, &(0x7f0000000180)="0b03feff4f00021202004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14) 2m55.544582449s ago: executing program 0 (id=5046): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000840)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3b8, 0x0, 0x98, 0x130, 0x1c8, 0x288, 0x0, 0x98, 0x130, 0x288, 0x320, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@inet=@length={{0x28}, {0x0, 0xffff}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x1, 0xffffffff}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x450) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000000)={'syzkaller1\x00', &(0x7f0000000140)=@ethtool_cmd={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800feea, [0x1]}}) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0x10040) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2, 0x5, 0x0, 0x6}}}}}}, 0x0) 2m55.385123939s ago: executing program 0 (id=5050): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, 0x27, 0x1, 0x70bd29, 0x0, {0x6, 0x1}}, 0x14}}, 0xc000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket(0x11, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000001040)='bond0\x00', 0x10) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000040)=0xc9ba, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x4, 0xfffff020}, {0x6}]}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r1, @ANYRES64=r2, @ANYRESHEX=r2, @ANYRES8=r2, @ANYRES16=r1], 0x0) 2m39.44280567s ago: executing program 32 (id=5050): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, 0x27, 0x1, 0x70bd29, 0x0, {0x6, 0x1}}, 0x14}}, 0xc000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket(0x11, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000001040)='bond0\x00', 0x10) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000040)=0xc9ba, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x4, 0xfffff020}, {0x6}]}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r1, @ANYRES64=r2, @ANYRESHEX=r2, @ANYRES8=r2, @ANYRES16=r1], 0x0) 2m34.016015955s ago: executing program 3 (id=5272): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000b40)=[{{&(0x7f00000000c0)={0xa, 0x20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000240)="ad", 0x1}], 0x1}}, {{&(0x7f0000000100)={0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000800)=',', 0x1}], 0x1, &(0x7f0000000a00)=ANY=[@ANYBLOB="180000000000000029000000360000003b000000000000001400000000000000290000000b000000000000020000000028"], 0x58}}], 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) r2 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000140)="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", 0xfe) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000ec0)={{0x0, 0x1, 0x7, 0x23e31c0f, 0x3, 0x5, 0x401, 0x4, 0x6, 0xb, 0x5, 0x4, 0x7, 0x52e, 0xff}}) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f0000001ec0)={{r4, 0x7, 0x6, 0x7fffffffffffffff, 0x7, 0x10001, 0x6, 0x2, 0xe238b8, 0x2, 0xd, 0x1, 0x8, 0x6, 0x8}}) sendfile(0xffffffffffffffff, r3, 0x0, 0x400000000000c2f9) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, 0x52, 0x3ab3666c4349b199, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000e40)="480000001400190d09004beafd0d36020a8447000b4e230f00000000a2bc560119d7004f19dfb7f393d7359031033f817f00000000000000000101ff05c00e030002000000ffff01", 0x48}], 0x1) syz_genetlink_get_family_id$batadv(&(0x7f0000000600), r1) 2m33.826766788s ago: executing program 3 (id=5275): close(0x3) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x675f, 0x9, 0x3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001300)=@newtfilter={0x88, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xc, 0xfff3}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x4, 0x7, 0xb, 0xdc}, 0x2, r8}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x8080) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0003000024c1240000ff1107c2fb7fe0400018534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) 2m33.324261876s ago: executing program 3 (id=5283): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xffffffc1) (async) sendmsg$NL80211_CMD_GET_KEY(r3, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200048}, 0xc, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="289f31103415cf843ca47d99a854fcf9000000", @ANYRES16=r1, @ANYBLOB="000228bd7000ffdbdf2509000000110007003f91eb84e3da0058c826da61c1000000"], 0x28}, 0x1, 0x0, 0x0, 0x20005004}, 0x881) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r3, 0x0) sendmmsg$inet6(r2, &(0x7f0000000d00)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffc}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000400)="b8", 0x1}], 0x1}}, {{&(0x7f0000000080)={0xa, 0x4e20, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x45af}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000340)="013d99", 0x3}], 0x1}}], 0x2, 0x0) (async) shutdown(r2, 0x1) (async) setsockopt(r2, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050001000000000000000b00000008000300", @ANYRES32=r4, @ANYBLOB="34005080140001000102030405060708090a0b0c0d0e0f1805000200060000000800030006ac0f000a0004000000000000000000"], 0x50}}, 0x0) 2m33.09043701s ago: executing program 3 (id=5286): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0xc000) 2m32.943809566s ago: executing program 3 (id=5289): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001}) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r1, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r2 = socket$inet_udp(0x2, 0x2, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r3) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000200)={'syzkaller1\x00', {0x2, 0x0, @dev={0xac, 0x14, 0x0, 0x1}}}) recvmmsg(r1, &(0x7f0000000800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000102, 0x0) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1, 0x5, 0x1c, 0x10, 0x14, 0x6}, @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x40, 0x11, 0x0, @dev={0xac, 0x14, 0x0, 0x2}, @dev={0xac, 0x14, 0x0, 0x1}}, {0x1234, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "2d0395ce00cc3c2387c9c1d0a1444f0fd1364dd455bdd8f0", "cbdc5fd74cd28f0530f82770a639510bc8c68d7dd55fefac03fd6aa3b2a2ecec"}}}}, 0x66) 2m31.808580806s ago: executing program 3 (id=5311): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, 0x27, 0x1, 0x70bd29, 0x0, {0x6, 0x1}}, 0x14}}, 0xc000) 2m24.840714628s ago: executing program 2 (id=5387): syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x3, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000630121000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x12, 0x5, &(0x7f0000000140)=@framed={{0x18, 0x5}, [@jmp={0x5, 0x0, 0x2, 0x1, 0xb, 0xc, 0x10}]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xc, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x40000) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8008}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x17}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) 2m24.754457316s ago: executing program 2 (id=5388): r0 = socket$unix(0x1, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x24, r2, 0x5, 0xffffffff, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x64, r2, 0x5, 0x70bd2b, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x2d, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @val={0x25, 0x3, {0x0, 0xd, 0x80}}, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008054}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r4, 0x0, 0x0) connect$unix(r0, 0x0, 0x0) syz_emit_ethernet(0x1b3, &(0x7f0000002880)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @dccp={{0x2d, 0x4, 0x3, 0x9, 0x1a5, 0x66, 0x0, 0x40, 0x21, 0x0, @private=0xa010101, @empty, {[@rr={0x7, 0xb, 0x76, [@dev={0xac, 0x14, 0x14, 0x22}, @loopback]}, @timestamp={0x44, 0x20, 0xb3, 0x0, 0x3, [0x86, 0x11b, 0x38d0, 0x2, 0x3ff, 0x5, 0x1]}, @lsrr={0x83, 0x7, 0xcf, [@local]}, @timestamp={0x44, 0x4, 0x72, 0x0, 0xc}, @cipso={0x86, 0x11, 0x1, [{0x0, 0xb, "b11945bf9781cee298"}]}, @rr={0x7, 0x13, 0x8a, [@multicast1, @remote, @loopback, @empty]}, @rr={0x7, 0x27, 0x7a, [@multicast1, @dev={0xac, 0x14, 0x14, 0x41}, @broadcast, @multicast1, @dev={0xac, 0x14, 0x14, 0x10}, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x1a}, @remote]}, @timestamp={0x44, 0x10, 0xbe, 0x0, 0xc, [0x3e3f, 0x1, 0xf3ab]}, @cipso={0x86, 0xc, 0x3, [{0x5, 0x6, "6e82e125"}]}]}}, {{0x4e20, 0x4e24, 0x4, 0x1, 0xa, 0x0, 0x0, 0x5, 0x6, "cd0472", 0x0, "ab0ad7"}, "64aef62f2fc9fc02f321c45089f4bf3e7d266c866051ff363ccf5d06a3e5125a00ab9db5a557e5d23ebf77fd39c435f54a012b978929abe30e90d167b60e5ce218d2b27f51b82b982280b2b9621ab104e8b7c563d675ce8c4532eed93be72344e0eaef05cdb5acafa2862c25c73bcf8651da14c21e0a2319dcec3fa97fe901d9cf1e09e9053afd80be404bdd98feba45e07b5bd1c07a33cf123265c358df85ccbccd23a7d32963baa01dadeb8a8b621d82362c656bcf618b5c7ef9b5603a32f0726545808f8dcc152e7c8c9da04d38fb0a942154e7b786335af5a9a8836414d158"}}}}}, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x80800) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0x4, 0x8, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r8, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 2m24.586130738s ago: executing program 2 (id=5389): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="28000000060601020000000000000000050200010500010007000000090002008e797a3000000000"], 0x28}, 0x1, 0x0, 0x0, 0x40004000}, 0x44010) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00', 0x0}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r2}, 0x90) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r5) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r11, {0x4}, {0xffff, 0x3}, {0x9, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x8, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x10, 0x2, 0x8, 0x3, 0x0, 0x1, 0x8, 0x1, 0x0, 0x4], 0x3, [0xc, 0x101, 0x7fff, 0x2002, 0x7, 0x4, 0x0, 0xd03, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x2a, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x48040, &(0x7f00000001c0)={0x11, 0x7, r11, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) r12 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r13 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r12) sendmsg$TIPC_CMD_ENABLE_BEARER(r12, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="010001feff00004000000100800000000000014100f9181b0017006b616c6c657230", @ANYRESHEX=r2], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) 2m24.220030822s ago: executing program 2 (id=5394): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001", @ANYRES64=r2], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x4, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="18120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000008000023bfa400000000000007040000f8ffffffb705000008000000850000001900000095"], &(0x7f00000002c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r5, 0x0, 0xe, 0x0, &(0x7f0000000500)="11223344556677889900aabbccdd", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r3, 0x506, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x800, 0x14}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x4010}, 0x1af4bfc930003d2e) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d1a3a700080003400000000114000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 2m24.105180735s ago: executing program 2 (id=5395): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=@ipv6_newroute={0x30, 0x18, 0x1, 0x70bd31, 0x25dfdbfc, {0xa, 0x0, 0x0, 0x0, 0xff, 0x2, 0xff, 0x9, 0x100}, [@RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @SEG6_LOCAL_ACTION={0x8, 0x1, 0x8}}]}, 0x30}}, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x40011, 0xffffffffffffffff, 0xffffc000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendfile(r0, r2, &(0x7f0000000000)=0x8, 0xfffffffffffffffc) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000002000010000000000000000000220000000000000000000000500150002000000080009000000000008000b0005000000080017004e214e22080001"], 0x5c}}, 0x0) 2m23.791866694s ago: executing program 2 (id=5397): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10) recvmmsg(r1, &(0x7f0000007900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x12, r2, 0x180000000) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, 0x27, 0x1, 0x70bd29, 0x0, {0x6, 0x1}}, 0x14}}, 0xc000) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_NL_LINK_RESET_STATS(r3, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x134, 0x0, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8}]}, @TIPC_NLA_MEDIA={0xa4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7169}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1c15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x15dd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}]}, @TIPC_NLA_NET={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x10}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5f225674}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xffff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}]}, @TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'eth', 0x3a, 'wg1\x00'}}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'veth0_to_batadv\x00'}}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x4000040}, 0x4008010) 2m16.783662519s ago: executing program 33 (id=5311): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, 0x27, 0x1, 0x70bd29, 0x0, {0x6, 0x1}}, 0x14}}, 0xc000) 2m14.132964696s ago: executing program 1 (id=5513): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004d40)=[{&(0x7f0000000800)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d0019feffe69ee517d34460bc06000000a705251e6182949a3651f609c5bb46c4c0a285057e3061b9781e", 0x51}, {&(0x7f0000003d00)="9571b74e26ece2bb40a82f", 0xb}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000002c80)=""/4170, 0x104a}, {&(0x7f0000001480)=""/196, 0xc4}, {&(0x7f0000000400)=""/137, 0x89}, {&(0x7f00000006c0)=""/199, 0xc7}, {&(0x7f0000000600)=""/166, 0xa6}, {&(0x7f0000000340)=""/191, 0xbf}, {&(0x7f0000000000)=""/26, 0x1a}, {&(0x7f0000000200)=""/99, 0x63}], 0x8}, 0x0) r1 = socket(0x15, 0x5, 0x0) r2 = accept$alg(r1, 0x0, 0x0) getsockopt(r2, 0x200000000114, 0x271f, 0x0, &(0x7f0000000040)) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_mtu(r4, 0x29, 0x4e, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0100000004000000080000000100000001000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00', @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="010000000300"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x2, 0x200000000000009d, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x37, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m13.872822648s ago: executing program 1 (id=5515): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r0, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x5, 0x8) connect(r1, &(0x7f0000000200)=@generic={0x1f, "000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000"}, 0xa) 2m13.8725209s ago: executing program 1 (id=5516): socket$nl_xfrm(0x10, 0x3, 0x6) 2m13.791378356s ago: executing program 1 (id=5517): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$XFS_IOC_FSBULKSTAT(r0, 0xc0205865, &(0x7f0000001000)={&(0x7f0000000980), 0x8, &(0x7f00000009c0)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000fc0)}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000009000000000000000000ffff18420000fbffffff000000000000000000"], &(0x7f0000000340)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x3, 0x5}, 0x8, 0x10, &(0x7f00000006c0)={0x2, 0xd, 0x101, 0x80000000}, 0x10, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000700)=[{0x4, 0x3ff, 0x2, 0x3}, {0x4, 0x2, 0x4, 0x1}, {0x2, 0x3, 0x8, 0xa}, {0x1, 0x5, 0xa, 0x3}, {0x3, 0x5, 0x4, 0x6}, {0x3, 0x2, 0x3, 0x5}, {0x1, 0x3, 0x8, 0x2}, {0x2, 0x1, 0xd, 0x9}, {0x3, 0x3, 0x2, 0x7}], 0x10, 0x6}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000900)={r0, r2}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x35dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000940)='pimreg1\x00', 0x10) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0x0, 0xb}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x240048e4}, 0x40) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r3, 0x4048587b, &(0x7f0000000640)={{r3, &(0x7f00000001c0)='syzkaller0\x00', 0x400, &(0x7f0000000200)={@_ha_fsid={[0x3, 0x2]}, {0xf, 0x0, 0xffffa319, 0x8001}}, 0x9, &(0x7f0000000240), &(0x7f0000000280)=0x5}, 0x1, &(0x7f0000000540)=[{0x2, 0x90000000, &(0x7f00000002c0)='/dev/net/tun\x00', &(0x7f0000000440)="2ae1363c2ea139b49667dd5d46468f5d248622e0ddb39f5b1cfa21c30c556eff335694208ba8388dcc859fd16e8ccab4f3c5c56c5f4c7305f1b6d095899a091de987fa3aeb09b21dda9072525854faa22305fa4d68147a50ba9a58398e48889c7499dd5ea015baa022aabe2272dbaf9d7d79896dd3f9f115cd6938af0d3d737c9b64af9d75419ac49731c43f17bc278e4fba1eacd55ec07da5a463ea8c7ec661428fa6881f0fb10a20f25da952b8ac170501a7d4b9dc619e35d836f4cf69a7f30e25c60b54bc7a325261465225fac810397c2eb4222e5d3565b3462da50c60f2a0b143f083c6", 0xe6, 0x8}]}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'veth1_to_hsr\x00', @multicast}) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="a00000001800092d00000000000000001c140000fe000001"], 0xa0}}, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96d", 0xe}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc04132478543c0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x83e29f5c14b60d7e) 2m13.726804044s ago: executing program 1 (id=5518): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, r2, 0x400, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x44080}, 0x4000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CHANNEL(r3, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0x16}, @NL802154_ATTR_CHANNEL={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x700000007}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x18}, @NL802154_ATTR_PAGE={0x5, 0x7, 0xd}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x4008}, 0x1) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000680)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000640)={&(0x7f0000000340)={0x2c4, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x158, 0x8, 0x0, 0x1, [{0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x744ed5be}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4783a3dd}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x44a6517d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xdf7231}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x11}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfa}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x506f57cc}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xda}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe2}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7e7f416b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x712016dc}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x16ac7160}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x40722e0}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1eb9f8c7}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4afc0415}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x92}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x73beed79}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x40e4c5da}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x12ed4c0f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x63}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x66}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2f}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x537700ba}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x79d7277a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3d2f4425}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xff}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3482400e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5f2c20ec}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x46}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xe7e0f0e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2a}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x44, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x7}, {0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x10c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1d}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x36ea5ebf}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x60c50b3c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x52}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x90}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x64040935}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6ba104f1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x38283148}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1162b2db}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x65054ae1}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x69}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x30}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x160b68b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7daf9419}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x67}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb5}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x29}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2d9fe2c5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x93}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6b54a6a9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x79fd992b}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x26}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x585c99ca}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7ba1eaae}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x72025857}]}]}]}, 0x2c4}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000740)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000840)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r4, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xe}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000000) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), r1) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x58, r6, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_RULES={0x38, 0x22, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x2}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x6}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xc35}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xc}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x1}]}]}, @NL80211_ATTR_DFS_REGION={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x801}, 0x44) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000a40)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)=@bridge_getlink={0x70, 0x12, 0x1, 0x70bd28, 0x25dfdbfe, {0x7, 0x0, 0x0, r7, 0x800, 0x2084}, [@IFLA_EVENT={0x8, 0x2c, 0x8}, @IFLA_PHYS_SWITCH_ID={0x22, 0x24, "953f2d7ebc90342ca5094de69243fba772a99a7a5aa4423d776167926274"}, @IFLA_MASTER={0x8, 0xa, r5}, @IFLA_IFALIAS={0x14, 0x14, 'sit0\x00'}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x70}}, 0x40040) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000bc0), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000c00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r1, &(0x7f0000000d00)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x4c, r8, 0x800, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0xc, 0x36}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x67}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5}]}, 0x4c}}, 0x800) ioctl$XFS_IOC_ERROR_CLEARALL(0xffffffffffffffff, 0x40085875) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x14, r2, 0x100, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8840}, 0x1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r0, &(0x7f0000000f40)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e80)={0x48, r6, 0x100, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x4, 0x65}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfffffff7}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0xf9}]}, 0x48}, 0x1, 0x0, 0x0, 0xc0000}, 0x8000) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000f80)={0xffffffffffffffff}) ioctl$sock_inet_tcp_SIOCATMARK(r10, 0x8905, &(0x7f0000001000)) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r11, 0x84, 0xc, &(0x7f0000001040), &(0x7f0000001080)=0x4) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001100), r1) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000001200)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x74, r12, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x60, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x41}, 0x20002081) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001280), r10) sendmsg$ETHTOOL_MSG_FEATURES_GET(r1, &(0x7f0000001380)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001340)={&(0x7f00000012c0)={0x7c, r13, 0x8, 0x70bd25, 0x25dfdbff, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8810}, 0x1) read(r11, &(0x7f00000013c0)=""/217, 0xd9) ioctl$FS_IOC_RESVSP(r10, 0x40305828, &(0x7f00000014c0)={0x0, 0x3, 0x5, 0x22aba228}) 2m11.032726377s ago: executing program 1 (id=5520): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, 0x27, 0x1, 0x70bd29, 0x0, {0x6, 0x1}}, 0x14}}, 0xc000) (fail_nth: 14) 2m8.613925111s ago: executing program 34 (id=5397): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10) recvmmsg(r1, &(0x7f0000007900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x12, r2, 0x180000000) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, 0x27, 0x1, 0x70bd29, 0x0, {0x6, 0x1}}, 0x14}}, 0xc000) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_NL_LINK_RESET_STATS(r3, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x134, 0x0, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8}]}, @TIPC_NLA_MEDIA={0xa4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7169}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1c15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x15dd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}]}, @TIPC_NLA_NET={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x10}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5f225674}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xffff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}]}, @TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'eth', 0x3a, 'wg1\x00'}}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'veth0_to_batadv\x00'}}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x4000040}, 0x4008010) 1m55.997535302s ago: executing program 35 (id=5520): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, 0x27, 0x1, 0x70bd29, 0x0, {0x6, 0x1}}, 0x14}}, 0xc000) (fail_nth: 14) 3.610846298s ago: executing program 6 (id=6111): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) (async) r1 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f000042a000/0x800000)=nil, 0x800000, 0x0, 0x11, r1, 0x0) (async) mmap$xdp(&(0x7f000042a000/0x800000)=nil, 0x800000, 0x0, 0x11, r1, 0x0) mmap$xdp(&(0x7f0000791000/0x4000)=nil, 0x4000, 0x0, 0x4188031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001780)={&(0x7f0000001640)=ANY=[@ANYBLOB="9feb0100200000000100000018000000190000000a0000000000000001"], 0x0, 0x3a, 0x0, 0x1, 0x6}, 0x28) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newtfilter={0x5c, 0x2c, 0xf3f, 0x70bd2c, 0x25dfdbba, {0x0, 0x0, 0x0, 0x0, {0xc, 0xfff2}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0xfffffffffffffff9, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x5}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x84}, {0x5, 0x7, 0x2}}}]}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20041090}, 0x4044895) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newtfilter={0x5c, 0x2c, 0xf3f, 0x70bd2c, 0x25dfdbba, {0x0, 0x0, 0x0, 0x0, {0xc, 0xfff2}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0xfffffffffffffff9, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x5}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x84}, {0x5, 0x7, 0x2}}}]}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20041090}, 0x4044895) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syzkaller0\x00'}) socket$inet(0x2, 0x2, 0x0) (async) socket$inet(0x2, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r4) sendmsg$IEEE802154_LLSEC_SETPARAMS(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000003c0)={0x20, r5, 0x5, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x24000010) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c000000180001efff00000000000000050000000800b8"], 0x1c}, 0x1, 0x0, 0x0, 0x400d1}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newqdisc={0x24, 0x24, 0x401, 0x1, 0x0, {0x0, 0x0, 0x0, r6, {0xc, 0xffff}, {0xfff1, 0xffff}, {0xf, 0x9}}}, 0x24}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newqdisc={0x24, 0x24, 0x401, 0x1, 0x0, {0x0, 0x0, 0x0, r6, {0xc, 0xffff}, {0xfff1, 0xffff}, {0xf, 0x9}}}, 0x24}}, 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f0000000240)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) shutdown(r7, 0x1) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x84, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @empty}}}, &(0x7f0000000180)=0x90) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000ff000000ca865c5bfc9b1acf8baa4b822f0d5d5d713476df28dcc48cadd82e06b7f59d9ee4ca8f923b66a91279125158532c1e079d2474f5a0ac38165bd7d4c2a38cf08f178eacc11806a3410da722e864b3dc8d0afd3a4201262a7a0345b156741da9c3e6feaf2d9e5b927cd85536e432a850cb292d550980", @ANYRES32=0x0, @ANYRES16=r8, @ANYBLOB='\x00'/28], 0x48) (async) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000ff000000ca865c5bfc9b1acf8baa4b822f0d5d5d713476df28dcc48cadd82e06b7f59d9ee4ca8f923b66a91279125158532c1e079d2474f5a0ac38165bd7d4c2a38cf08f178eacc11806a3410da722e864b3dc8d0afd3a4201262a7a0345b156741da9c3e6feaf2d9e5b927cd85536e432a850cb292d550980", @ANYRES32=0x0, @ANYRES16=r8, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r9}, &(0x7f0000000380), &(0x7f0000000040)='%+9llu \x00'}, 0x20) writev(r7, &(0x7f0000000740)=[{&(0x7f0000000400)="37265ec3e43dcc1127007b53801fa4849c608eb7c0e8d2a2c487fd7467f2892e03f2cb5f25b0f8978fe726022c9f3ed3858dcc08d0cb391f1c78b75f37a08a9332dd43b182213cbd611ca5482aec52287a6e0dce700e11379d84e6f2ae8eb250d9f86290f95497f44143556aad1f9503d600ee823ca00c04e37dbf0e17df1f110c3c185c9733eba3aeccd7ac26d7288bd5475af710a290b0129465eb2906a1922c612b625cf5cdd7", 0xa8}, {&(0x7f0000000540)="466c39c5dceca51af0c182d22d8f5377f43d3e4801bb0fe53f151c4dae1a81f17c9e703dab18dd2c4638455be0d61eb25febe10fa66f6179b4f010", 0x3b}, {&(0x7f0000000640)="064d8a63c6c02cd9fea92c4b42cb8edf488bd1b92bd3d5df467a57a8c86fcb048b13b2bd8f48d5d832f4eaec717806689970a350579afb5f111e878bc49b172f5000e1d449bb3b83ff94358074adfbc6eafe2500679775ddf149d5c44e02f2bff6f105ef0b4454299b1c3bd786ff114ffe0091b4e87cd182cca4aca90b2f1d9796e82241575969303cf41f9212bb9b090a3058172de1cfa42ba614eebda813f579f6662d616ac1a1180c71fea947f6d4ca266b0104a399905504e68f749b9175e42634f03c1796b5", 0xc8}], 0x3) socket$pppl2tp(0x18, 0x1, 0x1) (async) r10 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) (async) r11 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r10, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r11, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) (async) r12 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000900)=ANY=[@ANYBLOB="4800000002a6dcc7c8d1f3c01bd73dc9ac609594ee0a7445ef3ab7d30734cd039788d3b3fef29ffe6c4aec9009b65cccca4f69a0de3b903ee3727732a83be255c6c70b9beff31d3ec91c1bd352ececb0d900"/93, @ANYRES16=r12, @ANYBLOB="01002cbd701004000000050000000600010005000000080009000200000008000b000000000008000c00a80a00001400080069703667726530000000000000000000"], 0x48}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) 3.148864223s ago: executing program 6 (id=6115): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="1d0000001400010000000000000000002d00000002060000050002"], 0x1d}}, 0x24084000) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x1, 0x7) setsockopt$MRT6_TABLE(r3, 0x29, 0xcf, &(0x7f0000000000)=0xffffffff, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000600)="05031600d3fc140000004788031c09103c28e808ba4217694d538df38de3a4f593c81248f4c0a159e43e99831f769d2f856f0b9b", 0x34, 0x814, &(0x7f0000000140)={0x11, 0x86dd, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0x26}], 0x1}, 0x20000000) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1000000002000000090000000800000040000400", @ANYRES32=0x1, @ANYBLOB="037b9c62c9f61b34536fbe0a00"/31, @ANYRES32=r9, @ANYRES32=r3, @ANYBLOB="03000000030000000500"/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0xf, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000004000000000000009ce500000656040009000000079500040800000070b7f0ffffffffff1832000004000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7030000000000004bee05d69ff4850000000c000000b70000000800000018350000010000000000000000000000ab00"], &(0x7f0000000600)='GPL\x00', 0x5, 0xb0, &(0x7f0000000940)=""/176, 0x41100, 0x4a, '\x00', r9, 0x0, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000700)={0x0, 0x3, 0x2, 0x3d}, 0x10, 0x0, 0x0, 0x5, &(0x7f00000007c0)=[0xffffffffffffffff, r10, r3], &(0x7f0000000800)=[{0x4, 0x5, 0x0, 0xa}, {0x2, 0x3, 0xe, 0x8}, {0x1, 0x2, 0xe, 0x8}, {0x3, 0x1, 0x5, 0x4}, {0x2, 0x1, 0x0, 0xc}], 0x10, 0x1}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r14 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r14, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r12, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01002dbd7000fedbdf251900000008000300", @ANYRES32=r15, @ANYBLOB="06006d00010000009a6e9e59ac87db126909a0415e6d13ce69e79d1bb83a052874afb551f0c5a3da3d0651031d3dd3927c0ab5552954d4e0c8f50591eccb7a070ac2a37aacd9f921496e"], 0x24}, 0x1, 0x0, 0x0, 0x14}, 0x4000000) syz_emit_ethernet(0x56, &(0x7f00000000c0)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "170100", 0x20, 0x2b, 0x0, @remote, @local, {[@routing={0x0, 0x0, 0x2}], {0x0, 0x0, 0x18, 0x0, @wg=@data}}}}}}, 0x0) sendmsg$NL80211_CMD_DEL_INTERFACE(r2, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000740)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="010025bd700a00000025080000fe1ccaf648351d1893a7fec22149a343afb0fa42bc42ce98e4fecc6cfdab41fd1cf5fa54395cde9a39030fd7dddd032f84fef35ecf28c706fd", @ANYRES32=r15, @ANYBLOB="0c0099000900000026000000"], 0x28}, 0x1, 0x0, 0x0, 0x40800}, 0x48004) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r11, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000140)="b9ff03076804268cb89e14f088a8", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000002f4010100000000000000000a000000080001000100000a09000200000067f4245398da37bbdce1f34f332664641d71e1921c2dbc5aeb99767d85a946cc4f62a81e84fe9845490cea99569fe014dd1c294c3c8fd3580297eadc604a72998b47d1137efd71a9c8992fe170222b5be583a0f8d5ce6302532754681a7be6438f1bcfd702a0235e1f494270f9ae435556cf8387f628c13f555eac1b36f187b35ce2491f0bd18a35ac5b95a642cd19414c525f4ce6b1be514904be861163d1755688af4ad2abb9032d25c233d589deaa49df398bc7554e12"], 0x28}}, 0x0) sendmsg$NFT_BATCH(r4, 0x0, 0x0) 2.71707856s ago: executing program 7 (id=6118): r0 = socket$igmp6(0xa, 0x3, 0x2) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x800) r1 = socket(0x10, 0x6, 0x4) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r1) ioctl$BTRFS_IOC_ADD_DEV(0xffffffffffffffff, 0x5000940a, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380), 0x0, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) recvfrom(r0, 0x0, 0x0, 0x10000, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r2, 0x107, 0xb, &(0x7f0000000340), &(0x7f0000000380)=0x4) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'ip_vti0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) sendmmsg$inet6(r4, 0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000a40)={{{@in=@dev, @in=@multicast2}}, {{@in6=@initdev}, 0x0, @in=@private}}, &(0x7f0000000a00)=0xe8) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x100, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@getchain={0x2c, 0x66, 0x400, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0xfff3, 0xe}, {0xd, 0xd}, {0xffff, 0x8}}, [{0x8, 0xb, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r7 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a300000000048000000030a01040000000000000000020000000900010073797a30000000000900030073797a30000000001400048008000140000000030800024000000000080005400000000198000000060a01040000000000000000020000000900010073797a30000000000900020073797a30000000006c000480680001800a0001006d61746368000000580002800e000100686173686c696d697400000008000240000000013c0003006c6f00000000000000000000000000002000000010270000050200001000000010000000e8030000e8"], 0x128}}, 0x0) 2.403515966s ago: executing program 4 (id=6121): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x8, 0x0, &(0x7f0000000240)=0x38) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@ipv4_delrule={0x2c, 0x21, 0x1, 0x0, 0x25dfdbfc, {0x2, 0x0, 0x20, 0x6, 0x0, 0x0, 0x0, 0x1}, [@FRA_SRC={0x8, 0x2, @remote}, @FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x2e}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004001}, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) r3 = socket(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r6 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r6, 0x29, 0x2a, &(0x7f00000001c0)={0x100000001, {{0xa, 0x0, 0x3, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000ffff00000000000000bd0000000000000000000000e4ec01000000004000000000fc00000000000000000000000000013da51fd47aa2e2f700000000000000000000000000000000000000000000000000000000000000060000000000000000050000000a004e200e8a34c38f"], 0x310) setsockopt$inet6_group_source_req(r6, 0x29, 0x2b, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000002c0)=@newqdisc={0x68, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x9}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x38, 0x2, {{0x0, 0x0, 0x10}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x8}]}]}}}]}, 0x68}}, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r2, 0x0, 0x82, &(0x7f0000000000)={'nat\x00', 0x0, 0x0, 0x0, [0xffffffff, 0x1, 0x6, 0x2, 0xb71a, 0x2]}, &(0x7f0000000080)=0x78) 2.3563164s ago: executing program 5 (id=6122): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000500)={0x18, 0x0, {0x3, @multicast, 'wg0\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000040)) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x42a01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) accept4$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000340)=0x1c, 0x800) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x9, 0x3, 0x288, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1b8, 0xffffffff, 0xffffffff, 0x1b8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @mcast1, [0xff, 0xff, 0xffffff00, 0xffffffff], [0xffffff00, 0x0, 0xff], 'veth1_macvtap\x00', 'veth0_to_hsr\x00', {0xff}, {0xff}, 0x32, 0x6, 0x4, 0x3c}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xd0}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x5, 0xe, "278b48fab45b08b05c17fb2940fb1477a06f0880b01eac66c04be236dceb"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e8) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000001400000060ec97"], 0xffe) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl(r3, 0x40047438, &(0x7f0000000040)) close(0x3) r4 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r4, &(0x7f0000000000)={&(0x7f00000008c0)=@nameseq={0x1e, 0x1, 0x0, {0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x801}, 0x20) write$ppp(r3, &(0x7f0000000000)="7653268c10", 0x5) 2.355690266s ago: executing program 6 (id=6123): socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet(0x2, 0x3, 0x4) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x2, 0x200000000000001, 0x106) socket$kcm(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$can_raw(0x1d, 0x3, 0x1) socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000100)={0x2ffc, 0x4000003, 0xfffffefa, 0x6}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000160001f47efde4be701161000a000000040000800400", @ANYRES32=r0], 0x1c}, 0x1, 0x0, 0x0, 0x40014}, 0x804) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x214}, 0x1, 0x0, 0x0, 0x4050}, 0x40) 2.290844976s ago: executing program 7 (id=6124): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@bridge_dellink={0x3c, 0x13, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0xa006}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET={0x18, 0x5, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0x2}, {0x8, 0x1}]}}]}]}, 0x3c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00', 0x0}) getsockopt$IP_SET_OP_GET_BYINDEX(r0, 0x1, 0x53, &(0x7f0000000000), &(0x7f0000000080)=0x28) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09103c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 2.087374351s ago: executing program 6 (id=6126): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@gettaction={0x48, 0x32, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x400c004}, 0x24048840) (async) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @multicast1}, 0x10) (async) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) (async) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) (async) sendmmsg$inet(r2, &(0x7f0000001500)=[{{0x0, 0x100000019, &(0x7f0000000b00)=[{&(0x7f00000002c0)="89", 0x34000}, {0x0}], 0x2, &(0x7f0000000e40)=ANY=[], 0xd0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5}]}, 0x4c}}, 0x0) recvmmsg(r2, &(0x7f0000000680)=[{{0x0, 0x0, 0x0}, 0xfff}], 0x1, 0x400101a0, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@gettaction={0x1c, 0x5a, 0xc6b747b6bf1c6f95, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}]}, 0x1c}}, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c000000100003040000fff30000ea0000000400", @ANYRES32=r5, @ANYBLOB="60bc010004a701003c00128009000100626f6e64000000002c"], 0x5c}, 0x1, 0x0, 0x0, 0x11}, 0x4000044) 2.086636001s ago: executing program 4 (id=6127): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0xa0, 0x2, 0x8, 0x5, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6001}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xd}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x100}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0xf}, @CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0x101}, @CTA_TIMEOUT_TCP_RETRANS={0x8, 0xa, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_TCP_SYN_RECV={0x8, 0x2, 0x1, 0x0, 0x4c7a}, @CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0x5}]}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xdada}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0xa0}}, 0x20000001) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x8, 0x8000, 0x8, 0x3, {{0x25, 0x4, 0x0, 0x2b, 0x94, 0x64, 0x0, 0x5, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, {[@timestamp={0x44, 0xc, 0x97, 0x0, 0x6, [0xffff, 0x6]}, @noop, @ssrr={0x89, 0xf, 0x91, [@multicast1, @remote, @dev={0xac, 0x14, 0x14, 0x1c}]}, @end, @lsrr={0x83, 0x13, 0x63, [@empty, @dev={0xac, 0x14, 0x14, 0x38}, @loopback, @loopback]}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x4c, 0xffffffffffffffff, [{0x6, 0x6, "51d16974"}, {0x6, 0x2}, {0x7, 0x12, "01f201b34a3b5ce06d8eb4b70d5aad05"}, {0x0, 0x2}, {0x1, 0xc, "97be06efc9279eb1ce26"}, {0x2, 0x9, "a866f76a2bd68a"}, {0x2, 0x9, "fc60ad30a341e5"}, {0x7, 0xc, "f22c9182c533b53e70a8"}]}]}}}}}) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@getlink={0x10c, 0x12, 0x20, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, 0x0, 0x1000}, [@IFLA_PROP_LIST={0xb8, 0x34, 0x0, 0x1, [{0x14, 0x35, 'veth0_to_bond\x00'}, {0x14, 0x35, 'team_slave_1\x00'}, {0x14, 0x35, 'pim6reg\x00'}, {0x14, 0x35, 'ip_vti0\x00'}, {0x14, 0x35, 'team_slave_1\x00'}, {0x14, 0x35, 'geneve1\x00'}, {0x14, 0x35, 'veth0_vlan\x00'}, {0x14, 0x35, 'macsec0\x00'}, {0x14, 0x35, 'bond0\x00'}]}, @IFLA_PORT_SELF={0x18, 0x19, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "30ead0084ab5b1866cec7bc14199cd37"}]}, @IFLA_IFALIAS={0x14, 0x14, 'syzkaller1\x00'}, @IFLA_LINK_NETNSID={0x8}]}, 0x10c}}, 0x40000) 2.048780603s ago: executing program 7 (id=6128): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newtfilter={0x44, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x6}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0xb709, 0x58f}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) (async, rerun: 32) r0 = socket(0x10, 0x803, 0x0) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) (async) r2 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@bridge_delneigh={0x3c, 0x1c, 0xc07, 0x2000, 0x0, {0x2, 0x0, 0x0, r4, 0x8, 0x10}, [@NDA_DST_IPV6={0x14, 0x1, @empty}, @NDA_LLADDR={0xa, 0x2, @random="44328a67ad89"}]}, 0x3c}}, 0x20024090) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000300)={'syzkaller0\x00', 0x1}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000150)=@setlink={0x3c, 0x13, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8409}, [@IFLA_IFNAME={0x14, 0x3, 'syzkaller0\x00'}, @IFLA_NET_NS_FD={0x8, 0x1c, 0xc9}]}, 0x3c}}, 0x20000080) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r1, @ANYBLOB="0200000000008000800012000800010076746936"], 0xa0}}, 0x0) 1.898868349s ago: executing program 4 (id=6130): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newtfilter={0x64, 0x2c, 0x601, 0xfffffffe, 0xfffffffc, {0x0, 0x0, 0x0, 0xffffffff, {0x0, 0xf}, {0x1}, {0x300, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x34, 0x2, [@TCA_FLOWER_KEY_IPV4_SRC={0x8, 0xa, @broadcast}, @TCA_FLOWER_KEY_IPV4_SRC_MASK={0x8, 0xb, 0xff}, @TCA_FLOWER_KEY_CVLAN_ID={0x6, 0x4d, 0xf4c}, @TCA_FLOWER_KEY_PORT_SRC_MIN={0x6, 0x57, 0x4e21}, @TCA_FLOWER_KEY_ICMPV4_TYPE={0x5}, @TCA_FLOWER_KEY_ICMPV4_TYPE={0x5}]}}]}, 0x64}}, 0x80) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r4], 0x20}}, 0x0) 1.814540177s ago: executing program 5 (id=6131): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0xa, 0x4, &(0x7f0000000480)=@framed={{}, [@alu={0x7, 0x1, 0x9, 0x0, 0x0, 0x1}]}, &(0x7f00000005c0)='syzkaller\x00', 0xa}, 0x90) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x74, 0x30, 0x1, 0x0, 0xfffffffe, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8848}, @TCA_MPLS_TTL={0x5, 0x7, 0xd}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) 1.596156044s ago: executing program 5 (id=6133): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000080)=0x0) r2 = gettid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000900)=0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000940)={{{@in=@remote, @in6=@ipv4={""/10, ""/2, @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@initdev}}, &(0x7f0000000a40)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000a80)={0x0, 0x0, 0x0}, &(0x7f0000000ac0)=0xc) r6 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$netlink(r0, &(0x7f0000000b80)={&(0x7f0000000040)=@kern={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000008c0)=[{&(0x7f0000000440)={0x444, 0x3b, 0x200, 0x70bd2a, 0x25dfdbfe, "", [@nested={0x14, 0xa5, 0x0, 0x1, [@typed={0x5, 0x7a, 0x0, 0x0, @str='\x00'}, @nested={0x4, 0x14}, @nested={0x4, 0xa2}]}, @typed={0x8, 0x5, 0x0, 0x0, @fd=r0}, @typed={0x5, 0x4, 0x0, 0x0, @str='\x00'}, @generic="57fdafd4b5001ed2771368eb845abbd36ba18122e1a26d20a6b3738d3ca61e4a87fbb038fda006b9f772db650597c57242fe3aacb81990724a1b4b90332131da28fbf9c25daa301acd92d914b6af8b1deed80e14685c6a82883ade6958d9aa87ae870ff71062314854f803b3685548fbd55804d520e21af7f8488fecc4162b944995278ef6fb465a06ab820125f98c961bdeaeab8374b06efe458e3adf384a0dd3235d2d62f01f5833d5a8b4d007272bbd3340ac19bcdbb6e06280b966b1e8e8168072375acc233dd3b45d1324", @typed={0xd0, 0x15, 0x0, 0x0, @binary="41233ed1df3bed584a3c8e844d6854d01995c75c5cc169e012d27e40320d3bb69272a078de94dfd7c9c374a60ca65da761e1a0e849a427ffd5c24ab2a7fc7481170ac265e8d75a051044c6c664fc64b333e7b91102d96212483bfb4a26e5d7e6da6ccbbacee7477518c9329a860a5d30ba1d38c8f097cfadb55de529e54e0ccc7368e403ba3c70417a350222f848abae0ef8417c33025819c5cf0960fd82e41cdff492bd94c06be624e158845aa4635223edefafd7fa583f48b6ee1f6995216b3cced175b0d7049603678d48"}, @typed={0x4, 0x58}, @nested={0xf0, 0x3b, 0x0, 0x1, [@typed={0x8, 0xe8, 0x0, 0x0, @pid=r1}, @generic="593565a5ff189ad9d46f05b4b93c040893a56717172cbb97f7427093fe4ae52d1e272ef03802af1cf63415508961f8fd094ecfccd16602ac2f156e8b83611eaf3f30454370c8b44385992a94a92a057d1cff5dbc79bc08d104455d81164d07", @generic="add447f89c2d023c4426e7dabc4ec118d4a1cbdf3902c527e9217f068d0c0207c8b2fbbdefcd5c8913e547b7c520355fed3fbf8ea812c29c16a48f19ef5f219b34e89b7d8953c9fdcca966b77a57f844fa298306036921d19a7114ccee7e9eb32111e0b12254390a1398508463b44551848000cdc6dda518d0e9b22c99", @typed={0x8, 0x124, 0x0, 0x0, @u32=0xfff}]}, @nested={0x17a, 0xb1, 0x0, 0x1, [@generic="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", @generic="594adccc1502e60bb9a43c6520feea10b14f07e2c5967d712b89e4f4834532c982697cb1b3d00a37362d37e115c89d8bb2e60d56af8f64371dcddcce7a68890992d70fa5ccd9ba7843276552e6d551bed8853b3cde6a6ad35d28145657811375e5208d0872f85518c489", @nested={0x4, 0xd7}, @typed={0x4, 0x142}, @typed={0x8, 0x24, 0x0, 0x0, @pid=r2}]}]}, 0x444}], 0x1, &(0x7f0000000b00)=[@rights={{0x18, 0x1, 0x1, [r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r3, r4, r5}}}, @rights={{0x34, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0, r6, r0]}}], 0x70, 0x40000}, 0x891) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140100001400210200000000fcdbdf25041100800c0002"], 0x114}], 0x1, 0x0, 0x0, 0x804}, 0x0) 1.58354841s ago: executing program 7 (id=6134): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(twofish)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="b7f2288d3aaea2bc0000def1260a00"/32, 0x20) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$packet(0x11, 0x2, 0x300) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x40383, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x4, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0xfffffffffffffffd, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x80000001}, 0x0, 0x0) (async) close(0x4) (async) r1 = accept(r0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40080c0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@bridge_delneigh={0x2c, 0x1e, 0x1, 0x0, 0x0, {0x7}, [@NDA_LINK_NETNSID={0x8, 0xa, 0x6073d824}, @NDA_MASTER={0x8, 0x9, 0x10000009}]}, 0x2c}}, 0x0) 1.539918653s ago: executing program 4 (id=6135): socket$kcm(0xa, 0x1, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r0 = socket$inet6(0xa, 0x3, 0x9) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x6}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x6, &(0x7f0000000140)={0x24, {{0x29, 0x0, 0x2000000, @private2, 0x1000000}}}, 0x88) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/pid_for_children\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 1.395000504s ago: executing program 5 (id=6137): r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000040)=0x1c, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x7, 0x1, 0x1, 0x8, 0x7, 0xffeb}, &(0x7f00000000c0)=0x20) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000100)={0x3, [0x87, 0x0, 0x2]}, 0xa) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000140)) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000240)) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000340)={0x0, 0x3}, &(0x7f0000000380)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000003c0)={r4, 0x8f1, 0x9}, 0x8) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x40, 0x0, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x5}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xa}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x8000) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000540), r5) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x24, r6, 0x4, 0x70bd2c, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0xdcf1}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000040}, 0x20000000) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r5) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000006c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r5, &(0x7f00000007c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x48, r7, 0x200, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x5}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x100}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x6}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x7fff}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x84}, 0x805) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4, 0x20010, 0xffffffffffffffff, 0x7a4cb000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r5, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r7, 0x200, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4000080) openat$tun(0xffffffffffffff9c, &(0x7f0000000940), 0x80000, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000980)={r4, 0x2, 0x1, 0x81, 0x2, 0x8}, &(0x7f00000009c0)=0x14) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000a00)=@req3={0xa, 0x7f, 0x1, 0x3, 0x1, 0x2, 0x8c8}, 0x1c) sendmmsg(r3, &(0x7f00000023c0)=[{{&(0x7f0000000a40)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @private=0xa010100}}, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000ac0)="6ff5867d3e", 0x5}, {&(0x7f0000000b00)="1cd83cd96ca10985f061d3a01f4976b20a3fa3267fdca466faa006b9892c4073e0b63828fa7d2737ff542126653886a497a42050d7baf81791b1279972dc57698f67789c8914e1ac674bdd55e4696200cb66d6cbcecadd1ecd5a313a778e207789dca000d6e2c44ddcac48100ed6bdd3ee72f3bfb987b8f774f9c3be8c03995b46f0b98fd5322f7f97668af4ccc0c19d927cadeb7191da3a3456b7321b9da49e8f8e426dc95d4b085ca98edf8031b3709151f60da55af2920c8473c48c6ab2a3ab0a2fdd2e377d97e2fcad83d0b1d5bf3294bd50d5c30e0829650b953ebef8d8ba4c2cb3c93e927917c7344492f9a883c95d21c575f5a4db", 0xf8}, {&(0x7f0000000c00)="03a007c52792336a4374b6d4fbeb6da219c5be147133b40cf140ce9d98282e60e5e81b71b59edce16257cafffdece19efea0b29f61d06561b1ed9691a63fefdd0c465432bd5617a09e6c95e2868f6ab0a2da9218ffd7b7cc947463a3be81d874ea489966ccd37765", 0x68}, {&(0x7f0000000c80)="072fb690dfc88084c316b705a1a381019f325b24a84a0bc3f5f531690cc70980ddb2630229f360c5df15cdfc699c6b4d464a2c459924e4e20fab89749eedcfbd54ae5bd5d7a2728b931c58caf8f11e6cb68ffc06ec0873a0f09685f76918d7057802a8ed2b68c84e861174640cd5d52064d181ca", 0x74}], 0x4, &(0x7f0000000d40)=[{0xb0, 0x119, 0x5, "4a3b19cbc42183e3aa1d7ce0f4ccf2e83a4e21c5f16038d76372efe55234f62d64417163fed44fd5f2feca1b32e7d72d6ed80b48c14dbdc9ad070bba676f48a94441824d6161203c0a7bab10e0a32837f8aeab690eecf85bc849f1c16d9ebb73950127abec4e327b80cafe5d14b7179a517b16e7eec3ce8a35d8149138357de9942055799434be4c710c769ee4ebf5db01d0bc4a69f5c1f8a3ccf02e9c20a8"}, {0xa0, 0x108, 0x7, "9952bae38102986f638a9b9cd0b72e6f7c4598f2b04dfaae950a9b7d8e47e2da115f3f6db7addb21098d104e3193031df8f9caced4e3ba923c4516fade3174df0979b7229f8ffdedfb6babb86c62aacd022ef3e207059ffb380bbe9d73f68b0d5509f070e09d80d3a1f24ce761c521733860e9a95118fb44e4dd00452214a869b568fc8bad27893ae9b436f0"}, {0x78, 0x114, 0x4, "6e0f6b868e1873227cfc41c45c8f2a7e50d3a94c178c205af9f757a75fd91f36a24ebfe2f0fc07947c25266bb636634296d3c4692a4bf3135a0eb43441d2ca8c1286bf1d2facacd73fbeeae505d106d21511c3803b61b0a673eb4dedd9f6afeaf2c7e26e"}, {0x30, 0x113, 0x3, "33b14e798f65889062b54ebea43af02679648828d9132d752ee9b7"}, {0x108, 0x107, 0x80000001, "e317f514b552766e90e1bedc92b2e95690d3f4a9ba239a9d4cd0741615b7e49021bed426a6491641c0a37d4260ef255f0b7e4b7778ca6bca5f2f4e4fcc40d130a37f82a11482f4f7bf2d344cdba97895bf73f5e27a3d3052081608a8f84ad0e574e613aa2e611e80d39025293127151dfe3fef9868e409037d6ace36f0d93c38c206eefbd80140131fd5cac88ced7511390f04041773379c2ccc0771f07084d45034dff8ef140cbdeb2d90a7d7452767ff9bc80659d8cf6628a9f7fbeb9107df7c6a768546caa54c751ab016579410e29d82edb0ef965ecd7c1fe6e2a1734c7ca6e4775d6dbaca9b40d7a6474fa03a51d7c3de3619"}, {0xd8, 0x114, 0x3, "02f044b91f8f1ab7810f8a3fe92cd1ff9e2aa16367202cf05b5986bdbfad4efc524b52cc9776ab5137bef409149d9201f213b32661c0f803f9c3c33beca5ea8ac130c2acbaf4be635d7bac29fce4d7dc4ebfea625cb274c161af6d09555568bac7c6527613db7408ff26ecd09be53d61cac3a55af2b4a8184120638d12259dd3cd8961e9bd9a97d8eb0b8209c96efc98d9acb992fc50e2f1b1f3bc569e697f3a5d72ff31773c775de0ee44c84b55cd71caf664dd48ad5711976a13b6cb918c7b18"}], 0x3d8}}, {{&(0x7f0000001140)=@generic={0xb, "170766711f20539fe773c60b263477f36b84c0a4ab9d02f77be40797f638edb3c135a1846348843b609d83d87100ff836d7a0bb9ca8644ea1eecea4efed41a34509a75216d6eafc8847809741f8988e1a051acad0d614ed0154eb50d05e60a447984a21b09e76ee07595a0a44d6d6a704382a3021b9255c902e505fbe92a"}, 0x80, &(0x7f0000002380)=[{&(0x7f00000011c0)="b91800f0197ab2e13d9870b3cfb8a582eeccbf66b5fe17af29e252436d499b083ebf4a9bbafc3136751254cf9b02e652c9ce838998cc003bcae9d8e49ea5ed024afcdf4cd5d861880661381b5ad1d50a3f2c3b592e5aa67e44d9b0de27083148e214f9d168e1abb46dc966f7f6edc09625b3e6b00a0f0ca9cbd8e528903ce8f3a6aa7a57c01ef82d0c8bfd839fc408e1a2aae227419abf74071e450a42bbf77236b5e5ac06fb92583f332304f424b1a62658b47d64334fb190965d2e902b45c03321ca210df0", 0xc6}, {&(0x7f00000012c0)="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", 0x1000}, {&(0x7f00000022c0)="c4c436334a7f7c61c55d2ca905ef508c81a3873dcfc7507c28d3f3cccb8763428ce09fe1c89706cb2005e7df4c4a7bc52f3324feb34d273d8c7cf3ab2f1e6172a39a93b00f9c2f44cd423fe9eaa7f941528d2d550425afbcf74610177f6aac3e2077fdc74365a0ad7a349e26ba17aed2f7fa5fa3fdacc88faa089fb568f8e031a4", 0x81}], 0x3}}], 0x2, 0x54) syz_genetlink_get_family_id$ethtool(&(0x7f0000002440), r5) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000002480)={r4, 0x400}, 0x8) sendmsg$NL80211_CMD_DEAUTHENTICATE(r5, &(0x7f00000025c0)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002580)={&(0x7f0000002500)={0x48, r7, 0x4, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x8}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x7}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x20000850) ioctl$sock_SIOCGPGRP(r10, 0x8904, &(0x7f00000027c0)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000002800)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in6=@private2}}, &(0x7f0000002900)=0xe8) sendmmsg$unix(r9, &(0x7f0000003180)=[{{&(0x7f0000002600)=@file={0x1}, 0x6e, &(0x7f0000002780)=[{&(0x7f0000002680)="987afb2a997df8d36119c831f73bf138babfff81c6e30d830b26b6901e72a4e6363ca61789adec33630eb7e010307194", 0x30}, {&(0x7f00000026c0)="6c703da565810c7c92b5b91f43578364774be561cb2dca8686b41b587967ec5b7412db866a5d62b1a348cfb5fbd1827cb85e7bd565d64cf3ad7fe8c16ec8eaee68c061241413fe1a81fced6aea9e78ac553f06d0fb3dbb511fc0caf66e97b0f6a49b39656760b50a00d6d654e7a8a19aad7b1f5eba0a6dd8068d2477c1ba0785a1b62775a98a0d1aad870bbdbc182b760d1b7de36483d6f18498ef43c722fb8eec", 0xa1}], 0x2, &(0x7f0000003080)=[@cred={{0x1c, 0x1, 0x2, {r11, r12}}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @cred={{0x1c}}], 0xe0, 0x44080}}], 0x1, 0x80000) 1.29218967s ago: executing program 8 (id=6138): ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'ip6gre0\x00', 0x0, 0x29, 0x1, 0x2, 0x9, 0x70, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x700, 0x8020, 0xfffffff5, 0xb}}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000100)=ANY=[@ANYRES64=r0, @ANYRES8], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', r0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x20}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000004440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000004400)={&(0x7f0000001880)={0x2b58, r2, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_FEATURES_HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0xb0, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x9d, 0x5, "270fc3e887218b29ad65b4c7049b28296a7b2d7c561673453e972bf6cd4d9fbffb017471eb70a296bda84fd54a3379732b67b0923ab9fdf760043ea3d1451586ce85ff82639505d5d6544ecbb19f6428eb87179b94efb559d3b00c3ce7f7dbe46d5f5a164d3a0cd450fdfc9911d63557a90d68a06fc019cd7cfa4cd117d6cfd0af34aac6d54c8fa712ad762f5cc89da1f61d550701ad2c75fb"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_WANTED={0x1008, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x1004, 0x5, "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"}]}, @ETHTOOL_A_FEATURES_WANTED={0x1404, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x40, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '^:],(!+\\\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000000}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_VALUE={0xfb, 0x4, "3ce668c69b7f3779a453df4f8b46f9b73d7413a4e020ce27fc6bda8cc52eac882eaa2d99e76806804544989471c5cc66fc9e82fdd9a617c05f078e6b2bd17a474d2cdf411bc3565a744eca3583b0864ce5bc6e95e4476c0d418b2a302c415aa05b44362808a962f3921778ec67bb503573e2f86c972200f32eb89decacd422461ef13d2a6773990b34a1b0d98cfa6584287a79a735d446fcaf659452a3f23d23a3cc2848f3a841c29341e22476caef672d015e47dbc0929e65800930fcaa9ff81a6380c4699da0e6021f93b23d1bda830688268db8f79d16a6055727a61d44ea85e875d46bd5a4155daa1add7b354a2906fb0d59e4a28f"}, @ETHTOOL_A_BITSET_BITS={0x148, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syztnl0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '\'#[\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\x1d\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x47}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syztnl0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, '+\\-\\-*:\xd5*!}]\\\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '[+\x00'}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffff9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x200}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syztnl0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '+\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '*@-:([\x00'}]}]}, @ETHTOOL_A_BITSET_BITS={0x134, 0x3, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x81}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syztnl0\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ip6gre0\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xf}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\'{HR\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x101}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1b}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x5}, @ETHTOOL_A_BITSET_VALUE={0x2f, 0x4, "a64c265cf3f09831b6111075281f92651afbe8f2d18875ce7f353b3103b18c4b3ff28702d9abc3809388a5"}, @ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}]}, @ETHTOOL_A_FEATURES_HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x2fc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x3c, 0x3, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x92680}, @ETHTOOL_A_BITSET_BIT_NAME={0x18, 0x2, '{}{&^\\-+%*K&\xdd]]\xf4/*\xf6\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '%$\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '^\xcf]@]@\x00'}]}]}, @ETHTOOL_A_BITSET_BITS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '$\xca^,\xed$%-\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7f}, @ETHTOOL_A_BITSET_VALUE={0xe3, 0x4, "3bd4f26dd01cc50579f7e455a13ae3102bb513c711aeda3adb8ac7622d68f250565e74a4712d307fa53c1e5ef2aa933eb353106e69902dea2d2cde18717feddcf0ea5ee3f41ce66805b549038b18c62d03eacb75ca46019169e456c1363e3dd2916fd8ba35e147aafc388dc7928c33bc7f4d2575c590274c9a4460d1459a28a2c2c1148fd12b4a6dbd1339f17daa5c96cc0391e0ba04d990e983719a9951795d5a7ec0a54fbf93d44271e8ba00ea13d21c004ec10279c1a428b658bf007e1a092ff3a43ca0748b75c6301516a427235255ec9e4707b118b509dbee415ec2b7"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x101, 0x4, "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"}, @ETHTOOL_A_BITSET_VALUE={0xa7, 0x4, "e586075570a9ae23e43c592f22e8eabcb6c7db5162069fccdaf372ffdc23023d0fb496f48487412de1baf552ac4bb091d05a572253a26de97c545cfa9e96a7e491ca3883bd6d5f5ae6f4ff62646e2f57e4dd935e7a9b246309297f6b2671d56630dd9e4d89960da7c4d6a21213042225f152ac3f29f3f886c857ba602d6c0f9806391d848905b5c5093517069ec427c7eadb0fc9f476ff3f653604600ccc3587a8bf7a"}]}, @ETHTOOL_A_FEATURES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x294, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4d, 0x4, "32c71a64a77a9b0a29d237393e3a657ee4e439727889f318841b52704239777975a507491e2488d30716b3f3f6b6bef0502ea3fa4931aa00aad1fd05a9ef682699a2909c894506d0c5"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_BITS={0xb8, 0x3, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffff2fa2}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}, {0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6d2d}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8000}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syztnl0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfef}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\')%.\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4f}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x81}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syztnl0\x00'}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4}, @ETHTOOL_A_BITSET_BITS={0xe4, 0x3, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syztnl0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x4}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x75c}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffff8000}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '(^-,$]@]$\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3a7}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '&\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1000}]}]}, @ETHTOOL_A_BITSET_VALUE={0x87, 0x4, "942da5e7581580cd5168bfca6f4a1005c6bc2d242d3f1b2d3f58423ac38d770c304f9460c51acf60c0a42f62c2fe77db8fd77e127cc45379e8637469f38b92756194c3b16dc4e4ddca9dab6ac899467297f779afb4aa677c59e1c612cd6059ea6b48ffc48402970539a2fd3c767f660d88f2b2e208fbfb3f54f5f9f48e6c0cf7ef3820"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x2b58}, 0x1, 0x0, 0x0, 0x44}, 0x4000804) 1.259423832s ago: executing program 4 (id=6139): r0 = socket(0x2d, 0x2, 0x0) setsockopt(r0, 0x11d, 0x1, &(0x7f0000000200)="01000000", 0x4) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000000)={0x0, 0xbbab}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f00000001c0)={r1, 0x26, "ba20cdfac1c925af16a76a63c91a23afe70fa4b9becf96e616c54fd45a8517e5644583392597"}, &(0x7f0000000240)=0x2e) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000003c0)={'syztnl1\x00', &(0x7f0000000340)={'syztnl1\x00', 0x0, 0x29, 0x83, 0x6, 0x1, 0x2, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8000, 0x8, 0x5, 0x40}}) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r0, &(0x7f00000005c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x90, r2, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xfe}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x40, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x8}]}, 0x90}, 0x1, 0x0, 0x0, 0x2000c850}, 0x40005) sendmsg(r0, &(0x7f0000000400)={&(0x7f0000000500)=@generic={0x2d, "000000000000080118000200000006000a00"}, 0x80, 0x0}, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000200)={0x0, 0x0, 0x207}, 0x20) sendto$inet6(r4, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1f, 0x5, &(0x7f0000000040)=@framed={{}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x94) 1.192392194s ago: executing program 5 (id=6140): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x802, 0x0) bind$llc(r1, &(0x7f0000000000), 0x10) close(r1) 1.137549145s ago: executing program 6 (id=6141): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000013000500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001400030073797a6b616c6c65723000000000000008001c00", @ANYRES32=0xc9], 0x3c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x2, 0x2, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0xad}, @exit], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x38}, 0x90) ioctl$TUNSETLINK(r0, 0x400454cd, 0x2) 1.089295115s ago: executing program 8 (id=6142): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r0, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x5, 0x8) connect(r1, &(0x7f0000000200)=@generic={0x1f, "0000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000"}, 0xa) 1.040116632s ago: executing program 5 (id=6143): r0 = socket$kcm(0x2, 0xa, 0x2) (async) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x0, @local, @local, {[], {{0x8000, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x9, 0x0, 0x0, {[@mptcp=@generic={0xac, 0x2}]}}}}}}}}, 0x0) (async) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) (async) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x2) shutdown(r2, 0x1) (async) r3 = socket$l2tp6(0xa, 0x2, 0x73) recvmmsg(r3, &(0x7f0000007000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x1, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r5 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r5, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) (async) sendmsg$netlink(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000006c00)={0x28, 0x12, 0x1, 0x0, 0x0, "", [@nested={0x10, 0x0, 0x0, 0x0, [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}, @typed={0x5, 0x37, 0x0, 0x0, @binary="1b"}]}, 0x28}], 0x1}, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x5001}) (async) ioctl$TUNSETVNETHDRSZ(r4, 0x400454d8, &(0x7f0000000080)=0xc) (async) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r6, 0x11, 0x66, &(0x7f0000000100)=0x1, 0x4) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x20e6, 0x0, @empty}, 0x1c) (async) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', 0x1}) write$tun(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="010530000a00140006000000600000000030114020010000000000000000000000000001ff02000000000000000000000000000120e620e6"], 0x64) (async, rerun: 64) socket$netlink(0x10, 0x3, 0x5) (async, rerun: 64) ioctl$AUTOFS_IOC_ASKUMOUNT(r1, 0x80049370, &(0x7f00000001c0)) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b4fb85048b6cc917c7d400000000", @ANYRES16=r9, @ANYBLOB="010028bd7000fbdbdf2514000000"], 0x14}}, 0x4040) (async, rerun: 32) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'dummy0\x00', @link_local}) (rerun: 32) 897.002424ms ago: executing program 8 (id=6144): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1, 0xffffffffffffffff}, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000900), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000940)={0x14, r4, 0x400, 0x70bd29, 0x25dfdbfe}, 0x26}, 0x1, 0x0, 0x0, 0x20040001}, 0x40804) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={r2, 0x0}, 0x20) getsockname$l2tp6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000080)=0x20) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@mpls_delroute={0x30, 0x18, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_VIA={0x4, 0x12, {0x0, "f1b9a81697008d68a0328c49d2ee"}}]}, 0x30}}, 0x0) 683.717382ms ago: executing program 6 (id=6145): r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1000c957}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x9, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfffa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x8000003, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc04, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0x3}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040a1}, 0x6894) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @broadcast}) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0100000000000000000017000000400006803c00040067636d2861657329000000000000000000000000000000000000000000000000cf766e68ff4b5e094cd07ec3ee777de774fc7987"], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) r8 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r8, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r7, 0x109}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000380)="da", 0x14}], 0x1}, 0x20000885) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r9, &(0x7f0000000100)=[{&(0x7f0000000180)="12c3f3900a1487888800db27801ce461cd69c5aa0eebd0e719d338085784c0f9453d9127db7ef0041747", 0x2a}, {&(0x7f0000000300)="1a36c585f33853c08764d056a86d003cbaf5cde47e5f51", 0x17}], 0x2) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r9, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x21, &(0x7f0000000080)=r9, 0x4) sendmsg$kcm(r1, &(0x7f0000000040)={&(0x7f0000001640)=@l2tp={0x2, 0x0, @loopback, 0x1}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)="03", 0x1}], 0x1}, 0x4000850) 509.741181ms ago: executing program 8 (id=6146): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x2a, &(0x7f0000000100)={&(0x7f0000000040)={0x14, r1, 0x201, 0xfffffffc, 0x0, {0x4, 0x0, 0x26}}, 0x14}, 0x8, 0x3000000000002, 0x0, 0x4}, 0x20044001) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080), r0) sendmsg$NLBL_CIPSOV4_C_LIST(r2, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x8c, r3, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x68, 0x8, 0x0, 0x1, [{0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x53}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x535150ca}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2f}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x70}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x18}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4f0917d7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x98}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa6}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd6}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8800}, 0x62196133dbb160f0) 499.853515ms ago: executing program 7 (id=6147): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000480)=ANY=[@ANYBLOB="1400", @ANYRES16=r1, @ANYBLOB="ffff2abd7000fcdbdf2503"], 0x14}, 0x1, 0x0, 0x0, 0x400c9}, 0x20001800) 280.053234ms ago: executing program 8 (id=6148): r0 = accept4$x25(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80000) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r0, 0xf505, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_FLUSH(r2, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x150, r3, 0x200, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x40}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MEDIA={0x50, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x22d2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}, @TIPC_NLA_LINK={0xcc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb4c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x98e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}]}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000300)=0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r1, 0x5000943a, &(0x7f00000003c0)={{r2}, r4, 0x0, @inherit={0x48, &(0x7f0000000340)={0x0, 0x0, 0x1ff, 0x40, {0x14, 0x7, 0x7, 0x10040, 0x8077}}}, @subvolid=0xfffffffffffffff9}) recvmmsg(r2, &(0x7f0000002d80)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000013c0)=""/140, 0x8c}, {&(0x7f0000001480)=""/43, 0x2b}, {&(0x7f00000014c0)=""/239, 0xef}, {&(0x7f00000015c0)=""/131, 0x83}, {&(0x7f0000001680)=""/40, 0x28}, {&(0x7f00000016c0)=""/100, 0x64}, {&(0x7f0000001740)=""/211, 0xd3}, {&(0x7f0000001840)=""/251, 0xfb}, {&(0x7f0000001940)=""/19, 0x13}], 0x9, &(0x7f0000001a40)=""/18, 0x12}, 0x4}, {{&(0x7f0000001a80)=@nfc, 0x80, &(0x7f0000001e00)=[{&(0x7f0000001b00)=""/84, 0x54}, {&(0x7f0000001b80)=""/43, 0x2b}, {&(0x7f0000001bc0)=""/113, 0x71}, {&(0x7f0000001c40)=""/71, 0x47}, {&(0x7f0000001cc0)=""/255, 0xff}, {&(0x7f0000001dc0)=""/53, 0x35}], 0x6, &(0x7f0000001e80)}, 0x9}, {{&(0x7f0000001ec0)=@phonet, 0x80, &(0x7f0000002080)=[{&(0x7f0000001f40)=""/43, 0x2b}, {&(0x7f0000001f80)=""/203, 0xcb}], 0x2, &(0x7f00000020c0)=""/35, 0x23}, 0x3}, {{0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f0000002100)=""/164, 0xa4}, {&(0x7f00000021c0)=""/145, 0x91}, {&(0x7f0000002280)=""/72, 0x48}, {&(0x7f0000002300)=""/135, 0x87}], 0x4, &(0x7f0000002400)=""/245, 0xf5}, 0xfffffff5}, {{0x0, 0x0, &(0x7f00000027c0)=[{&(0x7f0000002500)=""/93, 0x5d}, {&(0x7f0000002580)=""/215, 0xd7}, {&(0x7f0000002680)=""/121, 0x79}, {&(0x7f0000002700)=""/165, 0xa5}], 0x4, &(0x7f0000002800)=""/157, 0x9d}, 0x5}, {{&(0x7f00000028c0)=@hci, 0x80, &(0x7f0000002d00)=[{&(0x7f0000002940)=""/53, 0x35}, {&(0x7f0000002980)=""/169, 0xa9}, {&(0x7f0000002a40)=""/252, 0xfc}, {&(0x7f0000002b40)=""/73, 0x49}, {&(0x7f0000002bc0)=""/41, 0x29}, {&(0x7f0000002c00)=""/36, 0x24}, {&(0x7f0000002c40)=""/155, 0x9b}], 0x7}, 0x2}], 0x6, 0xc0000003, 0x0) ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000002f00)) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000002f40)={0x8, 0x0, 0xffffffffffffff81, 0x3, 0x8, 0x100}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000002f80), r5) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000003000), r1) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, &(0x7f0000003180)={&(0x7f0000002fc0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000003140)={&(0x7f0000003040)={0xf8, r7, 0x0, 0x70bd2c, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7}, {0x6, 0x16, 0xd6}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0xff}, {0x8, 0xb, 0xfffffff9}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x8}, {0x6, 0x16, 0x3}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x8}, {0x8, 0xb, 0x101}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x7}, {0x6, 0x16, 0xd}, {0x5}, {0x6, 0x11, 0x4f5}, {0x8, 0xb, 0x3300}}]}, 0xf8}, 0x1, 0x0, 0x0, 0x20000810}, 0xc004) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000003280)={'ip6tnl0\x00', &(0x7f0000003200)={'syztnl1\x00', 0x0, 0x4, 0x0, 0x4, 0x3f47, 0x0, @private2, @local, 0x8000, 0x20, 0x4f43a00, 0x9}}) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f00000032c0)=0x0) sendmsg$nl_xfrm(r2, &(0x7f00000046c0)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000004680)={&(0x7f0000003300)=@report={0x1348, 0x20, 0x1, 0x70bd28, 0x25dfdbfe, {0x3c, {@in6=@private1, @in=@private=0xa010102, 0x4e20, 0x5, 0x4e21, 0x2, 0x2, 0xa0, 0x0, 0x88, r8, r9}}, [@algo_aead={0x12b, 0x12, {{'gcm(arc4-generic)\x00'}, 0x6f8, 0xa0, "b54022366f81722d7544141ada19cbf3f2e86cf5436b259d33caf1aee4641c33da73e6424048f33b41f58542784562dee91388f2893578f82ee4f116d032ae58423b65a265177cd187cb3b6c1f374c38e7c8f96fad40856a9006ab0022ee834bd1e2e598e86e95c25b549ad35f3517893ccd04ed889dc7e5bf32f635c0365baf83ad1abdd7ce1a6f7660ce1fe7b2fe2ea73fde88f16fdaafb78285bedc82f6948fb30753db9d0fb7edb0b0954d4f99009601bb766bb0a3dbe368330bc0c64e87fdef93f71131065abda2f3345db7893c7302364e11588482f96ced2c4b8d7c"}}, @etimer_thresh={0x8, 0xc, 0xff}, @lifetime_val={0x24, 0x9, {0x3, 0x7, 0x7, 0x4}}, @srcaddr={0x14, 0xd, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2b}}}, @srcaddr={0x14, 0xd, @in=@empty}, @algo_crypt={0x134, 0x2, {{'cbc(cast6)\x00'}, 0x760, "8e294b3a38921fe0924ab3db73a2380072afb9205e7d7fe85fb9a6dd74082d425b688d9897bbe4379c0d25bc224d10761cca125f82161490f20ef582e231de2aecde683c060785a6f34307d880ee79de5a78bd1eaeb294df7f72cee4eb213ff43504b1ae28ed3bfdd8435ca71930f8ec5105d0b5b2ad6002b17bbd54c143b700fbaf7dc0ae5011776e5b5d485844d6829d882b565c513cfe9433536a33ab142bfd017ebc723693e89bf58624f0b3977ec9d3d0e5a4f3ead191d778acf0a4cdf6ae01ce8f304c620157c7639dc6dc53141972c829a5d9d43852afa1639894542c13297d8d8176cf13ae50734b"}}, @algo_crypt={0x1048, 0x2, {{'chacha20-generic\x00'}, 0x8000, "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"}}]}, 0x1348}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000004bc0)={&(0x7f0000004700)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000004b80)={&(0x7f0000004740)={0x41c, 0x0, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0xc4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x10000}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x79d108a2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'bond0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x40, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xf305}}, {0x14, 0x2, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8c17}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6311}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffe01}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2fe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}]}, @TIPC_NLA_MEDIA={0x7c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xab6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff2ef}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xab}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x20}]}, @TIPC_NLA_LINK={0xe4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc0}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xaa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x61}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x50e2}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}]}]}, @TIPC_NLA_BEARER={0xa4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}]}, @TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'macvtap0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @rand_addr=0x64010101}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffff7}}}}]}, @TIPC_NLA_NODE={0x78, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1000}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x78f}, @TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "ce961dc73398d41d0eb01d0e1093500bb7a484d096256369462072"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7}]}, @TIPC_NLA_LINK={0x90, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x40d0}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xdd9}]}]}, 0x41c}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000004e40)={r1, 0x0, 0x72, 0xb5, &(0x7f0000004c00)="82796f3a4183fa8d60c85314ebafa666c6d84936f7ca9843c0fbf446eff5131c2bad02e46355da7481f3e7fc2fc64778a93522429a870fb34634a2417a15f4ab0f1c6d2e943d2532a5e4bb2adb62e888428cb03d2d0712886ec5a970e6cfdf2123c4749120f54150369151c32c4d7a0bad5c", &(0x7f0000004c80)=""/181, 0x3, 0x0, 0x66, 0x7f, &(0x7f0000004d40)="0e3f2a417547d2857fdb3fb6ab179e1a9c36344d09f6b83f71a99e0dd5d7f11819d7e6479c41080c53e7831e277701ef906080f69da2f80fcc02d71773e328be0f04dd26f2b2508db2702235882edd1baf7c660940604660e5b757f0629494e1f9e7716d3919", &(0x7f0000004dc0)="4402f9d1ed1c0c2c05196d73eed58f31410f0414f099b4567c1fe5fea9469d587ade87f489c645e4740ff5fb7c3b167a6a436fbffc452f755569b5b1c0abbb5f39aa6aaaf47485215b868f184ba3f5c712711f9bd52157de315929467b0f187ebd7b19549b8096892db835a20de63ba2f58ddc8797947eb7a98b8ce1aeeca7", 0x4, 0x0, 0xfff}, 0x50) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$XFS_IOC_READLINK_BY_HANDLE(r5, 0xc038586c, &(0x7f0000004fc0)={r10, &(0x7f0000004ec0)='udp\x00', 0x80, &(0x7f0000004f00)={@align=0x10000, {0x2, 0x1, 0x2da, 0xfffffffffffffffd}}, 0x8, &(0x7f0000004f40)={@_ha_fsid}, &(0x7f0000004f80)=0x81}) r11 = syz_genetlink_get_family_id$SEG6(&(0x7f0000005040), r1) sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f0000005100)={&(0x7f0000005000)={0x10, 0x0, 0x0, 0x10000120}, 0xc, &(0x7f00000050c0)={&(0x7f0000005080)={0x38, r11, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRET={0x14, 0x4, [0x0, 0x224c, 0x8, 0x6]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x800}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4064804}, 0x40000) syz_emit_ethernet(0x15d, &(0x7f0000005140)={@random="82eda4dbac80", @multicast, @val={@void, {0x8100, 0x0, 0x0, 0x4}}, {@ipv4={0x800, @gre={{0x12, 0x4, 0x1, 0x28, 0x14b, 0x64, 0x0, 0xd9, 0x2f, 0x0, @remote, @loopback, {[@timestamp_prespec={0x44, 0x2c, 0xe3, 0x3, 0x5, [{@remote}, {@broadcast, 0x1}, {@dev={0xac, 0x14, 0x14, 0x33}, 0xfb}, {@dev={0xac, 0x14, 0x14, 0x12}, 0x8}, {@empty, 0x3}]}, @generic={0x86, 0x6, 'GEGp'}]}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x9, 0x1, [0x80, 0x7], "25d3222420ef3543f4"}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800, [0x9, 0x2], "348a3f16b89fcd60365b2dc54100bf740f0cc7d05bf17e7b29af05b76b045e1c0a389c4bfd56852b94ef6cd2b3f52941135e1a603dd8efdd307374ab9ce1"}, {0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x86dd, [0x9, 0x8000], "1c1ba3900290b552ec9dad512ffd8c80cc1ba97adf4a652e0903b3ba09dd0ea24c3a39cc65206fb25c1a9a1300b1baddf6fff080392af815024d71a258a58c4bab63fef9"}, {0x8, 0x88be, 0x2, {{0x6, 0x1, 0x5, 0x2, 0x0, 0x2, 0x6, 0x2}, 0x1, {0x764}}}, {0x8, 0x22eb, 0x3, {{0xa, 0x2, 0x4, 0x3, 0x1, 0x3, 0x6, 0x2}, 0x2, {0xc, 0x3ff, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}}}, {0x8, 0x6558, 0x3, "42aeced794e39f535e6cbdd878c654626755dfa9f79f9d0c2b1658e53885ab38e7e8755f4bd63bf8"}}}}}}, &(0x7f00000052c0)={0x0, 0x2, [0x906, 0xc2e, 0xcd9, 0x1f5]}) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r2, &(0x7f00000053c0)={&(0x7f0000005300)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000005380)={&(0x7f0000005340)={0x40, r7, 0x0, 0x70bd26, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0xd}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20001090}, 0x8001) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000005400)={0x1, 'veth1_to_team\x00', {}, 0xe9}) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000005500)={&(0x7f0000005440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000054c0)={&(0x7f0000005480)={0x34, r6, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4e}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x34}}, 0x800) syz_genetlink_get_family_id$devlink(&(0x7f0000005540), r2) 241.191836ms ago: executing program 7 (id=6149): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20991, 0x11c05}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0xc}]}}}, @IFLA_LINK={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x48890}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) accept$inet6(r1, 0x0, &(0x7f0000000040)) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000080)={'gretap0\x00', 0x400}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) 107.323681ms ago: executing program 4 (id=6150): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r0, &(0x7f00000001c0), 0x12) (async) writev(r0, &(0x7f0000005a80)=[{&(0x7f0000003880)='5', 0x1}], 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000010000000000000000000000071100a000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94) ioctl$sock_proto_private(r0, 0x89eb, &(0x7f0000000280)="6fd3f2c0ddb6f284ccded990aaa9e8cdfec51aca0a6cf4edc5844e74c9ca28811d18fe56") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendto$x25(r0, &(0x7f0000000100)="9a96184d30459c3b557ea77bd42e5f0602e2563f0f8d1afe33569e03b0cc22d4bd15a6b9e28f1500e89ebdab4790d4619fb3519d81bb1049209995ba0f46059b2133a82479721789bd2ba49342af3b3f83874395d07ec4534ee07df87d7c95f0ed2ff2d496b8f7d21b12f0557c4eb0c84a911ef8fc6b210a1f4b090ba92e39465f635301fcb8e82468db07fb3d0841e5576bc9e58f77f4ce182c", 0x9a, 0x4000000, &(0x7f0000000200)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) r2 = socket(0x11, 0x800000003, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x36, &(0x7f0000000ec0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x2b0, 0x150, 0x150, 0x8, 0xf8010000, 0x380, 0x238, 0x238, 0x2b0, 0x238, 0x3, 0x0, {[{{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'team_slave_0\x00', 'hsr0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@empty, @mcast1, [], [], 'batadv_slave_0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) (async) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000500)) setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f0000000240), 0x4) (async) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c000000000000070000030500c8984100b3ed27774e979600000000000000040005000100070000ff1388eb000700"/58], 0x2c}}, 0xc0) 0s ago: executing program 8 (id=6151): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003ac0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001014d9ec29bd7000fee0409bcd161076c872489264dbdf2508000300000000000800010000000000"], 0x20}, 0x1, 0x0, 0x0, 0x20004085}, 0x4004080) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xd50, 0xfffffffffffffee0, &(0x7f0000000000)="259a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xf3f, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {0x7, 0xfff3}, {0xb, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x14, 0x2, [@TCA_BASIC_EMATCHES={0x10, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r2, &(0x7f0000001540)={0x24, @none={0x0, 0x3}}, 0x14) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000001100000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {0x7, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000a80)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3a8, 0x0, 0x148, 0x1e0, 0x278, 0x310, 0xb0, 0x148, 0x1e0, 0x278, 0x310, 0x6, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x11}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x408) syz_emit_ethernet(0x3e, &(0x7f0000000340)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaa23080045c500300065000009019078ac1e0001ac1414bb040090780000000045150000006501740d7300067f000001ac1e00014009188c1d17a85347f4d4777d47bae7dabc65d875df3013c4109742f1600b99adfbb6186a242969bf68a16380264431f1acd1b0e29c391bbcad20c9482e"], 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000440)={'syztnl0\x00', &(0x7f00000003c0)={'syztnl0\x00', 0x0, 0x29, 0xe7, 0x6c, 0x8, 0x24, @mcast1, @local, 0x1, 0x20, 0x0, 0x3}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009112c5000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) kernel console output (not intermixed with test programs): e_noprof+0xa3/0x600 [ 517.427712][T23747] ? __kmalloc_cache_noprof+0x14d/0x600 [ 517.427730][T23747] ? sctp_add_bind_addr+0x8c/0x370 [ 517.427755][T23747] ? sctp_add_bind_addr+0x8c/0x370 [ 517.427788][T23747] sctp_add_bind_addr+0x8c/0x370 [ 517.427818][T23747] sctp_copy_local_addr_list+0x31a/0x4e0 [ 517.427849][T23747] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 517.427877][T23747] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 517.427906][T23747] ? sctp_v6_is_any+0x64/0x80 [ 517.427925][T23747] ? sctp_copy_one_addr+0x93/0x360 [ 517.427953][T23747] sctp_bind_addr_copy+0xb3/0x3c0 [ 517.427980][T23747] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 517.428013][T23747] sctp_connect_new_asoc+0x2ff/0x6b0 [ 517.428036][T23747] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 517.428061][T23747] ? __local_bh_enable_ip+0xd6/0x140 [ 517.428082][T23747] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 517.428105][T23747] ? security_sctp_bind_connect+0x7e/0x2c0 [ 517.428127][T23747] sctp_sendmsg+0x159b/0x2d00 [ 517.428156][T23747] ? kstrtouint+0x6e/0xe0 [ 517.428183][T23747] ? __pfx_sctp_sendmsg+0x10/0x10 [ 517.428201][T23747] ? lock_acquire+0x115/0x350 [ 517.428218][T23747] ? get_pid_task+0x20/0x1f0 [ 517.428249][T23747] ? aa_sock_msg_perm+0xf5/0x210 [ 517.428267][T23747] ? sock_rps_record_flow+0x19/0x350 [ 517.428287][T23747] ? inet_sendmsg+0x298/0x320 [ 517.428305][T23747] ? __pfx_inet_sendmsg+0x10/0x10 [ 517.428319][T23747] sock_sendmsg_nosec+0x10e/0x180 [ 517.428341][T23747] __sys_sendto+0x408/0x5a0 [ 517.428361][T23747] ? ksys_write+0x1e6/0x270 [ 517.428390][T23747] ? __pfx___sys_sendto+0x10/0x10 [ 517.428409][T23747] ? __mutex_unlock_slowpath+0x731/0x900 [ 517.428459][T23747] ? __pfx_ksys_write+0x10/0x10 [ 517.428492][T23747] __x64_sys_sendto+0xde/0x100 [ 517.428518][T23747] do_syscall_64+0x166/0x520 [ 517.428539][T23747] ? trace_irq_disable+0x3b/0x140 [ 517.428557][T23747] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 517.428575][T23747] ? clear_bhb_loop+0x70/0xc0 [ 517.428598][T23747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 517.428616][T23747] RIP: 0033:0x7fa75f79e159 [ 517.428632][T23747] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 517.428648][T23747] RSP: 002b:00007fa760591028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 517.428668][T23747] RAX: ffffffffffffffda RBX: 00007fa75fa25fa0 RCX: 00007fa75f79e159 [ 517.428682][T23747] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 000000000000000b [ 517.428693][T23747] RBP: 00007fa760591090 R08: 000020000005ffe4 R09: 000000000000001c [ 517.428704][T23747] R10: 00000000000000e0 R11: 0000000000000246 R12: 0000000000000002 [ 517.428715][T23747] R13: 00007fa75fa26038 R14: 00007fa75fa25fa0 R15: 00007fffca9e1bc8 [ 517.428766][T23747] [ 517.536940][T23754] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4886'. [ 517.600798][T23755] team0: No ports can be present during mode change [ 517.847609][T23764] netlink: 'syz.0.4889': attribute type 17 has an invalid length. [ 517.847631][T23764] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4889'. [ 517.847683][T23764] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4889'. [ 517.870540][T23768] netlink: 256 bytes leftover after parsing attributes in process `syz.1.4892'. [ 517.886615][T23764] 0{X功: entered promiscuous mode [ 517.897973][T23768] unsupported nlmsg_type 40 [ 517.898170][T23764] 0{X功: left promiscuous mode [ 517.985175][T23774] syzkaller0: entered promiscuous mode [ 517.985196][T23774] syzkaller0: entered allmulticast mode [ 518.110640][T23782] netlink: 'syz.4.4893': attribute type 1 has an invalid length. [ 518.110663][T23782] netlink: 'syz.4.4893': attribute type 1 has an invalid length. [ 518.342564][T23803] openvswitch: netlink: Duplicate or invalid key (type 0). [ 518.441483][T23806] openvswitch: netlink: IP tunnel dst address not specified [ 518.460416][T23812] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 518.473301][T23812] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 518.521283][T23817] netlink: 'syz.1.4903': attribute type 1 has an invalid length. [ 518.567070][T23817] bond12: entered promiscuous mode [ 518.567483][T23817] 8021q: adding VLAN 0 to HW filter on device bond12 [ 518.589297][T23817] bond12: (slave bridge4): making interface the new active one [ 518.589318][T23817] bridge4: entered promiscuous mode [ 518.590241][T23817] bond12: (slave bridge4): Enslaving as an active interface with an up link [ 519.176250][T23853] syzkaller0: entered promiscuous mode [ 519.176272][T23853] syzkaller0: entered allmulticast mode [ 519.302981][T23856] netlink: 'syz.1.4912': attribute type 10 has an invalid length. [ 519.303015][T23856] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 519.326517][T23856] netlink: 'syz.1.4912': attribute type 21 has an invalid length. [ 519.585537][T23873] __nla_validate_parse: 10 callbacks suppressed [ 519.585556][T23873] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4917'. [ 519.587188][T23873] ip_tables: iptables: counters copy to user failed while replacing table [ 519.588785][T23873] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 519.632436][T23873] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4917'. [ 519.764978][T23885] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4919'. [ 519.772038][T23886] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4919'. [ 519.772616][T23882] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4918'. [ 519.772930][T23883] syzkaller0: entered promiscuous mode [ 519.772947][T23883] syzkaller0: entered allmulticast mode [ 519.853008][T23882] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4918'. [ 520.003157][T23894] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4921'. [ 520.583941][T23914] FAULT_INJECTION: forcing a failure. [ 520.583941][T23914] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 520.583971][T23914] CPU: 0 UID: 0 PID: 23914 Comm: syz.0.4928 Not tainted syzkaller #0 PREEMPT(full) [ 520.583992][T23914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 520.584003][T23914] Call Trace: [ 520.584011][T23914] [ 520.584019][T23914] dump_stack_lvl+0xe8/0x150 [ 520.584050][T23914] should_fail_ex+0x410/0x560 [ 520.584076][T23914] _copy_from_user+0x2d/0xb0 [ 520.584100][T23914] ___sys_sendmsg+0x1c6/0x360 [ 520.584125][T23914] ? __lock_acquire+0x747/0x2de0 [ 520.584149][T23914] ? __pfx____sys_sendmsg+0x10/0x10 [ 520.584206][T23914] ? __fget_files+0x2a/0x420 [ 520.584230][T23914] ? __fget_files+0x3a2/0x420 [ 520.584264][T23914] __x64_sys_sendmsg+0x1b1/0x290 [ 520.584291][T23914] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 520.584335][T23914] do_syscall_64+0x166/0x520 [ 520.584356][T23914] ? trace_irq_disable+0x3b/0x140 [ 520.584375][T23914] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 520.584394][T23914] ? clear_bhb_loop+0x70/0xc0 [ 520.584416][T23914] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 520.584435][T23914] RIP: 0033:0x7f767ef9e159 [ 520.584451][T23914] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 520.584467][T23914] RSP: 002b:00007f767fdc7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 520.584487][T23914] RAX: ffffffffffffffda RBX: 00007f767f225fa0 RCX: 00007f767ef9e159 [ 520.584501][T23914] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 520.584513][T23914] RBP: 00007f767fdc7090 R08: 0000000000000000 R09: 0000000000000000 [ 520.584524][T23914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 520.584535][T23914] R13: 00007f767f226038 R14: 00007f767f225fa0 R15: 00007ffc052c3d48 [ 520.584566][T23914] [ 521.316688][T23923] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4930'. [ 521.344506][T23955] netlink: NAT attribute has 4 unknown bytes [ 521.344539][T23955] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 521.474341][T23963] openvswitch: netlink: Flow key attr not present in new flow. [ 521.576316][T23968] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4941'. [ 521.715698][T23974] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4944'. [ 522.085421][T23988] IPVS: Scheduler module ip_vs_mh not found [ 523.089921][T24036] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 523.090424][T24036] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 523.090821][T24036] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 523.091201][T24036] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 523.151915][T24036] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 523.152433][T24036] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 523.152865][T24036] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 523.153259][T24036] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 523.205089][T24036] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 523.205592][T24036] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 523.365204][T24047] sctp: [Deprecated]: syz.2.4962 (pid 24047) Use of int in max_burst socket option. [ 523.365204][T24047] Use struct sctp_assoc_value instead [ 523.588631][T24061] syzkaller0: entered promiscuous mode [ 523.588653][T24061] syzkaller0: entered allmulticast mode [ 523.951695][T24089] syzkaller0: entered promiscuous mode [ 523.951717][T24089] syzkaller0: entered allmulticast mode [ 524.152247][T24095] batman_adv: batadv0: Removing interface: ipvlan2 [ 524.168238][T24095] batman_adv: batadv0: Removing interface: ipvlan3 [ 524.609349][T24122] syzkaller0: entered promiscuous mode [ 524.609372][T24122] syzkaller0: entered allmulticast mode [ 524.796663][T24134] __nla_validate_parse: 7 callbacks suppressed [ 524.796684][T24134] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4986'. [ 525.222389][T24150] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4990'. [ 525.407170][T24159] mac80211_hwsim hwsim45 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 525.771976][T24173] syzkaller0: entered promiscuous mode [ 525.771998][T24173] syzkaller0: entered allmulticast mode [ 525.782308][T24181] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5000'. [ 525.979172][T24168] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4996'. [ 526.100747][T24191] veth1_macvtap: left promiscuous mode [ 526.502843][T24209] pim6reg: entered allmulticast mode [ 526.511295][T24209] pim6reg: left allmulticast mode [ 526.776069][T24219] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5011'. [ 526.788961][T24224] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5012'. [ 527.260965][T24248] sch_tbf: burst 7 is lower than device syzkaller0 mtu (1514) ! [ 527.277889][T24246] syzkaller0: entered promiscuous mode [ 527.277910][T24246] syzkaller0: entered allmulticast mode [ 527.885995][T13709] wlan1: Trigger new scan to find an IBSS to join [ 528.265925][T24302] syzkaller0: entered promiscuous mode [ 528.265949][T24302] syzkaller0: entered allmulticast mode [ 528.780967][T24328] syzkaller1: entered allmulticast mode [ 529.350909][T24351] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5043'. [ 529.350931][T24351] net_ratelimit: 26 callbacks suppressed [ 529.350941][T24351] openvswitch: netlink: Flow key attr not present in new flow. [ 529.418610][T24362] ip_tables: iptables: counters copy to user failed while replacing table [ 529.538579][T24367] syzkaller0: entered promiscuous mode [ 529.538600][T24367] syzkaller0: entered allmulticast mode [ 529.601981][T24370] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 530.162172][T24393] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 530.215098][T24393] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 530.227054][T24397] syzkaller0: entered promiscuous mode [ 530.227146][T24397] syzkaller0: entered allmulticast mode [ 530.363345][T24406] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5062'. [ 530.633024][T24432] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5067'. [ 530.704433][T24435] validate_nla: 5 callbacks suppressed [ 530.704451][T24435] netlink: 'syz.4.5065': attribute type 6 has an invalid length. [ 530.846849][T13728] wlan1: Trigger new scan to find an IBSS to join [ 531.056295][T24451] netlink: 'syz.1.5070': attribute type 2 has an invalid length. [ 531.056316][T24451] netlink: 244 bytes leftover after parsing attributes in process `syz.1.5070'. [ 531.559060][T24469] netlink: Conntrack attr has 8 unknown bytes [ 531.559094][T24469] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 531.995810][T24494] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5078'. [ 532.150396][T24502] ip_tables: iptables: counters copy to user failed while replacing table [ 532.151222][T24502] syzkaller1: entered promiscuous mode [ 532.151240][T24502] syzkaller1: entered allmulticast mode [ 532.411057][T24504] bond21: option resend_igmp: invalid value (32767) [ 532.411087][T24504] bond21: option resend_igmp: allowed values 0 - 255 [ 532.412973][T24504] bond21 (unregistering): Released all slaves [ 532.556432][T24532] netlink: 'syz.1.5089': attribute type 1 has an invalid length. [ 532.556453][T24532] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5089'. [ 532.587522][T24518] syzkaller0: entered promiscuous mode [ 532.587544][T24518] syzkaller0: entered allmulticast mode [ 532.671400][T24535] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5090'. [ 532.830095][T24545] netlink: 'syz.2.5094': attribute type 29 has an invalid length. [ 532.946858][T24551] FAULT_INJECTION: forcing a failure. [ 532.946858][T24551] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 532.946891][T24551] CPU: 1 UID: 0 PID: 24551 Comm: syz.3.5096 Not tainted syzkaller #0 PREEMPT(full) [ 532.946912][T24551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 532.946923][T24551] Call Trace: [ 532.946930][T24551] [ 532.946938][T24551] dump_stack_lvl+0xe8/0x150 [ 532.946978][T24551] should_fail_ex+0x410/0x560 [ 532.947006][T24551] _copy_from_iter+0x1d3/0x1660 [ 532.947026][T24551] ? sctp_chunkify+0x5a/0x260 [ 532.947049][T24551] ? sctp_addto_chunk+0xf8/0x220 [ 532.947076][T24551] ? __asan_memcpy+0x40/0x70 [ 532.947095][T24551] ? __pfx__copy_from_iter+0x10/0x10 [ 532.947116][T24551] ? __asan_memcpy+0x40/0x70 [ 532.947135][T24551] ? sctp_make_datafrag_empty+0x184/0x240 [ 532.947160][T24551] ? __kasan_kmalloc+0x93/0xb0 [ 532.947181][T24551] ? __pfx_sctp_make_datafrag_empty+0x10/0x10 [ 532.947204][T24551] ? skb_put+0x112/0x210 [ 532.947229][T24551] sctp_user_addto_chunk+0x7c/0x230 [ 532.947251][T24551] sctp_datamsg_from_user+0x754/0xef0 [ 532.947292][T24551] sctp_sendmsg_to_asoc+0x13cf/0x1880 [ 532.947317][T24551] ? sctp_assoc_add_peer+0xd57/0x1430 [ 532.947353][T24551] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 532.947374][T24551] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 532.947394][T24551] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 532.947414][T24551] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 532.947431][T24551] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 532.947450][T24551] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 532.947475][T24551] ? security_sctp_bind_connect+0x7e/0x2c0 [ 532.947497][T24551] sctp_sendmsg+0x1bb5/0x2d00 [ 532.947525][T24551] ? kstrtouint+0x6e/0xe0 [ 532.947551][T24551] ? __pfx_sctp_sendmsg+0x10/0x10 [ 532.947578][T24551] ? lock_acquire+0x115/0x350 [ 532.947597][T24551] ? get_pid_task+0x20/0x1f0 [ 532.947632][T24551] ? aa_sock_msg_perm+0xf5/0x210 [ 532.947658][T24551] ? sock_rps_record_flow+0x19/0x350 [ 532.947678][T24551] ? inet_sendmsg+0x298/0x320 [ 532.947693][T24551] ? apparmor_socket_sendmsg+0x98/0x360 [ 532.947721][T24551] ? __pfx_inet_sendmsg+0x10/0x10 [ 532.947738][T24551] sock_sendmsg_nosec+0x10e/0x180 [ 532.947764][T24551] __sys_sendto+0x408/0x5a0 [ 532.947783][T24551] ? ksys_write+0x1e6/0x270 [ 532.947811][T24551] ? __pfx___sys_sendto+0x10/0x10 [ 532.947831][T24551] ? __mutex_unlock_slowpath+0x731/0x900 [ 532.947875][T24551] ? __pfx_ksys_write+0x10/0x10 [ 532.947904][T24551] __x64_sys_sendto+0xde/0x100 [ 532.947929][T24551] do_syscall_64+0x166/0x520 [ 532.947951][T24551] ? trace_irq_disable+0x3b/0x140 [ 532.947979][T24551] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.947999][T24551] ? clear_bhb_loop+0x70/0xc0 [ 532.948022][T24551] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.948042][T24551] RIP: 0033:0x7fa7bcb9e159 [ 532.948065][T24551] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 532.948082][T24551] RSP: 002b:00007fa7bdae9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 532.948103][T24551] RAX: ffffffffffffffda RBX: 00007fa7bce25fa0 RCX: 00007fa7bcb9e159 [ 532.948117][T24551] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 000000000000000b [ 532.948129][T24551] RBP: 00007fa7bdae9090 R08: 000020000005ffe4 R09: 000000000000001c [ 532.948142][T24551] R10: 00000000000000e0 R11: 0000000000000246 R12: 0000000000000002 [ 532.948153][T24551] R13: 00007fa7bce26038 R14: 00007fa7bce25fa0 R15: 00007ffd1ad3c538 [ 532.948182][T24551] [ 533.482331][T24570] netlink: 'syz.4.5105': attribute type 29 has an invalid length. [ 533.518613][T24572] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5104'. [ 533.609914][T24580] FAULT_INJECTION: forcing a failure. [ 533.609914][T24580] name failslab, interval 1, probability 0, space 0, times 0 [ 533.609945][T24580] CPU: 0 UID: 0 PID: 24580 Comm: syz.4.5108 Not tainted syzkaller #0 PREEMPT(full) [ 533.609965][T24580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 533.609975][T24580] Call Trace: [ 533.609989][T24580] [ 533.609997][T24580] dump_stack_lvl+0xe8/0x150 [ 533.610027][T24580] should_fail_ex+0x410/0x560 [ 533.610054][T24580] should_failslab+0xa8/0x100 [ 533.610078][T24580] __kmalloc_cache_noprof+0xa3/0x600 [ 533.610097][T24580] ? __kmalloc_cache_noprof+0x14d/0x600 [ 533.610113][T24580] ? sctp_add_bind_addr+0x8c/0x370 [ 533.610138][T24580] ? sctp_add_bind_addr+0x8c/0x370 [ 533.610176][T24580] sctp_add_bind_addr+0x8c/0x370 [ 533.610207][T24580] sctp_copy_local_addr_list+0x31a/0x4e0 [ 533.610238][T24580] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 533.610266][T24580] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 533.610296][T24580] ? sctp_v6_is_any+0x64/0x80 [ 533.610317][T24580] ? sctp_copy_one_addr+0x93/0x360 [ 533.610347][T24580] sctp_bind_addr_copy+0xb3/0x3c0 [ 533.610376][T24580] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 533.610404][T24580] sctp_connect_new_asoc+0x2ff/0x6b0 [ 533.610430][T24580] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 533.610462][T24580] ? __local_bh_enable_ip+0xd6/0x140 [ 533.610484][T24580] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 533.610509][T24580] ? security_sctp_bind_connect+0x7e/0x2c0 [ 533.610532][T24580] sctp_sendmsg+0x159b/0x2d00 [ 533.610565][T24580] ? kstrtouint+0x6e/0xe0 [ 533.610591][T24580] ? __pfx_sctp_sendmsg+0x10/0x10 [ 533.610610][T24580] ? lock_acquire+0x115/0x350 [ 533.610630][T24580] ? get_pid_task+0x20/0x1f0 [ 533.610666][T24580] ? aa_sock_msg_perm+0xf5/0x210 [ 533.610687][T24580] ? sock_rps_record_flow+0x19/0x350 [ 533.610709][T24580] ? inet_sendmsg+0x298/0x320 [ 533.610731][T24580] ? __pfx_inet_sendmsg+0x10/0x10 [ 533.610747][T24580] sock_sendmsg_nosec+0x10e/0x180 [ 533.610770][T24580] __sys_sendto+0x408/0x5a0 [ 533.610792][T24580] ? ksys_write+0x1e6/0x270 [ 533.610822][T24580] ? __pfx___sys_sendto+0x10/0x10 [ 533.610842][T24580] ? __mutex_unlock_slowpath+0x731/0x900 [ 533.610895][T24580] ? __pfx_ksys_write+0x10/0x10 [ 533.610928][T24580] __x64_sys_sendto+0xde/0x100 [ 533.610952][T24580] do_syscall_64+0x166/0x520 [ 533.610973][T24580] ? trace_irq_disable+0x3b/0x140 [ 533.611067][T24580] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.611087][T24580] ? clear_bhb_loop+0x70/0xc0 [ 533.611106][T24580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.611124][T24580] RIP: 0033:0x7fa75f79e159 [ 533.611140][T24580] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 533.611152][T24580] RSP: 002b:00007fa760591028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 533.611172][T24580] RAX: ffffffffffffffda RBX: 00007fa75fa25fa0 RCX: 00007fa75f79e159 [ 533.611190][T24580] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 000000000000000b [ 533.611204][T24580] RBP: 00007fa760591090 R08: 000020000005ffe4 R09: 000000000000001c [ 533.611214][T24580] R10: 00000000000000e0 R11: 0000000000000246 R12: 0000000000000002 [ 533.611225][T24580] R13: 00007fa75fa26038 R14: 00007fa75fa25fa0 R15: 00007fffca9e1bc8 [ 533.611254][T24580] [ 533.659483][T24581] syzkaller0: entered promiscuous mode [ 533.659504][T24581] syzkaller0: entered allmulticast mode [ 533.904610][T13704] wlan1: Trigger new scan to find an IBSS to join [ 534.239455][T24607] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5115'. [ 534.241299][T24607] ip_tables: iptables: counters copy to user failed while replacing table [ 534.302810][T24615] netlink: 'syz.3.5117': attribute type 29 has an invalid length. [ 534.303566][T24615] netlink: 'syz.3.5117': attribute type 29 has an invalid length. [ 534.338188][T24610] netlink: 'syz.2.5116': attribute type 39 has an invalid length. [ 534.373518][T24617] netlink: NAT flags may be given only when NAT range (SRC or DST) is also specified. [ 534.373552][T24617] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 534.439738][T24619] netlink: 'syz.3.5121': attribute type 4 has an invalid length. [ 534.439759][T24619] netlink: 152 bytes leftover after parsing attributes in process `syz.3.5121'. [ 534.442985][T24621] netlink: 'syz.3.5121': attribute type 4 has an invalid length. [ 534.443005][T24621] netlink: 152 bytes leftover after parsing attributes in process `syz.3.5121'. [ 534.496630][T24619] .`: renamed from bond0 (while UP) [ 534.821638][T13703] wlan1: Creating new IBSS network, BSSID 7a:d3:41:d1:a7:a3 [ 534.979073][T24649] veth1_to_bond: entered allmulticast mode [ 535.049363][T24648] veth1_to_bond: left allmulticast mode [ 535.766560][T24687] validate_nla: 4 callbacks suppressed [ 535.766580][T24687] netlink: 'syz.2.5140': attribute type 29 has an invalid length. [ 535.786029][T24687] netlink: 'syz.2.5140': attribute type 29 has an invalid length. [ 535.948007][T24701] FAULT_INJECTION: forcing a failure. [ 535.948007][T24701] name failslab, interval 1, probability 0, space 0, times 0 [ 535.948039][T24701] CPU: 1 UID: 0 PID: 24701 Comm: syz.3.5143 Not tainted syzkaller #0 PREEMPT(full) [ 535.948059][T24701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 535.948070][T24701] Call Trace: [ 535.948077][T24701] [ 535.948085][T24701] dump_stack_lvl+0xe8/0x150 [ 535.948117][T24701] should_fail_ex+0x410/0x560 [ 535.948145][T24701] should_failslab+0xa8/0x100 [ 535.948168][T24701] ? sctp_chunkify+0x5a/0x260 [ 535.948188][T24701] kmem_cache_alloc_noprof+0xa1/0x600 [ 535.948215][T24701] ? __kmalloc_node_track_caller_noprof+0x2eb/0x720 [ 535.948242][T24701] ? _sctp_make_chunk+0x59/0x290 [ 535.948260][T24701] ? sctp_chunkify+0x5a/0x260 [ 535.948289][T24701] sctp_chunkify+0x5a/0x260 [ 535.948310][T24701] _sctp_make_chunk+0x122/0x290 [ 535.948332][T24701] sctp_make_datafrag_empty+0x12a/0x240 [ 535.948360][T24701] ? __kasan_kmalloc+0x93/0xb0 [ 535.948383][T24701] ? __pfx_sctp_make_datafrag_empty+0x10/0x10 [ 535.948410][T24701] ? skb_put+0x112/0x210 [ 535.948437][T24701] ? sctp_user_addto_chunk+0x9c/0x230 [ 535.948460][T24701] sctp_datamsg_from_user+0x735/0xef0 [ 535.948507][T24701] sctp_sendmsg_to_asoc+0x13cf/0x1880 [ 535.948537][T24701] ? sctp_assoc_add_peer+0xd57/0x1430 [ 535.948574][T24701] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 535.948596][T24701] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 535.948619][T24701] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 535.948640][T24701] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 535.948659][T24701] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 535.948680][T24701] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 535.948702][T24701] ? security_sctp_bind_connect+0x7e/0x2c0 [ 535.948725][T24701] sctp_sendmsg+0x1bb5/0x2d00 [ 535.948754][T24701] ? kstrtouint+0x6e/0xe0 [ 535.948781][T24701] ? __pfx_sctp_sendmsg+0x10/0x10 [ 535.948800][T24701] ? lock_acquire+0x115/0x350 [ 535.948819][T24701] ? get_pid_task+0x20/0x1f0 [ 535.948855][T24701] ? aa_sock_msg_perm+0xf5/0x210 [ 535.948876][T24701] ? sock_rps_record_flow+0x19/0x350 [ 535.948898][T24701] ? inet_sendmsg+0x298/0x320 [ 535.948914][T24701] ? apparmor_socket_sendmsg+0x98/0x360 [ 535.948935][T24701] ? __pfx_inet_sendmsg+0x10/0x10 [ 535.948953][T24701] sock_sendmsg_nosec+0x10e/0x180 [ 535.948977][T24701] __sys_sendto+0x408/0x5a0 [ 535.948997][T24701] ? ksys_write+0x1e6/0x270 [ 535.949028][T24701] ? __pfx___sys_sendto+0x10/0x10 [ 535.949048][T24701] ? __mutex_unlock_slowpath+0x731/0x900 [ 535.949102][T24701] ? __pfx_ksys_write+0x10/0x10 [ 535.949134][T24701] __x64_sys_sendto+0xde/0x100 [ 535.949161][T24701] do_syscall_64+0x166/0x520 [ 535.949183][T24701] ? trace_irq_disable+0x3b/0x140 [ 535.949202][T24701] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.949229][T24701] ? clear_bhb_loop+0x70/0xc0 [ 535.949253][T24701] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.949272][T24701] RIP: 0033:0x7fa7bcb9e159 [ 535.949290][T24701] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 535.949306][T24701] RSP: 002b:00007fa7bdae9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 535.949327][T24701] RAX: ffffffffffffffda RBX: 00007fa7bce25fa0 RCX: 00007fa7bcb9e159 [ 535.949342][T24701] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 000000000000000b [ 535.949354][T24701] RBP: 00007fa7bdae9090 R08: 000020000005ffe4 R09: 000000000000001c [ 535.949367][T24701] R10: 00000000000000e0 R11: 0000000000000246 R12: 0000000000000002 [ 535.949379][T24701] R13: 00007fa7bce26038 R14: 00007fa7bce25fa0 R15: 00007ffd1ad3c538 [ 535.949411][T24701] [ 536.373310][T24712] __nla_validate_parse: 4 callbacks suppressed [ 536.373328][T24712] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5147'. [ 536.542743][T24721] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5149'. [ 536.740107][T24730] netlink: 'syz.1.5153': attribute type 1 has an invalid length. [ 536.845367][T24735] FAULT_INJECTION: forcing a failure. [ 536.845367][T24735] name failslab, interval 1, probability 0, space 0, times 0 [ 536.845399][T24735] CPU: 0 UID: 0 PID: 24735 Comm: syz.2.5155 Not tainted syzkaller #0 PREEMPT(full) [ 536.845419][T24735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 536.845430][T24735] Call Trace: [ 536.845437][T24735] [ 536.845445][T24735] dump_stack_lvl+0xe8/0x150 [ 536.845475][T24735] should_fail_ex+0x410/0x560 [ 536.845498][T24735] ? __alloc_skb+0x1db/0x7a0 [ 536.845518][T24735] should_failslab+0xa8/0x100 [ 536.845541][T24735] ? __alloc_skb+0x1db/0x7a0 [ 536.845560][T24735] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 536.845587][T24735] ? __alloc_skb+0x18d/0x7a0 [ 536.845607][T24735] ? __alloc_skb+0x1db/0x7a0 [ 536.845634][T24735] __alloc_skb+0x1db/0x7a0 [ 536.845658][T24735] _sctp_make_chunk+0x59/0x290 [ 536.845687][T24735] sctp_make_datafrag_empty+0x12a/0x240 [ 536.845713][T24735] ? __kasan_kmalloc+0x93/0xb0 [ 536.845734][T24735] ? __pfx_sctp_make_datafrag_empty+0x10/0x10 [ 536.845760][T24735] ? skb_put+0x112/0x210 [ 536.845785][T24735] ? sctp_user_addto_chunk+0x9c/0x230 [ 536.845809][T24735] sctp_datamsg_from_user+0x735/0xef0 [ 536.845854][T24735] sctp_sendmsg_to_asoc+0x13cf/0x1880 [ 536.845883][T24735] ? sctp_assoc_add_peer+0xd57/0x1430 [ 536.845921][T24735] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 536.845943][T24735] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 536.845967][T24735] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 536.845989][T24735] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 536.846009][T24735] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 536.846032][T24735] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 536.846057][T24735] ? security_sctp_bind_connect+0x7e/0x2c0 [ 536.846080][T24735] sctp_sendmsg+0x1bb5/0x2d00 [ 536.846111][T24735] ? kstrtouint+0x6e/0xe0 [ 536.846140][T24735] ? __pfx_sctp_sendmsg+0x10/0x10 [ 536.846160][T24735] ? lock_acquire+0x115/0x350 [ 536.846180][T24735] ? get_pid_task+0x20/0x1f0 [ 536.846214][T24735] ? aa_sock_msg_perm+0xf5/0x210 [ 536.846237][T24735] ? sock_rps_record_flow+0x19/0x350 [ 536.846258][T24735] ? inet_sendmsg+0x298/0x320 [ 536.846275][T24735] ? apparmor_socket_sendmsg+0x98/0x360 [ 536.846297][T24735] ? __pfx_inet_sendmsg+0x10/0x10 [ 536.846314][T24735] sock_sendmsg_nosec+0x10e/0x180 [ 536.846334][T24735] __sys_sendto+0x408/0x5a0 [ 536.846355][T24735] ? ksys_write+0x1e6/0x270 [ 536.846385][T24735] ? __pfx___sys_sendto+0x10/0x10 [ 536.846406][T24735] ? __mutex_unlock_slowpath+0x731/0x900 [ 536.846487][T24735] ? __pfx_ksys_write+0x10/0x10 [ 536.846523][T24735] __x64_sys_sendto+0xde/0x100 [ 536.846550][T24735] do_syscall_64+0x166/0x520 [ 536.846571][T24735] ? trace_irq_disable+0x3b/0x140 [ 536.846590][T24735] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.846609][T24735] ? clear_bhb_loop+0x70/0xc0 [ 536.846632][T24735] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.846652][T24735] RIP: 0033:0x7fb8a659e159 [ 536.846669][T24735] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 536.846692][T24735] RSP: 002b:00007fb8a7481028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 536.846713][T24735] RAX: ffffffffffffffda RBX: 00007fb8a6825fa0 RCX: 00007fb8a659e159 [ 536.846726][T24735] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 000000000000000b [ 536.846739][T24735] RBP: 00007fb8a7481090 R08: 000020000005ffe4 R09: 000000000000001c [ 536.846752][T24735] R10: 00000000000000e0 R11: 0000000000000246 R12: 0000000000000002 [ 536.846764][T24735] R13: 00007fb8a6826038 R14: 00007fb8a6825fa0 R15: 00007ffdbdf46a68 [ 536.846795][T24735] [ 536.861516][T24740] IPVS: set_ctl: invalid protocol: 51 127.0.0.1:20001 [ 537.242120][T24750] netlink: 96 bytes leftover after parsing attributes in process `syz.2.5160'. [ 537.487770][T24759] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5163'. [ 537.626054][T24772] FAULT_INJECTION: forcing a failure. [ 537.626054][T24772] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 537.626085][T24772] CPU: 0 UID: 0 PID: 24772 Comm: syz.2.5168 Not tainted syzkaller #0 PREEMPT(full) [ 537.626106][T24772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 537.626118][T24772] Call Trace: [ 537.626126][T24772] [ 537.626135][T24772] dump_stack_lvl+0xe8/0x150 [ 537.626167][T24772] should_fail_ex+0x410/0x560 [ 537.626194][T24772] _copy_from_iter+0x1d3/0x1660 [ 537.626214][T24772] ? sctp_chunkify+0x5a/0x260 [ 537.626237][T24772] ? sctp_addto_chunk+0xf8/0x220 [ 537.626265][T24772] ? __asan_memcpy+0x40/0x70 [ 537.626285][T24772] ? __pfx__copy_from_iter+0x10/0x10 [ 537.626306][T24772] ? __asan_memcpy+0x40/0x70 [ 537.626325][T24772] ? sctp_make_datafrag_empty+0x184/0x240 [ 537.626352][T24772] ? __kasan_kmalloc+0x93/0xb0 [ 537.626375][T24772] ? __pfx_sctp_make_datafrag_empty+0x10/0x10 [ 537.626402][T24772] ? skb_put+0x112/0x210 [ 537.626429][T24772] sctp_user_addto_chunk+0x7c/0x230 [ 537.626453][T24772] sctp_datamsg_from_user+0x754/0xef0 [ 537.626500][T24772] sctp_sendmsg_to_asoc+0x13cf/0x1880 [ 537.626529][T24772] ? sctp_assoc_add_peer+0xd57/0x1430 [ 537.626568][T24772] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 537.626590][T24772] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 537.626614][T24772] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 537.626643][T24772] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 537.626663][T24772] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 537.626686][T24772] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 537.626711][T24772] ? security_sctp_bind_connect+0x7e/0x2c0 [ 537.626734][T24772] sctp_sendmsg+0x1bb5/0x2d00 [ 537.626767][T24772] ? kstrtouint+0x6e/0xe0 [ 537.626794][T24772] ? __pfx_sctp_sendmsg+0x10/0x10 [ 537.626812][T24772] ? lock_acquire+0x115/0x350 [ 537.626831][T24772] ? get_pid_task+0x20/0x1f0 [ 537.626864][T24772] ? aa_sock_msg_perm+0xf5/0x210 [ 537.626885][T24772] ? sock_rps_record_flow+0x19/0x350 [ 537.626905][T24772] ? inet_sendmsg+0x298/0x320 [ 537.626921][T24772] ? apparmor_socket_sendmsg+0x98/0x360 [ 537.626944][T24772] ? __pfx_inet_sendmsg+0x10/0x10 [ 537.626961][T24772] sock_sendmsg_nosec+0x10e/0x180 [ 537.626983][T24772] __sys_sendto+0x408/0x5a0 [ 537.627006][T24772] ? ksys_write+0x1e6/0x270 [ 537.627036][T24772] ? __pfx___sys_sendto+0x10/0x10 [ 537.627057][T24772] ? __mutex_unlock_slowpath+0x731/0x900 [ 537.627109][T24772] ? __pfx_ksys_write+0x10/0x10 [ 537.627142][T24772] __x64_sys_sendto+0xde/0x100 [ 537.627167][T24772] do_syscall_64+0x166/0x520 [ 537.627189][T24772] ? trace_irq_disable+0x3b/0x140 [ 537.627208][T24772] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.627228][T24772] ? clear_bhb_loop+0x70/0xc0 [ 537.627251][T24772] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.627279][T24772] RIP: 0033:0x7fb8a659e159 [ 537.627297][T24772] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 537.627313][T24772] RSP: 002b:00007fb8a7481028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 537.627334][T24772] RAX: ffffffffffffffda RBX: 00007fb8a6825fa0 RCX: 00007fb8a659e159 [ 537.627348][T24772] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 000000000000000b [ 537.627361][T24772] RBP: 00007fb8a7481090 R08: 000020000005ffe4 R09: 000000000000001c [ 537.627374][T24772] R10: 00000000000000e0 R11: 0000000000000246 R12: 0000000000000002 [ 537.627386][T24772] R13: 00007fb8a6826038 R14: 00007fb8a6825fa0 R15: 00007ffdbdf46a68 [ 537.627418][T24772] [ 538.427156][T24802] Set syz1 is full, maxelem 2076 reached [ 538.451761][T24807] netlink: 'syz.3.5177': attribute type 10 has an invalid length. [ 538.471673][T24807] team0: Port device dummy0 added [ 538.697001][T24816] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5179'. [ 538.731218][ C0] vcan0: j1939_tp_rxtimer: 0xffff888034f2f000: rx timeout, send abort [ 538.764305][T24816] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5179'. [ 539.231424][ C0] vcan0: j1939_tp_rxtimer: 0xffff888028e83c00: rx timeout, send abort [ 539.233118][ C0] vcan0: j1939_tp_rxtimer: 0xffff888034f2f000: abort rx timeout. Force session deactivation [ 539.731483][ C0] vcan0: j1939_tp_rxtimer: 0xffff888028e83c00: abort rx timeout. Force session deactivation [ 539.758029][T24835] netlink: 256 bytes leftover after parsing attributes in process `syz.2.5182'. [ 539.890334][T24830] syzkaller0: entered promiscuous mode [ 539.890356][T24830] syzkaller0: entered allmulticast mode [ 539.956109][T24850] openvswitch: netlink: Tunnel attr 6 has unexpected len 8 expected 0 [ 540.019219][T24848] netlink: 128 bytes leftover after parsing attributes in process `syz.4.5185'. [ 540.129648][T24861] netlink: 'syz.3.5189': attribute type 4 has an invalid length. [ 540.129668][T24861] netlink: 9 bytes leftover after parsing attributes in process `syz.3.5189'. [ 540.304408][T24870] netlink: 124 bytes leftover after parsing attributes in process `syz.1.5191'. [ 540.369534][T24869] netlink: 'syz.3.5192': attribute type 10 has an invalid length. [ 540.438218][T24879] veth5: entered promiscuous mode [ 540.450485][T24869] bond11: (slave veth0_to_bond): Releasing backup interface [ 540.477006][T24869] .`: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 540.668289][T24893] netlink: 'syz.3.5197': attribute type 12 has an invalid length. [ 540.724960][T24895] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 540.896501][T24902] syzkaller0: entered promiscuous mode [ 540.896523][T24902] syzkaller0: entered allmulticast mode [ 541.140845][T24917] geneve0: entered allmulticast mode [ 541.147485][T24917] netlink: 'syz.3.5202': attribute type 1 has an invalid length. [ 541.147576][T24917] netlink: 'syz.3.5202': attribute type 2 has an invalid length. [ 541.401588][T24931] __nla_validate_parse: 67 callbacks suppressed [ 541.401609][T24931] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5207'. [ 541.434732][T24931] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5207'. [ 541.456519][T24931] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5207'. [ 541.541123][T24936] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5210'. [ 541.542756][T24936] openvswitch: netlink: Invalid VLAN frame [ 541.660092][T24939] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5212'. [ 541.670483][T24940] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5212'. [ 541.675732][T24939] netlink: 'syz.3.5212': attribute type 1 has an invalid length. [ 541.675750][T24939] netlink: 'syz.3.5212': attribute type 2 has an invalid length. [ 541.675842][T24940] netlink: 'syz.3.5212': attribute type 1 has an invalid length. [ 541.675853][T24940] netlink: 'syz.3.5212': attribute type 2 has an invalid length. [ 541.713589][T24943] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5211'. [ 542.096958][T24976] macvlan0: entered promiscuous mode [ 542.323438][T24986] ip_tables: iptables: counters copy to user failed while replacing table [ 542.339470][T24986] ip_tables: iptables: counters copy to user failed while replacing table [ 542.453184][T24988] netlink: 'syz.3.5224': attribute type 1 has an invalid length. [ 542.453279][T24988] nbd: error processing sock list [ 543.400342][T25022] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5234'. [ 543.400375][T25022] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5234'. [ 543.410258][T25022] netlink: 'syz.2.5234': attribute type 18 has an invalid length. [ 543.410276][T25022] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5234'. [ 543.786265][T25043] blkio.reset_stats is deprecated [ 544.205822][T25071] syzkaller0: entered promiscuous mode [ 544.205843][T25071] syzkaller0: entered allmulticast mode [ 545.594834][ T52] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 545.598287][ T52] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 545.601376][ T52] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 545.602648][ T52] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 545.603316][ T52] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 546.050768][T25100] bridge0: port 1(bridge_slave_0) entered blocking state [ 546.050867][T25100] bridge0: port 1(bridge_slave_0) entered disabled state [ 546.050943][T25100] bridge_slave_0: entered allmulticast mode [ 546.052156][T25100] bridge_slave_0: entered promiscuous mode [ 546.054843][T25100] bridge0: port 2(bridge_slave_1) entered blocking state [ 546.055012][T25100] bridge0: port 2(bridge_slave_1) entered disabled state [ 546.055137][T25100] bridge_slave_1: entered allmulticast mode [ 546.056872][T25100] bridge_slave_1: entered promiscuous mode [ 546.088560][T25100] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 546.091985][T25100] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 546.139826][T25100] team0: Port device team_slave_0 added [ 546.142988][T25100] team0: Port device team_slave_1 added [ 546.167050][T25100] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 546.167067][T25100] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 546.167089][T25100] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 546.168339][T25100] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 546.168352][T25100] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 546.168374][T25100] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 546.214652][T25100] hsr_slave_0: entered promiscuous mode [ 546.215746][T25100] hsr_slave_1: entered promiscuous mode [ 546.216453][T25100] debugfs: 'hsr0' already exists in 'hsr' [ 546.216471][T25100] Cannot create hsr debugfs directory [ 547.089253][T25058] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 547.138581][T25100] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 547.156168][T25100] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 547.157565][T25100] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 547.209551][T25100] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 547.255202][T25100] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 547.276768][T25100] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 547.279411][T25100] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 547.305866][T25100] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 547.421549][T25128] netlink: 'syz.1.5257': attribute type 1 has an invalid length. [ 547.421570][T25128] __nla_validate_parse: 4 callbacks suppressed [ 547.421580][T25128] netlink: 16179 bytes leftover after parsing attributes in process `syz.1.5257'. [ 547.515227][T25100] 8021q: adding VLAN 0 to HW filter on device bond0 [ 547.537527][T25138] netlink: 'syz.3.5258': attribute type 12 has an invalid length. [ 547.537547][T25138] netlink: 'syz.3.5258': attribute type 29 has an invalid length. [ 547.537559][T25138] netlink: 148 bytes leftover after parsing attributes in process `syz.3.5258'. [ 547.537575][T25138] netlink: 'syz.3.5258': attribute type 3 has an invalid length. [ 547.537587][T25138] netlink: 'syz.3.5258': attribute type 2 has an invalid length. [ 547.537598][T25138] netlink: 35 bytes leftover after parsing attributes in process `syz.3.5258'. [ 547.615735][T25100] 8021q: adding VLAN 0 to HW filter on device team0 [ 547.621942][T13700] bridge0: port 1(bridge_slave_0) entered blocking state [ 547.622039][T13700] bridge0: port 1(bridge_slave_0) entered forwarding state [ 547.654756][ T5614] Bluetooth: hci4: command tx timeout [ 547.665147][T13728] bridge0: port 2(bridge_slave_1) entered blocking state [ 547.665242][T13728] bridge0: port 2(bridge_slave_1) entered forwarding state [ 547.681060][T25143] syzkaller0: entered promiscuous mode [ 547.681081][T25143] syzkaller0: entered allmulticast mode [ 547.697567][T25143] tc mirred to Houston: device batadv_slave_0 is down [ 548.039829][T25168] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5265'. [ 548.532686][T25100] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 548.551269][T25186] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 548.731636][T25195] netlink: NAT attribute has 5 unknown bytes [ 548.731671][T25195] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 548.950898][T25100] veth0_vlan: entered promiscuous mode [ 548.964872][T25100] veth1_vlan: entered promiscuous mode [ 548.992420][T25100] veth0_macvtap: entered promiscuous mode [ 548.999327][T25100] veth1_macvtap: entered promiscuous mode [ 549.021589][T25100] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 549.038219][T25100] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 549.114481][T13728] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.114523][T13728] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.114553][T13728] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.114581][T13728] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.734631][ T5614] Bluetooth: hci4: command tx timeout [ 550.826603][T25148] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 550.991633][T13728] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 550.991655][T13728] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 551.095141][T13709] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 551.095162][T13709] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 551.353077][T25217] syzkaller0: entered promiscuous mode [ 551.353098][T25217] syzkaller0: entered allmulticast mode [ 551.354933][T25218] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5276'. [ 551.519011][T25228] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5279'. [ 551.591789][T25226] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5279'. [ 551.703871][T25236] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5282'. [ 551.759316][T25243] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5281'. [ 551.805255][ T5614] Bluetooth: hci4: command tx timeout [ 551.857509][T25252] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5284'. [ 552.007762][T25264] netlink: 'syz.5.5288': attribute type 1 has an invalid length. [ 552.153966][T25268] block nbd2: Unsupported socket: should be TCP or UNIX. [ 552.508281][T25290] netlink: 'syz.2.5294': attribute type 1 has an invalid length. [ 552.508301][T25290] __nla_validate_parse: 1 callbacks suppressed [ 552.508312][T25290] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5294'. [ 552.633220][T25302] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5298'. [ 552.693223][T25308] xt_cluster: node mask cannot exceed total number of nodes [ 552.781780][T25299] x_tables: (null)_tables: NFQUEUE.1 target: invalid size 8 (kernel) != (user) 16 [ 552.871706][T25314] netlink: 'syz.1.5304': attribute type 29 has an invalid length. [ 552.872423][T25314] netlink: 'syz.1.5304': attribute type 29 has an invalid length. [ 553.003261][T25316] syzkaller0: entered promiscuous mode [ 553.003283][T25316] syzkaller0: entered allmulticast mode [ 553.090315][T25329] xt_hashlimit: size too large, truncated to 1048576 [ 553.170591][T25331] xt_hashlimit: size too large, truncated to 1048576 [ 553.239728][T25335] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5310'. [ 553.298859][T25335] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5310'. [ 553.462738][T25346] veth1_to_hsr: entered allmulticast mode [ 553.575407][T25351] netlink: 'syz.4.5317': attribute type 29 has an invalid length. [ 553.576185][T25351] netlink: 'syz.4.5317': attribute type 29 has an invalid length. [ 553.632823][T25355] netlink: 'syz.1.5318': attribute type 1 has an invalid length. [ 553.678366][T25355] 8021q: adding VLAN 0 to HW filter on device bond16 [ 553.740806][T25360] syzkaller0: entered promiscuous mode [ 553.740828][T25360] syzkaller0: entered allmulticast mode [ 553.807173][T25355] bond16: (slave gretap3): Enslaving as a backup interface with an up link [ 553.885244][ T5614] Bluetooth: hci4: command tx timeout [ 554.275966][T25392] netlink: 'syz.1.5330': attribute type 29 has an invalid length. [ 554.276714][T25392] netlink: 'syz.1.5330': attribute type 29 has an invalid length. [ 554.407508][T25401] netlink: 80 bytes leftover after parsing attributes in process `syz.2.5334'. [ 554.621217][T25413] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5336'. [ 554.673234][T25410] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5336'. [ 557.216121][T25385] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 557.431117][T25439] netlink: 'syz.1.5342': attribute type 29 has an invalid length. [ 557.431767][T25439] netlink: 'syz.1.5342': attribute type 29 has an invalid length. [ 557.774893][T25472] netlink: 'syz.2.5355': attribute type 33 has an invalid length. [ 557.776570][T25472] tipc: Enabling of bearer rejected, failed to enable media [ 557.796540][T25468] sctp: [Deprecated]: syz.4.5352 (pid 25468) Use of int in max_burst socket option. [ 557.796540][T25468] Use struct sctp_assoc_value instead [ 557.922222][T25482] netlink: 27 bytes leftover after parsing attributes in process `syz.2.5358'. [ 557.968312][T25484] vlan4: entered allmulticast mode [ 557.968334][T25484] bond0: entered allmulticast mode [ 557.968347][T25484] bond_slave_0: entered allmulticast mode [ 557.968456][T25484] bond_slave_1: entered allmulticast mode [ 558.020527][T25486] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5360'. [ 558.255609][T25505] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5364'. [ 558.255642][T25505] netlink: 'syz.1.5364': attribute type 7 has an invalid length. [ 558.255654][T25505] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5364'. [ 558.258431][T25504] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5364'. [ 558.263579][T25504] team0: Port device vlan0 removed [ 558.471493][T25512] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5369'. [ 558.627292][T25521] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5371'. [ 558.648129][T25523] netlink: 64 bytes leftover after parsing attributes in process `syz.5.5372'. [ 558.780985][T25532] syzkaller1: entered promiscuous mode [ 558.781006][T25532] syzkaller1: entered allmulticast mode [ 559.109949][T25549] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5377'. [ 559.109971][T25549] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5377'. [ 559.109996][T25549] netlink: 'syz.1.5377': attribute type 12 has an invalid length. [ 559.110009][T25549] netlink: 'syz.1.5377': attribute type 11 has an invalid length. [ 559.228691][T25552] wlan0 speed is unknown, defaulting to 1000 [ 559.228766][T25552] wlan0 speed is unknown, defaulting to 1000 [ 559.229606][T25552] wlan0 speed is unknown, defaulting to 1000 [ 559.231955][T25552] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 559.231989][T25552] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 559.232027][T25552] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 559.262460][T25552] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 559.453562][T25552] wlan0 speed is unknown, defaulting to 1000 [ 559.471822][T25552] wlan0 speed is unknown, defaulting to 1000 [ 559.477558][T25552] wlan0 speed is unknown, defaulting to 1000 [ 559.521412][T25552] wlan0 speed is unknown, defaulting to 1000 [ 559.528264][T25552] wlan0 speed is unknown, defaulting to 1000 [ 559.537344][T25552] wlan0 speed is unknown, defaulting to 1000 [ 559.542421][T25552] wlan0 speed is unknown, defaulting to 1000 [ 559.551889][T25552] wlan0 speed is unknown, defaulting to 1000 [ 559.577863][T25552] wlan0 speed is unknown, defaulting to 1000 [ 560.465663][T25585] syzkaller0: entered promiscuous mode [ 560.465685][T25585] syzkaller0: entered allmulticast mode [ 560.920875][T25603] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 560.920892][T25603] IPv6: NLM_F_CREATE should be set when creating new route [ 560.971716][T25603] wlan0 speed is unknown, defaulting to 1000 [ 561.297868][T25614] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 561.501153][T25618] netlink: 'syz.5.5399': attribute type 20 has an invalid length. [ 561.501174][T25618] IPv6: NLM_F_CREATE should be specified when creating new route [ 561.502004][T25619] netlink: 'syz.5.5399': attribute type 20 has an invalid length. [ 561.531130][T25618] ip_tables: iptables: counters copy to user failed while replacing table [ 562.282744][T25659] netlink: 'syz.5.5409': attribute type 1 has an invalid length. [ 562.295858][T25659] netlink: 'syz.5.5409': attribute type 1 has an invalid length. [ 562.532985][T25671] netlink: 'syz.4.5411': attribute type 9 has an invalid length. [ 562.543157][T25668] bond21: entered promiscuous mode [ 562.551726][T25668] 8021q: adding VLAN 0 to HW filter on device bond21 [ 562.612029][T25668] 8021q: adding VLAN 0 to HW filter on device bond21 [ 562.612430][T25668] bond21: (slave sit2): The slave device specified does not support setting the MAC address [ 562.621072][T25668] bond21: (slave sit2): Error -95 calling set_mac_address [ 562.878338][T22315] wlan0 speed is unknown, defaulting to 1000 [ 563.076933][T25697] __nla_validate_parse: 10 callbacks suppressed [ 563.076953][T25697] netlink: 9 bytes leftover after parsing attributes in process `syz.1.5416'. [ 563.100907][T25697] netlink: 9 bytes leftover after parsing attributes in process `syz.1.5416'. [ 563.326221][T25709] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5419'. [ 563.326245][T25709] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5419'. [ 563.386686][T25717] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5421'. [ 563.407479][T25717] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5421'. [ 563.458656][T25726] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5424'. [ 563.462119][T25727] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5424'. [ 563.563082][T25734] ip_tables: iptables: counters copy to user failed while replacing table [ 563.636738][T25738] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5428'. [ 563.678232][T25741] netlink: 'syz.5.5427': attribute type 1 has an invalid length. [ 563.768581][T25750] netlink: 'syz.4.5429': attribute type 17 has an invalid length. [ 563.768601][T25750] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5429'. [ 563.827906][T25759] netlink: 'syz.4.5429': attribute type 17 has an invalid length. [ 563.829363][T25750] gretap0: entered promiscuous mode [ 563.831201][T25750] gretap0: left promiscuous mode [ 563.897319][T25759] gretap0: entered promiscuous mode [ 563.934133][T25759] gretap0: left promiscuous mode [ 563.998916][T25769] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 563.999004][T25769] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 563.999070][T25769] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 563.999143][T25769] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 563.999218][T25769] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 563.999290][T25769] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 563.999366][T25769] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 563.999441][T25769] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 563.999514][T25769] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 563.999600][T25769] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 563.999676][T25769] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 563.999756][T25769] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 563.999835][T25769] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 563.999912][T25769] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 563.999990][T25769] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 564.000064][T25769] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 564.000145][T25769] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 564.000222][T25769] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 564.000314][T25769] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 564.000396][T25769] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 564.003067][T25769] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 564.003155][T25769] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 564.003224][T25769] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 564.003301][T25769] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 564.003376][T25769] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 564.003449][T25769] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 564.003537][T25769] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 564.005656][T25770] netlink: Invalid conntrack helper [ 564.005682][T25770] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 564.009056][T25769] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 564.009601][T25769] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 564.009678][T25769] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 564.009750][T25769] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 564.009826][T25769] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 564.010471][T25768] syzkaller1: tun_chr_ioctl cmd 3224918120 [ 564.879212][T25792] syzkaller0: entered promiscuous mode [ 564.879234][T25792] syzkaller0: entered allmulticast mode [ 565.090273][T25804] netlink: 'syz.1.5441': attribute type 3 has an invalid length. [ 565.090294][T25804] netlink: 'syz.1.5441': attribute type 2 has an invalid length. [ 565.132517][T25806] netlink: 'syz.5.5442': attribute type 1 has an invalid length. [ 565.746926][T25846] syzkaller0: entered promiscuous mode [ 565.746943][T25846] syzkaller0: entered allmulticast mode [ 565.750286][T25846] tc mirred to Houston: device batadv_slave_0 is down [ 565.871214][T25848] wlan0 speed is unknown, defaulting to 1000 [ 566.389972][T25852] wlan0 speed is unknown, defaulting to 1000 [ 566.410425][T25858] netlink: 'syz.1.5458': attribute type 29 has an invalid length. [ 566.414499][T25858] netlink: 'syz.1.5458': attribute type 29 has an invalid length. [ 566.929031][T25878] bridge0: port 3(wlan0) entered blocking state [ 566.929200][T25878] bridge0: port 3(wlan0) entered disabled state [ 566.929347][T25878] mac80211_hwsim hwsim57 wlan0: entered allmulticast mode [ 566.931650][T25878] mac80211_hwsim hwsim57 wlan0: entered promiscuous mode [ 566.932072][T25878] bridge0: port 3(wlan0) entered blocking state [ 566.932130][T25878] bridge0: port 3(wlan0) entered forwarding state [ 566.975827][T25876] syzkaller0: entered promiscuous mode [ 566.975849][T25876] syzkaller0: entered allmulticast mode [ 566.979206][T25876] tc mirred to Houston: device batadv_slave_0 is down [ 567.188582][T25897] netlink: 'syz.1.5470': attribute type 29 has an invalid length. [ 567.189620][T25897] netlink: 'syz.1.5470': attribute type 29 has an invalid length. [ 567.405811][T13709] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 567.430937][T25910] wlan0 speed is unknown, defaulting to 1000 [ 567.610635][T25920] netlink: zone id is out of range [ 567.610653][T25920] netlink: del zone limit has 4 unknown bytes [ 567.667909][T25924] syzkaller0: entered promiscuous mode [ 567.667931][T25924] syzkaller0: entered allmulticast mode [ 567.670940][T25924] tc mirred to Houston: device batadv_slave_0 is down [ 568.121266][T25941] __nla_validate_parse: 76 callbacks suppressed [ 568.121286][T25941] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5484'. [ 568.193576][T25945] openvswitch: netlink: Missing key (keys=200040, expected=80) [ 568.300536][T25948] netlink: 277 bytes leftover after parsing attributes in process `syz.5.5483'. [ 568.428935][ T52] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 568.441335][ T52] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 568.453241][ T52] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 568.468769][ T52] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 568.469448][ T52] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 568.864637][T25976] validate_nla: 2 callbacks suppressed [ 568.864657][T25976] netlink: 'syz.5.5495': attribute type 29 has an invalid length. [ 568.865518][T25976] netlink: 'syz.5.5495': attribute type 29 has an invalid length. [ 569.035405][T25989] 8021q: adding VLAN 0 to HW filter on device bond17 [ 569.035741][T25989] bridge0: port 3(bond17) entered blocking state [ 569.035890][T25989] bridge0: port 3(bond17) entered disabled state [ 569.035979][T25989] bond17: entered allmulticast mode [ 569.037533][T25989] bond17: entered promiscuous mode [ 569.038236][T25984] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5497'. [ 569.052485][T25953] wlan0 speed is unknown, defaulting to 1000 [ 569.429938][T26008] xt_TPROXY: Can be used only with -p tcp or -p udp [ 569.438595][T26014] xt_TPROXY: Can be used only with -p tcp or -p udp [ 569.536694][T26023] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5503'. [ 569.552343][T26025] netlink: 'syz.4.5503': attribute type 1 has an invalid length. [ 569.552362][T26025] netlink: 220 bytes leftover after parsing attributes in process `syz.4.5503'. [ 569.591273][T25953] bridge0: port 1(bridge_slave_0) entered blocking state [ 569.591364][T25953] bridge0: port 1(bridge_slave_0) entered disabled state [ 569.591526][T25953] bridge_slave_0: entered allmulticast mode [ 569.592884][T25953] bridge_slave_0: entered promiscuous mode [ 569.621976][T25953] bridge0: port 2(bridge_slave_1) entered blocking state [ 569.622088][T25953] bridge0: port 2(bridge_slave_1) entered disabled state [ 569.622249][T25953] bridge_slave_1: entered allmulticast mode [ 569.646034][T25953] bridge_slave_1: entered promiscuous mode [ 569.714169][T25953] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 569.720199][T25953] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 569.782537][T25953] team0: Port device team_slave_0 added [ 569.796007][T25953] team0: Port device team_slave_1 added [ 569.872390][T25953] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 569.872408][T25953] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 569.872431][T25953] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 569.878903][T25953] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 569.878919][T25953] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 569.878941][T25953] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 570.052586][T25953] hsr_slave_0: entered promiscuous mode [ 570.057915][T25953] hsr_slave_1: entered promiscuous mode [ 570.058827][T25953] debugfs: 'hsr0' already exists in 'hsr' [ 570.058846][T25953] Cannot create hsr debugfs directory [ 570.287492][T26051] netlink: 'syz.5.5506': attribute type 29 has an invalid length. [ 570.302147][T26051] netlink: 'syz.5.5506': attribute type 29 has an invalid length. [ 570.535139][ T52] Bluetooth: hci6: command tx timeout [ 570.747615][T26064] netlink: 'syz.5.5510': attribute type 1 has an invalid length. [ 570.747637][T26064] netlink: 756 bytes leftover after parsing attributes in process `syz.5.5510'. [ 570.779449][T26068] netlink: 'syz.1.5512': attribute type 1 has an invalid length. [ 570.851603][T26076] netlink: 'syz.1.5513': attribute type 29 has an invalid length. [ 570.863359][T26076] netlink: 'syz.1.5513': attribute type 29 has an invalid length. [ 570.897973][T25953] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 570.942788][T25953] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 570.952151][T25953] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 570.967119][T25953] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 570.968267][T25953] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 570.972148][T25953] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 570.973213][T25953] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 571.012378][T25953] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 571.120693][T26088] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5517'. [ 571.121337][T26088] netlink: 'syz.1.5517': attribute type 10 has an invalid length. [ 572.604943][ T52] Bluetooth: hci6: command tx timeout [ 573.164851][ C1] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 573.752760][T26067] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 574.052443][T25953] 8021q: adding VLAN 0 to HW filter on device bond0 [ 574.077905][T25953] 8021q: adding VLAN 0 to HW filter on device team0 [ 574.093631][T13718] bridge0: port 1(bridge_slave_0) entered blocking state [ 574.093731][T13718] bridge0: port 1(bridge_slave_0) entered forwarding state [ 574.118155][T13718] bridge0: port 2(bridge_slave_1) entered blocking state [ 574.118255][T13718] bridge0: port 2(bridge_slave_1) entered forwarding state [ 574.312560][T26116] wlan0 speed is unknown, defaulting to 1000 [ 574.431266][T26122] netlink: 'syz.4.5525': attribute type 46 has an invalid length. [ 574.562474][T26116] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5524'. [ 574.685210][ T52] Bluetooth: hci6: command tx timeout [ 574.821743][T26131] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5526'. [ 574.993462][T25953] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 575.222201][T25953] veth0_vlan: entered promiscuous mode [ 575.242867][T25953] veth1_vlan: entered promiscuous mode [ 575.266467][T26150] netlink: 'syz.4.5528': attribute type 1 has an invalid length. [ 575.317806][T25953] veth0_macvtap: entered promiscuous mode [ 575.323181][T25953] veth1_macvtap: entered promiscuous mode [ 575.353564][T25953] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 575.371049][T25953] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 575.450296][ T1022] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.452801][T13718] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.452837][T13718] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.465218][T13709] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.774477][T26137] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 575.878343][T26163] ipt_ECN: cannot use operation on non-tcp rule [ 575.895704][ T1022] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 575.895725][ T1022] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 575.957513][T13718] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 575.957534][T13718] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 576.048036][T26165] netlink: 140 bytes leftover after parsing attributes in process `syz.4.5533'. [ 576.049178][T26165] netlink: 'syz.4.5533': attribute type 4 has an invalid length. [ 576.201836][T26169] syzkaller0: entered promiscuous mode [ 576.201858][T26169] syzkaller0: entered allmulticast mode [ 576.399682][ T5614] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 576.402708][ T5614] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 576.419514][ T5614] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 576.421337][ T5614] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 576.440212][ T5614] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 576.601339][T26178] wlan0 speed is unknown, defaulting to 1000 [ 576.681846][T26190] netlink: 'syz.6.5538': attribute type 1 has an invalid length. [ 576.736566][T26193] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5539'. [ 576.758609][T26193] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5539'. [ 576.765989][ T52] Bluetooth: hci6: command tx timeout [ 576.982670][T26181] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5535'. [ 577.030585][T26206] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5541'. [ 577.030607][T26206] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5541'. [ 577.151947][T26207] lo speed is unknown, defaulting to 1000 [ 577.152036][T26207] lo speed is unknown, defaulting to 1000 [ 577.152501][T26207] lo speed is unknown, defaulting to 1000 [ 577.153309][T26207] smbdirect: ib_dev[syz_device_name_32_chars_1234567]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 577.153340][T26207] smbdirect: ib_dev[syz_device_name_32_chars_1234567]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 577.153375][T26207] smbdirect: ib_dev[syz_device_name_32_chars_1234567]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 577.155670][T26204] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5540'. [ 577.261170][T26207] infiniband syz_device_name_32_chars_1234567: RDMA CMA: cma_listen_on_dev, error -22 [ 577.294566][T26207] lo speed is unknown, defaulting to 1000 [ 577.296484][T26207] lo speed is unknown, defaulting to 1000 [ 577.298223][T26207] lo speed is unknown, defaulting to 1000 [ 577.300104][T26207] lo speed is unknown, defaulting to 1000 [ 577.301888][T26207] lo speed is unknown, defaulting to 1000 [ 577.374953][T26207] lo speed is unknown, defaulting to 1000 [ 577.403500][T26207] lo speed is unknown, defaulting to 1000 [ 577.423278][T26207] lo speed is unknown, defaulting to 1000 [ 577.433029][T26207] lo speed is unknown, defaulting to 1000 [ 577.442974][T26207] lo speed is unknown, defaulting to 1000 [ 577.460272][T26207] lo speed is unknown, defaulting to 1000 [ 577.478529][T26207] lo speed is unknown, defaulting to 1000 [ 577.542634][T26182] wlan0 speed is unknown, defaulting to 1000 [ 577.630897][T26222] netlink: 'syz.4.5546': attribute type 1 has an invalid length. [ 577.808084][T26222] 8021q: adding VLAN 0 to HW filter on device bond24 [ 577.871068][T26226] bond24: (slave gretap1): Enslaving as a backup interface with an up link [ 577.925957][T13718] bond24: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 578.034977][T13716] bond24: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 578.067811][T26244] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 578.220886][T26252] wlan0 speed is unknown, defaulting to 1000 [ 578.222717][T26252] lo speed is unknown, defaulting to 1000 [ 578.348658][T13716] bond0: (slave bond_slave_0): interface is now down [ 578.348682][T13716] bond0: (slave bond_slave_1): interface is now down [ 578.348704][T13716] bond0: (slave bridge0): interface is now down [ 578.364131][T26258] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 578.525897][ T52] Bluetooth: hci7: command tx timeout [ 578.755604][T26252] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5552'. [ 578.759613][T26182] bridge0: port 1(bridge_slave_0) entered blocking state [ 578.760420][T26182] bridge0: port 1(bridge_slave_0) entered disabled state [ 578.760579][T26182] bridge_slave_0: entered allmulticast mode [ 578.765597][T26182] bridge_slave_0: entered promiscuous mode [ 578.768105][T26182] bridge0: port 2(bridge_slave_1) entered blocking state [ 578.768199][T26182] bridge0: port 2(bridge_slave_1) entered disabled state [ 578.768412][T26182] bridge_slave_1: entered allmulticast mode [ 578.770015][T26182] bridge_slave_1: entered promiscuous mode [ 578.862658][T26182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 578.873359][T26182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 578.910092][T26279] netlink: 'syz.4.5560': attribute type 21 has an invalid length. [ 579.151481][T26182] team0: Port device team_slave_0 added [ 579.169949][T26182] team0: Port device team_slave_1 added [ 579.296427][T26182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 579.296445][T26182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 579.296468][T26182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 579.383364][T26182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 579.383381][T26182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 579.383404][T26182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 579.402562][T26283] syzkaller1: entered promiscuous mode [ 579.402582][T26283] syzkaller1: entered allmulticast mode [ 579.604286][T26182] hsr_slave_0: entered promiscuous mode [ 579.607027][T26182] hsr_slave_1: entered promiscuous mode [ 579.609784][T26182] debugfs: 'hsr0' already exists in 'hsr' [ 579.609804][T26182] Cannot create hsr debugfs directory [ 579.765719][T26308] syzkaller1: entered promiscuous mode [ 579.765739][T26308] syzkaller1: entered allmulticast mode [ 579.770379][T26308] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 4116 [ 579.979350][T26325] bridge0: port 1(bridge_slave_0) entered disabled state [ 579.981635][T26325] bridge0: port 2(bridge_slave_1) entered disabled state [ 580.162051][T26333] rdma_rxe: rxe_newlink: failed to add team0 [ 580.313377][T26334] wlan0 speed is unknown, defaulting to 1000 [ 580.329762][T26334] lo speed is unknown, defaulting to 1000 [ 580.377502][T26182] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 580.382535][T26182] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 580.387534][T26182] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 580.410824][T26182] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 580.452720][T26182] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 580.467389][T26182] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 580.468777][T26182] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 580.493183][T26182] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 580.605068][ T52] Bluetooth: hci7: command tx timeout [ 580.626609][T26353] __nla_validate_parse: 1 callbacks suppressed [ 580.626627][T26353] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5575'. [ 580.628743][T26354] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5575'. [ 580.719095][T26334] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5572'. [ 580.769828][T26182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 580.854957][T13716] bond0: (slave bond_slave_0): interface is now down [ 580.854980][T13716] bond0: (slave bond_slave_1): interface is now down [ 580.854993][T13716] bond0: (slave bridge0): interface is now down [ 581.002946][T26182] 8021q: adding VLAN 0 to HW filter on device team0 [ 581.028669][T13703] bridge0: port 1(bridge_slave_0) entered blocking state [ 581.028805][T13703] bridge0: port 1(bridge_slave_0) entered forwarding state [ 581.073743][T13721] bridge0: port 2(bridge_slave_1) entered blocking state [ 581.073846][T13721] bridge0: port 2(bridge_slave_1) entered forwarding state [ 581.154349][T26375] xt_addrtype: ipv6 does not support BROADCAST matching [ 581.289050][T26378] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5580'. [ 581.318200][T26378] bridge0: port 2(bridge_slave_1) entered disabled state [ 581.365487][T26378] bridge_slave_1 (unregistering): left allmulticast mode [ 581.365515][T26378] bridge_slave_1 (unregistering): left promiscuous mode [ 581.365607][T26378] bridge0: port 2(bridge_slave_1) entered disabled state [ 581.668726][T26396] IPv6: Can't replace route, no match found [ 581.734864][T26398] openvswitch: netlink: Missing key (keys=c0, expected=1100) [ 582.173308][T26419] sctp: [Deprecated]: syz.4.5590 (pid 26419) Use of int in maxseg socket option. [ 582.173308][T26419] Use struct sctp_assoc_value instead [ 582.225833][T26422] sctp: [Deprecated]: syz.4.5590 (pid 26422) Use of int in maxseg socket option. [ 582.225833][T26422] Use struct sctp_assoc_value instead [ 582.262969][T26182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 582.755735][ T52] Bluetooth: hci7: command tx timeout [ 582.795839][T26182] veth0_vlan: entered promiscuous mode [ 582.823322][T26182] veth1_vlan: entered promiscuous mode [ 582.879583][T26182] veth0_macvtap: entered promiscuous mode [ 582.897618][T26438] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5592'. [ 582.922465][T26182] veth1_macvtap: entered promiscuous mode [ 582.939871][T26438] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5592'. [ 582.982431][T26182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 583.021111][T26182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 583.103980][T13718] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 583.104307][T13721] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 583.104343][T13721] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 583.104374][T13721] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 583.276975][T26444] netlink: 'syz.5.5595': attribute type 1 has an invalid length. [ 583.380916][T26444] bond5: entered promiscuous mode [ 583.381039][T26444] bond5: entered allmulticast mode [ 583.381911][T26444] 8021q: adding VLAN 0 to HW filter on device bond5 [ 583.409743][T13721] bond0: (slave bond_slave_0): interface is now down [ 583.409765][T13721] bond0: (slave bond_slave_1): interface is now down [ 583.409779][T13721] bond0: (slave bridge0): interface is now down [ 583.448635][T26447] erspan1: entered allmulticast mode [ 583.468007][T26447] bond5: (slave erspan1): making interface the new active one [ 583.468030][T26447] erspan1: entered promiscuous mode [ 583.490618][T26447] bond5: (slave erspan1): Enslaving as an active interface with an up link [ 583.542308][T13720] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 583.542328][T13720] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 583.788065][T13723] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 583.788097][T13723] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 583.828453][T26470] netlink: 'syz.4.5601': attribute type 1 has an invalid length. [ 583.938151][T26470] 8021q: adding VLAN 0 to HW filter on device bond25 [ 584.512262][T26499] syzkaller0: entered promiscuous mode [ 584.512285][T26499] syzkaller0: entered allmulticast mode [ 584.655375][T13723] IPVS: starting estimator thread 0... [ 584.753854][T26511] IPVS: using max 28 ests per chain, 67200 per kthread [ 584.763841][ T52] Bluetooth: hci7: command tx timeout [ 584.831452][T26509] syzkaller0: entered promiscuous mode [ 584.831469][T26509] syzkaller0: entered allmulticast mode [ 584.864111][T26516] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5617'. [ 584.894506][T26516] dvmrp0: entered allmulticast mode [ 584.966338][T26520] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5618'. [ 585.048354][T26523] netlink: 256 bytes leftover after parsing attributes in process `syz.5.5620'. [ 585.162053][T26527] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5620'. [ 585.262140][T26536] netlink: 'syz.6.5624': attribute type 21 has an invalid length. [ 585.273181][T26527] 8021q: adding VLAN 0 to HW filter on device bond6 [ 585.284657][T26527] bond0: (slave bond6): Enslaving as an active interface with an up link [ 585.289756][T26536] netlink: 'syz.6.5624': attribute type 5 has an invalid length. [ 585.326173][T13718] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 585.326431][T13718] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 585.349717][T22312] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 585.383937][ T8112] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 585.558703][T26546] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 585.645338][T26552] __nla_validate_parse: 4 callbacks suppressed [ 585.645358][T26552] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5628'. [ 585.684045][ T52] block nbd2: Receive control failed (result -107) [ 585.691374][T26552] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5628'. [ 585.732277][T26552] veth2: entered promiscuous mode [ 585.732297][T26552] veth2: entered allmulticast mode [ 585.752835][T26557] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5628'. [ 585.752981][T26548] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5628'. [ 585.763123][ T52] block nbd3: Receive control failed (result -32) [ 585.842703][T26557] veth2: entered promiscuous mode [ 585.842726][T26557] veth2: entered allmulticast mode [ 585.900519][T22312] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 585.970563][T13723] bond0: (slave bond_slave_0): interface is now down [ 585.970587][T13723] bond0: (slave bond_slave_1): interface is now down [ 585.970600][T13723] bond0: (slave bridge0): interface is now down [ 586.157971][T13723] bond0: now running without any active interface! [ 586.232588][T26573] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 586.320846][T26569] syzkaller0: entered promiscuous mode [ 586.320868][T26569] syzkaller0: entered allmulticast mode [ 586.672410][T26584] bond26: option fail_over_mac: invalid value (16) [ 586.701753][T26584] bond26 (unregistering): Released all slaves [ 586.972323][T26610] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5641'. [ 586.989810][T26610] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5641'. [ 587.313072][T26623] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5645'. [ 587.459593][T26630] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5647'. [ 587.497060][T26630] netlink: 'syz.4.5647': attribute type 2 has an invalid length. [ 587.498476][T26632] syzkaller0: entered promiscuous mode [ 587.498496][T26632] syzkaller0: entered allmulticast mode [ 587.566916][T26635] ICMPv6: NA: 00:00:00:00:00:00 advertised our address fe80::aa on syz_tun! [ 587.570302][T26635] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5649'. [ 587.570334][T26635] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5649'. [ 587.640268][T26638] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 587.655129][T26638] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 587.670683][T26638] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 588.101754][T26651] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 588.253378][T13703] IPVS: starting estimator thread 0... [ 588.275555][T26668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 588.345190][T26670] IPVS: using max 30 ests per chain, 72000 per kthread [ 588.743281][T26696] xt_CT: You must specify a L4 protocol and not use inversions on it [ 589.171234][T26716] xt_hl: Unknown TTL match mode: 255 [ 589.381055][ T5614] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 589.399583][ T5614] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 589.411341][ T5614] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 589.423106][ T5614] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 589.441503][ T5614] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 589.641736][T26738] netlink: 'syz.7.5678': attribute type 2 has an invalid length. [ 589.654948][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 589.930411][T26733] ovs-s: entered promiscuous mode [ 589.999150][T26733] openvswitch: ovs-s: Dropping previously announced user features [ 590.203303][T26751] block nbd0: Unsupported socket: should be TCP or UNIX. [ 591.579437][ T5614] Bluetooth: hci8: command tx timeout [ 593.659127][ T52] Bluetooth: hci8: command tx timeout [ 594.990064][T26725] wlan0 speed is unknown, defaulting to 1000 [ 594.997836][T26725] lo speed is unknown, defaulting to 1000 [ 595.167185][T26799] __nla_validate_parse: 6 callbacks suppressed [ 595.167206][T26799] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5689'. [ 595.310385][T26799] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5689'. [ 595.667497][T26812] syzkaller0: entered promiscuous mode [ 595.667535][T26812] syzkaller0: entered allmulticast mode [ 595.724348][ T52] Bluetooth: hci8: command tx timeout [ 596.581178][T26857] netlink: 'syz.4.5700': attribute type 34 has an invalid length. [ 596.581202][T26857] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5700'. [ 596.889673][T26868] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5704'. [ 596.996577][T26870] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5704'. [ 597.079707][T26725] bridge0: port 1(bridge_slave_0) entered blocking state [ 597.080133][T26725] bridge0: port 1(bridge_slave_0) entered disabled state [ 597.080309][T26725] bridge_slave_0: entered allmulticast mode [ 597.096345][T26725] bridge_slave_0: entered promiscuous mode [ 597.102666][T26725] bridge0: port 2(bridge_slave_1) entered blocking state [ 597.103546][T26725] bridge0: port 2(bridge_slave_1) entered disabled state [ 597.108884][T26725] bridge_slave_1: entered allmulticast mode [ 597.119274][T26725] bridge_slave_1: entered promiscuous mode [ 597.362477][T26725] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 597.379686][T26725] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 597.455729][T26892] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5709'. [ 597.687560][T26897] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5710'. [ 597.707362][T26725] team0: Port device team_slave_0 added [ 597.733939][T26725] team0: Port device team_slave_1 added [ 597.804073][ T52] Bluetooth: hci8: command tx timeout [ 597.992255][T26905] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5710'. [ 598.002816][T26725] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 598.002850][T26725] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 598.002907][T26725] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 598.020740][T26725] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 598.020771][T26725] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 598.020810][T26725] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 598.126189][T26911] netlink: 240 bytes leftover after parsing attributes in process `syz.6.5712'. [ 598.399610][T26725] hsr_slave_0: entered promiscuous mode [ 598.400631][T26725] hsr_slave_1: entered promiscuous mode [ 598.403077][T26725] debugfs: 'hsr0' already exists in 'hsr' [ 598.403096][T26725] Cannot create hsr debugfs directory [ 598.778098][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 599.411882][T13720] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 599.429221][T26942] netlink: 'syz.5.5723': attribute type 1 has an invalid length. [ 599.571303][T26942] 8021q: adding VLAN 0 to HW filter on device bond7 [ 599.725772][T26949] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 599.777754][T26955] netlink: 'syz.5.5727': attribute type 1 has an invalid length. [ 599.908206][T26957] vlan2: entered allmulticast mode [ 599.908228][T26957] bond0: entered allmulticast mode [ 599.908240][T26957] bond_slave_0: entered allmulticast mode [ 599.908254][T26957] bond_slave_1: entered allmulticast mode [ 600.101765][T26969] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5731'. [ 600.247624][T26976] netlink: 'syz.7.5729': attribute type 11 has an invalid length. [ 600.247645][T26976] netlink: 'syz.7.5729': attribute type 4 has an invalid length. [ 600.247669][T26976] netlink: 224 bytes leftover after parsing attributes in process `syz.7.5729'. [ 600.263353][T26963] pim6reg: entered allmulticast mode [ 600.291584][T26973] team0: entered allmulticast mode [ 600.291607][T26973] team_slave_0: entered allmulticast mode [ 600.291624][T26973] team_slave_1: entered allmulticast mode [ 600.372046][T26963] team0: left allmulticast mode [ 600.372067][T26963] team_slave_0: left allmulticast mode [ 600.372085][T26963] team_slave_1: left allmulticast mode [ 600.372276][T26963] pim6reg: left allmulticast mode [ 600.581405][T26725] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 600.635947][T26725] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 600.636885][T26725] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 600.702449][T26725] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 600.715755][T26725] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 600.722991][T26984] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5733'. [ 600.751350][T26725] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 600.752172][T26725] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 600.791799][T26725] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 600.801813][T26990] veth0: entered promiscuous mode [ 600.844999][T27001] netlink: 'syz.4.5736': attribute type 29 has an invalid length. [ 600.869147][T27001] FAULT_INJECTION: forcing a failure. [ 600.869147][T27001] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 600.869196][T27001] CPU: 0 UID: 0 PID: 27001 Comm: syz.4.5736 Not tainted syzkaller #0 PREEMPT(full) [ 600.869218][T27001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 600.869230][T27001] Call Trace: [ 600.869238][T27001] [ 600.869247][T27001] dump_stack_lvl+0xe8/0x150 [ 600.869278][T27001] should_fail_ex+0x410/0x560 [ 600.869310][T27001] _copy_from_user+0x2d/0xb0 [ 600.869335][T27001] ___sys_recvmsg+0x173/0x5a0 [ 600.869366][T27001] ? __pfx____sys_recvmsg+0x10/0x10 [ 600.869399][T27001] ? irqentry_exit+0x218/0x910 [ 600.869441][T27001] ? __x64_sys_recvmsg+0x196/0x290 [ 600.869472][T27001] __x64_sys_recvmsg+0x1ae/0x290 [ 600.869503][T27001] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 600.869548][T27001] do_syscall_64+0x166/0x520 [ 600.869568][T27001] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 600.869586][T27001] ? clear_bhb_loop+0x70/0xc0 [ 600.869611][T27001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 600.869633][T27001] RIP: 0033:0x7fa75f79e159 [ 600.869650][T27001] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 600.869664][T27001] RSP: 002b:00007fa760591028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 600.869684][T27001] RAX: ffffffffffffffda RBX: 00007fa75fa25fa0 RCX: 00007fa75f79e159 [ 600.869696][T27001] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000003 [ 600.869706][T27001] RBP: 00007fa760591090 R08: 0000000000000000 R09: 0000000000000000 [ 600.869717][T27001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 600.869728][T27001] R13: 00007fa75fa26038 R14: 00007fa75fa25fa0 R15: 00007fffca9e1bc8 [ 600.869756][T27001] [ 600.870292][T26989] veth0: left promiscuous mode [ 601.330343][T26725] 8021q: adding VLAN 0 to HW filter on device bond0 [ 601.476169][T26725] 8021q: adding VLAN 0 to HW filter on device team0 [ 601.533472][T13703] bridge0: port 1(bridge_slave_0) entered blocking state [ 601.533581][T13703] bridge0: port 1(bridge_slave_0) entered forwarding state [ 601.548683][T13703] bridge0: port 2(bridge_slave_1) entered blocking state [ 601.548782][T13703] bridge0: port 2(bridge_slave_1) entered forwarding state [ 601.687242][T27018] netlink: 81 bytes leftover after parsing attributes in process `syz.6.5741'. [ 601.962537][T27022] netlink: 14 bytes leftover after parsing attributes in process `syz.4.5743'. [ 602.187059][T27036] netlink: Unknown conntrack attr (type=12295, max=9) [ 602.187148][T27036] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 602.567120][T27050] netlink: 'syz.5.5750': attribute type 24 has an invalid length. [ 603.222990][T27070] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 603.299914][T27073] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5754'. [ 603.434272][T27078] netlink: 'syz.4.5755': attribute type 29 has an invalid length. [ 603.483372][T27078] FAULT_INJECTION: forcing a failure. [ 603.483372][T27078] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 603.483405][T27078] CPU: 1 UID: 0 PID: 27078 Comm: syz.4.5755 Not tainted syzkaller #0 PREEMPT(full) [ 603.483426][T27078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 603.483437][T27078] Call Trace: [ 603.483445][T27078] [ 603.483453][T27078] dump_stack_lvl+0xe8/0x150 [ 603.483484][T27078] should_fail_ex+0x410/0x560 [ 603.483511][T27078] prepare_alloc_pages+0x223/0x600 [ 603.483538][T27078] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 603.483562][T27078] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 603.483588][T27078] ? __pfx_policy_nodemask+0x10/0x10 [ 603.483615][T27078] ? __lock_acquire+0x747/0x2de0 [ 603.483636][T27078] alloc_pages_mpol+0x21e/0x390 [ 603.483664][T27078] folio_alloc_mpol_noprof+0x39/0x160 [ 603.483690][T27078] vma_alloc_folio_noprof+0xe1/0x1e0 [ 603.483716][T27078] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 603.483740][T27078] ? lock_acquire+0x115/0x350 [ 603.483765][T27078] do_pte_missing+0x173a/0x34b0 [ 603.483802][T27078] handle_mm_fault+0x1a53/0x3750 [ 603.483838][T27078] ? handle_mm_fault+0xf1/0x3750 [ 603.483874][T27078] ? __pfx_handle_mm_fault+0x10/0x10 [ 603.483911][T27078] ? __lock_acquire+0x747/0x2de0 [ 603.483934][T27078] ? lock_mm_and_find_vma+0xa7/0x340 [ 603.483963][T27078] do_user_addr_fault+0x746/0x1340 [ 603.483997][T27078] exc_page_fault+0x6a/0xc0 [ 603.484020][T27078] asm_exc_page_fault+0x26/0x30 [ 603.484038][T27078] RIP: 0010:rep_movs_alternative+0x4a/0xa0 [ 603.484064][T27078] Code: 67 04 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 0f 67 04 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 603.484080][T27078] RSP: 0018:ffffc900052e7658 EFLAGS: 00050202 [ 603.484097][T27078] RAX: ffffffff84dc7101 RBX: ffff8880518a4000 RCX: 0000000000000e2c [ 603.484111][T27078] RDX: 0000000000000000 RSI: ffff8880518a4000 RDI: 0000200000002c80 [ 603.484124][T27078] RBP: ffffc900052e77d0 R08: ffff8880518a4e2b R09: 1ffff1100a3149c5 [ 603.484138][T27078] R10: dffffc0000000000 R11: ffffed100a3149c6 R12: dffffc0000000000 [ 603.484151][T27078] R13: 0000000000000000 R14: ffffc900052e7e10 R15: 0000000000000e2c [ 603.484172][T27078] ? _copy_to_iter+0x3a1/0x1810 [ 603.484209][T27078] _copy_to_iter+0x49d/0x1810 [ 603.484228][T27078] ? up_write+0x19d/0x4a0 [ 603.484264][T27078] ? __pfx__copy_to_iter+0x10/0x10 [ 603.484285][T27078] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 603.484308][T27078] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 603.484328][T27078] ? __skb_try_recv_datagram+0x3de/0x4e0 [ 603.484360][T27078] __skb_datagram_iter+0xf8/0x980 [ 603.484385][T27078] ? __pfx_sk_busy_loop_end+0x10/0x10 [ 603.484406][T27078] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 603.484442][T27078] skb_copy_datagram_iter+0xb5/0x240 [ 603.484473][T27078] netlink_recvmsg+0x2b9/0xa50 [ 603.484513][T27078] ? __pfx_netlink_recvmsg+0x10/0x10 [ 603.484545][T27078] ? aa_sock_msg_perm+0x144/0x210 [ 603.484572][T27078] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 603.484595][T27078] ? security_socket_recvmsg+0x7e/0x2c0 [ 603.484623][T27078] ? __pfx_netlink_recvmsg+0x10/0x10 [ 603.484649][T27078] sock_recvmsg+0x196/0x1e0 [ 603.484672][T27078] ____sys_recvmsg+0x1e6/0x4a0 [ 603.484704][T27078] ? __pfx_____sys_recvmsg+0x10/0x10 [ 603.484743][T27078] ? import_iovec+0x73/0xa0 [ 603.484770][T27078] ___sys_recvmsg+0x213/0x5a0 [ 603.484802][T27078] ? __pfx____sys_recvmsg+0x10/0x10 [ 603.484833][T27078] ? lock_acquire+0x115/0x350 [ 603.484869][T27078] ? __fget_files+0x3a2/0x420 [ 603.484905][T27078] __x64_sys_recvmsg+0x1ae/0x290 [ 603.484950][T27078] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 603.484997][T27078] do_syscall_64+0x166/0x520 [ 603.485020][T27078] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 603.485040][T27078] ? clear_bhb_loop+0x70/0xc0 [ 603.485063][T27078] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 603.485081][T27078] RIP: 0033:0x7fa75f79e159 [ 603.485099][T27078] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 603.485114][T27078] RSP: 002b:00007fa760591028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 603.485134][T27078] RAX: ffffffffffffffda RBX: 00007fa75fa25fa0 RCX: 00007fa75f79e159 [ 603.485148][T27078] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000003 [ 603.485159][T27078] RBP: 00007fa760591090 R08: 0000000000000000 R09: 0000000000000000 [ 603.485171][T27078] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 603.485182][T27078] R13: 00007fa75fa26038 R14: 00007fa75fa25fa0 R15: 00007fffca9e1bc8 [ 603.485220][T27078] [ 603.502998][T27078] netlink: 'syz.4.5755': attribute type 29 has an invalid length. [ 604.128803][T26725] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 604.670491][T27113] netlink: 'syz.5.5765': attribute type 1 has an invalid length. [ 604.672939][T27115] netlink: 'syz.5.5765': attribute type 1 has an invalid length. [ 604.771341][T27113] 8021q: adding VLAN 0 to HW filter on device bond10 [ 604.868150][T27113] bond10: (slave gretap1): Enslaving as a backup interface with an up link [ 604.870348][T27111] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5764'. [ 605.457929][T27137] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5769'. [ 605.550488][T26725] veth0_vlan: entered promiscuous mode [ 605.625252][T26725] veth1_vlan: entered promiscuous mode [ 605.765960][T26725] veth0_macvtap: entered promiscuous mode [ 605.839901][T26725] veth1_macvtap: entered promiscuous mode [ 605.978809][T26725] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 606.001545][T26725] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 606.196525][T13704] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.196953][T13704] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.197122][T13704] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.200869][T27158] netlink: 5016 bytes leftover after parsing attributes in process `syz.7.5776'. [ 606.256523][T27158] netlink: 80 bytes leftover after parsing attributes in process `syz.7.5776'. [ 606.257666][T27158] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5776'. [ 606.325058][T13703] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.402352][T13716] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 606.402398][T13716] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 606.610133][T13716] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 606.610154][T13716] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 606.959354][T27173] netlink: 'syz.7.5779': attribute type 1 has an invalid length. [ 607.037262][T27175] netlink: 27 bytes leftover after parsing attributes in process `syz.7.5779'. [ 607.072813][T27178] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5782'. [ 607.180732][T27184] netlink: 220 bytes leftover after parsing attributes in process `syz.8.5784'. [ 607.181333][T27184] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5784'. [ 607.293319][T27185] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5782'. [ 607.293404][T27185] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5782'. [ 607.322936][T27186] netlink: 'syz.6.5783': attribute type 29 has an invalid length. [ 607.342828][T27186] netlink: 'syz.6.5783': attribute type 29 has an invalid length. [ 608.002135][T27218] netlink: 'syz.7.5794': attribute type 34 has an invalid length. [ 608.148385][T27223] xt_hashlimit: size too large, truncated to 1048576 [ 608.796299][T27223] xt_hashlimit: size too large, truncated to 1048576 [ 608.838561][T27237] netlink: 'syz.5.5797': attribute type 4 has an invalid length. [ 608.842279][T27236] netlink: 'syz.5.5797': attribute type 4 has an invalid length. [ 608.907496][T27240] netlink: 'syz.5.5797': attribute type 4 has an invalid length. [ 609.395382][T27249] tc action pedit 'at' offset 5 out of bounds [ 609.395405][T27249] tc action pedit 'at' offset 5 out of bounds [ 609.395417][T27249] tc action pedit 'at' offset 5 out of bounds [ 609.395427][T27249] tc action pedit 'at' offset 5 out of bounds [ 609.395437][T27249] tc action pedit 'at' offset 5 out of bounds [ 609.395447][T27249] tc action pedit 'at' offset 5 out of bounds [ 609.395457][T27249] tc action pedit 'at' offset 5 out of bounds [ 609.395468][T27249] tc action pedit 'at' offset 5 out of bounds [ 609.395477][T27249] tc action pedit 'at' offset 5 out of bounds [ 609.395486][T27249] tc action pedit 'at' offset 5 out of bounds [ 609.395506][T27249] 0: reclassify loop, rule prio 0, protocol 800 [ 609.728365][T27257] netlink: 'syz.7.5803': attribute type 1 has an invalid length. [ 609.942522][T27264] netlink: 'syz.8.5805': attribute type 21 has an invalid length. [ 610.064843][T27264] Bluetooth: hci0: unsupported parameter 5135 [ 610.064883][T27264] Bluetooth: hci0: unsupported parameter 8192 [ 610.064912][T27264] Bluetooth: hci0: unsupported parameter 5135 [ 610.064940][T27264] Bluetooth: hci0: unsupported parameter 8192 [ 610.173879][T27264] syzkaller0: entered promiscuous mode [ 610.173933][T27264] syzkaller0: entered allmulticast mode [ 610.602799][T27280] __nla_validate_parse: 8 callbacks suppressed [ 610.602818][T27280] netlink: 88 bytes leftover after parsing attributes in process `syz.8.5811'. [ 610.629769][T27286] netlink: 32 bytes leftover after parsing attributes in process `syz.7.5809'. [ 610.671116][T27286] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5809'. [ 610.752378][T27291] netlink: 'syz.6.5816': attribute type 1 has an invalid length. [ 610.773343][T27293] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5815'. [ 611.630235][T27329] macvtap0: entered allmulticast mode [ 611.630263][T27329] veth0_macvtap: entered allmulticast mode [ 611.659206][T27327] netlink: 'syz.5.5825': attribute type 12 has an invalid length. [ 611.659227][T27327] netlink: 'syz.5.5825': attribute type 29 has an invalid length. [ 611.659240][T27327] netlink: 148 bytes leftover after parsing attributes in process `syz.5.5825'. [ 611.756064][T27337] netlink: 164 bytes leftover after parsing attributes in process `syz.5.5828'. [ 611.838783][T27343] 8021q: VLANs not supported on lo [ 612.061074][T27350] netlink: 'syz.5.5829': attribute type 28 has an invalid length. [ 612.061129][T27350] netlink: 132 bytes leftover after parsing attributes in process `syz.5.5829'. [ 612.265517][T27359] netlink: 14975 bytes leftover after parsing attributes in process `syz.7.5834'. [ 612.273547][T27359] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 612.296909][ T967] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 612.350491][T27361] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5830'. [ 612.515084][T22315] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 612.658442][T27371] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5836'. [ 612.658519][T27371] veth0_to_bond: entered allmulticast mode [ 612.779136][T27375] bridge0: port 2(bridge_slave_1) entered disabled state [ 613.120677][T27388] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 617.964901][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 631.407164][T13718] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 637.804209][ C1] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 654.444157][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 663.403719][T13718] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 670.787591][T27407] sock: sock_timestamping_bind_phc: sock not bind to device [ 671.210446][T27421] netlink: 96 bytes leftover after parsing attributes in process `syz.4.5850'. [ 671.229385][T27420] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 671.490953][T27439] netlink: 5 bytes leftover after parsing attributes in process `syz.8.5853'. [ 671.492038][T27438] netlink: 9 bytes leftover after parsing attributes in process `syz.8.5853'. [ 671.527274][T27442] Cannot find add_set index 0 as target [ 671.576802][T27439] 0{X功: renamed from gretap0 (while UP) [ 671.581337][T27439] 0{X功: entered allmulticast mode [ 671.581718][T27439] A link change request failed with some changes committed already. Interface 30{X功 may have been left with an inconsistent configuration, please check. [ 671.621396][T27438] 0{X功: entered promiscuous mode [ 671.621422][T27438] 0{X功: left allmulticast mode [ 671.760172][T27446] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5855'. [ 672.411162][T27465] validate_nla: 1 callbacks suppressed [ 672.411215][T27465] netlink: 'syz.6.5862': attribute type 1 has an invalid length. [ 672.518129][T27470] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 672.533180][T27398] Bluetooth: hci4: command 0x0406 tx timeout [ 672.616315][T27474] netlink: 27 bytes leftover after parsing attributes in process `syz.7.5866'. [ 672.616775][T27474] netlink: 27 bytes leftover after parsing attributes in process `syz.7.5866'. [ 672.617936][T27474] netlink: 27 bytes leftover after parsing attributes in process `syz.7.5866'. [ 672.618232][T27474] netlink: 27 bytes leftover after parsing attributes in process `syz.7.5866'. [ 672.621748][T27474] netlink: 27 bytes leftover after parsing attributes in process `syz.7.5866'. [ 672.622072][T27474] netlink: 27 bytes leftover after parsing attributes in process `syz.7.5866'. [ 673.339938][T27501] netlink: 'syz.5.5873': attribute type 1 has an invalid length. [ 673.456769][T27501] 8021q: adding VLAN 0 to HW filter on device bond12 [ 673.457799][T27505] bond12: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 673.460468][T27505] bond12: entered allmulticast mode [ 673.637176][T27508] bond12: (slave ip6gretap1): Enslaving as an active interface with an up link [ 673.840705][T27516] openvswitch: netlink: Missing key (keys=c0, expected=1100) [ 673.885665][T13716] wlan0: Trigger new scan to find an IBSS to join [ 674.005894][T27519] netlink: 'syz.4.5875': attribute type 3 has an invalid length. [ 674.005950][T27519] netlink: 'syz.4.5875': attribute type 1 has an invalid length. [ 674.005984][T27519] NCSI netlink: No device for ifindex 813332851 [ 674.370229][T27526] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 674.370852][T27526] batman_adv: batadv0: Adding interface: gretap2 [ 674.370867][T27526] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 674.370897][T27526] batman_adv: batadv0: Interface activated: gretap2 [ 675.412116][T27566] ip_tables: iptables: counters copy to user failed while replacing table [ 675.548866][T27579] ip_tables: iptables: counters copy to user failed while replacing table [ 676.934660][ T59] wlan0: Trigger new scan to find an IBSS to join [ 679.413462][T27575] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 679.622584][T27590] netlink: 'syz.5.5893': attribute type 1 has an invalid length. [ 679.622621][T27590] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 679.879740][T27597] __nla_validate_parse: 67 callbacks suppressed [ 679.879792][T27597] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5894'. [ 679.895068][T13700] wlan0: Creating new IBSS network, BSSID 3e:c8:a4:6e:0d:b6 [ 679.910663][T27597] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5894'. [ 679.911546][T27597] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5894'. [ 679.912362][T27597] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5894'. [ 679.928258][T27597] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5894'. [ 679.929142][T27597] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5894'. [ 679.943532][T27597] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5894'. [ 679.976075][T27597] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5894'. [ 679.979549][T27597] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5894'. [ 679.988682][T27597] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5894'. [ 680.494044][T27624] netlink: NAT flags may be given only when NAT range (SRC or DST) is also specified. [ 680.494109][T27624] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 680.545756][T27626] ICMPv6: NA: 00:00:00:00:00:00 advertised our address fe80::aa on syz_tun! [ 680.723053][T27632] netlink: 'syz.5.5901': attribute type 1 has an invalid length. [ 680.820754][T27637] netlink: 'syz.4.5903': attribute type 34 has an invalid length. [ 680.925965][T27632] block nbd296: server does not support multiple connections per device. [ 680.931885][T27632] block nbd296: shutting down sockets [ 681.309015][T27656] macsec0: entered promiscuous mode [ 681.401216][T27660] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 681.510797][T27660] tipc: Enabling of bearer rejected, failed to enable media [ 681.511531][T27658] syzkaller0: entered promiscuous mode [ 681.511551][T27658] syzkaller0: entered allmulticast mode [ 681.665246][T27666] netlink: 'syz.5.5912': attribute type 1 has an invalid length. [ 681.987867][T27677] netlink: 'syz.4.5913': attribute type 5 has an invalid length. [ 682.388395][T27695] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 682.993096][T27723] netlink: 'syz.7.5927': attribute type 4 has an invalid length. [ 683.048464][T27729] netlink: 'syz.7.5927': attribute type 4 has an invalid length. [ 683.049747][T27714] netlink: 'syz.7.5927': attribute type 4 has an invalid length. [ 683.828138][T27758] Cannot find add_set index 34 as target [ 683.875258][T27760] netlink: 'syz.5.5943': attribute type 1 has an invalid length. [ 684.590760][T27767] syzkaller1: entered promiscuous mode [ 684.590800][T27767] syzkaller1: entered allmulticast mode [ 685.302415][T27794] netdevsim netdevsim5 : renamed from netdevsim0 (while UP) [ 685.431482][T27806] netlink: 'syz.5.5953': attribute type 10 has an invalid length. [ 685.438014][ T52] Bluetooth: hci7: connection err: -111 [ 685.438715][T27805] __nla_validate_parse: 8 callbacks suppressed [ 685.438730][T27805] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5952'. [ 685.514669][T27806] team0: Port device dummy0 added [ 685.517225][T27801] syzkaller0: entered promiscuous mode [ 685.517244][T27801] syzkaller0: entered allmulticast mode [ 685.822629][ T52] Bluetooth: hci6: SCO packet for unknown connection handle 0 [ 686.395876][T27842] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5963'. [ 686.395942][T27842] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 686.499201][T27848] veth0: entered promiscuous mode [ 686.507380][T27848] veth0: left promiscuous mode [ 686.520903][T27848] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5966'. [ 686.625811][T27849] netlink: 88 bytes leftover after parsing attributes in process `syz.4.5964'. [ 686.631572][T27848] bond15: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 686.665346][T27848] bond15 (unregistering): Released all slaves [ 686.699466][T27858] geneve0: entered allmulticast mode [ 686.945941][T27861] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5970'. [ 687.182344][T27873] IPVS: sync thread started: state = MASTER, mcast_ifn = macvlan0, syncid = 0, id = 0 [ 687.197641][T27872] syzkaller1: entered promiscuous mode [ 687.197661][T27872] syzkaller1: entered allmulticast mode [ 687.826722][T27888] bond1: Removing last arp target with arp_interval on [ 687.829216][T27899] 緓9�: renamed from bridge_slave_0 (while UP) [ 688.010165][T27911] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5981'. [ 688.010187][T27911] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5981'. [ 688.179301][T27911] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5981'. [ 688.567853][T27937] netlink: 224 bytes leftover after parsing attributes in process `syz.7.5987'. [ 688.569839][T27936] syzkaller0: entered promiscuous mode [ 688.569878][T27936] syzkaller0: entered allmulticast mode [ 688.668403][T27939] veth1_to_bond: entered promiscuous mode [ 688.715937][T27930] netlink: 72 bytes leftover after parsing attributes in process `syz.5.5986'. [ 688.739691][T27938] veth1_to_bond: left promiscuous mode [ 690.448536][T28004] netlink: 'syz.5.6001': attribute type 1 has an invalid length. [ 690.840544][T28023] __nla_validate_parse: 3 callbacks suppressed [ 690.840564][T28023] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6008'. [ 690.878145][T28031] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6006'. [ 691.000647][T28033] netlink: 28 bytes leftover after parsing attributes in process `syz.8.6009'. [ 691.149215][T28035] tipc: Trying to set illegal importance in message [ 691.463143][T28052] Bluetooth: hci0: unsupported parameter 5161 [ 691.463166][T28052] Bluetooth: hci0: unsupported parameter 8192 [ 691.463180][T28052] Bluetooth: hci0: unsupported parameter 5161 [ 691.463191][T28052] Bluetooth: hci0: unsupported parameter 8192 [ 691.547624][T28059] netlink: 'syz.4.6017': attribute type 1 has an invalid length. [ 691.812031][T28064] x_tables: ip_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 692.153271][T28072] bridge0: port 1(bridge_slave_0) entered forwarding state [ 692.341935][T28080] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 692.408466][T28084] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 692.465986][T28084] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 692.541219][T28091] wg1: entered promiscuous mode [ 692.541243][T28091] wg1: entered allmulticast mode [ 692.688306][T28086] netlink: Failed to add %pB helper -22 [ 692.688355][T28086] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 692.815879][T28099] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6030'. [ 693.007819][ T52] Bluetooth: hci6: command 0x0406 tx timeout [ 693.770408][T28139] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6037'. [ 694.230087][T28168] netlink: 'syz.7.6046': attribute type 11 has an invalid length. [ 694.278301][T28170] netlink: 'syz.6.6048': attribute type 1 has an invalid length. [ 694.278356][T28170] netlink: 84 bytes leftover after parsing attributes in process `syz.6.6048'. [ 694.278389][T28170] netlink: 'syz.6.6048': attribute type 2 has an invalid length. [ 694.278417][T28170] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6048'. [ 694.631868][T28214] x_tables: duplicate underflow at hook 1 [ 694.981350][T28150] workqueue: Failed to create a rescuer kthread for wq "nfc24_nci_tx_wq": -EINTR [ 695.318126][T28265] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6054'. [ 695.408386][T13718] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 695.443109][T28267] FAULT_INJECTION: forcing a failure. [ 695.443109][T28267] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 695.443141][T28267] CPU: 1 UID: 0 PID: 28267 Comm: syz.4.6056 Not tainted syzkaller #0 PREEMPT(full) [ 695.443163][T28267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 695.443173][T28267] Call Trace: [ 695.443181][T28267] [ 695.443189][T28267] dump_stack_lvl+0xe8/0x150 [ 695.443221][T28267] should_fail_ex+0x410/0x560 [ 695.443248][T28267] _copy_from_iter+0x1d3/0x1660 [ 695.443268][T28267] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 695.443292][T28267] ? __pfx_policy_nodemask+0x10/0x10 [ 695.443316][T28267] ? lock_acquire+0x115/0x350 [ 695.443334][T28267] ? __pfx__copy_from_iter+0x10/0x10 [ 695.443358][T28267] ? alloc_pages_mpol+0x256/0x390 [ 695.443389][T28267] copy_page_from_iter+0x219/0x2d0 [ 695.443415][T28267] tun_get_user+0x1c16/0x44d0 [ 695.443439][T28267] ? tun_get_user+0x70a/0x44d0 [ 695.443474][T28267] ? aa_file_perm+0x4ed/0x15f0 [ 695.443500][T28267] ? __pfx_tun_get_user+0x10/0x10 [ 695.443522][T28267] ? __lock_acquire+0x747/0x2de0 [ 695.443556][T28267] ? ref_tracker_alloc+0x341/0x4b0 [ 695.443576][T28267] ? lock_acquire+0x115/0x350 [ 695.443595][T28267] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 695.443618][T28267] ? lock_acquire+0x115/0x350 [ 695.443637][T28267] ? tun_get+0x1c/0x2f0 [ 695.443661][T28267] ? tun_get+0x1c/0x2f0 [ 695.443680][T28267] ? tun_get+0x1c/0x2f0 [ 695.443704][T28267] tun_chr_write_iter+0x113/0x200 [ 695.443728][T28267] vfs_write+0x612/0xba0 [ 695.443764][T28267] ? __pfx_vfs_write+0x10/0x10 [ 695.443801][T28267] ? __fget_files+0x2a/0x420 [ 695.443842][T28267] ksys_write+0x150/0x270 [ 695.443872][T28267] ? __pfx_ksys_write+0x10/0x10 [ 695.443910][T28267] do_syscall_64+0x166/0x520 [ 695.443933][T28267] ? trace_irq_disable+0x3b/0x140 [ 695.443952][T28267] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 695.443972][T28267] ? clear_bhb_loop+0x70/0xc0 [ 695.443995][T28267] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 695.444014][T28267] RIP: 0033:0x7fa75f75e98e [ 695.444032][T28267] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 695.444047][T28267] RSP: 002b:00007fa760590fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 695.444068][T28267] RAX: ffffffffffffffda RBX: 00007fa7605916c0 RCX: 00007fa75f75e98e [ 695.444083][T28267] RDX: 000000000000006a RSI: 0000200000000040 RDI: 00000000000000c8 [ 695.444095][T28267] RBP: 00007fa760591090 R08: 0000000000000000 R09: 0000000000000000 [ 695.444108][T28267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 695.444119][T28267] R13: 00007fa75fa26038 R14: 00007fa75fa25fa0 R15: 00007fffca9e1bc8 [ 695.444149][T28267] [ 696.043920][ C1] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 697.188216][T28303] netlink: 88 bytes leftover after parsing attributes in process `syz.7.6069'. [ 697.316663][T28305] block nbd0: Unsupported socket: should be TCP or UNIX. [ 697.413489][T28312] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6070'. [ 697.422785][T28317] netlink: 13 bytes leftover after parsing attributes in process `syz.6.6073'. [ 697.892428][T28337] netlink: 44 bytes leftover after parsing attributes in process `syz.7.6078'. [ 697.892453][T28337] netlink: 43 bytes leftover after parsing attributes in process `syz.7.6078'. [ 697.892466][T28337] netlink: 'syz.7.6078': attribute type 6 has an invalid length. [ 697.892476][T28337] netlink: 'syz.7.6078': attribute type 5 has an invalid length. [ 697.892485][T28337] netlink: 43 bytes leftover after parsing attributes in process `syz.7.6078'. [ 697.911173][T28338] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6077'. [ 697.969263][T28336] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 697.971047][T28336] gretap2: entered promiscuous mode [ 697.971070][T28336] gretap2: entered allmulticast mode [ 698.426647][T28351] FAULT_INJECTION: forcing a failure. [ 698.426647][T28351] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 698.426697][T28351] CPU: 0 UID: 0 PID: 28351 Comm: syz.8.6081 Not tainted syzkaller #0 PREEMPT(full) [ 698.426719][T28351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 698.426731][T28351] Call Trace: [ 698.426738][T28351] [ 698.426745][T28351] dump_stack_lvl+0xe8/0x150 [ 698.426774][T28351] should_fail_ex+0x410/0x560 [ 698.426798][T28351] _copy_to_user+0x31/0xb0 [ 698.426825][T28351] simple_read_from_buffer+0xe1/0x170 [ 698.426856][T28351] proc_fail_nth_read+0x1bb/0x230 [ 698.426882][T28351] ? common_file_perm+0x20e/0x2b0 [ 698.426905][T28351] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 698.426935][T28351] ? rw_verify_area+0x24a/0x4c0 [ 698.426960][T28351] ? tun_chr_write_iter+0x18a/0x200 [ 698.426981][T28351] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 698.427007][T28351] vfs_read+0x213/0xa80 [ 698.427045][T28351] ? __pfx___mutex_lock+0x10/0x10 [ 698.427068][T28351] ? __pfx_vfs_read+0x10/0x10 [ 698.427094][T28351] ? __fget_files+0x2a/0x420 [ 698.427122][T28351] ? __fget_files+0x3a2/0x420 [ 698.427144][T28351] ? __fget_files+0x2a/0x420 [ 698.427175][T28351] ksys_read+0x150/0x270 [ 698.427203][T28351] ? __pfx_ksys_read+0x10/0x10 [ 698.427238][T28351] do_syscall_64+0x166/0x520 [ 698.427260][T28351] ? trace_irq_disable+0x3b/0x140 [ 698.427279][T28351] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 698.427298][T28351] ? clear_bhb_loop+0x70/0xc0 [ 698.427322][T28351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 698.427340][T28351] RIP: 0033:0x7ff94a75e98e [ 698.427358][T28351] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 698.427374][T28351] RSP: 002b:00007ff94b67afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 698.427394][T28351] RAX: ffffffffffffffda RBX: 00007ff94b67b6c0 RCX: 00007ff94a75e98e [ 698.427408][T28351] RDX: 000000000000000f RSI: 00007ff94b67b0a0 RDI: 0000000000000004 [ 698.427419][T28351] RBP: 00007ff94b67b090 R08: 0000000000000000 R09: 0000000000000000 [ 698.427430][T28351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 698.427442][T28351] R13: 00007ff94aa26038 R14: 00007ff94aa25fa0 R15: 00007ffd00fc7118 [ 698.427473][T28351] [ 698.986898][T28368] netlink: 'syz.7.6089': attribute type 4 has an invalid length. [ 699.000570][T28368] netlink: 'syz.7.6089': attribute type 4 has an invalid length. [ 700.583121][T28432] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6102'. [ 700.767693][T28432] bond15: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 700.794339][T28432] bond15 (unregistering): Released all slaves [ 700.991647][T28442] bond4 (unregistering): Released all slaves [ 701.841401][T28479] netlink: 20 bytes leftover after parsing attributes in process `syz.8.6113'. [ 702.282217][T28501] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6116'. [ 702.473074][T28508] netlink: 16 bytes leftover after parsing attributes in process `syz.8.6119'. [ 702.727161][T28515] x_tables: duplicate underflow at hook 3 [ 702.728193][T28516] netlink: 168 bytes leftover after parsing attributes in process `syz.6.6123'. [ 702.960854][T28528] netlink: 'syz.6.6126': attribute type 32 has an invalid length. [ 702.960876][T28528] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6126'. [ 703.013468][T28528] bond0: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 703.078839][T28530] netlink: 92 bytes leftover after parsing attributes in process `syz.7.6128'. [ 703.256719][ T52] Bluetooth: hci7: command 0x0406 tx timeout [ 703.449891][T28550] netlink: 'syz.5.6133': attribute type 2 has an invalid length. [ 703.449913][T28550] netlink: 244 bytes leftover after parsing attributes in process `syz.5.6133'. [ 703.556200][T28556] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6136'. [ 704.278399][T28585] netlink: 16 bytes leftover after parsing attributes in process `syz.8.6144'. [ 704.409536][T28588] syzkaller0: entered promiscuous mode [ 704.409559][T28588] syzkaller0: entered allmulticast mode [ 704.989231][T28606] netlink: 'syz.7.6149': attribute type 16 has an invalid length. [ 704.989253][T28606] netlink: ** replaying previous printk message ** [ 704.989253][T28606] netlink: 'syz.7.6149': attribute type 17 has an invalid length. [ 705.005295][ T33] INFO: task syz.3.5311:25336 blocked for more than 143 seconds. [ 705.005317][ T33] Not tainted syzkaller #0 [ 705.005325][ T33] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 705.005332][ T33] task:syz.3.5311 state:D stack:27328 pid:25336 tgid:25334 ppid:17912 task_flags:0x400140 flags:0x00080002 [ 705.005377][ T33] Call Trace: [ 705.005384][ T33] [ 705.005394][ T33] __schedule+0x17db/0x58f0 [ 705.005444][ T33] ? __pfx___schedule+0x10/0x10 [ 705.005467][ T33] ? schedule+0x90/0x2b0 [ 705.005485][ T33] schedule+0x164/0x2b0 [ 705.005502][ T33] schedule_preempt_disabled+0x13/0x30 [ 705.005517][ T33] __mutex_lock+0x7c1/0x1550 [ 705.005539][ T33] ? __mutex_lock+0x5d4/0x1550 [ 705.005558][ T33] ? nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 705.005579][ T33] ? __pfx___mutex_lock+0x10/0x10 [ 705.005594][ T33] ? __kasan_kmalloc+0x93/0xb0 [ 705.005616][ T33] ? __nla_validate_parse+0x2429/0x2d50 [ 705.005633][ T33] ? do_syscall_64+0x166/0x520 [ 705.005649][ T33] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 705.005671][ T33] nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 705.005693][ T33] ? __pfx___nla_validate_parse+0x10/0x10 [ 705.005724][ T33] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 705.005741][ T33] ? trace_kmalloc+0x2a/0xf0 [ 705.005758][ T33] ? __kmalloc_noprof+0x38c/0x720 [ 705.005774][ T33] ? __nla_parse+0x40/0x60 [ 705.005794][ T33] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 705.005813][ T33] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 705.005836][ T33] genl_family_rcv_msg_doit+0x233/0x340 [ 705.005859][ T33] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 705.005886][ T33] ? bpf_lsm_capable+0x9/0x20 [ 705.005898][ T33] ? security_capable+0x7e/0x2c0 [ 705.005920][ T33] genl_rcv_msg+0x614/0x7a0 [ 705.005942][ T33] ? __pfx_genl_rcv_msg+0x10/0x10 [ 705.005959][ T33] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 705.005987][ T33] netlink_rcv_skb+0x226/0x4a0 [ 705.006010][ T33] ? __pfx_genl_rcv_msg+0x10/0x10 [ 705.006028][ T33] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 705.006060][ T33] ? down_read+0x2be/0x330 [ 705.006081][ T33] genl_rcv+0x28/0x40 [ 705.006095][ T33] netlink_unicast+0x7bd/0x940 [ 705.006124][ T33] netlink_sendmsg+0x813/0xb40 [ 705.006153][ T33] ? __pfx_netlink_sendmsg+0x10/0x10 [ 705.006180][ T33] ? apparmor_socket_sendmsg+0x98/0x360 [ 705.006198][ T33] ? __pfx_netlink_sendmsg+0x10/0x10 [ 705.006219][ T33] sock_sendmsg_nosec+0x13a/0x180 [ 705.006237][ T33] ____sys_sendmsg+0x54e/0x850 [ 705.006263][ T33] ? __pfx_____sys_sendmsg+0x10/0x10 [ 705.006301][ T33] ? import_iovec+0x73/0xa0 [ 705.006325][ T33] ___sys_sendmsg+0x2a5/0x360 [ 705.006343][ T33] ? __lock_acquire+0x747/0x2de0 [ 705.006362][ T33] ? __pfx____sys_sendmsg+0x10/0x10 [ 705.006383][ T33] ? futex_wake+0x51b/0x5f0 [ 705.006426][ T33] ? __fget_files+0x2a/0x420 [ 705.006453][ T33] ? __fget_files+0x3a2/0x420 [ 705.006480][ T33] __x64_sys_sendmsg+0x1b1/0x290 [ 705.006504][ T33] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 705.006543][ T33] do_syscall_64+0x166/0x520 [ 705.006560][ T33] ? trace_irq_disable+0x3b/0x140 [ 705.006577][ T33] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 705.006597][ T33] ? clear_bhb_loop+0x70/0xc0 [ 705.006621][ T33] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 705.006641][ T33] RIP: 0033:0x7fa7bcb9e159 [ 705.006659][ T33] RSP: 002b:00007fa7bdae9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 705.006706][ T33] RAX: ffffffffffffffda RBX: 00007fa7bce25fa0 RCX: 00007fa7bcb9e159 [ 705.006721][ T33] RDX: 000000000000c000 RSI: 0000200000000100 RDI: 0000000000000004 [ 705.006734][ T33] RBP: 00007fa7bcc3506b R08: 0000000000000000 R09: 0000000000000000 [ 705.006747][ T33] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 705.006759][ T33] R13: 00007fa7bce26038 R14: 00007fa7bce25fa0 R15: 00007ffd1ad3c538 [ 705.006789][ T33] [ 705.006798][ T33] INFO: task syz.2.5397:25616 blocked for more than 143 seconds. [ 705.006812][ T33] Not tainted syzkaller #0 [ 705.006821][ T33] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 705.006829][ T33] task:syz.2.5397 state:D stack:25624 pid:25616 tgid:25611 ppid:15942 task_flags:0x400140 flags:0x00080002 [ 705.006868][ T33] Call Trace: [ 705.006873][ T33] [ 705.006883][ T33] __schedule+0x17db/0x58f0 [ 705.006922][ T33] ? __pfx___schedule+0x10/0x10 [ 705.006944][ T33] ? schedule+0x90/0x2b0 [ 705.006962][ T33] schedule+0x164/0x2b0 [ 705.006979][ T33] schedule_preempt_disabled+0x13/0x30 [ 705.006995][ T33] __mutex_lock+0x7c1/0x1550 [ 705.007016][ T33] ? __mutex_lock+0x5d4/0x1550 [ 705.007037][ T33] ? nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 705.007058][ T33] ? __pfx___mutex_lock+0x10/0x10 [ 705.007075][ T33] ? __kasan_kmalloc+0x93/0xb0 [ 705.007098][ T33] ? __nla_validate_parse+0x2429/0x2d50 [ 705.007118][ T33] ? do_syscall_64+0x166/0x520 [ 705.007135][ T33] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 705.007160][ T33] nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 705.007183][ T33] ? __pfx___nla_validate_parse+0x10/0x10 [ 705.007217][ T33] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 705.007237][ T33] ? trace_kmalloc+0x2a/0xf0 [ 705.007255][ T33] ? __kmalloc_noprof+0x38c/0x720 [ 705.007272][ T33] ? __nla_parse+0x40/0x60 [ 705.007295][ T33] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 705.007315][ T33] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 705.007341][ T33] genl_family_rcv_msg_doit+0x233/0x340 [ 705.007367][ T33] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 705.007399][ T33] ? bpf_lsm_capable+0x9/0x20 [ 705.007414][ T33] ? security_capable+0x7e/0x2c0 [ 705.007446][ T33] genl_rcv_msg+0x614/0x7a0 [ 705.007468][ T33] ? __pfx_genl_rcv_msg+0x10/0x10 [ 705.007484][ T33] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 705.007514][ T33] netlink_rcv_skb+0x226/0x4a0 [ 705.007537][ T33] ? __pfx_genl_rcv_msg+0x10/0x10 [ 705.007558][ T33] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 705.007594][ T33] ? down_read+0x2be/0x330 [ 705.007623][ T33] genl_rcv+0x28/0x40 [ 705.007643][ T33] netlink_unicast+0x7bd/0x940 [ 705.007681][ T33] netlink_sendmsg+0x813/0xb40 [ 705.007715][ T33] ? __pfx_netlink_sendmsg+0x10/0x10 [ 705.007748][ T33] ? apparmor_socket_sendmsg+0x98/0x360 [ 705.007770][ T33] ? __pfx_netlink_sendmsg+0x10/0x10 [ 705.007795][ T33] sock_sendmsg_nosec+0x13a/0x180 [ 705.007814][ T33] ____sys_sendmsg+0x54e/0x850 [ 705.007837][ T33] ? __pfx_____sys_sendmsg+0x10/0x10 [ 705.007862][ T33] ? import_iovec+0x73/0xa0 [ 705.007883][ T33] ___sys_sendmsg+0x2a5/0x360 [ 705.007901][ T33] ? __lock_acquire+0x747/0x2de0 [ 705.007920][ T33] ? __pfx____sys_sendmsg+0x10/0x10 [ 705.007942][ T33] ? futex_wait+0x2a2/0x390 [ 705.007989][ T33] ? __fget_files+0x2a/0x420 [ 705.008009][ T33] ? __fget_files+0x3a2/0x420 [ 705.008038][ T33] __x64_sys_sendmsg+0x1b1/0x290 [ 705.008062][ T33] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 705.008100][ T33] do_syscall_64+0x166/0x520 [ 705.008119][ T33] ? trace_irq_disable+0x3b/0x140 [ 705.008135][ T33] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 705.008151][ T33] ? clear_bhb_loop+0x70/0xc0 [ 705.008171][ T33] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 705.008188][ T33] RIP: 0033:0x7fb8a659e159 [ 705.008202][ T33] RSP: 002b:00007fb8a7460028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 705.008218][ T33] RAX: ffffffffffffffda RBX: 00007fb8a6826090 RCX: 00007fb8a659e159 [ 705.008231][ T33] RDX: 000000000000c000 RSI: 0000200000000100 RDI: 0000000000000004 [ 705.008242][ T33] RBP: 00007fb8a663506b R08: 0000000000000000 R09: 0000000000000000 [ 705.008253][ T33] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 705.008263][ T33] R13: 00007fb8a6826128 R14: 00007fb8a6826090 R15: 00007ffdbdf46a68 [ 705.008299][ T33] [ 705.008361][ T33] [ 705.008361][ T33] Showing all locks held in the system: [ 705.008370][ T33] locks held by pr/ttyS0/16: 4, last CPU#0: [ 705.008382][ T33] #0: ffffffff8ec364f8 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60 [ 705.008428][ T33] #1: ffffc90000007cc0 ((&req->rsk_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd5/0x5f0 [ 705.008484][ T33] #2: ffff8880b8639620 (bh_lock){+.-.}-{3:3}, at: napi_skb_cache_get+0x16c/0x7e0 [ 705.008531][ T33] #3: ffff8880b8628298 (hrtimer_bases.lock){-.-.}-{2:2}, at: ktime_get+0x45/0x220 [ 705.008575][ T33] locks held by khungtaskd/33: 1, last CPU#1: [ 705.008588][ T33] #0: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 705.008649][ T33] locks held by getty/5374: 2, on CPU#0: [ 705.008659][ T33] #0: ffff88803544d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 705.008697][ T33] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 705.008744][ T33] locks held by kworker/u8:23/13703: 2, on CPU#0: [ 705.008755][ T33] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 705.008795][ T33] #1: ffffc9000481fc40 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 705.008836][ T33] locks held by kworker/u8:34/13718: 3, on CPU#0: [ 705.008847][ T33] #0: ffff888031d19140 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 705.008889][ T33] #1: ffffc900055afc40 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 705.008930][ T33] #2: ffffffff90253400 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x116/0x15c0 [ 705.008990][ T33] locks held by syz.0.5050/24372: 2, on CPU#1: [ 705.009001][ T33] #0: ffffffff902c42e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 705.009039][ T33] #1: ffffffff8f09f580 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 705.009082][ T33] locks held by syz.3.5311/25336: 2, on CPU#1: [ 705.009094][ T33] #0: ffffffff902c42e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 705.009133][ T33] #1: ffffffff8f09f580 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 705.009169][ T33] locks held by syz.2.5397/25616: 2, on CPU#1: [ 705.009179][ T33] #0: ffffffff902c42e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 705.009219][ T33] #1: ffffffff8f09f580 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 705.009265][ T33] locks held by syz.1.5520/26102: 2, on CPU#0: [ 705.009279][ T33] #0: ffffffff902c42e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 705.009324][ T33] #1: ffffffff8f09f580 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 705.009376][ T33] locks held by udevd/28271: 1, last CPU#0: [ 705.009388][ T33] #0: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 705.009433][ T33] locks held by syz.5.6143/28573: 1, on CPU#1: [ 705.009454][ T33] #0: ffffffff90253400 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 705.009497][ T33] locks held by syz.6.6145/28587: 1, last CPU#1: [ 705.009510][ T33] #0: ffffffff90253400 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 705.009553][ T33] locks held by syz.7.6149/28599: 2, on CPU#1: [ 705.009566][ T33] #0: ffffffff907a7fa0 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 705.009619][ T33] #1: ffffffff90253400 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc10/0x1c30 [ 705.009658][ T33] locks held by syz.7.6149/28603: 1, on CPU#1: [ 705.009668][ T33] #0: ffffffff90253400 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x7a4/0x1150 [ 705.009702][ T33] locks held by syz.7.6149/28606: 1, on CPU#1: [ 705.009712][ T33] #0: ffffffff90253400 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc10/0x1c30 [ 705.009747][ T33] locks held by modprobe/28600: 1, last CPU#0: [ 705.009757][ T33] #0: ffff8880777803b8 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x2d8/0x9f0 [ 705.009797][ T33] locks held by syz.4.6150/28602: 2, last CPU#1: [ 705.009808][ T33] #0: ffff88807d5cc378 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 705.009849][ T33] #1: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 705.009892][ T33] locks held by syz.8.6151/28607: 4, last CPU#1: [ 705.009901][ T33] #0: ffffffff90256d40 (bpf_dispatcher_xdp.mutex){+.+.}-{4:4}, at: bpf_dispatcher_change_prog+0xc2/0xf20 [ 705.009941][ T33] #1: ffffffff8ebe9930 (cpu_hotplug_lock){++++}-{0:0}, at: __static_call_update+0x9b/0x620 [ 705.009983][ T33] #2: ffffffff8ee2e1a0 (static_call_mutex){+.+.}-{4:4}, at: __static_call_update+0xa9/0x620 [ 705.010024][ T33] #3: ffffffff8ebff6e0 (text_mutex){+.+.}-{4:4}, at: arch_static_call_transform+0x2d/0xc0 [ 705.012515][ T33] [ 705.012524][ T33] ============================================= [ 705.012524][ T33] [ 705.012545][ T33] NMI backtrace for cpu 1 [ 705.012558][ T33] CPU: 1 UID: 0 PID: 33 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 705.012577][ T33] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 705.012588][ T33] Call Trace: [ 705.012595][ T33] [ 705.012602][ T33] dump_stack_lvl+0xe8/0x150 [ 705.012630][ T33] nmi_cpu_backtrace+0x274/0x2d0 [ 705.012658][ T33] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 705.012688][ T33] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 705.012719][ T33] sys_info+0x135/0x170 [ 705.012744][ T33] watchdog+0xfd7/0x1030 [ 705.012769][ T33] ? watchdog+0x1c7/0x1030 [ 705.012793][ T33] kthread+0x38b/0x480 [ 705.012812][ T33] ? __pfx_watchdog+0x10/0x10 [ 705.012828][ T33] ? __pfx_kthread+0x10/0x10 [ 705.012848][ T33] ret_from_fork+0x514/0xb70 [ 705.012868][ T33] ? __pfx_ret_from_fork+0x10/0x10 [ 705.012886][ T33] ? __switch_to+0xc89/0x1420 [ 705.012913][ T33] ? __pfx_kthread+0x10/0x10 [ 705.012932][ T33] ret_from_fork_asm+0x1a/0x30 [ 705.012972][ T33] [ 705.012980][ T33] Sending NMI from CPU 1 to CPUs 0: [ 705.013013][ C0] NMI backtrace for cpu 0 [ 705.013027][ C0] CPU: 0 UID: 0 PID: 16 Comm: pr/ttyS0 Not tainted syzkaller #0 PREEMPT(full) [ 705.013047][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 705.013058][ C0] RIP: 0010:seqcount_lockdep_reader_access+0xeb/0x100 [ 705.013081][ C0] Code: 00 00 75 11 e8 b6 47 13 00 4d 85 ff 75 16 e8 ac 47 13 00 eb 15 e8 a5 47 13 00 e8 e0 29 31 0a 4d 85 ff 74 ea e8 96 47 13 00 fb <5b> 41 5e 41 5f c3 cc cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 90 [ 705.013097][ C0] RSP: 0000:ffffc90000007000 EFLAGS: 00000002 [ 705.013113][ C0] RAX: ffffffff81b48ad4 RBX: 0000000000000000 RCX: ffff88801e298000 [ 705.013127][ C0] RDX: 0000000001000101 RSI: 0000000001000101 RDI: 0000000000000000 [ 705.013140][ C0] RBP: ffff8880b86284a8 R08: 0000000001000101 R09: 0000000000000001 [ 705.013153][ C0] R10: ffff8880348e6308 R11: ffffed100691cc63 R12: dffffc0000000000 [ 705.013167][ C0] R13: ffff8880b86284a8 R14: ffffffff81b50bed R15: 0000000000000000 [ 705.013181][ C0] FS: 0000000000000000(0000) GS:ffff888124cce000(0000) knlGS:0000000000000000 [ 705.013197][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 705.013209][ C0] CR2: 00007f0091aa1e9c CR3: 000000007ebb6000 CR4: 00000000003526f0 [ 705.013226][ C0] Call Trace: [ 705.013233][ C0] [ 705.013241][ C0] ktime_get_update_offsets_now+0x5d/0x3e0 [ 705.013270][ C0] hrtimer_interrupt+0x543/0xaa0 [ 705.013311][ C0] __sysvec_apic_timer_interrupt+0x102/0x430 [ 705.013335][ C0] sysvec_apic_timer_interrupt+0x52/0xc0 [ 705.013358][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 705.013378][ C0] RIP: 0010:kasan_check_range+0x0/0x2c0 [ 705.013401][ C0] Code: fe 90 0f 0b 48 89 df 48 c7 c6 16 e1 69 8e e8 97 5f f0 fe 90 0f 0b cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <0f> 1f 40 d6 55 41 57 41 56 41 55 41 54 53 b0 01 48 85 f6 0f 84 ae [ 705.013417][ C0] RSP: 0000:ffffc900000072c8 EFLAGS: 00000246 [ 705.013432][ C0] RAX: ffffffff89a9cd5c RBX: 0000000000000080 RCX: ffffffff89a9cd6b [ 705.013446][ C0] RDX: 0000000000000001 RSI: 0000000000000080 RDI: ffff888066cb48c0 [ 705.013459][ C0] RBP: 0000000000000000 R08: 00000000ffffffff R09: 0000000000000000 [ 705.013471][ C0] R10: ffff888066cb48c0 R11: ffffffff81b28ab0 R12: 0000000000000140 [ 705.013485][ C0] R13: 00000000ffffffff R14: ffff888066cb48c0 R15: 00000000ffffffff [ 705.013501][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 705.013520][ C0] ? __alloc_skb+0x1ec/0x7a0 [ 705.013541][ C0] ? __alloc_skb+0x1fb/0x7a0 [ 705.013563][ C0] __asan_memset+0x22/0x50 [ 705.013591][ C0] __alloc_skb+0x1fb/0x7a0 [ 705.013615][ C0] __tcp_send_ack+0xaf/0x4f0 [ 705.013636][ C0] tcp_validate_incoming+0x1483/0x2440 [ 705.013662][ C0] ? ktime_get+0x45/0x220 [ 705.013684][ C0] tcp_rcv_established+0x8d6/0x2940 [ 705.013712][ C0] ? sk_filter_trim_cap+0x192/0xd70 [ 705.013748][ C0] ? __pfx_tcp_rcv_established+0x10/0x10 [ 705.013776][ C0] tcp_v6_do_rcv+0x8bd/0x1cc0 [ 705.013811][ C0] tcp_v6_rcv+0x2496/0x2d90 [ 705.013859][ C0] ? __pfx_tcp_v6_rcv+0x10/0x10 [ 705.013889][ C0] ? __pfx_nf_nat_ipv6_fn+0x10/0x10 [ 705.013924][ C0] ? __pfx_tcp_v6_rcv+0x10/0x10 [ 705.013958][ C0] ip6_protocol_deliver_rcu+0xab9/0x1680 [ 705.014003][ C0] ip6_input_finish+0x191/0x370 [ 705.014038][ C0] NF_HOOK+0x336/0x3c0 [ 705.014064][ C0] ? __pfx_ip6_input_finish+0x10/0x10 [ 705.014092][ C0] ? NF_HOOK+0x9e/0x3c0 [ 705.014116][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 705.014142][ C0] ? __pfx_ip6_input_finish+0x10/0x10 [ 705.014176][ C0] ip6_input+0x16a/0x270 [ 705.014200][ C0] ? ip6_input+0x23/0x270 [ 705.014225][ C0] NF_HOOK+0x336/0x3c0 [ 705.014251][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 705.014276][ C0] ? NF_HOOK+0x9e/0x3c0 [ 705.014301][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 705.014327][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 705.014361][ C0] process_backlog+0x795/0x18b0 [ 705.014386][ C0] ? process_backlog+0x3de/0x18b0 [ 705.014417][ C0] __napi_poll+0xaa/0x330 [ 705.014439][ C0] net_rx_action+0x61d/0xf50 [ 705.014468][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 705.014489][ C0] ? xfrm_dev_backlog+0x24b/0x3c0 [ 705.014530][ C0] ? net_tx_action+0xbff/0xc30 [ 705.014554][ C0] handle_softirqs+0x226/0x860 [ 705.014582][ C0] ? __irq_exit_rcu+0xcb/0x220 [ 705.014612][ C0] __irq_exit_rcu+0xcb/0x220 [ 705.014638][ C0] irq_exit_rcu+0x9/0x30 [ 705.014662][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 705.014687][ C0] [ 705.014694][ C0] [ 705.014702][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 705.014724][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80 [ 705.014748][ C0] Code: f7 e8 2d 68 bb f5 f7 c3 00 02 00 00 74 05 e8 90 b2 e7 f5 9c 58 a9 00 02 00 00 75 29 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 94 75 ac f5 65 48 8b 05 0c b1 ac 07 48 85 c0 74 18 5b 41 5e e9 [ 705.014765][ C0] RSP: 0000:ffffc90000157ca8 EFLAGS: 00000206 [ 705.014781][ C0] RAX: 0000000000000002 RBX: 0000000000000206 RCX: 8000000000000001 [ 705.014795][ C0] RDX: 0000000000000000 RSI: ffffffff8e413ed7 RDI: 0000000000000001 [ 705.014809][ C0] RBP: ffffc90000157e18 R08: ffffffff907a417f R09: 1ffffffff20f482f [ 705.014825][ C0] R10: dffffc0000000000 R11: fffffbfff20f4830 R12: 0000000000000002 [ 705.014839][ C0] R13: ffff88801e298000 R14: ffffffff9ad3d080 R15: dffffc0000000000 [ 705.014867][ C0] nbcon_kthread_func+0x6c4/0x880 [ 705.014893][ C0] ? nbcon_kthread_func+0x163/0x880 [ 705.014914][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 705.014947][ C0] ? __kthread_parkme+0x71/0x1f0 [ 705.014978][ C0] ? __kthread_parkme+0x199/0x1f0 [ 705.015010][ C0] kthread+0x38b/0x480 [ 705.015030][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 705.015050][ C0] ? __pfx_kthread+0x10/0x10 [ 705.015071][ C0] ret_from_fork+0x514/0xb70 [ 705.015091][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 705.015111][ C0] ? __switch_to+0xc89/0x1420 [ 705.015154][ C0] ? __pfx_kthread+0x10/0x10 [ 705.015174][ C0] ret_from_fork_asm+0x1a/0x30 [ 705.015210][ C0] [ 705.019270][ T33] Kernel panic - not syncing: hung_task: blocked tasks [ 706.927933][ T33] CPU: 1 UID: 0 PID: 33 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 706.937037][ T33] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 706.947087][ T33] Call Trace: [ 706.950371][ T33] [ 706.953391][ T33] vpanic+0x56d/0xa60 [ 706.957404][ T33] ? __pfx___schedule+0x10/0x10 [ 706.962253][ T33] ? __pfx_vpanic+0x10/0x10 [ 706.966772][ T33] panic+0xc5/0xd0 [ 706.970512][ T33] ? __pfx_panic+0x10/0x10 [ 706.974958][ T33] ? preempt_schedule_common+0x7f/0xd0 [ 706.980421][ T33] ? preempt_schedule_thunk+0x16/0x40 [ 706.985795][ T33] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 706.991964][ T33] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 706.998127][ T33] watchdog+0x1030/0x1030 [ 707.002464][ T33] ? watchdog+0x1c7/0x1030 [ 707.006890][ T33] kthread+0x38b/0x480 [ 707.010967][ T33] ? __pfx_watchdog+0x10/0x10 [ 707.015640][ T33] ? __pfx_kthread+0x10/0x10 [ 707.020235][ T33] ret_from_fork+0x514/0xb70 [ 707.024828][ T33] ? __pfx_ret_from_fork+0x10/0x10 [ 707.029928][ T33] ? __switch_to+0xc89/0x1420 [ 707.034608][ T33] ? __pfx_kthread+0x10/0x10 [ 707.039193][ T33] ret_from_fork_asm+0x1a/0x30 [ 707.043975][ T33] [ 707.047239][ T33] Kernel Offset: disabled [ 707.051554][ T33] Rebooting in 86400 seconds..