last executing test programs: 1m14.104282056s ago: executing program 3 (id=3068): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000140)={0x1c, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) r1 = socket$inet(0x2, 0x2, 0x1) bind$inet(r1, &(0x7f0000000640)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)=@newsa={0x16c, 0x10, 0x713, 0x70bd26, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in=@dev={0xac, 0x14, 0x14, 0x13}, 0x4e22, 0x1, 0x2, 0x3, 0x2, 0x0, 0x0, 0x3a, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x32}, @in6=@local, {0x0, 0x0, 0x8, 0xa, 0x6, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3, 0xfffffffffffffff8}, {0xc, 0x0, 0x2}, 0x70bd29, 0x0, 0x2, 0x1, 0x0, 0x28}, [@algo_aead={0x68, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0xe0, 0x80, "316f74eeac053deb73fc018493cc121927a9bca207141b9a451c00aa"}}, @tfcpad={0x8, 0x16, 0x4}, @offload={0xc, 0x1c, {0x0, 0x1}}]}, 0x16c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 1m13.468814755s ago: executing program 3 (id=3076): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$nci(r0, &(0x7f0000000040)=@NCI_OP_RF_DISCOVER_SELECT_RSP={0x1, 0x1, 0x2, 0x4, 0xf, 0x1}, 0x4) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = accept4$ax25(0xffffffffffffffff, &(0x7f0000000080)={{0x3, @rose}, [@remote, @remote, @rose, @rose, @netrom, @remote, @remote, @default]}, &(0x7f0000000100)=0x48, 0x0) setsockopt$ax25_int(r2, 0x101, 0x1, &(0x7f0000000140)=0x55, 0x4) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x37}}}, 0x2, 0x200, 0x0, 0x4e52, 0x5feb328078d93d85, 0x7, 0x3}, &(0x7f0000000240)=0x9c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000280)={r3, 0x4, 0xd2, "252cb60f2f1b4f69344e2290f9c37db0021322fb9a14d4f867793c3707964fe642bb13232f54fdda5b6bf8f99bc5ad944d58791253b498e88de058208e611df3a7a1ce6ffb3d14be33b200ee4272478ca2b79c3d308fc73b079c1dbf39308e004019eb163ecf4626863ae807c7c1adc4bd5659ccc22a27da9bd62440541e38b93c7cc6ee63aded22b312bb32460ede676dcd201845e843edaed58bdf104dfe7665c3129e49c8413b9442f0887662de18892db4a05994943d1cfc7364ab408b340f41340c40a0bbfe29223cdceef5eed789d5"}, 0xda) setsockopt(r2, 0x37b4cc51, 0x9, &(0x7f0000000380)="f7e84d89a98b831c12a326c02049c8d7", 0x10) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x3c, 0x2, 0x3, 0x301, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x401}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x3, 0x2}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0xfffffff8}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x7}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb) connect$ax25(r4, &(0x7f00000004c0)={{0x3, @default, 0x4}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) write(r1, &(0x7f0000000540)="86b90ec26dc0519d4f41adcc1f3b4b25f05439bd11c23055691b077e4155e7f400dba2827c1bde66cae95db37fed26e2d96ee143bfdbc83ce7dbdd4955bf429fb7a3d62b69fc35c7db1b3ced4426", 0x4e) connect$ax25(r4, &(0x7f00000005c0)={{0x3, @default}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000640)={r3, 0x7fff}, 0x8) getsockopt$IP_VS_SO_GET_VERSION(r2, 0x0, 0x480, &(0x7f0000000680), &(0x7f00000006c0)=0x40) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f0000000700)={r3, 0xd1}, 0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000740)={r3, @in6={{0xa, 0x4e22, 0x4, @local, 0x2a15a726}}}, &(0x7f0000000800)=0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000840)={r5, 0x66, "1b04925b68b0c492892629da5218f0188f479a0fb302d71f5def79632dfdcfe677d53f906b48d646564bb334bb26dcfa5ada443f3571434db8fe021fa29ba2c5e0dffe6c35556eeeaa466304126c7011b173c8b0a8aa36dd931883c817aa1f9ada189758e99e"}, &(0x7f00000008c0)=0x6e) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r6, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x24, r7, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x2}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4454}, 0x1) r8 = accept4$inet6(r1, &(0x7f0000000a40)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000a80)=0x1c, 0x800) ioctl$FIBMAP(r8, 0x1, &(0x7f0000000ac0)=0xa) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCSIFBR(r9, 0x8941, &(0x7f0000000b40)=@add_del={0x2, &(0x7f0000000b00)='bond_slave_0\x00'}) ioctl$BTRFS_IOC_SET_FEATURES(r4, 0x40309439, &(0x7f0000000b80)={0x4, 0x1, 0x18}) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r10, 0x84, 0x18, &(0x7f0000000bc0)={r5, 0x3}, 0x8) getsockopt$SO_TIMESTAMP(r6, 0x1, 0x40, &(0x7f0000000c00), &(0x7f0000000c40)=0x4) 1m13.304409428s ago: executing program 3 (id=3078): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r1, 0x4000000, 0x3c, 0x72, &(0x7f0000000040)="976d9023d56482cd284a63da539706d7009be646625bd75b025352ebe557df463106baeed6c2d75549b140f143fb8bb67bfe5b308b8d05758115c7ad", &(0x7f0000000180)=""/114, 0x0, 0x0, 0x0, 0xc4, 0x0, &(0x7f0000000280)="bf049fd184f7b03c21d9bcddc4eef9ebb6a0da3eb91c56454e873dd7336ccf21a1eeb8da7adf80d6e06ef46c7f36222fadaed2103c286468b3f44adee51445bd1bedf8fcc1c0b9fdc8b3829b1bf0c9d2d409cdecb12ad033e299c029331993ae9760345bf7feb91ee96b0eee19454ad3dbce5019b68c114ff1921a9b4665744c7784ac6736101a70592d83c448a84c31ec60bb901d96ea99471d823ee523318878ee704a8d9502b566cad45587cb74ea8259c1c0a926fc09499395b2db5af40bb6f4c526", 0x0, 0x8000}, 0x50) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYBLOB, @ANYBLOB="08000300"], 0x78}}, 0x0) 1m13.236813007s ago: executing program 3 (id=3080): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x25, &(0x7f00000000c0)=0x4008007a, 0x5d) 1m13.207197458s ago: executing program 3 (id=3081): unshare(0x20400) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) connect$bt_l2cap(r0, &(0x7f0000000180)={0x1f, 0x0, @fixed}, 0x18) unshare(0x20000400) connect$inet(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_RTHDR(r1, 0x3a, 0x39, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000008a00000095"], &(0x7f0000000380)='GPL\x00'}, 0x90) 1m13.103950845s ago: executing program 3 (id=3082): socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') (async) unshare(0x6a040000) (async) r0 = socket(0x14, 0x2, 0x4) connect$can_bcm(r0, 0x0, 0x0) (async) bind$inet6(r0, 0x0, 0x0) (async) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_clnt_new\x00', r2, 0x0, 0xb9b}, 0x18) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000400)=ANY=[@ANYRESOCT=0x0], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x4, 0x0, 0x1, 0x1393ca7a, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r4, &(0x7f0000001500)="7af99e3f260506e39878d8923ba0182fc4218a889a81d7bb8e862aecdb4de525a97d22e70b560072caf555112685f3699157db65872ee2170680e8138b8268c17ec95b4e06702b4b027a27e3ad6049d68d3b9a08a3c66124dbf77f27688caaab489ca07bfaee9abd8ce874a8edf49c995d509c9907074db17507f83cb0cd09cd5694a5844cc023e70e50eb2e57233a4105ea0c87097b0e0030a26ca45085e201fd2256b55df52c8f33fef9dcf4528839544d05c61c3b2004e1dbfab3959745d8d6c7dde49c3999b24f4b1c5eb9e180ef553f9474dbb5315c68733dc6d6454465ef5f1dd77b2327ebb383732ff0cad37d7fa0795f9bfbde6aa866cdf7c2a757b69f013dbd64cab05f6c2b7d2dbb076edfac10f68eaece8c65784953d8b446c2afe250e252543ba9f1ac5c0d2aa7f5b71d079b768863742149399adb39eb018ca64234c2f0d0874334b45eef0795a0bd1e4c7a23a76c447dfc831ca8c6709321b9b709b87a5c33fa7b55d156a6c4a9b3ad4ee4b540b7fed9a71e914748ec76ba4e3b33d4a12fe93705336daba7273fc2f87522da785730820712683d024a076716db9279b0630d815fb45baa66b3ef62cdad8a83524a5718c2f7b85db7a645fd8ea945cf402066cd1bb61d735db9632401f8a20aee6c5422352685be575aabce178ddd04f49279d0bf61b0652e08690f7752394dc36ea82c56381e805fc662792e8c8880384bd5e2ddafe8ee6aaa0d5c29555526cb4e54748d3b45cbb17c62b3f0c3ee497861ebdef6494ea1d5164f8f9e853731e523692529f9407165ddf9518440de3a4cf6100326593519a530d331b23f263c62c8ce90a5f3bf4e33bf39263717eab949ad732816755bafe36689c2e5db419252fc33ef89027fbd32f3aace5d2b71ccc197b871a39d73a36ecee0df4ba517995bd011013d861b813729900041c2d070e1e8837b85813a4beb6393ddf551759b1d76c5315c56338313f25e9baa6a4e067d40e514a5ab6c614bac43de5bde45ded6486e184223ae59232ac3307b959d2657ae903c318612b3157a94ecd40299640d6fa17a0061ce54b5b3eb6a0c99a9efabb89b38605531fb75b14f9bcd7c924f9c736cdac4b8a99b8402efe532f13239c205e806c3d958a38493fc51092f5762252d9247466a8614781a5bb57efea30eac094b54d9ac6d706130b077d024b93dd648d57bac8d262ddb4d8889d0b47de4a12d792efcd071ec0a3a2d18d3480d78681839d8a15fc83463292939a536bd94e68da5259ce50faa6528abc7d5f8a2f92f35b802aa3d78ad8e6f5a862180670869e31346b59c752316d8e6ae4dbbe577dc26667fffa12901bc7e844d95ff0aeff7517141862eadd948bca60ce98f1f8ebe7c198c3236f3b44dc166911a8eb2e70ec080734bb0cf558162ecbba59d6f157e8831984e99c415fe1ce2aac8677c49c71af0002e5c0b3408a516b818971cfb3902d05e3018b3e9a2bbafdd45134bd27003418890e22b0754e726f0ddd5fc20a616271d2d4997affd306214dee6334bf59efe51a9f6cfb51de129d208b74b667d5535a18cf82dcc36c3a9df0459a5f189ac2ab22a947c91d7e8a9b1de26da4832f5a10769429c23686cee1ddcc19286da53f63022ef019d4ab2b8c7bfdc68a2b74fb3cf1edc5675885e792f08b433efef4039df5be0571edd62a00cc647bccad03873b93a74eaa9e24ffe1ec637752f244f4e7df55a500d6845406a28d6915cec2b40fa4306ebdfcdf28a03385a5be02676edbd29a5da61832ea0b23732280eb720c1bdfa6731067e11632d7e760d51fe0104b71a89e5af7891fad8fc3d0299c08c4c4d5762df1f276740c022669e9a3c1e1776099c79fe95e6990abb8bf2221bde1b83ab3e3c4f311718a1857bfb54cf375258a33ffdac2a921d3617774a41bb9619ffb3774b8569084b366bb1a6f61f198e95f6bef4a37e855f775c96a84165f586ef6bd3300093c6cedca311609d4d1afb65e0c1e621b665bdf74c3324b7b46c9a3c9aa9047ab8a56737c562eb15ab02a48c7b8c4cb8a539d54a54c1f20937c5bbe56c810e326b65eb71c1432c5df74966708aac61f4e41068d166d4b0dd475e28f0ddbd8eb336917fe6a1e56a78ea9250dddf53b1500879ba60fcda538b16de7898fba25369d0ddb5c2339e3a92f1cb67775a708b47de65bfb0e964eee97765810358448aa12efddf8fd7062df9eb31cdd27b043c28dccd73295042f55c1656ab49acfc51c7c0fc77b4996e7200e39b5167347a94bdb11ed3be3ef5917adc00cfa1f26754fbc90d3de59d93c1115bac96475cbfac532a7fc164cd88ade0f9ef77beaea9a7975e2d63a58aa8681845a67d16d297db85e8bab7acb1a03106b4753828ae7771e451187a9bdd807f1956b2be4333695e225be27770ef10c9696ae1a33085a958837c4f19d9a3f9b37bb66177e67ae813e51b1517ca979b8c5f529850d0b226cfc961d22d4593f85a8a303e8e4ae0df5bd966ef593ec2098822c89d616fba36c839af81a9c2152fc943cc4fbdd47952c030cb71ea7b0aef690aca6484a2eb45196e97dc8385e85e931239c6e3775ea951f3e76f680766696319252b2b10d967e4091a66d1ab84ac221bd30314d4ef875dd5f560aeaee6c27d2a21a5594ccf658113ce154c52344b468f7ce1b8e92bd717cd8dc4e53a229f2c819ea7faedaa3cded3ba6b3fe3ca6b22eaff1065815b27a73c7df8381e307dcb84f7602a29550ee60d9d005b3d28adf4013e07cedb68ab249b766e4e911327c13baf6fb271bb7feec72aa718e3229607e882f9779aee794cd609dcc6756f4c3b19713c51e3baabe9a6aceaf2bbdbf838da7a4efe31919847852f1ec97a78b7b00ef6cb7b28f3e459137ece271ea0ad1f34256c2addfb06ef6e7284cbfe84073900088835295587852c96b7e2abbf364d605431d40f4e4c3afe7e00aeea59983cdb7161b6c034ed5d888466550aedd1e24dac75090b638ab7ed83d4c7cd86d83739f94c9c0f7742f02eb2ab23e14d20546ef5891cb3bc5aad5f788dc636b62235bef5fee4102db67945cb6c54bd414f9917b26b7a76f2e664baa12e959026c0c73940aa5a127dadee6839f4acd28da27eae1f49c85ea4e9cb982b71be9932b928d1020da8c043bda7eea8b454eb24d4391de846b70e3067d31946ec0be56ccf7600d7fab725439511aa046c81511dd86580bfee53237a9530d1606397a45b0dfeec4fb277aca8037d999eaabaa7fbf8d007c1b40fae925106b4f5f63e162f69178915c89daf87548a6bbd8b5e6ff73883ef62806eaf12696ca142ae817a474c95a0f9a50187361e169bd0ac4541e3b4236c1affac96a090c6c478dda4171375f3abea0ee5c3422cc4666e2d97ddfd4f1b0488b62015623773bb9f9d262dd1b62b1fd37a2b08f8d5c8453cfc13ae944a356f84d87542ba7fa961b53473ba27a469be43de7c53ddd7f07e2173d9193c49dc9b3d547f4999db82e4c8e7a393940acc9f53789597c425fc99ae78c3f2e57948a4b2baf7d4985a8b34b28eee768b5156d7c5e234614a0f3b8e8486d0d6508fb976103d7b134debd28ea33d8bb1cee85c5ce1ea17a83161a2ced2bca1bf514f0e3df31d8ddf58cd9ef408ec3bcdcfbd3480767326ca2e8118315b0dda60ac365199828d638b29d32a94488401cebc3351f42cb463295afb10198b34695d727f260feef7d693207ea446b99a27bef894c21a3895289f7bf9a445929ffc45c533a9181715ece0ca319a36eb3a2b1be53650248cbde0769ce86409728248e6641f178050a88a7a5433d34745eae66d47d025a6d13b98aa2f18072ec80a3e608c0af216334deae0de94c47353e94160f17482d5e7d964f68c8a0a358fecc9f1b3e879c2296f2b51f17185752774ae79151b373da296ca258a129f57a0074c2fc6246909433f582748aecaddbc1916f69718c8fa206a50f9c03c530b834f0f19544d977ca6a949bc92fdf9ce3f9056d4787a20104a9cded09dffbc47a85cd860a208da1cc62e815731019a5f1d67f34730233729943ab3a6213b7e2f00c9d51ea722b311e37fd8debe8bcd717d23d8c46a716c75c266a47f969d1742f0744122b7c99b83cf4744baf082ae993cd1b52caedcbcbfe1b4c57334549d58c249a922536826b3a4fb6df3df0989a6b8f4fd9032f9bf1125522fc0986bcea4f38b2bca216a3d40a67dd2383af6dc7f0c6d2252d680b5dd2418102c0da2fb33a1eac63eaf0d780a8c08eec72eff45a9d2b6199ba8df074c3d54772427bab6c1713b2243c34b8abc1518d985a43374548b14c274d430e2ade7c09335fe382deb509633523f73b4054fa0b4ead442201cf326e3a32320eceaf43b410de18f96a84702833b4dc11ed2ca4270772b28336ed697d363b2f9e09ffffa90cc666d8f1fe5ed3e44d6ea9947670f4d0092f4c9216d8c7aa407047e95fbfb28093f6159a02d1ee22a1379ae60935046fd4d3592202f2c4111dfeb4911f6f511723b09b40aa71632626300763f4c4440ef465fe8e5dcc4186656a45d52670824c8eeef2215da2151700f5909ae08fce5503e3cb1883f1a49245ee48476d5ce1c4d32df3b6f1e08b2e8857f99cdf210f9da5ea7d9e66dcc05ab75003104c86d7e8baf9209b82c1b9d7ebabf5f57f5c7cfcc57fb01fcac58a86914e9f15cf7aec2099dab613c5fca754e7ec64616fad1a171cac3ac80d591f624c6c1499cdfb4974174df78b008bd18978c9de3155a208c327f6604be1cf57c995785fec1699567fb89cb80d47622c699871b0224df5721d87b304a4b39fbe4d55c9ee5bab2b7090e3ce5004c717ca5cef19e80243f44b7ba063930983083f25aa43489f9fd7120e3fc097d3a7c078ce419ba081040784c4373d668d2719b5d63859a2a0a7affeb622ac48fe9afb2e2bf880ab540d23fe6e353bc61a038b3e5bbe27ccfcb14ad7c7cee567fa2fc813d00edf96754bd19880dd0e0787841d43561c4423f7a82b7832d2ffcff9c3017ef59149cb3d60035605e943939c1ac2aabd0787ad085aa25876738269ff487d822cad4522a98d9c9e7fdff792b6ea9811d4cce33a36a2f0afeae13c5f64d6b9bd0a6323fcbd5a4ce7bc541ba884a662259c07693e9206ad145b3ec352875f93e3940e4e24214da421a0b2efe200be938969aca69c8eae5728d2011a81c9ae16c4e234911a4345b67a2de515d02f4735420c9efde8875608052994a9de1779bb4bf401bc307543c6ee94c0c307853d14f6a3fddfa59070ad144b3b103f64ec0b0df344e1fe2911ac7007d57f3e6fc762a56eac3079fb13bfa492645ac5c8ebe1addf93491dd621b5baac9b28076aece3e921dec360b5e49cf8cc41784ea208e733698623b828cbfc2a7ca8d17e2db60487d45fe71ee1bde24fd4f4eb74e13e3fe9bbb298128d9819075c6a4eaaede0fd0fc80ae59c8ff66f6171adc3be849775c69a3cc6700957b28e55c56edab641a714746a66343944323592a584a73b56504a0137fd6ebdfe7399e9cafee32d4cda2a84d2ad63e39c39d4bb7b7903a7fd65e8614611080c3bb86e457e4be29f12cd89115e492ad83e8f2a816bdc90d0ab28bebac66d3f4e295ecb2d1ff4e5cfe6d184e17c61a8470e9a36973178c04ee7598e9f25ae01f395f2caabfe3fb4e2f4aa4863cd333da944924d53c63584057791cf84888432bdef6f2b5505f75458d12b175822ebe8bdad43c3ea7d22fbaf3b55b22acd7f5464bd79613009b80565cbbecd7bc328c46fc8caa25d18e1c01918e4207054f", &(0x7f00000002c0)=""/193}, 0x20) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_clnt_new\x00', r3, 0x0, 0xb9b}, 0x18) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d000010000000000000000000000008001200020002000000000000000000100032001e000000000000000000000010003300000000000000000000000000fc02000000000000000000000000000003000500000000000200000dac1414aa0000000000000000030006000000000002"], 0x80}}, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x34, r7, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}, @ETHTOOL_A_RINGS_RX_MINI={0x8}]}, 0x34}}, 0x0) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 1m11.204138742s ago: executing program 4 (id=3106): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r1) sendmsg$IEEE802154_START_REQ(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x54, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_CHANNEL={0x5}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_BCN_ORD={0x5}, @IEEE802154_ATTR_PAN_COORD={0x5}, @IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_COORD_REALIGN={0x5}, @IEEE802154_ATTR_BAT_EXT={0x5}, @IEEE802154_ATTR_SF_ORD={0x5}]}, 0x54}}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) socket(0x2a, 0x6, 0x1) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000028c0)=@newtfilter={0xfffffffffffffd59, 0x2c, 0xd27, 0x30bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0xb, 0x6}, {}, {0x7, 0x1}}, [@filter_kind_options=@f_bpf={{0x8}, {0x28, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0x3e, 0x7, 0x1ff}]}}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x1}, @TCA_BPF_FLAGS={0x8}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1m11.06594064s ago: executing program 4 (id=3110): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), r0) sendmsg$IEEE802154_START_REQ(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="951b00"/15, @ANYRES16=r2, @ANYBLOB="010027bd7000fedbdf250d000000"], 0x14}}, 0x4008104) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER(r4, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, 0x3ed, 0x800, 0x70bd29, 0x25dfdbfd, "11e8ddebf1fe6b27158628891f9750d2ab3028badeaf960fe3194fc9854000a99e", ["", "", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4048000}, 0x4000) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac1414000800080004"], 0x2c}}, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x14, 0x4, 0x8, 0x8}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000400)={r6, 0x0, &(0x7f0000000500)=""/184}, 0x20) bind$vsock_stream(r5, &(0x7f0000000440), 0x10) listen(r5, 0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r8 = accept4$unix(r5, 0x0, 0x0, 0x0) recvmsg(r8, &(0x7f0000000280)={0x0, 0x6cda83faea3171fc, &(0x7f0000000400)=[{&(0x7f0000000cc0)=""/4096}, {&(0x7f00000004c0)=""/93}, {&(0x7f0000000340)=""/63}, {&(0x7f0000000680)=""/151}], 0x44}, 0x4c2103a0) writev(r3, &(0x7f0000000280)=[{&(0x7f0000000040)="1250943b274f058029bbd4b0e9064d6f324a6958ad634207a260d44415122f3632fd51d734ee9bd18e4851776a6ff3b74bcc66b70a8da1f43b26893c", 0x3c}, {&(0x7f0000000080)="fd87912e7c015e4fdd7f3a52e64f7bba2f1a24e3026d315ce760c2fae71896119828533bace20fd4c7f7d1e4d331864cbee76a2b55d5fcbc91fd8fb4552c1da2253d1a6240b8a11feefb40c2f849c71bc260a62571be7ae6ba3c7ce72e92f66a441cb291ef2c9657ee880fec48ebf5fffb0135978d571cd3aebf42b8518909ddf22e839608d2b351ea01eb9f8f2fc3199d041e33b8a3ffbd56c18b52b1240b8a8231b57faadf06", 0xa7}, {&(0x7f0000000140)="6f3ed82442a5d313740e5b68eca2589dbfeb11baaa73b7b456db287bf4d3f07275641b91cb0ffb469da48eb56ba84612d7a40b44e106c11d9e43f62222f8618dcf897d757e644e28e981c43a7af978ad73e103233a4f7198ead567ba02ef702578e368fc4147a58f68db8bebe08f2c449b1a76fe58b4701de5e422303301c6002ae51b5351efe3436dbbdaee226410af66beee4491d3e78cb0b60b495262513e9e0395c2171116a3bd46f90b", 0xac}, {&(0x7f0000000200)="78e5553d84617ffee4553de8f754b5904dc06655b57e683c6715b38cd95f3e2a4b8f117eb151bcefd24dbfd8589cc0c27f63afe69c0a63faceb91dc9379ea7d7551bd6fb8998126a7c52c61a333a2f09787dd15774d7cd07", 0x58}], 0x4) 1m10.929342161s ago: executing program 4 (id=3112): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2c, &(0x7f00000000c0)=0x4008007a, 0x5d) 1m10.717421405s ago: executing program 4 (id=3116): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1, 0x3}, {0xa, 0xffe0}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x12000000}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x9}]}}]}, 0x44}}, 0x20004055) (async, rerun: 32) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async, rerun: 32) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r1, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x4000004, @remote, 0x0, 0x5}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @loopback, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000240)=ANY=[], 0x18}}], 0x2, 0x0) (async) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m10.665209757s ago: executing program 4 (id=3119): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffd}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x68, 0x2c, 0xd27, 0x70bd2a, 0x8000002, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_basic={{0xfffffffffffffe79}, {0x38, 0x2, [@TCA_BASIC_EMATCHES={0x34, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x24, 0x1, 0x0, 0x0, {{0x8, 0x7, 0x4}, {{0x1, 0x0, 0x1}, {0x4, 0x1, 0x1, 0x1}}}}, @TCF_EM_IPSET={0x3, 0x2, 0x0, 0x0, {{0x3}, {0xffffffffffffffff, 0x1, 0x8}}}]}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x24008004}, 0x8000) (async) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, &(0x7f0000000040)={&(0x7f0000000140)=""/163, 0xa3, 0x7, 0x7}) r6 = socket(0x10, 0x80002, 0x0) (async) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000001380)=ANY=[@ANYBLOB="1800000002000000000000000000000095", @ANYRES16=r1, @ANYRESOCT=r3], 0x0, 0x3}, 0x94) (async) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r8, &(0x7f00000024c0)=[{{0x0, 0x0, &(0x7f0000000d00)=[{0x0}, {0x0}, {&(0x7f0000000800)=""/245, 0xf5}], 0x3}, 0x9}], 0x1, 0x10000, 0x0) (async) r10 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x8, &(0x7f0000001340)=ANY=[@ANYBLOB="beaa000000000000791008000000000018120000", @ANYRES32=r7, @ANYRESDEC=0x0], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r10}, 0x94) (async) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="c40000001300290a00000000000000001d000000", @ANYRES32=r1, @ANYBLOB="00000000000000001c001a800800058008000200080000003e"], 0x44}}, 0x0) 1m10.395927055s ago: executing program 4 (id=3123): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='\b\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002bbd7000000000001400000018000180140002006e657464657673696d300000000000000500190001000000"], 0x34}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0x5}, {0xffff, 0xffff}, {0xfff3, 0x10}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}}, 0x44080) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff0000000002"], 0x50}}, 0x4000850) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000000)={'syztnl1\x00', &(0x7f00000000c0)={'ip6tnl0\x00', 0x0, 0x2f, 0xd9, 0xfa, 0x3, 0xa, @private2, @local, 0x7880, 0x10009, 0x5, 0x4}}) r3 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r0}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0x17}]}, &(0x7f0000000040)='GPL\x00'}, 0x94) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0x17}]}, &(0x7f0000000040)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1a, 0x1ff, 0x81, 0x1a, 0x10240, r1, 0x37bb, '\x00', r2, 0xffffffffffffffff, 0x2, 0x1, 0x4, 0x0, @void, @value, @value=r3}, 0x50) syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r5, &(0x7f0000004840)={{0x3, @null, 0x9}, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null, @bcast]}, 0x48) socket$netlink(0x10, 0x3, 0x0) (async) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 4.214225215s ago: executing program 32 (id=3082): socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') (async) unshare(0x6a040000) (async) r0 = socket(0x14, 0x2, 0x4) connect$can_bcm(r0, 0x0, 0x0) (async) bind$inet6(r0, 0x0, 0x0) (async) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_clnt_new\x00', r2, 0x0, 0xb9b}, 0x18) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000400)=ANY=[@ANYRESOCT=0x0], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x4, 0x0, 0x1, 0x1393ca7a, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r4, &(0x7f0000001500)="7af99e3f260506e39878d8923ba0182fc4218a889a81d7bb8e862aecdb4de525a97d22e70b560072caf555112685f3699157db65872ee2170680e8138b8268c17ec95b4e06702b4b027a27e3ad6049d68d3b9a08a3c66124dbf77f27688caaab489ca07bfaee9abd8ce874a8edf49c995d509c9907074db17507f83cb0cd09cd5694a5844cc023e70e50eb2e57233a4105ea0c87097b0e0030a26ca45085e201fd2256b55df52c8f33fef9dcf4528839544d05c61c3b2004e1dbfab3959745d8d6c7dde49c3999b24f4b1c5eb9e180ef553f9474dbb5315c68733dc6d6454465ef5f1dd77b2327ebb383732ff0cad37d7fa0795f9bfbde6aa866cdf7c2a757b69f013dbd64cab05f6c2b7d2dbb076edfac10f68eaece8c65784953d8b446c2afe250e252543ba9f1ac5c0d2aa7f5b71d079b768863742149399adb39eb018ca64234c2f0d0874334b45eef0795a0bd1e4c7a23a76c447dfc831ca8c6709321b9b709b87a5c33fa7b55d156a6c4a9b3ad4ee4b540b7fed9a71e914748ec76ba4e3b33d4a12fe93705336daba7273fc2f87522da785730820712683d024a076716db9279b0630d815fb45baa66b3ef62cdad8a83524a5718c2f7b85db7a645fd8ea945cf402066cd1bb61d735db9632401f8a20aee6c5422352685be575aabce178ddd04f49279d0bf61b0652e08690f7752394dc36ea82c56381e805fc662792e8c8880384bd5e2ddafe8ee6aaa0d5c29555526cb4e54748d3b45cbb17c62b3f0c3ee497861ebdef6494ea1d5164f8f9e853731e523692529f9407165ddf9518440de3a4cf6100326593519a530d331b23f263c62c8ce90a5f3bf4e33bf39263717eab949ad732816755bafe36689c2e5db419252fc33ef89027fbd32f3aace5d2b71ccc197b871a39d73a36ecee0df4ba517995bd011013d861b813729900041c2d070e1e8837b85813a4beb6393ddf551759b1d76c5315c56338313f25e9baa6a4e067d40e514a5ab6c614bac43de5bde45ded6486e184223ae59232ac3307b959d2657ae903c318612b3157a94ecd40299640d6fa17a0061ce54b5b3eb6a0c99a9efabb89b38605531fb75b14f9bcd7c924f9c736cdac4b8a99b8402efe532f13239c205e806c3d958a38493fc51092f5762252d9247466a8614781a5bb57efea30eac094b54d9ac6d706130b077d024b93dd648d57bac8d262ddb4d8889d0b47de4a12d792efcd071ec0a3a2d18d3480d78681839d8a15fc83463292939a536bd94e68da5259ce50faa6528abc7d5f8a2f92f35b802aa3d78ad8e6f5a862180670869e31346b59c752316d8e6ae4dbbe577dc26667fffa12901bc7e844d95ff0aeff7517141862eadd948bca60ce98f1f8ebe7c198c3236f3b44dc166911a8eb2e70ec080734bb0cf558162ecbba59d6f157e8831984e99c415fe1ce2aac8677c49c71af0002e5c0b3408a516b818971cfb3902d05e3018b3e9a2bbafdd45134bd27003418890e22b0754e726f0ddd5fc20a616271d2d4997affd306214dee6334bf59efe51a9f6cfb51de129d208b74b667d5535a18cf82dcc36c3a9df0459a5f189ac2ab22a947c91d7e8a9b1de26da4832f5a10769429c23686cee1ddcc19286da53f63022ef019d4ab2b8c7bfdc68a2b74fb3cf1edc5675885e792f08b433efef4039df5be0571edd62a00cc647bccad03873b93a74eaa9e24ffe1ec637752f244f4e7df55a500d6845406a28d6915cec2b40fa4306ebdfcdf28a03385a5be02676edbd29a5da61832ea0b23732280eb720c1bdfa6731067e11632d7e760d51fe0104b71a89e5af7891fad8fc3d0299c08c4c4d5762df1f276740c022669e9a3c1e1776099c79fe95e6990abb8bf2221bde1b83ab3e3c4f311718a1857bfb54cf375258a33ffdac2a921d3617774a41bb9619ffb3774b8569084b366bb1a6f61f198e95f6bef4a37e855f775c96a84165f586ef6bd3300093c6cedca311609d4d1afb65e0c1e621b665bdf74c3324b7b46c9a3c9aa9047ab8a56737c562eb15ab02a48c7b8c4cb8a539d54a54c1f20937c5bbe56c810e326b65eb71c1432c5df74966708aac61f4e41068d166d4b0dd475e28f0ddbd8eb336917fe6a1e56a78ea9250dddf53b1500879ba60fcda538b16de7898fba25369d0ddb5c2339e3a92f1cb67775a708b47de65bfb0e964eee97765810358448aa12efddf8fd7062df9eb31cdd27b043c28dccd73295042f55c1656ab49acfc51c7c0fc77b4996e7200e39b5167347a94bdb11ed3be3ef5917adc00cfa1f26754fbc90d3de59d93c1115bac96475cbfac532a7fc164cd88ade0f9ef77beaea9a7975e2d63a58aa8681845a67d16d297db85e8bab7acb1a03106b4753828ae7771e451187a9bdd807f1956b2be4333695e225be27770ef10c9696ae1a33085a958837c4f19d9a3f9b37bb66177e67ae813e51b1517ca979b8c5f529850d0b226cfc961d22d4593f85a8a303e8e4ae0df5bd966ef593ec2098822c89d616fba36c839af81a9c2152fc943cc4fbdd47952c030cb71ea7b0aef690aca6484a2eb45196e97dc8385e85e931239c6e3775ea951f3e76f680766696319252b2b10d967e4091a66d1ab84ac221bd30314d4ef875dd5f560aeaee6c27d2a21a5594ccf658113ce154c52344b468f7ce1b8e92bd717cd8dc4e53a229f2c819ea7faedaa3cded3ba6b3fe3ca6b22eaff1065815b27a73c7df8381e307dcb84f7602a29550ee60d9d005b3d28adf4013e07cedb68ab249b766e4e911327c13baf6fb271bb7feec72aa718e3229607e882f9779aee794cd609dcc6756f4c3b19713c51e3baabe9a6aceaf2bbdbf838da7a4efe31919847852f1ec97a78b7b00ef6cb7b28f3e459137ece271ea0ad1f34256c2addfb06ef6e7284cbfe84073900088835295587852c96b7e2abbf364d605431d40f4e4c3afe7e00aeea59983cdb7161b6c034ed5d888466550aedd1e24dac75090b638ab7ed83d4c7cd86d83739f94c9c0f7742f02eb2ab23e14d20546ef5891cb3bc5aad5f788dc636b62235bef5fee4102db67945cb6c54bd414f9917b26b7a76f2e664baa12e959026c0c73940aa5a127dadee6839f4acd28da27eae1f49c85ea4e9cb982b71be9932b928d1020da8c043bda7eea8b454eb24d4391de846b70e3067d31946ec0be56ccf7600d7fab725439511aa046c81511dd86580bfee53237a9530d1606397a45b0dfeec4fb277aca8037d999eaabaa7fbf8d007c1b40fae925106b4f5f63e162f69178915c89daf87548a6bbd8b5e6ff73883ef62806eaf12696ca142ae817a474c95a0f9a50187361e169bd0ac4541e3b4236c1affac96a090c6c478dda4171375f3abea0ee5c3422cc4666e2d97ddfd4f1b0488b62015623773bb9f9d262dd1b62b1fd37a2b08f8d5c8453cfc13ae944a356f84d87542ba7fa961b53473ba27a469be43de7c53ddd7f07e2173d9193c49dc9b3d547f4999db82e4c8e7a393940acc9f53789597c425fc99ae78c3f2e57948a4b2baf7d4985a8b34b28eee768b5156d7c5e234614a0f3b8e8486d0d6508fb976103d7b134debd28ea33d8bb1cee85c5ce1ea17a83161a2ced2bca1bf514f0e3df31d8ddf58cd9ef408ec3bcdcfbd3480767326ca2e8118315b0dda60ac365199828d638b29d32a94488401cebc3351f42cb463295afb10198b34695d727f260feef7d693207ea446b99a27bef894c21a3895289f7bf9a445929ffc45c533a9181715ece0ca319a36eb3a2b1be53650248cbde0769ce86409728248e6641f178050a88a7a5433d34745eae66d47d025a6d13b98aa2f18072ec80a3e608c0af216334deae0de94c47353e94160f17482d5e7d964f68c8a0a358fecc9f1b3e879c2296f2b51f17185752774ae79151b373da296ca258a129f57a0074c2fc6246909433f582748aecaddbc1916f69718c8fa206a50f9c03c530b834f0f19544d977ca6a949bc92fdf9ce3f9056d4787a20104a9cded09dffbc47a85cd860a208da1cc62e815731019a5f1d67f34730233729943ab3a6213b7e2f00c9d51ea722b311e37fd8debe8bcd717d23d8c46a716c75c266a47f969d1742f0744122b7c99b83cf4744baf082ae993cd1b52caedcbcbfe1b4c57334549d58c249a922536826b3a4fb6df3df0989a6b8f4fd9032f9bf1125522fc0986bcea4f38b2bca216a3d40a67dd2383af6dc7f0c6d2252d680b5dd2418102c0da2fb33a1eac63eaf0d780a8c08eec72eff45a9d2b6199ba8df074c3d54772427bab6c1713b2243c34b8abc1518d985a43374548b14c274d430e2ade7c09335fe382deb509633523f73b4054fa0b4ead442201cf326e3a32320eceaf43b410de18f96a84702833b4dc11ed2ca4270772b28336ed697d363b2f9e09ffffa90cc666d8f1fe5ed3e44d6ea9947670f4d0092f4c9216d8c7aa407047e95fbfb28093f6159a02d1ee22a1379ae60935046fd4d3592202f2c4111dfeb4911f6f511723b09b40aa71632626300763f4c4440ef465fe8e5dcc4186656a45d52670824c8eeef2215da2151700f5909ae08fce5503e3cb1883f1a49245ee48476d5ce1c4d32df3b6f1e08b2e8857f99cdf210f9da5ea7d9e66dcc05ab75003104c86d7e8baf9209b82c1b9d7ebabf5f57f5c7cfcc57fb01fcac58a86914e9f15cf7aec2099dab613c5fca754e7ec64616fad1a171cac3ac80d591f624c6c1499cdfb4974174df78b008bd18978c9de3155a208c327f6604be1cf57c995785fec1699567fb89cb80d47622c699871b0224df5721d87b304a4b39fbe4d55c9ee5bab2b7090e3ce5004c717ca5cef19e80243f44b7ba063930983083f25aa43489f9fd7120e3fc097d3a7c078ce419ba081040784c4373d668d2719b5d63859a2a0a7affeb622ac48fe9afb2e2bf880ab540d23fe6e353bc61a038b3e5bbe27ccfcb14ad7c7cee567fa2fc813d00edf96754bd19880dd0e0787841d43561c4423f7a82b7832d2ffcff9c3017ef59149cb3d60035605e943939c1ac2aabd0787ad085aa25876738269ff487d822cad4522a98d9c9e7fdff792b6ea9811d4cce33a36a2f0afeae13c5f64d6b9bd0a6323fcbd5a4ce7bc541ba884a662259c07693e9206ad145b3ec352875f93e3940e4e24214da421a0b2efe200be938969aca69c8eae5728d2011a81c9ae16c4e234911a4345b67a2de515d02f4735420c9efde8875608052994a9de1779bb4bf401bc307543c6ee94c0c307853d14f6a3fddfa59070ad144b3b103f64ec0b0df344e1fe2911ac7007d57f3e6fc762a56eac3079fb13bfa492645ac5c8ebe1addf93491dd621b5baac9b28076aece3e921dec360b5e49cf8cc41784ea208e733698623b828cbfc2a7ca8d17e2db60487d45fe71ee1bde24fd4f4eb74e13e3fe9bbb298128d9819075c6a4eaaede0fd0fc80ae59c8ff66f6171adc3be849775c69a3cc6700957b28e55c56edab641a714746a66343944323592a584a73b56504a0137fd6ebdfe7399e9cafee32d4cda2a84d2ad63e39c39d4bb7b7903a7fd65e8614611080c3bb86e457e4be29f12cd89115e492ad83e8f2a816bdc90d0ab28bebac66d3f4e295ecb2d1ff4e5cfe6d184e17c61a8470e9a36973178c04ee7598e9f25ae01f395f2caabfe3fb4e2f4aa4863cd333da944924d53c63584057791cf84888432bdef6f2b5505f75458d12b175822ebe8bdad43c3ea7d22fbaf3b55b22acd7f5464bd79613009b80565cbbecd7bc328c46fc8caa25d18e1c01918e4207054f", &(0x7f00000002c0)=""/193}, 0x20) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_clnt_new\x00', r3, 0x0, 0xb9b}, 0x18) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d000010000000000000000000000008001200020002000000000000000000100032001e000000000000000000000010003300000000000000000000000000fc02000000000000000000000000000003000500000000000200000dac1414aa0000000000000000030006000000000002"], 0x80}}, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x34, r7, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}, @ETHTOOL_A_RINGS_RX_MINI={0x8}]}, 0x34}}, 0x0) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 4.213927533s ago: executing program 33 (id=3123): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='\b\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002bbd7000000000001400000018000180140002006e657464657673696d300000000000000500190001000000"], 0x34}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0x5}, {0xffff, 0xffff}, {0xfff3, 0x10}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}}, 0x44080) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff0000000002"], 0x50}}, 0x4000850) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000000)={'syztnl1\x00', &(0x7f00000000c0)={'ip6tnl0\x00', 0x0, 0x2f, 0xd9, 0xfa, 0x3, 0xa, @private2, @local, 0x7880, 0x10009, 0x5, 0x4}}) r3 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r0}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0x17}]}, &(0x7f0000000040)='GPL\x00'}, 0x94) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0x17}]}, &(0x7f0000000040)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1a, 0x1ff, 0x81, 0x1a, 0x10240, r1, 0x37bb, '\x00', r2, 0xffffffffffffffff, 0x2, 0x1, 0x4, 0x0, @void, @value, @value=r3}, 0x50) syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r5, &(0x7f0000004840)={{0x3, @null, 0x9}, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null, @bcast]}, 0x48) socket$netlink(0x10, 0x3, 0x0) (async) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 1.392494419s ago: executing program 1 (id=3302): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000080000000000000000000000850000008b0000009500000000000000743c0c7e2291461cb301ec544acc4ac30aba44a0"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) (async) r0 = socket$can_bcm(0x1d, 0x2, 0x2) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x4) (async) bind(r0, &(0x7f0000000000)=@un=@abs={0x0, 0x0, 0x4e22}, 0x80) 1.378211295s ago: executing program 1 (id=3303): r0 = socket$kcm(0x21, 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0xa0000004}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000100)={0xe0000001}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000140)={0x20000004}) epoll_pwait(r2, &(0x7f0000000180)=[{}], 0x1, 0xc, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) readv(r0, &(0x7f0000004680)=[{&(0x7f0000003380)=""/85, 0x55}], 0x1) 904.969079ms ago: executing program 1 (id=3307): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)) 792.197094ms ago: executing program 0 (id=3309): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x2c, 0x11, 0x0, 0x1, @target={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x4}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xa, 0x1, 'AUDIT\x00'}]}}}]}], {0x14, 0x10}}, 0xb0}}, 0x0) r1 = socket(0x2a, 0x2, 0x1) r2 = socket$alg(0x26, 0x5, 0x0) sendmmsg$inet6(r1, &(0x7f0000000dc0)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x1000, @mcast2, 0x48}, 0x1c, &(0x7f0000000440)=[{&(0x7f00000002c0)="5e2612ba0ff3c07c09ec0a77f39a2d3ee001afd311e568f5e531d50ac2a9ffde9d8bfc3042b6277ac6f203a72ce877b5b0b573d981a8419bdcc1aef1a91ba126ed70226494ec07effe1098dfe9119fed17f2449f7427adc33a4ddc16ec4db399e8a0636e6d9bef7e603167d237eb9fb75a5f21b6bec86aeaf3413dcbb40743c4f4c8385233fe5e52ad282f09f19ed013298388a77a8f82c38193dd531e", 0x9d}, {&(0x7f0000000380)="9410707b04e661f5d903ed4e72b01b4e59da800c2d9951db65bdb6d1a41448e0068bb02b8227e13e7dfd7ced7b15337f727d1c5ce7af3bbdd7d647cb068762002f5e974bdcc68cb2bf1e149a9c83708872196cbd09090dc72b11fd58226abb4c46e0e8d9f4e91c1031f7af1ac4eb4e11249727734be499fff492ecccf819beea307809c49a4176", 0x87}], 0x2, &(0x7f0000000480)=[@hopopts_2292={{0x30, 0x29, 0x36, {0x33, 0x3, '\x00', [@pad1, @hao={0xc9, 0x10, @local}, @pad1]}}}, @hopopts_2292={{0x80, 0x29, 0x36, {0x88, 0xc, '\x00', [@jumbo={0xc2, 0x4, 0xfffffffc}, @jumbo={0xc2, 0x4, 0x7}, @calipso={0x7, 0x58, {0x3, 0x14, 0xd6, 0x60, [0xda8000000000, 0xfffffffffffffffe, 0xfffffffffffffffe, 0x7fffffffffffffff, 0x8, 0x2, 0x49e25c24, 0x1, 0x8, 0xffffffffffffffff]}}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x5}}], 0xc8}}, {{&(0x7f0000000580)={0xa, 0x4e23, 0x8, @mcast1, 0xfac}, 0x1c, &(0x7f0000000840)=[{&(0x7f00000005c0)}, {&(0x7f0000000600)}, {&(0x7f0000000640)="957491e92857f524d190bf506c150c6f323b645ef32eb1d6c5e2690709785f07a4acaa89847ed76737d564b271b1eb7b33ab", 0x32}, {&(0x7f0000000680)="7003da98c2893ec0cf90805755ec1a950d4da11a3610f67730a9743230b175e53295c300f1a1fd54ca1451ba3ebfd3852634a4e84e64e1bc51857846d2e684702cc5d2ea1e7ba7704f14105e4b40ad90a3e702", 0x53}, {&(0x7f00000007c0)="1822627c4d6bb41d2110c12b566255ba65605ea97e068d7c6f74b33a52e9ae005841a3bda5f41ed3cf24c9de9f4aac0e8435f811b74917e750c422ed022a34c4c3b28d77d59108981b", 0x49}], 0x5, &(0x7f00000008c0)=[@hopopts_2292={{0x38, 0x29, 0x36, {0x3a, 0x4, '\x00', [@calipso={0x7, 0x18, {0x3, 0x4, 0x5, 0x4, [0xbf, 0x1]}}, @jumbo={0xc2, 0x4, 0xa000}]}}}], 0x38}}, {{&(0x7f0000000900)={0xa, 0x4e21, 0x8001, @empty, 0x400}, 0x1c, &(0x7f0000000ac0)=[{&(0x7f0000000940)="efe1062add765a267da129a736f49bbaaaa1593c77bd5a52d4d993761da77b6158ed59eb406e3eb43fa885", 0x2b}, {&(0x7f0000000980)="622dd3f9bac5b6f2753058da6807bd69ef73109003a4c9fb5097ed68468a47dea3067c5128d7f2f690373c3cc1003b68235acc813da400c1351da82e5077b328d31a7d13f24d15a1c31d6955472d27588a1092b6d52b6c8a1597c61b79332be7a2a836a23e5547c58f38842c8a399f88630d4628cb8c8856a4e9b1bf9b1de29c897a251848cf3a887cda67d2e7eacc4de46b2dfa99e1fe8122a320f4515bd9ca59a0ead1c6da7f0959fac3fe4928da45281a72ba54a6b15175ace7b94f713b696e74a993a87ca88d4ee3570f1ff8b9d7cae6ceb665c4c31cc7c959ff0d55f03830", 0xe1}, {&(0x7f0000000a80)="9e0544bc7d6a25637ad65432ab03174ff0e034b290cd721a6455274c61b3ee392145", 0x22}], 0x3}}, {{&(0x7f0000000b00)={0xa, 0x4e24, 0x6, @empty, 0x5}, 0x1c, &(0x7f0000000c40)=[{&(0x7f0000000b40)="faaec47da50f13fc36b4f5e097f7600dc00c0d85ca88de97a23ac1c0ba9868733e870d3d32291f336c004ffc9f53514beb5c593de283cd6df6b037ff6295ce418e9b060ae67fa09ebbc70cac4e0ff62bd843a58a6d53a601044e0c0a52bedd88d7c8ee02795105ce288b6d21eb60efcdbb052195675de098d3bc87f875cfec6ac62e834f5d162e6a3540c431b57db2", 0x8f}, {&(0x7f0000000c00)="054b2f6f598696d66937b2847ac3f32873b35e", 0x13}], 0x2, &(0x7f0000000c80)=[@rthdr_2292={{0x68, 0x29, 0x39, {0xff, 0xa, 0x2, 0x7, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, @local, @empty, @private0={0xfc, 0x0, '\x00', 0x1}]}}}], 0x68}}, {{&(0x7f0000000d00)={0xa, 0x4e22, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}, 0xe9fe}, 0x1c, &(0x7f0000000d80)=[{&(0x7f0000000d40)="2f1c8e7dddfa417f18892ddef619", 0xe}], 0x1}}], 0x5, 0x0) bind$alg(r2, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtclass={0x24, 0x28, 0x100, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xf, 0x3}, {0xb}, {0x6, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0xc1}, 0x4000) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000100)={'sit0\x00', 0x0, 0x40, 0x80, 0xffff, 0x8, {{0x2c, 0x4, 0x1, 0x4, 0xb0, 0x68, 0x0, 0x9, 0x4, 0x0, @empty, @loopback, {[@rr={0x7, 0xb, 0xe5, [@private=0xa010102, @empty]}, @timestamp_prespec={0x44, 0x24, 0xac, 0x3, 0x3, [{@dev={0xac, 0x14, 0x14, 0x35}, 0x4}, {@remote, 0x5}, {@remote, 0x1}, {@private=0xa010102, 0x9}]}, @cipso={0x86, 0x3c, 0x0, [{0x5, 0x6, "fd5fa4d3"}, {0x1, 0xb, "a49ce1f9f573a369dc"}, {0x0, 0xd, "1d5bb7bf90ea23645dab44"}, {0x7, 0xf, "8b67c0ebb9132ecdb62dae139b"}, {0x5, 0x9, "70f79295ff4299"}]}, @end, @lsrr={0x83, 0x13, 0x41, [@multicast1, @private=0xa010101, @loopback, @rand_addr=0x64010100]}, @end, @timestamp={0x44, 0x1c, 0xae, 0x0, 0x0, [0xa6, 0x7, 0x8001, 0x0, 0x7, 0x5]}]}}}}}) bind$packet(r1, &(0x7f0000000080)={0x11, 0xc42e2ea319e6abab, r4, 0x1, 0xff, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) 736.018736ms ago: executing program 1 (id=3310): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000640)="fe5b814b61801ff357a21738791c151f6f7aa433cbe76cb89eae5c6fd2", 0x1d, 0x20008005, &(0x7f0000000280)={0x2, 0x4e20}, 0x10) recvmsg(r0, &(0x7f0000000600)={&(0x7f0000000100)=@vsock, 0x80, &(0x7f0000000480), 0x0, &(0x7f0000000500)=""/209, 0xd1}, 0x34477c8d1453cbcf) 713.708322ms ago: executing program 0 (id=3311): r0 = socket$igmp6(0xa, 0x3, 0x2) (async) r1 = socket$inet(0x2, 0x2, 0x1) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000001080)) (async, rerun: 64) bind$inet(r1, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) (rerun: 64) r2 = socket$inet(0x2, 0x2, 0x1) (async) r3 = socket$inet6_sctp(0xa, 0x3, 0x84) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) getsockopt$bt_hci(r3, 0x84, 0x81, &(0x7f0000000080)=""/4076, &(0x7f00000010c0)=0xfec) (async, rerun: 64) bind$inet(r2, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) (async, rerun: 64) r4 = socket$netlink(0x10, 0x3, 0x15) writev(r4, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) recvmmsg(r4, &(0x7f0000007600)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x2000, 0x0) (async) close(0x4) (async) ioctl(r0, 0x2, &(0x7f0000001a80)) r5 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r5, &(0x7f00000004c0)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18) socket(0x3, 0x80005, 0x1) (async) syz_emit_ethernet(0x2a, &(0x7f0000000040)=ANY=[@ANYRESOCT=r2], 0x0) 700.973688ms ago: executing program 2 (id=3312): r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_RECVERR(r0, 0x114, 0x5, &(0x7f0000000000), 0x4) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) close(r0) 651.208032ms ago: executing program 1 (id=3313): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x141141, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x2e, 0x8, 0x3}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b2c25fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x28}], 0x1}, 0x40480d0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) 568.417198ms ago: executing program 0 (id=3314): r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_mreq(r0, 0x29, 0x1d, &(0x7f0000000200)={@empty}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x48}, [@ldst={0x3, 0x0, 0x3}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f0000000400)=""/198, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff52}, 0x37) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x18, 0x140a, 0xa03, 0x70bd26, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x40080}, 0x4000810) getsockopt$netlink(r1, 0x10e, 0x2, &(0x7f0000000080)=""/119, &(0x7f00000001c0)=0x77) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r2, 0x8010661b, &(0x7f0000000000)) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c000000100001043a43f9ab4fe07c4cb57ad6d3", @ANYRES32=0x0, @ANYBLOB="7b53000000000000140012800b00010067656e65766500000400028008001f0009000000"], 0x3c}, 0x1, 0x0, 0x0, 0x34000091}, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, &(0x7f0000000500)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x20, 0x140f, 0x400, 0x70bd2a, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x20040040}, 0x20000000) 503.709721ms ago: executing program 2 (id=3315): r0 = socket(0x10, 0x803, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x7, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x3}, @IFLA_GRE_REMOTE={0x8, 0x7, @loopback}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x4000) r6 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c000104000000000000000002000000", @ANYRES32=r8, @ANYBLOB="200008000a000100aaaaaaaaaabb000005000c000400000008000f0001"], 0x38}}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, r8, 0x25, 0x0, @val=@perf_event={0x6}}, 0x18) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRESHEX=r6, @ANYRES8=0x0, @ANYRES32=r0, @ANYRES8=r1, @ANYRES64=0x0], 0x64}}, 0x4000) 476.213515ms ago: executing program 0 (id=3316): syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000004780)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000040)='}', 0x1}], 0x1}}], 0x1, 0x40090) shutdown(r0, 0x1) setsockopt(r0, 0x84, 0x77, &(0x7f00000002c0)="1a00000002000000", 0x8) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) recvfrom(r1, &(0x7f0000000500)=""/202, 0xca, 0x40002020, 0x0, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x38, 0x7, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x91}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FLAGS={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x2000c094) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002000)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x4}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001c00)={0x1}, 0x4) 343.582238ms ago: executing program 0 (id=3317): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) r1 = socket$caif_seqpacket(0x25, 0x5, 0x0) sendmsg$inet(r1, &(0x7f00000009c0)={0x0, 0x0, 0x0}, 0x40) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_proto_private(r2, 0x8b20, &(0x7f0000000080)) setsockopt$packet_int(r0, 0x107, 0x11, &(0x7f00000000c0)=0xfffffffe, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0x3, 0x5, 0x7, 0x47, 0x8, 0x10, 0xff}, 0x1c) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), r3) sendmsg$IEEE802154_ADD_IFACE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000ecffffffffff2000000005002000000000000c001f0070687930"], 0x28}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), r3) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), r3) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_CCA_MODE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x1c, r7, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048010}, 0x4000) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000140)={'wpan1\x00', 0x0}) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r11) ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f0000000180)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x24, r12, 0x403, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r13}]}, 0x24}, 0x1, 0x0, 0x0, 0x4800}, 0x20000000) sendmsg$NL802154_CMD_SET_LBT_MODE(r3, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x74, r5, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r13}]}, 0x74}, 0x1, 0x0, 0x0, 0x4008041}, 0xe04c010) 211.475923ms ago: executing program 1 (id=3318): socket$inet_udplite(0x2, 0x2, 0x88) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$tipc(r0, &(0x7f0000000040)=@name, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x2, 0x4e, @local, @loopback, 0x10, 0x40, 0x0, 0x4}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r5, @ANYBLOB="0c00990000000000000000000800a000ea15000008009f0009000000080026000816"], 0x40}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000680)={'syztnl1\x00', 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd4, 0x0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r7) sendmsg$NLBL_MGMT_C_ADD(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=ANY=[@ANYBLOB="f4ffc632", @ANYRES16=r8, @ANYBLOB="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"], 0x108}}, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r9, 0x81b21000) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000028c0)=@newtaction={0x2d88, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0xf0, 0x1, [@m_vlan={0xec, 0x19, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0xf3, 0xae, 0x8, 0xb, 0x6}, 0x3}}]}, {0xa2, 0x6, "469884af0ca71fad6c56be97549d768af5c742d8dbac31aa730c1822cda8816a62783e0ac3fa057920270ddda67a31fa7997424306ab2010192fa6c0f74f4fe6fbd2d147f35e18670832e9fadc0c84e310699e2e4718fafba1d052e70e387923e362685b7f70e218779b2edf79d80595a45db3908778bc652ee53be06350615391b58cad9cd46bea5686a6e9742c71363ed024866d377af8a0e883aaf642"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}, {0x29a4, 0x1, [@m_simple={0x1040, 0x2, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x7, 0x3, '@[\x00'}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}]}, {0x1004, 0x6, "54846ad38941e915ad9f320b4df68f243c2d1d8c6a52b2debd18c43a9b8c63eae154362bb653dd033495fc2090ea3c441ca14244a73fa157702f76645cc5d05e214c2f599ab381d55f197fe25857fc55705a58ca6d688244dbeb0b9f3eb4771792828b6a8a8853a85845ea7c1f9038dc3685e4520e050f9fe749503375780eaef479108e5a7c142481da09a6a0318412933d744c41f7cad0c373838635259dfb14432efd7c9342ff29bbbf7da76972ec0819c35d9cb2da33b25b7bf5a2ebfc9fd157986280b47444846994710f61ce386c76eab9d1f72fa969423c1779a93b26adf5c06ff322c972336e059edf6e3eda57b75fe4cfd7038c5badf938b8ca4559786fa08ab2a8fbbaf2d43bfd270235845eed039436710397216840234f9f8d0e53af720a802d72579e2f35b1c9a1190e0253232cf30bf0f851396c2119408dd854632874b62990d279ca87f42ec0d74a3ba2f05298ae0775186b3633efa03c5605ead567635c57399c2a5bc55c2fa7a939c34465f47cf9f2eff1c99a89c6b0e5498d447ba6ac7c9a94af8b290e22aab8210092325b03fd7f87f918146a9a37fe32bb4a51f3bb28c54a5bb5c68de145ad1543eaeef5cce328fbfc8d06710582daf43a03be3aa936be441bfaa93cbbe5f840a2a98070b82e9727e7d2f0f08043e7b008a4ca33a9fdc44dc6f6cc9ef165a0549330a0d243831c03e8fbb33ab4d92831dd5d4959fc4939ca2cd180a5ef453efa61f24b80f5e70612afaba0a7556c1ef3c7f1e2a1cef6c7ce63072f2176b061aca315d38450fc4cd35ce4d1617fe7d08f176e7ff55b72d807ce2d5cf7a0de18d5cbb4dcc14189e29a720e2a5f924f2ccfa675799482c3b4144a77832a7fc47983237640ba153b14526065f651c01a88fd70eefab8d2802e87ec125a85c50bcc868cd1ecbb4704ecca0b13e8eede80cc0551592ce6ddd85d9906dc706c66f0a7598b86b8ba76ff04b055faf37b05f9d830a1ae747749753c6ee578ac96a9e2b95fd88d12c349481e07954f70214a6ada71513004fd85dcaf72318e72217593d7242455e5c1fe79c138d04d2cf23bed7ae48391ad341443add8c265a21cada0e242f43bfafb3430fc954522736ba18f179593c372fff5396b6fa720bb02768dd894de81c3dad07860090a7a80d95c9d5e576c1308f54ec22fbbd9fbc43f9f593e87eefb3e56f9e7ce850106e6273cfa568875556684bdfb7cb6d670362c9417ad19d33aacea971ae51d556ec623b88d1729f62df66d2d6dda4487122e986ace1ddc219ce206a9cad267f40d2b9b129d5f30af0088164b197db752ff42a8c629bc6ef5a4f2dbed52f1c9cf3acc11a8bdf5912ef3e91511af9b2e0c1a562322ae329b7406a3f1703b642d37800273468f2c46a45433bf40e4ddcd93be5d92cb038cda04848c08fb0463a98b46f80d5873c5936f7649a1eac3c31cee97db0d38e903becf728679173d3ea965c9d7a89e87951d46b275a432f374188fef5e2f5199cfb93f14342b2e8d61534197103c455d3ee139a8b46cd794c62700d719723efdf2f2870de64c786bc617b68c367819c88a1ce538543aa032b1fb5781abd66d7af5b77bc1d65c6bc30e2b6277178b98b30a740bb5dc7be15ee8482485903dd41939bb3ec9b2466a794137295874ad7f3b5d344aa0923d7982d1a0955105cb792b732ae58bc2c99f2eb4f0c57c5ed4f7f2f963e36e38749fa2673c4053654bd5224118076faeff502601fc93036b163eabaca2896fbf75729ec2513f9205c77e1315b81890107ac32caee8e17bad3c129808dd34306a69e0589d6a86fcb25ffd00cc51192731bfa1ee741916e212e006101aa46c43e9d0ef54ab2422125f818a58e76daa5976bfed50fb0a67ff10a9992b0b21ea4311b907ddff93e2b4b885cf1d8263361f69b2e698cd96742cc95460b8e175833542fb8f2543887d59a9e319fb0b7f58e033896a9cc7f71dcbec4d658410887aeec0cb95d733b54b1d798d197147e9f6ce8facf34168f2c3a45eedda3270a6ce47bf000999341a32ed971407bec24c2f88f78b244808d2a77b7841c6cfb3e8804c107fc51be48b60fba8f3eba50ccc9e9059d08e84bfbcaa06771dd8ed4b3845fedcdb6d2a6b890fc29bd6e45b87cd3e6b76693f4406b75e6a2e1865de44c5b9a1a65b9441e401e823247466cf06fd82260c58bcd2216ca5520d5b1df291fb44023c426e3d1d81346d06358f39ab8eaa0f355a0b5481e3a42486a610b69e8cc2de18b6a4ca1e8ec8c591dcac25060fa5764c0cbd6b878ad9dbc111f995b0f2d97fc15376aab5bb2e5039013e6376b0e80aaf5a38cdcfa9525501486bae195132cd84667cdfb557e67cfa3ee7353e4f9cae19ee59f62b754d5c59bfeb57528191aa3b6741b96868c9dc179deacc25f8b4b493376bcfb1eba76866b1dc92dba78484c398bed54360545352e6bcbb872fa956a87b43d4474602778741a6f61a17827a0b3a2f77cde3423a434b3612a88902f7454755ae6194e183701b114290d26ed1a8f0ec11e59c086336a744d80929507b6b46894931aa7d47f71b665f32ea6cbb9babfa230e62c00a9ee27d5f0b996bf2028d68703ab184a08444e03bdb35fe6a85a7f9cea5c076aaec05ba266eb71dd258dbe353b300097601a475b4033b4010e02c645ad60d878b3abe11c6e6c9190a3e6242ebc4cb9d413140125807e3f4d1da9eaee3f2f2bcb1d78ca0531cc3aaa98d71b777e91c57f725946af2562993ae6721cc588a0d2905e229dd6dba89a1fb5d22000e50dd9493317856cb42a92ef6af235daf582f45514b7face8113387b80d2d3585cd612b41a0b76bcc43011d6a223d53768a93647c04a0b3eedf10e61226ff7c97699188a0271e7ea7b876d1c1f74ee18ac99382799777d9d48ec05b665ccd39f4e48c1781a5fc77f8c1897560fb30626ed492a5253be3c0722cd07ac68c2a30b9e0b868372777cfc997509748ce6fb7d4f949741f7769a068091aa175d3c5ec0085032ba4c351e3ffeb2758c42eed1dc8549b232dea67747bb286614c689cfe86c77b6094e658b1a2c22bcc564dad9f606cf939a376c07abee7b2f3292ce6f22fc796164258e8423fdfdea2c35f313cd505b2e2e9d4d1ba7002fb9fdfba248c53e363e8eb17dbbe8d609409624fd4cdb5c97e2ece9570dbcd7c2ab3dd50e8f12d58aa85479ab72ec63a44010c1e8a0ceaddb3dd257f87eca91ce0b037597b347eecd7efbd3bf0f8067071bb227968b8e4ff336ea03d12eaa3a06d2b64f8631e927571fbe82a7409b57c13441efe1aa27d5438df6a6861b7fe276bdf1edc3e05aab4d70a2d67e1dadb8aae4a8600bba2fd9d23f3ac825e8977529948dd8f231e1968dacde43b89ab303a77eb4a66c0d6d19c8e67614b072aed283ca3c30ab8364f72d1e31b4951c7a6651e42fdf863bf0de88786fe7664b7bc3b2d1dcee3b61dda12f099bde757fb56f3e61d79d125b497f03d410348130fb1f7fcb1fb9e4385efd50f28e48d4986beab420c7f0c1f7f63616aef23aa28a1a457799e48c492bf918167c05f0fa7c8e3b070fc8e7cffcce31f145c5cd33b0a4a8ae5ed8e7ed501f50734ab02bae97a43d2b08e175825d4bf8b16ddd2e7185db38f116d18447a7609c294c6a01894dd2d4cce63db87561376c2bbc24768d75c1be804cc524c33a070de80798021d32efb0045d5025c2fb58f3d18530fcd1ad0baeb70c171857c520b8f25c31bca010642ee245b402c70ade7acea54655b155d3af095dd48179fb5ba5eb4100d5ec3ffeb769e9c9ef46d260be118f71efe0ac4f377e0e4ce28281da0c551bead75462d4f0dd375ec3e9b8a17248610112688bf0470955bf13ebd253a9b1ce104552c12fad94fc1e0e8bc0bd98af93d134c02c539440d8f741b0ba646dec2ffd57b5ccb63cf23d0ecf564f22c8bba0a37208965b096a49a28756f2f937a3657b544167ae9292ca84dc0baab07a7e91d80d4745a7c3f7290493ce579b8227401f4ada5a6bd479973bced112f4087f0635c10f4615a5700acb4c378836c2147025dfe969d965fe910eadc581e7d24bba6f8070e7d4bdcb07c2f7d91aea1662dd68fffc620402ba6923bd93e61523ffdc5012db5a4a6af1a8853a34a032359a8d37eda65cad94d35b3dc63ba1c0af33e1e786f16c2265656bc78dcf917dbe2eb455f00d9e54ea2c267e589ca26bac3b9fd410cffbd80e955b0040f5cb4f2f1f16a4b9ad2b8fa7c5ce0c1b1158fc1c9037d2d0b7f193b367c13cb981f0b7daa6e14866413a92a57860b87d7db188fce65c0753a33180791edf2b4a2133f051c2478f28e1ce05996b31d6b4d2a061fd1bb399fc853c771e6da27479045a98116d0ceabc95b3206bf4bf29c68bc48db221197ab1d4f4afd37e6e1384eada3b1a848507303d9d811ca548f28b38f5ca2817da3d69809e1277c4c788ec0dd4e25b2cfbe60e281514ffc6bc8d45452503ab843ffbda75d79b05198bfd7b5504724e6069ede950be2f17513f510aab7c1c5de1cf03c553780b2de1987ff0f042afb8a6cbe3f4b9d11c26b2c5818a8928955f436fa1279d093d0bf6333ec62dbd6b5e087d5c7421241aca44495dd75bc4461dd4557c660f70ca98f5aa5f76166d0ee76da10dbf00b6b8fd9d31a0839bf2bec95a28c13912806200b3c5433b0f47cdee08d1236bb678326db06d9314f2c2a638b2d369f7a4e2050eff2a45b297364a23bb2c08fcbdb4ea0c1a7ba0f039c1f347a53e31aad8e9477144ec00ea80f02279d21e71307e8b31a2108d2d79c41d92f6cb27f70fc69896eb5647c0498e223d6d9d833e8ec12f30a53249939496be4f60fcf5093d43dfd91c28cb405b9ce0a72aeb938ad634e1ac049c555ace9e591cf154a62aed2f6653af222c7b9892d23e20ce179eed2f3cedf9cee0464582d814fb73065c64ec8e9ee73e75bd6a95634ef82cac5f9d99a10bf77529f0d2bc42d15b3a589027ce7b9f0c62d98392778e09d09b0c4312b2ad15ade433609b27e70c32c94527ff1b232c1e6964bf701519b0dd7da018cec7777a9e27222defdd6af4098dece1f3579e76d7b8c0be98e041e1c55f678d07133489dadcfb45670b9342ea5b9dfcc0ee416851cd473532f0e1acaa28eda482d56b9ecfd1fd697eac19ed18c5e97214720f0440814bc74eadc46f554e4a50d8cdcc32022d3d0c92e9e02f4921378fb3cb484d9e57a6b2a7ff3edfbc7dd7a19ee0743bcdcb4291dc101aa2d84466555fcad4b52a72afda4598d97391766bd6688aa082f8e814a7b49e5d0a460b0b811f7b41b4a2c157dc541a753341e75904848a018e55a3bbcb028f990ec3381886d56524a6257362a545e72e9141b51831f0d5fd92f04bc3d43f0e83dbfb9faec1a68abddaf746642450ddd79fa30ebd49e1d03759eee3eaef3898ba68f44d2ed7b5d7f48360d165f85b9d38c8fc76da6113277258cb1116980a5d265fc62acbcd9c77ddcd8f753c715bc40a7aa08b595d0d77974ef5837dcad125afab06c2fa26c703477c5295252878c669f7e5e9f945388ca46cb4be1460ca1143fd2238a831f5cad2db212c72ef93d93413ea752a243d68a5545819f8a6ec69e27674faaf728a8827e580b9cc3d12dc428474f6b596d3eb0c86d5a79019ae632bc03ec96d6bacf1219be940a86e25e6cbcaa7d9399a524eabe6f6ec54fc731269d63036e0865864531db710e41757e326c3fa56b2fecbb71139427ade2133aef42fe5f7e0056167399cb51cb75c77114cb4aa133e9bf0e368b7a9e"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_vlan={0x98, 0x11, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x34f}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x6}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}]}, {0x54, 0x6, "5d3ba7375d2dbecacc7037c25856cad410bf3194c99b5af553a54bdb82c61d9fb272c2e6f8871eb028ed10721af5f3ba7de069caf62af2257f626f7c77e234ad92cb95b5a6e68da08e2ef4d08217eeec"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ife={0x154, 0x10, 0x0, 0x0, {{0x8}, {0x58, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x24, 0x6, [@IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x8}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x19f000}, @IFE_META_PRIO={0x4, 0x3, @void}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0x9, 0x2, 0xe, 0x7}, 0x1}}, @TCA_IFE_METALST={0x8, 0x6, [@IFE_META_PRIO={0x4, 0x3, @void}]}, @TCA_IFE_DMAC={0xa}]}, {0xd5, 0x6, "ea24eaca6fa4033ff041f2fce9d3c1d670a775bc9340867522722f7d422f4adcdae05a1dca9c8d57f52a9ddc68a9f7a206147890d5fa98966359f62798cfca69c114324af4543b39166bd4fa3fb1c8238f01b5ff4b9a6bb00011c5464502c05f1148c39f08a05f396660afee46437448b66de286710f39a63179eb210eab536c5ac6a070ae5cde78ffdc62751f34c0bf376e5dd515f03bd6b49b1add3732d47ea52b69ec35bf94ff69cc3298ef7de0e36f33e02bc6baae21643ff45b5d5b65b87870bf195019d9ce32932cf4f743d7c73c"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_police={0x1604, 0x14, 0x0, 0x0, {{0xb}, {0x1590, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x626f, 0x20000000, 0x80, 0x0, 0x0, {0xf, 0x2, 0x1, 0x100, 0x1, 0x6}, {0xa, 0x0, 0x8, 0x5, 0x49e, 0xfffffff8}, 0x0, 0x800, 0xfff}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xffffffffffffffff}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}], [@TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x1000, 0x9f, 0x8, 0x5, 0x0, 0x3, 0x3, 0x5, 0x1, 0xfff, 0x432718e3, 0x6, 0xf24, 0x6, 0x6, 0x6, 0x7, 0x8, 0x9, 0x7, 0x3, 0x8, 0x996, 0x7, 0x7ff, 0x6, 0x6720000, 0xffffffff, 0xffff, 0xffffff81, 0xc18e, 0x6ef9, 0xe, 0x1, 0xbd7, 0x80000000, 0x8, 0x2, 0xa877, 0x0, 0x1, 0x3, 0x9, 0x0, 0x0, 0x10000, 0x3, 0x8, 0x8, 0x6, 0x6, 0x200, 0xffffffff, 0x5, 0x1, 0x10000, 0xffff7fff, 0x7, 0xffffeff4, 0x2, 0x100, 0x800, 0x401, 0x4, 0x6, 0x6, 0x1ff, 0x7, 0x5, 0x7fff, 0x3, 0xfffffff9, 0x1, 0x71, 0x8001, 0x8, 0x4fe, 0x8c, 0x7, 0x4, 0x2, 0x3e, 0x4, 0x4, 0x3, 0x5, 0xe, 0xc, 0x3, 0x8, 0x1, 0x8, 0x40, 0x80, 0xb, 0x6, 0x9, 0x0, 0x0, 0x1, 0x5, 0x7, 0x2, 0x7, 0x6, 0x100, 0x80000000, 0x3, 0x0, 0x5, 0x0, 0x1, 0xfffffffb, 0x3, 0x7d08000, 0x401, 0x2, 0x400, 0x1ff, 0x4, 0x6, 0x1, 0x6, 0x9, 0x0, 0x9, 0x8, 0x8, 0x800, 0x7ff, 0x1, 0x8, 0x5, 0x101, 0x7, 0x4, 0x4, 0x7ff, 0x5, 0xa6d, 0x3, 0xb47, 0x17, 0x4b, 0x7, 0x7, 0xed1, 0x7, 0x1, 0x200, 0x6, 0x3b1, 0x40000000, 0x4, 0x5, 0xe, 0x0, 0x4, 0xa, 0xfffffffc, 0x7, 0x2280d997, 0x7, 0x55, 0xb7, 0x720, 0x81, 0x6, 0x80, 0x5, 0x38, 0x5, 0x3d, 0x800, 0x7fffffff, 0x200, 0x0, 0x9, 0x8, 0x9, 0xf, 0x5, 0x3, 0x7, 0x101, 0x3790f31e, 0x3, 0x8, 0x1, 0xf, 0x9, 0x1, 0x7, 0x2, 0x4000, 0x884e, 0x94e, 0xf5d, 0x105, 0x18, 0x1, 0x6c, 0x2, 0x1000, 0x2, 0x9, 0x0, 0x9, 0xe, 0x4, 0x2, 0x1, 0x8001, 0xffff, 0x9b, 0x0, 0x0, 0x7, 0x5, 0xf, 0x7f, 0x0, 0x544, 0x7806bbc4, 0x8001, 0x32f3, 0x5, 0x2, 0x1000, 0x800, 0x38, 0x9, 0xffff0000, 0x587dd1d, 0x4, 0x0, 0x34b, 0x952c, 0x7, 0x9, 0x6, 0x7, 0x9a, 0x0, 0x7, 0x8, 0x401, 0x8, 0x6, 0x9, 0x3, 0x5, 0x7, 0x9, 0x10000]}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x9}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x101}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0x7, 0x4, 0x2, 0xd8b, 0xffffaac8, 0x22e1, 0x4, 0x8, 0x4, 0xe, 0x7, 0x2, 0x0, 0x2, 0x937, 0x3, 0x10, 0x9, 0x4, 0x34, 0x2, 0x5, 0x6, 0x8, 0x37, 0x4, 0x5, 0x5, 0x2, 0x9, 0x9, 0x0, 0x7fff, 0xfffffffb, 0x8, 0x4, 0x7f5, 0x7fffffff, 0x217c, 0x8, 0xffffffff, 0x1, 0x7fffffff, 0x0, 0x2, 0x20000000, 0xce, 0xd, 0x4, 0x4007, 0x4, 0x8, 0x6c61, 0x6, 0x4, 0x2, 0xfffffffa, 0x0, 0x2, 0x1, 0x1, 0x2, 0x1, 0x5, 0x5, 0x10000, 0x3, 0xffff, 0x8, 0x10000, 0x5, 0x7f, 0x2, 0x6, 0x1, 0x4, 0x800, 0x7, 0x1, 0x6, 0x3, 0x8, 0xd, 0x9, 0x5, 0xffff, 0x0, 0x9, 0x9, 0x82, 0x8001, 0xffff23ad, 0x80, 0x9, 0xb, 0x40, 0x200, 0xa, 0x9, 0x52f, 0x2, 0x7, 0x40, 0x80000000, 0x8, 0x6, 0x2, 0x4, 0x8, 0x3, 0x5fa, 0x1, 0xbf, 0xfffffffe, 0x10000, 0x8, 0xa6, 0xfffffffe, 0x9, 0xffff, 0xd2, 0x82f, 0xe2a, 0x0, 0x81, 0x80000000, 0xad, 0x7ff, 0x40000000, 0x8, 0x8, 0x7, 0x4, 0xff, 0x800, 0x1, 0xcc5, 0x8, 0x2, 0x84, 0x4d, 0x5, 0xfff, 0xd26, 0x7702, 0xff, 0x7, 0xbd, 0x5, 0xf, 0x80, 0x6, 0xa, 0x1ce, 0x1, 0x2, 0x0, 0x8, 0x5, 0x1f55, 0x9, 0x8bad, 0x7, 0x60, 0x2f, 0x101, 0x9, 0x1, 0x73dd, 0x3, 0x5, 0x73f, 0x8, 0x2, 0x5a00000, 0x2, 0x6, 0x2, 0x9, 0x6, 0x1, 0xf24, 0x6, 0x7f, 0x258c, 0x7, 0x2, 0xf, 0x1, 0x5, 0x400, 0x7, 0x6, 0x7fff, 0x4, 0x8, 0x8, 0x1ff, 0x94000000, 0x7, 0x1, 0x9, 0x2, 0x4, 0x1b, 0x4, 0xffff0000, 0x6, 0x6e, 0x10000, 0x1, 0x8, 0x7, 0x4, 0x37d, 0x5, 0x8, 0x5, 0x27, 0x7, 0x81, 0x1, 0x0, 0x2, 0x1, 0x7, 0x3, 0x80, 0x5, 0x0, 0x1000, 0xfff, 0x72ad5ec8, 0x7ff, 0xb, 0x5, 0x5, 0x0, 0x0, 0x7, 0x0, 0x2, 0x6, 0x6, 0x5, 0x3, 0x10001, 0x800, 0x6, 0x800, 0xd31, 0x6, 0x4, 0x10, 0x3]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xf4, 0x42da4713, 0xffffffff, 0x91d, 0x1, 0x8e, 0x9, 0x0, 0xe, 0x3, 0xffffe372, 0x2, 0x6, 0xffffffff, 0x37, 0x8, 0x7f, 0x1, 0x8aad, 0x99b1, 0x3, 0x3, 0x2, 0xc000, 0x3, 0x62a3, 0xfffffffa, 0x9, 0x1, 0x3, 0x5, 0x6, 0x0, 0xfff, 0x8, 0x3ff, 0xe9d1, 0x7fff, 0x8, 0x523d, 0x1, 0x0, 0x4, 0x1, 0x9, 0xe, 0x9, 0x3, 0x7, 0x0, 0x3, 0x0, 0x3, 0xc, 0x7f, 0xeb, 0xd, 0x8, 0x3, 0x5, 0x1000, 0x7fffffff, 0x0, 0xffff, 0xc37, 0xf, 0x4, 0x6, 0x2, 0x3, 0x7, 0x80000001, 0x90, 0xff, 0xfffffffa, 0x80000000, 0xff4, 0x8, 0x200, 0x401, 0x3, 0x63f, 0x628c4c74, 0x4, 0x13c5fea6, 0x5, 0x8, 0xfff, 0xa, 0x7ff, 0x5, 0x42380db4, 0x8, 0x5, 0x8000, 0xffff, 0x1, 0x1, 0x4, 0x7b1f, 0x8, 0x5, 0x5, 0xdd5, 0x3, 0x234b, 0x0, 0xffff, 0x3, 0xc735, 0x657bbd1c, 0x8, 0x25, 0x9, 0x5, 0x6, 0xffffffff, 0x5, 0x244, 0x6, 0xff, 0x5b11, 0x7, 0x3f, 0x299c, 0x5, 0x200000, 0x7, 0x3a, 0x80000000, 0x1, 0x81, 0x100, 0x6, 0xfff, 0x1000, 0x1, 0x1000, 0x981, 0xf8af, 0x6, 0xe7a0e70, 0x7, 0xed, 0x7fff, 0x2, 0x6, 0x3, 0x800, 0x101, 0x2, 0x7, 0x6, 0x5, 0xffff8000, 0x8, 0xb9a5245, 0x40, 0x7f, 0xd15, 0x3, 0x7, 0xffff, 0x3, 0x3, 0x400, 0x7f, 0x6, 0x100, 0x80000001, 0x80000000, 0x6, 0x6, 0xffff, 0x281, 0xfff, 0x9, 0x10000, 0x2, 0x2, 0x2, 0x5, 0x89cd, 0x8, 0x2, 0x0, 0x1, 0x2, 0x0, 0x1, 0x4, 0x7, 0x0, 0x9, 0x3, 0x100, 0x7, 0x1, 0x1000, 0x98, 0x1000, 0x0, 0x513f, 0x20000000, 0x7, 0x7, 0x7565, 0x26, 0x3, 0x9e, 0x401, 0x3, 0x800, 0x180, 0x8, 0x3, 0x3, 0xff, 0x7, 0x9, 0x5, 0x0, 0x9, 0x109daad8, 0x9, 0x3, 0x6, 0x9, 0x4, 0x1000, 0xe, 0x4, 0xa, 0x4a0, 0x8, 0x5, 0x1000, 0x2, 0xffffffff, 0x27, 0x48370b35, 0x8, 0x4, 0xffffffff, 0x800, 0x2, 0xd, 0xb19, 0x3, 0x8, 0x8, 0x9, 0x7, 0x7, 0x9, 0x7fffffff]}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x9}, @TCA_POLICE_RESULT={0x8, 0x5, 0x54}, @TCA_POLICE_RESULT={0x8, 0x5, 0x80000000}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x1, 0x2, 0x5, 0x6, {0xa, 0x1, 0x5, 0x0, 0x6, 0x1000}, {0x1, 0x0, 0x9, 0x66b1, 0x400, 0x7}, 0x80000000, 0x3627, 0x9a3}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xe, 0x86a, 0xe5, 0x7, 0xa2e, 0x5, 0x9, 0x9, 0x6b81, 0x7, 0x7, 0x6, 0x234043c7, 0xfffffff9, 0xfffff001, 0x7f3f, 0xc, 0x6, 0x10001, 0x7fff, 0x7, 0x4, 0xfffffff9, 0x5, 0x425, 0xff, 0x5, 0x0, 0x0, 0xffff, 0x7, 0x1, 0x3, 0x100, 0x1ff, 0x6, 0x5, 0x4, 0x7, 0x3, 0x200, 0x7ff, 0x7, 0x7f, 0x9, 0x401, 0x3, 0x2, 0x7, 0x9, 0x0, 0x0, 0x74, 0x8001, 0x26c4, 0x3ff, 0x3, 0x401, 0x6, 0x0, 0x0, 0x0, 0x3, 0x8001, 0x43af, 0x8000, 0x9, 0x8001, 0x4, 0x3, 0xd, 0x8d, 0x5, 0x2, 0x0, 0x80000000, 0x6, 0x5, 0x86, 0x6eb, 0x7, 0x4, 0x10000, 0xb, 0x1, 0x3ff, 0xfff, 0x6, 0x1, 0x0, 0x8, 0x3, 0x101, 0x81, 0x7, 0x0, 0x5, 0x7, 0x5, 0x431, 0x38, 0x8, 0xff, 0x93c, 0x5, 0x10000, 0x9, 0x0, 0x78, 0x1000, 0x9, 0xc5, 0xb1be, 0xfff, 0x100, 0x2, 0xfffff800, 0xf6, 0x400, 0x9, 0x1, 0x3, 0x101, 0x6, 0x7, 0x7ff, 0x1, 0x2, 0x1, 0x1, 0x2, 0x80000001, 0x67, 0x80000001, 0x9, 0x3, 0x6, 0x6, 0x2, 0x9, 0x4, 0x9, 0x1, 0x6, 0xbaaf, 0x7, 0x80000000, 0x1, 0x0, 0x4, 0x1, 0x7f, 0xb, 0x1, 0x9c, 0x6, 0xfff, 0x8, 0x7, 0xf, 0x9, 0x2, 0x1, 0xe, 0x0, 0x3ff, 0x1, 0x5, 0xb, 0x6, 0x4, 0x5, 0x2, 0x1, 0xc, 0x17a1bc85, 0x4, 0x1, 0x3, 0x3, 0xffffff78, 0x6, 0xfffffffc, 0x6, 0x1, 0x1, 0x6, 0x3, 0x8, 0x45ee, 0x5, 0x1, 0xfff, 0x8, 0x401, 0x0, 0x3ff, 0x0, 0x4, 0x8, 0xfffffff9, 0x3, 0x26d, 0x2, 0x7, 0x400, 0x2, 0x80000000, 0x8, 0x7, 0x1a11, 0x10001, 0x3d, 0x8, 0x10000, 0x1, 0xa, 0x8, 0x7fffffff, 0xfffffffa, 0x8, 0xb901, 0xfffffff4, 0x10000002, 0xfffffffa, 0x80000, 0x5, 0x3, 0x8, 0x7, 0x9, 0x42, 0xfffffffb, 0x5, 0xf, 0x1000, 0xffff9615, 0x0, 0x9, 0x3, 0xff, 0x7, 0x80000000, 0xeb, 0x200, 0xe9, 0x0, 0x1, 0x800, 0x8, 0xa, 0x5, 0x5, 0x5, 0x0, 0x7fff]}, @TCA_POLICE_RATE={0x404, 0x2, [0x400, 0x800, 0xffff, 0x6, 0xfc0000, 0x0, 0xffff, 0x27dd, 0x8000, 0x0, 0x1, 0x4, 0x4, 0x1000, 0xe78, 0x27, 0x1, 0xfffffffc, 0x7ff, 0xfffffffe, 0xfffffffa, 0x401, 0x0, 0x67b, 0x8, 0x1, 0x4, 0x3, 0x7d2, 0x6, 0x5, 0x47b, 0x440d, 0xfff, 0x6f, 0x3, 0x7ff, 0x4, 0x8f4a81e, 0xfffffffe, 0xed, 0x0, 0x2, 0x0, 0x1, 0xfffffffa, 0x3ff, 0x8, 0x4, 0x59, 0x0, 0x7f, 0x4, 0x3ff, 0xc, 0x7fffffff, 0x8, 0xdd1, 0x2, 0x9, 0xff, 0xbe3, 0x5, 0x9, 0xf3, 0x6, 0x6, 0x8, 0x3, 0x3, 0x204e02c4, 0x3, 0x8, 0x100, 0x4, 0x9, 0xb3, 0x6e6, 0x8, 0x2, 0x736, 0xfffffffd, 0x4, 0x23a, 0x6, 0x1, 0xa497, 0xfff, 0xffffffff, 0xec5, 0x6, 0x5, 0x2, 0x8, 0x3ff, 0x789, 0x57f9da6e, 0x2, 0xe, 0x4482, 0xa2a4, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x4, 0xfffffffd, 0x1ff, 0x3, 0x7, 0x5, 0x1, 0xb3a4, 0xf, 0xfffffff7, 0x0, 0x4, 0x10000, 0x2, 0x4, 0x1, 0x0, 0x3, 0x8, 0x6, 0x2, 0x7, 0x1, 0x4, 0xcc88, 0xf3, 0x7, 0x9f2d, 0x6, 0xfffffff8, 0x6, 0x4, 0x40, 0x4, 0x1, 0x2a3d7ec9, 0x1, 0x80, 0x9d4d, 0x33317304, 0x800, 0x401, 0x16c, 0x9, 0xb, 0x7, 0x101, 0x57b4704f, 0x40, 0x0, 0x8000, 0x0, 0x17, 0x2e65, 0x8, 0x0, 0x473, 0x9c3b, 0xc669, 0x9, 0x3, 0x6, 0x100, 0xb60, 0x0, 0xf, 0x8, 0x8, 0x1, 0xa, 0x2, 0x1, 0x0, 0x7f, 0x8000, 0x1, 0x3, 0x5, 0x9, 0x5, 0x101, 0x6, 0x1a, 0x3, 0xc2, 0xf, 0x73, 0x6193, 0xa69d, 0x7e, 0x1, 0x7, 0xffffc2ec, 0x2, 0xfff, 0x1, 0xfffffff9, 0x3, 0xffffffb7, 0x9, 0x9, 0x8, 0x3e8, 0x0, 0x4, 0xd, 0x81, 0x4, 0x7, 0x6, 0x5e, 0xfe, 0xffffffff, 0xe2, 0x80, 0x90d, 0x2, 0x2, 0x5, 0x8001, 0x8, 0x2, 0x8, 0xe6, 0x4, 0x6, 0x7, 0xfffffff8, 0x3f, 0x40, 0x2, 0x400000, 0x9, 0x0, 0x2, 0x3, 0x6, 0x80, 0x5, 0x7fff, 0x9920, 0x4, 0x0, 0x2, 0x1, 0x40, 0x8, 0xc]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xe807, 0x1, 0x5, 0x178, 0x1ff, {0x7f, 0x2, 0xd6, 0x3, 0x1, 0x4}, {0x80, 0x0, 0x4, 0x9, 0xa67d, 0x8}, 0x6, 0xfff, 0x8000}}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1000}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1ff}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xa0a}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x200}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x7}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xf}, @TCA_POLICE_RESULT={0x8, 0x5, 0x6}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x20000005, 0x5, 0x7, 0x95f, {0x1, 0x0, 0x4, 0x6, 0x6, 0xf8a}, {0xa, 0x2, 0x7, 0xf000, 0x7, 0x1}, 0x6, 0x4, 0x9}}]]}, {0x4a, 0x6, "5040a5e02fb7923894ed3a59715c240fc7e0cbddb984e24bc7ad6e04c09b34da519f4a2569005b9081af3d62527e1171375c2b4d8a51702c8f1e033e09291a083e96177669d3"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_csum={0x130, 0x6, 0x0, 0x0, {{0x9}, {0x4}, {0x102, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ct={0x40, 0x15, 0x0, 0x0, {{0x7}, {0x18, 0x2, 0x0, 0x1, [@TCA_CT_LABELS_MASK={0x14, 0x8, "34baca99e8b54998636519506f45b6a1"}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}]}, {0x2e0, 0x1, [@m_bpf={0x104, 0x16, 0x0, 0x0, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x54, 0x4, [{0x0, 0xfe, 0x6, 0x80}, {0x70a, 0xb, 0x4, 0x6}, {0x9, 0x2}, {0xd, 0x4, 0x9, 0xc}, {0xc, 0x1, 0x6, 0x3}, {0xad6a, 0x43, 0x3, 0x2128}, {0x758, 0x7, 0x8, 0x1}, {0x4, 0xfa, 0xf8, 0xff}, {0x0, 0x0, 0x8, 0x3}, {0x2, 0x0, 0x0, 0x8}]}, @TCA_ACT_BPF_FD={0x8, 0x5, r1}, @TCA_ACT_BPF_OPS={0x1c, 0x4, [{0x2, 0x3, 0x81, 0x3}, {0x2, 0x8, 0x8, 0x6d}, {0xe, 0xff, 0x2, 0x5}]}]}, {0x61, 0x6, "79ea1654b4b3b757ae34a3b85ee4814ef438e2d19df742ee795afbefa6ae296c32d3004f12b10d9714c66f95cbf35313122b0c4033ca97590e65a6de66bef38d9b9b4e1dc5449f5a690b6ef23a723dae7fc652aef352920359e9a15c2e"}, {0xc, 0x7, {0x0, 0xed3a3a7e0c79aad0}}, {0xc, 0x8, {0x1}}}}, @m_connmark={0xd8, 0x13, 0x0, 0x0, {{0xd}, {0x74, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x8, 0x8, 0x5, 0x72}, 0x1}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x6, 0x0, 0xe, 0x8}, 0xe7bc}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0xfff, 0x10000000, 0x7, 0xc0}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x80000001, 0x800, 0x2, 0xfffffffd, 0x7}, 0x7}}]}, {0x38, 0x6, "b39b4023cd8b5dac4995142c9fcaf44226b94555d0ce496bf97a0fc6e6a3dc22fc16c7dce3ffa4dc95e71244ca93af6f9d4e2b63"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_bpf={0x100, 0x17, 0x0, 0x0, {{0x8}, {0x9c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x5}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_FD={0x8, 0x5, r2}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x400, 0x2, 0x6, 0x1, 0x80}}, @TCA_ACT_BPF_OPS={0x44, 0x4, [{0x800, 0x53, 0x0, 0xe}, {0x392, 0x1, 0xe2, 0x6}, {0x1, 0x9, 0x3, 0x6}, {0xa80, 0x80, 0x17, 0x3}, {0x5, 0x40, 0x2, 0x280}, {0x6, 0x7, 0x6, 0xbc0c}, {0x1, 0xf6, 0x5, 0x12d5}, {0x3, 0x9, 0x5, 0x7}]}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x4}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0xd, 0x1, 0xffffffffffffffff, 0x0, 0x6}}]}, {0x3f, 0x6, "e10eb8129dc91f35181a2c1a46dbf8c12e1d48156e9a2a42422b76f20e69852020cdf1372835ef9f7a5575f4538e3936e25d1d61d4e419b1c61479"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0x2d88}}, 0x0) r11 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="24000000031401002cbd7000fcdbdf250900020073797a3200000000080041"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000002840)=ANY=[@ANYBLOB="500000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d616373656300001800028005000900010000000c000100000000000000000008000500", @ANYRES32=r1], 0x50}}, 0x0) 211.183071ms ago: executing program 2 (id=3319): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)) 126.079145ms ago: executing program 2 (id=3320): syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="0f539af21094", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "1200b0", 0x38, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x4, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "277382", 0x0, 0x2c, 0x0, @private1, @rand_addr=' \x01\x00', [@srh={0x2c, 0x0, 0x4, 0x0, 0x3, 0x0, 0x365}]}}}}}}}, 0x0) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$X25_QBITINCL(r0, 0x106, 0x1, &(0x7f0000000000), 0x4) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f0000005380), 0x4) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, 0x0, 0x3c) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 95.924557ms ago: executing program 0 (id=3321): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x4) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000000000)=0x4, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) r5 = socket(0x2a, 0x2, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd2a, 0x2001, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x5, 0xd}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xff, 0xec2, 0x5, 0x2, 0x400}, 0x10000, 0x1, 0x7ff, 0x6, 0xe, 0x14, 0x1d, 0x1b, 0x6, 0x2, {0x6, 0x19d, 0xa9, 0x8, 0x7743, 0xfd1}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r6, {0xe, 0x7}, {}, {0x8, 0xffff}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x7, 0x8}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24004804}, 0x4000) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000001c0)={0x0, @initdev, @dev}, &(0x7f0000000200)=0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5}]}, 0x4c}}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_GET(r3, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f0000000240)={0x198, r4, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x24000001}, 0x1) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x32b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000040), &(0x7f00000000c0)=0x4) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000000000)=0x4, 0x4) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) (async) socket(0x2a, 0x2, 0x0) (async) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) (async) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd2a, 0x2001, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x5, 0xd}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xff, 0xec2, 0x5, 0x2, 0x400}, 0x10000, 0x1, 0x7ff, 0x6, 0xe, 0x14, 0x1d, 0x1b, 0x6, 0x2, {0x6, 0x19d, 0xa9, 0x8, 0x7743, 0xfd1}}}}]}, 0x78}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r6, {0xe, 0x7}, {}, {0x8, 0xffff}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x7, 0x8}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24004804}, 0x4000) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000001c0)={0x0, @initdev, @dev}, &(0x7f0000000200)=0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5}]}, 0x4c}}, 0x0) (async) sendmsg$ETHTOOL_MSG_COALESCE_GET(r3, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f0000000240)={0x198, r4, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x24000001}, 0x1) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x32b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) 512.7µs ago: executing program 2 (id=3322): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000008, 0x100010, r0, 0x131dd000) socket(0x1f, 0x80000, 0x7f) 0s ago: executing program 2 (id=3323): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x800, 0x0, @loopback, 0x4}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040), 0xfffffffffffffe80) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r2, 0x29, 0x4b, &(0x7f0000000300)=0xd, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_256={{0x303}, "280da28c6d3419a7", "5ce7bc15b133b9b5528e8d4fa2275fe29681fcfd07ac09f3c04217cc5a4bb7d0", '\x00', "e61996af6315894e"}, 0x38) sendto$inet6(r0, &(0x7f0000000340)="d1", 0x1, 0x8000, 0x0, 0x0) close(r1) recvmmsg(r0, &(0x7f00000051c0)=[{{&(0x7f0000000100)=@tipc, 0x80, &(0x7f0000000080)}, 0x180}, {{&(0x7f0000000180)=@pppoe={0x18, 0x0, {0x0, @remote}}, 0x80, &(0x7f0000000300)=[{&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f0000000280)=""/67, 0x43}, {&(0x7f0000000380)=""/151, 0x97}, {&(0x7f0000000500)=""/231, 0xe7}], 0x4, &(0x7f0000000440)=""/10, 0xa}, 0x8}, {{&(0x7f00000016c0)=@rc={0x1f, @none}, 0x80, &(0x7f0000001880)=[{&(0x7f0000001740)=""/45, 0x2d}, {&(0x7f0000001780)=""/21, 0x15}, {&(0x7f00000017c0)=""/189, 0xbd}], 0x3}, 0x7}, {{&(0x7f00000018c0)=@llc, 0x80, &(0x7f0000002ac0)=[{&(0x7f0000001940)=""/252, 0xfc}, {&(0x7f0000001a40)=""/60, 0x3c}, {&(0x7f0000001a80)=""/4096, 0x1000}, {&(0x7f0000002a80)=""/13, 0xd}], 0x4, &(0x7f0000002b00)=""/213, 0xd5}, 0xfffffffd}, {{&(0x7f0000002c00)=@xdp, 0x80, &(0x7f0000002ec0)=[{&(0x7f0000002c80)=""/130, 0x82}, {&(0x7f0000002d40)=""/146, 0x92}, {&(0x7f0000002e00)=""/17, 0x11}, {&(0x7f0000002e40)=""/91, 0x5b}], 0x4, &(0x7f0000002f00)=""/219, 0xdb}, 0x10}, {{&(0x7f0000003000)=@ax25={{0x3, @bcast}, [@rose, @rose, @rose, @bcast, @bcast, @rose, @bcast, @rose]}, 0x80, &(0x7f0000003380)=[{&(0x7f0000003080)=""/211, 0xd3}, {&(0x7f0000003180)=""/224, 0xe0}, {&(0x7f0000003280)=""/198, 0xc6}], 0x3, &(0x7f00000033c0)=""/4096, 0x1000}, 0x3}, {{&(0x7f00000043c0)=@phonet, 0x80, &(0x7f0000004540)=[{&(0x7f0000004440)=""/168, 0xa8}, {&(0x7f0000004500)=""/39, 0x27}], 0x2, &(0x7f0000004580)=""/235, 0xeb}, 0x10000}, {{0x0, 0x0, &(0x7f0000004b80)=[{&(0x7f0000004680)=""/114, 0x72}, {&(0x7f0000004700)=""/30, 0x1e}, {&(0x7f0000004740)=""/176, 0xb0}, {&(0x7f0000004800)=""/28, 0x1c}, {&(0x7f0000004840)=""/71, 0x47}, {&(0x7f00000048c0)=""/217, 0xd9}, {&(0x7f00000049c0)=""/153, 0x99}, {&(0x7f0000004a80)=""/218, 0xda}], 0x8, &(0x7f0000004c00)=""/198, 0xc6}, 0x4}, {{&(0x7f0000004d00)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000005080)=[{&(0x7f0000004d80)=""/240, 0xf0}, {&(0x7f0000004e80)=""/244, 0xf4}, {&(0x7f0000004f80)=""/253, 0xfd}], 0x3}, 0x10001}, {{&(0x7f00000050c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000005140), 0x0, &(0x7f0000005180)=""/18, 0x12}, 0x1000}], 0xa, 0x10040, &(0x7f0000005440)) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x4040004}, 0xc000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="6a0ac4ff0000000071109d000000000095"], &(0x7f0000000480)='GPL\x00', 0x3}, 0x94) kernel console output (not intermixed with test programs): pe 4 has an invalid length. [ 157.365120][T11597] pim6reg1: entered allmulticast mode [ 157.465979][T11607] netlink: 'syz.1.1718': attribute type 1 has an invalid length. [ 157.591405][T11623] hsr_slave_0: left promiscuous mode [ 157.609808][T11623] hsr_slave_1: left promiscuous mode [ 158.215341][T11671] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 158.234191][T11674] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 158.461345][ T5940] tipc: Node number set to 94399906 [ 158.696628][T11720] tipc: Enabled bearer , priority 0 [ 158.706181][T11720] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 158.723763][T11720] tipc: Resetting bearer [ 158.764867][T11729] vcan0: tx drop: invalid da for name 0x0000040000000000 [ 158.985294][T11746] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 159.002822][T11748] sock: sock_timestamping_bind_phc: sock not bind to device [ 159.015414][T11748] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 159.076485][T11752] lo: entered promiscuous mode [ 159.087020][T11752] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 159.466987][T11782] FAULT_INJECTION: forcing a failure. [ 159.466987][T11782] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 159.496413][T11782] CPU: 0 UID: 0 PID: 11782 Comm: syz.2.1773 Not tainted syzkaller #0 PREEMPT(full) [ 159.496444][T11782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 159.496456][T11782] Call Trace: [ 159.496479][T11782] [ 159.496487][T11782] dump_stack_lvl+0x189/0x250 [ 159.496522][T11782] ? __pfx____ratelimit+0x10/0x10 [ 159.496550][T11782] ? __pfx_dump_stack_lvl+0x10/0x10 [ 159.496573][T11782] ? __pfx__printk+0x10/0x10 [ 159.496602][T11782] ? rcu_is_watching+0x15/0xb0 [ 159.496623][T11782] should_fail_ex+0x414/0x560 [ 159.496650][T11782] _copy_to_user+0x31/0xb0 [ 159.496674][T11782] simple_read_from_buffer+0xe1/0x170 [ 159.496703][T11782] proc_fail_nth_read+0x1b3/0x220 [ 159.496728][T11782] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 159.496751][T11782] ? rw_verify_area+0x2a6/0x4d0 [ 159.496775][T11782] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 159.496797][T11782] vfs_read+0x200/0xa30 [ 159.496820][T11782] ? fdget_pos+0x247/0x320 [ 159.496840][T11782] ? __pfx___mutex_lock+0x10/0x10 [ 159.496869][T11782] ? __pfx_vfs_read+0x10/0x10 [ 159.496897][T11782] ? __fget_files+0x3a0/0x420 [ 159.496923][T11782] ? __fget_files+0x2a/0x420 [ 159.496954][T11782] ksys_read+0x145/0x250 [ 159.496978][T11782] ? __pfx_ksys_read+0x10/0x10 [ 159.497001][T11782] ? rcu_is_watching+0x15/0xb0 [ 159.497022][T11782] ? rcu_is_watching+0x15/0xb0 [ 159.497043][T11782] do_syscall_64+0xfa/0x3b0 [ 159.497071][T11782] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.497090][T11782] ? clear_bhb_loop+0x60/0xb0 [ 159.497111][T11782] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.497130][T11782] RIP: 0033:0x7f938b98d5fc [ 159.497148][T11782] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 159.497167][T11782] RSP: 002b:00007f938c80d030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 159.497191][T11782] RAX: ffffffffffffffda RBX: 00007f938bbb5fa0 RCX: 00007f938b98d5fc [ 159.497206][T11782] RDX: 000000000000000f RSI: 00007f938c80d0a0 RDI: 0000000000000003 [ 159.497218][T11782] RBP: 00007f938c80d090 R08: 0000000000000000 R09: 0000000000000000 [ 159.497230][T11782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 159.497243][T11782] R13: 00007f938bbb6038 R14: 00007f938bbb5fa0 R15: 00007ffe2def3418 [ 159.497273][T11782] [ 159.948420][T11798] lo speed is unknown, defaulting to 1000 [ 159.961981][T11798] lo speed is unknown, defaulting to 1000 [ 160.151054][T11814] __nla_validate_parse: 94 callbacks suppressed [ 160.151077][T11814] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1786'. [ 160.416901][T11829] syzkaller0: entered promiscuous mode [ 160.428652][T11829] syzkaller0: entered allmulticast mode [ 160.462180][T11838] ipvlan3: entered promiscuous mode [ 160.569175][T11847] !: renamed from bond_slave_0 [ 160.787272][T11866] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1802'. [ 160.947176][T11877] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1803'. [ 161.011899][T11869] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1803'. [ 161.028425][T11885] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1808'. [ 161.091006][T11893] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1810'. [ 161.137169][T11894] netlink: 50 bytes leftover after parsing attributes in process `syz.3.1809'. [ 161.153412][T11899] openvswitch: netlink: Key type 29 is not supported [ 161.177214][T11899] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1811'. [ 161.188363][T11899] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1811'. [ 161.231048][T11902] tipc: Enabled bearer , priority 0 [ 161.238816][T11902] syzkaller0: entered promiscuous mode [ 161.248856][T11902] syzkaller0: entered allmulticast mode [ 161.285740][T11902] tipc: Resetting bearer [ 161.311227][T11911] validate_nla: 3 callbacks suppressed [ 161.311249][T11911] netlink: 'syz.1.1817': attribute type 10 has an invalid length. [ 161.325465][T11900] tipc: Resetting bearer [ 161.336294][T11900] tipc: Disabling bearer [ 161.528395][T11930] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1823'. [ 161.610479][T11939] netlink: 'syz.2.1824': attribute type 21 has an invalid length. [ 161.611453][T11937] netlink: 'syz.2.1824': attribute type 1 has an invalid length. [ 161.633059][T11937] netlink: 'syz.2.1824': attribute type 2 has an invalid length. [ 161.637946][T11939] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 161.655906][T11937] netlink: 'syz.2.1824': attribute type 1 has an invalid length. [ 181.154100][T11977] pim6reg: left allmulticast mode [ 181.241522][T11990] __nla_validate_parse: 1 callbacks suppressed [ 181.241544][T11990] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1826'. [ 181.289441][T11993] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1831'. [ 181.370070][T11987] netlink: 'syz.2.1830': attribute type 11 has an invalid length. [ 181.398834][T11987] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1830'. [ 181.400879][T12001] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1833'. [ 181.547062][T12006] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1835'. [ 181.606524][T12013] netlink: 'syz.0.1837': attribute type 29 has an invalid length. [ 181.668426][T12013] netlink: 'syz.0.1837': attribute type 29 has an invalid length. [ 181.699284][T12013] netlink: 'syz.0.1837': attribute type 1 has an invalid length. [ 181.733953][T12013] netlink: 'syz.0.1837': attribute type 2 has an invalid length. [ 181.778318][T12013] netlink: 'syz.0.1837': attribute type 29 has an invalid length. [ 181.793793][T12013] netlink: 'syz.0.1837': attribute type 29 has an invalid length. [ 182.075726][T12042] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1850'. [ 182.121834][T12025] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1841'. [ 182.345922][T12063] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1856'. [ 182.487064][T12074] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1859'. [ 182.518924][T12079] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1861'. [ 182.522981][T12078] netlink: 'syz.4.1862': attribute type 4 has an invalid length. [ 182.532892][T12079] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 182.565507][T12078] netlink: 'syz.4.1862': attribute type 4 has an invalid length. [ 182.607275][ T43] lo speed is unknown, defaulting to 1000 [ 182.630644][ T43] syz2: Port: 1 Link ACTIVE [ 182.641941][T12089] netlink: 'syz.1.1864': attribute type 1 has an invalid length. [ 182.642163][T12078] netlink: 'syz.4.1862': attribute type 4 has an invalid length. [ 182.732652][ T24] lo speed is unknown, defaulting to 1000 [ 182.752190][ T24] syz2: Port: 1 Link DOWN [ 183.030951][T12124] lo speed is unknown, defaulting to 1000 [ 183.048295][T12124] lo speed is unknown, defaulting to 1000 [ 183.378035][T12150] team0: Device veth1_macvtap failed to register rx_handler [ 184.493329][T12217] syz_tun: left allmulticast mode [ 184.498692][T12217] syz_tun: left promiscuous mode [ 184.536512][T12217] bridge0: port 1(syz_tun) entered disabled state [ 184.620696][T12229] team0: Device vti1 is up. Set it down before adding it as a team port [ 184.655469][T12235] gtp0: entered promiscuous mode [ 184.663591][T12235] gtp0: entered allmulticast mode [ 185.039957][T12254] mac80211_hwsim hwsim11 syzkaller0: left promiscuous mode [ 185.058756][T12254] mac80211_hwsim hwsim11 syzkaller0: left allmulticast mode [ 185.077051][T12254] tipc: Resetting bearer [ 185.453228][T12276] bridge_slave_0: entered allmulticast mode [ 185.496521][T12276] bridge_slave_0: entered promiscuous mode [ 186.000325][T12320] lo: left promiscuous mode [ 186.009980][T12320] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 186.040937][T12323] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 186.049005][T12323] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 186.061326][T12323] tipc: Resetting bearer [ 186.083728][T12323] tipc: Enabling of bearer rejected, already enabled [ 186.316242][T12069] udevd[12069]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 186.682273][T12372] __nla_validate_parse: 19 callbacks suppressed [ 186.682297][T12372] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1961'. [ 186.797979][T12379] veth0_to_team: entered promiscuous mode [ 186.804625][T12382] validate_nla: 5 callbacks suppressed [ 186.804645][T12382] netlink: 'syz.0.1965': attribute type 1 has an invalid length. [ 186.827638][T12379] veth0_to_team: entered allmulticast mode [ 186.835959][T12382] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 186.858538][T12387] netlink: 'syz.2.1968': attribute type 9 has an invalid length. [ 187.083421][T12402] ieee802154 phy1 wpan1: encryption failed: -22 [ 187.099862][T12402] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1975'. [ 187.135069][T12402] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1975'. [ 187.164164][T12410] ieee802154 phy1 wpan1: encryption failed: -22 [ 187.409080][T12424] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 187.485604][T12424] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 187.572482][T12437] bond7: entered promiscuous mode [ 187.584725][T12437] bond7: entered allmulticast mode [ 187.592634][T12437] 8021q: adding VLAN 0 to HW filter on device bond7 [ 187.601979][T12437] bridge9: port 1(bond7) entered blocking state [ 187.609031][T12437] bridge9: port 1(bond7) entered disabled state [ 187.659226][T12441] netlink: 'syz.4.1986': attribute type 6 has an invalid length. [ 187.694394][T12444] netlink: 'syz.4.1986': attribute type 6 has an invalid length. [ 187.717767][T12450] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1987'. [ 187.728796][T12450] tipc: Disabling bearer [ 187.861716][T12461] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1992'. [ 187.908117][T12461] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1992'. [ 187.918213][T12461] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1992'. [ 188.035568][T12474] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1995'. [ 188.054554][T12475] lo speed is unknown, defaulting to 1000 [ 188.063196][T12478] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1996'. [ 188.068643][T12475] sctp: [Deprecated]: syz.4.1994 (pid 12475) Use of int in max_burst socket option. [ 188.068643][T12475] Use struct sctp_assoc_value instead [ 188.105261][T12474] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1995'. [ 188.365418][T12515] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 188.538768][T12529] netlink: 'syz.4.2010': attribute type 13 has an invalid length. [ 188.581270][T10805] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 188.598733][T10805] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 188.622640][T10805] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 188.684826][T12535] veth7: entered allmulticast mode [ 189.251195][T12585] hsr_slave_0: left promiscuous mode [ 189.272334][T12585] hsr_slave_1: left promiscuous mode [ 189.415495][T12598] tipc: MTU too low for tipc bearer [ 189.766544][T12626] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 190.206454][T12664] netlink: 'syz.1.2051': attribute type 1 has an invalid length. [ 190.233945][T12664] netlink: 'syz.1.2051': attribute type 2 has an invalid length. [ 190.296603][T10796] netdevsim netdevsim2 : set [0, 0] type 1 family 0 port 8472 - 0 [ 190.306770][T10796] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 190.347991][T10796] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 190.371065][T10796] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 190.417363][T12677] netlink: 'syz.4.2057': attribute type 23 has an invalid length. [ 190.733273][T12701] 8021q: VLANs not supported on gre0 [ 190.845883][T12707] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 190.860238][T12704] lo speed is unknown, defaulting to 1000 [ 190.881061][T12704] lo speed is unknown, defaulting to 1000 [ 190.900756][T12715] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 191.344455][T12743] netlink: 'syz.0.2075': attribute type 1 has an invalid length. [ 191.453988][T12753] netlink: 'syz.2.2080': attribute type 4 has an invalid length. [ 191.585314][T12760] lo speed is unknown, defaulting to 1000 [ 191.593859][T12760] lo speed is unknown, defaulting to 1000 [ 191.632174][T12767] sctp: [Deprecated]: syz.4.2084 (pid 12767) Use of struct sctp_assoc_value in delayed_ack socket option. [ 191.632174][T12767] Use struct sctp_sack_info instead [ 191.809205][T12767] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 191.849835][T12767] __nla_validate_parse: 19 callbacks suppressed [ 191.849857][T12767] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2084'. [ 192.006003][T12796] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2087'. [ 192.113320][T12800] netlink: 'syz.4.2093': attribute type 21 has an invalid length. [ 192.418122][T12816] FAULT_INJECTION: forcing a failure. [ 192.418122][T12816] name failslab, interval 1, probability 0, space 0, times 0 [ 192.474726][T12816] CPU: 1 UID: 0 PID: 12816 Comm: syz.0.2100 Not tainted syzkaller #0 PREEMPT(full) [ 192.474757][T12816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 192.474769][T12816] Call Trace: [ 192.474776][T12816] [ 192.474784][T12816] dump_stack_lvl+0x189/0x250 [ 192.474814][T12816] ? __pfx____ratelimit+0x10/0x10 [ 192.474843][T12816] ? __pfx_dump_stack_lvl+0x10/0x10 [ 192.474866][T12816] ? __pfx__printk+0x10/0x10 [ 192.474895][T12816] ? fs_reclaim_acquire+0x7d/0x100 [ 192.474924][T12816] ? rcu_is_watching+0x15/0xb0 [ 192.474944][T12816] ? __pfx___might_resched+0x10/0x10 [ 192.474963][T12816] ? lock_acquire+0x5f/0x360 [ 192.474993][T12816] should_fail_ex+0x414/0x560 [ 192.475029][T12816] should_failslab+0xa8/0x100 [ 192.475058][T12816] __kmalloc_cache_noprof+0x70/0x3d0 [ 192.475085][T12816] ? sctp_association_new+0x89/0x25f0 [ 192.475109][T12816] sctp_association_new+0x89/0x25f0 [ 192.475129][T12816] ? apparmor_capable+0x137/0x1b0 [ 192.475153][T12816] ? bpf_lsm_capable+0x9/0x20 [ 192.475180][T12816] ? security_capable+0x7e/0x2e0 [ 192.475212][T12816] sctp_connect_new_asoc+0x2c5/0x690 [ 192.475236][T12816] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 192.475256][T12816] ? lock_release+0x4b/0x3e0 [ 192.475283][T12816] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 192.475304][T12816] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 192.475324][T12816] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 192.475344][T12816] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 192.475368][T12816] ? security_sctp_bind_connect+0x7e/0x2e0 [ 192.475395][T12816] sctp_sendmsg+0x155c/0x2810 [ 192.475431][T12816] ? __pfx_sctp_sendmsg+0x10/0x10 [ 192.475462][T12816] ? aa_sk_perm+0x81e/0x950 [ 192.475493][T12816] ? __pfx_aa_sk_perm+0x10/0x10 [ 192.475522][T12816] ? sock_rps_record_flow+0x19/0x410 [ 192.475548][T12816] ? inet_sendmsg+0x2f4/0x370 [ 192.475571][T12816] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 192.475594][T12816] __sock_sendmsg+0x19c/0x270 [ 192.475621][T12816] ____sys_sendmsg+0x505/0x830 [ 192.475645][T12816] ? __pfx_____sys_sendmsg+0x10/0x10 [ 192.475665][T12816] ? __might_fault+0xb0/0x130 [ 192.475695][T12816] ? import_iovec+0x74/0xa0 [ 192.475721][T12816] ___sys_sendmsg+0x21f/0x2a0 [ 192.475749][T12816] ? __pfx____sys_sendmsg+0x10/0x10 [ 192.475787][T12816] ? __fget_files+0x2a/0x420 [ 192.475815][T12816] ? __fget_files+0x3a0/0x420 [ 192.475849][T12816] __x64_sys_sendmsg+0x19b/0x260 [ 192.475871][T12816] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 192.475898][T12816] ? __pfx_ksys_write+0x10/0x10 [ 192.475922][T12816] ? rcu_is_watching+0x15/0xb0 [ 192.475944][T12816] ? rcu_is_watching+0x15/0xb0 [ 192.475965][T12816] do_syscall_64+0xfa/0x3b0 [ 192.475994][T12816] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.476022][T12816] ? clear_bhb_loop+0x60/0xb0 [ 192.476044][T12816] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.476065][T12816] RIP: 0033:0x7f70d378ebe9 [ 192.476084][T12816] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 192.476102][T12816] RSP: 002b:00007f70d19f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 192.476127][T12816] RAX: ffffffffffffffda RBX: 00007f70d39b5fa0 RCX: 00007f70d378ebe9 [ 192.476143][T12816] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000005 [ 192.476158][T12816] RBP: 00007f70d19f6090 R08: 0000000000000000 R09: 0000000000000000 [ 192.476172][T12816] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 192.476185][T12816] R13: 00007f70d39b6038 R14: 00007f70d39b5fa0 R15: 00007fffd9b12368 [ 192.476210][T12816] [ 192.848239][T12818] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2101'. [ 192.931138][T12827] netlink: 'syz.1.2105': attribute type 1 has an invalid length. [ 192.941360][T12827] netlink: 244 bytes leftover after parsing attributes in process `syz.1.2105'. [ 193.045268][T12835] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 193.092137][T12836] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2105'. [ 193.217995][T12827] "syz.1.2105" (12827) uses obsolete ecb(arc4) skcipher [ 193.256240][T12855] netlink: 'syz.4.2112': attribute type 1 has an invalid length. [ 193.322876][T12861] IPVS: length: 157 != 24 [ 193.330224][T12855] bond8: (slave vxcan3): The slave device specified does not support setting the MAC address [ 193.345306][T12855] bond8: (slave vxcan3): Error -95 calling set_mac_address [ 193.382484][T12867] macvlan0: entered promiscuous mode [ 193.387910][T12867] macvlan0: entered allmulticast mode [ 193.394545][T12867] bond8: entered promiscuous mode [ 193.402535][T12867] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 193.432212][T12867] bond8: left promiscuous mode [ 193.569080][T12866] tipc: Enabled bearer , priority 0 [ 193.592102][T12877] veth0: entered promiscuous mode [ 193.608945][T12865] tipc: Resetting bearer [ 193.702552][T12865] tipc: Disabling bearer [ 193.714630][T12873] veth0: left promiscuous mode [ 193.717404][T12890] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2123'. [ 193.742098][T12890] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2123'. [ 193.771561][T12890] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2123'. [ 193.819892][T12894] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2125'. [ 193.851406][T12890] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2123'. [ 193.898268][T12902] FAULT_INJECTION: forcing a failure. [ 193.898268][T12902] name failslab, interval 1, probability 0, space 0, times 0 [ 193.913679][T12902] CPU: 0 UID: 0 PID: 12902 Comm: syz.2.2126 Not tainted syzkaller #0 PREEMPT(full) [ 193.913708][T12902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 193.913720][T12902] Call Trace: [ 193.913727][T12902] [ 193.913734][T12902] dump_stack_lvl+0x189/0x250 [ 193.913772][T12902] ? __pfx____ratelimit+0x10/0x10 [ 193.913798][T12902] ? __pfx_dump_stack_lvl+0x10/0x10 [ 193.913819][T12902] ? __pfx__printk+0x10/0x10 [ 193.913845][T12902] ? fs_reclaim_acquire+0x7d/0x100 [ 193.913872][T12902] ? rcu_is_watching+0x15/0xb0 [ 193.913889][T12902] ? __pfx___might_resched+0x10/0x10 [ 193.913907][T12902] ? lock_acquire+0x5f/0x360 [ 193.913936][T12902] should_fail_ex+0x414/0x560 [ 193.913962][T12902] should_failslab+0xa8/0x100 [ 193.913989][T12902] __kmalloc_cache_noprof+0x70/0x3d0 [ 193.914013][T12902] ? sctp_association_new+0x89/0x25f0 [ 193.914036][T12902] sctp_association_new+0x89/0x25f0 [ 193.914054][T12902] ? sctp_do_bind+0x65a/0x940 [ 193.914078][T12902] sctp_connect_new_asoc+0x2c5/0x690 [ 193.914098][T12902] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 193.914115][T12902] ? __local_bh_enable_ip+0x12d/0x1c0 [ 193.914137][T12902] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 193.914159][T12902] ? security_sctp_bind_connect+0x7e/0x2e0 [ 193.914184][T12902] sctp_sendmsg+0x155c/0x2810 [ 193.914218][T12902] ? __pfx_sctp_sendmsg+0x10/0x10 [ 193.914247][T12902] ? aa_sk_perm+0x81e/0x950 [ 193.914276][T12902] ? __pfx_aa_sk_perm+0x10/0x10 [ 193.914304][T12902] ? sock_rps_record_flow+0x19/0x410 [ 193.914329][T12902] ? inet_sendmsg+0x2f4/0x370 [ 193.914352][T12902] __sock_sendmsg+0x19c/0x270 [ 193.914378][T12902] ____sys_sendmsg+0x505/0x830 [ 193.914399][T12902] ? __pfx_____sys_sendmsg+0x10/0x10 [ 193.914417][T12902] ? __might_fault+0xb0/0x130 [ 193.914444][T12902] ? import_iovec+0x74/0xa0 [ 193.914462][T12902] ___sys_sendmsg+0x21f/0x2a0 [ 193.914478][T12902] ? __pfx____sys_sendmsg+0x10/0x10 [ 193.914507][T12902] ? __fget_files+0x2a/0x420 [ 193.914529][T12902] ? __fget_files+0x3a0/0x420 [ 193.914555][T12902] __x64_sys_sendmsg+0x19b/0x260 [ 193.914571][T12902] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 193.914590][T12902] ? __pfx_ksys_write+0x10/0x10 [ 193.914611][T12902] ? rcu_is_watching+0x15/0xb0 [ 193.914627][T12902] ? rcu_is_watching+0x15/0xb0 [ 193.914642][T12902] do_syscall_64+0xfa/0x3b0 [ 193.914665][T12902] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.914680][T12902] ? clear_bhb_loop+0x60/0xb0 [ 193.914698][T12902] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.914712][T12902] RIP: 0033:0x7f938b98ebe9 [ 193.914727][T12902] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 193.914741][T12902] RSP: 002b:00007f938c80d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 193.914767][T12902] RAX: ffffffffffffffda RBX: 00007f938bbb5fa0 RCX: 00007f938b98ebe9 [ 193.914780][T12902] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000005 [ 193.914790][T12902] RBP: 00007f938c80d090 R08: 0000000000000000 R09: 0000000000000000 [ 193.914799][T12902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 193.914809][T12902] R13: 00007f938bbb6038 R14: 00007f938bbb5fa0 R15: 00007ffe2def3418 [ 193.914826][T12902] [ 194.482833][T12913] bond5: (slave bond6): Releasing backup interface [ 194.489824][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.508872][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.570900][T12928] FAULT_INJECTION: forcing a failure. [ 194.570900][T12928] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 194.621080][T12928] CPU: 0 UID: 0 PID: 12928 Comm: syz.2.2135 Not tainted syzkaller #0 PREEMPT(full) [ 194.621115][T12928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 194.621128][T12928] Call Trace: [ 194.621135][T12928] [ 194.621143][T12928] dump_stack_lvl+0x189/0x250 [ 194.621173][T12928] ? __pfx____ratelimit+0x10/0x10 [ 194.621202][T12928] ? __pfx_dump_stack_lvl+0x10/0x10 [ 194.621223][T12928] ? __pfx__printk+0x10/0x10 [ 194.621247][T12928] ? __might_fault+0xb0/0x130 [ 194.621276][T12928] ? rcu_is_watching+0x15/0xb0 [ 194.621296][T12928] should_fail_ex+0x414/0x560 [ 194.621323][T12928] _copy_from_user+0x2d/0xb0 [ 194.621344][T12928] ___sys_sendmsg+0x158/0x2a0 [ 194.621365][T12928] ? __pfx____sys_sendmsg+0x10/0x10 [ 194.621401][T12928] ? __fget_files+0x2a/0x420 [ 194.621429][T12928] ? __fget_files+0x3a0/0x420 [ 194.621461][T12928] __x64_sys_sendmsg+0x19b/0x260 [ 194.621482][T12928] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 194.621506][T12928] ? __pfx_ksys_write+0x10/0x10 [ 194.621528][T12928] ? rcu_is_watching+0x15/0xb0 [ 194.621549][T12928] ? rcu_is_watching+0x15/0xb0 [ 194.621569][T12928] do_syscall_64+0xfa/0x3b0 [ 194.621597][T12928] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.621615][T12928] ? clear_bhb_loop+0x60/0xb0 [ 194.621635][T12928] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.621652][T12928] RIP: 0033:0x7f938b98ebe9 [ 194.621669][T12928] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 194.621696][T12928] RSP: 002b:00007f938c7ec038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 194.621721][T12928] RAX: ffffffffffffffda RBX: 00007f938bbb6090 RCX: 00007f938b98ebe9 [ 194.621745][T12928] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000004 [ 194.621759][T12928] RBP: 00007f938c7ec090 R08: 0000000000000000 R09: 0000000000000000 [ 194.621772][T12928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 194.621784][T12928] R13: 00007f938bbb6128 R14: 00007f938bbb6090 R15: 00007ffe2def3418 [ 194.621806][T12928] [ 195.074766][T12943] macsec3: entered promiscuous mode [ 195.123059][T12943] bridge0: entered promiscuous mode [ 195.153875][T12943] bridge0: port 1(macsec3) entered blocking state [ 195.175444][T12943] bridge0: port 1(macsec3) entered disabled state [ 195.206040][T12943] macsec3: entered allmulticast mode [ 195.229392][T12943] bridge0: entered allmulticast mode [ 195.257034][T12943] macsec3: left allmulticast mode [ 195.274758][T12943] bridge0: left allmulticast mode [ 195.294500][T12943] bridge0: left promiscuous mode [ 195.511008][T12978] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 195.617231][T12990] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 195.620442][T12978] netlink: 'syz.0.2148': attribute type 39 has an invalid length. [ 195.720571][T12973] tipc: Resetting bearer [ 195.843516][T10801] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 195.889877][T10801] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 195.926789][T10804] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 195.959262][T10804] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 195.973352][T13008] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 196.168460][T13008] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 196.204075][T13016] syzkaller0: entered promiscuous mode [ 196.210385][T13016] syzkaller0: entered allmulticast mode [ 196.629285][T13066] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 196.678411][T13070] lo speed is unknown, defaulting to 1000 [ 196.687601][T13066] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.697469][T13070] lo speed is unknown, defaulting to 1000 [ 196.907891][T13084] FAULT_INJECTION: forcing a failure. [ 196.907891][T13084] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 196.930104][T13084] CPU: 0 UID: 0 PID: 13084 Comm: syz.1.2179 Not tainted syzkaller #0 PREEMPT(full) [ 196.930136][T13084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 196.930148][T13084] Call Trace: [ 196.930156][T13084] [ 196.930164][T13084] dump_stack_lvl+0x189/0x250 [ 196.930194][T13084] ? __pfx____ratelimit+0x10/0x10 [ 196.930221][T13084] ? __pfx_dump_stack_lvl+0x10/0x10 [ 196.930244][T13084] ? __pfx__printk+0x10/0x10 [ 196.930268][T13084] ? __might_fault+0xb0/0x130 [ 196.930298][T13084] ? rcu_is_watching+0x15/0xb0 [ 196.930318][T13084] should_fail_ex+0x414/0x560 [ 196.930345][T13084] _copy_from_iter+0x1db/0x16f0 [ 196.930367][T13084] ? rcu_is_watching+0x15/0xb0 [ 196.930386][T13084] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 196.930414][T13084] ? __pfx__copy_from_iter+0x10/0x10 [ 196.930433][T13084] ? __build_skb_around+0x257/0x3e0 [ 196.930464][T13084] ? netlink_sendmsg+0x642/0xb30 [ 196.930492][T13084] ? skb_put+0x11b/0x210 [ 196.930511][T13084] netlink_sendmsg+0x6b2/0xb30 [ 196.930543][T13084] ? __pfx_netlink_sendmsg+0x10/0x10 [ 196.930573][T13084] ? aa_sock_msg_perm+0xf1/0x1d0 [ 196.930591][T13084] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 196.930612][T13084] ? __pfx_netlink_sendmsg+0x10/0x10 [ 196.930640][T13084] __sock_sendmsg+0x21c/0x270 [ 196.930666][T13084] ____sys_sendmsg+0x505/0x830 [ 196.930689][T13084] ? __pfx_____sys_sendmsg+0x10/0x10 [ 196.930712][T13084] ? import_iovec+0x74/0xa0 [ 196.930732][T13084] ___sys_sendmsg+0x21f/0x2a0 [ 196.930763][T13084] ? __pfx____sys_sendmsg+0x10/0x10 [ 196.930800][T13084] ? __fget_files+0x2a/0x420 [ 196.930827][T13084] ? __fget_files+0x3a0/0x420 [ 196.930860][T13084] __x64_sys_sendmsg+0x19b/0x260 [ 196.930881][T13084] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 196.930906][T13084] ? __pfx_ksys_write+0x10/0x10 [ 196.930931][T13084] ? rcu_is_watching+0x15/0xb0 [ 196.930957][T13084] ? rcu_is_watching+0x15/0xb0 [ 196.930977][T13084] do_syscall_64+0xfa/0x3b0 [ 196.931005][T13084] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.931024][T13084] ? clear_bhb_loop+0x60/0xb0 [ 196.931046][T13084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.931065][T13084] RIP: 0033:0x7f2cabb8ebe9 [ 196.931083][T13084] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 196.931101][T13084] RSP: 002b:00007f2caca7a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 196.931124][T13084] RAX: ffffffffffffffda RBX: 00007f2cabdb6090 RCX: 00007f2cabb8ebe9 [ 196.931138][T13084] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000004 [ 196.931151][T13084] RBP: 00007f2caca7a090 R08: 0000000000000000 R09: 0000000000000000 [ 196.931163][T13084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 196.931176][T13084] R13: 00007f2cabdb6128 R14: 00007f2cabdb6090 R15: 00007fffeb281238 [ 196.931199][T13084] [ 197.497466][T13107] netlink: 'syz.0.2187': attribute type 1 has an invalid length. [ 197.553028][T13110] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 197.721034][T13116] syzkaller0: entered promiscuous mode [ 197.727770][T13116] syzkaller0: entered allmulticast mode [ 197.753933][T13116] tipc: Enabled bearer , priority 0 [ 197.806766][T13116] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 197.855800][T13133] netlink: 'syz.4.2196': attribute type 8 has an invalid length. [ 197.857154][T13116] tipc: Resetting bearer [ 197.885085][T13116] IPVS: set_ctl: invalid protocol: 50 172.20.20.170:20000 [ 197.973823][T13143] lo speed is unknown, defaulting to 1000 [ 197.983109][T13113] tipc: Resetting bearer [ 198.001631][T13113] tipc: Disabling bearer [ 198.029561][T13148] FAULT_INJECTION: forcing a failure. [ 198.029561][T13148] name failslab, interval 1, probability 0, space 0, times 0 [ 198.042648][T13148] CPU: 1 UID: 0 PID: 13148 Comm: syz.4.2202 Not tainted syzkaller #0 PREEMPT(full) [ 198.042675][T13148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 198.042687][T13148] Call Trace: [ 198.042694][T13148] [ 198.042702][T13148] dump_stack_lvl+0x189/0x250 [ 198.042731][T13148] ? __pfx____ratelimit+0x10/0x10 [ 198.042755][T13148] ? __pfx_dump_stack_lvl+0x10/0x10 [ 198.042777][T13148] ? __pfx__printk+0x10/0x10 [ 198.042810][T13148] should_fail_ex+0x414/0x560 [ 198.042836][T13148] should_failslab+0xa8/0x100 [ 198.042863][T13148] __kmalloc_cache_noprof+0x70/0x3d0 [ 198.042888][T13148] ? sctp_add_bind_addr+0x8c/0x370 [ 198.042915][T13148] sctp_add_bind_addr+0x8c/0x370 [ 198.042941][T13148] sctp_copy_local_addr_list+0x30b/0x4e0 [ 198.042967][T13148] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 198.043001][T13148] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 198.043028][T13148] ? sctp_v4_is_any+0x35/0x60 [ 198.043053][T13148] ? sctp_copy_one_addr+0x93/0x360 [ 198.043079][T13148] sctp_bind_addr_copy+0xb3/0x3c0 [ 198.043104][T13148] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 198.043126][T13148] sctp_connect_new_asoc+0x2e0/0x690 [ 198.043147][T13148] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 198.043172][T13148] ? __local_bh_enable_ip+0x12d/0x1c0 [ 198.043194][T13148] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 198.043216][T13148] ? security_sctp_bind_connect+0x7e/0x2e0 [ 198.043248][T13148] sctp_sendmsg+0x155c/0x2810 [ 198.043288][T13148] ? __pfx_sctp_sendmsg+0x10/0x10 [ 198.043317][T13148] ? aa_sk_perm+0x81e/0x950 [ 198.043346][T13148] ? __pfx_aa_sk_perm+0x10/0x10 [ 198.043373][T13148] ? sock_rps_record_flow+0x19/0x410 [ 198.043398][T13148] ? inet_sendmsg+0x2f4/0x370 [ 198.043422][T13148] __sock_sendmsg+0x19c/0x270 [ 198.043448][T13148] ____sys_sendmsg+0x505/0x830 [ 198.043470][T13148] ? __pfx_____sys_sendmsg+0x10/0x10 [ 198.043487][T13148] ? __might_fault+0xb0/0x130 [ 198.043515][T13148] ? import_iovec+0x74/0xa0 [ 198.043537][T13148] ___sys_sendmsg+0x21f/0x2a0 [ 198.043556][T13148] ? __pfx____sys_sendmsg+0x10/0x10 [ 198.043593][T13148] ? __fget_files+0x2a/0x420 [ 198.043620][T13148] ? __fget_files+0x3a0/0x420 [ 198.043652][T13148] __x64_sys_sendmsg+0x19b/0x260 [ 198.043673][T13148] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 198.043698][T13148] ? __pfx_ksys_write+0x10/0x10 [ 198.043722][T13148] ? rcu_is_watching+0x15/0xb0 [ 198.043744][T13148] ? rcu_is_watching+0x15/0xb0 [ 198.043763][T13148] do_syscall_64+0xfa/0x3b0 [ 198.043792][T13148] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.043811][T13148] ? clear_bhb_loop+0x60/0xb0 [ 198.043833][T13148] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.043852][T13148] RIP: 0033:0x7f69aa78ebe9 [ 198.043869][T13148] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 198.043887][T13148] RSP: 002b:00007f69ab6d3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 198.043911][T13148] RAX: ffffffffffffffda RBX: 00007f69aa9b5fa0 RCX: 00007f69aa78ebe9 [ 198.043925][T13148] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000005 [ 198.043938][T13148] RBP: 00007f69ab6d3090 R08: 0000000000000000 R09: 0000000000000000 [ 198.043951][T13148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 198.043963][T13148] R13: 00007f69aa9b6038 R14: 00007f69aa9b5fa0 R15: 00007ffe99b97a38 [ 198.043998][T13148] [ 198.542256][T13159] netlink: 'syz.1.2207': attribute type 21 has an invalid length. [ 198.580042][T13163] netlink: 'syz.1.2207': attribute type 21 has an invalid length. [ 198.591589][T13159] __nla_validate_parse: 8 callbacks suppressed [ 198.591603][T13159] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2207'. [ 198.608214][T13163] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2207'. [ 198.646181][T13170] bridge_slave_0: entered promiscuous mode [ 198.757464][T13176] team_slave_0: mtu greater than device maximum [ 198.785047][T13181] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2216'. [ 198.861379][T13186] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2219'. [ 198.992114][T13202] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2223'. [ 199.056187][T13202] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2223'. [ 199.070672][T13206] netlink: 'syz.1.2224': attribute type 2 has an invalid length. [ 199.078896][T13206] netlink: 244 bytes leftover after parsing attributes in process `syz.1.2224'. [ 199.117145][T13204] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2225'. [ 199.171542][T13204] pim6reg1: entered promiscuous mode [ 199.171877][T13212] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2228'. [ 199.178006][T13204] pim6reg1: entered allmulticast mode [ 199.254720][T13215] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2229'. [ 199.293998][T13225] syzkaller0: entered promiscuous mode [ 199.300389][T13225] syzkaller0: entered allmulticast mode [ 199.307804][T13224] tipc: Enabled bearer , priority 0 [ 199.366077][T13224] tipc: Resetting bearer [ 199.378000][T13224] tipc: Disabling bearer [ 199.443257][T13236] netlink: 'syz.2.2231': attribute type 1 has an invalid length. [ 199.472698][T13236] 8021q: adding VLAN 0 to HW filter on device bond8 [ 199.509651][T13236] 8021q: adding VLAN 0 to HW filter on device bond8 [ 199.517017][T13236] bond8: (slave vxcan5): The slave device specified does not support setting the MAC address [ 199.532436][T13236] bond8: (slave vxcan5): Error -95 calling set_mac_address [ 199.583296][T13245] bond0: (slave bond_slave_0): Releasing backup interface [ 199.597796][T13245] bond0: (slave bond_slave_1): Releasing backup interface [ 199.614827][T13245] team_slave_0: left promiscuous mode [ 199.625142][T13245] team0: Port device team_slave_0 removed [ 199.633911][T13245] team_slave_1: left promiscuous mode [ 199.646410][T13245] team0: Port device team_slave_1 removed [ 199.655482][T13245] tipc: Resetting bearer [ 199.665592][T13245] bond1: (slave geneve2): Releasing active interface [ 199.714171][T13248] tipc: Resetting bearer [ 199.725132][T13248] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check. [ 200.052788][T13286] netlink: 'syz.3.2249': attribute type 1 has an invalid length. [ 204.730417][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.630064][T13309] __nla_validate_parse: 9 callbacks suppressed [ 220.630085][T13309] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2260'. [ 220.761207][T13321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 220.794199][T13329] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2265'. [ 220.806757][T13321] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 220.833458][T13326] tipc: Enabled bearer , priority 0 [ 220.916960][T13326] tipc: Disabling bearer [ 220.933069][T13338] netlink: 'syz.4.2269': attribute type 1 has an invalid length. [ 221.031536][T13348] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2272'. [ 221.064680][T13348] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2272'. [ 221.078920][T13348] netlink: 'syz.1.2272': attribute type 18 has an invalid length. [ 221.103286][T13348] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2272'. [ 221.127531][T13348] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2272'. [ 221.143143][T13348] netlink: 'syz.1.2272': attribute type 18 has an invalid length. [ 222.398577][T13377] netlink: 212404 bytes leftover after parsing attributes in process `syz.3.2283'. [ 222.599103][T13403] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2289'. [ 222.656024][T13406] lo speed is unknown, defaulting to 1000 [ 222.674681][T13406] lo speed is unknown, defaulting to 1000 [ 222.766778][T13416] netlink: 'syz.3.2292': attribute type 6 has an invalid length. [ 222.934057][T13430] IPVS: Error joining to the multicast group [ 222.988450][T13432] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2295'. [ 223.080950][T13437] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2297'. [ 223.528639][T13468] netlink: 'syz.0.2306': attribute type 1 has an invalid length. [ 223.616580][T13477] netlink: 'syz.4.2311': attribute type 10 has an invalid length. [ 223.876443][T13498] netlink: 'syz.4.2319': attribute type 1 has an invalid length. [ 223.900296][T13500] openvswitch: netlink: IP tunnel dst address not specified [ 224.069220][T13519] netlink: 'syz.4.2326': attribute type 1 has an invalid length. [ 224.101356][T13519] 8021q: adding VLAN 0 to HW filter on device bond9 [ 224.122460][T13519] bond9: (slave veth7): Enslaving as an active interface with a down link [ 224.145079][T13519] veth9: entered promiscuous mode [ 224.152896][T13519] bond9: (slave veth9): Enslaving as an active interface with a down link [ 224.166862][T13519] vlan0: entered allmulticast mode [ 224.176218][T13519] bond9: entered allmulticast mode [ 224.182776][T13519] bond9: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 224.285898][T13526] netlink: 'syz.1.2328': attribute type 12 has an invalid length. [ 224.464832][T13544] syzkaller0: entered promiscuous mode [ 224.490815][T13544] syzkaller0: entered allmulticast mode [ 224.587468][T13551] geneve2: entered promiscuous mode [ 224.593084][T13551] geneve2: entered allmulticast mode [ 225.261238][T13610] netlink: 'syz.1.2355': attribute type 1 has an invalid length. [ 225.364740][T13620] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 225.365414][T13625] mac80211_hwsim hwsim11 syzkaller0: left promiscuous mode [ 225.411234][T13625] mac80211_hwsim hwsim11 syzkaller0: left allmulticast mode [ 225.420141][T13625] tipc: Resetting bearer [ 225.828457][T13643] team0: Mode changed to "loadbalance" [ 226.156313][T13667] __nla_validate_parse: 22 callbacks suppressed [ 226.156338][T13667] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2372'. [ 226.206210][T13667] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2372'. [ 226.239626][T13667] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2372'. [ 226.276589][T13667] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2372'. [ 226.320776][T13667] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2372'. [ 226.623885][T13681] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2376'. [ 226.642014][T13680] validate_nla: 2 callbacks suppressed [ 226.642038][T13680] netlink: 'syz.2.2375': attribute type 21 has an invalid length. [ 226.683368][T13683] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2377'. [ 226.686296][T13680] netlink: 'syz.2.2375': attribute type 6 has an invalid length. [ 226.705380][T13680] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2375'. [ 226.801210][T13685] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2378'. [ 226.849171][T13685] netlink: 43 bytes leftover after parsing attributes in process `syz.3.2378'. [ 226.886566][T13685] netlink: 'syz.3.2378': attribute type 6 has an invalid length. [ 226.919579][T13685] netlink: 'syz.3.2378': attribute type 5 has an invalid length. [ 226.984285][T13716] gtp1: entered promiscuous mode [ 227.020054][T13716] gtp1: entered allmulticast mode [ 227.515031][T13757] lo: entered allmulticast mode [ 227.541332][T13759] netlink: 'syz.1.2395': attribute type 1 has an invalid length. [ 227.554740][T13759] block nbd1: not configured, cannot reconfigure [ 227.577880][T13758] netlink: 'syz.1.2395': attribute type 1 has an invalid length. [ 227.599466][T13758] block nbd1: not configured, cannot reconfigure [ 227.658545][T13753] lo: left allmulticast mode [ 227.978871][T13798] team0: Device vti1 is up. Set it down before adding it as a team port [ 228.277372][T13827] sock: sock_set_timeout: `syz.2.2422' (pid 13827) tries to set negative timeout [ 228.557454][T13854] netlink: 'syz.3.2432': attribute type 1 has an invalid length. [ 228.606899][T13854] tipc: Resetting bearer [ 228.616471][T13856] netlink: 'syz.2.2433': attribute type 13 has an invalid length. [ 228.634782][T13856] lo: entered promiscuous mode [ 228.646449][T13856] lo: entered allmulticast mode [ 228.656066][T13856] tunl0: entered promiscuous mode [ 228.663913][T13856] tunl0: entered allmulticast mode [ 228.672741][T13856] gre0: entered promiscuous mode [ 228.678026][T13856] gre0: entered allmulticast mode [ 228.686718][T13856] tipc: Resetting bearer [ 228.692717][T13856] gretap0: entered promiscuous mode [ 228.698078][T13856] gretap0: entered allmulticast mode [ 228.705564][T13856] gretap0: refused to change device tx_queue_len [ 228.712069][T13856] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 228.734210][T13854] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 229.024717][T13891] netlink: 'syz.1.2441': attribute type 10 has an invalid length. [ 229.217809][T13908] mac80211_hwsim hwsim5 : renamed from wlan1 [ 229.264128][T13907] openvswitch: netlink: Actions may not be safe on all matching packets [ 229.654690][T13946] netlink: 'syz.2.2456': attribute type 33 has an invalid length. [ 231.108835][T14070] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 231.137170][T14070] openvswitch: netlink: Duplicate key (type 0). [ 231.330439][T14091] __nla_validate_parse: 24 callbacks suppressed [ 231.330462][T14091] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2503'. [ 231.354838][T14091] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2503'. [ 231.411390][T14103] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2502'. [ 231.412523][T14091] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2503'. [ 231.465466][T14095] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2502'. [ 231.489229][T14095] netlink: 176 bytes leftover after parsing attributes in process `syz.1.2502'. [ 231.904108][T14136] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2516'. [ 231.935095][T14138] raw_sendmsg: syz.1.2517 forgot to set AF_INET. Fix it! [ 231.957763][T14136] validate_nla: 8 callbacks suppressed [ 231.957785][T14136] netlink: 'syz.4.2516': attribute type 15 has an invalid length. [ 231.968309][T14138] syzkaller1: entered promiscuous mode [ 231.982155][T14138] syzkaller1: entered allmulticast mode [ 231.997625][T14138] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2517'. [ 232.285302][T14162] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2525'. [ 232.386875][T14173] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2529'. [ 232.688971][T14188] netlink: 'syz.2.2536': attribute type 8 has an invalid length. [ 232.719076][T14191] openvswitch: netlink: Flow key attribute not present in set flow. [ 232.786537][T14199] openvswitch: netlink: IP tunnel TTL not specified. [ 232.865821][T14193] netlink: 'syz.4.2538': attribute type 23 has an invalid length. [ 233.054245][T14219] netlink: 'syz.1.2544': attribute type 2 has an invalid length. [ 233.111558][T14219] xfrm2: entered allmulticast mode [ 233.379288][T14237] netlink: 'syz.2.2551': attribute type 1 has an invalid length. [ 234.371064][T14302] netlink: 'syz.3.2571': attribute type 10 has an invalid length. [ 234.388290][T14302] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 234.533019][T14312] netlink: 'syz.0.2575': attribute type 1 has an invalid length. [ 234.553097][T14317] netlink: 'syz.3.2576': attribute type 12 has an invalid length. [ 234.721372][T14329] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 234.820208][T14333] openvswitch: netlink: IP tunnel dst address not specified [ 235.320763][T14388] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 235.384548][T14392] netlink: 'syz.4.2594': attribute type 1 has an invalid length. [ 236.040820][T14432] netlink: 'syz.1.2608': attribute type 16 has an invalid length. [ 236.924461][T14516] __nla_validate_parse: 15 callbacks suppressed [ 236.924484][T14516] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2632'. [ 237.030836][T14529] validate_nla: 1 callbacks suppressed [ 237.030857][T14529] netlink: 'syz.4.2635': attribute type 10 has an invalid length. [ 237.066337][T14529] syz_tun: left allmulticast mode [ 237.081700][T14528] netlink: 'syz.1.2637': attribute type 83 has an invalid length. [ 237.088561][T14529] netlink: 'syz.4.2635': attribute type 1 has an invalid length. [ 237.169937][T14538] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2635'. [ 237.187206][T14536] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) ! [ 237.197594][T14533] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2638'. [ 237.203289][T14537] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2640'. [ 237.216778][T14537] netlink: 176 bytes leftover after parsing attributes in process `syz.1.2640'. [ 237.230546][T14537] netlink: 'syz.1.2640': attribute type 5 has an invalid length. [ 237.259057][T14536] tipc: Enabling of bearer rejected, already enabled [ 237.282564][T14536] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 237.309083][T14545] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2643'. [ 237.309966][T14536] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 237.354944][T14536] tipc: Resetting bearer [ 237.512755][T14560] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2649'. [ 237.723355][T14577] pim6reg1: entered promiscuous mode [ 237.761792][T14577] pim6reg1: entered allmulticast mode [ 237.870878][T14591] openvswitch: netlink: Multiple metadata blocks provided [ 238.206345][T14628] netlink: 'syz.2.2669': attribute type 12 has an invalid length. [ 238.230954][T14628] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2669'. [ 238.468070][T14640] ipvlan2: entered promiscuous mode [ 238.478002][T14644] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2675'. [ 238.522899][T14644] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2675'. [ 239.005677][T14689] netlink: 'syz.4.2690': attribute type 1 has an invalid length. [ 239.046336][T14689] bond10: (slave gretap3): making interface the new active one [ 239.054723][T14689] bond10: (slave gretap3): Enslaving as an active interface with an up link [ 239.368191][T14723] 8021q: adding VLAN 0 to HW filter on device bond11 [ 239.409035][T14722] vlan0: entered allmulticast mode [ 239.422068][T14722] bond11: entered allmulticast mode [ 239.626285][T14751] netlink: 'syz.1.2708': attribute type 17 has an invalid length. [ 239.637502][T14753] netlink: 'syz.1.2708': attribute type 17 has an invalid length. [ 239.653433][T14753] gretap0: entered promiscuous mode [ 239.801042][T14761] sctp: [Deprecated]: syz.4.2710 (pid 14761) Use of struct sctp_assoc_value in delayed_ack socket option. [ 239.801042][T14761] Use struct sctp_sack_info instead [ 239.848039][T14763] tipc: Enabling of bearer rejected, failed to enable media [ 240.075733][T14772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 240.111709][T14773] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 240.682903][T14813] wg2: entered promiscuous mode [ 240.706557][T14813] wg2: entered allmulticast mode [ 240.822530][T14825] chnl_net:caif_netlink_parms(): no params data found [ 240.858619][T14827] netlink: 'syz.2.2734': attribute type 15 has an invalid length. [ 240.880059][T14827] netlink: 'syz.2.2734': attribute type 1 has an invalid length. [ 241.282773][ T5869] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 241.293581][ T5869] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 241.301737][ T5869] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 241.311741][ T5869] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 241.320931][ T5869] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 241.364488][ T5865] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 241.381374][ T5865] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 241.389554][ T5865] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 241.398400][T10799] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 241.456202][ T5865] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 241.465834][ T5865] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 241.555421][T10799] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 241.647274][T14853] lo speed is unknown, defaulting to 1000 [ 241.687422][T10799] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 241.703087][T14853] lo speed is unknown, defaulting to 1000 [ 241.922436][T14895] team_slave_1: entered promiscuous mode [ 241.954241][T14895] __nla_validate_parse: 41 callbacks suppressed [ 241.954264][T14895] netlink: 244 bytes leftover after parsing attributes in process `syz.1.2755'. [ 242.171059][T14916] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2759'. [ 242.249169][T10799] bond10 (unregistering): (slave gretap3): Releasing active interface [ 242.852415][T10799] bond0 (unregistering): Released all slaves [ 242.863092][T10799] bond1 (unregistering): Released all slaves [ 242.875311][T10799] bond2 (unregistering): Released all slaves [ 242.884950][T10799] bond3 (unregistering): Released all slaves [ 242.898727][T10799] bond4 (unregistering): Released all slaves [ 242.910555][T10799] bond5 (unregistering): Released all slaves [ 242.923855][T10799] bond6 (unregistering): Released all slaves [ 242.937317][T10799] bond7 (unregistering): Released all slaves [ 242.946938][T10799] bond8 (unregistering): Released all slaves [ 242.958277][T10799] bond9 (unregistering): (slave veth7): Releasing active interface [ 242.968013][T10799] bond9 (unregistering): (slave veth9): Releasing active interface [ 242.982431][T10799] bond9 (unregistering): Released all slaves [ 242.993730][T10799] bond10 (unregistering): Released all slaves [ 243.004864][T10799] bond11 (unregistering): Released all slaves [ 243.015578][T14918] netlink: 240 bytes leftover after parsing attributes in process `syz.1.2760'. [ 243.105500][T10799] tipc: Left network mode [ 243.216360][T14952] tipc: Enabled bearer , priority 0 [ 243.228820][T14952] syzkaller0: entered promiscuous mode [ 243.238495][T14952] syzkaller0: entered allmulticast mode [ 243.291513][T14952] tipc: Resetting bearer [ 243.308581][T14853] chnl_net:caif_netlink_parms(): no params data found [ 243.340258][T14951] tipc: Resetting bearer [ 243.348235][T14951] tipc: Disabling bearer [ 243.363213][T14961] IPVS: length: 171 != 24 [ 243.467412][T14967] validate_nla: 1 callbacks suppressed [ 243.467435][T14967] netlink: 'syz.0.2771': attribute type 1 has an invalid length. [ 243.530789][ T5865] Bluetooth: hci2: command tx timeout [ 243.585028][T14983] FAULT_INJECTION: forcing a failure. [ 243.585028][T14983] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 243.623011][T14985] netlink: 'syz.0.2776': attribute type 10 has an invalid length. [ 243.635966][T14983] CPU: 1 UID: 0 PID: 14983 Comm: syz.2.2775 Not tainted syzkaller #0 PREEMPT(full) [ 243.635996][T14983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 243.636008][T14983] Call Trace: [ 243.636015][T14983] [ 243.636023][T14983] dump_stack_lvl+0x189/0x250 [ 243.636053][T14983] ? __pfx____ratelimit+0x10/0x10 [ 243.636092][T14983] ? __pfx_dump_stack_lvl+0x10/0x10 [ 243.636115][T14983] ? __pfx__printk+0x10/0x10 [ 243.636141][T14983] ? __might_fault+0xb0/0x130 [ 243.636173][T14983] ? rcu_is_watching+0x15/0xb0 [ 243.636195][T14983] should_fail_ex+0x414/0x560 [ 243.636224][T14983] _copy_from_iter+0x1db/0x16f0 [ 243.636248][T14983] ? rcu_is_watching+0x15/0xb0 [ 243.636268][T14983] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 243.636297][T14983] ? __pfx__copy_from_iter+0x10/0x10 [ 243.636317][T14983] ? __build_skb_around+0x257/0x3e0 [ 243.636359][T14983] ? netlink_sendmsg+0x642/0xb30 [ 243.636387][T14983] ? skb_put+0x11b/0x210 [ 243.636408][T14983] netlink_sendmsg+0x6b2/0xb30 [ 243.636442][T14983] ? __pfx_netlink_sendmsg+0x10/0x10 [ 243.636473][T14983] ? aa_sock_msg_perm+0xf1/0x1d0 [ 243.636493][T14983] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 243.636516][T14983] ? __pfx_netlink_sendmsg+0x10/0x10 [ 243.636545][T14983] __sock_sendmsg+0x21c/0x270 [ 243.636573][T14983] ____sys_sendmsg+0x505/0x830 [ 243.636597][T14983] ? __pfx_____sys_sendmsg+0x10/0x10 [ 243.636623][T14983] ? import_iovec+0x74/0xa0 [ 243.636647][T14983] ___sys_sendmsg+0x21f/0x2a0 [ 243.636669][T14983] ? __pfx____sys_sendmsg+0x10/0x10 [ 243.636709][T14983] ? __fget_files+0x2a/0x420 [ 243.636739][T14983] ? __fget_files+0x3a0/0x420 [ 243.636773][T14983] __x64_sys_sendmsg+0x19b/0x260 [ 243.636796][T14983] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 243.636822][T14983] ? __pfx_ksys_write+0x10/0x10 [ 243.636846][T14983] ? rcu_is_watching+0x15/0xb0 [ 243.636868][T14983] ? rcu_is_watching+0x15/0xb0 [ 243.636890][T14983] do_syscall_64+0xfa/0x3b0 [ 243.636920][T14983] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.636940][T14983] ? clear_bhb_loop+0x60/0xb0 [ 243.636963][T14983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.636983][T14983] RIP: 0033:0x7f938b98ebe9 [ 243.637009][T14983] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 243.637028][T14983] RSP: 002b:00007f938c80d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 243.637052][T14983] RAX: ffffffffffffffda RBX: 00007f938bbb5fa0 RCX: 00007f938b98ebe9 [ 243.637074][T14983] RDX: 0000000000004084 RSI: 0000200000000d00 RDI: 0000000000000004 [ 243.637089][T14983] RBP: 00007f938c80d090 R08: 0000000000000000 R09: 0000000000000000 [ 243.637103][T14983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 243.637115][T14983] R13: 00007f938bbb6038 R14: 00007f938bbb5fa0 R15: 00007ffe2def3418 [ 243.637139][T14983] [ 243.638762][T14985] tipc: Disabling bearer [ 243.946917][T10799] hsr_slave_0: left promiscuous mode [ 243.989434][T10799] hsr_slave_1: left promiscuous mode [ 244.177827][T14997] veth11: entered allmulticast mode [ 244.210886][T14853] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.218319][T14853] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.252611][T14853] bridge_slave_0: entered allmulticast mode [ 244.259224][T14853] bridge_slave_0: entered promiscuous mode [ 244.270394][T14853] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.277708][T14853] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.292617][T14853] bridge_slave_1: entered allmulticast mode [ 244.300460][T14853] bridge_slave_1: entered promiscuous mode [ 244.307890][T15016] mac80211_hwsim hwsim11 syzkaller0: left promiscuous mode [ 244.316136][T15016] mac80211_hwsim hwsim11 syzkaller0: left allmulticast mode [ 244.349547][T15016] tipc: Resetting bearer [ 244.394789][T14853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 244.405149][T15019] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 244.426300][T14853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 244.508093][T14853] team0: Port device team_slave_0 added [ 244.516683][T15022] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2785'. [ 244.523241][T14853] team0: Port device team_slave_1 added [ 244.550542][T15027] FAULT_INJECTION: forcing a failure. [ 244.550542][T15027] name failslab, interval 1, probability 0, space 0, times 0 [ 244.565458][T15027] CPU: 0 UID: 0 PID: 15027 Comm: syz.3.2787 Not tainted syzkaller #0 PREEMPT(full) [ 244.565488][T15027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 244.565500][T15027] Call Trace: [ 244.565514][T15027] [ 244.565523][T15027] dump_stack_lvl+0x189/0x250 [ 244.565552][T15027] ? __pfx____ratelimit+0x10/0x10 [ 244.565580][T15027] ? __pfx_dump_stack_lvl+0x10/0x10 [ 244.565603][T15027] ? __pfx__printk+0x10/0x10 [ 244.565630][T15027] ? __pfx___might_resched+0x10/0x10 [ 244.565650][T15027] ? lock_acquire+0x5f/0x360 [ 244.565679][T15027] should_fail_ex+0x414/0x560 [ 244.565706][T15027] should_failslab+0xa8/0x100 [ 244.565734][T15027] __kmalloc_noprof+0xcb/0x4f0 [ 244.565759][T15027] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 244.565786][T15027] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 244.565813][T15027] genl_family_rcv_msg_doit+0xb8/0x300 [ 244.565857][T15027] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 244.565880][T15027] ? __pfx___mutex_lock+0x10/0x10 [ 244.565909][T15027] ? __pfx_genl_get_cmd+0x10/0x10 [ 244.565929][T15027] ? __pfx_nl802154_get_wpan_phy+0x10/0x10 [ 244.565955][T15027] ? __pfx_nl802154_dump_wpan_phy+0x10/0x10 [ 244.565980][T15027] ? __pfx_nl802154_dump_wpan_phy_done+0x10/0x10 [ 244.566004][T15027] ? stack_trace_save+0x9c/0xe0 [ 244.566026][T15027] genl_rcv_msg+0x60e/0x790 [ 244.566045][T15027] ? __pfx_genl_rcv_msg+0x10/0x10 [ 244.566061][T15027] ? __kasan_slab_alloc+0x6c/0x80 [ 244.566081][T15027] ? __pfx_nl802154_pre_doit+0x10/0x10 [ 244.566104][T15027] ? __pfx_nl802154_get_wpan_phy+0x10/0x10 [ 244.566129][T15027] ? __pfx_nl802154_post_doit+0x10/0x10 [ 244.566154][T15027] ? __netlink_lookup+0xbd/0x810 [ 244.566171][T15027] ? rcu_is_watching+0x15/0xb0 [ 244.566210][T15027] netlink_rcv_skb+0x208/0x470 [ 244.566245][T15027] ? __pfx_genl_rcv_msg+0x10/0x10 [ 244.566267][T15027] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 244.566299][T15027] ? lock_release+0x4b/0x3e0 [ 244.566328][T15027] ? down_read+0x1ad/0x2e0 [ 244.566347][T15027] genl_rcv+0x28/0x40 [ 244.566366][T15027] netlink_unicast+0x82c/0x9e0 [ 244.566396][T15027] ? __pfx_netlink_unicast+0x10/0x10 [ 244.566421][T15027] ? netlink_sendmsg+0x642/0xb30 [ 244.566447][T15027] ? skb_put+0x11b/0x210 [ 244.566468][T15027] netlink_sendmsg+0x805/0xb30 [ 244.566500][T15027] ? __pfx_netlink_sendmsg+0x10/0x10 [ 244.566529][T15027] ? aa_sock_msg_perm+0xf1/0x1d0 [ 244.566549][T15027] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 244.566570][T15027] ? __pfx_netlink_sendmsg+0x10/0x10 [ 244.566598][T15027] __sock_sendmsg+0x21c/0x270 [ 244.566623][T15027] ____sys_sendmsg+0x505/0x830 [ 244.566646][T15027] ? __pfx_____sys_sendmsg+0x10/0x10 [ 244.566670][T15027] ? import_iovec+0x74/0xa0 [ 244.566692][T15027] ___sys_sendmsg+0x21f/0x2a0 [ 244.566713][T15027] ? __pfx____sys_sendmsg+0x10/0x10 [ 244.566751][T15027] ? __fget_files+0x2a/0x420 [ 244.566778][T15027] ? __fget_files+0x3a0/0x420 [ 244.566811][T15027] __x64_sys_sendmsg+0x19b/0x260 [ 244.566832][T15027] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 244.566857][T15027] ? __pfx_ksys_write+0x10/0x10 [ 244.566882][T15027] ? rcu_is_watching+0x15/0xb0 [ 244.566902][T15027] ? rcu_is_watching+0x15/0xb0 [ 244.566922][T15027] do_syscall_64+0xfa/0x3b0 [ 244.566950][T15027] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.566968][T15027] ? clear_bhb_loop+0x60/0xb0 [ 244.566988][T15027] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.567005][T15027] RIP: 0033:0x7f3bfb38ebe9 [ 244.567021][T15027] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 244.567045][T15027] RSP: 002b:00007f3bfc1b1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 244.567067][T15027] RAX: ffffffffffffffda RBX: 00007f3bfb5b5fa0 RCX: 00007f3bfb38ebe9 [ 244.567081][T15027] RDX: 0000000000004084 RSI: 0000200000000d00 RDI: 0000000000000004 [ 244.567094][T15027] RBP: 00007f3bfc1b1090 R08: 0000000000000000 R09: 0000000000000000 [ 244.567106][T15027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 244.567117][T15027] R13: 00007f3bfb5b6038 R14: 00007f3bfb5b5fa0 R15: 00007ffe782a3f48 [ 244.567139][T15027] [ 244.569773][T14853] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 244.770149][T15036] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2788'. [ 244.773928][T14853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.045360][T14853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 245.100376][T14853] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 245.108058][T14853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.146167][T14853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 245.175544][T15046] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 245.198133][T15048] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2793'. [ 245.234313][T15048] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2793'. [ 245.284696][T14853] hsr_slave_0: entered promiscuous mode [ 245.293629][T14853] hsr_slave_1: entered promiscuous mode [ 245.465255][T15063] netlink: 'syz.0.2799': attribute type 21 has an invalid length. [ 245.476313][T15065] netlink: 'syz.1.2801': attribute type 23 has an invalid length. [ 245.553205][T15073] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2800'. [ 245.612165][ T5865] Bluetooth: hci2: command tx timeout [ 245.770483][ T13] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 245.785838][ T13] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 245.786470][T15086] openvswitch: netlink: IPv4 frag type 255 is out of range max 2 [ 245.809603][ T5940] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 245.874722][T14853] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 245.887707][T15088] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 245.905266][T14853] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 245.917343][T14853] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 245.917668][T15088] netlink: zone id is out of range [ 245.939017][T15088] netlink: zone id is out of range [ 245.939243][T14853] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 245.952801][T15088] netlink: zone id is out of range [ 245.958742][T15088] netlink: zone id is out of range [ 245.966510][T15088] netlink: zone id is out of range [ 245.974419][T15088] netlink: zone id is out of range [ 245.990065][T15088] netlink: zone id is out of range [ 246.157512][T14853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 246.184619][T15105] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2811'. [ 246.202168][T14853] 8021q: adding VLAN 0 to HW filter on device team0 [ 246.212630][T15105] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2811'. [ 246.241304][ T5940] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 246.252762][T10805] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.261767][T10805] bridge0: port 1(bridge_slave_0) entered forwarding state [ 246.283337][T10805] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.291445][T10805] bridge0: port 2(bridge_slave_1) entered forwarding state [ 246.573408][ T5967] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 246.713057][T14853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 246.865040][T15158] tipc: Resetting bearer [ 246.881218][T15158] gretap0: left allmulticast mode [ 246.995317][T15173] __nla_validate_parse: 7 callbacks suppressed [ 246.995340][T15173] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2835'. [ 247.053375][T15173] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2835'. [ 247.093381][T15177] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2836'. [ 247.111708][T15177] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2836'. [ 247.165375][T15187] FAULT_INJECTION: forcing a failure. [ 247.165375][T15187] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 247.209250][T15187] CPU: 1 UID: 0 PID: 15187 Comm: syz.3.2838 Not tainted syzkaller #0 PREEMPT(full) [ 247.209281][T15187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 247.209293][T15187] Call Trace: [ 247.209301][T15187] [ 247.209311][T15187] dump_stack_lvl+0x189/0x250 [ 247.209346][T15187] ? __pfx____ratelimit+0x10/0x10 [ 247.209373][T15187] ? __pfx_dump_stack_lvl+0x10/0x10 [ 247.209395][T15187] ? __pfx__printk+0x10/0x10 [ 247.209423][T15187] ? rcu_is_watching+0x15/0xb0 [ 247.209444][T15187] should_fail_ex+0x414/0x560 [ 247.209471][T15187] _copy_to_user+0x31/0xb0 [ 247.209494][T15187] simple_read_from_buffer+0xe1/0x170 [ 247.209522][T15187] proc_fail_nth_read+0x1b3/0x220 [ 247.209545][T15187] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 247.209566][T15187] ? rw_verify_area+0x2a6/0x4d0 [ 247.209587][T15187] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 247.209606][T15187] vfs_read+0x200/0xa30 [ 247.209625][T15187] ? fdget_pos+0x247/0x320 [ 247.209640][T15187] ? __pfx___mutex_lock+0x10/0x10 [ 247.209663][T15187] ? __pfx_vfs_read+0x10/0x10 [ 247.209684][T15187] ? __fget_files+0x3a0/0x420 [ 247.209707][T15187] ? __fget_files+0x2a/0x420 [ 247.209733][T15187] ksys_read+0x145/0x250 [ 247.209753][T15187] ? __pfx_ksys_read+0x10/0x10 [ 247.209771][T15187] ? rcu_is_watching+0x15/0xb0 [ 247.209787][T15187] ? rcu_is_watching+0x15/0xb0 [ 247.209803][T15187] do_syscall_64+0xfa/0x3b0 [ 247.209826][T15187] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.209841][T15187] ? clear_bhb_loop+0x60/0xb0 [ 247.209858][T15187] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.209873][T15187] RIP: 0033:0x7f3bfb38d5fc [ 247.209888][T15187] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 247.209902][T15187] RSP: 002b:00007f3bfc1b1030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 247.209922][T15187] RAX: ffffffffffffffda RBX: 00007f3bfb5b5fa0 RCX: 00007f3bfb38d5fc [ 247.209935][T15187] RDX: 000000000000000f RSI: 00007f3bfc1b10a0 RDI: 0000000000000003 [ 247.209945][T15187] RBP: 00007f3bfc1b1090 R08: 0000000000000000 R09: 0000000000000000 [ 247.209955][T15187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 247.209965][T15187] R13: 00007f3bfb5b6038 R14: 00007f3bfb5b5fa0 R15: 00007ffe782a3f48 [ 247.209982][T15187] [ 247.505913][T14853] veth0_vlan: entered promiscuous mode [ 247.538901][T14853] veth1_vlan: entered promiscuous mode [ 247.601379][T14853] veth0_macvtap: entered promiscuous mode [ 247.612494][T14853] veth1_macvtap: entered promiscuous mode [ 247.683059][T14853] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 247.694711][ T5865] Bluetooth: hci2: command tx timeout [ 247.731105][T14853] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 247.751340][T10800] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.790188][T10800] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.808596][T10800] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.821501][T10800] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.831546][T15212] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2845'. [ 247.938544][T15218] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2848'. [ 247.951928][T10802] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.965183][T10802] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.007599][T15218] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2848'. [ 248.024248][T10803] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.033669][T10803] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 249.213501][T15286] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2866'. [ 249.349297][T15294] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2869'. [ 249.635491][T15319] netlink: 'syz.0.2875': attribute type 10 has an invalid length. [ 249.648479][T15318] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2877'. [ 249.660342][T15318] tipc: Invalid UDP bearer configuration [ 249.660387][T15318] tipc: Enabling of bearer rejected, failed to enable media [ 249.678868][T15319] ipvlan1: entered promiscuous mode [ 249.685978][T15319] ipvlan1: entered allmulticast mode [ 249.691831][T15319] veth0_vlan: entered allmulticast mode [ 249.704003][T15319] net_ratelimit: 8 callbacks suppressed [ 249.704026][T15319] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 249.769628][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 249.770422][ T5865] Bluetooth: hci2: command tx timeout [ 249.862878][T15337] netlink: 'syz.0.2883': attribute type 1 has an invalid length. [ 249.895798][T15340] netlink: 'syz.3.2885': attribute type 33 has an invalid length. [ 249.956923][T15337] bond9: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 249.971757][T15337] bond9: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 249.985200][T15337] bond9: (slave ipvlan0): Setting fail_over_mac to active for active-backup mode [ 250.048740][T15353] bond9: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 250.068536][T15353] bond9: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 250.179081][T15362] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 250.415372][T15391] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20004 [ 250.428304][T15391] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20004 [ 250.524656][T15396] IPVS: persistence engine module ip_vs_pe_ not found [ 251.058885][T15454] netlink: 'syz.3.2921': attribute type 83 has an invalid length. [ 251.315176][T15482] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 251.679718][T15506] TCP: TCP_TX_DELAY enabled [ 252.262326][T15553] __nla_validate_parse: 11 callbacks suppressed [ 252.262347][T15553] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2951'. [ 252.310865][T15558] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2953'. [ 252.350156][T15558] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 252.377346][T15562] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 252.742388][T15578] netlink: 'syz.2.2959': attribute type 1 has an invalid length. [ 252.751269][T15578] netlink: 'syz.2.2959': attribute type 1 has an invalid length. [ 252.806994][T15579] netlink: 'syz.2.2959': attribute type 1 has an invalid length. [ 252.817198][T15579] netlink: 'syz.2.2959': attribute type 1 has an invalid length. [ 252.943179][T15592] tipc: Enabling of bearer rejected, failed to enable media [ 253.126259][T15598] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2967'. [ 253.218836][ T5869] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 253.228061][ T5869] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 253.236136][ T5869] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 253.246032][ T5869] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 253.255154][ T5869] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 253.288249][T15599] lo speed is unknown, defaulting to 1000 [ 253.360642][T15608] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2970'. [ 253.406152][T15609] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2969'. [ 253.457668][T15614] tipc: Enabling of bearer rejected, failed to enable media [ 253.694670][T15634] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2975'. [ 253.830341][T15646] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2976'. [ 253.855111][T15599] chnl_net:caif_netlink_parms(): no params data found [ 254.063176][T15649] batadv0: entered allmulticast mode [ 254.119669][T15667] netlink: zone id is out of range [ 254.168031][T15599] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.189432][T15599] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.197293][T15599] bridge_slave_0: entered allmulticast mode [ 254.208738][T15599] bridge_slave_0: entered promiscuous mode [ 254.235385][T15599] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.243537][T15599] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.257798][T15599] bridge_slave_1: entered allmulticast mode [ 254.266282][T15599] bridge_slave_1: entered promiscuous mode [ 254.293592][T15678] openvswitch: netlink: Key 6 has unexpected len 151 expected 2 [ 254.317214][T15599] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 254.343123][T15599] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 254.398133][T15599] team0: Port device team_slave_0 added [ 254.408488][T15599] team0: Port device team_slave_1 added [ 254.478797][T15688] bridge16: entered promiscuous mode [ 254.503215][T15688] bridge16: entered allmulticast mode [ 254.533359][T15599] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 254.550068][T15599] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 254.578865][T15599] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 254.592671][T15599] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 254.611949][T15599] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 254.642241][T15599] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 254.718799][T15710] ieee802154 phy1 wpan1: encryption failed: -22 [ 254.740334][T15599] hsr_slave_0: entered promiscuous mode [ 254.752531][T15599] hsr_slave_1: entered promiscuous mode [ 254.760625][T15599] debugfs: 'hsr0' already exists in 'hsr' [ 254.773739][T15599] Cannot create hsr debugfs directory [ 254.976727][T15728] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3001'. [ 255.004972][T15728] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3001'. [ 255.023149][T15728] netlink: 'syz.1.3001': attribute type 6 has an invalid length. [ 255.035270][T15728] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3001'. [ 255.182361][T15740] bridge17: the hash_elasticity option has been deprecated and is always 16 [ 255.290604][ T5865] Bluetooth: hci5: command tx timeout [ 255.326348][T15753] vlan0: entered allmulticast mode [ 255.340478][T15753] bridge0: entered allmulticast mode [ 255.362558][T15753] bridge18: port 1(vlan0) entered blocking state [ 255.372727][T15753] bridge18: port 1(vlan0) entered disabled state [ 255.381228][T15753] vlan0: entered promiscuous mode [ 255.386920][T15753] bridge0: entered promiscuous mode [ 255.574375][T15774] 8021q: VLANs not supported on syzkaller1 [ 255.745035][T15783] netlink: 'syz.3.3019': attribute type 9 has an invalid length. [ 255.932292][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.056907][T15599] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 256.080886][T15599] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 256.105264][T15783] sysfs: cannot create duplicate filename '/class/ieee80211/!寿$ULvyآDUDw}z' [ 256.134271][T15783] CPU: 0 UID: 0 PID: 15783 Comm: syz.3.3019 Not tainted syzkaller #0 PREEMPT(full) [ 256.134305][T15783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 256.134319][T15783] Call Trace: [ 256.134328][T15783] [ 256.134337][T15783] dump_stack_lvl+0x189/0x250 [ 256.134369][T15783] ? __pfx_dump_stack_lvl+0x10/0x10 [ 256.134394][T15783] ? __pfx__printk+0x10/0x10 [ 256.134418][T15783] ? kernfs_root+0x1c/0x230 [ 256.134440][T15783] ? kernfs_path_from_node+0x2f/0x290 [ 256.134459][T15783] ? kernfs_path_from_node+0x250/0x290 [ 256.134478][T15783] ? kernfs_path_from_node+0x2f/0x290 [ 256.134501][T15783] sysfs_warn_dup+0x8e/0xa0 [ 256.134517][T15783] sysfs_do_create_link_sd+0xc0/0x110 [ 256.134535][T15783] device_add_class_symlinks+0x1cf/0x240 [ 256.134558][T15783] device_add+0x475/0xb50 [ 256.134580][T15783] wiphy_register+0x1ba6/0x28d0 [ 256.134617][T15783] ? __pfx_wiphy_register+0x10/0x10 [ 256.134645][T15783] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 256.134669][T15783] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 256.134692][T15783] ieee80211_register_hw+0x3425/0x4080 [ 256.134719][T15783] ? ieee80211_register_hw+0x1481/0x4080 [ 256.134755][T15783] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 256.134781][T15783] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 256.134813][T15783] ? __hrtimer_setup+0x187/0x210 [ 256.134832][T15783] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 256.134860][T15783] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 256.134894][T15783] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 256.134916][T15783] ? trace_kmalloc+0x1f/0xd0 [ 256.134940][T15783] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 256.134966][T15783] ? kstrndup+0xbf/0x160 [ 256.134988][T15783] hwsim_new_radio_nl+0xea4/0x1b10 [ 256.135011][T15783] ? __pfx___nla_validate_parse+0x10/0x10 [ 256.135045][T15783] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 256.135069][T15783] ? __nla_parse+0x40/0x60 [ 256.135097][T15783] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 256.135127][T15783] genl_family_rcv_msg_doit+0x215/0x300 [ 256.135164][T15783] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 256.135194][T15783] ? bpf_lsm_capable+0x9/0x20 [ 256.135220][T15783] ? security_capable+0x7e/0x2e0 [ 256.135253][T15783] genl_rcv_msg+0x60e/0x790 [ 256.135288][T15783] ? __pfx_genl_rcv_msg+0x10/0x10 [ 256.135309][T15783] ? __kasan_slab_alloc+0x6c/0x80 [ 256.135334][T15783] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 256.135357][T15783] ? __netlink_lookup+0xbd/0x810 [ 256.135372][T15783] ? rcu_is_watching+0x15/0xb0 [ 256.135395][T15783] netlink_rcv_skb+0x208/0x470 [ 256.135421][T15783] ? __pfx_genl_rcv_msg+0x10/0x10 [ 256.135437][T15783] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 256.135467][T15783] ? lock_release+0x4b/0x3e0 [ 256.135497][T15783] ? down_read+0x1ad/0x2e0 [ 256.135518][T15783] genl_rcv+0x28/0x40 [ 256.135538][T15783] netlink_unicast+0x82c/0x9e0 [ 256.135567][T15783] ? __pfx_netlink_unicast+0x10/0x10 [ 256.135593][T15783] ? netlink_sendmsg+0x642/0xb30 [ 256.135621][T15783] ? skb_put+0x11b/0x210 [ 256.135641][T15783] netlink_sendmsg+0x805/0xb30 [ 256.135673][T15783] ? __pfx_netlink_sendmsg+0x10/0x10 [ 256.135699][T15783] ? futex_unqueue+0x22/0x240 [ 256.135718][T15783] ? aa_sock_msg_perm+0xf1/0x1d0 [ 256.135737][T15783] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 256.135758][T15783] ? __pfx_netlink_sendmsg+0x10/0x10 [ 256.135781][T15783] __sock_sendmsg+0x21c/0x270 [ 256.135807][T15783] ____sys_sendmsg+0x505/0x830 [ 256.135831][T15783] ? __pfx_____sys_sendmsg+0x10/0x10 [ 256.135856][T15783] ? import_iovec+0x74/0xa0 [ 256.135881][T15783] ___sys_sendmsg+0x21f/0x2a0 [ 256.135901][T15783] ? __pfx____sys_sendmsg+0x10/0x10 [ 256.135921][T15783] ? futex_wait+0x285/0x360 [ 256.135953][T15783] ? __fget_files+0x2a/0x420 [ 256.135977][T15783] ? __fget_files+0x3a0/0x420 [ 256.136006][T15783] __x64_sys_sendmsg+0x19b/0x260 [ 256.136028][T15783] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 256.136052][T15783] ? rcu_is_watching+0x15/0xb0 [ 256.136072][T15783] ? rcu_is_watching+0x15/0xb0 [ 256.136090][T15783] do_syscall_64+0xfa/0x3b0 [ 256.136115][T15783] ? rcu_is_watching+0x15/0xb0 [ 256.136133][T15783] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.136164][T15783] ? clear_bhb_loop+0x60/0xb0 [ 256.136186][T15783] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.136205][T15783] RIP: 0033:0x7f3bfb38ebe9 [ 256.136235][T15783] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 256.136253][T15783] RSP: 002b:00007f3bfc1b1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 256.136277][T15783] RAX: ffffffffffffffda RBX: 00007f3bfb5b5fa0 RCX: 00007f3bfb38ebe9 [ 256.136292][T15783] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 256.136303][T15783] RBP: 00007f3bfb411e19 R08: 0000000000000000 R09: 0000000000000000 [ 256.136314][T15783] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 256.136324][T15783] R13: 00007f3bfb5b6038 R14: 00007f3bfb5b5fa0 R15: 00007ffe782a3f48 [ 256.136346][T15783] [ 256.136798][T15599] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 256.142499][T15788] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 256.681185][T15599] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 256.814176][T15599] 8021q: adding VLAN 0 to HW filter on device bond0 [ 256.825217][T15809] sctp: [Deprecated]: syz.1.3025 (pid 15809) Use of struct sctp_assoc_value in delayed_ack socket option. [ 256.825217][T15809] Use struct sctp_sack_info instead [ 256.831957][T15599] 8021q: adding VLAN 0 to HW filter on device team0 [ 256.860958][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.868400][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 256.880707][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.888356][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 256.903718][T15809] sctp: [Deprecated]: syz.1.3025 (pid 15809) Use of struct sctp_assoc_value in delayed_ack socket option. [ 256.903718][T15809] Use struct sctp_sack_info instead [ 257.297327][T15599] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 257.327515][T15851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.354380][T15599] veth0_vlan: entered promiscuous mode [ 257.366323][T15851] netlink: 'syz.2.3035': attribute type 4 has an invalid length. [ 257.375898][ T5865] Bluetooth: hci5: command tx timeout [ 257.386707][T15599] veth1_vlan: entered promiscuous mode [ 257.444483][T15599] veth0_macvtap: entered promiscuous mode [ 257.470668][T15599] veth1_macvtap: entered promiscuous mode [ 257.487983][T15599] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 257.506629][T15599] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 257.527703][T10803] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.538782][T10805] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.560255][T10805] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.577888][T10805] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.598048][T15867] __nla_validate_parse: 6 callbacks suppressed [ 257.598069][T15867] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3041'. [ 257.626524][T15867] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3041'. [ 257.678425][T10802] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 257.700509][T10802] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 257.743330][T10802] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 257.764087][T10802] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 257.960974][T15891] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3051'. [ 258.057074][T15895] tipc: New replicast peer: 255.255.255.255 [ 258.101842][T15895] tipc: Enabled bearer , priority 10 [ 258.174830][T15901] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3054'. [ 258.255377][ T5869] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 258.275138][ T5869] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 258.284288][ T5869] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 258.292639][ T5869] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 258.303682][ T5869] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 258.358171][T15904] lo speed is unknown, defaulting to 1000 [ 258.370041][T15915] netlink: 'syz.3.3060': attribute type 7 has an invalid length. [ 258.444604][T15911] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 258.489792][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 258.735580][T15943] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3069'. [ 258.864918][T15956] FAULT_INJECTION: forcing a failure. [ 258.864918][T15956] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 258.909157][T15956] CPU: 0 UID: 0 PID: 15956 Comm: syz.2.3071 Not tainted syzkaller #0 PREEMPT(full) [ 258.909190][T15956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 258.909202][T15956] Call Trace: [ 258.909210][T15956] [ 258.909218][T15956] dump_stack_lvl+0x189/0x250 [ 258.909246][T15956] ? __pfx____ratelimit+0x10/0x10 [ 258.909274][T15956] ? __pfx_dump_stack_lvl+0x10/0x10 [ 258.909297][T15956] ? __pfx__printk+0x10/0x10 [ 258.909326][T15956] ? __might_fault+0xb0/0x130 [ 258.909353][T15956] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 258.909375][T15956] ? rcu_is_watching+0x15/0xb0 [ 258.909396][T15956] should_fail_ex+0x414/0x560 [ 258.909422][T15956] _copy_from_user+0x2d/0xb0 [ 258.909444][T15956] do_tcp_setsockopt+0x47d/0x1f10 [ 258.909475][T15956] ? __pfx_do_tcp_setsockopt+0x10/0x10 [ 258.909500][T15956] ? rcu_is_watching+0x15/0xb0 [ 258.909518][T15956] ? __pfx_aa_sk_perm+0x10/0x10 [ 258.909544][T15956] ? lock_release+0x4b/0x3e0 [ 258.909571][T15956] ? aa_sock_opt_perm+0xff/0x1b0 [ 258.909589][T15956] ? sock_common_setsockopt+0x36/0xc0 [ 258.909614][T15956] ? tcp_setsockopt+0x3d/0xe0 [ 258.909639][T15956] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 258.909664][T15956] do_sock_setsockopt+0x17c/0x1b0 [ 258.909685][T15956] __x64_sys_setsockopt+0x13f/0x1b0 [ 258.909706][T15956] do_syscall_64+0xfa/0x3b0 [ 258.909734][T15956] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.909754][T15956] ? clear_bhb_loop+0x60/0xb0 [ 258.909775][T15956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.909793][T15956] RIP: 0033:0x7f938b98ebe9 [ 258.909811][T15956] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 258.909839][T15956] RSP: 002b:00007f938c80d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 258.909862][T15956] RAX: ffffffffffffffda RBX: 00007f938bbb5fa0 RCX: 00007f938b98ebe9 [ 258.909877][T15956] RDX: 0000000000000025 RSI: 0000000000000006 RDI: 0000000000000003 [ 258.909889][T15956] RBP: 00007f938c80d090 R08: 000000000000005d R09: 0000000000000000 [ 258.909901][T15956] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 258.909913][T15956] R13: 00007f938bbb6038 R14: 00007f938bbb5fa0 R15: 00007ffe2def3418 [ 258.909936][T15956] [ 259.143015][T15904] chnl_net:caif_netlink_parms(): no params data found [ 259.352176][T15904] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.363008][T15904] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.373321][T15904] bridge_slave_0: entered allmulticast mode [ 259.388895][T15904] bridge_slave_0: entered promiscuous mode [ 259.397307][T15904] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.405582][T15904] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.413350][T15904] bridge_slave_1: entered allmulticast mode [ 259.420501][T15904] bridge_slave_1: entered promiscuous mode [ 259.449937][ T5865] Bluetooth: hci5: command tx timeout [ 259.473728][T15987] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3078'. [ 259.543309][T15904] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 259.563663][T15991] veth1_to_bond: entered allmulticast mode [ 259.574470][T15991] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3079'. [ 259.574947][T15904] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 259.618323][T15991] bond0: (slave bond_slave_1): Releasing backup interface [ 259.634568][T15991] veth1_to_bond (unregistering): left allmulticast mode [ 259.667648][T15904] team0: Port device team_slave_0 added [ 259.676995][T15904] team0: Port device team_slave_1 added [ 259.716418][T15904] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 259.724064][T15904] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 259.751950][T15904] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 259.769153][T15904] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 259.777175][T15904] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 259.805441][T15904] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 259.818502][T15998] lo speed is unknown, defaulting to 1000 [ 259.858291][T15904] hsr_slave_0: entered promiscuous mode [ 259.865787][T15904] hsr_slave_1: entered promiscuous mode [ 259.873006][T15904] debugfs: 'hsr0' already exists in 'hsr' [ 259.880091][T15904] Cannot create hsr debugfs directory [ 260.054266][T15904] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 260.066147][T15904] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.066428][T16010] FAULT_INJECTION: forcing a failure. [ 260.066428][T16010] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 260.094670][T16010] CPU: 0 UID: 0 PID: 16010 Comm: syz.2.3085 Not tainted syzkaller #0 PREEMPT(full) [ 260.094704][T16010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 260.094717][T16010] Call Trace: [ 260.094724][T16010] [ 260.094733][T16010] dump_stack_lvl+0x189/0x250 [ 260.094762][T16010] ? __pfx____ratelimit+0x10/0x10 [ 260.094789][T16010] ? __pfx_dump_stack_lvl+0x10/0x10 [ 260.094811][T16010] ? __pfx__printk+0x10/0x10 [ 260.094841][T16010] ? rcu_is_watching+0x15/0xb0 [ 260.094863][T16010] should_fail_ex+0x414/0x560 [ 260.094890][T16010] _copy_to_user+0x31/0xb0 [ 260.094913][T16010] simple_read_from_buffer+0xe1/0x170 [ 260.094943][T16010] proc_fail_nth_read+0x1b3/0x220 [ 260.094967][T16010] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 260.094989][T16010] ? rw_verify_area+0x2a6/0x4d0 [ 260.095013][T16010] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 260.095035][T16010] vfs_read+0x200/0xa30 [ 260.095057][T16010] ? fdget_pos+0x247/0x320 [ 260.095085][T16010] ? __pfx___mutex_lock+0x10/0x10 [ 260.095114][T16010] ? __pfx_vfs_read+0x10/0x10 [ 260.095142][T16010] ? __fget_files+0x3a0/0x420 [ 260.095169][T16010] ? __fget_files+0x2a/0x420 [ 260.095201][T16010] ksys_read+0x145/0x250 [ 260.095225][T16010] ? __pfx_ksys_read+0x10/0x10 [ 260.095252][T16010] ? rcu_is_watching+0x15/0xb0 [ 260.095272][T16010] do_syscall_64+0xfa/0x3b0 [ 260.095300][T16010] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.095319][T16010] ? clear_bhb_loop+0x60/0xb0 [ 260.095341][T16010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.095360][T16010] RIP: 0033:0x7f938b98d5fc [ 260.095378][T16010] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 260.095396][T16010] RSP: 002b:00007f938c80d030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 260.095418][T16010] RAX: ffffffffffffffda RBX: 00007f938bbb5fa0 RCX: 00007f938b98d5fc [ 260.095433][T16010] RDX: 000000000000000f RSI: 00007f938c80d0a0 RDI: 0000000000000004 [ 260.095446][T16010] RBP: 00007f938c80d090 R08: 0000000000000000 R09: 0000000000000000 [ 260.095458][T16010] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 260.095471][T16010] R13: 00007f938bbb6038 R14: 00007f938bbb5fa0 R15: 00007ffe2def3418 [ 260.095493][T16010] [ 260.342925][ T5865] Bluetooth: hci1: command tx timeout [ 260.396469][T15904] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 260.407857][T15904] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.476664][T15904] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 260.488060][T15904] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.515209][T16023] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3090'. [ 260.529241][T16023] openvswitch: netlink: Key 9 has unexpected len 0 expected 4 [ 260.552900][T15904] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 260.564245][T15904] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.598311][T16028] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3092'. [ 260.647972][T15904] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 260.658828][T15904] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 260.671811][T15904] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 260.684093][T15904] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 260.766114][T15904] 8021q: adding VLAN 0 to HW filter on device bond0 [ 260.785808][T15904] 8021q: adding VLAN 0 to HW filter on device team0 [ 260.798692][T10805] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.805913][T10805] bridge0: port 1(bridge_slave_0) entered forwarding state [ 260.833388][T10805] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.840581][T10805] bridge0: port 2(bridge_slave_1) entered forwarding state [ 260.995308][T16054] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3098'. [ 261.042267][T16054] macvtap1: entered promiscuous mode [ 261.048728][T16054] vlan0: entered promiscuous mode [ 261.059163][T16054] macvtap1: entered allmulticast mode [ 261.066216][T16054] vlan0: entered allmulticast mode [ 261.072272][T16054] veth0_vlan: entered allmulticast mode [ 261.165424][T15904] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 261.222067][T15904] veth0_vlan: entered promiscuous mode [ 261.237081][T15904] veth1_vlan: entered promiscuous mode [ 261.278263][T15904] veth0_macvtap: entered promiscuous mode [ 261.291166][T15904] veth1_macvtap: entered promiscuous mode [ 261.310115][T15904] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 261.333199][T15904] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 261.355066][T10800] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.366146][T10800] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.385442][T10800] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.395293][T10800] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.464016][T10805] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 261.475023][T10805] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 261.506252][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 261.516685][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 261.529585][ T5865] Bluetooth: hci5: command tx timeout [ 261.778430][ T13] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 261.806154][ T13] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 261.839678][ T13] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 261.848973][ T13] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 261.910647][T16098] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (64) [ 262.038714][ T5869] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 262.049258][ T5869] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 262.065446][ T5869] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 262.069393][T10802] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 262.088497][ T5869] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 262.097718][ T5869] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 262.159193][T10802] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 262.186797][T10802] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 262.228950][T10802] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 262.287625][T16110] lo speed is unknown, defaulting to 1000 [ 262.409794][ T5865] Bluetooth: hci1: command tx timeout [ 262.485979][T16140] lo speed is unknown, defaulting to 1000 [ 262.578620][T16147] netlink: 'syz.1.3125': attribute type 83 has an invalid length. [ 262.804950][T16155] tipc: Started in network mode [ 262.824391][T16155] tipc: Node identity 0a3cd7d9524b, cluster identity 4711 [ 262.832614][T16155] tipc: Enabled bearer , priority 0 [ 262.848857][T16110] chnl_net:caif_netlink_parms(): no params data found [ 262.887486][T16155] tipc: Disabling bearer [ 262.951420][T16164] __nla_validate_parse: 15 callbacks suppressed [ 262.951443][T16164] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3129'. [ 262.968953][T16164] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3129'. [ 263.061565][T16170] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3131'. [ 263.066529][T16171] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3131'. [ 263.120809][T16110] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.128063][T16110] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.137053][T16110] bridge_slave_0: entered allmulticast mode [ 263.146586][T16110] bridge_slave_0: entered promiscuous mode [ 263.167181][T16110] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.190637][T16110] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.198351][T16110] bridge_slave_1: entered allmulticast mode [ 263.205934][T16110] bridge_slave_1: entered promiscuous mode [ 263.206061][T16178] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3133'. [ 263.276873][T16110] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 263.296916][T16110] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 263.301563][T16184] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3136'. [ 263.334981][T16110] team0: Port device team_slave_0 added [ 263.345082][T16110] team0: Port device team_slave_1 added [ 263.393971][T16110] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 263.405745][T16110] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.422869][T16192] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3137'. [ 263.444402][T16110] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 263.458759][T16191] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3137'. [ 263.468850][T16110] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 263.478378][T16110] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.506144][T16110] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 263.517191][T16196] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3137'. [ 263.594128][T16201] batman_adv: batadv0: Adding interface: dummy0 [ 263.604618][T16201] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.636215][T16201] batman_adv: batadv0: Interface activated: dummy0 [ 263.663739][T16110] hsr_slave_0: entered promiscuous mode [ 263.672505][T16110] hsr_slave_1: entered promiscuous mode [ 263.678901][T16110] debugfs: 'hsr0' already exists in 'hsr' [ 263.685464][T16110] Cannot create hsr debugfs directory [ 263.700086][T16205] netlink: 'syz.1.3142': attribute type 1 has an invalid length. [ 263.716533][T16205] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3142'. [ 263.842385][T16110] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 263.854401][T16110] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.928878][T16110] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 263.942776][T16110] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.996776][T16110] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 264.007924][T16110] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.096701][T16110] netdevsim netdevsim2  (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 264.113301][T16110] netdevsim netdevsim2  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.169786][ T5865] Bluetooth: hci4: command tx timeout [ 264.233052][T16110] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 264.247441][T16110] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 264.263796][T16110] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 264.278251][T16110] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 264.362587][T16110] 8021q: adding VLAN 0 to HW filter on device bond0 [ 264.382775][T16110] 8021q: adding VLAN 0 to HW filter on device team0 [ 264.395030][T16247] lo speed is unknown, defaulting to 1000 [ 264.397763][T10802] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.408957][T10802] bridge0: port 1(bridge_slave_0) entered forwarding state [ 264.444452][T10802] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.451765][T10802] bridge0: port 2(bridge_slave_1) entered forwarding state [ 264.490016][ T5865] Bluetooth: hci1: command tx timeout [ 264.708439][T16110] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 264.759097][T16110] veth0_vlan: entered promiscuous mode [ 264.772413][T16110] veth1_vlan: entered promiscuous mode [ 264.809073][T16110] veth0_macvtap: entered promiscuous mode [ 264.824792][T16110] veth1_macvtap: entered promiscuous mode [ 264.843019][T16110] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 264.856502][T16110] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 264.873033][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.884758][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.896514][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.911910][T10805] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.669713][T10805] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.687656][T10805] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.723783][T10800] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.736570][T10800] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.905303][T16298] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 265.914120][T16298] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 266.079070][T16313] syzkaller0: entered promiscuous mode [ 266.088751][T16313] syzkaller0: entered allmulticast mode [ 266.249885][ T5865] Bluetooth: hci4: command tx timeout [ 266.393241][T16340] gre0: entered promiscuous mode [ 266.570715][ T5865] Bluetooth: hci1: command tx timeout [ 266.954003][T16351] netlink: 'syz.0.3185': attribute type 21 has an invalid length. [ 266.962565][T16351] netlink: 'syz.0.3185': attribute type 1 has an invalid length. [ 267.032436][T16355] pimreg0: renamed from bond0 (while UP) [ 267.368474][T16380] tipc: Enabling of bearer rejected, media not registered [ 267.448476][T16387] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 267.467223][T16390] 8021q: VLANs not supported on vcan0 [ 267.596499][T16398] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 268.081726][T16421] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 268.186427][T16428] __nla_validate_parse: 9 callbacks suppressed [ 268.186447][T16428] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3211'. [ 268.257478][T16434] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3213'. [ 268.316740][T16434] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 268.330888][ T5865] Bluetooth: hci4: command tx timeout [ 268.346263][T16434] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 268.354175][T16434] gretap1: entered promiscuous mode [ 268.361802][T16434] gretap1: entered allmulticast mode [ 268.374220][T16439] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3214'. [ 268.397998][T16444] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 268.485864][T16454] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3219'. [ 268.647631][T16470] netlink: 'syz.1.3220': attribute type 3 has an invalid length. [ 268.669872][T16470] netlink: 'syz.1.3220': attribute type 1 has an invalid length. [ 268.847484][T16495] vxcan2: entered promiscuous mode [ 268.853815][T16495] vxcan2: entered allmulticast mode [ 268.993577][T16513] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3236'. [ 269.023152][T16508] pimreg3: entered allmulticast mode [ 269.031839][T16508] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3234'. [ 269.063062][T16516] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3237'. [ 269.095861][T16519] sctp: [Deprecated]: syz.0.3238 (pid 16519) Use of struct sctp_assoc_value in delayed_ack socket option. [ 269.095861][T16519] Use struct sctp_sack_info instead [ 269.241693][T16524] lo speed is unknown, defaulting to 1000 [ 269.272049][T16534] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 269.313295][T16530] netlink: 'syz.1.3242': attribute type 1 has an invalid length. [ 269.331598][T16530] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3242'. [ 269.350242][T16537] netlink: 'syz.0.3243': attribute type 9 has an invalid length. [ 269.515508][T16547] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3246'. [ 269.762264][T16576] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 269.772252][T16576] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 269.779934][T16572] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3253'. [ 270.409923][ T5865] Bluetooth: hci4: command tx timeout [ 272.489498][ T5865] Bluetooth: hci4: command tx timeout [ 275.130604][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 307.131387][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 317.371928][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.380913][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 328.127759][T16594] __nla_validate_parse: 1 callbacks suppressed [ 328.127784][T16594] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3261'. [ 328.256712][T16598] syz_tun: entered promiscuous mode [ 328.280838][T16598] batadv_slave_0: entered promiscuous mode [ 328.290511][T16598] hsr1: entered allmulticast mode [ 328.295858][T16598] syz_tun: entered allmulticast mode [ 328.321985][T16598] batadv_slave_0: entered allmulticast mode [ 328.383723][ T5869] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 328.391674][ T5869] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 328.399353][ T5869] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 328.404654][ T5870] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 328.407032][ T5869] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 328.416185][ T5870] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 328.423935][ T5869] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 328.437143][ T5869] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 328.446383][ T5869] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 328.454230][ T5869] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 328.461002][T16600] lo speed is unknown, defaulting to 1000 [ 328.528294][T16602] lo speed is unknown, defaulting to 1000 [ 328.658545][T16609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 328.763279][T16600] chnl_net:caif_netlink_parms(): no params data found [ 328.907773][T16634] netlink: 'syz.1.3270': attribute type 1 has an invalid length. [ 329.002034][T16644] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3274'. [ 329.016186][T16647] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3275'. [ 329.041857][T16647] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3275'. [ 329.050289][T16600] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.059122][T16600] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.067986][T16600] bridge_slave_0: entered allmulticast mode [ 329.076560][T16600] bridge_slave_0: entered promiscuous mode [ 329.105245][T16600] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.117993][T16600] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.129565][T16600] bridge_slave_1: entered allmulticast mode [ 329.137745][T16600] bridge_slave_1: entered promiscuous mode [ 329.196145][T16661] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 329.205127][T16661] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 329.212532][T16664] netlink: 'syz.2.3279': attribute type 21 has an invalid length. [ 329.236906][T16600] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 329.248900][T16664] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3279'. [ 329.279023][T16602] chnl_net:caif_netlink_parms(): no params data found [ 329.295864][T16600] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 329.364196][T16674] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3282'. [ 329.403887][T16600] team0: Port device team_slave_0 added [ 329.439201][T16600] team0: Port device team_slave_1 added [ 329.474706][T16602] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.483771][T16602] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.491255][T16602] bridge_slave_0: entered allmulticast mode [ 329.498975][T16602] bridge_slave_0: entered promiscuous mode [ 329.534576][T16602] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.542412][T16602] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.552644][T16602] bridge_slave_1: entered allmulticast mode [ 329.563658][T16602] bridge_slave_1: entered promiscuous mode [ 329.642839][T16686] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 329.683363][T16602] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 329.710635][T16600] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 329.717986][T16600] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 329.765383][T16600] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 329.780682][T16600] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 329.788305][T16600] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 329.815165][T16600] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 329.833612][T16707] netlink: 'syz.0.3289': attribute type 28 has an invalid length. [ 329.842169][T16707] netlink: 'syz.0.3289': attribute type 3 has an invalid length. [ 329.850587][T16707] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3289'. [ 329.852592][T16704] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 329.867956][T16602] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 329.878459][T16704] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 329.898380][T16704] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 329.922164][T16704] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 329.942577][T16704] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 329.971498][T16602] team0: Port device team_slave_0 added [ 329.979489][T16602] team0: Port device team_slave_1 added [ 329.988362][T16600] hsr_slave_0: entered promiscuous mode [ 329.995566][T16600] hsr_slave_1: entered promiscuous mode [ 330.002188][T16600] debugfs: 'hsr0' already exists in 'hsr' [ 330.008249][T16600] Cannot create hsr debugfs directory [ 330.060489][T16602] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 330.067922][T16602] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 330.100574][T16602] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 330.122015][T16602] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 330.129123][T16602] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 330.164406][T16602] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 330.221676][T16602] hsr_slave_0: entered promiscuous mode [ 330.228264][T16602] hsr_slave_1: entered promiscuous mode [ 330.234909][T16602] debugfs: 'hsr0' already exists in 'hsr' [ 330.241286][T16602] Cannot create hsr debugfs directory [ 330.490144][ T5183] Bluetooth: hci6: command tx timeout [ 330.495795][ T5183] Bluetooth: hci3: command tx timeout [ 330.574738][T16600] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 330.607750][T16600] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 330.636402][T16600] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 330.652506][T16600] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 330.828125][T16602] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 330.837970][T16602] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 330.879920][T16602] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 330.902638][T16602] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 331.017496][T16716] workqueue: Failed to create a rescuer kthread for wq "bond46": -EINTR [ 331.085160][T16600] 8021q: adding VLAN 0 to HW filter on device bond0 [ 331.134976][T16600] 8021q: adding VLAN 0 to HW filter on device team0 [ 331.163031][T10796] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.170672][T10796] bridge0: port 1(bridge_slave_0) entered forwarding state [ 331.189828][T10796] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.197370][T10796] bridge0: port 2(bridge_slave_1) entered forwarding state [ 331.222521][T16602] 8021q: adding VLAN 0 to HW filter on device bond0 [ 331.268519][T16602] 8021q: adding VLAN 0 to HW filter on device team0 [ 331.301967][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.309137][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 331.326667][T16600] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 331.353032][T10805] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.360367][T10805] bridge0: port 2(bridge_slave_1) entered forwarding state [ 331.608372][T16600] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 331.668868][T16602] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 331.980821][T16834] netlink: 'syz.2.3308': attribute type 1 has an invalid length. [ 332.007726][T16600] veth0_vlan: entered promiscuous mode [ 332.032545][T16600] veth1_vlan: entered promiscuous mode [ 332.135997][T16602] veth0_vlan: entered promiscuous mode [ 332.154698][T16600] veth0_macvtap: entered promiscuous mode [ 332.167866][T16600] veth1_macvtap: entered promiscuous mode [ 332.193796][T16602] veth1_vlan: entered promiscuous mode [ 332.231095][T16600] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 332.257065][T16854] geneve2: entered promiscuous mode [ 332.266029][T16854] geneve2: entered allmulticast mode [ 332.330425][T16600] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 332.336903][T16858] netlink: 'syz.2.3315': attribute type 1 has an invalid length. [ 332.349920][T10800] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.463420][T10800] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.494028][T16861] bond1: (slave gretap1): making interface the new active one [ 332.502533][T16861] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 332.515620][T16602] veth0_macvtap: entered promiscuous mode [ 332.525544][T16602] veth1_macvtap: entered promiscuous mode [ 332.532963][T10800] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.560777][T10800] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.570198][ T5183] Bluetooth: hci3: command tx timeout [ 332.575807][ T5869] Bluetooth: hci6: command tx timeout [ 332.660532][T16602] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 332.683144][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 332.705748][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 332.724411][T16602] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 332.739982][ C0] ------------[ cut here ]------------ [ 332.745586][ C0] ODEBUG: free active (active state 0) object: ffff88814d701c90 object type: timer_list hint: rose_t0timer_expiry+0x0/0x350 [ 332.759491][ C0] WARNING: CPU: 0 PID: 16602 at lib/debugobjects.c:615 debug_print_object+0x16b/0x1e0 [ 332.769093][ C0] Modules linked in: [ 332.773189][ C0] CPU: 0 UID: 0 PID: 16602 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 332.782986][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 332.793104][ C0] RIP: 0010:debug_print_object+0x16b/0x1e0 [ 332.799040][ C0] Code: 4c 89 ff e8 97 e8 52 fd 4d 8b 0f 48 c7 c7 20 40 e3 8b 48 8b 34 24 4c 89 ea 89 e9 4d 89 f0 41 54 e8 2a 1e b3 fc 48 83 c4 08 90 <0f> 0b 90 90 ff 05 67 8a d3 0a 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 [ 332.818907][ C0] RSP: 0018:ffffc90000007a10 EFLAGS: 00010292 [ 332.825069][ C0] RAX: 923988c0fab87d00 RBX: dffffc0000000000 RCX: ffff888058053c00 [ 332.833100][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 332.841127][ C0] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 332.849187][ C0] R10: dffffc0000000000 R11: fffffbfff1bfa1ec R12: ffffffff8a6c9760 [ 332.857308][ C0] R13: ffffffff8be341a0 R14: ffff88814d701c90 R15: ffffffff8b8cdfa0 [ 332.865336][ C0] FS: 00005555590ad500(0000) GS:ffff888125c1b000(0000) knlGS:0000000000000000 [ 332.874936][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 332.881574][ C0] CR2: 00007f9ba21746a0 CR3: 000000007b0fa000 CR4: 00000000003526f0 [ 332.889681][ C0] Call Trace: [ 332.893088][ C0] [ 332.895960][ C0] debug_check_no_obj_freed+0x3a2/0x470 [ 332.901761][ C0] ? do_raw_spin_lock+0x121/0x290 [ 332.906898][ C0] ? rose_timer_expiry+0x4cb/0x600 [ 332.912058][ C0] kfree+0x112/0x440 [ 332.916085][ C0] rose_timer_expiry+0x4cb/0x600 [ 332.921079][ C0] call_timer_fn+0x17e/0x5f0 [ 332.925818][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 332.931515][ C0] ? call_timer_fn+0xbe/0x5f0 [ 332.936244][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 332.941513][ C0] ? rcu_is_watching+0x15/0xb0 [ 332.946377][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 332.952080][ C0] __run_timer_base+0x61a/0x860 [ 332.957032][ C0] ? ktime_get+0x3e/0x1f0 [ 332.961402][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 332.966889][ C0] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 332.973283][ C0] run_timer_softirq+0xb7/0x180 [ 332.978321][ C0] handle_softirqs+0x283/0x870 [ 332.983209][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 332.988180][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 332.993662][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 332.998981][ C0] __irq_exit_rcu+0xca/0x1f0 [ 333.003609][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 333.009008][ C0] irq_exit_rcu+0x9/0x30 [ 333.013383][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 333.019038][ C0] [ 333.022049][ C0] [ 333.025177][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 333.031353][ C0] RIP: 0010:mutex_spin_on_owner+0x27b/0x360 [ 333.037423][ C0] Code: be 08 00 00 00 e8 f5 38 86 00 42 80 7c 35 00 00 74 08 4c 89 e7 e8 75 36 86 00 49 f7 04 24 01 00 00 00 0f 85 8c 00 00 00 f3 90 <4c> 89 e7 be 08 00 00 00 e8 c8 38 86 00 42 80 7c 35 00 00 0f 84 90 [ 333.057322][ C0] RSP: 0018:ffffc90002f87428 EFLAGS: 00000246 [ 333.063529][ C0] RAX: 1ffff1100b00a780 RBX: ffffffff8f5381f0 RCX: ffffffff819cde28 [ 333.071715][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000001 [ 333.079730][ C0] RBP: 1ffffffff1ea7034 R08: ffffffff8f5381a7 R09: 1ffffffff1ea7034 [ 333.087828][ C0] R10: dffffc0000000000 R11: fffffbfff1ea7035 R12: ffffffff8f5381a0 [ 333.096112][ C0] R13: ffffffff8f5381f0 R14: dffffc0000000000 R15: ffff88802e855a00 [ 333.104408][ C0] ? mutex_spin_on_owner+0x288/0x360 [ 333.110085][ C0] ? mutex_spin_on_owner+0x19f/0x360 [ 333.115433][ C0] __mutex_lock+0x311/0x1350 [ 333.120095][ C0] ? nlmon_xmit+0xb0/0x100 [ 333.124732][ C0] ? kmem_cache_free+0x18f/0x400 [ 333.129758][ C0] ? inet_rtm_newaddr+0x3b0/0x18b0 [ 333.134975][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 333.140295][ C0] ? __dev_queue_xmit+0x27b/0x3b50 [ 333.145501][ C0] ? __local_bh_enable_ip+0x12d/0x1c0 [ 333.151246][ C0] ? lock_release+0x4b/0x3e0 [ 333.156022][ C0] ? __nla_parse+0x40/0x60 [ 333.160467][ C0] inet_rtm_newaddr+0x3b0/0x18b0 [ 333.165414][ C0] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 333.170820][ C0] ? lock_release+0x4b/0x3e0 [ 333.175514][ C0] ? bpf_lsm_capable+0x9/0x20 [ 333.180381][ C0] ? security_capable+0x7e/0x2e0 [ 333.185332][ C0] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 333.191085][ C0] rtnetlink_rcv_msg+0x7cc/0xb70 [ 333.196299][ C0] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 333.201437][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 333.207180][ C0] ? ref_tracker_free+0x63a/0x7d0 [ 333.212328][ C0] ? __asan_memcpy+0x40/0x70 [ 333.216929][ C0] ? __pfx_ref_tracker_free+0x10/0x10 [ 333.222347][ C0] netlink_rcv_skb+0x208/0x470 [ 333.227118][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 333.233047][ C0] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 333.238420][ C0] netlink_unicast+0x82c/0x9e0 [ 333.243318][ C0] ? __pfx_netlink_unicast+0x10/0x10 [ 333.248822][ C0] ? netlink_sendmsg+0x642/0xb30 [ 333.254155][ C0] ? skb_put+0x11b/0x210 [ 333.258596][ C0] netlink_sendmsg+0x805/0xb30 [ 333.263509][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 333.269242][ C0] ? aa_sock_msg_perm+0xf1/0x1d0 [ 333.274389][ C0] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 333.280072][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 333.285564][ C0] __sock_sendmsg+0x21c/0x270 [ 333.290345][ C0] __sys_sendto+0x3bd/0x520 [ 333.294897][ C0] ? __pfx___sys_sendto+0x10/0x10 [ 333.299952][ C0] ? fput_close_sync+0x119/0x200 [ 333.305085][ C0] ? rcu_is_watching+0x15/0xb0 [ 333.309987][ C0] ? __pfx_fput_close_sync+0x10/0x10 [ 333.316000][ C0] __x64_sys_sendto+0xde/0x100 [ 333.321548][ C0] do_syscall_64+0xfa/0x3b0 [ 333.326525][ C0] ? rcu_is_watching+0x15/0xb0 [ 333.331423][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.337775][ C0] ? clear_bhb_loop+0x60/0xb0 [ 333.343142][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.349354][ C0] RIP: 0033:0x7fdb09b90a7c [ 333.353904][ C0] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 333.373532][ C0] RSP: 002b:00007ffd21c05820 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 333.382153][ C0] RAX: ffffffffffffffda RBX: 00007fdb0a8e4620 RCX: 00007fdb09b90a7c [ 333.390442][ C0] RDX: 0000000000000028 RSI: 00007fdb0a8e4670 RDI: 0000000000000003 [ 333.398893][ C0] RBP: 0000000000000000 R08: 00007ffd21c05874 R09: 000000000000000c [ 333.407091][ C0] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 333.415721][ C0] R13: 0000000000000000 R14: 00007fdb0a8e4670 R15: 0000000000000000 [ 333.423832][ C0] [ 333.427377][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 333.434803][ C0] CPU: 0 UID: 0 PID: 16602 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 333.444652][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 333.454949][ C0] Call Trace: [ 333.458637][ C0] [ 333.461503][ C0] dump_stack_lvl+0x99/0x250 [ 333.466106][ C0] ? __asan_memcpy+0x40/0x70 [ 333.470713][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 333.475941][ C0] ? __pfx__printk+0x10/0x10 [ 333.480800][ C0] vpanic+0x281/0x750 [ 333.484882][ C0] ? __pfx__printk+0x10/0x10 [ 333.489481][ C0] ? __pfx_vpanic+0x10/0x10 [ 333.494090][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 333.499404][ C0] panic+0xb9/0xc0 [ 333.503307][ C0] ? __pfx_panic+0x10/0x10 [ 333.508700][ C0] __warn+0x31b/0x4b0 [ 333.512701][ C0] ? debug_print_object+0x16b/0x1e0 [ 333.518224][ C0] ? debug_print_object+0x16b/0x1e0 [ 333.523609][ C0] report_bug+0x2be/0x4f0 [ 333.527964][ C0] ? debug_print_object+0x16b/0x1e0 [ 333.533174][ C0] ? debug_print_object+0x16b/0x1e0 [ 333.538523][ C0] ? debug_print_object+0x16d/0x1e0 [ 333.543793][ C0] handle_bug+0x84/0x160 [ 333.548044][ C0] exc_invalid_op+0x1a/0x50 [ 333.552541][ C0] asm_exc_invalid_op+0x1a/0x20 [ 333.557387][ C0] RIP: 0010:debug_print_object+0x16b/0x1e0 [ 333.563325][ C0] Code: 4c 89 ff e8 97 e8 52 fd 4d 8b 0f 48 c7 c7 20 40 e3 8b 48 8b 34 24 4c 89 ea 89 e9 4d 89 f0 41 54 e8 2a 1e b3 fc 48 83 c4 08 90 <0f> 0b 90 90 ff 05 67 8a d3 0a 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 [ 333.583130][ C0] RSP: 0018:ffffc90000007a10 EFLAGS: 00010292 [ 333.589215][ C0] RAX: 923988c0fab87d00 RBX: dffffc0000000000 RCX: ffff888058053c00 [ 333.597409][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 333.605474][ C0] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 333.614232][ C0] R10: dffffc0000000000 R11: fffffbfff1bfa1ec R12: ffffffff8a6c9760 [ 333.622380][ C0] R13: ffffffff8be341a0 R14: ffff88814d701c90 R15: ffffffff8b8cdfa0 [ 333.630358][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 333.636011][ C0] debug_check_no_obj_freed+0x3a2/0x470 [ 333.641864][ C0] ? do_raw_spin_lock+0x121/0x290 [ 333.647069][ C0] ? rose_timer_expiry+0x4cb/0x600 [ 333.652646][ C0] kfree+0x112/0x440 [ 333.656580][ C0] rose_timer_expiry+0x4cb/0x600 [ 333.661733][ C0] call_timer_fn+0x17e/0x5f0 [ 333.666419][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 333.672059][ C0] ? call_timer_fn+0xbe/0x5f0 [ 333.676837][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 333.682059][ C0] ? rcu_is_watching+0x15/0xb0 [ 333.686850][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 333.692311][ C0] __run_timer_base+0x61a/0x860 [ 333.697173][ C0] ? ktime_get+0x3e/0x1f0 [ 333.701600][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 333.707053][ C0] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 333.713382][ C0] run_timer_softirq+0xb7/0x180 [ 333.718235][ C0] handle_softirqs+0x283/0x870 [ 333.723224][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 333.728104][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 333.733481][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 333.738682][ C0] __irq_exit_rcu+0xca/0x1f0 [ 333.743289][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 333.748506][ C0] irq_exit_rcu+0x9/0x30 [ 333.752745][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 333.758393][ C0] [ 333.761410][ C0] [ 333.764347][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 333.770379][ C0] RIP: 0010:mutex_spin_on_owner+0x27b/0x360 [ 333.776288][ C0] Code: be 08 00 00 00 e8 f5 38 86 00 42 80 7c 35 00 00 74 08 4c 89 e7 e8 75 36 86 00 49 f7 04 24 01 00 00 00 0f 85 8c 00 00 00 f3 90 <4c> 89 e7 be 08 00 00 00 e8 c8 38 86 00 42 80 7c 35 00 00 0f 84 90 [ 333.796245][ C0] RSP: 0018:ffffc90002f87428 EFLAGS: 00000246 [ 333.802405][ C0] RAX: 1ffff1100b00a780 RBX: ffffffff8f5381f0 RCX: ffffffff819cde28 [ 333.810549][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000001 [ 333.818830][ C0] RBP: 1ffffffff1ea7034 R08: ffffffff8f5381a7 R09: 1ffffffff1ea7034 [ 333.827673][ C0] R10: dffffc0000000000 R11: fffffbfff1ea7035 R12: ffffffff8f5381a0 [ 333.835760][ C0] R13: ffffffff8f5381f0 R14: dffffc0000000000 R15: ffff88802e855a00 [ 333.844604][ C0] ? mutex_spin_on_owner+0x288/0x360 [ 333.850267][ C0] ? mutex_spin_on_owner+0x19f/0x360 [ 333.856358][ C0] __mutex_lock+0x311/0x1350 [ 333.860974][ C0] ? nlmon_xmit+0xb0/0x100 [ 333.865398][ C0] ? kmem_cache_free+0x18f/0x400 [ 333.870401][ C0] ? inet_rtm_newaddr+0x3b0/0x18b0 [ 333.875783][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 333.881042][ C0] ? __dev_queue_xmit+0x27b/0x3b50 [ 333.886271][ C0] ? __local_bh_enable_ip+0x12d/0x1c0 [ 333.892187][ C0] ? lock_release+0x4b/0x3e0 [ 333.896991][ C0] ? __nla_parse+0x40/0x60 [ 333.901540][ C0] inet_rtm_newaddr+0x3b0/0x18b0 [ 333.906582][ C0] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 333.912069][ C0] ? lock_release+0x4b/0x3e0 [ 333.916939][ C0] ? bpf_lsm_capable+0x9/0x20 [ 333.921951][ C0] ? security_capable+0x7e/0x2e0 [ 333.927166][ C0] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 333.932664][ C0] rtnetlink_rcv_msg+0x7cc/0xb70 [ 333.937620][ C0] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 333.942827][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 333.948489][ C0] ? ref_tracker_free+0x63a/0x7d0 [ 333.953631][ C0] ? __asan_memcpy+0x40/0x70 [ 333.958229][ C0] ? __pfx_ref_tracker_free+0x10/0x10 [ 333.963793][ C0] netlink_rcv_skb+0x208/0x470 [ 333.969009][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 333.974482][ C0] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 333.979794][ C0] netlink_unicast+0x82c/0x9e0 [ 333.984669][ C0] ? __pfx_netlink_unicast+0x10/0x10 [ 333.990030][ C0] ? netlink_sendmsg+0x642/0xb30 [ 333.995383][ C0] ? skb_put+0x11b/0x210 [ 333.999831][ C0] netlink_sendmsg+0x805/0xb30 [ 334.004828][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 334.011179][ C0] ? aa_sock_msg_perm+0xf1/0x1d0 [ 334.016176][ C0] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 334.021785][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 334.027277][ C0] __sock_sendmsg+0x21c/0x270 [ 334.031981][ C0] __sys_sendto+0x3bd/0x520 [ 334.036577][ C0] ? __pfx___sys_sendto+0x10/0x10 [ 334.041614][ C0] ? fput_close_sync+0x119/0x200 [ 334.046841][ C0] ? rcu_is_watching+0x15/0xb0 [ 334.051642][ C0] ? __pfx_fput_close_sync+0x10/0x10 [ 334.057207][ C0] __x64_sys_sendto+0xde/0x100 [ 334.062249][ C0] do_syscall_64+0xfa/0x3b0 [ 334.067007][ C0] ? rcu_is_watching+0x15/0xb0 [ 334.072054][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.078170][ C0] ? clear_bhb_loop+0x60/0xb0 [ 334.082872][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.088867][ C0] RIP: 0033:0x7fdb09b90a7c [ 334.093289][ C0] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 334.113405][ C0] RSP: 002b:00007ffd21c05820 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 334.122175][ C0] RAX: ffffffffffffffda RBX: 00007fdb0a8e4620 RCX: 00007fdb09b90a7c [ 334.130504][ C0] RDX: 0000000000000028 RSI: 00007fdb0a8e4670 RDI: 0000000000000003 [ 334.138769][ C0] RBP: 0000000000000000 R08: 00007ffd21c05874 R09: 000000000000000c [ 334.146850][ C0] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 334.154997][ C0] R13: 0000000000000000 R14: 00007fdb0a8e4670 R15: 0000000000000000 [ 334.163103][ C0] [ 334.166803][ C0] Kernel Offset: disabled [ 334.171315][ C0] Rebooting in 86400 seconds..