last executing test programs: 4.461493968s ago: executing program 4 (id=625): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r2) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000001f40)) (async) pipe(&(0x7f0000001f40)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f0000002000)=[{r5, 0x400}], 0x1, 0x0, 0x0, 0x0) write$bt_hci(r6, &(0x7f00000025c0)={0x1, @le_create_cis={{0x2064, 0x1}}}, 0x5) write$cgroup_subtree(r6, &(0x7f0000002980)={[{0x2b, 'cpuset'}]}, 0x8) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x169}]}, @NFT_MSG_NEWSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xb8}}, 0x0) sendmsg$IEEE802154_LIST_IFACE(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)={0x20, r3, 0x1, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x1) sendmsg$nl_route(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000002000)=ANY=[@ANYBLOB="54000000210001002dbd7000fedbdf250a208002080000030300000014000200fe8000000000000000000000000000aa14000100fc020006000000000000000000000001080004009b6c000008000d0005000000"], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x800) (async) sendmsg$nl_route(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000002000)=ANY=[@ANYBLOB="54000000210001002dbd7000fedbdf250a208002080000030300000014000200fe8000000000000000000000000000aa14000100fc020006000000000000000000000001080004009b6c000008000d0005000000"], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x800) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x9, 0xffffffff}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x50}}, 0x8000) (async) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x9, 0xffffffff}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x50}}, 0x8000) 3.461800627s ago: executing program 4 (id=636): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x6, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x427a7000) write$cgroup_devices(r2, 0x0, 0x6) write(r0, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, r2, 0x0) r4 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000040)) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000080)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xf, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000c000000000000000000008018110000", @ANYRES32, @ANYBLOB="0200000000000000b702000014000000b70300003f0000008500000083000000bf0920000000000055490100000000009500000000000000bf91"], 0x0, 0xb, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r6 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e20, @rand_addr=0x64010100}, {0x2, 0x4a2c, @remote}, {0x2, 0x4e25, @multicast2}, 0x204, 0x0, 0x0, 0x0, 0x2008, 0x0, 0x200003, 0x2, 0x2}) write$tun(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="68000000000905040000000000000000020000000900010073797a3000000000140002800600010000020000050002000600000008000528000500002c0004800800010000000001200002800c000100706f6c69637930000800020000000002080003000000001e", 0x68}], 0x1}, 0x0) 2.871344224s ago: executing program 0 (id=642): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x118, 0x13, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_USERDATA={0x36, 0x8, "301da462ca6607ac5b400741ce2713a354adb14a55896a20a5e1a1088c8a618fb6124a68f6157a805fce5b195ee07f1856eb"}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_USERDATA={0xa7, 0x8, "5d1b98be3b88027828c3621b5c8e82b371227675a70730603c43dd781c343039c4f2f914c4345a62cac0b67c1ce658513147978add9538927aeaca61ca961faedc7a3aacf5ef2a060ac2d8b1bb35ce46c6346496ca1146546e82b0aa1922d2ef12ffa48cb51a1110ff80621337d48cd9af62ff909ba8b420048de0afbc426de4090e812a921e186c1c27d5bcf02b7c4c515b3d205dddd815649c1ef4b48834a53b2049"}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x118}, 0x1, 0x0, 0x0, 0x20040818}, 0x40) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r1, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000001300)="e846ab8e", 0x4}, 0x1, 0x0, 0x0, 0x80}, 0x14000000) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) (async) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="034888a801000000000014"], 0xfdef) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0xb8}}, 0x0) 2.450502915s ago: executing program 3 (id=645): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)}, &(0x7f0000000180)=0x10) r2 = socket(0x28, 0x5, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f00000002c0)) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100000000000000000000000002000000000400000000000000000200000028000480240001800b000100736f636b6574000014000280080002400000000b08000140010900010073797a30000000000900020073797a32e2ffffff14000000110001000000000000ffffffdf00000a00000000645754a374ac2a108624b2492eabf8275508e5aa56"], 0x7c}}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="500000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100030000000c0002001c0000000f49000008000500", @ANYRES32=r7], 0x50}}, 0xc0) r8 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_JOIN_FILTERS(r8, 0x65, 0x2, 0x0, &(0x7f0000000000)=0x45) r9 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120c000200040001400400446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={r5, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xd4}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r1, @in={{0x2, 0x4e23, @remote}}, 0x0, 0x7ffe}, 0x90) 2.3539162s ago: executing program 0 (id=646): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x16, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2}, {}, {}, [@func, @cb_func={0x18, 0x9, 0x4, 0x0, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @jmp={0x5, 0x0, 0x6, 0x0, 0x9, 0x30, 0xfffffffffffffff0}, @cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffffc}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendto(r1, 0x0, 0x0, 0x2, 0x0, 0x0) 2.317043001s ago: executing program 1 (id=647): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) writev(r0, &(0x7f00000035c0)=[{&(0x7f0000000000)="9c7a720a9272a1992e7316d2c61f3242bc7f646d6800fefcd17813229d219e0f6a23e3df0abf76acf6529d8a1b57ee", 0x2f}, {&(0x7f00000002c0)="128d7d0202e4a98a32b1b5c2bb4700"/30, 0x1e}, {&(0x7f0000000140)="c738875d6dbccfbb5b84dceac293284d7939743415644dd69472529b94dbc72a5d877048f4753551a8ff02a383e9a3f51c9e75", 0x33}, {&(0x7f0000000180)="11d08f6198a31f7f556d", 0xa}, {&(0x7f0000001480)="85415be1178d80819dff9022b53f2ca69d49e188259709244ffff2e8edcd2491ee40eb1e8edd15e681944efb98f33a36bad2bd475bb5263ee48a3c1c053bd9baf28d0c806d63ec2de179415042aa37f608419a3bd03f098fcd0f36bbc4112a2d9b6ed8dee9cf0c3eb261b2849d1de47fdb89949ad76244f20fa7654710a4a778aa5abf4fe480289d41fffaa719610cab9ba9ea672f86d2bc4066c01c411a73b3f2e11cdec1f253bd2e4e264c500149eef627ff2d9b5beaecf416", 0xba}, {&(0x7f0000001540)="b732225e00000000111ff7a80ca7c31e8fc164eece366ad5300fc9f9bbbe4717da5dba2fe6682a9e9f2100e2080427c17a165fc22d724ed9e8435b0a0b9e7b4663f57c8aa6afb532cf6d256d50525c54942a3deadaa488ba23b58ca6fc78c59a92fe7e227550914dbbcd3fda04dbd5b64109006304048bb2a00bb884bc01e97c15f5f668a18e3930438de505800c45dd914f3ca53f3200"/166, 0xa6}, {&(0x7f0000000440)="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", 0x1000}, {&(0x7f00000034c0)="ecae4719f498bddd553c5d32b9f2b53ddd0dc6ab6b3e70ba340abcad472be86ca50b8501b67f2ef0c46f4c269ea06a4a2897eaa49d126ffd021aca06ab1ee657105172d54f367067fdc25868a13fc64382dc5c98e95045cfe67511ae9080383e0e9350c984d5f997a3464d45f7c7af49ed27593d35e43ad039511e22fd47ceda3640bb5af8996fdd581de83b219ba14a0a2684c1a4b27fd1781062df51cfbf6dcfaafae4fb702b3bb8538c1690dc6b83827715726702c730b04a", 0xba}, {&(0x7f0000000380)="14092927a8f40898758b530300cbf85f469751c9327b94acc00bdac7644dbf42e15fc1c42c035253497ee096fe1faae33b47639d117bc8e2f01155019100fb5c37fc447ce506c13d6971d6be3b0a9c10d4b15697e91929a105780577c83538ed690b0f2d75b32c0cb9682206440d2e7044d4ffb00a13d1dbbd2ccc93e2593ce82dd6f02c4428c8083153b61ec31abb0668ce03169a29f7c8ac93b9", 0x9b}], 0x9) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000040)=0x6, &(0x7f0000000300)=0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000024c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5c00000002060500000000000000000000000000050004000000000059fe020073797a30000000000c0007800800130000000000050005000a000000050005000700000080a10300686173683a69702c706f72742c6e657400000000"], 0x5c}, 0x1, 0x0, 0x0, 0x5}, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(r1, &(0x7f00000016c0)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001680)={&(0x7f0000001600)={0x68, 0x1, 0x9, 0x3, 0x0, 0x0, {0x3}, [@NFCTH_TUPLE={0x40, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x2}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x8000) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r2, &(0x7f0000000200)={0x23, 0x1, 0xac, 0x1}, 0x10) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r3, &(0x7f0000000300)={0x23, 0x1, 0xac, 0x1}, 0x10) 2.041637954s ago: executing program 0 (id=649): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a0001"], 0x64}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000580)={0xe0, r2, 0x4, 0x0, 0x0, {{0x15}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x4}, @NL80211_ATTR_TID_CONFIG={0xb4, 0x11d, 0x0, 0x1, [{0xb0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2b}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa3}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x9c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x68, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x48, 0x16, 0x48, 0x60, 0x3, 0xb, 0x16]}, @NL80211_TXRATE_HT={0x37, 0x2, [{0x5, 0x8}, {0x1, 0x2}, {0x4, 0xa}, {0x5, 0x6}, {0x0, 0x5}, {0x3, 0x4}, {0x7, 0x6}, {0x6, 0x8}, {0x7, 0x1}, {0x7, 0x6}, {0x5, 0x8}, {0x3, 0x4}, {0x4}, {0x4}, {0x1, 0x6}, {0x3, 0x2}, {0x6, 0xa}, {0x3}, {0x6, 0x1}, {0x7, 0x4}, {0x3, 0x1}, {0x0, 0x8}, {0x4}, {0x7, 0x7}, {0x6, 0x4}, {0x4, 0x2}, {0x6, 0x2}, {0x1, 0x5}, {0x2, 0x4}, {0x2, 0x2}, {0x0, 0x7}, {0x4, 0x9}, {0x3, 0x3}, {0x3, 0x6}, {0x3, 0x6}, {0x3, 0x2}, {0x7, 0x3}, {0x5, 0x2}, {0x0, 0x1}, {0x1, 0x7}, {0x6, 0x6}, {0x0, 0x9}, {0x7, 0x6}, {0x1, 0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0xa}, {0x6}, {0x1, 0xa}, {0x0, 0xa}, {0x7, 0x8}]}, @NL80211_TXRATE_HT={0x6, 0x2, [{0x5, 0x3}, {0x1, 0x3}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x251, 0x7, 0xe893, 0x5, 0x2, 0x0, 0x8, 0x8]}}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x5, 0xf, 0x8, 0x7a, 0x0, 0x358, 0x2]}}]}]}]}]}]}, 0x110}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c409743fc575c847c000000", @ANYRES16=r4, @ANYBLOB="2000feffffff000000003900000008000300", @ANYRES32=r5, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4004080}, 0x1) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x2, 0x4, 0x4, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x6, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r6, @ANYBLOB="000000000000000073000c000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="50000100", @ANYRES16=r2, @ANYBLOB="080027bd7000ffdbdf255e00000008000300", @ANYRES32=r5, @ANYBLOB="0c009900020000007f0000000800a0007b2e00000800a000a4fa0000050018011300000008002700000000000500180136000000"], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x20000840) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r7, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, 0x140f, 0x100, 0x70bd28, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x5) 2.040516935s ago: executing program 3 (id=650): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000000760009ee"], 0x24}, 0x1, 0x5502000000000000}, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x38, r2, 0x1, 0x70bd2e, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x3}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x9}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x4008000) 1.865332836s ago: executing program 1 (id=651): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000180)={0x1d, r1}, 0x10) (async) sendmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@can={{0x2, 0x0, 0x1}, 0x8, 0x1, 0x0, 0x0, "00000300"}, 0x10}, 0x1, 0x0, 0x0, 0x20048010}, 0xd209f6d814827b13) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000000000000000000000000000079122800000000009500"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r6, 0x6, 0x3, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r7, 0x0) (async) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x12, r7, 0xd1383000) ioctl$FS_IOC_RESVSP(r7, 0x40305829, &(0x7f0000000040)={0x1100, 0x2, 0x8, 0x10003}) (async) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000300)={0xffffff81, 0x0}, 0x8) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={0xffffffffffffffff, 0x6, 0x10}, 0xc) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r13 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r13, &(0x7f0000003500)=[{{&(0x7f0000000140)={0xa, 0x0, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4}, 0x1c, &(0x7f00000005c0)=[{&(0x7f0000000240)="81", 0x1}], 0x1}}, {{&(0x7f0000000080)={0xa, 0x4e22, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000300)="8c", 0x1}], 0x1}}], 0x2, 0x4004851) (async) setsockopt(r13, 0x84, 0x11, &(0x7f0000000040)="020000000980ffff", 0x8) (async, rerun: 64) sendmsg$NL80211_CMD_TDLS_MGMT(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES16=r11, @ANYBLOB="050000000000000000005200000008000300", @ANYRES32=r12, @ANYBLOB="05008800030000000600480001000000050089000000000004002a00"], 0x38}}, 0x0) (rerun: 64) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8004}, 0x0) (async) r14 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$unix(r14, &(0x7f0000000100)=@abs={0x27, 0x0, 0x4e23}, 0x6e) (async) r15 = bpf$MAP_CREATE(0x0, &(0x7f00000014c0)=@base={0xa, 0x4, 0x4, 0x7, 0x0, 0x1, 0xe92}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r15}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xc3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x20, 0x14, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4}, [@jmp={0x5, 0x1, 0xb, 0xa, 0x7, 0x40, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x1}, @printk={@lx}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x1}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0xf}]}, &(0x7f00000000c0)='GPL\x00', 0x2, 0xa7, &(0x7f0000000200)=""/167, 0x40f00, 0xa, '\x00', r5, @netfilter=0x2d, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0xa, 0x4}, 0x8, 0x10, 0x0, 0x0, r8, r2, 0x0, &(0x7f0000000380)=[r9, 0xffffffffffffffff, r15], 0x0, 0x10, 0x7}, 0x94) (rerun: 32) 1.753861802s ago: executing program 3 (id=653): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x18, 0x3f, 0x107, 0x70bd2b, 0x0, {0x4, 0x7c}, [@nested={0x4, 0x2fc}]}, 0x18}, 0x1, 0x0, 0x0, 0xc000}, 0x4048895) bpf$BPF_LINK_CREATE_XDP(0x25, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x25, 0x12, @val=@tcx}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x13, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 1.75299091s ago: executing program 0 (id=654): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r1, &(0x7f0000000140)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x6}, 0xe) getsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0x4, 0x0, &(0x7f00000000c0)) sendmsg$nl_xfrm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000a40)=@allocspi={0x158, 0x16, 0x1, 0x0, 0x0, {{{@in=@loopback, @in6=@private2}, {@in6=@remote, 0x0, 0x33}, @in=@local, {}, {}, {}, 0x400}, 0x6, 0x5dfe}, [@replay_thresh={0x8}, @tmpl={0x44, 0x5, [{{@in=@private}, 0x0, @in6=@rand_addr=' \x01\x00'}]}, @srcaddr={0x14, 0xd, @in=@multicast1}]}, 0x158}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) bind$bt_l2cap(r1, &(0x7f0000000140)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x6}, 0xe) (async) getsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0x4, 0x0, &(0x7f00000000c0)) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000a40)=@allocspi={0x158, 0x16, 0x1, 0x0, 0x0, {{{@in=@loopback, @in6=@private2}, {@in6=@remote, 0x0, 0x33}, @in=@local, {}, {}, {}, 0x400}, 0x6, 0x5dfe}, [@replay_thresh={0x8}, @tmpl={0x44, 0x5, [{{@in=@private}, 0x0, @in6=@rand_addr=' \x01\x00'}]}, @srcaddr={0x14, 0xd, @in=@multicast1}]}, 0x158}}, 0x0) (async) 1.591739727s ago: executing program 4 (id=655): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711205000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f00000015c0)={{r0, &(0x7f0000000000)='[(\x89\x00', 0x480001, &(0x7f0000000040)={@align=0x7d, {0x23b6, 0x4e4, 0xff97ee2, 0x9}}, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x9}, {[0x5, 0xf, 0x4, 0x5bd]}, 0x1, 0x1000, &(0x7f00000005c0)=""/4096}) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000001640)) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB='D\x00'/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028005000e0040"], 0x44}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711205000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f00000015c0)={{r0, &(0x7f0000000000)='[(\x89\x00', 0x480001, &(0x7f0000000040)={@align=0x7d, {0x23b6, 0x4e4, 0xff97ee2, 0x9}}, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x9}, {[0x5, 0xf, 0x4, 0x5bd]}, 0x1, 0x1000, &(0x7f00000005c0)=""/4096}) (async) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000001640)) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB='D\x00'/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028005000e0040"], 0x44}}, 0x0) (async) 1.564490807s ago: executing program 2 (id=656): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)={0x24, 0x14, 0x1, 0x0, 0x0, {0x11}, [@INET_DIAG_REQ_BYTECODE={0xd, 0x1, "35becb4662d39f0437"}]}, 0x24}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1f, 0x4, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ac00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) 1.513784646s ago: executing program 3 (id=657): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0xa) (async) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000700)={'ip_vti0\x00', 0x80000000}) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=@newtaction={0x48, 0x30, 0x1, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4, 0x2}, {0xc}, {0xc}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040005}, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0xfffffffd}}, 0x10) bind$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) (async) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) (async) bind$tipc(r5, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x0, 0x4}}, 0x10) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14) sendto$packet(0xffffffffffffffff, &(0x7f0000000300)="fd", 0x1, 0x40008c4, &(0x7f0000000200)={0x11, 0xf8, r6, 0x1, 0x8, 0x6, @random="156f5faf7478"}, 0x14) (async) sendmsg$nl_route_sched_retired(r3, &(0x7f0000000fc0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000f80)={&(0x7f0000000a00)=@newtclass={0x53c, 0x28, 0x2, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x6, 0x8}, {0x2, 0xc}, {0x6, 0x2}}, [@c_cbq={{0x8}, {0x458, 0x2, [@TCA_CBQ_RATE={0x10, 0x5, {0x8, 0x2, 0x800, 0x3, 0x5, 0x6681}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x80, 0x1, 0x7, 0xd, 0x400, 0x1}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x4, 0x5, 0xf4, 0xe, 0x6, 0x4}}, @TCA_CBQ_RTAB={0x404, 0x6, [0x7, 0xfffffffd, 0x16, 0xffffffff, 0xe, 0x1, 0xe8, 0x0, 0xe27b, 0x3, 0x1, 0x3, 0x80000001, 0x3, 0x2, 0x7, 0x400, 0x1, 0x8, 0x2, 0x4, 0x8000, 0x1, 0x2, 0x5d0, 0x7, 0x3, 0x4, 0xf, 0xf, 0x2, 0x0, 0x14e, 0x16, 0x7f, 0x9, 0x66, 0x4, 0x4, 0x9, 0x6, 0x6, 0xfffffff8, 0x9, 0x1, 0x3ff, 0x9, 0x81, 0x2, 0x101, 0x7, 0x8, 0x7, 0x1, 0x7, 0x2, 0x6, 0x3, 0x3, 0x8, 0x81, 0x5, 0x5, 0x0, 0xfffffffe, 0x8000000, 0x8, 0xf, 0x1, 0xfffffff9, 0x45a, 0x3, 0x7fff, 0x147a, 0x3ff, 0x8, 0x8, 0x0, 0x8, 0x4, 0x4, 0xc, 0x7, 0x4, 0x29ec, 0xfffffff7, 0x8, 0x5, 0x2, 0x40, 0x4, 0x8, 0x4, 0x1000, 0x0, 0x4, 0x8001, 0x4, 0x0, 0x7d8, 0x2, 0x0, 0x80, 0xba7f, 0xffff, 0x2, 0xf, 0x7, 0x0, 0x4, 0x5, 0xa5, 0x2000, 0x9bfd, 0x5, 0x40, 0x5, 0x9, 0x7, 0x5, 0xc0, 0xffffffff, 0x40, 0x9, 0x4, 0x10, 0x800, 0x6, 0x1ff, 0x3, 0x4, 0x400, 0x670183a7, 0x1, 0x5, 0x3, 0x200, 0x35, 0xd1ab, 0x7, 0xffffffff, 0x4c2, 0x3ff, 0x7, 0x8, 0x7, 0x1, 0x5, 0x8001, 0x0, 0x9, 0x7f, 0x44b186c4, 0xf, 0xec3, 0x5, 0x424b, 0x400, 0xe, 0x9, 0x1, 0x3ff, 0x4, 0x4, 0x3, 0x2, 0x0, 0x4, 0xfffffffc, 0x9, 0x9, 0x80000000, 0x2, 0x1, 0x0, 0x4, 0x80, 0x9, 0xfb43, 0x1, 0x9, 0x2, 0xb, 0xfffffffa, 0xb269, 0xc28, 0x7e, 0x0, 0x4, 0xed, 0x4, 0x669e, 0x9, 0x7, 0x80000000, 0x2, 0x800, 0xfffffff9, 0x5, 0x101, 0x7, 0x82, 0x3fe, 0x3, 0x4800000, 0x0, 0x9, 0x3, 0x9, 0x2, 0xff, 0x2, 0xaa2f, 0xfa, 0x3a72, 0x5, 0xd, 0x7fffffff, 0x3, 0x9, 0x8, 0xb2, 0x8c2, 0x2, 0x40, 0x770, 0xd, 0x6, 0x0, 0x9, 0xffff8001, 0x9, 0x9, 0x9065, 0x1, 0x0, 0x7, 0x9a0, 0x9, 0x9, 0x6, 0x9, 0x5728, 0x4, 0x6, 0xa9, 0x1, 0x9, 0x5, 0x8, 0x4cd8, 0x4, 0x1, 0x2, 0xffff, 0x6]}, @TCA_CBQ_RATE={0x10, 0x5, {0x0, 0x0, 0x7f, 0x5, 0x0, 0xfffff001}}, @TCA_CBQ_RATE={0x10, 0x5, {0x8, 0x0, 0x2, 0x6, 0xfff7, 0x200}}]}}, @c_cbq={{0x8}, {0x84, 0x2, [@TCA_CBQ_RATE={0x10, 0x5, {0xb, 0x1, 0x74a, 0x6, 0xd, 0x2}}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x36, 0x3, 0x1c, 0x5f, 0x0, 0x80, 0x8001}}, @TCA_CBQ_RATE={0x10, 0x5, {0x5, 0x0, 0x47c4, 0x9, 0x81, 0x9}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0x10, 0xaedd6a9443754faa}, 0x9, 0x4}}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x3d, 0x2, 0x8, 0x6, 0x9, 0x6, 0x1, 0x8}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0xfff6, 0xc}, 0xffffff00, 0x2}}, @TCA_CBQ_RATE={0x10, 0x5, {0xc, 0x1, 0x7f, 0x6, 0xffff, 0x9}}]}}, @c_cbq={{0x8}, {0x24, 0x2, [@TCA_CBQ_WRROPT={0x10, 0x2, {0x1, 0x8, 0x7, 0xc5, 0x4, 0x72f08cc0}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0xb, 0x6}, 0xde, 0x5}}]}}]}, 0x53c}, 0x1, 0x0, 0x0, 0x40050}, 0x40) (async) bind$tipc(r4, 0x0, 0x0) (async) recvfrom$rxrpc(r2, &(0x7f00000001c0)=""/109, 0x6d, 0x2000, &(0x7f0000000280)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x24) r7 = epoll_create1(0x0) (async) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x9, 0x3, 0x290, 0x0, 0xffffffff, 0xffffffff, 0x100, 0xffffffff, 0x1f8, 0xffffffff, 0xffffffff, 0x1f8, 0xffffffff, 0x3, &(0x7f0000000040), {[{{@ip={@broadcast, @rand_addr=0x64010101, 0xffffff00, 0xffffffff, '\x00', 'wg2\x00', {0xff}, {}, 0x11, 0x0, 0xc}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@addrtype={{0x30}, {0x74a, 0x414, 0x0, 0x5}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x3, [0x5, 0x5, 0x8, 0x0, 0x2, 0x4], 0x1, 0x6}, {0x4, [0x1, 0x4, 0x3, 0x3, 0x3], 0x3, 0x2}}}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}, 0x9d36, 0xe, [0x17, 0x3d, 0x21, 0x3a, 0x10, 0xf, 0x24, 0x27, 0x2b, 0x38, 0x1, 0x22, 0x1a, 0x3d, 0x19, 0x17], 0x2, 0xffffffff, 0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r7, &(0x7f0000000000)={0xa0000001}) ppoll(&(0x7f0000000980)=[{r9, 0x6281}], 0x1, 0x0, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000640)=ANY=[@ANYBLOB="9d7850ac8abe00000000000088a810008100300008060335000906050003aaaaaaaaaaaaf34c467377ffffffffae713cb75a3f8c8eab2eea5c1abda0a739"], &(0x7f0000000680)={0x1, 0x4, [0xb3b, 0xe25, 0x5f9, 0xb2c]}) (async) setsockopt$inet_msfilter(r1, 0x0, 0x24, 0x0, 0x10) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000600)={0x8}) (async) r10 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$SO_TIMESTAMP(r10, 0x1, 0x1c, 0x0, &(0x7f0000000280)) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge0\x00'}) 1.511860028s ago: executing program 1 (id=658): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x3ec0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r3 = socket(0x10, 0xa, 0x7fff) getsockopt$PNPIPE_ENCAP(r3, 0x113, 0x1, &(0x7f0000000040), &(0x7f00000001c0)=0x4) (async) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000580)=0x108e75, 0x4) (async) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)={0x118, 0x2d, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x108, 0xf2, 0x0, 0x1, [@typed={0x14, 0x2, 0x0, 0x0, @ipv6=@private0}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast2}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43f9621dc08c029d16080600000000000000f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82"]}]}, 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async) connect$inet6(r2, &(0x7f0000000100)={0xa, 0xfffd, 0x8000000, @loopback, 0x3}, 0x1c) (async) recvmmsg(r4, &(0x7f0000000200), 0x1, 0x2002, 0x0) (async) close(r1) (async) r5 = socket(0x10, 0x3, 0x0) (async, rerun: 64) r6 = socket$inet_sctp(0x2, 0x5, 0x84) (rerun: 64) ioctl$FICLONE(r1, 0x40049409, 0xffffffffffffffff) (async, rerun: 32) setsockopt$EBT_SO_SET_COUNTERS(r6, 0x0, 0x81, &(0x7f0000000080)={'filter\x00', 0x0, 0x0, 0x0, [0x7266da2e, 0xd7, 0x1, 0x9, 0x99, 0x7e26], 0x1, 0x0, 0x0, [{}]}, 0x88) (rerun: 32) r7 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r5, 0x84, 0x7, &(0x7f0000000200)={0x7}, 0x4) (async, rerun: 32) getsockopt$inet_sctp_SCTP_MAXSEG(r7, 0x84, 0xe, &(0x7f00000000c0), &(0x7f0000000100)=0x8) (rerun: 32) r8 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xf}, 0x15, 0x3, 'wlc\x00', 0x23, 0x6, 0x3c}, 0x2c) (async) socket$kcm(0xa, 0x2, 0x0) (async) r9 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r9, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x10000, 0xc, 0x2}}, 0x44) (async) socket$inet_sctp(0x2, 0x1, 0x84) r10 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r10, &(0x7f0000000400)={&(0x7f0000000140)=@in6={0x2, 0x15, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) (async) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[], 0xb0}, 0x1, 0x0, 0x0, 0x4c004}, 0x6a9978bae8e77e97) (async) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000005e"], 0x1c}}, 0x0) 1.511342522s ago: executing program 0 (id=659): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='tasks\x00', 0x2, 0x0) (async) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)=0x0) (async) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000300)={r0, 0x9, 0x0, 0xf30}) openat$cgroup_pressure(r3, &(0x7f0000000340)='cpu.pressure\x00', 0x2, 0x0) (async, rerun: 64) write$cgroup_pid(r1, &(0x7f0000000080)=r2, 0x12) (rerun: 64) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r1, 0xc0385868, &(0x7f0000000200)={r1, &(0x7f0000000100)='{-{\x00', 0x28000, &(0x7f0000000140)={@_ha_fsid={[0x9, 0x7]}, {0x32a, 0x1, 0xe, 0x9}}, 0x6, &(0x7f0000000180), &(0x7f00000001c0)=0x10000}) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r4, &(0x7f0000000500)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0xd0, r5, 0x10, 0x70bd26, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4080}, 0x68000) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x521deb0b}]}]}, @NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}]}], {0x14}}, 0xf0}}, 0x4000081) (async) setsockopt$MRT6_PIM(r4, 0x29, 0xcf, &(0x7f00000002c0)=0x3, 0x4) 1.341980974s ago: executing program 3 (id=660): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000feffffff00000000000004008500000036000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000010400000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r1, 0x6, 0x9, 0xfffffffffffffffd, 0x0) 1.276195168s ago: executing program 1 (id=661): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) writev(r0, &(0x7f00000035c0)=[{&(0x7f0000000000)="9c7a720a9272a1992e7316d2c61f3242bc7f646d6800fefcd17813229d219e0f6a23e3df0abf76acf6529d8a1b57ee", 0x2f}, {&(0x7f00000002c0)="128d7d0202e4a98a32b1b5c2bb4700"/30, 0x1e}, {&(0x7f0000000140)="c738875d6dbccfbb5b84dceac293284d7939743415644dd69472529b94dbc72a5d877048f4753551a8ff02a383e9a3f51c9e75", 0x33}, {&(0x7f0000000180)="11d08f6198a31f7f556d", 0xa}, {&(0x7f0000001480)="85415be1178d80819dff9022b53f2ca69d49e188259709244ffff2e8edcd2491ee40eb1e8edd15e681944efb98f33a36bad2bd475bb5263ee48a3c1c053bd9baf28d0c806d63ec2de179415042aa37f608419a3bd03f098fcd0f36bbc4112a2d9b6ed8dee9cf0c3eb261b2849d1de47fdb89949ad76244f20fa7654710a4a778aa5abf4fe480289d41fffaa719610cab9ba9ea672f86d2bc4066c01c411a73b3f2e11cdec1f253bd2e4e264c500149eef627ff2d9b5beaecf416", 0xba}, {&(0x7f0000001540)="b732225e00000000111ff7a80ca7c31e8fc164eece366ad5300fc9f9bbbe4717da5dba2fe6682a9e9f2100e2080427c17a165fc22d724ed9e8435b0a0b9e7b4663f57c8aa6afb532cf6d256d50525c54942a3deadaa488ba23b58ca6fc78c59a92fe7e227550914dbbcd3fda04dbd5b64109006304048bb2a00bb884bc01e97c15f5f668a18e3930438de505800c45dd914f3ca53f3200"/166, 0xa6}, {&(0x7f0000000440)="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", 0x1000}, {&(0x7f00000034c0)="ecae4719f498bddd553c5d32b9f2b53ddd0dc6ab6b3e70ba340abcad472be86ca50b8501b67f2ef0c46f4c269ea06a4a2897eaa49d126ffd021aca06ab1ee657105172d54f367067fdc25868a13fc64382dc5c98e95045cfe67511ae9080383e0e9350c984d5f997a3464d45f7c7af49ed27593d35e43ad039511e22fd47ceda3640bb5af8996fdd581de83b219ba14a0a2684c1a4b27fd1781062df51cfbf6dcfaafae4fb702b3bb8538c1690dc6b83827715726702c730b04a", 0xba}, {&(0x7f0000000380)="14092927a8f40898758b530300cbf85f469751c9327b94acc00bdac7644dbf42e15fc1c42c035253497ee096fe1faae33b47639d117bc8e2f01155019100fb5c37fc447ce506c13d6971d6be3b0a9c10d4b15697e91929a105780577c83538ed690b0f2d75b32c0cb9682206440d2e7044d4ffb00a13d1dbbd2ccc93e2593ce82dd6f02c4428c8083153b61ec31abb0668ce03169a29f7c8ac93b9", 0x9b}], 0x9) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000040)=0x6, &(0x7f0000000300)=0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000024c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5c00000002060500000000000000000000000000050004000000000059fe020073797a30000000000c0007800800130000000000050005000a000000050005000700000080a10300686173683a69702c706f72742c6e657400000000"], 0x5c}, 0x1, 0x0, 0x0, 0x5}, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(r1, &(0x7f00000016c0)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001680)={&(0x7f0000001600)={0x68, 0x1, 0x9, 0x3, 0x0, 0x0, {0x3}, [@NFCTH_TUPLE={0x40, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x2}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x8000) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r2, &(0x7f0000000200)={0x23, 0x1, 0xac, 0x1}, 0x10) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r3, &(0x7f0000000300)={0x23, 0x1, 0xac, 0x1}, 0x10) 1.20651033s ago: executing program 2 (id=662): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x4008000) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GCALLUSERDATA(r0, 0x89e4, &(0x7f0000000400)={0x4f, "d8caccf4001071d66c155bdd71dc52a9c4b47841a49ba10800122c69bcafaa2abcf78cba7b368261cd17d076acd9901017641abe8e4567f086a593375808de1171cf0e3b925065d214119e421276f0addd81f4987f74a18ff76e563c2b6c9d55ffca4df6280c4059c5c23a440b40937aaa5c066b35150fb074cd4bf934e7ca87"}) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r1, &(0x7f0000000100)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x1c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd}, 0x1c}, 0x1, 0x0, 0x0, 0x8880}, 0x4) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4000) 1.20353106s ago: executing program 4 (id=663): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x4) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000240)={{{@in=@empty, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@private0}}, &(0x7f00000003c0)=0xe8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x86}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_MASK={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "8a"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x10c}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@ipv4={'\x00', '\xff\xff', @remote}, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x4e22, 0xff, 0x4e22, 0x0, 0x0, 0xc0, 0x90, 0x32, r1, r2}, {0x8, 0xffffffffffffff80, 0x10, 0x5, 0x6, 0x0, 0xfff, 0x8}, {0x9, 0x3bd9, 0x7, 0x8}, 0x2, 0x6e6bbf, 0x1, 0x1, 0x0, 0x3}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d4, 0x2a}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3507, 0x4, 0x3, 0x1, 0xffff, 0x7, 0x8}}, 0xe8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendto$inet6(r0, &(0x7f0000000500)="7fdb295978e1e77ddc0949d9e892eaf451713246bc1b4569028d015ffe68918a6228557cc27b3657242eadc765fe442b7c6389e1ba9040914cb88bec70ca996071e036d436f50c89b9bafb8fe194aa2e834f64ade019cd9aef2a8c9fa0b236bcf8358b03c1fae9b0ac6fa8472620255e4c2788adcc", 0x75, 0x20040000, &(0x7f0000000580)={0xa, 0x4e23, 0x2, @rand_addr=' \x01\x00', 0x4}, 0x1c) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a010400000000000000000200000044000480400001800e000100627974656f726465720000002c000280080003400000000008000140000000000800024000000000080004400000000008000540000000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000ac1ae5ec8e21bc86e8fd6a49424a7ecedc82059082ea77fbc1563"], 0x98}}, 0x0) 1.147938252s ago: executing program 0 (id=664): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x24, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x7079, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfa, {0x0, 0x0, 0x0, r3, {0xfff1, 0x6}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x2, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x2004c800) r5 = socket(0x10, 0x3, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x33, 0x10000, 0x2e, 0x100, 0x7, 0x3, 0x0, 0x0, 0x401}}) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) socket$kcm(0x29, 0x5, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x12, 0xa01, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x439, 0x70bd2a, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x3, 0x610c3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_ACTOR_SYS_PRIO={0x6, 0x18, 0x4}, @IFLA_BOND_MODE={0x5, 0x1, 0x2}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) 911.758964ms ago: executing program 2 (id=665): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xffffffffffffff9d, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 750.264054ms ago: executing program 2 (id=666): syz_emit_ethernet(0xfbf, &(0x7f0000003e40)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\v \x00', 0xf89, 0x0, 0x0, @local, @local, {[@routing={0x84}], "223427d5c9a46b9f6be4dc3b0a013589317d2af31ba55431762f462a5abc3f46494ee91bfca594d52f8c3785143e92da5d2d81edc09f68f122fbf741257bf1319408347a17c89212dfe27a0fc65362487e5afe673f0954f60d9d08b61276ce0b3aa520b5f30a9f52c4aa53fc003f8570383ca63530d93b78a7875338b3d7645ef2c24ab05db63cfdcde7b3cac2248c9d1c73d0d4382b3f520ad6e9be698eaa9bf5b939ce09919c9485c4725690ee2483315829a196f85a5ae552ebe19a2d6768ce2a6bf60fbb53104c7919b7cf28fa555fc9460df11e72eddebb2fc4eb6f83b16e0d65307e4210dfc209f0c68df65b57f420fd215546b798af6b6ab7bfb2fe6bd6142f877852717370b1ca39d199c149c3ead97c4e16229ce4c08a111a0fc64651c21e9174dd72442a9ae2a42d9433c7b54c8dd4b59203f9a2e227e9b043eb430e606cf98f3428ac8511948dd553bc0728c0626fbda71bd2a1d734d605e27bdb0be93b7b91284689e31fccb70c15f2c39da9011c84d36fe4b4b36ff26e45a34685fc638dbdaa068a3d3d4f5d44b74afc0fc7956e5fcc3fe405ac6d292d1d90f257f18fe14a3192d28ed369956aa2f91f9fee773cf7fb5d90705347eeadc1af86de78a498fa1a20e5b3f481a0595769654d969299506d8ffbc172a7fb9453a8a3787e80b167936863f2cc16c1d03481bd40e1abcf87a292559771572136932bf30e48174012a1d4d5f138f93140af2ceb9c821c7966ea7592d762975b5b33ef141b6b91eb388c91b924945c3231d0f299adb5a36e0c95a17872e7ebf0bc0e33baf5c46f9e2087b77bad0794d519ce7bc8674a70f3545d020454ded22f164185df3b4f952b132947b75333993fd73a6bac5836dd5720e559bcb82a4926734c5c3b1287c5fec219a99f71eb398430001f007306e9232c269c2886357f75d935e8de054341ac36f1df1fc77fbc347d90660f4d5658cfeb9e289f70968a7c0b38ae34c4bfa46b47964e223ac34f472e3231e8c285add5713592c76c062c3477beb55b279846f04f8d6a5ce2743c6a2020f0c5164953b8dca7e57239dc8a7f507bcf77767ab0b4602437171a09c8e80f5a165c4c37eaae386cfcb927dd1a935fa717fa1608792b34bafbc20cf11a678455894ede62788309ab7a7075535847a2b48260a613e521b01d75648263ad78e6176528dbf3e6c4e4d72066e617be5387183a51dd97d2e846c5d173b51e17a4c8d78a49c914cbe44236c52c78de45b44f9d80bc6f77c75135922a84579bce77baa71311889f5b7b90c5124b8298d5e9c81c442d60df00795854d3213a1ac254c8963c109f68b3ff5451c381f6fb56c116f86b71f988d1e9f732280cbf3d4e9791fefc4bdec5dc293fb77b02d5aab6bd8cd179b7e425126b7f78c0d004bc6470ecc2bbc422bd06a6bd8f717009509e6a88b01347b7a62b9dea6f7a7446a371f422499a6e66eeb6a7b0beb4a86a61f875a9bfe0f5d5f0d0e4c85852afaea97d74ebc80d6491a8a1c998c4b5bc34b3edaeba2df902cd5e14e016720e6c3c8b15287b2471c34251e26dc442720cd5d984e30b110b7370f233f865b9ac129fdf49ff02b303d7d4f91039d3bb58a9d64d7a72d8b8eba6b45a000370d4f0e9c0d411768441372e7112e5d4e7d70a9d6b428b8b85ee6209d6f73e7b024740c052166deeb843e4ab78d1d354d75a5827ff0d49d8964e75785f3594c7299c0917b48f3b2efb81a4c3a7d6e0f1cf50efe0360963c2e3ee390ed2a4c39f42e856eced0f2ee7beacd2ecbece493e911ca0460584323ea6d4a0c00864693c979cae38f0c5841bfaeebf609d1075163c120fea0bd0207d2dd07e5e2e0a5afe3efee0ee6bb9a926a8dba7a27a82c5421a5b20bfb5dbdef532a12435fcd899f15603209831711e0dcfaaf2104b2016f087fce44848c70b65a34b9be83df2064391fc5a8d169dc1943d226e57ab5ba06c656273d4efba73a8a61aae19df4d2445f3ce7e649af1b4ffc86106c9092ddd0aafeb45653d181cb32b06a1dd41573495f15c3b8c0019ba72a2eb163dfcbdbb235322ae27d7116af506f295c2424ab9191aa8ce0e4617b212af21983f8d2b19d7fdeec881f6fa448acc7c3e133b6f281583fad4467c05801e69f6ffc1ae2e1f54655534d884c2f8f60303da33ccbe47a293643edb61c7d9fad4e3e54028bc64be8e5b1da53446869b136660b8e96ff96c48641ece275967b27b291c5c240b3399b5b901b699227735f821938bc88ded45bada2b257b1a4bcab7ed6647f2027e5680c87329e9cfdba6bde2f2a9b676be016001702bebbabb2eae3eba01d6f49ab70245a4c5ef0e136b531e1843487b3f69c5b811217d6d2f5e71b47f40c28117bd09a88bb21887a06e2cc164d4281d0df47cbd5781f1524098d89ccae32f24c5f9d86469106685fdc683ad5e873030b621dc00354e0621106da90aca69bb53848dd57251a45bc1898aca9bc84c9a8d2f8aabeed888560771c8cb03aab02620430fec8e9740880790060ccbffd5b8edaa219ca61587eff1b1b03ae8af53059f121efdec8b3ee8aba06f494a5b4575bc848d5a9773d2346f75811cb82a078fc960c9bd374555d78b1b4ba0b438ef00e8aa75810ca5efc5c70936e2cb0e515912cb7f625a2130a9ad58f29e58ae6eac5c3f15f22f0163ee6dead6947c4390b92c8dfb146fec7bfc0b37e8ff2c9de90c30f2d8b5e334107f9835bc47fbc193c60ebd5ac4e677c7fd5b6261ff96e97c185c726ec02941bc2336946f181fd2aff43f0e95f06105a049fcb8e4e3738407d6356856f533f17fae281a3be9f2050ae3d19d1b8350d424087ac9b7875824a9b7e098775b53d6ec960fc052ecd165d17a7897de75f15316a072bb9ccf6ce1ec085bb5356c271b985a437a32f12308fc927410fd444bcded9859e7b8a3cfaaf29ebfb92cc7cbfad2559bbe4f90e189e8708e93827b221869cc78fa41fd5bcb6577b7dfe4c3927dc25a58aa84419f76e71d1f3c10cbb5e52ab2bebe0d39bdffda0fa1b55fe3a03683f882a82dd58498d62b101acd710fd436aa7409fe3cf5352dffb399d560323e14d564bdb3121b89c1f43fc9a892b799cd32f7ce2ededb868920b4547735ef0bf3e148251a4f65dddb7f96b2f33734522a8cffdc51520ac98926b3406e96618cf15a042a67239e755afc70ec6a9c99f8e08ec2946e5901364d85223a63d49572519137d93b6b0798e72acf9da120e706ee73367dec1450a68def886c149bcd734469e10b933899501011cd548e99d638821d5709fde050ab382d4896ecfd7999d40ea9c690c26d396545224c8f9e19705593df2688eb592e2476a0193f7054ab6f703d41c545a80bf285bbc7cc735bd306c9ea5eb64f40752fd4c741d9b6e03cd41b636ef8f5e810047a21c0b24c6fde1f2e98f2f27730c90d93af9e7564e4e209a61ff626b666fcc4f75f7d560da688169ff0af5e674a0b89a99fb54bb438a65f953c2db0faec2ce09cec33b6d25620b5a0393ac473fed48a38beaca5223997419876d571ce969b83b5b3ae54de83dd89fd92ed2a93c087828bef49a24ed1a97778c47fdc691a94fd5b437dfe494b5c6fadf499d9d15583b0439d3d5ecb61a32a2508a6960be6009accfd1d5d75a16dbc4121c6ef07bda12646792449c18a56e7aa3893f3f0e55a8e09ca64193dd29ea24ed8614ee8e717f046dd99a8e3750506655331125a502aa89c0d7e8e30c36a4be22cd911322695144d3bf034f38ef32d49431d50da583d08a3e4c5862483cdd52d031b12c89fdaafc3334e877e464134baece883d301193a9c27311a987d4dae82a061f48182cc747cd64441e88b68e26e4975f0fdde3129a9e6af80009962581d5349676df9c73b81514b175709d9193749660f480bd4009b528c1db4f76f42b6a175126603c39a374e890f871c97b2eebb4500451d827cc15497dc5ae89edc6f47f25db7efa4b4b2afbbb2ee543e3db8d20fe93faf300247f59075921e8b2f2a025af8a1d46f274e0c6cb4be0293c7c16c88e98d7d189e9733e4c0e3b96be4aa3fa6ecf42732e0b1432d38aeaf2330d92713cd5580ce42bfe47fb98fea64783de23f456300dd193008211a5ba408d32dedbf12aa8237a6e1a2c9890a2c1011855241fea186906a5139d1c300be57dc7ff493de80010520d10fc3eda0ee9cd413e075d3dc02258fdab567a16e43edbeecc366a69d8d75512f43a2b79cbb9132cdcd00c531730d05f1eabf66613d6e7ebb8c4c3f4f7efd415d41049786352808b22a3bde40121968af39c8f00296001662adc72b7963c8bafab4a496b50f3237a29d19ad4a51a62b1c77a04c14004734189cf7ec49e3d041a1e5658d080f09df77f39782e7133968c1f39ab3ae2a5f24a60073288f3c5825dafd614a379b8b905aaf961caa14ffa38de0d632918d31e4a9291b0f0789248e232e4276840a1ed0257300e522d83111dffd424b1b33148981e3794b2b649ba9174e6697bcc96049f4f3dcc7cf4ca97e2006ec8a146014bb49184632e4fb159a34b6530e959e60a6b4e0427cc697f14cfe6bb7a662a6f5012744f3cf2307abc19c58449864d98fcfebc5d598cd32a1c38c207896468fe8da75eb1edb1d6e7cb1eab671e4e92f139c81d79f15df2a2dc075acc982dec769e2f49aad0fdf594cb590e054616e4f4582b6c4a149ae45d844903ef68d211df2a180178e178b7c7a5012ccf8a1e677586588620365e6111f5192ecfdbd97e2284128de02e08ebc13d4bb4d114faa1e6c16c51c12da2c52d68f73640ce866ce4e794b9fafdc392c91c1f824bc301b3069a02b9c86d2ffac3ed63ddee130cbc248d6a3345d3f9553db78077072d569a6633f8bdbdb1a209a8be9b6830225994f9021b57ddd6a44e8ea40b205c6cf437f45bffaef053a5916dcc6de62ee02bdb8ce3acec8ad97fc95dab1307d254790c71f32e4678957cf0121dccabe73a03c6cacbcbdaad8801b04d9836555a982c357a06e2db7e9bf62aed8cdebbb7a71a2410b929015b61f16e54bffd038996a717b9c7cc3696d8a1205e8266bf782c3a45b0e31461d6a3ed62396088833f69248b24fbf6f81dcc08b98826c3bd2325ade54f614f2d4a153e3e3527d93978483f2bfeada6b64bc43f2a725c30e843d13e6ab34cfc38d488b3ef50cd04318fac1f89905f017644cfa2de058ad399871d1316264813c2289d0b6cfeddfbca36ce93fd4a1bfc93bb74453cfbb9c6ca22320ffc9cb0a3fff046a5678c066e617cd3ac024dfead04b99877f448b78208938585c7563efe815ff0cc47da5fff521d9730ddc89f4aeceadd06f2ea6b9ae72c9407aa550a0155db3b4bc6aaa382a30552f699cb6a1af9972a8ccc483f98952dfbde3d712ea8673eacdbb77490d833fc90f0f02e7c073d2917db70831496a88defc10667dc4c1b7399191bdc7857eb090e79c332bf9f71bb5377178e6232800c93d22318dc5ab8d5dfa2f074a6c23acb61c89f2f078ec91e9817e11a4c8295c19634b5ca2df741cc19d3aa2572e415c6473342f06c88a6d78ea1fa21c08a049bbf95c725ce10da88066152526f85592fe9882b781a3eea61b3924e8471dcd"}}}}}, 0x0) 748.087182ms ago: executing program 1 (id=667): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x128, r0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x28, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="a420e0b525ede9b2c6fcf4cfa5c0fa2e505d912e76249d21911abb0ac3137e79"}]}, @NL80211_ATTR_REKEY_DATA={0x2c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "737a9fa47dee7972"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x2}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="1dd9399004ed9e685b2b36d74513f738"}]}, @NL80211_ATTR_REKEY_DATA={0x58, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="15ed247ba0e01849ee54a3596544729c"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x9}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="9f942ea29b815754b4588fc6e2b512d6"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="ec33d498a322cd2bff841c89d3f49b7cccd1b062a275455d5cd4c5d6e4f16425"}]}, @NL80211_ATTR_REKEY_DATA={0x60, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="393accadd79edceeca2cbe3bbbb48c0939e5d504c744444d9b9ea5d20842da95"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x200}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="41ac4f075e29ffb05b6ce3046485c2292a5b1137ba02d1b9"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "4fd74611210cade8"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x3}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x8080}, 0xc810) r2 = socket(0xa, 0x5, 0xffff) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r3, 0x400, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x1800}, 0x4001) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r2, 0x80047210, &(0x7f00000003c0)) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x20, &(0x7f0000000400)=0x4000, 0x4) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), r2) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, r4, 0x2, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x88c5}, 0x40004080) ioctl$INCFS_IOC_FILL_BLOCKS(r2, 0x80106720, &(0x7f0000001c00)={0xa, &(0x7f0000001ac0)=[{0x1, 0xc9, &(0x7f0000000580)="84a6295c0f0276fa5b011860a92c44d049c9d76a6ccb80a7dc94ab1ba8810dddbb071903721dcb95e269ee1a6f07098bb59d8db71e151e7f840162362a24b8f155754480de3df8b3ae41fde0dca0652134e87a3740f31ec298bf53649fa2942eb0e65b4e051c66a2886328362e1cb0156515f26ed129d85e3a1ab45534438740b00ba39faac29f225d33da92377e6e1857eecadbd6283775e07ae04e4c016b977047ed90606ed194a59e964c846816e0d182bfcd33a4a34c817fd2d5f779fd7a588f4f947c808dc072", 0x1, 0x1}, {0x1000, 0x41, &(0x7f0000000680)="361324cae628698a0b00d5fbc390891e0e9a669ada03d21a1fc2565ed5c46215fe21ba6ca37b759f94497c1d3ea9d0665b70ddf9af96d0c48a1fbb7aa95e3c0751"}, {0x1, 0x38, &(0x7f0000000700)="a5e3d6ab52c751bbca685720561b6c297b0f261cf06c7175e0ef7d6c6ae8b150eb520b475e2857481b0f7a3dd11ee5eb0fac120688260cfc", 0x1, 0x1}, {0x6, 0x67, &(0x7f0000000740)="fd348b30e838d39cd32d70448b81f011efbee3f0301dc0066680c58eac08778d6af4741fd00652717e9c0159b53568191de8d510781079022fecbf1282a237ebae2f30bd72f2481e747187c5c28919db0787119882eadf4c1e734950b2f4f430d4be71548695d2"}, {0x10000, 0x1000, &(0x7f00000007c0)="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", 0x1}, {0x6, 0x37, &(0x7f00000017c0)="43aed17f95b32468fe0b1320dbf3f25f4ceae4a18cc3aab729879b97b9e91778cb0df33cae2c9d0e9e5ec6897fb70820376d7e6ae93ef2", 0x1, 0x1}, {0x4, 0x20, &(0x7f0000001800)="482df1b83c0b450b4def11b2dc6f04b3c2165a94fc0a25fcb19d4fb3cf1d5d31", 0x1, 0x1}, {0x0, 0xed, &(0x7f0000001840)="24befa7533f4ee2360aa0d9a0f15e1722c517bb074222514a3372a9357c7172d6169e17cfefef5fa242782b3dcbbcc9e6bb828d596ecbe491661d53c035f9015d451660e52442dcd536059a61fb19a08e96086d8f085d7aa389bb80ebd5bff2588b28399e185e93347a2a23573d1fbbca20d2c947d2996a8842a0a3c6ff6fbbd601bb48fba40b5216ad33b078d38b5a902c18fff7557f5f9fa8be7302a7578af03fbb9a553c915f6a9a8ce235e52e3db9830f4bca3ad1bfe598fbba0e82cb3a86377cb5cd33e59a02ddc78a9c61e5bff2b32a544fb168c37a8fff7baad009602c69ea902d5a2cd8f19f26414bf", 0x0, 0x1}, {0x7fff, 0xfd, &(0x7f0000001940)="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", 0x0, 0x1}, {0x10001, 0x55, &(0x7f0000001a40)="8c60b4172063e54930eeba2db22582d9db38e0637cf741c2a293f9114b2c29d29b8b2822a3ced693b01f0cf9df28b475d22bb902b4633bce1370c531333a377669854e638aaad4a8f98d001767f3c153d97e79382a"}]}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000001d40)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001d00)={&(0x7f0000001c80)={0x74, r0, 0xc, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'bridge_slave_0\x00'}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "ed42a9152e4d01ab92da86fc5519ebbf2226dfcb5651379c"}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x74}, 0x1, 0x0, 0x0, 0x20048801}, 0x20000000) ioctl$F2FS_IOC_GET_PIN_FILE(r2, 0x8004f50e, &(0x7f0000001d80)) ioctl$OCFS2_IOC_MOVE_EXT(0xffffffffffffffff, 0x40406f06, &(0x7f0000001dc0)={0x6, 0x6, 0x9, 0x1, 0x1}) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000001e40), r2) sendmsg$TIPC_CMD_RESET_LINK_STATS(r2, &(0x7f0000001f00)={&(0x7f0000001e00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001e80)={0x30, r5, 0x0, 0x70bd29, 0x25dfdbfb, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x80000}, 0x50) sendmsg$NL80211_CMD_GET_POWER_SAVE(r2, &(0x7f0000002000)={&(0x7f0000001f40), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x20, r0, 0x800, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xa910, 0xc}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x20008011) getsockname$packet(r2, &(0x7f0000002080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000020c0)=0x14) sendmsg$ETHTOOL_MSG_EEE_SET(r2, &(0x7f00000025c0)={&(0x7f0000002040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002580)={&(0x7f0000002100)={0x464, r3, 0x20, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_EEE_MODES_OURS={0x3fc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x40, 0x3, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x200}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xeca1}, @ETHTOOL_A_BITSET_BITS={0x108, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'TIPC\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'IPVS\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xf}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, 'broadcast-link\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '}\'/\xab\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x45}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xb4b0}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, 'broadcast-link\x00'}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '*@\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1f}]}]}, @ETHTOOL_A_BITSET_VALUE={0x21, 0x4, "063efa8baa507d18465b51475119609f8f0cf9507b7a3c1271335f47bf"}, @ETHTOOL_A_BITSET_VALUE={0x101, 0x4, "91b794c9645ea76336979487304fcd0b635f705ef0398c8502724f2dfe177337b25ff9deb12f362fe68f229ef94f20b5aea15b961414d0423065ad65d7f4cc596c65523286a2eeb1727afd0aebc58f7da23e3df5eee5c73111e600ed64351645cbc9b0181d87dd637d9207d3578b8fdc172695a8aaa08311324045b83bd1f29e60750e3ef633667fa85c91ea53e1879c1eb2b643f78b6336a57f8da2e48ba0cb711ba8ecc29057848099c8066323c86bc5b34f46646e4929a2ddf5a5bb0065416592a38c90e02f117477d12a849eececfa6eef5c38d6b42d420037e25425d317f0af5307fbbd70d550470fe1a0bfe7aa43a8f713dedf004b53912a8d6e"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xbb, 0x5, "cd7aef7d0b99544ad15f448cee4c42f736344f0fb26f8ede51918dba73df2998b827a15791dba059a50eac13b53a789af932fccdb458f2772d9272202aa9d23e5c939e1640c0b01d5538556ffd2fd6208517e89932d6a90b45a1abc894b74a5f86af435e6b02c469407bedd18f9625dec4ed9bf8241ad4fce89655c100beebcd9e1fc578c5de74f562b9752dcd7d5c639a019b98dd1350dd402645a7572f263be999a994b50f3d6143e23181d126d91d98aea9e400c2c1"}, @ETHTOOL_A_BITSET_MASK={0xc0, 0x5, "0f940b7a34a83a8fc244fed7939a19c81c8b3560d93bb4c6e493969b60b9e62ae42cbcedda5f7101704463b46f59cc6d30093915789df826059f63fac328789e3e570fb85bbad4e69f0b31f552da69a796c4f407b05842bb4a52e35d6c69c7cd0ddce0715e5ea6d5203cdfa13ce7f48f43550a6ad52edf511c85f1d7be540764fc8c91fb99c109c705d46db43f04a67f7268bd70b6026e14d27745e7ba97fcd234c76aa7b666b6a496361a6a35db384e962a9a8c85c7b6951d62be48"}]}, @ETHTOOL_A_EEE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_EEE_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}, @ETHTOOL_A_EEE_ENABLED={0x5}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x4}]}, 0x464}, 0x1, 0x0, 0x0, 0x1}, 0x40000) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000002640), r2) sendmsg$TIPC_NL_NET_GET(r2, &(0x7f0000002740)={&(0x7f0000002600)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002700)={&(0x7f0000002680)={0x4c, r7, 0xc00, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1e4f0000}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xf1}]}, @TIPC_NLA_NODE={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000}, 0x814) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000027c0), r2) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000002900)={&(0x7f0000002780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000028c0)={&(0x7f0000002800)={0xb0, r8, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4000804}, 0x4000844) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000002940)=0x7fff, 0x4) getsockopt$MRT6(r2, 0x29, 0xcf, &(0x7f0000002980), &(0x7f00000029c0)=0x4) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002a00)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x1ff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x2}, 0x50) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r9, 0xf504, 0x0) r10 = openat$cgroup_ro(r2, &(0x7f0000002a80)='memory.numa_stat\x00', 0x0, 0x0) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000002b00), r10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r10, &(0x7f0000002c00)={&(0x7f0000002ac0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002bc0)={&(0x7f0000002b40)={0x48, r11, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0xd}, {0x5}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 745.780609ms ago: executing program 4 (id=668): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="140100002b0001000000000000000000030100800c000200fdff000000000000140001000100000000000000000000000000000150bb2d6f67d29d6fabadb107d0de2a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae615b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767fc734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f00"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000200)={0x0, 0x4, 0x8, 0x6, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x10}, 0xe) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000100)={r3, 0x8000}, 0x8) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xb, 0x6}, {0xa, 0xa}, {0xfff3, 0x4}}}, 0x24}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000040)={@multicast2, @initdev, 0x0}, &(0x7f00000000c0)=0xc) r6 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/mnt\x00') sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@setlink={0x3c, 0x13, 0x100, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, 0x5082, 0x8000}, [@IFLA_EVENT={0x8, 0x2c, 0x7}, @IFLA_NET_NS_FD={0x8, 0x1c, r6}, @IFLA_ADDRESS={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004040}, 0x0) 581.54339ms ago: executing program 2 (id=669): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), 0xffffffffffffffff) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newsa={0x144, 0x10, 0x1, 0x1, 0x25dfdbfd, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@multicast2, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x80, 0x87}, {@in6=@loopback, 0x4d4, 0x6c}, @in6=@rand_addr=' \x01\x00', {0x2, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8, 0x2}, {0xffffffffffffffff, 0x2a, 0x1f, 0x7b8}, {0x2, 0xfffffffc, 0xfffffbbc}, 0x70bd2a, 0x0, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x35075b, 0x8}}]}, 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x22, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffa}, {}, 0x3, 0x0, 0x1}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x39}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xfffffffe, 0xfffffffe}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REQ_SET_REG(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000ec0)={0x24, r0, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}]}, 0x24}}, 0x0) r4 = accept$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e) getsockopt$SO_COOKIE(r4, 0x1, 0x39, &(0x7f00000000c0), &(0x7f0000000100)=0x8) 201.895841ms ago: executing program 3 (id=670): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xe8001, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a28000000000a010200000000000000000200000908000240000000030900010073797a300000000098000000160a030000000000000000000200000a6c000380180003801400010064756d6d7930000000000000000000000800014000000000400003801400010073797a6b616c6c65723100000000000014000100697036677265746170edffadf3000000140001006970366772657461703000000000000008000240000000020900020073797a31000000000900010073797a300000000014000000110001"], 0xe8}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r2, 0x29, 0x1a, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000100001000000800000000101000000005e1affd5020000000900010073797a100000000008000240000000032c000000030a01030000e6ff00000001020000000900010073797a30000000000900030073797a32000000001400000011000100"/111], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a7c000000060a0b04000000000000000002000000500004804c0001800a000100696e6e65720000003c00028008000240000000840800034000000007080004400002000f0800014000000000180005800e0001007d6d6d656469617465000000040002800900010073797a30000000000900020073797a32"], 0xa4}}, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000140)=@newtaction={0x68, 0x30, 0x9, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x1}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0x3b}}}}]}]}, 0x68}}, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r4, 0x84, 0x74, &(0x7f0000000080)=""/51, &(0x7f0000000140)=0x33) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@getchain={0x24, 0x66, 0x0, 0x3, 0x2000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0x0, 0xffff}}}, 0x86}}, 0x400c0) getsockname$packet(r6, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000700)=0x14) r7 = socket$inet6(0xa, 0x5, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x1500, &(0x7f0000000140)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000600014002020a600e41b0000900ac00060211000000120012000a00ff110048035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r7, 0x84, 0x73, &(0x7f0000000040)={r10, 0xe869, 0x30, 0x7fff, 0x1}, &(0x7f00000000c0)=0x18) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000000280)={r10, 0x6c, 0x5c80}, &(0x7f0000000100)=0x8) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a09040000000000000000020000000900010073797a30000000000900080a05000000000000000000020000000c00034000000000c6a2515c0900020073797a32000000000900010073797a3000000000140000001100010000000000000000000a00000a914b4aceb2b4ce1a2b7f4565c4377bd7d94b439c6ae6f04744ddcc49b4319b61f116fc2f089d792f5e2e0ffc175a13dca05e3cd8cc646e9e91e364e61f2cd1ed164cea8530f4cd35a862e21ede168f094792904e6dcc463f325a6e4158f0267b94ebe23893b4a90f2e598f19f223850567e7eada54e9aaa54676656d08d9223e5befd51467f624771ab26acc6f6f314a6ebd7699b839fed18c7d1a1617ebefb507103ebdcbbf4005ff07c9dbe40572b67ec5b5c93b663f0d286344869e2c3bfdb7baf7b046a3fba9710c83f653c600000000000000000000000000005df4501f533d77cae5a4aedaec7b85a6c6618388b2ff99d24a24a804dd088b319eadff653551505b1254762e498dfd63eeefd1d04927b6ee6c2a848b528c6bd004f4b719c8815d7b0951160c6e57948a07c966214585f1980fadebe63580479c284b84dc42d2b0f0d11217727798b59dbc8c0d402942913c8069dbbd6ee8f19a7d281aa5097796eff20715e9698ab4d3feeaf78974a1e7ca22bcd31f18f8"], 0x8c}}, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r6, 0x84, 0xf, &(0x7f0000000180)={r11, @in={{0x2, 0x4e21, @multicast1}}, 0xffffffff, 0x7, 0x7, 0x80000000, 0x1}, &(0x7f0000000240)=0x98) 32.977349ms ago: executing program 1 (id=671): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x50, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x8, 0xffffa888}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x7}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xd}}]}}}]}, 0x50}}, 0x0) (async) r2 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_ERRQUEUE(r2, 0x6b, 0x4, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500001000002020207b0af8ff00000000bda100000000000026010000f8ffffffb702000008000000b703000000000000850000000800000018010000202070250000000000202020dd1af5ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$kcm(0x10, 0x2, 0x0) (async) r4 = socket(0xa, 0x5, 0x0) getsockopt$inet6_int(r4, 0x29, 0x1a, 0x0, &(0x7f0000000040)) (async) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xfffffffffffffdbc, &(0x7f0000000080)=[{&(0x7f0000000040)="180000006a00f96b1324", 0x18}], 0x1}, 0x4080) (async) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) (async) recvmmsg(r5, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) (async) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000fc0)={0x0, 0x0, 0x1, [0xeb1d, 0xc, 0x3, 0x8, 0x6], [0xe4, 0x9da6, 0x10001, 0x7, 0x40, 0x400, 0x8000000000000000, 0x9, 0x69c4, 0x3, 0x4, 0x1, 0x18794b91, 0xfffffffffffffffe, 0x8, 0x7, 0x81, 0x9, 0x3, 0x800, 0xf, 0x6, 0x0, 0x3, 0x1000, 0x2, 0x9, 0xe, 0x2, 0xb38, 0x1, 0xe, 0x1, 0x14, 0x1d23dcca, 0xffffffffffff65a2, 0xf, 0x10001, 0x5, 0x0, 0x5, 0xd2, 0x9, 0x9, 0xffffffffffff8573, 0x2c, 0x5, 0x7, 0x2, 0xa, 0xffffffffffffffff, 0xd3, 0x2, 0x100000000, 0x0, 0xfffffffffffffff8, 0xffffffffffff4c2e, 0x4, 0x0, 0x6, 0x9, 0x3, 0xffffffffffffffff, 0xffff, 0x1f5, 0xbe2, 0x4, 0x10, 0x8, 0x9, 0x2, 0x1, 0x3, 0x2, 0xfff, 0x800, 0x6, 0x6f42, 0x4, 0x1, 0x4, 0x6, 0x3, 0x7ff, 0xe, 0x7fffffffffffffff, 0x2, 0x8, 0x2, 0x900000, 0x4, 0x6, 0xfc, 0x3, 0x1ff, 0x6, 0x2, 0x9, 0x7, 0x100, 0xc5de, 0x13, 0x1000, 0x7, 0x1000, 0x0, 0x9, 0x3, 0x8001, 0x2, 0x4, 0x80, 0x3, 0x100000001, 0x0, 0x8, 0x7f, 0x2dfc7f32, 0x80000000, 0x8, 0x93]}) ioctl$BTRFS_IOC_SCRUB(r5, 0xc400941b, &(0x7f0000001400)={r6, 0x400, 0x1}) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000d00)=0x0, &(0x7f0000000d40)=0x4) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000011c0)=ANY=[@ANYBLOB="1c0000000d2601020000000000000000000000000800010000000000"], 0x1c}}, 0x0) (async) sendmmsg$inet6(r0, &(0x7f0000000e40)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x8001, @dev={0xfe, 0x80, '\x00', 0x24}, 0xff}, 0x1c, &(0x7f0000000080), 0x0, &(0x7f00000000c0)=[@hoplimit={{0x14, 0x29, 0x34, 0x80000001}}], 0x18}}, {{&(0x7f0000000100)={0xa, 0x4e23, 0x10001, @private1, 0xfff}, 0x1c, &(0x7f0000001a40)=[{&(0x7f0000000180)="661c41005176942ee557964a6ee653c52a5b5814bdbb78458ba7c378f3a9bf7be7e3b326aa88da86c78b27ab64c88273a0422c907e201f1a8fb2ad193066bcc0649c090e04ac0aa1108d2ef7b5ffed7e80a0bc877f9b0fadd092439c163de188dbe20ca0aa2253e02fe17f599b190d9cff5dd6397748ca9eca6dbe8c1e90b542b742145f49dbb86fdc059b2a408ae83f50d95f9b89a5fe8bbbc426e783a5225fa2b859fb40f99d3abd10f2062f02296cbc8e06da94c4f755ac70b43636fd78782b01f1353aadaec49376f0ab48f3f79e146473f8c2e201233e5e7567d04a45d53351941b2938820b1c2e499791680ce51d0ca1ac60", 0xf5}, {&(0x7f0000001800)="5dc0b3ce04e261a57d7cd008b925ea6a9e96ce92fb701d3f4372382126f8fbf01b7808e371195e9c65d896540c8fb7314453f90f7d03cd8a0079c9add17bb0628e8249a2966d68591ab0fdd4d015206271eb74bec507e10a89b6cceff304bb66e00e891e3ecb87d08a328674994c6d92e3715d38739aaa077eea8b059f80ff60d76219c25ccfd79156ab04594824f8bb13de8e7d48331115ea01db6ab7aca43888", 0xa1}, {&(0x7f00000018c0)="ecfb4d999c7287f030f0acab9310b12a5bcb8d81c109db0b5c91e4dba137a886d3c0dcfe49fa13b80d9994a0fb9ab639673f710543eaa6694a2b13724922abe7ebcf16d467f4934879cbbd48f97abadef471274a260faf5fb8005fb637fdf5a516dce99bb528e77b5f3cb075e81d6b2c6725bd569372bd2627ca3d9556114ec23fdf6b4503f12f9cacc7275527752151c7ddbadca95b690cd705759dce245fce38dc313475ca849523c62c6b2eceacb80414d385f24dc656ce01935793dc26b41f6843457c122377ff1ad6a2a62f5f7bd1a370e462becd8d851625f0dc023f7f33d4fad32a772bb8448224f1403b3a3ee952", 0xf2}, {&(0x7f00000019c0)="2b492cf21b78a36f9b3a5a512831ee91bc7044dbd404030f0a6e69051010c54822792a2accf06647ee1b0c54ee7d3a08c5b41f6c9674e3854f51c0f60dda427512b7ee", 0x43}], 0x4, &(0x7f00000002c0)=[@hopopts_2292={{0x88, 0x29, 0x36, {0x88, 0xd, '\x00', [@generic={0x53, 0x60, "21590eb4f9504345391187cccde5144cb43948ec88376b34d34e29eeae616940a54fcfb059a59a25fdf32945b0332004374053e10c4f23813a709f8b45071d1946f8342f3d573d125c4bdce515dc049373cab400c9db2fcbf5790fe7d1a30a72"}, @pad1, @ra={0x5, 0x2, 0x7}, @enc_lim={0x4, 0x1, 0x7}]}}}, @dstopts={{0x38, 0x29, 0x37, {0x3b, 0x3, '\x00', [@padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @private2}]}}}], 0xc0}}, {{&(0x7f0000000380)={0xa, 0x4e22, 0x48362dc1, @private2, 0x9}, 0x1c, &(0x7f00000006c0)=[{&(0x7f00000003c0)="9f66da9af2391c8924d7ee179f345ad7db7a7c4884c8db4d231f2a656a98fd80ff0d3b1c6e8a25a9ad85f0d5dec40ac1a9ce7d62053b66345ee307177594aec3c98b814ed4c2193c7ccaf9af1082867d9984bb96d6b48d7014c249c2897cb9dbcc0af119418030ab39b40a3d4dcc5c2beef5de44767627636944dc4c7f61a6f604227587ee3fbf2fcb6df493c9a631fdf218178df2365385d04068ee6c039e4a46416380a17dc298418609cfbb7c6fc17198ae40566c32bd5a545c9d5379", 0xbe}, {&(0x7f0000000480)="2abe399b548e058a230a36ca5f162fb135e27e220f6a6f7ad48cdfef84e97d0532fe3d1a127af706e19a6ad330abb1cd1d845a4300cb94fa00a4424b9d8b5c8e51820c2f13d455a96cf5f26e2c289150e202f0d7d3c2f76c3077993a", 0x5c}, {&(0x7f0000000500)="b95bd318629165dbaaf958a1ad3537c8edbd995aad23cddcecc1e439b09733e6c744f9beeded7bb60dbd7e90bd741f6987ef7304f3f621bcf4d5c63aa9aebc448d8c8aea98ff2049fe1a9cdd8681d1654b80402817b9f95bad2be945ebfc91f0a2dfa127386e143cc7dd3d9e2e8085e554798a46d23415f38060891dcc4bb14e2b3cb0a8f5ff1c7192", 0x89}, {&(0x7f00000005c0)="d86c53a2c071ad0a2d208e15eeaa14a8b98985d0e3cba7623aa7af78f76bdb286a388e90769572aac1d2bfc2d9d94df8e52bc856d4010493d7c7aa906c6efed29022a5edb54586e0496936fc32768126b0db4ec4f7c551b3989b3eddf045dd8a5828a21fcf590683d50b42a04b227cdcc312379afbdb5b52df5f6ae35da19721fcf16b20dc92ad631fb9551be596ac6932ce50a633189add64dc80c5732a617724fc9955701e751f14c2f62b2580919b0b7e32bfd0628a653e0f804693e2ed656f038598be09d50eb3", 0xc9}], 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="140000000000000029000000430000800800000000000000"], 0x18}}, {{&(0x7f0000000740)={0xa, 0x4e23, 0xbf8d, @empty, 0x8}, 0x1c, &(0x7f0000000980)=[{&(0x7f0000000780)="1fcef4b233dd434e71d6c75f08ec7092be7a0f9aa052c84bd3e7d2865d836f3034db337646914820acb28aee8b5dccc7caf9e8617516b574c5c10f1ed9610a18bcd3b85b8a112e92b2ec1d60ea81028a30cd6d169e1729bb6eec8ff6c92b4d7ad0d55c6ad52f6ceb2f18c6275d0b0277823b46", 0x73}, {&(0x7f0000000800)="9cc05da606a81fcb5899314ce230049bebfe498e92a1d76410cdc45559463cd9", 0x20}, {&(0x7f0000000840)="dd597e6149cfe5b8ea8186a5e56e7153dad0c87599b15bfc8001809ade7f1ec3b773dedd2f707ac6176cad14b05927a7f32aa532e9179f981b72ffc8330f82a1d35362390106ec770b7c2758848c3ef4912237a0194ff73dc1cb2c3cac4cef8e0ce14bd280194f68c6d6b0603ddc847fb8de2e93de55b0319d5fb1265347cb3ee4dbba562aa8646784b4b8485d9756d85dd26b867ecd6e4ad1b8baf717f794a1eddaa2a884b979f2b33fd45d0606585367e8488cee9dd1f5fa72e7db0ff6830c3d32ef95ff7483eabaeb3962506555", 0xcf}, {&(0x7f0000000940)}], 0x4}}, {{&(0x7f00000009c0)={0xa, 0x4e22, 0xb2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7}, 0x1c, &(0x7f0000000b80)=[{&(0x7f0000000a00)="754d69922c6193bb3954739727", 0xd}, {&(0x7f0000000a40)="4d3e72043016ead37131460bda3b54b7bc", 0x11}, {&(0x7f0000000a80)="d224b6d9ba1a32ac96e3d17ea6b15be9a377e4156a0b791c0d60c0a3a2c4d6b6cf2980ad7600b0758a63c214f83512ffcd0a5dfd2532c1a3e5648e0f2c7818c4a568d1a2f541f1f53435", 0x4a}, {&(0x7f0000000b00)="fefb8d537f0729e9452753458c79c93dfbadf9934da3f4d7f3f18a097b31c2396a2f5812172dc8491aca", 0x2a}, {&(0x7f0000000b40)="4755ea24bccdf65560ad6c85dfd4c23597cad82e3ff8e86a1b3f9c8dde0b2a9a16f27c49c91b41c578950d4be62e61bca0eaaca5c41e5e685ad49c", 0x3b}], 0x5}}, {{&(0x7f0000000c00)={0xa, 0x4e22, 0x8, @empty, 0xbe}, 0x1c, &(0x7f0000000cc0)=[{&(0x7f0000000c40)="dfe7cbae5013b2ecea0af859167c9cb6429b22e2a25ae70023bd68ff5f9825de4db11c23d5762257b71428ec559bc09f0279c93a5d9486aa10b02192411536013c7c0017263523191f18ba48d1f7aa001deabe8ad7d2b53fada2d4a660c1b418b7134e4e65c0434eb81c5b340f53e89ce8b77b877c90899e4f0f95d25d", 0x7d}], 0x1, &(0x7f0000000d80)=ANY=[@ANYBLOB="380000000000000029000000360000002f0400000000000000010007180000000204029a180800000000000000080000000000000000010038000000000000002900000036000000670400000000000001020000c910fe8000000000000000000000000000bbc204000000020502008024000000000000002900000032000000ff010000000000000020000000000001", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00'], 0x98}}], 0x6, 0xa000110) (async) r9 = socket$pppl2tp(0x18, 0x1, 0x1) r10 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r9, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r10, {0x2, 0x4e24, @broadcast}, 0x6, 0x0, 0x4}}, 0x2e) r11 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r12, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r11, 0x1, 0x70bd26, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa5}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x34}}, 0x20) r13 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r13, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) getsockopt(r13, 0x111, 0x6, 0x0, &(0x7f0000000080)) 29.807308ms ago: executing program 2 (id=672): r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x4, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x460, 0x240, 0x0, 0xffffffff, 0x240, 0x1a0, 0x3c8, 0x3c8, 0xffffffff, 0x3c8, 0x3c8, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010100, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x16}, 0x0, 0x168, 0x1a0, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x7, 0xc, 'kmp\x00', "4801d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x76, 0x2, {0x1}}}, @common=@unspec=@devgroup={{0x38}, {0x3, 0x0, 0x3, 0x3, 0x81}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0xae, {0xf, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @port=0x4e22, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xfffc, 0xd, 0x1}, {0x2, 0x4, 0x3}, 0x1000, 0x100}}}, {{@ip={@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff, 0x0, 'virt_wifi0\x00', 'veth1_to_bridge\x00', {}, {}, 0x0, 0x0, 0x4e}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@rand_addr=0x64010102, @ipv4=@private=0xa010101, @icmp_id=0x68, @icmp_id=0x64}}}, {{@ip={@loopback, @remote, 0xff, 0x0, 'batadv_slave_1\x00', 'ip_vti0\x00', {}, {0xff}, 0x6, 0x1, 0x5}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x4, '\\Q', 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @local, @multicast2, @port=0x4e22, @gre_key=0x5}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4c0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x48}}, 0x400400c0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_PERTURB={0x8, 0xc, 0x80000000}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}]}}]}, 0x4c}}, 0x0) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x8) sendmmsg$alg(r1, &(0x7f00000000c0), 0x492492492492627, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000011000000950000000000000020f1dff8c33d5c78ed674ad934300ce6de19c04c70db35bd436351ce346e8e8a9e8b54c2"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000003980)=ANY=[@ANYBLOB="1400000010000100000000060a0103300000000000000002000000200004801c0001800c0001007061796c6f6164001700028008000240000000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000700000a00"/116], 0x74}}, 0x2080) sendmsg$nl_route_sched(r5, &(0x7f0000019580)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000c40)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12000, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689e5dd0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x8000, 0x10000000, 0x400, 0x4, 0x5, {0x9, 0x0, 0x1, 0x2, 0x8, 0x3}, {0x7, 0x2, 0x10, 0x0, 0x1, 0xfffffffe}, 0x80, 0x0, 0x9}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0) 0s ago: executing program 4 (id=673): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f00000001c0)={0xffffffffffffffff, &(0x7f00000000c0)='[\x00', 0x0, &(0x7f0000000100)={@align, {0x5d1e, 0x100, 0x81b, 0x8}}, 0x5, &(0x7f0000000140)={@_ha_fsid}, &(0x7f0000000180)=0x3}) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r5], 0x1c}}, 0x4008054) ioctl$XFS_IOC_FSCOUNTS(r1, 0x80205871, &(0x7f0000000480)) sendmsg$nfc_llcp(r1, &(0x7f0000000780)={&(0x7f0000000200)={0x27, r5, 0x1, 0x1, 0x10, 0x0, "612d13499f44f2336005e904b5c9f78d9bb2b43009c451549aa9110b1e52dd3411e997f2b9f8dc759792d73634c5b0afe5e874f5caa578973ebd5674db760c", 0x35}, 0x60, &(0x7f00000004c0)=[{&(0x7f0000000280)="2dd1141e3614d754dd5a748a28c8d1db7f730244ed6cc0520910e67e1807aff5d9f7d75b593817846645d8ac1b002b06049bc783a2dc58c7c71ff013dad989e12d6018d18e9df6af6a22", 0x4a}, {&(0x7f0000000300)="3cdd165fd87d160698cfb3ae43b5379c0376d2a76a437caafe8b3a224c250e7b9e85c5ae0e7e11ebd5d0070b855dadb1b2a00e67f4d486bc906cb93283c150db248db41ee4fd7de2fd56e39e2656df1e2c0b8e514a36d9c3f6975655927703759c93b0c2837fab57", 0x68}, {&(0x7f0000000380)="8b793436e9e20728f670f960a94dd2164493c8933c885289017eab585e97481bc7e10e5d04d663f8ff5ffb587a3eb8d23cc1a4f2a9944919c6e85b3f9e95a1d644f8aa78789704a86370c5f022d97535cbf90604cc92f403f1039e4637506fcb1d80b526b13b6801e1aaa5c6ccc6e7c493767a3a2fd8586d9fc782a90ea17449e4de28baf15bf29aee7d225b5436ea71f159e4866d08", 0x96}, {&(0x7f0000000500)="eb89273966ddb5e0e263dedffb8a5840ddfd303589c65e369530c3bb7996db4d4ca4ed6b47fabf5152fc775ab95c6debe6f466a51380045b75f79ca33b34512419eaafbfa101704237ca78e4f42254d7383425ddc25a5b530a230ad5fff34d56f53a2a3a3bc7c545845649ce7cbf655303c968537c2feae8def78e9cde3820a5d697702c1130147a7aaa6221", 0x8c}], 0x4, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x110, 0x4000000}, 0x40050) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r6, 0x660c) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="e0000000100009050000000000000000b1ff2e5c5360538c5698b6b7f39c417223b4d07456d68ee6758887d396e5c839d5a9000080afc7872d3c4a648166b916526af53872845d1f1ac1df1d4db700301c32882813fb5aad2faf74aaeeb870af1ed5a0fd551829fcd1dcccc26cf6a064e1c271394e2ef9ba127e7a8091b7ae725cf193b9cf29aa4de9082491d489819b"], 0xe0}], 0x1}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.66' (ED25519) to the list of known hosts. [ 72.793562][ T5616] cgroup: Unknown subsys name 'net' [ 72.909795][ T5616] cgroup: Unknown subsys name 'cpuset' [ 72.918954][ T5616] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 74.331573][ T5616] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 76.382029][ T5630] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.392425][ T5630] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.403846][ T5630] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.412932][ T5630] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.424800][ T5630] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 76.459268][ T4945] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 76.470132][ T4945] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 76.479602][ T4945] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 76.488743][ T5639] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 76.498984][ T4945] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 76.506596][ T5639] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 76.507519][ T4945] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 76.516780][ T5639] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 76.521928][ T4945] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 76.535545][ T4945] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 76.553171][ T5639] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 76.569326][ T5639] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 76.577312][ T5639] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 76.589000][ T5630] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 76.600587][ T5639] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 76.611018][ T5639] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 76.618276][ T5630] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 76.630264][ T5630] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 76.639645][ T4945] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 76.648627][ T4945] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 78.281203][ T5633] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.289062][ T5633] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.296447][ T5633] bridge_slave_0: entered allmulticast mode [ 78.304205][ T5633] bridge_slave_0: entered promiscuous mode [ 78.321537][ T5632] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.328834][ T5632] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.336004][ T5632] bridge_slave_0: entered allmulticast mode [ 78.343364][ T5632] bridge_slave_0: entered promiscuous mode [ 78.367241][ T5633] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.374419][ T5633] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.381685][ T5633] bridge_slave_1: entered allmulticast mode [ 78.388712][ T5633] bridge_slave_1: entered promiscuous mode [ 78.403574][ T5632] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.410727][ T5632] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.418489][ T5632] bridge_slave_1: entered allmulticast mode [ 78.425547][ T5632] bridge_slave_1: entered promiscuous mode [ 78.457170][ T50] Bluetooth: hci0: command tx timeout [ 78.504467][ T5633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.536866][ T50] Bluetooth: hci3: command tx timeout [ 78.543416][ T5634] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.550653][ T5634] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.558118][ T5634] bridge_slave_0: entered allmulticast mode [ 78.565007][ T5634] bridge_slave_0: entered promiscuous mode [ 78.585028][ T5633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.601996][ T5632] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.611405][ T5634] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.619061][ T50] Bluetooth: hci1: command tx timeout [ 78.625585][ T5634] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.633234][ T5634] bridge_slave_1: entered allmulticast mode [ 78.640436][ T5634] bridge_slave_1: entered promiscuous mode [ 78.649191][ T5628] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.656537][ T5628] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.663709][ T5628] bridge_slave_0: entered allmulticast mode [ 78.670879][ T5628] bridge_slave_0: entered promiscuous mode [ 78.696718][ T4945] Bluetooth: hci2: command tx timeout [ 78.697359][ T5632] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.702921][ T50] Bluetooth: hci4: command tx timeout [ 78.733620][ T5628] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.740910][ T5628] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.748160][ T5628] bridge_slave_1: entered allmulticast mode [ 78.755158][ T5628] bridge_slave_1: entered promiscuous mode [ 78.810595][ T5633] team0: Port device team_slave_0 added [ 78.816633][ T5643] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.823839][ T5643] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.831254][ T5643] bridge_slave_0: entered allmulticast mode [ 78.838410][ T5643] bridge_slave_0: entered promiscuous mode [ 78.848562][ T5632] team0: Port device team_slave_0 added [ 78.857755][ T5634] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.877185][ T5633] team0: Port device team_slave_1 added [ 78.883111][ T5643] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.890404][ T5643] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.897615][ T5643] bridge_slave_1: entered allmulticast mode [ 78.904506][ T5643] bridge_slave_1: entered promiscuous mode [ 78.913845][ T5632] team0: Port device team_slave_1 added [ 78.924119][ T5634] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.944625][ T5628] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.994717][ T5628] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.035349][ T5634] team0: Port device team_slave_0 added [ 79.051554][ T5633] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.058661][ T5633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.084766][ T5633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.103130][ T5643] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.116270][ T5643] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.126535][ T5632] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.133501][ T5632] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.159819][ T5632] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.172733][ T5634] team0: Port device team_slave_1 added [ 79.188027][ T5633] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.195114][ T5633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.221546][ T5633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.241772][ T5632] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.248925][ T5632] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.275723][ T5632] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.306796][ T5628] team0: Port device team_slave_0 added [ 79.339074][ T5643] team0: Port device team_slave_0 added [ 79.345506][ T5634] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.352714][ T5634] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.378970][ T5634] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.391829][ T5628] team0: Port device team_slave_1 added [ 79.411886][ T5643] team0: Port device team_slave_1 added [ 79.418146][ T5634] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.425180][ T5634] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.451162][ T5634] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.535380][ T5632] hsr_slave_0: entered promiscuous mode [ 79.542026][ T5632] hsr_slave_1: entered promiscuous mode [ 79.559656][ T5643] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.566751][ T5643] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.592823][ T5643] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.604750][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.611806][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.638025][ T5628] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.654001][ T5633] hsr_slave_0: entered promiscuous mode [ 79.660756][ T5633] hsr_slave_1: entered promiscuous mode [ 79.667063][ T5633] debugfs: 'hsr0' already exists in 'hsr' [ 79.672859][ T5633] Cannot create hsr debugfs directory [ 79.681849][ T5643] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.688837][ T5643] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.714776][ T5643] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.726950][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.733931][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.760387][ T5628] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.863575][ T5634] hsr_slave_0: entered promiscuous mode [ 79.869866][ T5634] hsr_slave_1: entered promiscuous mode [ 79.875926][ T5634] debugfs: 'hsr0' already exists in 'hsr' [ 79.881872][ T5634] Cannot create hsr debugfs directory [ 79.997023][ T5643] hsr_slave_0: entered promiscuous mode [ 80.003364][ T5643] hsr_slave_1: entered promiscuous mode [ 80.010571][ T5643] debugfs: 'hsr0' already exists in 'hsr' [ 80.016371][ T5643] Cannot create hsr debugfs directory [ 80.027890][ T5628] hsr_slave_0: entered promiscuous mode [ 80.034252][ T5628] hsr_slave_1: entered promiscuous mode [ 80.041192][ T5628] debugfs: 'hsr0' already exists in 'hsr' [ 80.047266][ T5628] Cannot create hsr debugfs directory [ 80.463053][ T5633] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 80.475517][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.497263][ T5633] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 80.508643][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.531536][ T5633] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 80.540845][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.547980][ T50] Bluetooth: hci0: command tx timeout [ 80.549019][ T5633] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 80.564561][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.617370][ T50] Bluetooth: hci3: command tx timeout [ 80.627344][ T5632] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 80.637943][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.648668][ T5632] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 80.661581][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.675056][ T5632] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 80.684644][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.692595][ T5632] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 80.701370][ T50] Bluetooth: hci1: command tx timeout [ 80.710682][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.777078][ T50] Bluetooth: hci4: command tx timeout [ 80.777124][ T4945] Bluetooth: hci2: command tx timeout [ 80.811236][ T5634] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 80.822074][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.830886][ T5634] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 80.842200][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.850451][ T5634] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 80.860385][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.868432][ T5634] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 80.877842][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.995130][ T5643] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 81.007522][ T5643] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 81.015616][ T5643] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 81.027179][ T5643] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 81.035783][ T5643] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 81.045153][ T5643] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 81.053041][ T5643] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 81.064102][ T5643] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 81.114209][ T5633] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.194666][ T5628] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 81.204822][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 81.213935][ T5628] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 81.224998][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 81.242845][ T5628] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 81.252954][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 81.263848][ T5628] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 81.274543][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 81.284408][ T5633] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.322113][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.330126][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.361258][ T5632] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.374571][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.381782][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.403785][ T5634] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.436518][ T5632] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.479290][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.486500][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.512157][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.519310][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.534581][ T5634] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.581100][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.588248][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.642909][ T5643] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.659441][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.666581][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.797138][ T5643] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.822032][ T5628] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.881429][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.888911][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.932975][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.940203][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.998023][ T5628] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.042178][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.049403][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.084181][ T145] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.091425][ T145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.619360][ T4945] Bluetooth: hci0: command tx timeout [ 82.706495][ T4945] Bluetooth: hci3: command tx timeout [ 82.738181][ T5633] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.776697][ T4945] Bluetooth: hci1: command tx timeout [ 82.859788][ T4945] Bluetooth: hci2: command tx timeout [ 82.859890][ T50] Bluetooth: hci4: command tx timeout [ 82.894056][ T5632] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.942890][ T5634] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.998470][ T5633] veth0_vlan: entered promiscuous mode [ 83.024654][ T5633] veth1_vlan: entered promiscuous mode [ 83.156696][ T5632] veth0_vlan: entered promiscuous mode [ 83.202841][ T5633] veth0_macvtap: entered promiscuous mode [ 83.218289][ T5632] veth1_vlan: entered promiscuous mode [ 83.239293][ T5634] veth0_vlan: entered promiscuous mode [ 83.249691][ T5633] veth1_macvtap: entered promiscuous mode [ 83.282705][ T5634] veth1_vlan: entered promiscuous mode [ 83.294055][ T5643] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.355150][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.399721][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.430751][ T5628] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.464662][ T5632] veth0_macvtap: entered promiscuous mode [ 83.504281][ T5632] veth1_macvtap: entered promiscuous mode [ 83.544587][ T5634] veth0_macvtap: entered promiscuous mode [ 83.556463][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.598611][ T5634] veth1_macvtap: entered promiscuous mode [ 83.642325][ T5632] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.678937][ T5632] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.688411][ T3392] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.699810][ T3392] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.746675][ T5634] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.774646][ T5628] veth0_vlan: entered promiscuous mode [ 83.786028][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.790458][ T5628] veth1_vlan: entered promiscuous mode [ 83.796606][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.822195][ T5634] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.856885][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.924844][ T5633] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 83.944601][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.974545][ T5643] veth0_vlan: entered promiscuous mode [ 84.026919][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.029078][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.045529][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.089735][ T5823] syz.2.3 uses obsolete (PF_INET,SOCK_PACKET) [ 84.093410][ T5628] veth0_macvtap: entered promiscuous mode [ 84.128812][ T5643] veth1_vlan: entered promiscuous mode [ 84.166934][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.187044][ T5628] veth1_macvtap: entered promiscuous mode [ 84.212978][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.233895][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.268942][ T5643] veth0_macvtap: entered promiscuous mode [ 84.293466][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.348095][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.356217][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.378712][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.414777][ T5643] veth1_macvtap: entered promiscuous mode [ 84.476071][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.486622][ T3392] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.561500][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.572224][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.606561][ T5836] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 84.619920][ T5836] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 84.645215][ T5643] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.668555][ T5836] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'. [ 84.697368][ T50] Bluetooth: hci0: command tx timeout [ 84.706399][ T145] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.731297][ T5643] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.756923][ T145] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.777387][ T50] Bluetooth: hci3: command tx timeout [ 84.783864][ T5838] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7'. [ 84.796409][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.848532][ T145] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.859015][ T50] Bluetooth: hci1: command tx timeout [ 84.869205][ T145] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.879085][ T145] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.904469][ T5840] Zero length message leads to an empty skb [ 84.911717][ T145] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.937595][ T50] Bluetooth: hci2: command tx timeout [ 84.949062][ T50] Bluetooth: hci4: command tx timeout [ 84.989024][ T35] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.000015][ T35] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.021011][ T5838] netlink: 52 bytes leftover after parsing attributes in process `syz.2.7'. [ 85.030706][ T5846] netlink: 'syz.0.1': attribute type 1 has an invalid length. [ 85.045397][ T5845] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8'. [ 85.069967][ T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.079210][ T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.307674][ T145] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.317930][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.339677][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.367271][ T3392] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.379528][ T3392] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.459162][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.477637][ T3392] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.495088][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.652249][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.679517][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.812343][ T5870] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16'. [ 85.869063][ T5872] warning: `syz.1.15' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 85.928786][ T5872] netlink: 32 bytes leftover after parsing attributes in process `syz.1.15'. [ 86.131863][ T5880] syzkaller0: entered promiscuous mode [ 86.151278][ T5880] syzkaller0: entered allmulticast mode [ 86.512879][ T5902] netlink: 8 bytes leftover after parsing attributes in process `syz.4.23'. [ 86.583380][ T5914] netlink: 'syz.3.21': attribute type 12 has an invalid length. [ 86.597785][ T5913] netlink: 8 bytes leftover after parsing attributes in process `syz.2.26'. [ 86.793504][ T5925] netlink: 12 bytes leftover after parsing attributes in process `syz.3.21'. [ 86.936962][ T50] block nbd0: Receive control failed (result -1) [ 87.004981][ T5932] netlink: 'syz.0.30': attribute type 2 has an invalid length. [ 87.064707][ T5934] netlink: 16 bytes leftover after parsing attributes in process `syz.2.29'. [ 87.297107][ T5934] macvtap1: entered promiscuous mode [ 87.303761][ T5934] vlan0: entered promiscuous mode [ 87.317581][ T5934] macvtap1: entered allmulticast mode [ 87.332534][ T5934] vlan0: entered allmulticast mode [ 87.343901][ T5934] veth0_vlan: entered allmulticast mode [ 87.376859][ T5945] netlink: 'syz.4.34': attribute type 58 has an invalid length. [ 87.504781][ T5947] tipc: Started in network mode [ 87.518654][ T5947] tipc: Node identity ac14142f, cluster identity 4711 [ 87.542894][ T5947] tipc: New replicast peer: 172.20.20.170 [ 87.562553][ T5947] tipc: Enabled bearer , priority 10 [ 87.583697][ T5951] tipc: New replicast peer: 0.0.0.0 [ 88.052673][ T5968] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 88.254728][ T5979] IPVS: set_ctl: invalid protocol: 9 172.20.20.170:20004 [ 88.375263][ T42] IPVS: starting estimator thread 0... [ 88.486772][ T5990] IPVS: using max 30 ests per chain, 72000 per kthread [ 88.677743][ T42] tipc: Node number set to 2886997039 [ 88.795200][ T5962] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 88.962339][ T6014] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 89.203040][ T6025] tipc: Enabled bearer , priority 0 [ 89.301150][ T6031] netlink: 'syz.2.59': attribute type 21 has an invalid length. [ 89.319558][ T6031] netlink: 'syz.2.59': attribute type 22 has an invalid length. [ 89.333696][ T6025] syzkaller0: entered promiscuous mode [ 89.347855][ T6025] syzkaller0: entered allmulticast mode [ 89.358756][ T6031] netlink: 'syz.2.59': attribute type 23 has an invalid length. [ 89.372046][ T6025] tipc: Resetting bearer [ 89.384154][ T6031] netlink: 'syz.2.59': attribute type 25 has an invalid length. [ 89.415446][ T6024] tipc: Resetting bearer [ 89.987728][ T50] Bluetooth: hci0: command 0x0401 tx timeout [ 90.715276][ T6024] tipc: Disabling bearer [ 90.733898][ T6039] macsec1: entered promiscuous mode [ 90.739418][ T6039] macsec0: entered promiscuous mode [ 90.745253][ T6039] macsec1: entered allmulticast mode [ 90.750726][ T6039] macsec0: entered allmulticast mode [ 90.756045][ T6039] veth1_macvtap: entered allmulticast mode [ 90.769692][ T6039] macsec0: left allmulticast mode [ 90.774829][ T6039] veth1_macvtap: left allmulticast mode [ 90.782002][ T6039] macsec0: left promiscuous mode [ 90.806890][ T6045] __nla_validate_parse: 8 callbacks suppressed [ 90.806908][ T6045] netlink: 4 bytes leftover after parsing attributes in process `syz.1.63'. [ 90.852822][ T6045] netlink: 4 bytes leftover after parsing attributes in process `syz.1.63'. [ 90.884731][ T6045] netlink: 'syz.1.63': attribute type 3 has an invalid length. [ 90.964923][ T6062] netlink: 'syz.2.66': attribute type 11 has an invalid length. [ 91.298514][ T6078] netlink: 8 bytes leftover after parsing attributes in process `syz.4.71'. [ 91.333449][ T6078] unsupported nla_type 216 [ 91.393194][ T6078] xt_hashlimit: overflow, try lower: 3/0 [ 91.424583][ T6078] netlink: 12 bytes leftover after parsing attributes in process `syz.4.71'. [ 91.451848][ T6087] netlink: 104 bytes leftover after parsing attributes in process `syz.2.74'. [ 91.604582][ T6096] netlink: 8 bytes leftover after parsing attributes in process `syz.4.76'. [ 91.618681][ T6091] netdevsim netdevsim3: Direct firmware load for ÿ failed with error -2 [ 91.663984][ T6091] netdevsim netdevsim3: Falling back to sysfs fallback for: ÿ [ 91.921656][ T188] cfg80211: failed to load regulatory.db [ 92.198661][ T6115] team0: entered promiscuous mode [ 92.208257][ T6115] team_slave_0: entered promiscuous mode [ 92.229847][ T6115] team_slave_1: entered promiscuous mode [ 92.264816][ T6121] netlink: 'syz.3.84': attribute type 1 has an invalid length. [ 92.496094][ T6132] netlink: 'syz.3.87': attribute type 4 has an invalid length. [ 92.542004][ T6134] netlink: 'syz.2.89': attribute type 10 has an invalid length. [ 92.669223][ T6134] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.717981][ T6134] bond0: (slave team0): Enslaving as an active interface with an up link [ 93.313354][ T6164] netlink: 64 bytes leftover after parsing attributes in process `syz.3.96'. [ 93.380128][ T6166] netlink: 'syz.3.96': attribute type 2 has an invalid length. [ 93.421288][ T6166] netlink: 'syz.3.96': attribute type 2 has an invalid length. [ 93.440331][ T6166] netlink: 'syz.3.96': attribute type 2 has an invalid length. [ 93.784872][ T6181] No such timeout policy "syz0" [ 94.303674][ T6205] netlink: 312 bytes leftover after parsing attributes in process `syz.2.109'. [ 94.991923][ T6222] netlink: 64 bytes leftover after parsing attributes in process `syz.1.115'. [ 95.044118][ T6226] netlink: 'syz.1.115': attribute type 2 has an invalid length. [ 95.102606][ T6226] netlink: 'syz.1.115': attribute type 2 has an invalid length. [ 95.114612][ T6226] netlink: 'syz.1.115': attribute type 2 has an invalid length. [ 95.512882][ T6246] veth1_to_bond: entered allmulticast mode [ 95.521021][ T6243] netlink: 4 bytes leftover after parsing attributes in process `syz.3.121'. [ 95.545294][ T6246] veth1_to_bond: left allmulticast mode [ 95.721047][ T6255] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 96.019913][ T6266] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 96.027567][ T6266] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 96.256504][ T6272] __nla_validate_parse: 1 callbacks suppressed [ 96.256524][ T6272] netlink: 64 bytes leftover after parsing attributes in process `syz.2.130'. [ 96.308101][ T6282] validate_nla: 1 callbacks suppressed [ 96.308117][ T6282] netlink: 'syz.2.130': attribute type 2 has an invalid length. [ 96.370381][ T6282] netlink: 'syz.2.130': attribute type 2 has an invalid length. [ 96.410135][ T6282] netlink: 'syz.2.130': attribute type 2 has an invalid length. [ 96.467848][ T6292] netlink: 36 bytes leftover after parsing attributes in process `syz.1.134'. [ 96.718896][ T6301] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 96.881691][ T6312] netlink: 196 bytes leftover after parsing attributes in process `syz.3.139'. [ 96.913655][ T6312] netlink: 196 bytes leftover after parsing attributes in process `syz.3.139'. [ 96.944944][ T6312] netlink: 19 bytes leftover after parsing attributes in process `syz.3.139'. [ 97.154990][ T6100] Set syz1 is full, maxelem 65536 reached [ 97.220298][ T6322] tipc: Started in network mode [ 97.231957][ T6322] tipc: Node identity ac14142f, cluster identity 4711 [ 97.250780][ T6322] tipc: New replicast peer: 172.20.20.170 [ 97.286033][ T6322] tipc: Enabled bearer , priority 10 [ 97.317466][ T6320] tipc: New replicast peer: 0.0.0.0 [ 97.339970][ T6326] netlink: 8 bytes leftover after parsing attributes in process `syz.2.144'. [ 97.370448][ T6326] netlink: 8 bytes leftover after parsing attributes in process `syz.2.144'. [ 97.378551][ T6329] netlink: 20 bytes leftover after parsing attributes in process `syz.0.145'. [ 97.389692][ T6330] netlink: 20 bytes leftover after parsing attributes in process `syz.0.145'. [ 97.421153][ T6329] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.430481][ T6329] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.713296][ T6334] netlink: 'syz.0.146': attribute type 8 has an invalid length. [ 97.998276][ T6341] netlink: 148 bytes leftover after parsing attributes in process `syz.3.148'. [ 98.223094][ T6356] netlink: 'syz.3.154': attribute type 2 has an invalid length. [ 98.260149][ T6356] netlink: 'syz.3.154': attribute type 2 has an invalid length. [ 98.289925][ T6356] netlink: 'syz.3.154': attribute type 2 has an invalid length. [ 98.397562][ T42] tipc: Node number set to 2886997039 [ 98.698815][ T50] Bluetooth: hci0: command 0x0401 tx timeout [ 98.725564][ T6370] 8021q: adding VLAN 0 to HW filter on device bond1 [ 98.891258][ T6391] netlink: 'syz.2.168': attribute type 365 has an invalid length. [ 99.019723][ T6398] netlink: 'syz.1.171': attribute type 2 has an invalid length. [ 99.048513][ T6398] netlink: 'syz.1.171': attribute type 2 has an invalid length. [ 99.134008][ T6404] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 100.132262][ T6453] syzkaller0: entered promiscuous mode [ 100.146144][ T6453] syzkaller0: entered allmulticast mode [ 102.321599][ T6521] __nla_validate_parse: 11 callbacks suppressed [ 102.321652][ T6521] netlink: 12 bytes leftover after parsing attributes in process `syz.3.206'. [ 102.358638][ T6521] netlink: 12 bytes leftover after parsing attributes in process `syz.3.206'. [ 102.373517][ T6521] vlan0: entered promiscuous mode [ 102.509858][ T6531] netlink: 64 bytes leftover after parsing attributes in process `syz.4.209'. [ 102.538478][ T6532] Driver unsupported XDP return value 0 on prog (id 33) dev N/A, expect packet loss! [ 102.554242][ T6531] validate_nla: 7 callbacks suppressed [ 102.554259][ T6531] netlink: 'syz.4.209': attribute type 2 has an invalid length. [ 102.582711][ T6531] netlink: 'syz.4.209': attribute type 2 has an invalid length. [ 102.591385][ T6531] netlink: 'syz.4.209': attribute type 2 has an invalid length. [ 102.710444][ T6541] syzkaller1: entered promiscuous mode [ 102.723162][ T6541] syzkaller1: entered allmulticast mode [ 102.815579][ T6548] netlink: 48 bytes leftover after parsing attributes in process `syz.0.214'. [ 102.816816][ T6535] netlink: 80 bytes leftover after parsing attributes in process `syz.3.211'. [ 102.837026][ T6553] netlink: 'syz.4.213': attribute type 1 has an invalid length. [ 102.923752][ T6557] netlink: 28 bytes leftover after parsing attributes in process `syz.0.215'. [ 102.932910][ T6557] netlink: 'syz.0.215': attribute type 7 has an invalid length. [ 102.943758][ T6557] netlink: 20 bytes leftover after parsing attributes in process `syz.0.215'. [ 102.987019][ T6555] bond1: (slave veth3): Enslaving as an active interface with a down link [ 102.998797][ T6553] 8021q: adding VLAN 0 to HW filter on device bond1 [ 103.468478][ T6574] netlink: 'syz.3.219': attribute type 5 has an invalid length. [ 103.503699][ T6580] netlink: 64 bytes leftover after parsing attributes in process `syz.2.223'. [ 103.528767][ T6580] netlink: 'syz.2.223': attribute type 2 has an invalid length. [ 103.553790][ T6580] netlink: 'syz.2.223': attribute type 2 has an invalid length. [ 103.581963][ T6580] netlink: 'syz.2.223': attribute type 2 has an invalid length. [ 104.000793][ T6606] netlink: 'syz.1.232': attribute type 1 has an invalid length. [ 104.323762][ T6628] netlink: 64 bytes leftover after parsing attributes in process `syz.2.237'. [ 104.408107][ T6613] bond1: (slave veth3): Enslaving as an active interface with a down link [ 104.461369][ T6617] 8021q: adding VLAN 0 to HW filter on device bond1 [ 104.504369][ T6631] bond2: option fail_over_mac: invalid value (16) [ 104.517580][ T6631] bond2 (unregistering): Released all slaves [ 104.921786][ T6652] netlink: 36 bytes leftover after parsing attributes in process `syz.2.243'. [ 105.075720][ T6656] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 106.451803][ T6735] block nbd1: Unsupported socket: should be TCP or UNIX. [ 107.019443][ T6764] tipc: Started in network mode [ 107.056316][ T6764] tipc: Node identity 5691cff91a24, cluster identity 4711 [ 107.092594][ T6764] tipc: Enabled bearer , priority 0 [ 107.357902][ T6772] syzkaller0: entered promiscuous mode [ 107.378715][ T6772] syzkaller0: entered allmulticast mode [ 107.398325][ T6772] tipc: Resetting bearer [ 107.621105][ T35] tipc: Resetting bearer [ 107.691664][ T6762] tipc: Resetting bearer [ 107.811228][ T6790] __nla_validate_parse: 6 callbacks suppressed [ 107.811249][ T6790] netlink: 64 bytes leftover after parsing attributes in process `syz.0.276'. [ 107.848636][ T6790] validate_nla: 10 callbacks suppressed [ 107.848653][ T6790] netlink: 'syz.0.276': attribute type 2 has an invalid length. [ 107.870388][ T6790] netlink: 'syz.0.276': attribute type 2 has an invalid length. [ 107.879386][ T6790] netlink: 'syz.0.276': attribute type 2 has an invalid length. [ 109.007173][ T6837] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 110.175160][ T6762] tipc: Disabling bearer [ 110.192855][ T5742] tipc: Node number set to 1286983673 [ 110.544662][ T6864] netlink: 'syz.3.285': attribute type 1 has an invalid length. [ 110.659462][ T6870] Bluetooth: MGMT ver 1.23 [ 110.760805][ T6873] netlink: 64 bytes leftover after parsing attributes in process `syz.2.288'. [ 110.770610][ T6873] netlink: 'syz.2.288': attribute type 2 has an invalid length. [ 110.783956][ T6873] netlink: 'syz.2.288': attribute type 2 has an invalid length. [ 110.795376][ T6873] netlink: 'syz.2.288': attribute type 2 has an invalid length. [ 112.229370][ T6890] netlink: 'syz.3.291': attribute type 5 has an invalid length. [ 112.249341][ T6899] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 112.308017][ T6901] netlink: 'syz.4.296': attribute type 21 has an invalid length. [ 112.333489][ T6901] netlink: 'syz.4.296': attribute type 22 has an invalid length. [ 112.364843][ T6901] netlink: 16 bytes leftover after parsing attributes in process `syz.4.296'. [ 112.403333][ T6904] ieee802154 phy0 wpan0: encryption failed: -22 [ 112.464098][ T6908] netlink: 64 bytes leftover after parsing attributes in process `syz.1.299'. [ 112.511308][ T6909] bond1 (unregistering): Released all slaves [ 112.577395][ T6914] sctp: [Deprecated]: syz.4.302 (pid 6914) Use of struct sctp_assoc_value in delayed_ack socket option. [ 112.577395][ T6914] Use struct sctp_sack_info instead [ 112.833590][ T6930] netlink: 4 bytes leftover after parsing attributes in process `syz.1.303'. [ 112.878539][ T6933] vcan1: entered promiscuous mode [ 112.892952][ T6933] vcan1: entered allmulticast mode [ 112.939835][ T6938] netlink: 12 bytes leftover after parsing attributes in process `syz.1.303'. [ 113.042801][ T6939] trusted_key: syz.3.306 sent an empty control message without MSG_MORE. [ 113.141885][ T6948] netlink: 72 bytes leftover after parsing attributes in process `syz.0.309'. [ 113.392112][ T6960] netlink: 64 bytes leftover after parsing attributes in process `syz.4.313'. [ 113.415411][ T6960] validate_nla: 6 callbacks suppressed [ 113.415429][ T6960] netlink: 'syz.4.313': attribute type 2 has an invalid length. [ 113.445029][ T6960] netlink: 'syz.4.313': attribute type 2 has an invalid length. [ 113.490297][ T6960] netlink: 'syz.4.313': attribute type 2 has an invalid length. [ 113.533169][ T6966] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 113.541611][ T6966] IPv6: NLM_F_CREATE should be set when creating new route [ 113.558902][ T6972] netlink: 8 bytes leftover after parsing attributes in process `syz.2.315'. [ 113.690654][ T6962] syzkaller1: entered promiscuous mode [ 113.717640][ T6962] syzkaller1: entered allmulticast mode [ 113.844795][ T6986] netlink: 32 bytes leftover after parsing attributes in process `syz.0.317'. [ 114.206054][ T7007] netlink: 64 bytes leftover after parsing attributes in process `syz.0.326'. [ 114.220076][ T7009] netlink: 20 bytes leftover after parsing attributes in process `syz.4.325'. [ 114.240171][ T7007] netlink: 'syz.0.326': attribute type 2 has an invalid length. [ 114.273818][ T7007] netlink: 'syz.0.326': attribute type 2 has an invalid length. [ 114.302898][ T7007] netlink: 'syz.0.326': attribute type 2 has an invalid length. [ 114.319193][ T7013] netlink: 4 bytes leftover after parsing attributes in process `syz.3.328'. [ 114.513554][ T7013] team1: entered promiscuous mode [ 114.542167][ T7013] team1: entered allmulticast mode [ 114.568813][ T7013] netlink: 4 bytes leftover after parsing attributes in process `syz.3.328'. [ 114.672940][ T7013] team2: entered promiscuous mode [ 114.678397][ T7013] team2: entered allmulticast mode [ 114.715047][ T7013] team3: entered promiscuous mode [ 114.721296][ T7013] team3: entered allmulticast mode [ 114.850242][ T7013] team4: entered promiscuous mode [ 114.855403][ T7013] team4: entered allmulticast mode [ 114.876871][ T7013] team5: entered promiscuous mode [ 114.882044][ T7013] team5: entered allmulticast mode [ 114.909873][ T7013] team6: entered promiscuous mode [ 114.915085][ T7013] team6: entered allmulticast mode [ 114.973660][ T7013] team7: entered promiscuous mode [ 114.981485][ T7013] team7: entered allmulticast mode [ 114.996407][ T7042] ªªªªª»: renamed from dummy0 (while UP) [ 115.042823][ T7013] team8: entered promiscuous mode [ 115.050647][ T7013] team8: entered allmulticast mode [ 115.083838][ T7013] team9: entered promiscuous mode [ 115.089556][ T7013] team9: entered allmulticast mode [ 115.118655][ T7051] netlink: 'syz.1.338': attribute type 9 has an invalid length. [ 115.146502][ T7013] team10: entered promiscuous mode [ 115.151807][ T7013] team10: entered allmulticast mode [ 115.351154][ T7056] netlink: 'syz.1.341': attribute type 2 has an invalid length. [ 115.369745][ T7056] netlink: 'syz.1.341': attribute type 2 has an invalid length. [ 115.382828][ T7056] netlink: 'syz.1.341': attribute type 2 has an invalid length. [ 115.386636][ T7058] x_tables: duplicate underflow at hook 2 [ 115.890380][ T7083] raw_sendmsg: syz.0.349 forgot to set AF_INET. Fix it! [ 115.924407][ T7085] nbd: error processing sock list [ 116.327101][ T7101] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 116.376980][ T7101] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 117.081640][ T7133] FAULT_INJECTION: forcing a failure. [ 117.081640][ T7133] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 117.119563][ T7133] CPU: 1 UID: 0 PID: 7133 Comm: syz.0.362 Not tainted syzkaller #0 PREEMPT(full) [ 117.119586][ T7133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 117.119605][ T7133] Call Trace: [ 117.119611][ T7133] [ 117.119618][ T7133] dump_stack_lvl+0xe8/0x150 [ 117.119659][ T7133] should_fail_ex+0x40c/0x560 [ 117.119685][ T7133] _copy_from_iter+0x1d3/0x1660 [ 117.119711][ T7133] ? kmem_cache_alloc_node_noprof+0x121/0x610 [ 117.119735][ T7133] ? rcu_is_watching+0x15/0xb0 [ 117.119754][ T7133] ? trace_kmem_cache_alloc+0x29/0xe0 [ 117.119776][ T7133] ? kmem_cache_alloc_node_noprof+0x3b8/0x610 [ 117.119798][ T7133] ? __pfx__copy_from_iter+0x10/0x10 [ 117.119825][ T7133] ? __alloc_skb+0x276/0x7a0 [ 117.119841][ T7133] ? __alloc_skb+0x276/0x7a0 [ 117.119861][ T7133] ? netlink_sendmsg+0x650/0xb40 [ 117.119883][ T7133] ? skb_put+0x112/0x210 [ 117.119903][ T7133] netlink_sendmsg+0x6c0/0xb40 [ 117.119934][ T7133] ? __pfx_netlink_sendmsg+0x10/0x10 [ 117.119960][ T7133] ? aa_sock_msg_perm+0xf1/0x1b0 [ 117.119986][ T7133] ? __pfx_netlink_sendmsg+0x10/0x10 [ 117.120007][ T7133] sock_sendmsg_nosec+0x13a/0x180 [ 117.120041][ T7133] ____sys_sendmsg+0x54e/0x850 [ 117.120069][ T7133] ? __pfx_____sys_sendmsg+0x10/0x10 [ 117.120098][ T7133] ? import_iovec+0x73/0xa0 [ 117.120118][ T7133] ___sys_sendmsg+0x2a5/0x360 [ 117.120138][ T7133] ? __lock_acquire+0x683/0x2cf0 [ 117.120168][ T7133] ? __pfx____sys_sendmsg+0x10/0x10 [ 117.120223][ T7133] ? __fget_files+0x2a/0x420 [ 117.120247][ T7133] ? __fget_files+0x3a2/0x420 [ 117.120279][ T7133] __x64_sys_sendmsg+0x1b1/0x290 [ 117.120302][ T7133] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 117.120341][ T7133] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.120362][ T7133] do_syscall_64+0x174/0x580 [ 117.120386][ T7133] ? clear_bhb_loop+0x40/0x90 [ 117.120407][ T7133] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.120425][ T7133] RIP: 0033:0x7fb53519e019 [ 117.120450][ T7133] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 117.120466][ T7133] RSP: 002b:00007fb535ff9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 117.120490][ T7133] RAX: ffffffffffffffda RBX: 00007fb535425fa0 RCX: 00007fb53519e019 [ 117.120503][ T7133] RDX: 0000000000028000 RSI: 0000200000006000 RDI: 0000000000000003 [ 117.120514][ T7133] RBP: 00007fb535ff9090 R08: 0000000000000000 R09: 0000000000000000 [ 117.120525][ T7133] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 117.120535][ T7133] R13: 00007fb535426038 R14: 00007fb535425fa0 R15: 00007fff5740c958 [ 117.120565][ T7133] [ 117.754459][ T7162] smc: net device lo applied user defined pnetid SYZ0 [ 117.764042][ T7162] smc: smcd device lo applied user defined pnetid SYZ0 [ 118.225176][ T7183] FAULT_INJECTION: forcing a failure. [ 118.225176][ T7183] name failslab, interval 1, probability 0, space 0, times 1 [ 118.239914][ T7183] CPU: 0 UID: 0 PID: 7183 Comm: syz.4.379 Not tainted syzkaller #0 PREEMPT(full) [ 118.239939][ T7183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 118.239949][ T7183] Call Trace: [ 118.239957][ T7183] [ 118.239964][ T7183] dump_stack_lvl+0xe8/0x150 [ 118.239996][ T7183] should_fail_ex+0x40c/0x560 [ 118.240026][ T7183] should_failslab+0xa8/0x100 [ 118.240056][ T7183] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 118.240081][ T7183] ? skb_clone+0x212/0x3a0 [ 118.240101][ T7183] ? skb_clone+0x212/0x3a0 [ 118.240130][ T7183] skb_clone+0x212/0x3a0 [ 118.240155][ T7183] __netlink_deliver_tap+0x413/0x860 [ 118.240190][ T7183] ? netlink_deliver_tap+0x2e/0x1b0 [ 118.240213][ T7183] netlink_deliver_tap+0x19c/0x1b0 [ 118.240240][ T7183] netlink_unicast+0x77f/0x940 [ 118.240271][ T7183] netlink_sendmsg+0x813/0xb40 [ 118.240302][ T7183] ? __pfx_netlink_sendmsg+0x10/0x10 [ 118.240329][ T7183] ? aa_sock_msg_perm+0xf1/0x1b0 [ 118.240356][ T7183] ? __pfx_netlink_sendmsg+0x10/0x10 [ 118.240383][ T7183] sock_sendmsg_nosec+0x13a/0x180 [ 118.240412][ T7183] ____sys_sendmsg+0x54e/0x850 [ 118.240440][ T7183] ? __pfx_____sys_sendmsg+0x10/0x10 [ 118.240471][ T7183] ? import_iovec+0x73/0xa0 [ 118.240499][ T7183] ___sys_sendmsg+0x2a5/0x360 [ 118.240519][ T7183] ? __lock_acquire+0x683/0x2cf0 [ 118.240550][ T7183] ? __pfx____sys_sendmsg+0x10/0x10 [ 118.240577][ T7183] ? irqentry_exit+0x218/0x8f0 [ 118.240597][ T7183] ? trace_irq_disable+0x3b/0x140 [ 118.240648][ T7183] ? __fget_files+0x2a/0x420 [ 118.240672][ T7183] ? __fget_files+0x3a2/0x420 [ 118.240709][ T7183] __x64_sys_sendmsg+0x1b1/0x290 [ 118.240734][ T7183] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 118.240774][ T7183] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.240795][ T7183] do_syscall_64+0x174/0x580 [ 118.240819][ T7183] ? clear_bhb_loop+0x40/0x90 [ 118.240843][ T7183] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.240861][ T7183] RIP: 0033:0x7ff6f639e019 [ 118.240878][ T7183] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 118.240894][ T7183] RSP: 002b:00007ff6f45f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 118.240914][ T7183] RAX: ffffffffffffffda RBX: 00007ff6f6625fa0 RCX: 00007ff6f639e019 [ 118.240927][ T7183] RDX: 0000000000028000 RSI: 0000200000006000 RDI: 0000000000000003 [ 118.240939][ T7183] RBP: 00007ff6f45f6090 R08: 0000000000000000 R09: 0000000000000000 [ 118.240950][ T7183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 118.240961][ T7183] R13: 00007ff6f6626038 R14: 00007ff6f6625fa0 R15: 00007ffeda2b6ca8 [ 118.240992][ T7183] [ 118.280728][ T7181] __nla_validate_parse: 18 callbacks suppressed [ 118.280744][ T7181] netlink: 16 bytes leftover after parsing attributes in process `syz.0.378'. [ 118.292401][ T7186] netlink: 64 bytes leftover after parsing attributes in process `syz.1.381'. [ 118.305978][ T7181] netlink: 4 bytes leftover after parsing attributes in process `syz.0.378'. [ 118.329111][ T7188] xt_TPROXY: Can be used only with -p tcp or -p udp [ 118.767698][ T7202] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 118.968362][ T7200] netlink: 48 bytes leftover after parsing attributes in process `syz.1.386'. [ 119.004812][ T7200] netlink: 48 bytes leftover after parsing attributes in process `syz.1.386'. [ 119.108419][ T7216] netlink: 44 bytes leftover after parsing attributes in process `syz.0.390'. [ 119.297056][ T7222] rdma_op ffff888029bce9f0 conn xmit_rdma 0000000000000000 [ 119.481076][ T7233] netlink: 64 bytes leftover after parsing attributes in process `syz.2.396'. [ 119.523280][ T7239] validate_nla: 11 callbacks suppressed [ 119.523322][ T7239] netlink: 'syz.2.396': attribute type 2 has an invalid length. [ 119.564399][ T7235] syzkaller0: entered promiscuous mode [ 119.579011][ T7235] syzkaller0: entered allmulticast mode [ 119.593623][ T7239] netlink: 'syz.2.396': attribute type 2 has an invalid length. [ 119.603967][ T7239] netlink: 'syz.2.396': attribute type 2 has an invalid length. [ 119.812653][ T7250] netlink: 'syz.2.401': attribute type 1 has an invalid length. [ 119.848446][ T7250] netlink: 228 bytes leftover after parsing attributes in process `syz.2.401'. [ 120.123534][ T7229] netlink: 8 bytes leftover after parsing attributes in process `syz.0.395'. [ 120.161337][ T7259] xt_TPROXY: Can be used only with -p tcp or -p udp [ 120.256769][ T7263] netlink: 4 bytes leftover after parsing attributes in process `syz.1.403'. [ 120.308590][ T7263] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 120.442233][ T7263] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 120.677680][ T7274] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 120.701511][ T7278] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 120.858592][ T7284] netlink: 'syz.4.411': attribute type 2 has an invalid length. [ 120.883787][ T7284] netlink: 'syz.4.411': attribute type 2 has an invalid length. [ 120.912463][ T7284] netlink: 'syz.4.411': attribute type 2 has an invalid length. [ 121.236881][ T7304] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 121.300575][ T7304] Cannot find add_set index 0 as target [ 121.565169][ T7317] team0: Device vlan0 failed to register rx_handler [ 121.870955][ T7327] netlink: 'syz.0.426': attribute type 2 has an invalid length. [ 121.893720][ T7328] netlink: 'syz.1.425': attribute type 62 has an invalid length. [ 121.905077][ T7327] netlink: 'syz.0.426': attribute type 2 has an invalid length. [ 122.583897][ T7349] bond1: (slave gretap1): making interface the new active one [ 122.598649][ T7349] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 122.795451][ T7356] 8021q: adding VLAN 0 to HW filter on device bond2 [ 122.869064][ T7359] bond2: (slave geneve3): making interface the new active one [ 122.881988][ T7359] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 122.917180][ T145] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 122.966308][ T3392] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 123.040731][ T7376] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.048372][ T7376] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.127595][ T3392] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 123.144718][ T3392] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 123.438332][ T7389] __nla_validate_parse: 6 callbacks suppressed [ 123.438351][ T7389] netlink: 64 bytes leftover after parsing attributes in process `syz.2.450'. [ 123.733672][ T7399] netlink: 224 bytes leftover after parsing attributes in process `syz.3.452'. [ 124.034353][ T7420] FAULT_INJECTION: forcing a failure. [ 124.034353][ T7420] name failslab, interval 1, probability 0, space 0, times 0 [ 124.095966][ T7420] CPU: 1 UID: 0 PID: 7420 Comm: syz.0.457 Not tainted syzkaller #0 PREEMPT(full) [ 124.095993][ T7420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 124.096003][ T7420] Call Trace: [ 124.096011][ T7420] [ 124.096019][ T7420] dump_stack_lvl+0xe8/0x150 [ 124.096053][ T7420] should_fail_ex+0x40c/0x560 [ 124.096082][ T7420] should_failslab+0xa8/0x100 [ 124.096112][ T7420] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 124.096137][ T7420] ? skb_clone+0x212/0x3a0 [ 124.096159][ T7420] ? skb_clone+0x212/0x3a0 [ 124.096185][ T7420] skb_clone+0x212/0x3a0 [ 124.096208][ T7420] __netlink_deliver_tap+0x413/0x860 [ 124.096244][ T7420] ? netlink_deliver_tap+0x2e/0x1b0 [ 124.096268][ T7420] netlink_deliver_tap+0x19c/0x1b0 [ 124.096292][ T7420] netlink_sendskb+0x68/0x140 [ 124.096314][ T7420] netlink_rcv_skb+0x2a4/0x4a0 [ 124.096337][ T7420] ? __pfx_genl_rcv_msg+0x10/0x10 [ 124.096365][ T7420] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 124.096403][ T7420] ? down_read+0x2be/0x330 [ 124.096432][ T7420] genl_rcv+0x28/0x40 [ 124.096465][ T7420] netlink_unicast+0x7bb/0x940 [ 124.096498][ T7420] netlink_sendmsg+0x813/0xb40 [ 124.096530][ T7420] ? __pfx_netlink_sendmsg+0x10/0x10 [ 124.096558][ T7420] ? aa_sock_msg_perm+0xf1/0x1b0 [ 124.096584][ T7420] ? __pfx_netlink_sendmsg+0x10/0x10 [ 124.096605][ T7420] sock_sendmsg_nosec+0x13a/0x180 [ 124.096634][ T7420] ____sys_sendmsg+0x54e/0x850 [ 124.096661][ T7420] ? __pfx_____sys_sendmsg+0x10/0x10 [ 124.096691][ T7420] ? import_iovec+0x73/0xa0 [ 124.096713][ T7420] ___sys_sendmsg+0x2a5/0x360 [ 124.096733][ T7420] ? __lock_acquire+0x683/0x2cf0 [ 124.096764][ T7420] ? __pfx____sys_sendmsg+0x10/0x10 [ 124.096821][ T7420] ? __fget_files+0x2a/0x420 [ 124.096846][ T7420] ? __fget_files+0x3a2/0x420 [ 124.096879][ T7420] __x64_sys_sendmsg+0x1b1/0x290 [ 124.096903][ T7420] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 124.096943][ T7420] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.096963][ T7420] do_syscall_64+0x174/0x580 [ 124.096984][ T7420] ? trace_irq_disable+0x3b/0x140 [ 124.097007][ T7420] ? clear_bhb_loop+0x40/0x90 [ 124.097030][ T7420] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.097048][ T7420] RIP: 0033:0x7fb53519e019 [ 124.097067][ T7420] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 124.097081][ T7420] RSP: 002b:00007fb535ff9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 124.097101][ T7420] RAX: ffffffffffffffda RBX: 00007fb535425fa0 RCX: 00007fb53519e019 [ 124.097114][ T7420] RDX: 0000000000028000 RSI: 0000200000006000 RDI: 0000000000000003 [ 124.097124][ T7420] RBP: 00007fb535ff9090 R08: 0000000000000000 R09: 0000000000000000 [ 124.097135][ T7420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 124.097146][ T7420] R13: 00007fb535426038 R14: 00007fb535425fa0 R15: 00007fff5740c958 [ 124.097175][ T7420] [ 124.655725][ T7425] vlan2: entered allmulticast mode [ 124.677142][ T7425] bond0: entered allmulticast mode [ 124.695522][ T7425] bond_slave_0: entered allmulticast mode [ 124.706124][ T7430] validate_nla: 76 callbacks suppressed [ 124.706141][ T7430] netlink: 'syz.2.461': attribute type 1 has an invalid length. [ 124.712319][ T7425] bond_slave_1: entered allmulticast mode [ 124.728940][ T7430] netlink: 228 bytes leftover after parsing attributes in process `syz.2.461'. [ 124.745996][ T7436] netlink: 12 bytes leftover after parsing attributes in process `syz.0.459'. [ 124.916666][ T7446] netlink: 60 bytes leftover after parsing attributes in process `syz.1.462'. [ 124.943277][ T7447] netlink: 64 bytes leftover after parsing attributes in process `syz.2.463'. [ 124.960046][ T7447] netlink: 'syz.2.463': attribute type 2 has an invalid length. [ 124.984716][ T7447] netlink: 'syz.2.463': attribute type 2 has an invalid length. [ 125.011304][ T7447] netlink: 'syz.2.463': attribute type 2 has an invalid length. [ 125.360920][ T7458] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 125.884431][ T7483] syzkaller0: entered promiscuous mode [ 125.894105][ T7483] syzkaller0: entered allmulticast mode [ 126.228656][ T7499] netlink: 64 bytes leftover after parsing attributes in process `syz.0.478'. [ 126.244580][ T7499] netlink: 'syz.0.478': attribute type 2 has an invalid length. [ 126.256117][ T7499] netlink: 'syz.0.478': attribute type 2 has an invalid length. [ 126.264284][ T7499] netlink: 'syz.0.478': attribute type 2 has an invalid length. [ 126.521799][ T42] IPVS: starting estimator thread 0... [ 126.527722][ T7508] netlink: 16 bytes leftover after parsing attributes in process `syz.3.482'. [ 126.626841][ T7512] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 3, id = 0 [ 126.640936][ T7509] IPVS: using max 30 ests per chain, 72000 per kthread [ 127.005263][ T7524] netlink: 36 bytes leftover after parsing attributes in process `syz.0.487'. [ 127.482519][ T7545] netlink: 'syz.3.492': attribute type 5 has an invalid length. [ 127.710182][ T7551] xt_socket: unknown flags 0x8 [ 127.864060][ T7557] netlink: 'syz.1.496': attribute type 1 has an invalid length. [ 127.886855][ T7560] netlink: 64 bytes leftover after parsing attributes in process `syz.0.495'. [ 127.898793][ T7560] netlink: 'syz.0.495': attribute type 2 has an invalid length. [ 128.112156][ T7562] bond2: (slave veth5): Enslaving as an active interface with a down link [ 128.123558][ T7563] 8021q: adding VLAN 0 to HW filter on device bond2 [ 128.285939][ T9] hid-generic 0005:484A:5505.0001: collection stack underflow [ 128.300133][ T9] hid-generic 0005:484A:5505.0001: item 0 2 0 12 parsing failed [ 128.312533][ T9] hid-generic 0005:484A:5505.0001: probe with driver hid-generic failed with error -22 [ 128.997899][ T7611] netlink: 64 bytes leftover after parsing attributes in process `syz.0.509'. [ 129.038383][ T7612] netlink: 60 bytes leftover after parsing attributes in process `syz.1.510'. [ 129.102998][ T7603] netlink: 8 bytes leftover after parsing attributes in process `syz.3.507'. [ 129.142950][ T7612] netlink: 60 bytes leftover after parsing attributes in process `syz.1.510'. [ 129.288777][ T7620] bond3: (slave veth3): Enslaving as an active interface with a down link [ 129.327150][ T7615] 8021q: adding VLAN 0 to HW filter on device bond3 [ 129.822418][ T7646] macvtap2: entered promiscuous mode [ 129.854369][ T7646] macvtap2: entered allmulticast mode [ 129.885308][ T7646] veth1_vlan: entered allmulticast mode [ 129.949688][ T7652] netlink: 64 bytes leftover after parsing attributes in process `syz.1.522'. [ 129.965260][ T7652] validate_nla: 7 callbacks suppressed [ 129.965302][ T7652] netlink: 'syz.1.522': attribute type 2 has an invalid length. [ 129.981690][ T7652] netlink: 'syz.1.522': attribute type 2 has an invalid length. [ 129.992113][ T7652] netlink: 'syz.1.522': attribute type 2 has an invalid length. [ 130.031466][ T7653] netlink: 'syz.3.523': attribute type 21 has an invalid length. [ 130.044312][ T7653] netlink: 152 bytes leftover after parsing attributes in process `syz.3.523'. [ 130.079337][ T7653] Bluetooth: MGMT ver 1.23 [ 130.183476][ T7656] syzkaller0: entered promiscuous mode [ 130.192287][ T7656] syzkaller0: entered allmulticast mode [ 130.523944][ T7669] netlink: 'syz.3.530': attribute type 1 has an invalid length. [ 130.771879][ T7675] bond1: (slave veth3): Enslaving as an active interface with a down link [ 130.835011][ T7677] 8021q: adding VLAN 0 to HW filter on device bond1 [ 130.853395][ T7684] netlink: 64 bytes leftover after parsing attributes in process `syz.2.535'. [ 130.878500][ T7684] netlink: 'syz.2.535': attribute type 2 has an invalid length. [ 130.904860][ T7684] netlink: 'syz.2.535': attribute type 2 has an invalid length. [ 130.923044][ T7684] netlink: 'syz.2.535': attribute type 2 has an invalid length. [ 131.445576][ T7709] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 131.465113][ T7709] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 131.638982][ T7713] netlink: 24 bytes leftover after parsing attributes in process `syz.4.544'. [ 131.847387][ T7721] netlink: 'syz.2.547': attribute type 1 has an invalid length. [ 131.894101][ T7725] netlink: 64 bytes leftover after parsing attributes in process `syz.4.549'. [ 131.954373][ T7725] netlink: 'syz.4.549': attribute type 2 has an invalid length. [ 132.253313][ T7727] bond4: (slave veth5): Enslaving as an active interface with a down link [ 132.280667][ T7742] FAULT_INJECTION: forcing a failure. [ 132.280667][ T7742] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 132.308357][ T7732] 8021q: adding VLAN 0 to HW filter on device bond4 [ 132.311871][ T7742] CPU: 0 UID: 0 PID: 7742 Comm: syz.0.551 Not tainted syzkaller #0 PREEMPT(full) [ 132.311900][ T7742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 132.311910][ T7742] Call Trace: [ 132.311918][ T7742] [ 132.311925][ T7742] dump_stack_lvl+0xe8/0x150 [ 132.311958][ T7742] should_fail_ex+0x40c/0x560 [ 132.311986][ T7742] _copy_from_user+0x2d/0xb0 [ 132.312006][ T7742] sctp_getsockopt_connectx3+0x165/0x360 [ 132.312025][ T7742] ? lock_sock_nested+0x6a/0x100 [ 132.312053][ T7742] ? __pfx_sctp_getsockopt_connectx3+0x10/0x10 [ 132.312075][ T7742] ? sctp_getsockopt+0x12f/0xb90 [ 132.312099][ T7742] ? __local_bh_enable_ip+0xd0/0x130 [ 132.312125][ T7742] sctp_getsockopt+0x984/0xb90 [ 132.312147][ T7742] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 132.312173][ T7742] do_sock_getsockopt+0x51d/0x7e0 [ 132.312199][ T7742] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 132.312235][ T7742] ? __fget_files+0x3a2/0x420 [ 132.312258][ T7742] ? __fget_files+0x2a/0x420 [ 132.312288][ T7742] __x64_sys_getsockopt+0x1a4/0x240 [ 132.312315][ T7742] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.312334][ T7742] do_syscall_64+0x174/0x580 [ 132.312358][ T7742] ? clear_bhb_loop+0x40/0x90 [ 132.312379][ T7742] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.312397][ T7742] RIP: 0033:0x7fb53519e019 [ 132.312414][ T7742] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 132.312429][ T7742] RSP: 002b:00007fb535ff9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 132.312448][ T7742] RAX: ffffffffffffffda RBX: 00007fb535425fa0 RCX: 00007fb53519e019 [ 132.312461][ T7742] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000003 [ 132.312471][ T7742] RBP: 00007fb535ff9090 R08: 0000200000000080 R09: 0000000000000000 [ 132.312483][ T7742] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 132.312493][ T7742] R13: 00007fb535426038 R14: 00007fb535425fa0 R15: 00007fff5740c958 [ 132.312523][ T7742] [ 132.493686][ T7749] block nbd1: Unsupported socket: should be TCP or UNIX. [ 132.858077][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.868492][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.455076][ T7790] sch_tbf: peakrate 8 is lower than or equals to rate 7508080445633888606 ! [ 133.562567][ T7799] netlink: 256 bytes leftover after parsing attributes in process `syz.2.568'. [ 133.934050][ T7806] bond2: (slave veth3): Enslaving as an active interface with a down link [ 133.993020][ T7789] 8021q: adding VLAN 0 to HW filter on device bond2 [ 134.309355][ T7822] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 134.316673][ T7822] IPv6: NLM_F_CREATE should be set when creating new route [ 134.323917][ T7822] IPv6: NLM_F_CREATE should be set when creating new route [ 134.331174][ T7822] IPv6: NLM_F_CREATE should be set when creating new route [ 134.338544][ T7823] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 134.360379][ T7822] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 134.417264][ T42] IPVS: starting estimator thread 0... [ 134.516302][ T7833] IPVS: using max 27 ests per chain, 64800 per kthread [ 134.694623][ T7849] FAULT_INJECTION: forcing a failure. [ 134.694623][ T7849] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 134.729025][ T7849] CPU: 1 UID: 0 PID: 7849 Comm: syz.4.577 Not tainted syzkaller #0 PREEMPT(full) [ 134.729072][ T7849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 134.729083][ T7849] Call Trace: [ 134.729091][ T7849] [ 134.729098][ T7849] dump_stack_lvl+0xe8/0x150 [ 134.729131][ T7849] should_fail_ex+0x40c/0x560 [ 134.729161][ T7849] _copy_from_user+0x2d/0xb0 [ 134.729181][ T7849] memdup_user+0x5e/0xd0 [ 134.729209][ T7849] sctp_getsockopt_connectx3+0x1f7/0x360 [ 134.729229][ T7849] ? lock_sock_nested+0x6a/0x100 [ 134.729257][ T7849] ? __pfx_sctp_getsockopt_connectx3+0x10/0x10 [ 134.729281][ T7849] ? sctp_getsockopt+0x12f/0xb90 [ 134.729306][ T7849] ? __local_bh_enable_ip+0xd0/0x130 [ 134.729334][ T7849] sctp_getsockopt+0x984/0xb90 [ 134.729357][ T7849] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 134.729387][ T7849] do_sock_getsockopt+0x51d/0x7e0 [ 134.729414][ T7849] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 134.729457][ T7849] ? __fget_files+0x3a2/0x420 [ 134.729482][ T7849] ? __fget_files+0x2a/0x420 [ 134.729513][ T7849] __x64_sys_getsockopt+0x1a4/0x240 [ 134.729541][ T7849] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.729562][ T7849] do_syscall_64+0x174/0x580 [ 134.729583][ T7849] ? trace_irq_disable+0x3b/0x140 [ 134.729607][ T7849] ? clear_bhb_loop+0x40/0x90 [ 134.729629][ T7849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.729647][ T7849] RIP: 0033:0x7ff6f639e019 [ 134.729665][ T7849] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 134.729680][ T7849] RSP: 002b:00007ff6f45f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 134.729700][ T7849] RAX: ffffffffffffffda RBX: 00007ff6f6625fa0 RCX: 00007ff6f639e019 [ 134.729713][ T7849] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000003 [ 134.729724][ T7849] RBP: 00007ff6f45f6090 R08: 0000200000000080 R09: 0000000000000000 [ 134.729735][ T7849] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 134.729747][ T7849] R13: 00007ff6f6626038 R14: 00007ff6f6625fa0 R15: 00007ffeda2b6ca8 [ 134.729777][ T7849] [ 135.223421][ T7867] netlink: 4 bytes leftover after parsing attributes in process `syz.0.582'. [ 135.585029][ T7867] netlink: 4 bytes leftover after parsing attributes in process `syz.0.582'. [ 135.613506][ T50] block nbd1: Receive control failed (result -32) [ 135.613594][ T4945] block nbd1: Receive control failed (result -32) [ 135.984483][ T7890] validate_nla: 4 callbacks suppressed [ 135.984501][ T7890] netlink: 'syz.4.585': attribute type 1 has an invalid length. [ 136.160901][ T7890] bond3: (slave veth5): Enslaving as an active interface with a down link [ 136.195498][ T7896] 8021q: adding VLAN 0 to HW filter on device bond3 [ 136.227297][ T7895] sctp: [Deprecated]: syz.0.586 (pid 7895) Use of int in max_burst socket option. [ 136.227297][ T7895] Use struct sctp_assoc_value instead [ 136.514721][ T7909] netlink: 64 bytes leftover after parsing attributes in process `syz.2.589'. [ 136.554274][ T7909] netlink: 'syz.2.589': attribute type 2 has an invalid length. [ 136.569013][ T7909] netlink: 'syz.2.589': attribute type 2 has an invalid length. [ 136.578906][ T7909] netlink: 'syz.2.589': attribute type 2 has an invalid length. [ 136.589561][ T7912] FAULT_INJECTION: forcing a failure. [ 136.589561][ T7912] name failslab, interval 1, probability 0, space 0, times 0 [ 136.603592][ T7912] CPU: 1 UID: 0 PID: 7912 Comm: syz.1.590 Not tainted syzkaller #0 PREEMPT(full) [ 136.603614][ T7912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 136.603624][ T7912] Call Trace: [ 136.603631][ T7912] [ 136.603638][ T7912] dump_stack_lvl+0xe8/0x150 [ 136.603669][ T7912] should_fail_ex+0x40c/0x560 [ 136.603707][ T7912] should_failslab+0xa8/0x100 [ 136.603736][ T7912] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 136.603757][ T7912] ? sctp_get_port_local+0x6bd/0x1700 [ 136.603778][ T7912] ? sctp_get_port_local+0x6bd/0x1700 [ 136.603807][ T7912] sctp_get_port_local+0x6bd/0x1700 [ 136.603841][ T7912] ? __pfx_sctp_get_port_local+0x10/0x10 [ 136.603866][ T7912] ? sctp_bind_addr_match+0x30/0x2b0 [ 136.603884][ T7912] ? sctp_bind_addr_match+0x28b/0x2b0 [ 136.603908][ T7912] sctp_do_bind+0x4d9/0x9a0 [ 136.603940][ T7912] sctp_connect_new_asoc+0x270/0x6b0 [ 136.603970][ T7912] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 136.603998][ T7912] ? sctp_get_af_specific+0x29/0x80 [ 136.604016][ T7912] ? sctp_inet6_send_verify+0x80/0x300 [ 136.604034][ T7912] ? sctp_endpoint_lookup_assoc+0xd1/0x260 [ 136.604061][ T7912] __sctp_connect+0x5cb/0xdc0 [ 136.604095][ T7912] ? __pfx___sctp_connect+0x10/0x10 [ 136.604118][ T7912] ? security_sctp_bind_connect+0x7e/0x2c0 [ 136.604148][ T7912] ? __sctp_setsockopt_connectx+0xc7/0x190 [ 136.604179][ T7912] sctp_getsockopt_connectx3+0x227/0x360 [ 136.604197][ T7912] ? lock_sock_nested+0x6a/0x100 [ 136.604225][ T7912] ? __pfx_sctp_getsockopt_connectx3+0x10/0x10 [ 136.604249][ T7912] ? sctp_getsockopt+0x12f/0xb90 [ 136.604274][ T7912] ? __local_bh_enable_ip+0xd0/0x130 [ 136.604301][ T7912] sctp_getsockopt+0x984/0xb90 [ 136.604323][ T7912] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 136.604351][ T7912] do_sock_getsockopt+0x51d/0x7e0 [ 136.604376][ T7912] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 136.604413][ T7912] ? __fget_files+0x3a2/0x420 [ 136.604439][ T7912] ? __fget_files+0x2a/0x420 [ 136.604471][ T7912] __x64_sys_getsockopt+0x1a4/0x240 [ 136.604500][ T7912] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.604521][ T7912] do_syscall_64+0x174/0x580 [ 136.604543][ T7912] ? trace_irq_disable+0x3b/0x140 [ 136.604567][ T7912] ? clear_bhb_loop+0x40/0x90 [ 136.604591][ T7912] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.604610][ T7912] RIP: 0033:0x7f923a99e019 [ 136.604628][ T7912] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 136.604643][ T7912] RSP: 002b:00007f923b948028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 136.604661][ T7912] RAX: ffffffffffffffda RBX: 00007f923ac25fa0 RCX: 00007f923a99e019 [ 136.604675][ T7912] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000003 [ 136.604685][ T7912] RBP: 00007f923b948090 R08: 0000200000000080 R09: 0000000000000000 [ 136.604705][ T7912] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 136.604716][ T7912] R13: 00007f923ac26038 R14: 00007f923ac25fa0 R15: 00007fff83e18838 [ 136.604745][ T7912] [ 137.022838][ T7916] netlink: 'syz.4.591': attribute type 3 has an invalid length. [ 137.341109][ T7931] netlink: 20 bytes leftover after parsing attributes in process `syz.4.595'. [ 137.357511][ T7928] netlink: 'syz.0.598': attribute type 3 has an invalid length. [ 137.390933][ T7931] netlink: 20 bytes leftover after parsing attributes in process `syz.4.595'. [ 137.419770][ T7938] netlink: 112 bytes leftover after parsing attributes in process `syz.3.596'. [ 137.760722][ T7952] netlink: 'syz.2.601': attribute type 1 has an invalid length. [ 137.849446][ T7965] netlink: 28 bytes leftover after parsing attributes in process `syz.0.604'. [ 137.858728][ T7965] netlink: 'syz.0.604': attribute type 7 has an invalid length. [ 137.867791][ T7965] netlink: 'syz.0.604': attribute type 8 has an invalid length. [ 137.875826][ T7965] netlink: 4 bytes leftover after parsing attributes in process `syz.0.604'. [ 137.928038][ T7968] FAULT_INJECTION: forcing a failure. [ 137.928038][ T7968] name failslab, interval 1, probability 0, space 0, times 0 [ 137.941532][ T7968] CPU: 1 UID: 0 PID: 7968 Comm: syz.1.605 Not tainted syzkaller #0 PREEMPT(full) [ 137.941557][ T7968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 137.941568][ T7968] Call Trace: [ 137.941575][ T7968] [ 137.941582][ T7968] dump_stack_lvl+0xe8/0x150 [ 137.941615][ T7968] should_fail_ex+0x40c/0x560 [ 137.941645][ T7968] should_failslab+0xa8/0x100 [ 137.941674][ T7968] __kmalloc_cache_noprof+0xa8/0x660 [ 137.941725][ T7968] ? sctp_add_bind_addr+0x8c/0x370 [ 137.941745][ T7968] ? sctp_add_bind_addr+0x8c/0x370 [ 137.941764][ T7968] ? __pfx_sctp_get_port_local+0x10/0x10 [ 137.941791][ T7968] sctp_add_bind_addr+0x8c/0x370 [ 137.941812][ T7968] ? sctp_auto_asconf_init+0x14d/0x1d0 [ 137.941839][ T7968] sctp_do_bind+0x597/0x9a0 [ 137.941870][ T7968] sctp_connect_new_asoc+0x270/0x6b0 [ 137.941895][ T7968] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 137.941925][ T7968] ? sctp_get_af_specific+0x29/0x80 [ 137.941943][ T7968] ? sctp_inet6_send_verify+0x80/0x300 [ 137.941961][ T7968] ? sctp_endpoint_lookup_assoc+0xd1/0x260 [ 137.941988][ T7968] __sctp_connect+0x5cb/0xdc0 [ 137.942023][ T7968] ? __pfx___sctp_connect+0x10/0x10 [ 137.942045][ T7968] ? security_sctp_bind_connect+0x7e/0x2c0 [ 137.942077][ T7968] ? __sctp_setsockopt_connectx+0xc7/0x190 [ 137.942109][ T7968] sctp_getsockopt_connectx3+0x227/0x360 [ 137.942127][ T7968] ? lock_sock_nested+0x6a/0x100 [ 137.942155][ T7968] ? __pfx_sctp_getsockopt_connectx3+0x10/0x10 [ 137.942179][ T7968] ? sctp_getsockopt+0x12f/0xb90 [ 137.942203][ T7968] ? __local_bh_enable_ip+0xd0/0x130 [ 137.942225][ T7968] sctp_getsockopt+0x984/0xb90 [ 137.942243][ T7968] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 137.942270][ T7968] do_sock_getsockopt+0x51d/0x7e0 [ 137.942299][ T7968] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 137.942336][ T7968] ? __fget_files+0x3a2/0x420 [ 137.942361][ T7968] ? __fget_files+0x2a/0x420 [ 137.942393][ T7968] __x64_sys_getsockopt+0x1a4/0x240 [ 137.942420][ T7968] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.942441][ T7968] do_syscall_64+0x174/0x580 [ 137.942465][ T7968] ? clear_bhb_loop+0x40/0x90 [ 137.942488][ T7968] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.942506][ T7968] RIP: 0033:0x7f923a99e019 [ 137.942523][ T7968] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 137.942539][ T7968] RSP: 002b:00007f923b948028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 137.942558][ T7968] RAX: ffffffffffffffda RBX: 00007f923ac25fa0 RCX: 00007f923a99e019 [ 137.942570][ T7968] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000003 [ 137.942581][ T7968] RBP: 00007f923b948090 R08: 0000200000000080 R09: 0000000000000000 [ 137.942593][ T7968] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 137.942603][ T7968] R13: 00007f923ac26038 R14: 00007f923ac25fa0 R15: 00007fff83e18838 [ 137.942631][ T7968] [ 138.437667][ T7978] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 138.595882][ T7985] netlink: 64 bytes leftover after parsing attributes in process `syz.4.607'. [ 138.615459][ T7985] netlink: 'syz.4.607': attribute type 2 has an invalid length. [ 138.635876][ T7963] bond5: (slave veth7): Enslaving as an active interface with a down link [ 138.688546][ T7965] erspan0: entered promiscuous mode [ 138.712525][ T7965] gretap0: entered promiscuous mode [ 138.744624][ T7965] erspan0: left promiscuous mode [ 138.764851][ T7965] gretap0: left promiscuous mode [ 138.780249][ T7993] IPv6: NLM_F_CREATE should be specified when creating new route [ 138.812029][ T7969] 8021q: adding VLAN 0 to HW filter on device bond5 [ 139.114877][ T8005] netlink: 40 bytes leftover after parsing attributes in process `syz.2.614'. [ 139.284869][ T8009] v: renamed from veth0_vlan [ 139.452196][ T8018] FAULT_INJECTION: forcing a failure. [ 139.452196][ T8018] name failslab, interval 1, probability 0, space 0, times 0 [ 139.555772][ T8018] CPU: 0 UID: 0 PID: 8018 Comm: syz.2.616 Not tainted syzkaller #0 PREEMPT(full) [ 139.555800][ T8018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 139.555810][ T8018] Call Trace: [ 139.555817][ T8018] [ 139.555824][ T8018] dump_stack_lvl+0xe8/0x150 [ 139.555856][ T8018] should_fail_ex+0x40c/0x560 [ 139.555882][ T8018] should_failslab+0xa8/0x100 [ 139.555910][ T8018] __kmalloc_cache_noprof+0xa8/0x660 [ 139.555934][ T8018] ? sctp_association_new+0x89/0x25d0 [ 139.555957][ T8018] ? sctp_association_new+0x89/0x25d0 [ 139.555984][ T8018] sctp_association_new+0x89/0x25d0 [ 139.556018][ T8018] sctp_connect_new_asoc+0x2e4/0x6b0 [ 139.556046][ T8018] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 139.556075][ T8018] ? sctp_get_af_specific+0x29/0x80 [ 139.556093][ T8018] ? sctp_inet6_send_verify+0x80/0x300 [ 139.556111][ T8018] ? sctp_endpoint_lookup_assoc+0xd1/0x260 [ 139.556152][ T8018] __sctp_connect+0x5cb/0xdc0 [ 139.556181][ T8018] ? __pfx___sctp_connect+0x10/0x10 [ 139.556202][ T8018] ? security_sctp_bind_connect+0x7e/0x2c0 [ 139.556230][ T8018] ? __sctp_setsockopt_connectx+0xc7/0x190 [ 139.556260][ T8018] sctp_getsockopt_connectx3+0x227/0x360 [ 139.556278][ T8018] ? lock_sock_nested+0x6a/0x100 [ 139.556306][ T8018] ? __pfx_sctp_getsockopt_connectx3+0x10/0x10 [ 139.556340][ T8018] ? sctp_getsockopt+0x12f/0xb90 [ 139.556364][ T8018] ? __local_bh_enable_ip+0xd0/0x130 [ 139.556392][ T8018] sctp_getsockopt+0x984/0xb90 [ 139.556415][ T8018] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 139.556443][ T8018] do_sock_getsockopt+0x51d/0x7e0 [ 139.556470][ T8018] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 139.556508][ T8018] ? __fget_files+0x3a2/0x420 [ 139.556533][ T8018] ? __fget_files+0x2a/0x420 [ 139.556565][ T8018] __x64_sys_getsockopt+0x1a4/0x240 [ 139.556593][ T8018] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.556613][ T8018] do_syscall_64+0x174/0x580 [ 139.556637][ T8018] ? clear_bhb_loop+0x40/0x90 [ 139.556660][ T8018] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.556680][ T8018] RIP: 0033:0x7f1bb8f9e019 [ 139.556698][ T8018] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 139.556713][ T8018] RSP: 002b:00007f1bb9f3f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 139.556733][ T8018] RAX: ffffffffffffffda RBX: 00007f1bb9225fa0 RCX: 00007f1bb8f9e019 [ 139.556747][ T8018] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000003 [ 139.556758][ T8018] RBP: 00007f1bb9f3f090 R08: 0000200000000080 R09: 0000000000000000 [ 139.556769][ T8018] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 139.556780][ T8018] R13: 00007f1bb9226038 R14: 00007f1bb9225fa0 R15: 00007fff281e3858 [ 139.556811][ T8018] [ 140.271268][ T8039] __nla_validate_parse: 1 callbacks suppressed [ 140.271287][ T8039] netlink: 4 bytes leftover after parsing attributes in process `syz.1.620'. [ 140.440080][ T8039] team0 (unregistering): Port device team_slave_0 removed [ 140.512371][ T8039] team0 (unregistering): Port device team_slave_1 removed [ 140.834706][ T8057] bond3: (slave veth5): Enslaving as an active interface with a down link [ 140.923811][ T8050] 8021q: adding VLAN 0 to HW filter on device bond3 [ 140.982730][ T8071] veth0_macvtap: entered allmulticast mode [ 141.012843][ T8071] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 141.406761][ T8093] netlink: 64 bytes leftover after parsing attributes in process `syz.2.632'. [ 141.440805][ T8093] validate_nla: 7 callbacks suppressed [ 141.440823][ T8093] netlink: 'syz.2.632': attribute type 2 has an invalid length. [ 141.486099][ T8093] netlink: 'syz.2.632': attribute type 2 has an invalid length. [ 141.571136][ T8093] netlink: 'syz.2.632': attribute type 2 has an invalid length. [ 141.684324][ T8106] netlink: 'syz.0.635': attribute type 64 has an invalid length. [ 141.702355][ T8098] veth0: entered promiscuous mode [ 141.708767][ T5290] v: left promiscuous mode [ 141.762407][ T8098] veth0: left promiscuous mode [ 141.774791][ T8106] netlink: 12 bytes leftover after parsing attributes in process `syz.0.635'. [ 141.798769][ T42] v: entered promiscuous mode [ 141.814272][ T8106] block nbd2: Unsupported socket: should be TCP or UNIX. [ 142.267188][ T8131] ieee802154 phy0 wpan0: encryption failed: -22 [ 142.277811][ T8127] netlink: 8 bytes leftover after parsing attributes in process `syz.2.641'. [ 142.338211][ T8137] netlink: 'syz.2.641': attribute type 16 has an invalid length. [ 142.801025][ T8152] 8021q: VLANs not supported on ip6tnl0 [ 142.855781][ T8159] netlink: 64 bytes leftover after parsing attributes in process `syz.1.647'. [ 142.887920][ T8159] netlink: 'syz.1.647': attribute type 2 has an invalid length. [ 142.911875][ T8159] netlink: 'syz.1.647': attribute type 2 has an invalid length. [ 142.952374][ T8159] netlink: 'syz.1.647': attribute type 2 has an invalid length. [ 143.076081][ T8166] netlink: 12 bytes leftover after parsing attributes in process `syz.3.650'. [ 143.902745][ T8214] netlink: 64 bytes leftover after parsing attributes in process `syz.1.661'. [ 143.951354][ T8214] netlink: 'syz.1.661': attribute type 2 has an invalid length. [ 143.987867][ T8214] netlink: 'syz.1.661': attribute type 2 has an invalid length. [ 144.032555][ T8220] netlink: 164 bytes leftover after parsing attributes in process `syz.0.664'. [ 144.063710][ T8220] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 144.086106][ T8220] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 144.103377][ T8220] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 144.453967][ T8231] netlink: 224 bytes leftover after parsing attributes in process `syz.4.668'. [ 144.744739][ T8231] nbd1: detected capacity change from 0 to 127 [ 144.765311][ T1642] block nbd1: Dead connection, failed to find a fallback [ 144.775546][ T1642] block nbd1: shutting down sockets [ 144.783987][ T1642] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 144.794363][ T11] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 144.794769][ T11] Buffer I/O error on dev nbd1, logical block 1, async page read [ 144.807167][ T1642] Buffer I/O error on dev nbd1, logical block 0, async page read [ 144.821724][ T1642] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 2 prio class 2 [ 144.832514][ T1642] Buffer I/O error on dev nbd1, logical block 2, async page read [ 144.842095][ T1642] Buffer I/O error on dev nbd1, logical block 3, async page read [ 144.852374][ T1642] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 144.862681][ T1642] Buffer I/O error on dev nbd1, logical block 0, async page read [ 144.870777][ T1642] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 3 prio class 2 [ 144.880438][ T1642] Buffer I/O error on dev nbd1, logical block 1, async page read [ 144.888754][ T1642] Buffer I/O error on dev nbd1, logical block 2, async page read [ 144.896661][ T1642] Buffer I/O error on dev nbd1, logical block 3, async page read [ 144.904923][ T1642] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 144.915255][ T1642] Buffer I/O error on dev nbd1, logical block 0, async page read [ 144.923480][ T1642] Buffer I/O error on dev nbd1, logical block 1, async page read [ 144.932923][ T1642] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 144.943039][ T1642] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 3 prio class 2 [ 144.953589][ T1642] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 144.963774][ T1642] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 3 prio class 2 [ 144.978754][ T5646] ldm_validate_partition_table(): Disk read failed. [ 144.988963][ T5646] Dev nbd1: unable to read RDB block 0 [ 144.997604][ T5646] nbd1: unable to read partition table [ 145.012374][ T5646] ldm_validate_partition_table(): Disk read failed. [ 145.026675][ T5646] Dev nbd1: unable to read RDB block 0 [ 145.035741][ T5646] nbd1: unable to read partition table [ 145.062691][ T8243] xt_nat: multiple ranges no longer supported [ 145.112377][ T8249] [ 145.114757][ T8249] ====================================================== [ 145.118752][ T8243] netlink: 8 bytes leftover after parsing attributes in process `syz.2.672'. [ 145.121776][ T8249] WARNING: possible circular locking dependency detected [ 145.121802][ T8249] syzkaller #0 Not tainted [ 145.141979][ T8249] ------------------------------------------------------ [ 145.148990][ T8249] syz.4.673/8249 is trying to acquire lock: [ 145.154870][ T8249] ffffffff8ec848e0 (fs_reclaim){+.+.}-{0:0}, at: __kmalloc_noprof+0xbc/0x720 [ 145.163665][ T8249] [ 145.163665][ T8249] but task is already holding lock: [ 145.171019][ T8249] ffffffff8e9f6d00 (wq_pool_mutex){+.+.}-{4:4}, at: __alloc_workqueue+0xa9c/0x2060 [ 145.180337][ T8249] [ 145.180337][ T8249] which lock already depends on the new lock. [ 145.180337][ T8249] [ 145.190763][ T8249] [ 145.190763][ T8249] the existing dependency chain (in reverse order) is: [ 145.199769][ T8249] [ 145.199769][ T8249] -> #8 (wq_pool_mutex){+.+.}-{4:4}: [ 145.207239][ T8249] __mutex_lock+0x19d/0x1550 [ 145.212351][ T8249] __alloc_workqueue+0xa9c/0x2060 [ 145.217896][ T8249] alloc_workqueue_noprof+0xe3/0x210 [ 145.223715][ T8249] padata_alloc+0xbe/0x360 [ 145.228648][ T8249] pcrypt_init_padata+0x27/0x100 [ 145.234095][ T8249] pcrypt_init+0x60/0xc0 [ 145.238850][ T8249] do_one_initcall+0x250/0x870 [ 145.244133][ T8249] do_initcall_level+0x10a/0x1a0 [ 145.249586][ T8249] do_initcalls+0x59/0xa0 [ 145.254428][ T8249] kernel_init_freeable+0x29d/0x3e0 [ 145.260152][ T8249] kernel_init+0x1d/0x1d0 [ 145.265004][ T8249] ret_from_fork+0x514/0xb70 [ 145.270121][ T8249] ret_from_fork_asm+0x1a/0x30 [ 145.275396][ T8249] [ 145.275396][ T8249] -> #7 (cpu_hotplug_lock){++++}-{0:0}: [ 145.283120][ T8249] cpus_read_lock+0x42/0x160 [ 145.288224][ T8249] static_key_slow_inc+0x12/0x30 [ 145.293693][ T8249] setup_udp_tunnel_sock+0x2df/0x4f0 [ 145.299505][ T8249] l2tp_tunnel_register+0xe77/0x1570 [ 145.305318][ T8249] pppol2tp_connect+0x8e3/0x18b0 [ 145.310789][ T8249] __sys_connect+0x323/0x460 [ 145.315898][ T8249] __x64_sys_connect+0x7a/0x90 [ 145.321173][ T8249] do_syscall_64+0x174/0x580 [ 145.326287][ T8249] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.332705][ T8249] [ 145.332705][ T8249] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 145.340448][ T8249] lock_sock_nested+0x41/0x100 [ 145.345738][ T8249] inet_shutdown+0x6a/0x390 [ 145.350757][ T8249] nbd_mark_nsock_dead+0x2cb/0x550 [ 145.356420][ T8249] recv_work+0x1cee/0x1e10 [ 145.361356][ T8249] process_scheduled_works+0xa8e/0x14e0 [ 145.367415][ T8249] worker_thread+0xa47/0xfb0 [ 145.372611][ T8249] kthread+0x388/0x470 [ 145.377199][ T8249] ret_from_fork+0x514/0xb70 [ 145.382310][ T8249] ret_from_fork_asm+0x1a/0x30 [ 145.387618][ T8249] [ 145.387618][ T8249] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 145.395266][ T8249] __mutex_lock+0x19d/0x1550 [ 145.400386][ T8249] nbd_queue_rq+0x373/0x1150 [ 145.405492][ T8249] blk_mq_dispatch_rq_list+0x499/0x1990 [ 145.411554][ T8249] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 145.418407][ T8249] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 145.424916][ T8249] blk_mq_run_work_fn+0x16c/0x300 [ 145.430468][ T8249] process_scheduled_works+0xa8e/0x14e0 [ 145.436529][ T8249] worker_thread+0xa47/0xfb0 [ 145.441652][ T8249] kthread+0x388/0x470 [ 145.446255][ T8249] ret_from_fork+0x514/0xb70 [ 145.451383][ T8249] ret_from_fork_asm+0x1a/0x30 [ 145.456667][ T8249] [ 145.456667][ T8249] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 145.463906][ T8249] __mutex_lock+0x19d/0x1550 [ 145.469017][ T8249] nbd_queue_rq+0xc1/0x1150 [ 145.474038][ T8249] blk_mq_dispatch_rq_list+0x499/0x1990 [ 145.480104][ T8249] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 145.486957][ T8249] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 145.493469][ T8249] blk_mq_run_work_fn+0x16c/0x300 [ 145.499098][ T8249] process_scheduled_works+0xa8e/0x14e0 [ 145.505199][ T8249] worker_thread+0xa47/0xfb0 [ 145.510411][ T8249] kthread+0x388/0x470 [ 145.515025][ T8249] ret_from_fork+0x514/0xb70 [ 145.520158][ T8249] ret_from_fork_asm+0x1a/0x30 [ 145.525466][ T8249] [ 145.525466][ T8249] -> #3 (set->srcu){.+.+}-{0:0}: [ 145.532601][ T8249] __synchronize_srcu+0xc9/0x2f0 [ 145.538059][ T8249] elevator_switch+0x1e8/0x7b0 [ 145.543338][ T8249] elevator_change+0x2fa/0x480 [ 145.548621][ T8249] elevator_set_default+0x375/0x440 [ 145.554339][ T8249] blk_register_queue+0x3f3/0x4e0 [ 145.559882][ T8249] __add_disk+0x6cb/0xe30 [ 145.564799][ T8249] add_disk_fwnode+0x100/0x3a0 [ 145.570077][ T8249] nbd_dev_add+0x733/0xb60 [ 145.575006][ T8249] nbd_init+0x15f/0x1e0 [ 145.579675][ T8249] do_one_initcall+0x250/0x870 [ 145.584986][ T8249] do_initcall_level+0x10a/0x1a0 [ 145.590456][ T8249] do_initcalls+0x59/0xa0 [ 145.595299][ T8249] kernel_init_freeable+0x29d/0x3e0 [ 145.601038][ T8249] kernel_init+0x1d/0x1d0 [ 145.605888][ T8249] ret_from_fork+0x514/0xb70 [ 145.610995][ T8249] ret_from_fork_asm+0x1a/0x30 [ 145.616271][ T8249] [ 145.616271][ T8249] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 145.624083][ T8249] __mutex_lock+0x19d/0x1550 [ 145.629405][ T8249] elevator_change+0x1af/0x480 [ 145.634704][ T8249] elevator_set_none+0xb5/0x140 [ 145.640092][ T8249] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 145.646423][ T8249] nbd_start_device+0x189/0xb30 [ 145.651784][ T8249] nbd_genl_connect+0x1597/0x1c10 [ 145.657329][ T8249] genl_family_rcv_msg_doit+0x233/0x340 [ 145.663396][ T8249] genl_rcv_msg+0x614/0x7a0 [ 145.668417][ T8249] netlink_rcv_skb+0x226/0x4a0 [ 145.673699][ T8249] genl_rcv+0x28/0x40 [ 145.678198][ T8249] netlink_unicast+0x7bb/0x940 [ 145.683470][ T8249] netlink_sendmsg+0x813/0xb40 [ 145.688766][ T8249] sock_sendmsg_nosec+0x13a/0x180 [ 145.694323][ T8249] ____sys_sendmsg+0x54e/0x850 [ 145.699612][ T8249] ___sys_sendmsg+0x2a5/0x360 [ 145.704817][ T8249] __x64_sys_sendmsg+0x1b1/0x290 [ 145.710280][ T8249] do_syscall_64+0x174/0x580 [ 145.715413][ T8249] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.721831][ T8249] [ 145.721831][ T8249] -> #1 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 145.730444][ T8249] blk_alloc_queue+0x544/0x690 [ 145.735740][ T8249] __blk_mq_alloc_disk+0x194/0x390 [ 145.741374][ T8249] nbd_dev_add+0x494/0xb60 [ 145.746304][ T8249] nbd_init+0x15f/0x1e0 [ 145.750973][ T8249] do_one_initcall+0x250/0x870 [ 145.756291][ T8249] do_initcall_level+0x10a/0x1a0 [ 145.761769][ T8249] do_initcalls+0x59/0xa0 [ 145.766621][ T8249] kernel_init_freeable+0x29d/0x3e0 [ 145.772345][ T8249] kernel_init+0x1d/0x1d0 [ 145.777198][ T8249] ret_from_fork+0x514/0xb70 [ 145.782308][ T8249] ret_from_fork_asm+0x1a/0x30 [ 145.787591][ T8249] [ 145.787591][ T8249] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 145.794810][ T8249] __lock_acquire+0x1520/0x2cf0 [ 145.800195][ T8249] lock_acquire+0x106/0x350 [ 145.805228][ T8249] fs_reclaim_acquire+0x71/0x100 [ 145.810698][ T8249] __kmalloc_noprof+0xbc/0x720 [ 145.815995][ T8249] apply_wqattrs_prepare+0xee/0xdc0 [ 145.821711][ T8249] __alloc_workqueue+0x117c/0x2060 [ 145.827362][ T8249] alloc_workqueue_noprof+0xe3/0x210 [ 145.833188][ T8249] nci_register_device+0x22c/0xa00 [ 145.838831][ T8249] virtual_ncidev_open+0x129/0x1a0 [ 145.844476][ T8249] misc_open+0x2d5/0x350 [ 145.849253][ T8249] chrdev_open+0x4d9/0x600 [ 145.854185][ T8249] do_dentry_open+0x816/0x1380 [ 145.859559][ T8249] vfs_open+0x3b/0x340 [ 145.864144][ T8249] path_openat+0x2e44/0x3830 [ 145.869281][ T8249] do_file_open+0x23e/0x4a0 [ 145.874326][ T8249] do_sys_openat2+0x115/0x200 [ 145.879532][ T8249] __x64_sys_openat+0x138/0x170 [ 145.884916][ T8249] do_syscall_64+0x174/0x580 [ 145.890030][ T8249] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.896439][ T8249] [ 145.896439][ T8249] other info that might help us debug this: [ 145.896439][ T8249] [ 145.906666][ T8249] Chain exists of: [ 145.906666][ T8249] fs_reclaim --> cpu_hotplug_lock --> wq_pool_mutex [ 145.906666][ T8249] [ 145.919203][ T8249] Possible unsafe locking scenario: [ 145.919203][ T8249] [ 145.926682][ T8249] CPU0 CPU1 [ 145.932038][ T8249] ---- ---- [ 145.937417][ T8249] lock(wq_pool_mutex); [ 145.941663][ T8249] lock(cpu_hotplug_lock); [ 145.948676][ T8249] lock(wq_pool_mutex); [ 145.955516][ T8249] lock(fs_reclaim); [ 145.959492][ T8249] [ 145.959492][ T8249] *** DEADLOCK *** [ 145.959492][ T8249] [ 145.967715][ T8249] 2 locks held by syz.4.673/8249: [ 145.972730][ T8249] #0: ffffffff8f47d3a0 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 145.981206][ T8249] #1: ffffffff8e9f6d00 (wq_pool_mutex){+.+.}-{4:4}, at: __alloc_workqueue+0xa9c/0x2060 [ 145.991092][ T8249] [ 145.991092][ T8249] stack backtrace: [ 145.996983][ T8249] CPU: 0 UID: 0 PID: 8249 Comm: syz.4.673 Not tainted syzkaller #0 PREEMPT(full) [ 145.997004][ T8249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 145.997013][ T8249] Call Trace: [ 145.997022][ T8249] [ 145.997029][ T8249] dump_stack_lvl+0xe8/0x150 [ 145.997057][ T8249] print_circular_bug+0x2e1/0x300 [ 145.997075][ T8249] check_noncircular+0x12e/0x150 [ 145.997092][ T8249] __lock_acquire+0x1520/0x2cf0 [ 145.997116][ T8249] ? check_path+0x21/0x40 [ 145.997129][ T8249] ? check_noncircular+0xda/0x150 [ 145.997146][ T8249] ? __kmalloc_noprof+0xbc/0x720 [ 145.997165][ T8249] lock_acquire+0x106/0x350 [ 145.997184][ T8249] ? __kmalloc_noprof+0xbc/0x720 [ 145.997204][ T8249] ? pcpu_alloc_noprof+0xde2/0x1900 [ 145.997229][ T8249] fs_reclaim_acquire+0x71/0x100 [ 145.997253][ T8249] ? __kmalloc_noprof+0xbc/0x720 [ 145.997271][ T8249] __kmalloc_noprof+0xbc/0x720 [ 145.997289][ T8249] ? pcpu_chunk_relocate+0x1d0/0x430 [ 145.997311][ T8249] ? apply_wqattrs_prepare+0xee/0xdc0 [ 145.997328][ T8249] ? apply_wqattrs_prepare+0xee/0xdc0 [ 145.997347][ T8249] apply_wqattrs_prepare+0xee/0xdc0 [ 145.997364][ T8249] ? pcpu_memcg_post_alloc_hook+0x8c/0x630 [ 145.997382][ T8249] ? pcpu_alloc_noprof+0x100f/0x1900 [ 145.997400][ T8249] ? pcpu_alloc_noprof+0x1036/0x1900 [ 145.997423][ T8249] __alloc_workqueue+0x117c/0x2060 [ 145.997449][ T8249] alloc_workqueue_noprof+0xe3/0x210 [ 145.997472][ T8249] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 145.997495][ T8249] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 145.997513][ T8249] nci_register_device+0x22c/0xa00 [ 145.997536][ T8249] ? __pfx_nci_register_device+0x10/0x10 [ 145.997555][ T8249] ? __raw_spin_lock_init+0x45/0x100 [ 145.997572][ T8249] ? __raw_spin_lock_init+0x45/0x100 [ 145.997589][ T8249] ? __init_waitqueue_head+0xa8/0x150 [ 145.997606][ T8249] virtual_ncidev_open+0x129/0x1a0 [ 145.997625][ T8249] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 145.997643][ T8249] misc_open+0x2d5/0x350 [ 145.997665][ T8249] chrdev_open+0x4d9/0x600 [ 145.997683][ T8249] ? __pfx_chrdev_open+0x10/0x10 [ 145.997699][ T8249] ? fsnotify_open_perm_and_set_mode+0x135/0x6b0 [ 145.997717][ T8249] ? __pfx_chrdev_open+0x10/0x10 [ 145.997732][ T8249] do_dentry_open+0x816/0x1380 [ 145.997762][ T8249] vfs_open+0x3b/0x340 [ 145.997779][ T8249] ? path_openat+0x2e2d/0x3830 [ 145.997794][ T8249] path_openat+0x2e44/0x3830 [ 145.997809][ T8249] ? kasan_save_track+0x3e/0x80 [ 145.997828][ T8249] ? do_sys_openat2+0xcc/0x200 [ 145.997847][ T8249] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.997869][ T8249] do_file_open+0x23e/0x4a0 [ 145.997885][ T8249] ? __pfx_do_file_open+0x10/0x10 [ 145.997906][ T8249] ? _raw_spin_unlock+0x28/0x50 [ 145.997920][ T8249] ? alloc_fd+0x651/0x6c0 [ 145.997941][ T8249] do_sys_openat2+0x115/0x200 [ 145.997960][ T8249] ? __se_sys_futex+0x3a8/0x450 [ 145.997975][ T8249] ? __pfx_do_sys_openat2+0x10/0x10 [ 145.997996][ T8249] ? rcu_is_watching+0x15/0xb0 [ 145.998011][ T8249] __x64_sys_openat+0x138/0x170 [ 145.998032][ T8249] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.998046][ T8249] do_syscall_64+0x174/0x580 [ 145.998064][ T8249] ? trace_irq_disable+0x3b/0x140 [ 145.998083][ T8249] ? clear_bhb_loop+0x40/0x90 [ 145.998099][ T8249] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.998114][ T8249] RIP: 0033:0x7ff6f639e019 [ 145.998129][ T8249] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 145.998141][ T8249] RSP: 002b:00007ff6f45f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 145.998158][ T8249] RAX: ffffffffffffffda RBX: 00007ff6f6625fa0 RCX: 00007ff6f639e019 [ 145.998169][ T8249] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 145.998179][ T8249] RBP: 00007ff6f643500c R08: 0000000000000000 R09: 0000000000000000 [ 145.998188][ T8249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 145.998197][ T8249] R13: 00007ff6f6626038 R14: 00007ff6f6625fa0 R15: 00007ffeda2b6ca8 [ 145.998214][ T8249] [ 146.488057][ T8238] validate_nla: 3 callbacks suppressed [ 146.488075][ T8238] netlink: 'syz.3.670': attribute type 6 has an invalid length.