last executing test programs: 2m44.96729469s ago: executing program 0 (id=1312): r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc) sendmsg$inet(r0, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000240)="f9", 0x1}], 0x1}, 0x4000080) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004b74ffec850000006d000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0, r1}, 0x18) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x50, 0x3, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8}, @CTA_TIMEOUT_SCTP_CLOSED={0x8}, @CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8}, @CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8}, @CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0xffffffffffffff7c}]}]}, 0x50}}, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x40010) 2m43.963957458s ago: executing program 0 (id=1324): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000001c0000000a"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000580)={'veth0_macvtap\x00', 0x0}) r6 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000a40)={0xffffffffffffffff, r5, 0x25, 0x0, @void}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r6, r3, 0x4}, 0x6) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r2, 0x495b866df80b4e6b}, 0x14}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x12, r0, 0x5a81b000) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYRESHEX=r9, @ANYRES32=r8], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) 2m43.840681196s ago: executing program 0 (id=1328): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[], 0x9c}, 0x1, 0x0, 0x0, 0x20008041}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) sendmsg$NL80211_CMD_SET_BEACON(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000000)={0x20, r3, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_IE_ASSOC_RESP={0xa, 0xe, [@ext_channel_switch={0x1c, 0x4, {0x1, 0x0, 0x9d, 0x7}}]}]}, 0x20}}, 0x0) sendmsg$NL80211_CMD_SET_POWER_SAVE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r3, 0x100, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x11) 2m43.716468925s ago: executing program 0 (id=1331): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r3 = socket(0x2a, 0x2, 0x0) bind$xdp(r3, &(0x7f00000000c0)={0x2c, 0x8, 0x0, 0x3c}, 0x10) recvmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) socket$inet6(0xa, 0x80000, 0xac0) ioctl$TUNSETNOCSUM(r4, 0xff07, 0x0) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) sendmsg$IEEE802154_SCAN_REQ(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'batadv_slave_0\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r5, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000000040)}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000180)="da9b0c3eda2f57c093696c1718855322bfca0d6dcaca4a53f19213992293b2c0d2803cd5aac6b6ca3076299dcf85f75bdeff42089581b80e030860615746bca98096a5852e47a8e2caf8fdf138af7cb02345af2a71f863ababb923ca2b3489fd1c8b2bdafbdea9854a683828918d05c4871a6f83ba969f8cc33801bbb70de8e30fabed662d967da6c6617211284c7e323f244f142eb562db4a75f17fd1d8fc55a38be34daf7cf98eee192041551186b5a51f341b972902739ce251fce1cc07c355441c0c1e2bdbac367f4fa2c26a638e91c8d8e122ee9741b12dd832e7a46f4db8ddbe75edaa0cd5c82823cdc2bef241a11b4094acdd029290d1b544d96a", 0xfe}, {&(0x7f0000000280)="70b7ef0756c3a0232b4401aaf5b80d9714c73bd7b27c0eeea901076ebea90921955ce4c387ea9776475a02437227779e0dd50582549ed3bf3612af8242441dbe7b2b7464cc1550d8cfdb5811ed2db3aa276848c51e24cdb162ef97dda98c48e78cc0952ba8ff771ea9e2a7bcc18eca6f0a52d3833de8ca31fae0131e6c4651f355aeced059fe067799eae6af3d3cff7f90254bc7856a238e9c27ab2a7ecc141d2c0c6a433fdf571bd27913b22d5be477ee80874a4d5ddd3f1d9750f96cbf3a021079fb160ef2a88459fab884c3f09f88d124", 0xd2}, {&(0x7f0000000380)="19e4c73c19a34fb023323c33368cd6432e0b895f1a4ec530dfb703b09d0fe7a5551405c383b5ebd4b1fabbc83e4256d43280397a45b90fd73501c5edf6dfec4fbe9557054500d69a11aa6affb524ae760455ad1acafc1552b7d7d62e78e2aaed4ea2c04919822a9752b222e762ad20f5", 0x70}], 0x3}}, {{&(0x7f0000000480)=@sco, 0x80, &(0x7f0000000880)=[{&(0x7f0000000500)="35cc140d86ed9c35e405e196eb084eb76542771ddeb7361d79071c30cc4c12f4fa8b5f76fbf00a3243043b6e82614aace0fd99390719405b97b09816c72550355d434f886701", 0x46}, {&(0x7f0000000580)="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", 0xfa}, {&(0x7f00000006c0)="19f2dc3385a07caac21065", 0xb}, {&(0x7f0000000700)="ea300c2f5a1f92e4fe6ddb72b63e18960b246b0ae7ee167d1b628326611e0935f2e65965d7059a82c2764cb94fbe04a2268b65952550249c0240648c8fbd124fcb6cc4ef026b269070c000d7432ba67c6ee678c0bce1008f63f68ba421903a4bfa8e901882a6fc71c36f489be9bf7361c576fd4586ac8d6794ebfae55f00cc285c43faeb76b5235c6a24848623acc4312e4af7b78e6c65d6a8cfb71a415140149dd411e2813da22053a38c0ae2ccc7d94e9902b0f21794bc0ca5d2e2bda4c11e08b46646d2fec6318025228de16d", 0xce}, {&(0x7f0000000840)="0d430e82d23aa1b3f949d9e72b353b397d9e101c595183ac61edcebb51e75f1fca150808d1cdd35765", 0x29}], 0x5, &(0x7f0000000900)=[{0xc0, 0x101, 0x10000, "97527575b6ef11a31a626e494a41e5f9506e74361012409bd633010a77a6c2f92252293b79f722c7e838504662c01086c169ff5f39d6237b5c4aa05af94690ecf491cce94a0d9930d6bf014ba6c453703e7747330ace411eefac3ccce6e059338fada079e89ed7cc43fa179f3a3fd53c6e9104eba7ee54fc76cd01fffbc87db17f15e1523d0e08679275009995bcfd8b9e03f2fe7f7039c59af1c3f11e0d10f039bad2bbf389fbd36705808a1e"}], 0xc0}}], 0x3, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000002540)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000a000000080000000240000f"], 0x0, 0x46, 0x0, 0x6}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="f200000004000000080000000100000080000000", @ANYRES32=r4, @ANYBLOB="b30500"/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="04000000030000000200"/28], 0x50) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'macsec0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000a00)=ANY=[@ANYBLOB="54000000100003052bbd7000249d020000000000", @ANYRES32=0x0, @ANYBLOB="1544010001800000240012800b0001006d616373656300001400028005000c0001000000080005000400000008000500", @ANYRES32=r6], 0x54}}, 0x800) 2m42.834640486s ago: executing program 0 (id=1347): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000002c0)="26fe", 0x2}], 0x1, 0x0, 0x0, 0x40010}, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x123) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000740)={0x10, 0x453, 0x0, 0x70bd27, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0x80}, 0x800) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r5, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f0000000040)={0x78, 0xf, 0x8, 0x201, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x8}, [@generic="48de0550bb74f08dbf628f98aa7521279d0ea8058c34d85bc22d9b3bc818b0d9a17d01a20c68e0552902c74790c060aa7ded0a2ff8d392d373c535bd2eff3bda88beb4861fe787d9914dc6331271e96515f60124b631f46b7492c6424f2c58070b"]}, 0x78}, 0x1, 0x0, 0x0, 0x20000810}, 0x840) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002c00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x76a9bba1a690db0f, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3cb140bb}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_POLICY={0x8}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendto$inet6(r3, &(0x7f00000009c0)='\\', 0x1, 0x20000081, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) writev(r4, &(0x7f0000000cc0)=[{&(0x7f0000000300)="9e1748eab73244b2d53dae08db7bf0043b77ad7bdb28e8217a74d668dab722cad2655b03d0de91499d48e66d65e6d1afdff8b8285262f111a683ff727e7424131e6e24da128e01f172ccdb35bf450e61c2541879181a2297d50ea7dfa35bb03bddc98ce7c65b19c05cf142fc127f57e860444bf799b2296379a8605bc83f119950eee9dc2425c423daebf01e892c613699349f36d184bbc108391ae7229d94ef0eda0341551acffad7bcc4bfe20c8559cbf02e77", 0xb4}, {&(0x7f00000003c0)="6b4bd797e7fa12c5dd6c683bb345212586404eeada4809a882278ab1079d40c97e9b39dd086da03faf2d6f3cb90f712d42d3395e7c18f1941c37654eb4f23480d1b3fc3a416276b71123dd900fab0d36317b3a3e3ca1bfe7864990adbfaf2d6f90ff655c3d20be686e87e73263d99b969ac351d61bd20d5cbc2598b1b59aa72809e0f38b90c6920ee279904e823a4bd57990efa57060cfc0de1778579b61700d70654020dbe4f869c6eb183d740ed2546fc6a7a36a84586cec0df5584a56b768efcad23c5274c6e19237244f0a1ebd2edbe65716e6c5cba3", 0xd8}, {&(0x7f0000000000)="b9ff0ff74e1d8009", 0x8}, {&(0x7f0000000600)="dbdf3060d0a884f431d2ceb9f49f17cf22abe2a9e920633b82cc534329feb206d1879f2e73ffe4311f06e1ff5f9d46d9950f2f38977309fbe220c5e13bfc32bd591028f9e746b765bf8d7bf6692cdf5621f4c3342bc3438b79698afdb9bfa0b8946655ed7b5fe362a8cfa018cafbeac1ff4fe2a05136db81514aead965e20119062c10f84204bae9eab709cbeae9304580ed8efa8b254b78c7809cf97568cec1636de9809fde2dea805978bd4cabaff889f895d663ac610ac8943a0cb08787ea64845ff55f620ecea622e3ae1449fb57d5fda53d9893199c", 0xd8}, {&(0x7f0000000840)="e39c0f7d22a7223e5269f92828e7010638b040a2384676c08af04da26d10cfd45fe5c9945be9dec101a0e3cb8d11e9c1ea5b3f86f1e63da1857849c19e16c8a8dc60d442737f5e88ab36d1e6be55432944862511325db9e7e47a6b98965a837f8a60bb6685eb2e601e2273982ec006fbb0d15a855f1e8faa5d991e183b208195b410504e7dea11029e386c185d5a744146c178a1ad3eed32461cf3b1333a141a77afb2f5fc86ddbc4adc047cfda7d78b39c43f2a0bc288539baa49a2fbb3685343a9f256d0852f1afe374434bda6", 0xce}, {&(0x7f0000000a00)="57f181c05580a44fce53d0626b510d75f88d0e26b09b1b726773576f40fa0f744bed2947d1ebcdefa31f113b3e3622480a5269b9bf43848c6ffc6db43390b71fbab8e28b7e6347d7031f93d051f0e1f9c34106344728ef51d97387ed438a60c305562a641cc8f639593c453b9b824e020a36247f5bac29bac2ed5893f3858f4f7fca589adf6b6c7e0480279e27450dfc81d89ad713eff10c34848a56c5366ad7a0478032297eaa68d72183907dde8605787d32613e4ef07a061d124a0dee3a8a5328207129ccbbebbe9ba89b2aaeb76a45747e7234de", 0xd6}, {&(0x7f0000001700)="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", 0x1000}, {&(0x7f0000000b00)="38a00adbe774e5b1a3d6679205c6175f0c5a566990182c108e2754f66e3da4ef5e5de73baf81b11f7f06a5e3c609528a5269d47f67d93d6a4f0ce6df3171a612cacd95419cb4cc0d646ea129e3507a4b15ed9d97dece87b4032037372f775e2386be10c541cfb792644088265e5283a7cbb58893715fddafe599f53dde1fd8f61c73122cee6915bfdf2e97103df505c5c92627b35e808e255316225e875bd0715d6ed102b50ddcc621ad86cd54f8733828a0a1e864da7ae4a5f280c0e34fb5adcf76040563", 0xc5}, {&(0x7f0000000c00)="4d02a9f5d997b882827061570e3f01b2b3dcb1e9e2421438a325dcffe88f12e633ae5ab192c0da88573e6c4213e8dd91098690e584d8ac6161cdc81cac1b09d6905c16f0067fe0856817f1b0496b997fa72258e3a4d8277b2da25fa732b3b2079321f984ef8b414424cca1f77e74a040890cfb8a4567a49394183493da16b3fa05d1d75a0d51da42196a8695e81acfc9613fc747f27da6", 0x97}], 0x9) 2m41.843640024s ago: executing program 0 (id=1364): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x14, 0x25, 0x1, 0xfffffffd, 0x0, {0x6, 0x2}}, 0x14}}, 0x20000090) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x2, 0x0, 0x3, 0xc, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x9, 0x8, 0x0, "e9"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x60}, 0x1, 0x7}, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r4 = accept(r1, &(0x7f00000002c0)=@pppoe, &(0x7f0000000380)=0x80) sendmsg$kcm(r4, &(0x7f0000000680)={&(0x7f0000000440)=@hci={0x1f, 0x1, 0x4}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000004c0)="acd7d1951f67ee431099e084bf1fe9fce9075e086c5a45c36e7700a8fe53058d8130880b209325a44c6bff68dd9916a87c17c4aa4da4778e11c59304efb76c7ea6850e6beec91c769d69a04574ceab09644d70e4665a956f4676fb7693605950ca66b37ddc3de9efd2fdf3868697b38b3966cddef12ea29643d1d3cdb68e47ad4c8defd401d6492b23b6b8690751addb108cce36dc1489b638a4753d0c90588ab36ed7d6d1ad2755cae92559", 0xac}, {&(0x7f0000000580)="bc59f6420ea0bae4d7f56297bff18930ee0544dec2bdca39d70a3cb3690b3934af418906e556fa5cf1a6b1a9f62c1d60d7ef10539672c825e5416f51a55976226a88f1e5b5846f5d8e7a34776a1e32f2ba93f33160fb98de2a7b220420f6b4790d8bb750afd0c0dfe29da8f030b430d21062fbd4b410b0df8e814b25dea067cf4f0d205974c1bd39a56a833d651c661af8ad486a1ab38ec770f56a3828d9b6be09f4cde784fb504fd1d135efc3aba407672ca7dcc1cc489c9e95442d4409a44319619e080fc7dba4", 0xc8}, {&(0x7f00000008c0)="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", 0x1000}], 0x3, &(0x7f00000018c0)=[{0x100, 0x109, 0x8, "f785aee679bcf2322283e2e82a83d37fb3c889b31e6b81e52ccab3f01c61654e94fc6c83f0bbcf3771484c9fbb68a4c6ba05cfb3a16d606972f877eab82322b12aab18f3be583697af990d7124a407ab39411167b77d04b2028f49a1ae3b20a35ae48ff525584667f54076566636cd1fa01e3a40d51fc348efd007914cf35c94662d96ecdc29ca32755fa1e41e41f86096694ef1bdcf29420afdb34124c2b779084bc71b1731e51f3f86f1ce9622568b8d50b7ae1ca7851e0a83189fa4e70d37bb687d605092778b9dbf69413b7423c0f63a80a5901d2b3807d6eed0c83ffbeb20c934e1f62d8f6a25d82665ff485b33"}, {0xc8, 0x10b, 0x4, "a3dbf4790be585ae76d3e3e438ceeb0fda46721d5b4b3af5b6fe974b87a4d41a81726ddfa120ac3ac4f6403a3d161f76a34fd8cc8b4175010705ea30887df0d4b52ef16f31962cbdab084d8cbcf7909a72ed5bc96c162f05a6b1c1d2a4c6472e19fbe23ad68721a9bcc622808363f940500b2b8eb86c332532b35dee31f4e0766f949b94e57aaeb448f1074eed3cb400164f67fffcf5f32a54e9655ccf2fe6de23718ea752a5369e83149dabaebc640c6d6906a44c6849ba"}, {0x48, 0x115, 0x101, "24f6d5b42f3115c1c2187b8db6e1142898168942297aae9539f0bee368a77d8f3ab29ddef7f67b42bb6123d3bb2e34775bea288971"}, {0x20, 0x107, 0x522, "6f4442a62bd19c5fa74272ec39c9a8"}, {0xd8, 0x103, 0x8001, "e79bc9066a5275adee5b299dcf44512c62774233888bd1b9bdce85bcdf5454bb0a6afd86a908505a72a6cc86c69f139e2e69b527e8d9935646d3145bb5523cc6b7de524f1bfca8c298e3e45586af72b2ec7a9602603a3f153eab4f4b365416a2b55ac08a24ef24e102ebcf377e939bde145b5599b42d5021a95a794765276d23390191ab14e9b2838b8115f5dca10a832b1dc8e8640ced1b88c6a03bf75e12478e0d6088dc5e6e12a5dc7984d775f9961e2e5d535f36abd4f37a0591c9aac8811275"}, {0xe8, 0x117, 0x40, "dd24600813f888a45bad2039863f6ea2479672a83cc3230640ba57d1b72dfa11cc81b2eb385767be8bebc7c43654b5ff4b297f23f43225411a81913be32dce92120ce5a792038710e292d92663ff8ba00c90284e970c686982fe4928f35de344549c163df02dcc356a56d6d674a2237e42ef93a8749aac975067392b0be346c42d8239d5399e8910b2a759e46b892aa030e420cc1cb7af9afe365578e9666badf8667a81e5010026f62acc32744c275349c9d0838decc672d8596f351770d8ff995b7f026da8da1a8f63445d25db3d0bba056666f3"}, {0x48, 0x104, 0x2, "38ae1e721dc6cdbc02912270940e6d644de48e31b213d702137f9ddc41684246cac017e81272704a59574fd14f7c53dbbaf94fb208"}], 0x438}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(md5)\x00'}, 0x58) close(0x4) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) r7 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r7, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x3}, 0x10) sendmsg$tipc(r7, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x804) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x34, r3, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0xd4}, 0x4040140) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x84, r3, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x200}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5a34}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x800}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x801) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r8, r10, 0x25, 0x0, @void}, 0x10) r11 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r11, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x4, 0x2, 0x1}}) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x34, 0x10, 0x401, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2049}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}]}, 0x34}}, 0x0) 2m29.532671631s ago: executing program 1 (id=1554): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 64) r2 = epoll_create1(0x0) (rerun: 64) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)={0x90000005}) (async) epoll_pwait(r2, &(0x7f0000000100)=[{}], 0x1, 0xfffeffff, 0x0, 0x443c000000000000) (async) writev(r0, &(0x7f0000000780)=[{&(0x7f00000001c0)="02a51c4fd963", 0x6}], 0x1) (async) syz_init_net_socket$ax25(0x3, 0x5, 0x8) (async) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r2, &(0x7f0000000200)={0x2000000c}) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) (async) socket$inet(0x2b, 0x801, 0x0) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) (async, rerun: 32) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000f00000a2c000000140a010200000000000000000700000a0900020073797a32000000000900020073797a3000000000140000001100010000000000000000000200000a7aa726a92bd5f0e71eaba3adbda06320ef1af82bcf85eca652aa592d7bebc9dbd370fcb0f73e65690b6a04cc14c6f423f4bea1a2f37bda0abe3d395311acd1975b387434ccdfae6ccb5c7b55c5ef2af16f06a953717e0ebeca618b23"], 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x40) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000004200090127d670000000000005000000"], 0x14}, 0x1, 0x0, 0x0, 0x44804}, 0x84) (async, rerun: 64) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES8=r3, @ANYRESHEX=r0], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x18) (async) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r6, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r8}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) (async, rerun: 32) r9 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) (rerun: 32) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r9, 0x12, 0x2, &(0x7f0000000000), &(0x7f0000000040)) 2m29.388378414s ago: executing program 1 (id=1556): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x74, r1, 0x10, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x5b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_PMK={0x14, 0xfe, "4a7cb094d76a9595b067a170c0a050ce"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_MAC={0xa}]}, 0x74}, 0x1, 0x0, 0x0, 0x24000010}, 0x80) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r0) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0xbc, r2, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x799c}]}, @TIPC_NLA_MEDIA={0x50, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x64}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_NODE={0x4c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "44a5fad0b7d9d948395512f0faa70f3a91d2d89adb7adcb43615c873cd921946"}}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x101}, 0x10) (async, rerun: 32) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) (rerun: 32) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000340)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x7ab, 0x4, 0xd20a, 0x8, 0x81}, &(0x7f0000000400)=0x98) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f0000000440)={r4, @in6={{0xa, 0x4e21, 0x799, @ipv4={'\x00', '\xff\xff', @remote}, 0xed}}, [0x3, 0x8, 0xe63, 0x2, 0x3, 0x2, 0x8, 0x1e0000000, 0x9, 0x9, 0xa, 0xfffffffffffffff9, 0x1, 0x9, 0x4]}, &(0x7f0000000540)=0x100) r6 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000580), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f00000005c0)={[{0x2b, 'devices'}, {0x2b, 'memory'}, {0x2d, 'rlimit'}, {0x2d, 'rdma'}, {0x2b, 'rlimit'}, {0x2b, 'pids'}, {0x2d, 'rlimit'}]}, 0x35) r7 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r7, &(0x7f0000000600)={0x18, 0x0, {0x3, @local, 'veth1_vlan\x00'}}, 0x1e) (async) r8 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r8, 0x84, 0x71, &(0x7f0000000640)={r4}, &(0x7f0000000680)=0x8) (async) r9 = socket(0x9, 0x800, 0x3) r10 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) (async) r11 = epoll_create1(0x0) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f00000006c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) (async) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r6, 0xc400941d, &(0x7f0000000940)={0x0, 0xfffffffffffffffe, 0x101, 0x1}) ioctl$BTRFS_IOC_RM_DEV_V2(r11, 0x5000943a, &(0x7f0000000d40)={{r8}, r12, 0x16, @inherit={0x50, &(0x7f00000008c0)={0x1, 0x1, 0x1, 0x2, {0x30, 0x7, 0xfbe1, 0x9, 0x8}, [0x7]}}, @devid=r13}) setsockopt$netrom_NETROM_T1(r9, 0x103, 0x1, &(0x7f0000001d40)=0xffff, 0x4) (async) accept$packet(r9, 0x0, &(0x7f0000001d80)) (async) getsockopt$netrom_NETROM_T2(r9, 0x103, 0x2, &(0x7f0000001dc0), &(0x7f0000001e00)=0x4) r14 = syz_genetlink_get_family_id$gtp(&(0x7f0000001e80), r0) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001f00)={&(0x7f0000001ec0)={0x1c, r14, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@GTPA_O_TEI={0x8}]}, 0x1c}}, 0x8810) (async) r15 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001f80)='syz0\x00', 0x200002, 0x0) openat$cgroup(r15, &(0x7f0000001fc0)='syz1\x00', 0x200002, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x10010, r10, 0xdaff000) (async) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000002000)) (async, rerun: 32) setsockopt$inet_sctp_SCTP_MAXSEG(r8, 0x84, 0xd, &(0x7f0000002040)=@assoc_value={r5, 0xc9}, 0x8) (rerun: 32) 2m29.374533455s ago: executing program 1 (id=1557): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f00000002c0)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x1, &(0x7f0000000000)=0xffffffb9, 0x4) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x64, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}]}, @NFTA_CHAIN_POLICY={0x8}]}], {0x14}}, 0xac}}, 0x0) socket(0x2c, 0x4, 0xac36) 2m29.260600307s ago: executing program 1 (id=1559): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x94) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28) shutdown(r1, 0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) sendfile(r1, r2, 0x0, 0xffffffff004) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x24040841}, 0x0) close(0x3) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r0, r4, 0x25, 0x0, @void}, 0x10) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x4, 0x2, 0x1}}) 2m27.680735597s ago: executing program 1 (id=1565): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) syz_emit_ethernet(0xbe, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000000800450000b00000000000119078000000000000000000004e22009c907801000000000000000000000000000000000000000000000000000000000000000000e4ff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fb8c5b46c35faf35b4a9b71b846d4fa0a31ffb504ce36ee83bd00884652e9c415e9c045e9c8035c97542575c057d836340e153449da39d58378d07ef5f330f32798d6455f16bd9f1cbc89583e5ea7aeecd"], 0x0) syz_emit_ethernet(0x9e, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000000800450000900000000000119078000000000000000000004e22007c9078040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500"/158], 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) socket(0x2d, 0x80000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x2c, r3, 0x401, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16f8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x4000010) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f00000000c0)={0x0, @rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x4}, @qipcrtr={0x2a, 0x3}, @nl=@proc={0x10, 0x0, 0x25dfdbfd, 0x800000}, 0xe3db, 0x0, 0x0, 0x0, 0xfb59, &(0x7f0000000080)='rose0\x00', 0x3, 0x5, 0x8}) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, 0xffffffffffffffff, 0xaba00000) 2m27.264416292s ago: executing program 1 (id=1572): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)={0x14, 0x25, 0x301, 0x0, 0x0, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)={0x90, r2, 0x2, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x75}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x232}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x178}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x6b}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x225}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1d2}]]}, 0x90}, 0x1, 0x0, 0x0, 0x10}, 0x4) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x184, 0x19, 0x1, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x4d, 0x12, 0x0, 0x1, [@generic="25b57e35619bf2be9082cfcd8fba0cd0f2934efacde0a223b473fe77f3e5ba760d3793b2b3589c9fb23ff943b7528ea34883bc4a506cf756740574b89d396af9b59638700500000005"]}, @nested={0x11e, 0x6, 0x0, 0x1, [@typed={0xdd, 0x14d, 0x0, 0x0, @binary="0f46f1849e80333a72c47c602d9970739272ca25d0ed59ba2d54f2dbf1ce1d4305d0ef433df7b8370107edbc85bfb216efdc1b0b64d6a716ab6d8204ff7498a0d528471596a2bffd9f39f5d68ca46f729302ab4cb1bca132d999b0a04b1ddb2404cb28de890a87617e79217b4cafbcb340e885260db96e23db715cecc61ce445ad06cf189c29e6fb925cc6f1c5db4e1f43cd4f582f94a84bf0152dfada7b9826bbbfd394d745fd122010a19f7c2e459f59c5e8cccc8d9d0124b01020e16d5fa1f4882dc1043dec61df7983901630639c97157316c9285b79ba"}, @generic="37c14f9a8ead341bf43ea3970236c74b2e318966b7420623d7f5c9fde55324d4c519e80f9f4d6b22b3f1b672c61240c38914eb560eb9ca62fa58"]}]}, 0x184}}, 0x0) 2m26.804863313s ago: executing program 32 (id=1364): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x14, 0x25, 0x1, 0xfffffffd, 0x0, {0x6, 0x2}}, 0x14}}, 0x20000090) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x2, 0x0, 0x3, 0xc, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x9, 0x8, 0x0, "e9"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x60}, 0x1, 0x7}, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r4 = accept(r1, &(0x7f00000002c0)=@pppoe, &(0x7f0000000380)=0x80) sendmsg$kcm(r4, &(0x7f0000000680)={&(0x7f0000000440)=@hci={0x1f, 0x1, 0x4}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000004c0)="acd7d1951f67ee431099e084bf1fe9fce9075e086c5a45c36e7700a8fe53058d8130880b209325a44c6bff68dd9916a87c17c4aa4da4778e11c59304efb76c7ea6850e6beec91c769d69a04574ceab09644d70e4665a956f4676fb7693605950ca66b37ddc3de9efd2fdf3868697b38b3966cddef12ea29643d1d3cdb68e47ad4c8defd401d6492b23b6b8690751addb108cce36dc1489b638a4753d0c90588ab36ed7d6d1ad2755cae92559", 0xac}, {&(0x7f0000000580)="bc59f6420ea0bae4d7f56297bff18930ee0544dec2bdca39d70a3cb3690b3934af418906e556fa5cf1a6b1a9f62c1d60d7ef10539672c825e5416f51a55976226a88f1e5b5846f5d8e7a34776a1e32f2ba93f33160fb98de2a7b220420f6b4790d8bb750afd0c0dfe29da8f030b430d21062fbd4b410b0df8e814b25dea067cf4f0d205974c1bd39a56a833d651c661af8ad486a1ab38ec770f56a3828d9b6be09f4cde784fb504fd1d135efc3aba407672ca7dcc1cc489c9e95442d4409a44319619e080fc7dba4", 0xc8}, {&(0x7f00000008c0)="bc0c5c068ccc664e0f3e8f987cdeb7e9fa4f890109ac17736e00bb49cd8fb4bca640d2baf7308486252839f57fcb93910249018f9868831d579281ae73194a4445750ef0651db60565df3eaf74144b2b123a2cbdcd5f2f8c554f52a4a109ff8d83617f7a91799b86d895a6a6ce4e9dce356e2d1edf7b7423f41ad2515e2bce6ccaa5832c75396064f98b09a07cc1b8933219ac5304abbce9c399549fcb411763dac27cfab988487946b48b236660a9199e90f821f6fa72558d6626b853e1b932a219c6f8f0fc185281dce6e2e660344d8305cf8b235678dea451ac60c75b1aa274b45b12636ae0c56306ebe9945f6bb1baaee295a1f06f8baf481c110b0a1595ec2c970f32c54aeaa928a3ed7ff0cc7af699a572af08e42bf85ce307268ea34aedea07f67fb03225de5cc9d7c06af854011b0f7dc35c7df46a8b82cf64c5428f0796aa5adf62cf369a33d06a9d45173ecacc0cc27b9e8484e4560de045b7e61ef8c9c9746a19ed1f6057269bcfc4c0b7f68ab32c55a2066abdb4a92f5c07f2120c42ff85a893ea4cf9c6c8faa62915f4c693174ce9ce2fa3729a45ee787224505323a2dc410aef9aac80648e77d67dcacce6fcb1aafb114f5f9daee7140d125310cbad59f8e50bc6ecff2f4c9e95500ad7fb8fe86278eefd08054b43716094acb8a238c146b74aaa3e9fea8a8b437d1ec36b69d51fef21317433c7cbcc31075be26edfb5a503ec4340c0f8fba08d563a738c93675e3fe5a35e6be5dc92ea7409df1300c06b5c514e45abeaaa781cf9dc73c6a1c5ff737e1aaadaad18a991a0e718acc016e5f00359b637d41e6dfa096fd3103aed744101d745620e75cb18d3d44a26d2988fe1ec93c274ee8abffca0e16e81cad220828c5b1f1ba1f32a848166f8c945ab5cda282c92f7aa28fbf098f55c0dd198ee2bb141df7a743b13f16d5b69d4837d6a9fd49482b149b902c49d368b7fe1703c709644e9fe2505977763012c4c608e2b4581e9e405437d36b1dc47c23ee98dd56d08ffe0be518d776d021bb05b270522c3dde88911a6c80529f4c7c564f53c6d02a00d43933fb5cca2a658e13f66235d686868e500572e2c754ba6ecdb8fd5af185979aa66794cdd59bff8533a8584637692667f444ecc3cc638f80eaf9e2417e33af59ff20cb10592be6d90cfd9042fe038e12096c3427815435a96fb416107557bb3a1d248df29828ff59c6a1f6cb3be2baa00e84f8e669792ca6df09981a1730de5efa57b151863468ecb75784a8252a76bb8e9f3615d23d9828208470907dace93b814c60fed3d7f9f8b0668b1fabd624b75afe512812b2f37277596fe1bee23b8eb90918e71e9e2960054f34b89298ff69b0f9af5ca572f5a8be078b63032af3f9e8d35a08529c4e889c1c49121bfba01c5a8b9f7b68c61c8aec7a710d451665082cf001f3a297a47ea684137465c9c4d8ea721b78c496d733edef1101e6eb7c80594e86b3b3ec85c729a3488bbbade4679d9b217e22d6397f3e322e8fd52749a6ccb88bf2cd173f09a4671e4db618d7995897c97f483b182d9f9a4f8f35111ad14e8618f73807025c876b0e765f398bb739acee96d7fbd03822fd27dab98628a16e6c5e178daa172dd6eb005def2c15291da50f431113fb9556d3b77bd006c524565029df3fe0af12f421e2cf90b3385ca8c33330af7ad52b0c5f4ddf3fb95a8ad8324b12b54ff795efa0d25e00881e62dd91b518a12ca5118cb2714cd1685af123d03c4794bbe2724d18cd590585e413649b630901d1e21f65b59b2bdd201997c3ae3cce823e7ca9d324411b0a8e5e901cb8902e3d86005c7cbd87ea7dca0864bb4acb82ff04a9abf9f6c1c56a0589bce49121e1d17868a9a5b2709f6c4b9be05ca662a84e54813f31be845abda3afeac13938ee8219839558f83dee77c6fd10cd53f493a9bdb93c2401c02615cb9f7ad6c168d05bf275d00584b5fffbf6d4322ece6ab422c77113d07b336f43effe1cf64b201a8b1d2af227c92c7e918e861459d8b5587f07fcf892e716a57f6e28de809a87ab23758a1ec71a4268175bed557136c5cb69aec49bdd032a79c1fa69590fd128a48bd1f6d69f77cae99eeee718ca9ef34b4d1a096c69015aa6775813d99069e60e752ce402f6bda93af5feb1656fc59a36e10bda9275f0d5470201d7648624d65f8185b0f3f34316000d461d17a9359faecc56f615abb1762a837d33c96e5a976105e4ad67a37559c4f05dff72803e99747e2ff104c5eed49c9b0c67f67bec11db6e5aef7da9a2cbc96122abccdac32ceb8636883a197c7c93a84c9fe782d8dcb93a80e1a71b3513b711825bf8c95d752ccce1b99f734e10619de05e61cd503c9d8a6c46bf560efb18869d86cad5723dfd21ba16df693616e2977927eeac13580d9387359c92d2765bc69a4f7764a991cfa235d21179d59091a1a31317025fcd9db739d6f788f4dde40fea9bc7c56df8b65e930fddb1afd5aa15a407f4bdc9d2146f38bf6030108d2aad3c7c7a39ba3925ff244fd834e98d49fe3e4b5a38a30639b1b636e6f1b3c015005c8cbf96d1378baf891b90a4d5a126981ba8eaa96e4e30db617872c81cfe5782de7e57999aa22c2ce856ea7060de5f5ad471640de347ab46503f66ca610ab1bca4a42ba4b8baa419eaf4b2a1facdc657cfc2b8756af15a618682f4f7a156ea5db0a14b225e6bcbbdd42cdb9ded0a7dbc9b3f3089eb4f5695258b6f41f3ed7cad39c0ab183ff88ae21b9b786dda59b8bc367857f41e60c006a54f7fd797248ea99489e532a0b6f1cb5cc3599e63088c2756052638dd79edb21805d7963fc59c8875d541e57d13e065384db762cc5421c3fe078212e57873c389952796ee2e6738abb861cd7322411c6c21424756c5fc98d61b0d14b1655cab894316f27741a4a5db93cc90fe7e6fd8765203ea1c2d820f79b59c90cf85b36d965fbb187fbf30057f2473799ca98b4ad4ddd18412b365bfa6b80eb18fa9275900fb5da829abd44e0c49e129a82a28b720f2b5579fb81cb394093a407b083c29caeef7f5b7facb0c64d77bee1509bdb157ac2ea67dcbda67818a1fa5b9cf61a06b4bd050e7b1facbac1dbf6f235fbd86962a514e2680788905204c873a0b66d5c189452b29a3caeb67f3431b10f9e6f68eef68ec442adccb397c0cbe1f69e182acf3ee8ea21a1a0e735ede83bdfa46cf7ba77925a691637cd6e7a292120aae4cabe793c66dd4eacf5ac8dd0440d29a3dea590e6dbdc0c5d0508a64751580b5d841f8c414cda28c96d84d7fa6a67107927d9abcec8308f357b8f2961c5e9c3599bf6ddb08c8003d7c9b417afa8975e4566d64116aee29d4d41d63e24d5ba108b40a450df2014d60a23c10e1c8fab5984ba8d920372563aa02896672842fd1dbdeee07e46927a4c8793053a00b77f6a7b5456b93cda6ee82e6b55f80da3c55d52f29da644ba4d55eb8e5e923aa47e5ec4a0755cc412f370cdf4d101ba2a6dea61db60cf4b258d83d1d2d30d4f531de1551da843b3ff8f00b8aae2078ae0c7b6b6d8983d71a433e888d7c84ae6b29db27c5bf8881cb991fc6b54da3d8b9c3049f6c5adaf96d13234e9d3d81ffd28aacfcb9e824457e1026911137a2bcfb6500e94f8d5a2095823c6a5a5a45cd153c174c029bab97271d59d9e2abfe865d2094332f984530ecb21f91693cfad803304ef16de766d0a76cf9c43b741d5460630d397dfb950aff995552709c7f31556f9ccd74e54c9c64c80dd636bd3925a32e4751118ebfdb9788da1975a6460770f29fba5220f1f20096b9b4322ecce46f913b643e150084038cd6f3f21b28d92d73b7a0b9fd0b6e86ff0a84f560e49aa3536f4eed3554fde5fcf37519292e49c3dcdf85c7006b64947a658bc12657814ffd7e07d030d279f33ac3fc70621a1e9db7ca3cc309b83a44d62d961a179c3a682a8b8b83018fd9798d93eb72c30d130c09708b2596ac291ffd8bac53cd7a0929ede172be433d4f7f21eb01f9148abddde54bf7783ef64674c05f07a3d66703dc7f1d99e9067a2a493137685d317a7234476753bed7017ae78e158c7850df9cfa1dde9b9d458b2d4e8c47b91ef4512195430d4b13d6f9f2b8b05f25b2fb00f446d625651f6da9615a074494ae843cdfdc2435d9cebc4bac5ea07c21c2683c62560d283969c00bfaba00c4364f73a9b76dd57591d1a2367b622d51bb0165fd6624ce8c7baaff0afd7fc45facb11652bd8568ebbaf7c6559c235997060e8fabb27995b8be73def4d48c3932debc14c6630946a5335d4bc49010d1bdaaa1dfe2e44ae39ce956ad7df3df1a24d68bf33b36725e16d582e8ddd108a09a633882eeafc9dabf8e41228b6e71f82aa8d994927f4b07f3335d327e6d386f3d65b0199d38ca4950b980fc160089a348ec843874d22da796d349618845c368f7eca6011a243548d6c3be89d07e9e0adcb2c9fa40b217970a8873c19b094d652d58f0b1a14c86a62c5cc87e079f74f52ab98008c826206e1237f0bb04c07eb3e13730ad0a89f06067557213ed286e7e31e55ecd304f92a50e9610c090b357a3d4ffaa6cd81a2a7b0ef39d66ad2604c78fd257809742d5c19bf160e78b6fc57daa9669ea4bf5dbdcba0d49b791fd14fd631cac44871cb509401aef65d0f56b45ed650d8909360444aae3485dcfd82cf7c5bfc5daa90067f28446e6620bf4e2d9af2a47709dee99e1acf40ae7d6c3de0c25a39c66cca28c9960868ebc871fe8e773fbcf3115e27cb91fd3742fbc61a7fc6badd7ca282ae0847623c339265ae6a73952f41062ed0ca93329e4d94b01c357446aafa314163db5d40c6a6ab2e06c19b7207044037a900919c8cba1011a3b2867167d7b7f8f31d2ad948bbeb47c5fd3fcde8ff70c94953df80b3e7ae54df1b61c3e68bb1f3ec157c4163c839ed4b6740aba363e6a3a5d6130abebabfdef4faf5ce3e40b8e7d5d27b622ca875955e653fd42cd5874ee28fb36bb6f0a48e5770a12591a96ca182a01b688b98553f09d911f3574e8b6dd29ed32a9daeb608b063f7c3ce8b730770b89d67c858ed931f58ea2d725b330dddef47e2f45e16f7bc942866030aa2e1347859c94ca60740a2d75022423381946383547d455838113591bb6301095941f2911ec6d1f48cfdd3365a71d7dbabe730e7d7ddcc1312cf5751b8dc5563f56e53b138eb602b2ba43a26dca8cfd9e52ede0ed34152ee5d924d896c280c502b34e82934c670b4a1e3979689e17300aa449c8829c2e9091cf4e1fa8b0811704d93a4c3c11417cc6c0a8a6f992b23f82df5477a82b72a00cf22cdf8326c4a486e071c167f9a46d76b54b446d085da59548151389848e90c216de4b111d8d4b857ea54c3b33376663dac799584152f61510ca788157289ca6bdb26edf767e02b52849822873537a7baeb83edb3f2699b0c16ae21a7d73d322a4ddf97550fa57cd06169f6ae5df06d14124f963d8e05a7caff9fff182e64c6c5d99079081be78aa54ce4f8850274a3678fc694680c3c919cb9863d3f534caef10fcc509156ce826cb266582c4543edd360fdf2435d535e41de0c6d817899de986885fd80156e3ca30df775163c2d1b605b20c5c9291b1dae53ff7a266b096b7abb635d51665e1682594ce4ea65f57c6fca5f5590bb4a179e1d5e37f65f62ab7c883fffb54425553991d0a5ba485dd52fd6e4696b3a718a801807adb30c5556e90e063bb8375c9251479f7c12e104d553e76a247ef9d74582a13e3444661a25ba1dc7da586ba0e1553d2123c9793bc3b7b6", 0x1000}], 0x3, &(0x7f00000018c0)=[{0x100, 0x109, 0x8, "f785aee679bcf2322283e2e82a83d37fb3c889b31e6b81e52ccab3f01c61654e94fc6c83f0bbcf3771484c9fbb68a4c6ba05cfb3a16d606972f877eab82322b12aab18f3be583697af990d7124a407ab39411167b77d04b2028f49a1ae3b20a35ae48ff525584667f54076566636cd1fa01e3a40d51fc348efd007914cf35c94662d96ecdc29ca32755fa1e41e41f86096694ef1bdcf29420afdb34124c2b779084bc71b1731e51f3f86f1ce9622568b8d50b7ae1ca7851e0a83189fa4e70d37bb687d605092778b9dbf69413b7423c0f63a80a5901d2b3807d6eed0c83ffbeb20c934e1f62d8f6a25d82665ff485b33"}, {0xc8, 0x10b, 0x4, "a3dbf4790be585ae76d3e3e438ceeb0fda46721d5b4b3af5b6fe974b87a4d41a81726ddfa120ac3ac4f6403a3d161f76a34fd8cc8b4175010705ea30887df0d4b52ef16f31962cbdab084d8cbcf7909a72ed5bc96c162f05a6b1c1d2a4c6472e19fbe23ad68721a9bcc622808363f940500b2b8eb86c332532b35dee31f4e0766f949b94e57aaeb448f1074eed3cb400164f67fffcf5f32a54e9655ccf2fe6de23718ea752a5369e83149dabaebc640c6d6906a44c6849ba"}, {0x48, 0x115, 0x101, "24f6d5b42f3115c1c2187b8db6e1142898168942297aae9539f0bee368a77d8f3ab29ddef7f67b42bb6123d3bb2e34775bea288971"}, {0x20, 0x107, 0x522, "6f4442a62bd19c5fa74272ec39c9a8"}, {0xd8, 0x103, 0x8001, "e79bc9066a5275adee5b299dcf44512c62774233888bd1b9bdce85bcdf5454bb0a6afd86a908505a72a6cc86c69f139e2e69b527e8d9935646d3145bb5523cc6b7de524f1bfca8c298e3e45586af72b2ec7a9602603a3f153eab4f4b365416a2b55ac08a24ef24e102ebcf377e939bde145b5599b42d5021a95a794765276d23390191ab14e9b2838b8115f5dca10a832b1dc8e8640ced1b88c6a03bf75e12478e0d6088dc5e6e12a5dc7984d775f9961e2e5d535f36abd4f37a0591c9aac8811275"}, {0xe8, 0x117, 0x40, "dd24600813f888a45bad2039863f6ea2479672a83cc3230640ba57d1b72dfa11cc81b2eb385767be8bebc7c43654b5ff4b297f23f43225411a81913be32dce92120ce5a792038710e292d92663ff8ba00c90284e970c686982fe4928f35de344549c163df02dcc356a56d6d674a2237e42ef93a8749aac975067392b0be346c42d8239d5399e8910b2a759e46b892aa030e420cc1cb7af9afe365578e9666badf8667a81e5010026f62acc32744c275349c9d0838decc672d8596f351770d8ff995b7f026da8da1a8f63445d25db3d0bba056666f3"}, {0x48, 0x104, 0x2, "38ae1e721dc6cdbc02912270940e6d644de48e31b213d702137f9ddc41684246cac017e81272704a59574fd14f7c53dbbaf94fb208"}], 0x438}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(md5)\x00'}, 0x58) close(0x4) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) r7 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r7, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x3}, 0x10) sendmsg$tipc(r7, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x804) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x34, r3, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0xd4}, 0x4040140) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x84, r3, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x200}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5a34}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x800}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x801) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r8, r10, 0x25, 0x0, @void}, 0x10) r11 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r11, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x4, 0x2, 0x1}}) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x34, 0x10, 0x401, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2049}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}]}, 0x34}}, 0x0) 2m17.812602857s ago: executing program 5 (id=1688): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000000c0), 0x4) sendto$inet6(r0, &(0x7f0000000040)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x101, @rand_addr=' \x01\x00'}, 0x1c) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc11000012000102000800000000000000000000000000000000009600"/56, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000f504010007c01c0002"], 0x11fc}}, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000080)={r3, 0xb796, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000000)=@sack_info={r3, 0x0, 0x8}, 0xc) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0xfffc}, 0x8) 2m17.756035858s ago: executing program 5 (id=1691): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001000050400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b00010065727370616e0000180002800400120005001600010000000800150000c422"], 0x48}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@local, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast1, 0x4d4, 0x6c}, @in6=@empty, {0x0, 0x192, 0x6, 0xffff, 0x28251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffd}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_ethernet(0x3e, &(0x7f00000006c0)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x4, 0x0, 0x0, @broadcast=0x1000000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @empty}}}}}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x18, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 2m17.644297032s ago: executing program 5 (id=1693): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x18, &(0x7f0000000100)=0xfefffff9, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f00000000c0)=0x5, 0x4) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @mss, @sack_perm, @timestamp, @timestamp, @mss, @timestamp, @sack_perm], 0x20000000000000ec) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x13, &(0x7f0000000000), 0x4) r3 = socket$netlink(0x10, 0x3, 0x400000000000004) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) 2m17.612712302s ago: executing program 5 (id=1694): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000071120800000000009500"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, 0x0, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m17.436596004s ago: executing program 5 (id=1696): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0xb9}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x89}]}}}, {0x18, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x9c}}, 0x0) ioctl$sock_bt_hci(r0, 0x400448ca, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000104000000000000000000000040", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b000100677265746170000018000280050013000100000005000a000000000004001200"], 0x48}}, 0x0) 2m17.297272282s ago: executing program 5 (id=1698): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_clnt_new\x00', r1, 0x0, 0xb9b}, 0x18) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}, {&(0x7f00000002c0)={0x16c, 0x3f, 0x300, 0x70bd2f, 0x25dfdbfb, "", [@nested={0x156, 0x10, 0x0, 0x1, [@generic="dfce463ef34819fa6f2749466ae4d4561974938ffdaf31f734f7d8c55f8375d32f724db96c2e5c6fa4c4489b5bda541facaa55bd1545a57094480ab8d3d07d02c7197e2c89360b3199539967ff4fcba763a9592f96943f75b030aa605c14109f1c2f09b25cb58a2064f9ef2a52142aa2381e0ecec19e30970b093d86959fb32bb94b4fe845dbf44044c9c625cdbb32f8314e0a8ff284cde804c46ca3fd27e9c153d16efe5762d7d07216a3ef8f146736062b5d4e28635c0e45d1de909b89ce786efef283cc56377a146f4b8b9d", @generic="1072a2c6656f09b18aa7e77233668c8fb34951b3ec18a041cfe245c84995f6fdc384508d66c7ab436385759d4604a30564fb2015be49295c5f63d7644b9a7dd226922f9cecc5e1931fdbbcb3825f08611e3f505fddb108c5d7a253b3b9130ab015fadc6a06f78b85f5c50d86c500c486e73f14fc92b92515090ec355ba7be1f80e", @nested={0x4, 0x17}]}, @typed={0x4, 0x2108}]}, 0x16c}], 0x2, 0x0, 0x0, 0x400048c0}, 0x0) (async) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}, {&(0x7f00000002c0)={0x16c, 0x3f, 0x300, 0x70bd2f, 0x25dfdbfb, "", [@nested={0x156, 0x10, 0x0, 0x1, [@generic="dfce463ef34819fa6f2749466ae4d4561974938ffdaf31f734f7d8c55f8375d32f724db96c2e5c6fa4c4489b5bda541facaa55bd1545a57094480ab8d3d07d02c7197e2c89360b3199539967ff4fcba763a9592f96943f75b030aa605c14109f1c2f09b25cb58a2064f9ef2a52142aa2381e0ecec19e30970b093d86959fb32bb94b4fe845dbf44044c9c625cdbb32f8314e0a8ff284cde804c46ca3fd27e9c153d16efe5762d7d07216a3ef8f146736062b5d4e28635c0e45d1de909b89ce786efef283cc56377a146f4b8b9d", @generic="1072a2c6656f09b18aa7e77233668c8fb34951b3ec18a041cfe245c84995f6fdc384508d66c7ab436385759d4604a30564fb2015be49295c5f63d7644b9a7dd226922f9cecc5e1931fdbbcb3825f08611e3f505fddb108c5d7a253b3b9130ab015fadc6a06f78b85f5c50d86c500c486e73f14fc92b92515090ec355ba7be1f80e", @nested={0x4, 0x17}]}, @typed={0x4, 0x2108}]}, 0x16c}], 0x2, 0x0, 0x0, 0x400048c0}, 0x0) 2m12.239216916s ago: executing program 33 (id=1572): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)={0x14, 0x25, 0x301, 0x0, 0x0, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)={0x90, r2, 0x2, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x75}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x232}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x178}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x6b}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x225}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1d2}]]}, 0x90}, 0x1, 0x0, 0x0, 0x10}, 0x4) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x184, 0x19, 0x1, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x4d, 0x12, 0x0, 0x1, [@generic="25b57e35619bf2be9082cfcd8fba0cd0f2934efacde0a223b473fe77f3e5ba760d3793b2b3589c9fb23ff943b7528ea34883bc4a506cf756740574b89d396af9b59638700500000005"]}, @nested={0x11e, 0x6, 0x0, 0x1, [@typed={0xdd, 0x14d, 0x0, 0x0, @binary="0f46f1849e80333a72c47c602d9970739272ca25d0ed59ba2d54f2dbf1ce1d4305d0ef433df7b8370107edbc85bfb216efdc1b0b64d6a716ab6d8204ff7498a0d528471596a2bffd9f39f5d68ca46f729302ab4cb1bca132d999b0a04b1ddb2404cb28de890a87617e79217b4cafbcb340e885260db96e23db715cecc61ce445ad06cf189c29e6fb925cc6f1c5db4e1f43cd4f582f94a84bf0152dfada7b9826bbbfd394d745fd122010a19f7c2e459f59c5e8cccc8d9d0124b01020e16d5fa1f4882dc1043dec61df7983901630639c97157316c9285b79ba"}, @generic="37c14f9a8ead341bf43ea3970236c74b2e318966b7420623d7f5c9fde55324d4c519e80f9f4d6b22b3f1b672c61240c38914eb560eb9ca62fa58"]}]}, 0x184}}, 0x0) 2m2.241589895s ago: executing program 34 (id=1698): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_clnt_new\x00', r1, 0x0, 0xb9b}, 0x18) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}, {&(0x7f00000002c0)={0x16c, 0x3f, 0x300, 0x70bd2f, 0x25dfdbfb, "", [@nested={0x156, 0x10, 0x0, 0x1, [@generic="dfce463ef34819fa6f2749466ae4d4561974938ffdaf31f734f7d8c55f8375d32f724db96c2e5c6fa4c4489b5bda541facaa55bd1545a57094480ab8d3d07d02c7197e2c89360b3199539967ff4fcba763a9592f96943f75b030aa605c14109f1c2f09b25cb58a2064f9ef2a52142aa2381e0ecec19e30970b093d86959fb32bb94b4fe845dbf44044c9c625cdbb32f8314e0a8ff284cde804c46ca3fd27e9c153d16efe5762d7d07216a3ef8f146736062b5d4e28635c0e45d1de909b89ce786efef283cc56377a146f4b8b9d", @generic="1072a2c6656f09b18aa7e77233668c8fb34951b3ec18a041cfe245c84995f6fdc384508d66c7ab436385759d4604a30564fb2015be49295c5f63d7644b9a7dd226922f9cecc5e1931fdbbcb3825f08611e3f505fddb108c5d7a253b3b9130ab015fadc6a06f78b85f5c50d86c500c486e73f14fc92b92515090ec355ba7be1f80e", @nested={0x4, 0x17}]}, @typed={0x4, 0x2108}]}, 0x16c}], 0x2, 0x0, 0x0, 0x400048c0}, 0x0) (async) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}, {&(0x7f00000002c0)={0x16c, 0x3f, 0x300, 0x70bd2f, 0x25dfdbfb, "", [@nested={0x156, 0x10, 0x0, 0x1, [@generic="dfce463ef34819fa6f2749466ae4d4561974938ffdaf31f734f7d8c55f8375d32f724db96c2e5c6fa4c4489b5bda541facaa55bd1545a57094480ab8d3d07d02c7197e2c89360b3199539967ff4fcba763a9592f96943f75b030aa605c14109f1c2f09b25cb58a2064f9ef2a52142aa2381e0ecec19e30970b093d86959fb32bb94b4fe845dbf44044c9c625cdbb32f8314e0a8ff284cde804c46ca3fd27e9c153d16efe5762d7d07216a3ef8f146736062b5d4e28635c0e45d1de909b89ce786efef283cc56377a146f4b8b9d", @generic="1072a2c6656f09b18aa7e77233668c8fb34951b3ec18a041cfe245c84995f6fdc384508d66c7ab436385759d4604a30564fb2015be49295c5f63d7644b9a7dd226922f9cecc5e1931fdbbcb3825f08611e3f505fddb108c5d7a253b3b9130ab015fadc6a06f78b85f5c50d86c500c486e73f14fc92b92515090ec355ba7be1f80e", @nested={0x4, 0x17}]}, @typed={0x4, 0x2108}]}, 0x16c}], 0x2, 0x0, 0x0, 0x400048c0}, 0x0) 1m58.528622281s ago: executing program 6 (id=1915): r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc) sendmsg$inet(r0, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000240)="f9", 0x1}], 0x1}, 0x4000080) (fail_nth: 35) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004b74ffec850000006d000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0, r1}, 0x18) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x40010) 1m57.920365392s ago: executing program 6 (id=1918): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x205}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r5}, @IFLA_HSR_SLAVE2={0x8}]}}}]}, 0x40}, 0x1, 0xba01, 0x0, 0x4000044}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtclass={0x914, 0x28, 0x400, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xfff2}, {0xfff2, 0x5}, {0xb, 0x6}}, [@TCA_RATE={0x6, 0x5, {0x3, 0x3}}, @tclass_kind_options=@c_sfq={0x8}, @tclass_kind_options=@c_fq_codel={0xd}, @tclass_kind_options=@c_sfb={0x8}, @tclass_kind_options=@c_hfsc={{0x9}, {0x14, 0x2, [@TCA_HFSC_USC={0x10, 0x3, {0x9, 0x9, 0x3}}]}}, @TCA_RATE={0x6, 0x5, {0x7, 0x1}}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_htb={{0x8}, {0x88c, 0x2, [@TCA_HTB_CEIL64={0xc, 0x7, 0xb}, @TCA_HTB_PARMS={0x30, 0x1, {{0x5, 0x1, 0x8, 0x9, 0xfff, 0xfe86}, {0x7, 0x2, 0x5, 0x51, 0x0, 0x10}, 0x8, 0xb1, 0x1ff, 0xfffffffe, 0xaa1}}, @TCA_HTB_OFFLOAD={0x4}, @TCA_HTB_RATE64={0xc, 0x6, 0x3}, @TCA_HTB_RTAB={0x404, 0x4, [0x6, 0x7, 0x9, 0x40, 0x8, 0x0, 0x5, 0x6d, 0xe, 0x4af1185c, 0x2, 0x9, 0x3, 0xfff, 0x3, 0x4, 0x55, 0x8, 0x200, 0x9e34, 0x6, 0x2, 0x9, 0x400, 0x8, 0x401, 0xfffffffd, 0xb, 0x0, 0xffffffff, 0x9, 0xdca, 0x0, 0x1, 0x0, 0x100, 0x2, 0xfffffff2, 0x1, 0xc, 0x1, 0x4, 0x1f, 0x6, 0x7, 0x6, 0x1, 0x6, 0xd, 0x2, 0x3, 0xffffff01, 0x2, 0x7ff, 0xecf, 0x9ba, 0x8000, 0x30d, 0x0, 0x8, 0x60, 0x80000000, 0xffff2538, 0x5, 0xfffffff5, 0x1b0000, 0x4, 0xd6a, 0xfff, 0x7, 0xfffffff8, 0x2, 0x9, 0x2, 0xffffffff, 0xe, 0x3, 0x8, 0x10001, 0xffff8000, 0x703, 0x5, 0x8000, 0x2, 0x101, 0x5ce9ec19, 0x9, 0x2aa6, 0x80000000, 0xb, 0xffffffc5, 0x1, 0x3, 0x9, 0xffff, 0x0, 0x4, 0x5, 0x6308, 0x3, 0x400, 0x1, 0x80, 0x0, 0x6, 0x6, 0x7, 0x7, 0x9, 0xfffffff8, 0xffff, 0x7, 0xa0, 0x4c53, 0x7baf56, 0x18000000, 0x101, 0x4, 0x6, 0x401, 0x8, 0xfffffff9, 0x1, 0x4, 0x5, 0x200, 0xfff, 0x14b24cb7, 0x1ff, 0x46800000, 0xda1, 0xe, 0xc, 0xffff, 0x2, 0x7fff, 0x0, 0xfffff801, 0x101, 0x7f8, 0x8001, 0x80000000, 0x0, 0x4, 0x5, 0x3, 0x2, 0x3f, 0x1, 0x380, 0x6, 0x8, 0x200, 0xff, 0x84de, 0x6, 0xe, 0x8, 0xffffffff, 0x0, 0x5, 0x4, 0x7d6, 0x3, 0x4, 0x80, 0x0, 0x8, 0x800, 0x67, 0x5f44, 0x1293, 0xe8a3, 0x2, 0x4, 0xfffffff9, 0x40, 0x8001, 0x7, 0x2, 0x5a, 0x5, 0x9, 0x7, 0x6, 0x7ff, 0x4, 0x3, 0xfffffffe, 0x4, 0x800, 0x2, 0x100, 0x3, 0x7, 0x1, 0x2, 0x4, 0x6, 0x7, 0x5, 0x3, 0x7a, 0x8, 0x0, 0x10000, 0x0, 0x7, 0x6, 0x1, 0xd, 0x4, 0xb, 0x7, 0xf, 0x1, 0x8, 0xbf, 0x8, 0x5, 0x1, 0x1, 0x2, 0x79, 0x2, 0xffff, 0x8, 0x1, 0x7fff, 0x2800000, 0x0, 0x5, 0x3ff, 0x4, 0x7fff, 0xfffffffd, 0x1, 0x4, 0x275, 0x1, 0x7, 0x2c1, 0x9, 0xfffff801, 0x8, 0x9, 0x0, 0xa6, 0x62, 0x7, 0x4, 0xffff0001, 0x6, 0x3483, 0x8, 0x1]}, @TCA_HTB_OFFLOAD={0x4}, @TCA_HTB_CTAB={0x404, 0x3, [0x401, 0x4, 0x0, 0xf, 0x80000000, 0x3, 0x100, 0xffff8000, 0x8b, 0x1a25, 0x0, 0x175, 0x9, 0x5, 0x1, 0x7, 0x1, 0x7fffffff, 0xe97, 0x2, 0x2b, 0x0, 0x84ec, 0x9, 0x80000000, 0x5, 0x5, 0xf, 0x3, 0x2, 0x9, 0x10, 0x1, 0x7, 0x9, 0x2, 0x1, 0xffffffff, 0x3, 0x6, 0x2, 0x7fffffff, 0x40000, 0x3, 0x3, 0x7, 0x1ff, 0xf104, 0x0, 0xfffffe01, 0xffffffff, 0x4, 0x8, 0x5bb, 0x5, 0x8, 0xc, 0x2, 0x9, 0x83a0, 0xa, 0x7, 0x7f, 0x0, 0x10000, 0x6, 0x5, 0x3, 0x400, 0x5, 0x8000, 0x7fff, 0x4, 0x4, 0x6, 0x6, 0x9, 0x9, 0x0, 0x8, 0xf187, 0x6, 0x2, 0x0, 0x8, 0x91a, 0x81, 0x8001, 0x6, 0x6, 0x2, 0x4, 0xe, 0x6, 0x3, 0x9, 0x2, 0xffffffff, 0xfffffff2, 0x6, 0x5, 0x4, 0x33, 0x4b, 0x1, 0x3, 0x0, 0x9, 0x3, 0x1, 0x10000, 0x859, 0x4, 0x7, 0x5, 0x6, 0xfffffffd, 0x8, 0x2, 0x34f3, 0x5, 0x7f, 0x1, 0xff, 0x80000000, 0x5, 0x1777700e, 0x2, 0x0, 0x8, 0xfffffffa, 0x3ff, 0x451, 0x0, 0x80, 0x400, 0x1, 0x0, 0x6, 0x20000000, 0x7, 0x1, 0x1000, 0x7, 0xf8c, 0x10001, 0x3, 0xfff, 0xffffff80, 0x4, 0x4, 0x10, 0x8, 0x10, 0x7ff, 0xbeeb, 0x0, 0x7, 0x400, 0x80000001, 0x6, 0x4277, 0x6, 0x9, 0x81, 0x10000, 0x400, 0xbe7, 0x2, 0x2, 0x1de2, 0x5, 0x7, 0x0, 0x7ff, 0x9, 0x9, 0x7, 0x10000, 0xffff, 0x6, 0x0, 0x81, 0x1, 0x6, 0x7, 0x6, 0x3, 0x1ff, 0x10000, 0x2, 0x71, 0xfffffff9, 0x216, 0x2, 0x1, 0x1, 0x234, 0x4, 0xffff, 0x3, 0x2, 0x8ec9, 0x92d, 0x100, 0xe84, 0x7fffffff, 0xff, 0x2, 0x3, 0x86, 0xfffffff7, 0x0, 0x7, 0x3, 0x7fffffff, 0xa8c0, 0x3, 0x80000000, 0x5, 0x2, 0x7, 0x24a, 0xffffff7f, 0x5, 0xd, 0x7, 0x5, 0x1, 0x8, 0x7506, 0x6, 0x5, 0x3, 0x2, 0x2749, 0x75e6b402, 0x10001, 0x3ff, 0x9, 0x4, 0x6, 0x5, 0x0, 0x9, 0xf759, 0x9, 0x9106, 0x7, 0x8, 0xfffffff9, 0x3, 0x8001, 0x12a000, 0x7a98, 0x89c]}, @TCA_HTB_PARMS={0x30, 0x1, {{0x6a, 0x0, 0x6, 0x7fff, 0xc, 0x5}, {0xd, 0x1, 0x7f, 0x2, 0x6, 0x10000}, 0xe, 0x7, 0x5, 0xc, 0x4}}]}}]}, 0x914}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c80)=ANY=[@ANYBLOB="cc000000", @ANYRES16=r8, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=0x0, @ANYBLOB="55000e0080000000080211000000080211000001505050505050000000000000000000009d92fd67da8a"], 0xcc}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a98000000060a0b04f300000000000000020000006c000480680001800b00010074617267657400005800028040000300cd4b6abe42031763d02899c77f963d140d7a9d3ac869f3a860917523669abf4579f9cd6564e6400f00000045bfe585ab6933a6f6094a0eebad4e35370a000100484d41524b00000008000240000000000900010073797a30000000000900020073797a32"], 0xc0}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1m57.671477501s ago: executing program 6 (id=1920): r0 = socket(0x29, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000fcffffff0000000000000000850000003600000085000000d000000095"], &(0x7f0000000100)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f0000001580)="e0856497d56cf0f21a0000000010", 0x0, 0x20000700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f00000001c0), &(0x7f0000000100)=r2}, 0x20) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYRES64=r0, @ANYRES32=0x0, @ANYBLOB="fda65f05000000007c00128009000100626f6e64000000000400028008000a00", @ANYRES32=r3, @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000280)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_cmd={0x1, 0x9, 0x8, 0x82e8, 0x2, 0x2, 0x4, 0x9, 0x8, 0x1, 0x5, 0x3, 0x5ef, 0x9, 0xbe, 0xd1, [0x3, 0xf2]}}) 1m56.586222129s ago: executing program 6 (id=1926): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000000c0)=0x5, 0x4) bind$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) (async, rerun: 32) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) (rerun: 32) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$igmp(0x2, 0x3, 0x2) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000040)={0x200000000000001}, 0x8) (async) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) (async) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000001440)=ANY=[@ANYBLOB="0017"], 0xc0) (async) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) (async) setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, 0x0, 0x0) (async) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_PROTOCOL(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x1, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x80) bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) (async) r6 = socket$can_j1939(0x1d, 0x2, 0x7) getpeername(r6, 0x0, 0x0) (async) r7 = socket$inet6(0xa, 0x3, 0x87) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), r2) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x10}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r2, &(0x7f0000000680)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000440)={&(0x7f0000000700)=ANY=[@ANYBLOB="f000007c147445ddbea794f3f6e03df2001a25edf916e19e161f5c367f85a7fcd9", @ANYRES16=r8, @ANYBLOB="00012cbd7000fedbdf2542000000080001007063690011000200303030303a30303a31302e30000000000d0087006c325f64726f70730000000005008300010000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000d0087006c325f64726f70730000000005008300000000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000d0087006c325f64726f70730000000005008300010000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000d0087006c325f64726f7073000000000500830000000000"], 0xf0}, 0x1, 0x0, 0x0, 0x80}, 0x4048800) (async, rerun: 32) connect$inet6(r7, &(0x7f00000006c0)={0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x5}, 0x1c) (rerun: 32) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x8c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_USERDATA={0x18, 0xc, "33b1da39c063d039221f0e3b00edaf1bfb3624fd"}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xaf46e71c4ba80e96}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_COUNTERS={0x4c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7fffffff}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x4}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x6b3}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x6}]}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}}], {0x14}}, 0xe8}}, 0x0) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r10, 0x84, 0x7f, &(0x7f0000000080)="000000000d800000", 0x8) 1m56.396215137s ago: executing program 6 (id=1928): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x80) syz_emit_ethernet(0xfdef, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6092c01f00082f00fe8000000000000000000000000000bb00000000000000000000070000000000242065580000000000000021000086dd080088be4305400f10", @ANYRESDEC=r0, @ANYRESDEC=r1], 0x0) 1m55.79743411s ago: executing program 6 (id=1930): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newlink={0x10, 0x10, 0x401, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bond={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x9}, @IFLA_BOND_ARP_IP_TARGET={0x4}]}}}]}, 0x40}}, 0x8004) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (async) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x14, 0x25, 0x1, 0xfffffffd, 0x0, {0x6, 0x2}}, 0x14}}, 0x20000090) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="0503000000000000f6ff0700000008000300", @ANYRES32=r4], 0x1c}}, 0x24044080) (async) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r3, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3400}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x818) 53.127275868s ago: executing program 35 (id=1930): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newlink={0x10, 0x10, 0x401, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bond={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x9}, @IFLA_BOND_ARP_IP_TARGET={0x4}]}}}]}, 0x40}}, 0x8004) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (async) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x14, 0x25, 0x1, 0xfffffffd, 0x0, {0x6, 0x2}}, 0x14}}, 0x20000090) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="0503000000000000f6ff0700000008000300", @ANYRES32=r4], 0x1c}}, 0x24044080) (async) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r3, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3400}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x818) 2.574092804s ago: executing program 2 (id=2486): r0 = socket(0x25, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, 0x0, 0x3c0) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000001840)=ANY=[@ANYRES32=r2], 0xb) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000240)={r2, @in6={{0xa, 0x4e23, 0x200, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7fff}}, 0x2, 0x9, 0x7d, 0x1, 0x3}, &(0x7f0000000000)=0x98) r3 = socket$inet6(0xa, 0x802, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000040000000000000001000013020000e983fd9c00"/52], 0x0, 0x34}, 0x20) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r3, 0x29, 0x11, 0x0, 0x8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x2c, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x19}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101080000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff08000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000f00)={0x38, 0x3e, 0x1, 0x70bd28, 0x4, {0x1}, [@nested={0x4, 0x14a}, @nested={0x14, 0x1, 0x0, 0x1, [@nested={0x10, 0x10, 0x0, 0x1, [@nested={0xc, 0x8, 0x0, 0x1, [@typed={0x8, 0x10c, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}]}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYRES16=r4], 0x6c}}, 0x4044100) socket(0x25, 0x5, 0x0) (async) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, 0x0, 0x3c0) (async) socket(0x2, 0x80805, 0x0) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000040)=@assoc_value, &(0x7f0000000000)=0x8) (async) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000001840)=ANY=[@ANYRES32=r2], 0xb) (async) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000240)={r2, @in6={{0xa, 0x4e23, 0x200, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7fff}}, 0x2, 0x9, 0x7d, 0x1, 0x3}, &(0x7f0000000000)=0x98) (async) socket$inet6(0xa, 0x802, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000040000000000000001000013020000e983fd9c00"/52], 0x0, 0x34}, 0x20) (async) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r3, 0x29, 0x11, 0x0, 0x8) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x2c, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x19}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) (async) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101080000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff08000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000f00)={0x38, 0x3e, 0x1, 0x70bd28, 0x4, {0x1}, [@nested={0x4, 0x14a}, @nested={0x14, 0x1, 0x0, 0x1, [@nested={0x10, 0x10, 0x0, 0x1, [@nested={0xc, 0x8, 0x0, 0x1, [@typed={0x8, 0x10c, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}]}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYRES16=r4], 0x6c}}, 0x4044100) (async) 2.31703381s ago: executing program 2 (id=2489): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha224)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="64a465e8c8b19b44ba4dea57970686c91b493ce03f82124b84ddbf2653a98ea3217f2b957cf30e84d68a03b3c29dc13fba42c25d98a3974d4bd7d1302be820437b", 0x41) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000300)={'wpan0\x00', 0x0}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) setsockopt$inet_tcp_int(r5, 0x6, 0xa, &(0x7f0000000080)=0x3, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xa, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="6a0ac4ff000000007110930000000000950b"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x90) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=ANY=[@ANYBLOB="b6ffb8eb", @ANYRES16=r3, @ANYBLOB="01002dbd7000ffdbdf251800000008000300", @ANYRES32=r4, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x804}, 0x40084) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x2, &(0x7f0000000200)=@raw=[@jmp={0x7, 0x0, 0xa, 0x1}, @exit], &(0x7f0000000000)='syzkaller\x00', 0x4}, 0x94) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r2, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha224)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="64a465e8c8b19b44ba4dea57970686c91b493ce03f82124b84ddbf2653a98ea3217f2b957cf30e84d68a03b3c29dc13fba42c25d98a3974d4bd7d1302be820437b", 0x41) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000f80), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000300)={'wpan0\x00'}) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) (async) setsockopt$inet_tcp_int(r5, 0x6, 0xa, &(0x7f0000000080)=0x3, 0x4) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xa, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="6a0ac4ff000000007110930000000000950b"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x90) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=ANY=[@ANYBLOB="b6ffb8eb", @ANYRES16=r3, @ANYBLOB="01002dbd7000ffdbdf251800000008000300", @ANYRES32=r4, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x804}, 0x40084) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x2, &(0x7f0000000200)=@raw=[@jmp={0x7, 0x0, 0xa, 0x1}, @exit], &(0x7f0000000000)='syzkaller\x00', 0x4}, 0x94) (async) 2.212735849s ago: executing program 3 (id=2491): r0 = socket$isdn(0x22, 0x2, 0x21) close(r0) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000000)) 2.101485995s ago: executing program 2 (id=2493): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bind$can_raw(r1, &(0x7f0000000080)={0x1d, r2}, 0x10) (async) bind$can_raw(r1, &(0x7f0000000080)={0x1d, r2}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmmsg(r3, &(0x7f00000000c0), 0x0, 0x20) shutdown(r1, 0x1) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180100002e0001"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_MASQ_REG_PROTO_MAX={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=ANY=[@ANYRES32=r0, @ANYRES64=r4, @ANYBLOB="00001700000000001c0037800b0001006970768a616e08000c000200cbbb4d2417b2d5300751b2aaaf355d3ef81a28e03fa6059e30b58019d0258196969ddac729e1b222dfdffb5364bccfe062"], 0x44}, 0x1, 0x0, 0x0, 0x200480d8}, 0x48080) 2.024496812s ago: executing program 3 (id=2494): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x4e20, @private=0xa010102}, {0x306, @remote}, 0x28, {0x2, 0x4e20, @multicast1}, 'pimreg\x00'}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') (async) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r1 = socket(0x8, 0x0, 0x8000) ioctl$SIOCPNENABLEPIPE(r1, 0x89ed, 0x0) (async) ioctl$sock_netrom_SIOCADDRT(r1, 0x6180, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r1) 1.868661401s ago: executing program 2 (id=2497): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, &(0x7f0000000000)=0x1, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="850000002f000000d4020001200000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x1, 0x473, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff60}, 0x48) 1.460032995s ago: executing program 8 (id=2505): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f00000001c0)=ANY=[@ANYBLOB="cd00000000000000"], 0x8) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x34, r3, 0x1, 0x70bd26, 0x25dfdbfe, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaaa}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x20006911}, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r5, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaac56f9de2aaaa5a86dd60f900f500140601fc010000000000000000000000000001fe800000000000feffffff00000000aa00004e22d32365399e5b268b3bb481b208eb85bd407508e04b59dc4e1039801054fd8d84ccb2e1fa668658316677985f4c043d65f38d52d9580a37d8cdd60cbe8c7ce4614c5db32b5bb35f479d", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002000090780000"], 0x0) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@ipv4_newnexthop={0x54, 0x68, 0x8, 0x70bd28, 0x25dfdbfb, {0x2, 0x0, 0x2, 0x0, 0x28}, [@NHA_ID={0x8, 0x1, 0x2}, @NHA_OIF={0x8}, @NHA_GATEWAY={0x14, 0x6, @ip4=@broadcast}, @NHA_BLACKHOLE={0x4}, @NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}, @NHA_OIF={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140100001f0005040000001300000000350000400c0001"], 0x114}], 0x1}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) r7 = socket(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000140)={0x0, 'veth0_macvtap\x00', {}, 0x865c}) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r9, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write(r9, &(0x7f0000000080)="18000300010003", 0x7) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="680000001000ffff25bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1720000021200000400012800c0001006d6163766c616e0030000280080003000300000008000100100000001c0005800a000400aaaaaaaaaa2d00000a0004003426f7b68ed1000008000500", @ANYRES32=r10], 0x68}, 0x1, 0x0, 0x0, 0x1}, 0xc000002) sendmmsg(r7, &(0x7f0000000000), 0x4000000000001f2, 0xfc) setsockopt$XDP_UMEM_FILL_RING(r7, 0x11b, 0x5, &(0x7f0000000000)=0x1000800, 0x4) 1.34614052s ago: executing program 7 (id=2507): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x8000, 0x7}, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=ANY=[@ANYBLOB="4533f7e3fa1a949b7b1afda2e88c5db1e1731257", @ANYRES16=r0, @ANYBLOB="010800040000ffdbdf250b00000008000300", @ANYRES32=r3, @ANYBLOB="20005080110001004abee33908f8eef16f162471f40000000800070001000000"], 0x3c}}, 0x0) 1.203103387s ago: executing program 4 (id=2508): syz_emit_ethernet(0x1a5, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x16f, 0x3a, 0x0, @remote, @mcast2, {[], @dest_unreach={0x1, 0x6, 0x0, 0x6, '\x00', {0x0, 0x6, "2cd826", 0x76, 0x4, 0xff, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, [@routing={0x32, 0xc, 0x2, 0x2, 0x0, [@private1, @private0, @empty, @private2, @private1, @rand_addr=' \x01\x00']}], "2fac063d0e77801562bf4868260a71727c2a51c2d19b1133edc360eb37d4e2da3aa4b7bdeed16b1aee7a99f04c8fe89c6a511bd6d48daf83893098fb2ae306df786b166eca960a33248bd1f3fe93e9139bbc96c41b000bd48c5761d45b2fbf46b54cb7f217bdfdfe933740f2bbb59ce9411579d10f98c8621d6a7970cf86554857bb2cb8e5a16449465018cbff1841545018f27fa2d04afb4b4786cd0fbc23fc5c3e7be1e91b8fcb18ec9c5f2abcfd507e5484dcb96d13d64c345b5451b3089e548b578386184e3cdc303d810d24b524a9c78344baf39d"}}}}}}}, 0x0) 1.20253849s ago: executing program 7 (id=2509): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt(r0, 0x8, 0x7fff, &(0x7f0000000140)=""/177, &(0x7f0000000040)=0xb1) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='tasks\x00', 0x2, 0x0) r3 = gettid() write$cgroup_pid(r2, &(0x7f00000002c0)=r3, 0x12) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000200)=0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000340)=@ipv6_newroute={0xdc, 0x18, 0x2, 0x70bd2b, 0x25dfdbfc, {0xa, 0x80, 0x80, 0x8, 0xfe, 0x4, 0xfd, 0x5, 0xf00}, [@RTA_METRICS={0x1b, 0x8, 0x0, 0x1, "17daf80376c4c37e033ef9ba741ef04aef2cb755f8b2ff"}, @RTA_UID={0x8, 0x19, r4}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x3}, @RTA_METRICS={0x92, 0x8, 0x0, 0x1, "9f36c244582ae15b770b8f83ce109837f45aed25d6e575807f4509309ecca99eff261cbbef02f16afd7df580d02c9c0dd87e48a2431a0a011c53e029221933f21ffd86ae29e33bb9a726270e2521b152577cf6a9c3036e2c17c730f6d022452ee546343a493473b4e4eb06683a2f5b6ff3003fdb3d4302744de2d80f99cb187a2eb2f0f7fe2a502a6ded6029ea5f"}]}, 0xdc}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newtaction={0x74, 0x30, 0xffff, 0x0, 0x0, {}, [{0x60, 0x1, [@m_ife={0x5c, 0x1, 0x0, 0x0, {{0x8}, {0x34, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}, @TCA_IFE_METALST={0x8, 0x6, [@IFE_META_SKBMARK={0x4, 0x1, @void}]}, @TCA_IFE_DMAC={0xa, 0x3, @multicast}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) 1.153290559s ago: executing program 8 (id=2510): r0 = socket$xdp(0x2c, 0x3, 0x0) socket$kcm(0x29, 0x5, 0x0) accept$ax25(r0, 0x0, 0x0) 1.130002234s ago: executing program 3 (id=2511): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x1038, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newlink={0x68, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x34, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_LOCAL={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x15}}, @IFLA_GRE_LINK={0x8, 0x1, r2}]}}}]}, 0x68}}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000740)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x5, [@struct={0x1, 0x2, 0x0, 0x4, 0x1, 0x4, [{0x0, 0x4, 0x9}, {0xc, 0x5, 0x7}]}]}, {0x0, [0x61, 0x2e, 0x5f]}}, &(0x7f0000000f40)=""/4089, 0x41, 0xff9, 0x1}, 0x20) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000040)={0x4, 0x1ae, 0x0, {0x0, 0x2710}, {}, {}, 0x1, @can={{0x0, 0x1, 0x1, 0x1}, 0x85, 0x3, 0x0, 0x0, "3868efaafd720c4b"}}, 0x48}, 0x1, 0x0, 0x0, 0x40814}, 0x0) 1.032724633s ago: executing program 4 (id=2512): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a300000000040000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000140003800800014000000000080002400000000050000000160a0103000b000000000000010000000900020073797a30000000000900010073797a30000000001c000380"], 0xd8}}, 0x0) 1.031948501s ago: executing program 7 (id=2513): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x28, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r10, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r5, @ANYBLOB="05005b"], 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="92d8334a14d9886f0ba0a30aff60f100", @ANYRES16=r2, @ANYBLOB="010000000000000000000800000008000300", @ANYRES32=r1, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 1.008686805s ago: executing program 8 (id=2514): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'wlan0\x00', 0x7101}) write$cgroup_devices(r0, &(0x7f0000000000)=ANY=[], 0x1000d) 963.097528ms ago: executing program 3 (id=2515): r0 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000600)=@getsa={0x34, 0x12, 0x1, 0x0, 0x0, {@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x0, 0x32}, [@mark={0xc}]}, 0x34}}, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101}) (async) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f00000001c0)=0x4, 0x4) (async, rerun: 32) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000000000e500000000000000808500000053000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000005000000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) (rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async, rerun: 32) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) (rerun: 32) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, 0x0, 0x0) (async) syz_emit_ethernet(0x46, &(0x7f0000000b00)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "4a00a6", 0x10, 0x0, 0x0, @private0, @remote, {[@dstopts={0x0, 0x1, '\x00', [@ra, @ra={0x31}]}]}}}}}, 0x0) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000340)={0x0, 0x80c}, &(0x7f0000000380)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000003c0)={0x3, 0xf9, 0x204, 0x2, 0x1, 0x0, 0x1, 0x5, r7}, 0x20) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x58, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}}, 0x0) (async) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) (async, rerun: 64) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @empty}, 0x10) (rerun: 64) setsockopt$sock_int(r5, 0x1, 0x7, &(0x7f00000002c0), 0x4) (async) sendto$inet(r5, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0) (async) setsockopt$inet6_group_source_req(r1, 0x29, 0x2d, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private2}}}, 0x108) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="050000001000f5a400000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="8009000100626f6e640000000054000280050001000500000005000d000200000008000200", @ANYRES32=0x0, @ANYBLOB="060018"], 0x84}}, 0x0) 860.483212ms ago: executing program 2 (id=2516): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r0) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r0) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000eeff120000000a0004007778616e3300000008001500", @ANYRES32, @ANYBLOB="080001"], 0x30}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffb}]}, &(0x7f0000000140)=0x10) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r8, 0x7) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r9, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) ioctl$BTRFS_IOC_RM_DEV(r9, 0x5000940b, &(0x7f00000013c0)={{r8}, "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"}) bind$inet6(r9, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r9, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x7a, &(0x7f0000000340)={r7, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r5, 0x84, 0x1a, &(0x7f00000004c0)={r10}, &(0x7f0000000080)=0x8) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELRULE={0x2c, 0x8, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xa8}}, 0x8805) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001400010029bd7000fddbdf250218c002", @ANYRES32=r11, @ANYBLOB="08000200ffffffff14000600bbff0048cb"], 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x4) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000100)={0x3, [0x5, 0xf92, 0x3]}, &(0x7f0000000240)=0xa) 839.154741ms ago: executing program 7 (id=2517): r0 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @private}, &(0x7f0000000040)=0x10) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f00000001c0)={'broute\x00', 0x0, 0x4, 0xf7, [0xe84f, 0xcde, 0x4, 0x3, 0x83], 0x1, &(0x7f0000000080)=[{}], &(0x7f00000000c0)=""/247}, &(0x7f0000000240)=0x78) (async) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000380)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x2000000002c0, 0x0, 0x0, 0x2000000002f0, 0x200000000320], 0x0, &(0x7f0000000280), &(0x7f00000002c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffc}, {}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}]}, 0x108) (async) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000400)={'icmp6\x00'}, &(0x7f0000000440)=0x1e) (async) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000480)={@local, @rand_addr=0x64010102, 0x1, 0x7, [@private=0xa010101, @private=0xa010102, @local, @loopback, @local, @remote, @multicast2]}, 0x2c) (async) writev(r0, &(0x7f00000006c0)=[{&(0x7f00000004c0)="ce29b9da870a9d031d771a170a1de10e22d7c97d5a4d4a391ce23aae78f86f6e780ae733a2b19d27983c3f51441be98a4d2670", 0x33}, {&(0x7f0000000500)="c3cda6c5363f1f542af7bef73b377ab1699906ba7f80aa0484320271ea4fdfba6324c7c00aeda17ad540715fb9ecb67d7497a8ec8df7da3fbe11618a381604f1e2dfb3376cd58418a1804c268134fd3223c0bf5803ceb6f8cefc41c9a89a5da11b909975e79ee5fcae4333d31d81832e590e5ce024b05a755fef273b4c58c03421fedd23f8294b6076d34da6", 0x8c}, {&(0x7f00000005c0)="3cc6fdf9ef8132bc121ff5275620a06d6dab220deb218efd16ef44da58a65af3b216881e148037b20e9a48f91c5a815c7a738b263d357da1680162f9ea76423b273a1879add3db1abeb0f5f123bdd48a38b6a9223f6534542eca68ec8d12784913f69dc707dda91a2675d2d01fcd1bf931a1ab7971db157ddddc1b3c8fe6222a43dd8416a3c1e2d76eff448c2e30d2e480a15d004b9f3ab323ecdae8e926ee0c8848a4582ebc646fae3ad41d1a74afa76bf55439b97691355e38b83b3b1688794e3ba2", 0xc3}], 0x3) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000700)={0x0, @local, @dev}, &(0x7f0000000740)=0xc) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000007c0)={'wg2\x00'}) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10010, r2, 0x5c461000) syz_emit_ethernet(0x26, &(0x7f0000000800)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}, @multicast, @val={@val={0x88a8, 0x5, 0x0, 0x3}, {0x8100, 0x5, 0x1, 0x3}}, {@can={0xc, {{0x3, 0x0, 0x0, 0x1}, 0x6, 0x0, 0x0, 0x0, "8421b4337371aa88"}}}}, &(0x7f0000000840)={0x0, 0x3, [0x453, 0xb11, 0x811, 0x82c]}) (async) getsockopt$IP_SET_OP_GET_BYINDEX(r1, 0x1, 0x53, &(0x7f0000000880)={0x7, 0x7, 0x2}, &(0x7f00000008c0)=0x28) (async) syz_extract_tcp_res$synack(&(0x7f0000000900), 0x1, 0x0) (async) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000940)={0x0, 0x1, 0x2, [0x7, 0x244]}, &(0x7f0000000980)=0xc) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f00000009c0)={r3, @in={{0x2, 0x4e22, @remote}}}, 0x84) (async) ioctl$AUTOFS_IOC_CATATONIC(r1, 0x9362, 0x0) (async) socketpair(0x2, 0x6, 0x7, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$WPAN_WANTLQI(r5, 0x0, 0x3, &(0x7f0000000ac0), &(0x7f0000000b00)=0x4) getpeername$llc(r5, &(0x7f0000000b40)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000b80)=0x10) r6 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000bc0)={{0xc, @local, 0x4e24, 0x0, 'lblc\x00', 0x10, 0x8, 0x61}, {@broadcast, 0x4e22, 0x2, 0x7570, 0x3, 0xc3}}, 0x44) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000c40)={'batadv0\x00', 0x100}) (async) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000c80)={0x73, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e23, 0x2, 'wlc\x00', 0x0, 0x3, 0x6d}, 0x2c) (async) ioctl$BTRFS_IOC_SET_FEATURES(r5, 0x40309439, &(0x7f0000000cc0)={0x0, 0x3, 0x1}) (async) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000d00)={r3, 0xa0c2, 0x10, 0x2}, &(0x7f0000000d40)=0x10) (async) socket$netlink(0x10, 0x3, 0xc) (async) sendto$inet(r5, &(0x7f0000000d80)="07d454559a532045085424abe7523c6b6ff11ea770c094204c2ea58d559bbbade729236efeca27df74d7ac877353dfac21c326cf39d96a60dc52ef24ab486df96b0b50c1b112b643282cf19ff77b184471b08b698e0748428f4ecd6ef3fbcaf4f1da1074aa4e8eb8cc4fcc67f789163088733b0ce7a5103080171b186caa6720e747042a2b6610fef97c5c70083e7ac89e297a46bcba661775cfe58db9e7e2a35f9c3680f732a3118f12ba7bef1052c9651970282d86f1f04df36128e611cbde7d648be3682f329439387cb8af1054498786fb19a31dc1c9824687e2", 0xdc, 0x4004000, &(0x7f0000000e80)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r7, 0x84, 0x6, &(0x7f0000000ec0)={r3, @in6={{0xa, 0x4e24, 0x5, @mcast1, 0x6}}}, &(0x7f0000000f80)=0x84) ioctl$F2FS_IOC_RESIZE_FS(r7, 0x4008f510, &(0x7f0000000fc0)=0x1000) 794.001121ms ago: executing program 8 (id=2518): syz_emit_ethernet(0x76, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaa2b8c421ffccf798e24f2d8c508da618987aaaaaaaaaa00020800bbac1414aa00004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002000090780000"], 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0041, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="034886dd010000000000140036cb6cc46000000003"], 0xfdef) write$tun(r0, &(0x7f0000000080)=ANY=[@ANYRESOCT], 0xfdef) 793.613503ms ago: executing program 4 (id=2519): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000711046000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610420000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r3, 0x821, 0x70bd26, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x80) unshare(0x10000100) 692.390023ms ago: executing program 2 (id=2520): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x4, 0x1, 0x0, 0x0, 0x0, {0x1, 0x0, 0x1}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}}, 0x800) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_SECURITY(r1, 0x0, 0x1, &(0x7f0000000100), &(0x7f0000000140)=0x4) bind$netlink(r0, &(0x7f0000000180)={0x10, 0x0, 0x25dfdbfb, 0x40}, 0xc) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, &(0x7f00000001c0)={0x1, 0xffffffff00000000}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x78, 0x2, 0x6, 0x201, 0x0, 0x0, {0xe, 0x0, 0x4}, [@IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x8}, @IPSET_ATTR_TIMEOUT={0x8}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x1}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x41010) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f0000000340)='wg0\x00', 0x4) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x28, r2, 0x800, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x0, 0x32}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x60004845}, 0x4000000) r4 = socket$inet(0x2, 0x2, 0xfff) connect$inet(r4, &(0x7f0000000500)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000540), 0xffffffffffffffff) getsockopt$WPAN_WANTLQI(r1, 0x0, 0x3, &(0x7f0000000580), &(0x7f00000005c0)=0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000600)={r5}) recvfrom$unix(r6, &(0x7f0000000640)=""/152, 0x98, 0x100, &(0x7f0000000700)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r6, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x2c, r2, 0x300, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x7e}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4080}, 0x20000041) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000880)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000900), r6) sendmsg$DEVLINK_CMD_RATE_SET(r7, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x54, r8, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x2}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x2}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x40014}, 0xc840) recvmsg(r1, &(0x7f0000003c00)={&(0x7f0000000a40)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000003b80)=[{&(0x7f0000000ac0)=""/4096, 0x1000}, {&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f0000002ac0)=""/140, 0x8c}, {&(0x7f0000002b80)=""/4096, 0x1000}], 0x4, &(0x7f0000003bc0)=""/35, 0x23}, 0x40000082) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r6, &(0x7f0000003dc0)={&(0x7f0000003c40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000003d80)={&(0x7f0000003c80)={0xf4, r8, 0x200, 0x70bd2c, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x36}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}}]}, 0xf4}, 0x1, 0x0, 0x0, 0x24000090}, 0x4000) syz_genetlink_get_family_id$devlink(&(0x7f0000003e00), r9) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000003e40), r10) getsockopt$WPAN_WANTACK(r9, 0x0, 0x0, &(0x7f0000003e80), &(0x7f0000003ec0)=0x4) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000004000)={'syztnl1\x00', &(0x7f0000003f40)={'sit0\x00', 0x0, 0x1, 0x80, 0x3, 0x7, {{0x1f, 0x4, 0x0, 0x1, 0x7c, 0x64, 0x0, 0x3, 0x29, 0x0, @multicast1, @remote, {[@generic={0x94, 0x12, "54bab3c9dbe17d09ecd491bbe8e76479"}, @end, @ra={0x94, 0x4}, @cipso={0x86, 0x26, 0x0, [{0x0, 0x3, '4'}, {0x7, 0xd, "51cfc2e03f8fdb6b567ace"}, {0x2, 0xe, "0c396878ed9437ba920c3f28"}, {0x7, 0x2}]}, @rr={0x7, 0x1b, 0x95, [@remote, @empty, @multicast1, @multicast2, @loopback, @private=0xa010101]}, @ra={0x94, 0x4}, @lsrr={0x83, 0xb, 0x8d, [@loopback, @private=0xa010101]}]}}}}}) sendmsg$nl_route_sched(r5, &(0x7f00000040c0)={&(0x7f0000003f00)={0x10, 0x0, 0x0, 0x10008008}, 0xc, &(0x7f0000004080)={&(0x7f0000004040)=@gettclass={0x24, 0x2a, 0x400, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x8, 0xffea}, {0x10, 0x7}, {0x3, 0x8}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x720649df532cff1e}, 0x800) 567.545348ms ago: executing program 4 (id=2521): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000000000061117c0000000000850000000100000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010003df600"/20, @ANYRES16=r0, @ANYBLOB="000000e8ff07000014000300000000000000000000000000000000001800128008000100707070000c00028008000100", @ANYRES32=r1], 0x4c}, 0x1, 0x0, 0x0, 0x2000c000}, 0x4841) 540.681091ms ago: executing program 7 (id=2522): socket$inet_udplite(0x2, 0x2, 0x88) (async) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="00000000000000001c001a80080002800800e500080000003e120000080002001040e5"], 0x44}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002400)={0x40, 0x3c, 0x107, 0x0, 0x4000, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x72}]}, @typed={0x14, 0x7, 0x0, 0x0, @ipv6=@empty}]}, 0x40}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) 408.297679ms ago: executing program 3 (id=2523): r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$sock(r0, &(0x7f0000005cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002b00)=[@timestamping={{0x14, 0x1, 0x25, 0x8d}}], 0x18}}], 0x1, 0x40081) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x20) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) mmap(&(0x7f0000ff2000/0xd000)=nil, 0xd000, 0x2000004, 0x4001011, r2, 0x34da2000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a010100000000000000000100000009000300040000000000000014000480080002400000000008000140000000000900010073797a300000000060000000060a010400000000000000000100000038000480240001800b00010072656a65637400001400028008000140000000000500020000000000100001800a000100726564697200000008000b40000000000900010073797a300000000014000000110001"], 0xe8}}, 0x0) 283.90687ms ago: executing program 4 (id=2524): r0 = socket(0x10, 0x3, 0x2) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000000000)='\"', 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @loopback, @local}, &(0x7f0000000080)=0xc) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@setlink={0x68, 0x13, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2006, 0x300}, [@IFLA_MTU={0x8, 0x4, 0x80000000}, @IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}, @IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x4a, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}]}]}, @IFLA_LINKMODE={0x5, 0x11, 0xfa}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009112c1000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) 277.759145ms ago: executing program 8 (id=2525): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, &(0x7f0000000080), &(0x7f0000000140)=0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r1, 0x20, &(0x7f00000001c0)={&(0x7f0000000280)=""/159, 0x9f, 0x0, &(0x7f0000000180)=""/32, 0x20}}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000001500)=ANY=[@ANYBLOB="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"/3592], &(0x7f0000014ff5)='GPL\x00', 0x2, 0x1000, &(0x7f0000002340)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x6}, 0x10, r2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r3, 0x3a, 0xcc0, 0xcc0, &(0x7f0000000200)="e460cdfbef2408322900119386dd6a00000000072feb311ccd3ec8a755c1e1380081ffad008036e8d50000ff010000001400000500242f09880bd320d98a61a90057e9bf", 0x0, 0x401, 0x0, 0xa8, 0x0, &(0x7f00000011c0)="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", &(0x7f00000004c0)="b33620dad49cc786c86a5c5444e76c2a1ef9224fb91083d2ba4368e98a14467703e9ee585196fa95320bd53c6a76ad443b81dc833b22016aeaafb4597c06919ecf7e5ea4d0a8995feaaf9a9feb0c4b5277398049a2f5475f6ceb26bd128189f4b1b3c662d3d1630717791de0cdac3ce6e01c5719b670da5ded7dfa9dda53f04ad151cb952d708eaa69e983dcfab36b2dac3f3fe85e1d86b3d73d4879fb11cfac51f3cb669a50", 0x1, 0xfffffffd}, 0x22) 116.704784ms ago: executing program 7 (id=2526): r0 = socket(0x840000000002, 0x3, 0xff) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x9, @empty, 0x5}, 0x1c) r1 = socket$alg(0x26, 0x5, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x21, &(0x7f0000000040), 0x4) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x49, &(0x7f00000000c0)}) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r2, &(0x7f0000000040)=ANY=[], 0x6) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539(cbc(serpent),vmac64(xtea))\x00'}, 0x58) r3 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000080), r3) 112.527814ms ago: executing program 8 (id=2527): r0 = socket$kcm(0x10, 0x2, 0x10) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2d, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x104, 0xf2, 0x0, 0x1, [@typed={0xc, 0x16, 0x0, 0x0, @u64=0xfac0a}, @typed={0x5a, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8cd1"]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x7}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x4}, @NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0xffffffff}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="f000000010a33b6816b28a6d92039b0ba400130728bd700000000000ac1e0101000000000000000000000000ac1414aa0000000000000000000000004e230001000000000200", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb00000000320000002001000000000000000000000000000100000000000000000000000000000000080000000000000001000000010000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000fcffffffffffffff0c000000000000000000000028bd7000000000000200"/168], 0xf0}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x1, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x3, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @dev, @multicast2}, &(0x7f0000000140)=0xc) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000003c0)={'bond_slave_0\x00', &(0x7f00000001c0)=@ethtool_test={0x1a, 0x8, 0x0, 0x4, [0x6, 0x98, 0xff, 0x47d6b08e]}}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000700)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f00000005c0)=@ipmr_newroute={0x13c, 0x18, 0x100, 0x70bd25, 0x25dfdbfd, {0x80, 0x0, 0x14, 0x3, 0xfd, 0x1, 0xff, 0x6, 0xa00}, [@RTA_METRICS={0x100, 0x8, 0x0, 0x1, "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"}, @RTA_DPORT={0x6, 0x1d, 0x4e22}, @RTA_GATEWAY={0x8, 0x5, @multicast1}, @RTA_FLOW={0x8, 0xb, 0xf323}, @RTA_FLOW={0x8, 0xb, 0x86d}]}, 0x13c}}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710419000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff) 99.253122ms ago: executing program 3 (id=2528): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}]}]}], {0x14}}, 0x90}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="f80000003e000701feffffff00000000017c0000040042800c00018006000600800a0000d1000280cb001480"], 0xf8}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 0s ago: executing program 4 (id=2529): r0 = socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x2}}}}}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "01044a", 0x18, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @remote}}}}}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000240)="f2435f0100088000000000850800", 0xe, 0x20004042, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r2, 0x11, 0x1, &(0x7f0000000100)=""/168, &(0x7f00000001c0)=0xa8) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013000100000000000000000000000002", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r1, @ANYBLOB="1400350064756d6d7930"], 0x3c}}, 0x0) socket$packet(0x11, 0x3, 0x300) (async) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x2}}}}}}, 0x0) (async) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "01044a", 0x18, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @remote}}}}}}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)) (async) sendto$packet(r0, &(0x7f0000000240)="f2435f0100088000000000850800", 0xe, 0x20004042, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) getsockopt$bt_sco_SCO_OPTIONS(r2, 0x11, 0x1, &(0x7f0000000100)=""/168, &(0x7f00000001c0)=0xa8) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013000100000000000000000000000002", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r1, @ANYBLOB="1400350064756d6d7930"], 0x3c}}, 0x0) (async) kernel console output (not intermixed with test programs): T10757] netlink: 'syz.2.1393': attribute type 1 has an invalid length. [ 179.770412][T10761] veth0_to_team: entered promiscuous mode [ 180.137406][T10785] netlink: 'syz.4.1404': attribute type 11 has an invalid length. [ 180.526571][T10810] net_ratelimit: 60 callbacks suppressed [ 180.526589][T10810] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 180.624159][T10822] xfrm1: entered allmulticast mode [ 180.742018][T10827] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 180.887273][T10836] netlink: 'syz.2.1420': attribute type 1 has an invalid length. [ 180.939784][T10836] xt_l2tp: missing protocol rule (udp|l2tpip) [ 181.045470][T10836] bond8: (slave ip6gretap2): Enslaving as a backup interface with an up link [ 181.087838][T10836] veth7: entered promiscuous mode [ 181.107449][T10836] bond8: (slave veth7): Enslaving as a backup interface with a down link [ 181.223798][T10850] wg1 speed is unknown, defaulting to 1000 [ 181.291619][T10857] __nla_validate_parse: 17 callbacks suppressed [ 181.291639][T10857] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1426'. [ 181.318182][T10857] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1426'. [ 181.353110][T10852] netlink: 'syz.4.1425': attribute type 1 has an invalid length. [ 181.361019][T10852] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1425'. [ 181.449208][T10866] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1428'. [ 181.805164][T10882] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1434'. [ 181.814383][T10882] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 181.911601][T10889] openvswitch: netlink: IP tunnel dst address not specified [ 181.988494][T10893] wg1 speed is unknown, defaulting to 1000 [ 182.724329][T10926] netlink: 'syz.4.1446': attribute type 1 has an invalid length. [ 182.727364][T10927] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1447'. [ 182.761135][T10926] 8021q: adding VLAN 0 to HW filter on device bond5 [ 182.816097][T10926] bond5: (slave gretap1): making interface the new active one [ 182.826609][T10926] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 182.969296][T10939] bond6: option resend_igmp: invalid value (32767) [ 182.976267][T10939] bond6: option resend_igmp: allowed values 0 - 255 [ 182.991672][T10939] bond6 (unregistering): Released all slaves [ 183.088718][T10942] team0: Device wireguard0 is of different type [ 183.298092][T10956] macvtap1: entered promiscuous mode [ 183.303955][T10956] macvtap1: entered allmulticast mode [ 183.310180][T10958] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1456'. [ 183.310489][T10956] team0: Device macvtap1 is already an upper device of the team interface [ 183.350284][T10960] FAULT_INJECTION: forcing a failure. [ 183.350284][T10960] name failslab, interval 1, probability 0, space 0, times 0 [ 183.363242][T10960] CPU: 1 UID: 0 PID: 10960 Comm: syz.3.1458 Not tainted syzkaller #0 PREEMPT(full) [ 183.363268][T10960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 183.363280][T10960] Call Trace: [ 183.363288][T10960] [ 183.363296][T10960] dump_stack_lvl+0x189/0x250 [ 183.363325][T10960] ? __pfx____ratelimit+0x10/0x10 [ 183.363347][T10960] ? __pfx_dump_stack_lvl+0x10/0x10 [ 183.363371][T10960] ? __pfx__printk+0x10/0x10 [ 183.363414][T10960] should_fail_ex+0x414/0x560 [ 183.363449][T10960] should_failslab+0xa8/0x100 [ 183.363479][T10960] __kmalloc_cache_noprof+0x70/0x3d0 [ 183.363506][T10960] ? sctp_add_bind_addr+0x8c/0x370 [ 183.363530][T10960] sctp_add_bind_addr+0x8c/0x370 [ 183.363554][T10960] sctp_copy_local_addr_list+0x30b/0x4e0 [ 183.363577][T10960] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 183.363597][T10960] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 183.363621][T10960] ? sctp_v4_is_any+0x35/0x60 [ 183.363640][T10960] ? sctp_copy_one_addr+0x93/0x360 [ 183.363663][T10960] sctp_bind_addr_copy+0x189/0x3c0 [ 183.363691][T10960] sctp_connect_new_asoc+0x2e0/0x690 [ 183.363720][T10960] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 183.363747][T10960] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 183.363772][T10960] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 183.363795][T10960] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 183.363821][T10960] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 183.363844][T10960] ? security_sctp_bind_connect+0x7e/0x2e0 [ 183.363875][T10960] sctp_sendmsg+0x155c/0x2810 [ 183.363912][T10960] ? __pfx_sctp_sendmsg+0x10/0x10 [ 183.363940][T10960] ? aa_sk_perm+0x81e/0x950 [ 183.363976][T10960] ? __pfx_aa_sk_perm+0x10/0x10 [ 183.364010][T10960] ? sock_rps_record_flow+0x19/0x410 [ 183.364042][T10960] ? inet_sendmsg+0x2f4/0x370 [ 183.364069][T10960] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 183.364095][T10960] __sock_sendmsg+0x19c/0x270 [ 183.364129][T10960] ____sys_sendmsg+0x505/0x830 [ 183.364167][T10960] ? __pfx_____sys_sendmsg+0x10/0x10 [ 183.364207][T10960] ? import_iovec+0x74/0xa0 [ 183.364238][T10960] ___sys_sendmsg+0x21f/0x2a0 [ 183.364266][T10960] ? __pfx____sys_sendmsg+0x10/0x10 [ 183.364333][T10960] ? __fget_files+0x2a/0x420 [ 183.364350][T10960] ? __fget_files+0x3a0/0x420 [ 183.364380][T10960] __x64_sys_sendmsg+0x19b/0x260 [ 183.364409][T10960] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 183.364446][T10960] ? __pfx_ksys_write+0x10/0x10 [ 183.364471][T10960] ? rcu_is_watching+0x15/0xb0 [ 183.364497][T10960] ? do_syscall_64+0xbe/0x3b0 [ 183.364524][T10960] do_syscall_64+0xfa/0x3b0 [ 183.364545][T10960] ? lockdep_hardirqs_on+0x9c/0x150 [ 183.364567][T10960] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.364587][T10960] ? clear_bhb_loop+0x60/0xb0 [ 183.364609][T10960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.364626][T10960] RIP: 0033:0x7f728698eec9 [ 183.364644][T10960] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 183.364662][T10960] RSP: 002b:00007f7287860038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 183.364683][T10960] RAX: ffffffffffffffda RBX: 00007f7286be5fa0 RCX: 00007f728698eec9 [ 183.364697][T10960] RDX: 0000000004000080 RSI: 0000200000000680 RDI: 0000000000000003 [ 183.364710][T10960] RBP: 00007f7287860090 R08: 0000000000000000 R09: 0000000000000000 [ 183.364721][T10960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 183.364732][T10960] R13: 00007f7286be6038 R14: 00007f7286be5fa0 R15: 00007ffefac74ef8 [ 183.364764][T10960] [ 183.771079][T10962] netlink: 'syz.1.1460': attribute type 1 has an invalid length. [ 184.055443][ T5189] Bluetooth: hci4: command tx timeout [ 184.117623][T10990] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1470'. [ 184.122153][T10987] netlink: 'syz.2.1469': attribute type 12 has an invalid length. [ 184.130117][T10991] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1470'. [ 184.196266][T10993] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1468'. [ 184.412779][T11003] FAULT_INJECTION: forcing a failure. [ 184.412779][T11003] name failslab, interval 1, probability 0, space 0, times 0 [ 184.432653][T11010] pim6reg: entered allmulticast mode [ 184.440031][T11003] CPU: 1 UID: 0 PID: 11003 Comm: syz.4.1473 Not tainted syzkaller #0 PREEMPT(full) [ 184.440056][T11003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 184.440068][T11003] Call Trace: [ 184.440074][T11003] [ 184.440082][T11003] dump_stack_lvl+0x189/0x250 [ 184.440109][T11003] ? __pfx____ratelimit+0x10/0x10 [ 184.440131][T11003] ? __pfx_dump_stack_lvl+0x10/0x10 [ 184.440155][T11003] ? __pfx__printk+0x10/0x10 [ 184.440207][T11003] should_fail_ex+0x414/0x560 [ 184.440243][T11003] should_failslab+0xa8/0x100 [ 184.440273][T11003] __kmalloc_cache_noprof+0x70/0x3d0 [ 184.440300][T11003] ? sctp_add_bind_addr+0x8c/0x370 [ 184.440324][T11003] sctp_add_bind_addr+0x8c/0x370 [ 184.440349][T11003] sctp_copy_local_addr_list+0x30b/0x4e0 [ 184.440373][T11003] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 184.440392][T11003] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 184.440417][T11003] ? sctp_v4_is_any+0x35/0x60 [ 184.440437][T11003] ? sctp_copy_one_addr+0x93/0x360 [ 184.440461][T11003] sctp_bind_addr_copy+0x189/0x3c0 [ 184.440488][T11003] sctp_connect_new_asoc+0x2e0/0x690 [ 184.440517][T11003] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 184.440542][T11003] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 184.440567][T11003] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 184.440590][T11003] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 184.440614][T11003] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 184.440637][T11003] ? security_sctp_bind_connect+0x7e/0x2e0 [ 184.440668][T11003] sctp_sendmsg+0x155c/0x2810 [ 184.440714][T11003] ? __pfx_sctp_sendmsg+0x10/0x10 [ 184.440742][T11003] ? aa_sk_perm+0x81e/0x950 [ 184.440776][T11003] ? __pfx_aa_sk_perm+0x10/0x10 [ 184.440807][T11003] ? sock_rps_record_flow+0x19/0x410 [ 184.440847][T11003] ? inet_sendmsg+0x2f4/0x370 [ 184.440874][T11003] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 184.440900][T11003] __sock_sendmsg+0x19c/0x270 [ 184.440934][T11003] ____sys_sendmsg+0x505/0x830 [ 184.440966][T11003] ? __pfx_____sys_sendmsg+0x10/0x10 [ 184.441002][T11003] ? import_iovec+0x74/0xa0 [ 184.441033][T11003] ___sys_sendmsg+0x21f/0x2a0 [ 184.441061][T11003] ? __pfx____sys_sendmsg+0x10/0x10 [ 184.441128][T11003] ? __fget_files+0x2a/0x420 [ 184.441145][T11003] ? __fget_files+0x3a0/0x420 [ 184.441176][T11003] __x64_sys_sendmsg+0x19b/0x260 [ 184.441209][T11003] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 184.441245][T11003] ? __pfx_ksys_write+0x10/0x10 [ 184.441269][T11003] ? rcu_is_watching+0x15/0xb0 [ 184.441295][T11003] ? do_syscall_64+0xbe/0x3b0 [ 184.441323][T11003] do_syscall_64+0xfa/0x3b0 [ 184.441343][T11003] ? lockdep_hardirqs_on+0x9c/0x150 [ 184.441363][T11003] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.441383][T11003] ? clear_bhb_loop+0x60/0xb0 [ 184.441407][T11003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.441426][T11003] RIP: 0033:0x7f3c0318eec9 [ 184.441444][T11003] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 184.441461][T11003] RSP: 002b:00007f3c04033038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 184.441481][T11003] RAX: ffffffffffffffda RBX: 00007f3c033e5fa0 RCX: 00007f3c0318eec9 [ 184.441496][T11003] RDX: 0000000004000080 RSI: 0000200000000680 RDI: 0000000000000003 [ 184.441508][T11003] RBP: 00007f3c04033090 R08: 0000000000000000 R09: 0000000000000000 [ 184.441520][T11003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 184.441532][T11003] R13: 00007f3c033e6038 R14: 00007f3c033e5fa0 R15: 00007fff8de1e058 [ 184.441566][T11003] [ 184.496305][T11010] pim6reg1: entered promiscuous mode [ 184.860096][T11010] pim6reg1: entered allmulticast mode [ 185.556587][T11079] netlink: 'syz.4.1492': attribute type 10 has an invalid length. [ 185.566468][T11079] dummy0: entered promiscuous mode [ 185.573035][T11079] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 186.315326][T11096] tipc: Enabling of bearer rejected, failed to enable media [ 186.348689][T11101] __nla_validate_parse: 7 callbacks suppressed [ 186.348708][T11101] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1502'. [ 186.366428][T11101] 1ªî{X¹¦: renamed from 30ªî{X¹¦ [ 186.375452][T11101] 1ªî{X¹¦: entered allmulticast mode [ 186.382780][T11101] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 186.427124][T11104] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1503'. [ 186.556221][T11110] netlink: 'syz.2.1504': attribute type 1 has an invalid length. [ 186.591805][T11110] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 186.636616][T11122] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1505'. [ 186.694737][T11122] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1505'. [ 186.714737][T11122] netlink: 50 bytes leftover after parsing attributes in process `syz.3.1505'. [ 186.738457][T11122] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 187.005633][T11139] block nbd1: server does not support multiple connections per device. [ 187.019933][T11139] block nbd1: shutting down sockets [ 187.043128][T11153] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1515'. [ 187.053934][T11139] tipc: Invalid UDP bearer configuration [ 187.053989][T11139] tipc: Enabling of bearer rejected, failed to enable media [ 187.174417][T11157] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1516'. [ 187.201123][T11159] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1517'. [ 187.215345][T11159] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1517'. [ 187.227566][T11159] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 187.243512][T11160] netlink: 576 bytes leftover after parsing attributes in process `syz.3.1516'. [ 187.263136][T11159] netlink: 'syz.1.1517': attribute type 3 has an invalid length. [ 187.273099][T11162] !€ÿ: renamed from bond_slave_0 [ 187.635365][T11196] netlink: 'syz.3.1526': attribute type 39 has an invalid length. [ 188.000691][T11215] wg1 speed is unknown, defaulting to 1000 [ 188.501623][T11230] tipc: Enabled bearer , priority 0 [ 188.526528][T11230] syzkaller0: entered promiscuous mode [ 188.566225][T11230] syzkaller0: entered allmulticast mode [ 188.613473][T11230] tipc: Resetting bearer [ 188.640917][T11229] tipc: Resetting bearer [ 188.665612][T11229] tipc: Disabling bearer [ 188.922947][T11251] veth0: entered promiscuous mode [ 188.931761][T11251] tipc: Can't bind to reserved service type 1 [ 189.021536][T11254] syzkaller0: entered promiscuous mode [ 189.034081][T11254] syzkaller0: entered allmulticast mode [ 189.041190][T11250] veth0: left promiscuous mode [ 191.667534][T11343] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32) [ 191.959733][T11362] netlink: 'syz.2.1578': attribute type 83 has an invalid length. [ 191.968654][T11362] netlink: 'syz.2.1578': attribute type 10 has an invalid length. [ 191.990772][T11362] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.999341][T11362] bridge_slave_1: left allmulticast mode [ 192.006629][T11362] bridge_slave_1: left promiscuous mode [ 192.012390][T11362] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.027194][T11362] bridge_slave_1: entered promiscuous mode [ 192.033683][T11362] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 192.314429][T11375] ieee802154 phy0 wpan0: encryption failed: -22 [ 192.483583][ T5866] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 192.493521][ T5866] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 192.502600][ T5866] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 192.512788][ T5866] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 192.521155][ T5866] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 192.600866][T11382] wg1 speed is unknown, defaulting to 1000 [ 192.764707][T11389] netlink: 'syz.2.1583': attribute type 11 has an invalid length. [ 192.804724][T11389] __nla_validate_parse: 9 callbacks suppressed [ 192.804741][T11389] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1583'. [ 192.969000][T11382] chnl_net:caif_netlink_parms(): no params data found [ 193.058886][T11403] netlink: 264 bytes leftover after parsing attributes in process `syz.4.1587'. [ 193.068491][T11403] netlink: 264 bytes leftover after parsing attributes in process `syz.4.1587'. [ 193.123233][T11382] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.130777][T11382] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.141559][T11382] bridge_slave_0: entered allmulticast mode [ 193.154575][T11382] bridge_slave_0: entered promiscuous mode [ 193.184327][T11382] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.192814][T11382] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.201384][T11382] bridge_slave_1: entered allmulticast mode [ 193.210020][T11382] bridge_slave_1: entered promiscuous mode [ 193.248444][T11408] bond6: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 193.261047][T11408] bond6 (unregistering): Released all slaves [ 193.302667][T11382] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 193.317140][T11382] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 193.398185][T11382] team0: Port device team_slave_0 added [ 193.408169][T11382] team0: Port device team_slave_1 added [ 193.457636][T11382] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 193.465478][T11382] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.492298][T11382] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 193.512454][T11382] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 193.519832][T11382] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.547869][T11382] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 193.574574][T11413] syzkaller1: entered promiscuous mode [ 193.582676][T11413] syzkaller1: entered allmulticast mode [ 193.651749][T11382] hsr_slave_0: entered promiscuous mode [ 193.668482][T11382] hsr_slave_1: entered promiscuous mode [ 193.681263][T11382] debugfs: 'hsr0' already exists in 'hsr' [ 193.689918][T11382] Cannot create hsr debugfs directory [ 194.011687][T11430] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1594'. [ 194.104548][T11433] xfrm1: entered allmulticast mode [ 194.224463][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.441852][T11382] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 194.451206][T11447] netlink: 'syz.2.1601': attribute type 7 has an invalid length. [ 194.459370][T11447] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1601'. [ 194.479230][T11447] netlink: 'syz.2.1601': attribute type 29 has an invalid length. [ 194.493271][T11447] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1601'. [ 194.496398][T11451] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1602'. [ 194.503307][T11382] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 194.534373][T11382] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 194.545275][ T5866] Bluetooth: hci5: command tx timeout [ 194.557441][T11382] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 194.794476][T11475] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1606'. [ 194.813464][T11382] 8021q: adding VLAN 0 to HW filter on device bond0 [ 194.852181][T11480] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 194.919990][T11382] 8021q: adding VLAN 0 to HW filter on device team0 [ 194.962092][ T6988] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.969352][ T6988] bridge0: port 1(bridge_slave_0) entered forwarding state [ 195.006511][ T6981] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.013714][ T6981] bridge0: port 2(bridge_slave_1) entered forwarding state [ 195.040356][T11489] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1610'. [ 195.053076][T11489] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1610'. [ 195.142759][T11496] netlink: 'syz.2.1612': attribute type 2 has an invalid length. [ 195.353013][T11502] netlink: 'syz.2.1613': attribute type 1 has an invalid length. [ 195.583534][T11520] tipc: Enabling of bearer rejected, failed to enable media [ 195.621252][T11382] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 195.940816][T11536] wg1 speed is unknown, defaulting to 1000 [ 196.098082][T11382] veth0_vlan: entered promiscuous mode [ 196.200855][T11382] veth1_vlan: entered promiscuous mode [ 196.433023][T11556] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 196.491824][T11382] veth0_macvtap: entered promiscuous mode [ 196.519256][T11382] veth1_macvtap: entered promiscuous mode [ 196.615653][ T5866] Bluetooth: hci5: command tx timeout [ 196.663694][T11382] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 196.689507][T11382] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 196.714542][ T6985] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.727963][ T6985] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.759374][ T6985] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.777789][ T6985] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.831542][T11571] netlink: 'syz.2.1628': attribute type 24 has an invalid length. [ 196.894128][ T6988] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.911874][ T6988] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.950910][ T6985] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.964179][ T6985] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.716062][T11595] ieee802154 phy0 wpan0: encryption failed: -22 [ 197.842714][T11603] bond1: Removing last arp target with arp_interval on [ 198.224061][T11626] bond6: option miimon: invalid value (18446744073709551585) [ 198.232386][T11626] bond6: option miimon: allowed values 0 - 2147483647 [ 198.245310][T11626] bond6 (unregistering): Released all slaves [ 198.520627][T11645] bond6: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 198.532956][T11649] __nla_validate_parse: 5 callbacks suppressed [ 198.532973][T11649] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1650'. [ 198.542332][T11645] bond6 (unregistering): Released all slaves [ 198.697780][ T5866] Bluetooth: hci5: command tx timeout [ 199.073931][T11683] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.1660'. [ 199.096117][T11683] openvswitch: netlink: Message has 5 unknown bytes. [ 199.110634][T11684] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1659'. [ 199.126582][T11683] netlink: 'syz.3.1660': attribute type 1 has an invalid length. [ 199.140248][T11684] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1659'. [ 199.170527][T11688] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1661'. [ 199.187520][T11689] netlink: 156 bytes leftover after parsing attributes in process `syz.5.1658'. [ 199.225540][T11692] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1661'. [ 199.388547][T11697] veth1_to_bond: entered allmulticast mode [ 199.400365][T11696] veth1_to_bond: left allmulticast mode [ 199.819653][T11723] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1670'. [ 199.832164][T11721] bond9 (unregistering): Released all slaves [ 200.115246][T11734] gre1: entered promiscuous mode [ 200.120369][T11734] gre1: entered allmulticast mode [ 200.744505][T11751] netlink: 'syz.3.1682': attribute type 1 has an invalid length. [ 200.753909][T11751] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1682'. [ 200.775693][ T5872] Bluetooth: hci5: command tx timeout [ 201.169247][T11775] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1691'. [ 201.249518][T11779] netlink: 'syz.4.1692': attribute type 10 has an invalid length. [ 201.311103][T11781] netlink: 'syz.5.1694': attribute type 15 has an invalid length. [ 201.339092][ T6990] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 201.348602][T11781] netlink: 'syz.5.1694': attribute type 15 has an invalid length. [ 201.357111][ T6990] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 201.368704][ T6990] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 201.382499][ T6990] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 201.418029][ T5872] Bluetooth: hci2: command 0x0406 tx timeout [ 201.424089][ T5872] Bluetooth: hci1: command 0x0406 tx timeout [ 201.430415][ T5880] Bluetooth: hci0: command 0x0406 tx timeout [ 201.437427][ T5880] Bluetooth: hci3: command 0x0406 tx timeout [ 201.551832][T11792] tipc: Resetting bearer [ 201.565203][T11792] xfrm2: entered promiscuous mode [ 201.571046][T11792] xfrm2: entered allmulticast mode [ 201.682614][T11795] tipc: Enabled bearer , priority 0 [ 201.693219][T11795] syzkaller0: entered promiscuous mode [ 201.704444][T11795] syzkaller0: entered allmulticast mode [ 201.719691][T11795] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 201.893228][T11806] tipc: Resetting bearer [ 201.928722][T11794] tipc: Resetting bearer [ 201.989612][T11794] tipc: Disabling bearer [ 202.107674][T11812] bond9: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 202.123436][T11812] bond9 (unregistering): Released all slaves [ 202.282958][T11816] bond9: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 202.302838][T11816] bond9 (unregistering): Released all slaves [ 202.852755][T11856] netlink: 'syz.2.1714': attribute type 33 has an invalid length. [ 202.963025][T11856] bond9: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 202.981764][T11856] bond9 (unregistering): Released all slaves [ 203.508601][T11896] bond9: ARP target 1.0.0.0 is already present [ 203.515771][T11896] bond9: option arp_ip_target: invalid value (1) [ 203.523516][T11896] bond9 (unregistering): Released all slaves [ 203.624205][T11900] __nla_validate_parse: 7 callbacks suppressed [ 203.624218][T11900] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1724'. [ 203.666655][T11900] 8021q: adding VLAN 0 to HW filter on device bond9 [ 203.687854][T11900] bond9: (slave macvlan7): Enslaving as a backup interface with a down link [ 203.699719][T11900] netlink: 'syz.2.1724': attribute type 1 has an invalid length. [ 203.779648][T11905] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1726'. [ 203.870198][T11909] sch_tbf: peakrate 7 is lower than or equals to rate 2147483647 ! [ 204.173312][T11928] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1731'. [ 204.191643][T11928] netlink: 'syz.2.1731': attribute type 4 has an invalid length. [ 204.201014][T11928] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1731'. [ 204.339448][T11930] FAULT_INJECTION: forcing a failure. [ 204.339448][T11930] name failslab, interval 1, probability 0, space 0, times 0 [ 204.378980][T11930] CPU: 0 UID: 0 PID: 11930 Comm: syz.3.1734 Not tainted syzkaller #0 PREEMPT(full) [ 204.379008][T11930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 204.379020][T11930] Call Trace: [ 204.379027][T11930] [ 204.379036][T11930] dump_stack_lvl+0x189/0x250 [ 204.379064][T11930] ? __pfx____ratelimit+0x10/0x10 [ 204.379085][T11930] ? __pfx_dump_stack_lvl+0x10/0x10 [ 204.379107][T11930] ? __pfx__printk+0x10/0x10 [ 204.379148][T11930] should_fail_ex+0x414/0x560 [ 204.379182][T11930] should_failslab+0xa8/0x100 [ 204.379213][T11930] __kmalloc_cache_noprof+0x70/0x3d0 [ 204.379240][T11930] ? sctp_add_bind_addr+0x8c/0x370 [ 204.379265][T11930] sctp_add_bind_addr+0x8c/0x370 [ 204.379289][T11930] sctp_copy_local_addr_list+0x30b/0x4e0 [ 204.379313][T11930] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 204.379333][T11930] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 204.379357][T11930] ? sctp_v4_is_any+0x35/0x60 [ 204.379376][T11930] ? sctp_copy_one_addr+0x93/0x360 [ 204.379400][T11930] sctp_bind_addr_copy+0x189/0x3c0 [ 204.379428][T11930] sctp_connect_new_asoc+0x2e0/0x690 [ 204.379455][T11930] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 204.379482][T11930] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 204.379507][T11930] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 204.379529][T11930] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 204.379554][T11930] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 204.379578][T11930] ? security_sctp_bind_connect+0x7e/0x2e0 [ 204.379608][T11930] sctp_sendmsg+0x155c/0x2810 [ 204.379645][T11930] ? __pfx_sctp_sendmsg+0x10/0x10 [ 204.379672][T11930] ? aa_sk_perm+0x81e/0x950 [ 204.379708][T11930] ? __pfx_aa_sk_perm+0x10/0x10 [ 204.379741][T11930] ? sock_rps_record_flow+0x19/0x410 [ 204.379778][T11930] ? inet_sendmsg+0x2f4/0x370 [ 204.379802][T11930] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 204.379826][T11930] __sock_sendmsg+0x19c/0x270 [ 204.379858][T11930] ____sys_sendmsg+0x505/0x830 [ 204.379888][T11930] ? __pfx_____sys_sendmsg+0x10/0x10 [ 204.379922][T11930] ? import_iovec+0x74/0xa0 [ 204.379952][T11930] ___sys_sendmsg+0x21f/0x2a0 [ 204.379979][T11930] ? __pfx____sys_sendmsg+0x10/0x10 [ 204.380043][T11930] ? __fget_files+0x2a/0x420 [ 204.380060][T11930] ? __fget_files+0x3a0/0x420 [ 204.380088][T11930] __x64_sys_sendmsg+0x19b/0x260 [ 204.380115][T11930] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 204.380149][T11930] ? __pfx_ksys_write+0x10/0x10 [ 204.380172][T11930] ? rcu_is_watching+0x15/0xb0 [ 204.380196][T11930] ? do_syscall_64+0xbe/0x3b0 [ 204.380222][T11930] do_syscall_64+0xfa/0x3b0 [ 204.380242][T11930] ? lockdep_hardirqs_on+0x9c/0x150 [ 204.380261][T11930] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.380281][T11930] ? clear_bhb_loop+0x60/0xb0 [ 204.380306][T11930] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.380323][T11930] RIP: 0033:0x7f728698eec9 [ 204.380340][T11930] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 204.380357][T11930] RSP: 002b:00007f7287860038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 204.380376][T11930] RAX: ffffffffffffffda RBX: 00007f7286be5fa0 RCX: 00007f728698eec9 [ 204.380390][T11930] RDX: 0000000004000080 RSI: 0000200000000680 RDI: 0000000000000003 [ 204.380402][T11930] RBP: 00007f7287860090 R08: 0000000000000000 R09: 0000000000000000 [ 204.380414][T11930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 204.380425][T11930] R13: 00007f7286be6038 R14: 00007f7286be5fa0 R15: 00007ffefac74ef8 [ 204.380456][T11930] [ 204.380724][T11932] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 204.438740][T11934] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:21 [ 204.440504][T11934] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1735'. [ 204.657873][T11940] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1736'. [ 205.339748][T11951] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 205.346251][T11951] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 205.393368][T11955] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1742'. [ 205.425998][T11957] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1743'. [ 205.612133][T11967] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1745'. [ 205.614228][T11966] skbuff: bad partial csum: csum=65506/2 headroom=178 headlen=65526 [ 205.872970][T11977] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1752'. [ 206.428807][T12005] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 206.438308][T12005] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 206.882999][T12026] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 207.162534][T12036] bond6 (unregistering): Released all slaves [ 207.276042][ T5878] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 207.287952][ T5878] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 207.297040][ T5878] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 207.321877][ T5878] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 207.352864][ T5878] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 207.473819][T12043] wg1 speed is unknown, defaulting to 1000 [ 207.689618][T12061] smc: net device erspan0 applied user defined pnetid SYZ0 [ 208.028159][T12043] chnl_net:caif_netlink_parms(): no params data found [ 208.195612][T12043] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.202980][T12043] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.211935][T12043] bridge_slave_0: entered allmulticast mode [ 208.226065][T12043] bridge_slave_0: entered promiscuous mode [ 208.236534][T12043] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.243832][T12043] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.252112][T12043] bridge_slave_1: entered allmulticast mode [ 208.261107][T12043] bridge_slave_1: entered promiscuous mode [ 208.345740][T12043] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 208.368357][T12043] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 208.551665][T12043] team0: Port device team_slave_0 added [ 208.575999][T12043] team0: Port device team_slave_1 added [ 208.651624][T12043] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 208.671211][T12043] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.736068][T12043] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 208.749538][T12113] openvswitch: netlink: IP tunnel dst address not specified [ 208.767595][T12043] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 208.774824][T12043] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.803423][T12043] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 208.864260][T12117] netlink: 'syz.3.1787': attribute type 16 has an invalid length. [ 208.873482][T12117] __nla_validate_parse: 8 callbacks suppressed [ 208.873498][T12117] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1787'. [ 208.963989][T12043] hsr_slave_0: entered promiscuous mode [ 208.978097][T12043] hsr_slave_1: entered promiscuous mode [ 208.985510][T12043] debugfs: 'hsr0' already exists in 'hsr' [ 208.991508][T12043] Cannot create hsr debugfs directory [ 209.269894][T12129] vlan3: entered promiscuous mode [ 209.313920][T12133] sock: sock_timestamping_bind_phc: sock not bind to device [ 209.417253][ T5189] Bluetooth: hci6: command tx timeout [ 209.447857][T12043] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 209.466749][T12043] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 209.499841][T12043] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 209.521916][T12043] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 209.610658][T12146] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1797'. [ 209.729988][T12152] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 209.743738][T12152] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 209.751218][T12153] sctp: [Deprecated]: syz.3.1798 (pid 12153) Use of int in max_burst socket option deprecated. [ 209.751218][T12153] Use struct sctp_assoc_value instead [ 209.769906][T12152] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1799'. [ 209.868020][T12043] 8021q: adding VLAN 0 to HW filter on device bond0 [ 209.909406][T12043] 8021q: adding VLAN 0 to HW filter on device team0 [ 209.938870][ T6996] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.946105][ T6996] bridge0: port 1(bridge_slave_0) entered forwarding state [ 209.982154][ T6988] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.989345][ T6988] bridge0: port 2(bridge_slave_1) entered forwarding state [ 210.072160][T12043] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 210.086166][T12043] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 210.216687][T12168] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1804'. [ 210.360859][T12174] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1806'. [ 210.402820][T12177] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1806'. [ 210.457282][T12043] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 210.561231][T12186] netlink: 'syz.4.1809': attribute type 2 has an invalid length. [ 210.586288][T12186] netlink: 'syz.4.1809': attribute type 2 has an invalid length. [ 210.716751][T12197] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1813'. [ 210.727464][T12197] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1813'. [ 210.796179][T12192] block nbd1: server does not support multiple connections per device. [ 210.807698][T12192] block nbd1: shutting down sockets [ 211.014377][T12043] veth0_vlan: entered promiscuous mode [ 211.042488][T12212] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1814'. [ 211.051061][T12043] veth1_vlan: entered promiscuous mode [ 211.126173][T12043] veth0_macvtap: entered promiscuous mode [ 211.159449][T12043] veth1_macvtap: entered promiscuous mode [ 211.223542][T12043] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 211.292338][T12043] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 211.341616][ T6996] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.372975][ T6996] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.413520][ T6996] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.445938][ T6992] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.495937][ T5189] Bluetooth: hci6: command tx timeout [ 211.607468][ T6981] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.632631][ T6981] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.675676][ T6996] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.691996][ T6996] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.842783][T12241] IPVS: Unknown mcast interface: bridge_slave_0 [ 211.955807][T12248] netlink: 'syz.2.1824': attribute type 1 has an invalid length. [ 211.998661][T12248] netlink: 'syz.2.1824': attribute type 11 has an invalid length. [ 212.026511][T12248] netlink: 220 bytes leftover after parsing attributes in process `syz.2.1824'. [ 212.033905][T12247] wg1 speed is unknown, defaulting to 1000 [ 212.773415][ T5875] IPVS: starting estimator thread 0... [ 212.822736][T12271] tipc: Started in network mode [ 212.828681][T12271] tipc: Node identity 469c5711c06e, cluster identity 4711 [ 212.841058][T12271] tipc: Enabled bearer , priority 0 [ 212.870320][T12271] syzkaller0: entered promiscuous mode [ 212.875354][T12273] IPVS: using max 28 ests per chain, 67200 per kthread [ 212.877027][T12271] syzkaller0: entered allmulticast mode [ 212.900016][T12271] team_slave_1: mtu less than device minimum [ 212.909099][T12271] batadv_slave_1: entered promiscuous mode [ 212.918205][T12270] tipc: Resetting bearer [ 212.952137][T12270] tipc: Disabling bearer [ 213.116603][T12286] FAULT_INJECTION: forcing a failure. [ 213.116603][T12286] name failslab, interval 1, probability 0, space 0, times 0 [ 213.141904][T12286] CPU: 1 UID: 0 PID: 12286 Comm: syz.3.1835 Not tainted syzkaller #0 PREEMPT(full) [ 213.141933][T12286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 213.141946][T12286] Call Trace: [ 213.141954][T12286] [ 213.141963][T12286] dump_stack_lvl+0x189/0x250 [ 213.142001][T12286] ? __pfx____ratelimit+0x10/0x10 [ 213.142023][T12286] ? __pfx_dump_stack_lvl+0x10/0x10 [ 213.142046][T12286] ? __pfx__printk+0x10/0x10 [ 213.142085][T12286] should_fail_ex+0x414/0x560 [ 213.142113][T12286] should_failslab+0xa8/0x100 [ 213.142141][T12286] __kmalloc_cache_noprof+0x70/0x3d0 [ 213.142167][T12286] ? sctp_add_bind_addr+0x8c/0x370 [ 213.142188][T12286] sctp_add_bind_addr+0x8c/0x370 [ 213.142211][T12286] sctp_copy_local_addr_list+0x30b/0x4e0 [ 213.142232][T12286] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 213.142250][T12286] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 213.142272][T12286] ? sctp_v4_is_any+0x35/0x60 [ 213.142289][T12286] ? sctp_copy_one_addr+0x93/0x360 [ 213.142310][T12286] sctp_bind_addr_copy+0x189/0x3c0 [ 213.142336][T12286] sctp_connect_new_asoc+0x2e0/0x690 [ 213.142363][T12286] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 213.142387][T12286] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 213.142412][T12286] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 213.142434][T12286] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 213.142458][T12286] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 213.142481][T12286] ? security_sctp_bind_connect+0x7e/0x2e0 [ 213.142510][T12286] sctp_sendmsg+0x155c/0x2810 [ 213.142546][T12286] ? __pfx_sctp_sendmsg+0x10/0x10 [ 213.142574][T12286] ? aa_sk_perm+0x81e/0x950 [ 213.142607][T12286] ? __pfx_aa_sk_perm+0x10/0x10 [ 213.142635][T12286] ? sock_rps_record_flow+0x19/0x410 [ 213.142664][T12286] ? inet_sendmsg+0x2f4/0x370 [ 213.142689][T12286] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 213.142711][T12286] __sock_sendmsg+0x19c/0x270 [ 213.142745][T12286] ____sys_sendmsg+0x505/0x830 [ 213.142775][T12286] ? __pfx_____sys_sendmsg+0x10/0x10 [ 213.142809][T12286] ? import_iovec+0x74/0xa0 [ 213.142837][T12286] ___sys_sendmsg+0x21f/0x2a0 [ 213.142864][T12286] ? __pfx____sys_sendmsg+0x10/0x10 [ 213.142931][T12286] ? __fget_files+0x2a/0x420 [ 213.142948][T12286] ? __fget_files+0x3a0/0x420 [ 213.142978][T12286] __x64_sys_sendmsg+0x19b/0x260 [ 213.143013][T12286] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 213.143047][T12286] ? __pfx_ksys_write+0x10/0x10 [ 213.143071][T12286] ? rcu_is_watching+0x15/0xb0 [ 213.143096][T12286] ? do_syscall_64+0xbe/0x3b0 [ 213.143120][T12286] do_syscall_64+0xfa/0x3b0 [ 213.143139][T12286] ? lockdep_hardirqs_on+0x9c/0x150 [ 213.143157][T12286] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.143175][T12286] ? clear_bhb_loop+0x60/0xb0 [ 213.143196][T12286] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.143213][T12286] RIP: 0033:0x7f728698eec9 [ 213.143231][T12286] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 213.143245][T12286] RSP: 002b:00007f7287860038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 213.143263][T12286] RAX: ffffffffffffffda RBX: 00007f7286be5fa0 RCX: 00007f728698eec9 [ 213.143278][T12286] RDX: 0000000004000080 RSI: 0000200000000680 RDI: 0000000000000003 [ 213.143290][T12286] RBP: 00007f7287860090 R08: 0000000000000000 R09: 0000000000000000 [ 213.143302][T12286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 213.143312][T12286] R13: 00007f7286be6038 R14: 00007f7286be5fa0 R15: 00007ffefac74ef8 [ 213.143340][T12286] [ 213.575527][ T5189] Bluetooth: hci6: command tx timeout [ 213.702842][T12296] syzkaller1: entered promiscuous mode [ 213.712159][T12296] syzkaller1: entered allmulticast mode [ 213.748912][T12296] IPVS: set_ctl: invalid protocol: 44 127.0.0.1:20004 [ 213.781789][T12270] batadv_slave_1: left promiscuous mode [ 214.139344][T12312] __nla_validate_parse: 2 callbacks suppressed [ 214.139363][T12312] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1842'. [ 214.164014][T12318] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1843'. [ 214.176032][T12313] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1842'. [ 214.328643][T12327] syz_tun: entered allmulticast mode [ 214.385506][T12321] syz_tun: left allmulticast mode [ 214.515822][T12340] veth0: entered promiscuous mode [ 214.523753][T12340] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1850'. [ 214.536326][T12338] FAULT_INJECTION: forcing a failure. [ 214.536326][T12338] name failslab, interval 1, probability 0, space 0, times 0 [ 214.615392][T12338] CPU: 1 UID: 0 PID: 12338 Comm: syz.6.1849 Not tainted syzkaller #0 PREEMPT(full) [ 214.615419][T12338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 214.615431][T12338] Call Trace: [ 214.615438][T12338] [ 214.615446][T12338] dump_stack_lvl+0x189/0x250 [ 214.615473][T12338] ? __pfx____ratelimit+0x10/0x10 [ 214.615495][T12338] ? __pfx_dump_stack_lvl+0x10/0x10 [ 214.615517][T12338] ? __pfx__printk+0x10/0x10 [ 214.615557][T12338] should_fail_ex+0x414/0x560 [ 214.615590][T12338] should_failslab+0xa8/0x100 [ 214.615620][T12338] __kmalloc_cache_noprof+0x70/0x3d0 [ 214.615646][T12338] ? sctp_add_bind_addr+0x8c/0x370 [ 214.615670][T12338] sctp_add_bind_addr+0x8c/0x370 [ 214.615691][T12338] sctp_copy_local_addr_list+0x30b/0x4e0 [ 214.615712][T12338] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 214.615730][T12338] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 214.615752][T12338] ? sctp_v4_is_any+0x35/0x60 [ 214.615770][T12338] ? sctp_copy_one_addr+0x93/0x360 [ 214.615792][T12338] sctp_bind_addr_copy+0x189/0x3c0 [ 214.615815][T12338] sctp_connect_new_asoc+0x2e0/0x690 [ 214.615869][T12338] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 214.615895][T12338] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 214.615916][T12338] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 214.615936][T12338] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 214.615961][T12338] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 214.615983][T12338] ? security_sctp_bind_connect+0x7e/0x2e0 [ 214.616018][T12338] sctp_sendmsg+0x155c/0x2810 [ 214.616054][T12338] ? __pfx_sctp_sendmsg+0x10/0x10 [ 214.616081][T12338] ? aa_sk_perm+0x81e/0x950 [ 214.616116][T12338] ? __pfx_aa_sk_perm+0x10/0x10 [ 214.616150][T12338] ? sock_rps_record_flow+0x19/0x410 [ 214.616182][T12338] ? inet_sendmsg+0x2f4/0x370 [ 214.616209][T12338] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 214.616235][T12338] __sock_sendmsg+0x19c/0x270 [ 214.616270][T12338] ____sys_sendmsg+0x505/0x830 [ 214.616302][T12338] ? __pfx_____sys_sendmsg+0x10/0x10 [ 214.616339][T12338] ? import_iovec+0x74/0xa0 [ 214.616369][T12338] ___sys_sendmsg+0x21f/0x2a0 [ 214.616397][T12338] ? __pfx____sys_sendmsg+0x10/0x10 [ 214.616465][T12338] ? __fget_files+0x2a/0x420 [ 214.616482][T12338] ? __fget_files+0x3a0/0x420 [ 214.616508][T12338] __x64_sys_sendmsg+0x19b/0x260 [ 214.616537][T12338] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 214.616578][T12338] ? __pfx_ksys_write+0x10/0x10 [ 214.616600][T12338] ? rcu_is_watching+0x15/0xb0 [ 214.616624][T12338] ? do_syscall_64+0xbe/0x3b0 [ 214.616651][T12338] do_syscall_64+0xfa/0x3b0 [ 214.616671][T12338] ? lockdep_hardirqs_on+0x9c/0x150 [ 214.616692][T12338] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.616711][T12338] ? clear_bhb_loop+0x60/0xb0 [ 214.616734][T12338] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.616754][T12338] RIP: 0033:0x7ff17db8eec9 [ 214.616773][T12338] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 214.616790][T12338] RSP: 002b:00007ff17e98c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 214.616812][T12338] RAX: ffffffffffffffda RBX: 00007ff17dde5fa0 RCX: 00007ff17db8eec9 [ 214.616827][T12338] RDX: 0000000004000080 RSI: 0000200000000680 RDI: 0000000000000003 [ 214.616849][T12338] RBP: 00007ff17e98c090 R08: 0000000000000000 R09: 0000000000000000 [ 214.616862][T12338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 214.616875][T12338] R13: 00007ff17dde6038 R14: 00007ff17dde5fa0 R15: 00007ffc977908b8 [ 214.616909][T12338] [ 215.659852][ T5189] Bluetooth: hci6: command tx timeout [ 215.810967][T12386] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1863'. [ 215.843458][T12386] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1863'. [ 215.974510][T12393] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1865'. [ 215.984145][T12393] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1865'. [ 216.012980][T12394] netlink: 'syz.6.1864': attribute type 28 has an invalid length. [ 216.067965][T12394] netlink: 'syz.6.1864': attribute type 3 has an invalid length. [ 216.083167][T12394] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1864'. [ 216.275033][T12405] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 216.296045][T12405] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1869'. [ 216.912655][T12440] netlink: 'syz.3.1878': attribute type 5 has an invalid length. [ 216.957379][T12439] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.099538][T12439] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.217263][T12439] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.318830][T12459] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 217.362268][T12439] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.519151][ T5878] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 217.546514][ T5878] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 217.561982][ T6988] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.573114][ T5878] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 217.592897][ T5878] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 217.602062][ T5878] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 217.655468][ T6996] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.729466][T12470] vlan2: entered promiscuous mode [ 217.747667][T12470] bond0: entered promiscuous mode [ 217.767008][T12470] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 217.782529][T12470] team0: entered promiscuous mode [ 217.842570][ T6981] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.924131][ T6981] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.969637][T12466] wg1 speed is unknown, defaulting to 1000 [ 218.708004][T12519] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 218.758084][T12519] bond_slave_0: left promiscuous mode [ 218.793303][T12519] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 218.814397][T12519] bond_slave_1: left promiscuous mode [ 218.841157][T12519] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 218.851378][T12519] mac80211_hwsim hwsim9 wlan1: left promiscuous mode [ 218.862985][T12519] bond0 (unregistering): (slave macvlan6): Releasing backup interface [ 218.876917][T12519] team0: left promiscuous mode [ 218.904434][T12519] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 218.917500][T12519] bridge_slave_1: left promiscuous mode [ 218.939098][T12519] bond0 (unregistering): Released all slaves [ 219.007871][ T6990] bond2: (slave veth0_to_bond): link status definitely down, disabling slave [ 219.057187][ T6990] bond2: now running without any active interface! [ 219.141589][T12466] chnl_net:caif_netlink_parms(): no params data found [ 219.213733][T12546] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 219.427766][T12557] __nla_validate_parse: 7 callbacks suppressed [ 219.427786][T12557] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1908'. [ 219.516705][T12466] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.534414][T12466] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.542513][T12466] bridge_slave_0: entered allmulticast mode [ 219.559044][T12466] bridge_slave_0: entered promiscuous mode [ 219.569579][T12466] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.577842][T12466] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.585927][T12466] bridge_slave_1: entered allmulticast mode [ 219.595807][T12466] bridge_slave_1: entered promiscuous mode [ 219.667142][ T5189] Bluetooth: hci7: command tx timeout [ 219.710064][T12466] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 219.744879][T12466] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 219.818189][T12466] team0: Port device team_slave_0 added [ 219.843808][T12466] team0: Port device team_slave_1 added [ 219.880884][T12466] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 219.888539][T12466] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.918327][T12466] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 219.932762][T12466] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 219.940725][T12466] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.974556][T12466] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 220.034004][T12466] hsr_slave_0: entered promiscuous mode [ 220.042951][T12466] hsr_slave_1: entered promiscuous mode [ 220.052985][T12466] debugfs: 'hsr0' already exists in 'hsr' [ 220.060530][T12466] Cannot create hsr debugfs directory [ 220.259203][T12466] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 220.271062][T12466] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 220.283133][T12466] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 220.297327][T12466] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 220.363746][T12580] FAULT_INJECTION: forcing a failure. [ 220.363746][T12580] name failslab, interval 1, probability 0, space 0, times 0 [ 220.378325][T12580] CPU: 1 UID: 0 PID: 12580 Comm: syz.6.1915 Not tainted syzkaller #0 PREEMPT(full) [ 220.378352][T12580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 220.378364][T12580] Call Trace: [ 220.378372][T12580] [ 220.378381][T12580] dump_stack_lvl+0x189/0x250 [ 220.378409][T12580] ? __pfx____ratelimit+0x10/0x10 [ 220.378431][T12580] ? __pfx_dump_stack_lvl+0x10/0x10 [ 220.378454][T12580] ? __pfx__printk+0x10/0x10 [ 220.378498][T12580] should_fail_ex+0x414/0x560 [ 220.378541][T12580] should_failslab+0xa8/0x100 [ 220.378573][T12580] __kmalloc_cache_noprof+0x70/0x3d0 [ 220.378600][T12580] ? sctp_add_bind_addr+0x8c/0x370 [ 220.378625][T12580] sctp_add_bind_addr+0x8c/0x370 [ 220.378650][T12580] sctp_copy_local_addr_list+0x30b/0x4e0 [ 220.378674][T12580] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 220.378694][T12580] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 220.378719][T12580] ? sctp_v4_is_any+0x35/0x60 [ 220.378739][T12580] ? sctp_copy_one_addr+0x93/0x360 [ 220.378762][T12580] sctp_bind_addr_copy+0x189/0x3c0 [ 220.378789][T12580] sctp_connect_new_asoc+0x2e0/0x690 [ 220.378817][T12580] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 220.378842][T12580] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 220.378867][T12580] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 220.378890][T12580] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 220.378916][T12580] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 220.378940][T12580] ? security_sctp_bind_connect+0x7e/0x2e0 [ 220.378971][T12580] sctp_sendmsg+0x155c/0x2810 [ 220.379009][T12580] ? __pfx_sctp_sendmsg+0x10/0x10 [ 220.379040][T12580] ? aa_sk_perm+0x81e/0x950 [ 220.379078][T12580] ? __pfx_aa_sk_perm+0x10/0x10 [ 220.379111][T12580] ? sock_rps_record_flow+0x19/0x410 [ 220.379141][T12580] ? inet_sendmsg+0x2f4/0x370 [ 220.379169][T12580] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 220.379194][T12580] __sock_sendmsg+0x19c/0x270 [ 220.379228][T12580] ____sys_sendmsg+0x505/0x830 [ 220.379260][T12580] ? __pfx_____sys_sendmsg+0x10/0x10 [ 220.379295][T12580] ? import_iovec+0x74/0xa0 [ 220.379330][T12580] ___sys_sendmsg+0x21f/0x2a0 [ 220.379357][T12580] ? __pfx____sys_sendmsg+0x10/0x10 [ 220.379423][T12580] ? __fget_files+0x2a/0x420 [ 220.379440][T12580] ? __fget_files+0x3a0/0x420 [ 220.379470][T12580] __x64_sys_sendmsg+0x19b/0x260 [ 220.379499][T12580] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 220.379551][T12580] ? do_syscall_64+0xbe/0x3b0 [ 220.379577][T12580] do_syscall_64+0xfa/0x3b0 [ 220.379601][T12580] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.379620][T12580] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 220.379640][T12580] ? clear_bhb_loop+0x60/0xb0 [ 220.379665][T12580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.379684][T12580] RIP: 0033:0x7ff17db8eec9 [ 220.379702][T12580] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 220.379719][T12580] RSP: 002b:00007ff17e98c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 220.379741][T12580] RAX: ffffffffffffffda RBX: 00007ff17dde5fa0 RCX: 00007ff17db8eec9 [ 220.379756][T12580] RDX: 0000000004000080 RSI: 0000200000000680 RDI: 0000000000000003 [ 220.379769][T12580] RBP: 00007ff17e98c090 R08: 0000000000000000 R09: 0000000000000000 [ 220.379782][T12580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 220.379794][T12580] R13: 00007ff17dde6038 R14: 00007ff17dde5fa0 R15: 00007ffc977908b8 [ 220.379828][T12580] [ 220.747165][T12466] 8021q: adding VLAN 0 to HW filter on device bond0 [ 220.769990][T12466] 8021q: adding VLAN 0 to HW filter on device team0 [ 220.871857][ T6981] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.880314][ T6981] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.909395][ T6981] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.916734][ T6981] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.964967][T12588] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1917'. [ 221.481989][T12610] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1922'. [ 221.492155][T12610] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1922'. [ 221.738359][ T5878] Bluetooth: hci7: command tx timeout [ 221.802231][T12466] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 222.309419][T12619] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1924'. [ 222.353247][T12622] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1925'. [ 222.402672][T12466] veth0_vlan: entered promiscuous mode [ 222.418646][T12466] veth1_vlan: entered promiscuous mode [ 222.519817][T12622] bond0: (slave wlan1): Releasing backup interface [ 222.527254][T12631] FAULT_INJECTION: forcing a failure. [ 222.527254][T12631] name failslab, interval 1, probability 0, space 0, times 0 [ 222.527310][T12631] CPU: 1 UID: 0 PID: 12631 Comm: syz.3.1927 Not tainted syzkaller #0 PREEMPT(full) [ 222.527331][T12631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 222.527344][T12631] Call Trace: [ 222.527351][T12631] [ 222.527403][T12631] dump_stack_lvl+0x189/0x250 [ 222.527432][T12631] ? __pfx____ratelimit+0x10/0x10 [ 222.527454][T12631] ? __pfx_dump_stack_lvl+0x10/0x10 [ 222.527479][T12631] ? __pfx__printk+0x10/0x10 [ 222.527523][T12631] should_fail_ex+0x414/0x560 [ 222.527559][T12631] should_failslab+0xa8/0x100 [ 222.527587][T12631] __kmalloc_cache_noprof+0x70/0x3d0 [ 222.527612][T12631] ? sctp_add_bind_addr+0x8c/0x370 [ 222.527641][T12631] sctp_add_bind_addr+0x8c/0x370 [ 222.527664][T12631] sctp_copy_local_addr_list+0x30b/0x4e0 [ 222.527687][T12631] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 222.527708][T12631] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 222.527733][T12631] ? sctp_v4_is_any+0x35/0x60 [ 222.527753][T12631] ? sctp_copy_one_addr+0x93/0x360 [ 222.527776][T12631] sctp_bind_addr_copy+0x189/0x3c0 [ 222.527805][T12631] sctp_connect_new_asoc+0x2e0/0x690 [ 222.527833][T12631] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 222.527860][T12631] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 222.527886][T12631] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 222.527905][T12631] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 222.527927][T12631] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 222.527948][T12631] ? security_sctp_bind_connect+0x7e/0x2e0 [ 222.527976][T12631] sctp_sendmsg+0x155c/0x2810 [ 222.528013][T12631] ? __pfx_sctp_sendmsg+0x10/0x10 [ 222.528041][T12631] ? aa_sk_perm+0x81e/0x950 [ 222.528076][T12631] ? __pfx_aa_sk_perm+0x10/0x10 [ 222.528109][T12631] ? sock_rps_record_flow+0x19/0x410 [ 222.528141][T12631] ? inet_sendmsg+0x2f4/0x370 [ 222.528167][T12631] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 222.528190][T12631] __sock_sendmsg+0x19c/0x270 [ 222.528220][T12631] ____sys_sendmsg+0x505/0x830 [ 222.528249][T12631] ? __pfx_____sys_sendmsg+0x10/0x10 [ 222.528280][T12631] ? import_iovec+0x74/0xa0 [ 222.528311][T12631] ___sys_sendmsg+0x21f/0x2a0 [ 222.528337][T12631] ? __pfx____sys_sendmsg+0x10/0x10 [ 222.528409][T12631] ? __fget_files+0x2a/0x420 [ 222.528424][T12631] ? __fget_files+0x3a0/0x420 [ 222.528448][T12631] __x64_sys_sendmsg+0x19b/0x260 [ 222.528475][T12631] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 222.528509][T12631] ? __pfx_ksys_write+0x10/0x10 [ 222.528533][T12631] ? rcu_is_watching+0x15/0xb0 [ 222.528555][T12631] ? do_syscall_64+0xbe/0x3b0 [ 222.528581][T12631] do_syscall_64+0xfa/0x3b0 [ 222.528601][T12631] ? lockdep_hardirqs_on+0x9c/0x150 [ 222.528620][T12631] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.528639][T12631] ? clear_bhb_loop+0x60/0xb0 [ 222.528662][T12631] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.528682][T12631] RIP: 0033:0x7f728698eec9 [ 222.528699][T12631] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 222.528716][T12631] RSP: 002b:00007f7287860038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 222.528735][T12631] RAX: ffffffffffffffda RBX: 00007f7286be5fa0 RCX: 00007f728698eec9 [ 222.528750][T12631] RDX: 0000000004000080 RSI: 0000200000000680 RDI: 0000000000000003 [ 222.528763][T12631] RBP: 00007f7287860090 R08: 0000000000000000 R09: 0000000000000000 [ 222.528775][T12631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 222.528786][T12631] R13: 00007f7286be6038 R14: 00007f7286be5fa0 R15: 00007ffefac74ef8 [ 222.528818][T12631] [ 222.932667][T12622] bond0: (slave wlan1): the permanent HWaddr of slave - 08:02:11:00:00:01 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 222.953170][T12622] mac80211_hwsim hwsim11 wlan1 (unregistering): left promiscuous mode [ 223.077544][T12466] veth0_macvtap: entered promiscuous mode [ 223.116993][T12466] veth1_macvtap: entered promiscuous mode [ 223.169251][T12650] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1931'. [ 223.192022][T12466] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 223.268050][T12466] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 223.303284][ T6948] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.323627][ T6948] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.356334][ T6996] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.375934][ T6996] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.403663][T12660] syzkaller1: entered promiscuous mode [ 223.410270][T12662] netlink: 'syz.2.1934': attribute type 10 has an invalid length. [ 223.437307][T12660] syzkaller1: entered allmulticast mode [ 223.669891][T12671] FAULT_INJECTION: forcing a failure. [ 223.669891][T12671] name failslab, interval 1, probability 0, space 0, times 0 [ 223.701060][T12671] CPU: 0 UID: 0 PID: 12671 Comm: syz.3.1938 Not tainted syzkaller #0 PREEMPT(full) [ 223.701088][T12671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 223.701101][T12671] Call Trace: [ 223.701109][T12671] [ 223.701118][T12671] dump_stack_lvl+0x189/0x250 [ 223.701147][T12671] ? __pfx____ratelimit+0x10/0x10 [ 223.701169][T12671] ? __pfx_dump_stack_lvl+0x10/0x10 [ 223.701193][T12671] ? __pfx__printk+0x10/0x10 [ 223.701236][T12671] should_fail_ex+0x414/0x560 [ 223.701272][T12671] should_failslab+0xa8/0x100 [ 223.701310][T12671] __kmalloc_cache_noprof+0x70/0x3d0 [ 223.701337][T12671] ? sctp_add_bind_addr+0x8c/0x370 [ 223.701362][T12671] sctp_add_bind_addr+0x8c/0x370 [ 223.701386][T12671] sctp_copy_local_addr_list+0x30b/0x4e0 [ 223.701411][T12671] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 223.701430][T12671] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 223.701455][T12671] ? sctp_v4_is_any+0x35/0x60 [ 223.701475][T12671] ? sctp_copy_one_addr+0x93/0x360 [ 223.701499][T12671] sctp_bind_addr_copy+0x189/0x3c0 [ 223.701527][T12671] sctp_connect_new_asoc+0x2e0/0x690 [ 223.701555][T12671] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 223.701581][T12671] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 223.701607][T12671] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 223.701627][T12671] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 223.701651][T12671] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 223.701675][T12671] ? security_sctp_bind_connect+0x7e/0x2e0 [ 223.701705][T12671] sctp_sendmsg+0x155c/0x2810 [ 223.701742][T12671] ? __pfx_sctp_sendmsg+0x10/0x10 [ 223.701770][T12671] ? aa_sk_perm+0x81e/0x950 [ 223.701805][T12671] ? __pfx_aa_sk_perm+0x10/0x10 [ 223.701838][T12671] ? sock_rps_record_flow+0x19/0x410 [ 223.701870][T12671] ? inet_sendmsg+0x2f4/0x370 [ 223.701897][T12671] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 223.701922][T12671] __sock_sendmsg+0x19c/0x270 [ 223.701954][T12671] ____sys_sendmsg+0x505/0x830 [ 223.701985][T12671] ? __pfx_____sys_sendmsg+0x10/0x10 [ 223.702018][T12671] ? import_iovec+0x74/0xa0 [ 223.702051][T12671] ___sys_sendmsg+0x21f/0x2a0 [ 223.702077][T12671] ? __pfx____sys_sendmsg+0x10/0x10 [ 223.702138][T12671] ? __fget_files+0x2a/0x420 [ 223.702154][T12671] ? __fget_files+0x3a0/0x420 [ 223.702182][T12671] __x64_sys_sendmsg+0x19b/0x260 [ 223.702207][T12671] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 223.702242][T12671] ? __pfx_ksys_write+0x10/0x10 [ 223.702261][T12671] ? rcu_is_watching+0x15/0xb0 [ 223.702294][T12671] ? do_syscall_64+0xbe/0x3b0 [ 223.702319][T12671] do_syscall_64+0xfa/0x3b0 [ 223.702338][T12671] ? lockdep_hardirqs_on+0x9c/0x150 [ 223.702361][T12671] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.702380][T12671] ? clear_bhb_loop+0x60/0xb0 [ 223.702403][T12671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.702420][T12671] RIP: 0033:0x7f728698eec9 [ 223.702436][T12671] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 223.702452][T12671] RSP: 002b:00007f7287860038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 223.702472][T12671] RAX: ffffffffffffffda RBX: 00007f7286be5fa0 RCX: 00007f728698eec9 [ 223.702488][T12671] RDX: 0000000004000080 RSI: 0000200000000680 RDI: 0000000000000003 [ 223.702500][T12671] RBP: 00007f7287860090 R08: 0000000000000000 R09: 0000000000000000 [ 223.702511][T12671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 223.702522][T12671] R13: 00007f7286be6038 R14: 00007f7286be5fa0 R15: 00007ffefac74ef8 [ 223.702552][T12671] [ 223.705232][ T6992] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.779639][T12676] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1940'. [ 223.855843][ T5878] Bluetooth: hci7: command 0x040f tx timeout [ 223.882870][ T6992] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.173993][ T6990] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.184804][ T6990] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.453225][T12705] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1947'. [ 224.483440][T12705] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1947'. [ 224.662626][T12712] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1949'. [ 224.671215][T12713] FAULT_INJECTION: forcing a failure. [ 224.671215][T12713] name failslab, interval 1, probability 0, space 0, times 0 [ 224.688696][T12713] CPU: 1 UID: 0 PID: 12713 Comm: syz.4.1950 Not tainted syzkaller #0 PREEMPT(full) [ 224.688723][T12713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 224.688736][T12713] Call Trace: [ 224.688744][T12713] [ 224.688753][T12713] dump_stack_lvl+0x189/0x250 [ 224.688783][T12713] ? __pfx____ratelimit+0x10/0x10 [ 224.688806][T12713] ? __pfx_dump_stack_lvl+0x10/0x10 [ 224.688830][T12713] ? __pfx__printk+0x10/0x10 [ 224.688874][T12713] should_fail_ex+0x414/0x560 [ 224.688909][T12713] should_failslab+0xa8/0x100 [ 224.688940][T12713] __kmalloc_cache_noprof+0x70/0x3d0 [ 224.688967][T12713] ? sctp_add_bind_addr+0x8c/0x370 [ 224.688992][T12713] sctp_add_bind_addr+0x8c/0x370 [ 224.689017][T12713] sctp_copy_local_addr_list+0x30b/0x4e0 [ 224.689041][T12713] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 224.689061][T12713] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 224.689086][T12713] ? sctp_v4_is_any+0x35/0x60 [ 224.689106][T12713] ? sctp_copy_one_addr+0x93/0x360 [ 224.689130][T12713] sctp_bind_addr_copy+0x189/0x3c0 [ 224.689158][T12713] sctp_connect_new_asoc+0x2e0/0x690 [ 224.689187][T12713] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 224.689214][T12713] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 224.689238][T12713] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 224.689261][T12713] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 224.689287][T12713] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 224.689311][T12713] ? security_sctp_bind_connect+0x7e/0x2e0 [ 224.689342][T12713] sctp_sendmsg+0x155c/0x2810 [ 224.689381][T12713] ? __pfx_sctp_sendmsg+0x10/0x10 [ 224.689410][T12713] ? aa_sk_perm+0x81e/0x950 [ 224.689446][T12713] ? __pfx_aa_sk_perm+0x10/0x10 [ 224.689487][T12713] ? sock_rps_record_flow+0x19/0x410 [ 224.689519][T12713] ? inet_sendmsg+0x2f4/0x370 [ 224.689546][T12713] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 224.689572][T12713] __sock_sendmsg+0x19c/0x270 [ 224.689606][T12713] ____sys_sendmsg+0x505/0x830 [ 224.689637][T12713] ? __pfx_____sys_sendmsg+0x10/0x10 [ 224.689673][T12713] ? import_iovec+0x74/0xa0 [ 224.689706][T12713] ___sys_sendmsg+0x21f/0x2a0 [ 224.689734][T12713] ? __pfx____sys_sendmsg+0x10/0x10 [ 224.689808][T12713] ? __fget_files+0x2a/0x420 [ 224.689830][T12713] ? __fget_files+0x3a0/0x420 [ 224.689860][T12713] __x64_sys_sendmsg+0x19b/0x260 [ 224.689895][T12713] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 224.689932][T12713] ? __pfx_ksys_write+0x10/0x10 [ 224.689956][T12713] ? rcu_is_watching+0x15/0xb0 [ 224.689983][T12713] ? do_syscall_64+0xbe/0x3b0 [ 224.690010][T12713] do_syscall_64+0xfa/0x3b0 [ 224.690031][T12713] ? lockdep_hardirqs_on+0x9c/0x150 [ 224.690051][T12713] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.690075][T12713] ? clear_bhb_loop+0x60/0xb0 [ 224.690100][T12713] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.690119][T12713] RIP: 0033:0x7f3c0318eec9 [ 224.690137][T12713] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 224.690155][T12713] RSP: 002b:00007f3c04033038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 224.690176][T12713] RAX: ffffffffffffffda RBX: 00007f3c033e5fa0 RCX: 00007f3c0318eec9 [ 224.690192][T12713] RDX: 0000000004000080 RSI: 0000200000000680 RDI: 0000000000000003 [ 224.690205][T12713] RBP: 00007f3c04033090 R08: 0000000000000000 R09: 0000000000000000 [ 224.690217][T12713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 224.690229][T12713] R13: 00007f3c033e6038 R14: 00007f3c033e5fa0 R15: 00007fff8de1e058 [ 224.690264][T12713] [ 225.714370][T12750] FAULT_INJECTION: forcing a failure. [ 225.714370][T12750] name failslab, interval 1, probability 0, space 0, times 0 [ 225.740034][T12750] CPU: 0 UID: 0 PID: 12750 Comm: syz.4.1964 Not tainted syzkaller #0 PREEMPT(full) [ 225.740063][T12750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 225.740075][T12750] Call Trace: [ 225.740083][T12750] [ 225.740091][T12750] dump_stack_lvl+0x189/0x250 [ 225.740120][T12750] ? __pfx____ratelimit+0x10/0x10 [ 225.740142][T12750] ? __pfx_dump_stack_lvl+0x10/0x10 [ 225.740233][T12750] ? __pfx__printk+0x10/0x10 [ 225.740271][T12750] should_fail_ex+0x414/0x560 [ 225.740309][T12750] should_failslab+0xa8/0x100 [ 225.740336][T12750] __kmalloc_cache_noprof+0x70/0x3d0 [ 225.740362][T12750] ? sctp_add_bind_addr+0x8c/0x370 [ 225.740383][T12750] sctp_add_bind_addr+0x8c/0x370 [ 225.740406][T12750] sctp_copy_local_addr_list+0x30b/0x4e0 [ 225.740427][T12750] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 225.740445][T12750] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 225.740467][T12750] ? sctp_v4_is_any+0x35/0x60 [ 225.740486][T12750] ? sctp_copy_one_addr+0x93/0x360 [ 225.740520][T12750] sctp_bind_addr_copy+0x189/0x3c0 [ 225.740546][T12750] sctp_connect_new_asoc+0x2e0/0x690 [ 225.740574][T12750] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 225.740601][T12750] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 225.740626][T12750] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 225.740649][T12750] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 225.740674][T12750] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 225.740699][T12750] ? security_sctp_bind_connect+0x7e/0x2e0 [ 225.740730][T12750] sctp_sendmsg+0x155c/0x2810 [ 225.740767][T12750] ? __pfx_sctp_sendmsg+0x10/0x10 [ 225.740795][T12750] ? aa_sk_perm+0x81e/0x950 [ 225.740831][T12750] ? __pfx_aa_sk_perm+0x10/0x10 [ 225.740864][T12750] ? sock_rps_record_flow+0x19/0x410 [ 225.740897][T12750] ? inet_sendmsg+0x2f4/0x370 [ 225.740922][T12750] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 225.740947][T12750] __sock_sendmsg+0x19c/0x270 [ 225.740983][T12750] ____sys_sendmsg+0x505/0x830 [ 225.741016][T12750] ? __pfx_____sys_sendmsg+0x10/0x10 [ 225.741051][T12750] ? import_iovec+0x74/0xa0 [ 225.741082][T12750] ___sys_sendmsg+0x21f/0x2a0 [ 225.741128][T12750] ? __pfx____sys_sendmsg+0x10/0x10 [ 225.741194][T12750] ? __fget_files+0x2a/0x420 [ 225.741211][T12750] ? __fget_files+0x3a0/0x420 [ 225.741241][T12750] __x64_sys_sendmsg+0x19b/0x260 [ 225.741270][T12750] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 225.741308][T12750] ? __pfx_ksys_write+0x10/0x10 [ 225.741333][T12750] ? rcu_is_watching+0x15/0xb0 [ 225.741359][T12750] ? do_syscall_64+0xbe/0x3b0 [ 225.741386][T12750] do_syscall_64+0xfa/0x3b0 [ 225.741405][T12750] ? lockdep_hardirqs_on+0x9c/0x150 [ 225.741424][T12750] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.741443][T12750] ? clear_bhb_loop+0x60/0xb0 [ 225.741467][T12750] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.741488][T12750] RIP: 0033:0x7f3c0318eec9 [ 225.741506][T12750] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 225.741524][T12750] RSP: 002b:00007f3c04033038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 225.741544][T12750] RAX: ffffffffffffffda RBX: 00007f3c033e5fa0 RCX: 00007f3c0318eec9 [ 225.741559][T12750] RDX: 0000000004000080 RSI: 0000200000000680 RDI: 0000000000000003 [ 225.741573][T12750] RBP: 00007f3c04033090 R08: 0000000000000000 R09: 0000000000000000 [ 225.741586][T12750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 225.741598][T12750] R13: 00007f3c033e6038 R14: 00007f3c033e5fa0 R15: 00007fff8de1e058 [ 225.741633][T12750] [ 225.845061][T12748] sch_tbf: burst 19872 is lower than device lo mtu (65499) ! [ 225.908953][ T5189] Bluetooth: hci7: command 0x040f tx timeout [ 226.262225][T12757] pim6reg: entered allmulticast mode [ 226.512787][T12767] 8021q: VLANs not supported on ip6gre0 [ 226.687691][T12771] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1971'. [ 226.770719][T12778] netlink: 'syz.2.1970': attribute type 1 has an invalid length. [ 226.784335][T12778] netlink: 'syz.2.1970': attribute type 1 has an invalid length. [ 226.994482][T12771] bond0 (unregistering): (slave team0): Releasing backup interface [ 227.003660][T12771] team0: left promiscuous mode [ 227.023770][T12771] bond0 (unregistering): Released all slaves [ 227.051320][T12782] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1970'. [ 227.219010][T12793] FAULT_INJECTION: forcing a failure. [ 227.219010][T12793] name failslab, interval 1, probability 0, space 0, times 0 [ 227.232958][T12793] CPU: 1 UID: 0 PID: 12793 Comm: syz.4.1976 Not tainted syzkaller #0 PREEMPT(full) [ 227.232984][T12793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 227.232998][T12793] Call Trace: [ 227.233010][T12793] [ 227.233019][T12793] dump_stack_lvl+0x189/0x250 [ 227.233048][T12793] ? __pfx____ratelimit+0x10/0x10 [ 227.233070][T12793] ? __pfx_dump_stack_lvl+0x10/0x10 [ 227.233093][T12793] ? __pfx__printk+0x10/0x10 [ 227.233138][T12793] should_fail_ex+0x414/0x560 [ 227.233175][T12793] should_failslab+0xa8/0x100 [ 227.233207][T12793] __kmalloc_cache_noprof+0x70/0x3d0 [ 227.233235][T12793] ? sctp_add_bind_addr+0x8c/0x370 [ 227.233260][T12793] sctp_add_bind_addr+0x8c/0x370 [ 227.233285][T12793] sctp_copy_local_addr_list+0x30b/0x4e0 [ 227.233317][T12793] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 227.233338][T12793] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 227.233361][T12793] ? sctp_v4_is_any+0x35/0x60 [ 227.233380][T12793] ? sctp_copy_one_addr+0x93/0x360 [ 227.233404][T12793] sctp_bind_addr_copy+0x189/0x3c0 [ 227.233433][T12793] sctp_connect_new_asoc+0x2e0/0x690 [ 227.233462][T12793] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 227.233488][T12793] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 227.233517][T12793] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 227.233539][T12793] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 227.233565][T12793] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 227.233589][T12793] ? security_sctp_bind_connect+0x7e/0x2e0 [ 227.233621][T12793] sctp_sendmsg+0x155c/0x2810 [ 227.233656][T12793] ? __pfx_sctp_sendmsg+0x10/0x10 [ 227.233690][T12793] ? aa_sk_perm+0x81e/0x950 [ 227.233727][T12793] ? __pfx_aa_sk_perm+0x10/0x10 [ 227.233761][T12793] ? sock_rps_record_flow+0x19/0x410 [ 227.233795][T12793] ? inet_sendmsg+0x2f4/0x370 [ 227.233822][T12793] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 227.233848][T12793] __sock_sendmsg+0x19c/0x270 [ 227.233883][T12793] ____sys_sendmsg+0x505/0x830 [ 227.233915][T12793] ? __pfx_____sys_sendmsg+0x10/0x10 [ 227.233952][T12793] ? import_iovec+0x74/0xa0 [ 227.233986][T12793] ___sys_sendmsg+0x21f/0x2a0 [ 227.234015][T12793] ? __pfx____sys_sendmsg+0x10/0x10 [ 227.234081][T12793] ? __fget_files+0x2a/0x420 [ 227.234098][T12793] ? __fget_files+0x3a0/0x420 [ 227.234129][T12793] __x64_sys_sendmsg+0x19b/0x260 [ 227.234157][T12793] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 227.234194][T12793] ? __pfx_ksys_write+0x10/0x10 [ 227.234218][T12793] ? rcu_is_watching+0x15/0xb0 [ 227.234245][T12793] ? do_syscall_64+0xbe/0x3b0 [ 227.234271][T12793] do_syscall_64+0xfa/0x3b0 [ 227.234293][T12793] ? lockdep_hardirqs_on+0x9c/0x150 [ 227.234321][T12793] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.234341][T12793] ? clear_bhb_loop+0x60/0xb0 [ 227.234366][T12793] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.234385][T12793] RIP: 0033:0x7f3c0318eec9 [ 227.234403][T12793] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 227.234420][T12793] RSP: 002b:00007f3c04033038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 227.234441][T12793] RAX: ffffffffffffffda RBX: 00007f3c033e5fa0 RCX: 00007f3c0318eec9 [ 227.234457][T12793] RDX: 0000000004000080 RSI: 0000200000000680 RDI: 0000000000000003 [ 227.234471][T12793] RBP: 00007f3c04033090 R08: 0000000000000000 R09: 0000000000000000 [ 227.234483][T12793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 227.234495][T12793] R13: 00007f3c033e6038 R14: 00007f3c033e5fa0 R15: 00007fff8de1e058 [ 227.234529][T12793] [ 227.596507][T12795] lo speed is unknown, defaulting to 1000 [ 227.610906][T12795] lo speed is unknown, defaulting to 1000 [ 227.619953][T12795] lo speed is unknown, defaulting to 1000 [ 227.701577][T12802] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1978'. [ 227.717604][T12803] netlink: 'syz.3.1979': attribute type 4 has an invalid length. [ 227.775810][T12803] netlink: 'syz.3.1979': attribute type 4 has an invalid length. [ 227.843055][T12806] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1980'. [ 228.136247][ T5189] Bluetooth: hci7: command 0x040f tx timeout [ 228.183236][T12816] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1984'. [ 228.198338][T12818] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1985'. [ 228.227895][ T9] lo speed is unknown, defaulting to 1000 [ 228.234061][T12795] infiniband syz0: set down [ 228.242823][T12795] infiniband syz0: added lo [ 228.250883][T12795] syz0: rxe_create_cq: returned err = -12 [ 228.257451][T12795] infiniband syz0: Couldn't create ib_mad CQ [ 228.275288][T12795] infiniband syz0: Couldn't open port 1 [ 228.388440][T12795] RDS/IB: syz0: added [ 228.393500][T12795] smc: adding ib device syz0 with port count 1 [ 228.442902][T12795] smc: ib device syz0 port 1 has pnetid [ 228.466922][ T9] lo speed is unknown, defaulting to 1000 [ 228.476696][T12795] lo speed is unknown, defaulting to 1000 [ 228.659316][T12836] FAULT_INJECTION: forcing a failure. [ 228.659316][T12836] name failslab, interval 1, probability 0, space 0, times 0 [ 228.702665][T12839] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1991'. [ 228.728558][T12836] CPU: 0 UID: 0 PID: 12836 Comm: syz.4.1990 Not tainted syzkaller #0 PREEMPT(full) [ 228.728588][T12836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 228.728600][T12836] Call Trace: [ 228.728607][T12836] [ 228.728616][T12836] dump_stack_lvl+0x189/0x250 [ 228.728645][T12836] ? __pfx____ratelimit+0x10/0x10 [ 228.728667][T12836] ? __pfx_dump_stack_lvl+0x10/0x10 [ 228.728691][T12836] ? __pfx__printk+0x10/0x10 [ 228.728733][T12836] should_fail_ex+0x414/0x560 [ 228.728769][T12836] should_failslab+0xa8/0x100 [ 228.728799][T12836] __kmalloc_cache_noprof+0x70/0x3d0 [ 228.728826][T12836] ? sctp_add_bind_addr+0x8c/0x370 [ 228.728851][T12836] sctp_add_bind_addr+0x8c/0x370 [ 228.728875][T12836] sctp_copy_local_addr_list+0x30b/0x4e0 [ 228.728899][T12836] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 228.728919][T12836] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 228.728944][T12836] ? sctp_v4_is_any+0x35/0x60 [ 228.728963][T12836] ? sctp_copy_one_addr+0x93/0x360 [ 228.728987][T12836] sctp_bind_addr_copy+0x189/0x3c0 [ 228.729013][T12836] sctp_connect_new_asoc+0x2e0/0x690 [ 228.729041][T12836] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 228.729068][T12836] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 228.729092][T12836] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 228.729114][T12836] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 228.729139][T12836] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 228.729162][T12836] ? security_sctp_bind_connect+0x7e/0x2e0 [ 228.729192][T12836] sctp_sendmsg+0x155c/0x2810 [ 228.729230][T12836] ? __pfx_sctp_sendmsg+0x10/0x10 [ 228.729266][T12836] ? aa_sk_perm+0x81e/0x950 [ 228.729301][T12836] ? __pfx_aa_sk_perm+0x10/0x10 [ 228.729335][T12836] ? sock_rps_record_flow+0x19/0x410 [ 228.729367][T12836] ? inet_sendmsg+0x2f4/0x370 [ 228.729393][T12836] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 228.729418][T12836] __sock_sendmsg+0x19c/0x270 [ 228.729452][T12836] ____sys_sendmsg+0x505/0x830 [ 228.729482][T12836] ? __pfx_____sys_sendmsg+0x10/0x10 [ 228.729518][T12836] ? import_iovec+0x74/0xa0 [ 228.729549][T12836] ___sys_sendmsg+0x21f/0x2a0 [ 228.729576][T12836] ? __pfx____sys_sendmsg+0x10/0x10 [ 228.729642][T12836] ? __fget_files+0x2a/0x420 [ 228.729660][T12836] ? __fget_files+0x3a0/0x420 [ 228.729690][T12836] __x64_sys_sendmsg+0x19b/0x260 [ 228.729718][T12836] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 228.729754][T12836] ? __pfx_ksys_write+0x10/0x10 [ 228.729778][T12836] ? rcu_is_watching+0x15/0xb0 [ 228.729804][T12836] ? do_syscall_64+0xbe/0x3b0 [ 228.729832][T12836] do_syscall_64+0xfa/0x3b0 [ 228.729852][T12836] ? lockdep_hardirqs_on+0x9c/0x150 [ 228.729870][T12836] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.729888][T12836] ? clear_bhb_loop+0x60/0xb0 [ 228.729911][T12836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.729927][T12836] RIP: 0033:0x7f3c0318eec9 [ 228.729942][T12836] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 228.729957][T12836] RSP: 002b:00007f3c04033038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 228.729977][T12836] RAX: ffffffffffffffda RBX: 00007f3c033e5fa0 RCX: 00007f3c0318eec9 [ 228.729990][T12836] RDX: 0000000004000080 RSI: 0000200000000680 RDI: 0000000000000003 [ 228.730002][T12836] RBP: 00007f3c04033090 R08: 0000000000000000 R09: 0000000000000000 [ 228.730013][T12836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 228.730023][T12836] R13: 00007f3c033e6038 R14: 00007f3c033e5fa0 R15: 00007fff8de1e058 [ 228.730054][T12836] [ 229.138818][T12795] lo speed is unknown, defaulting to 1000 [ 229.547634][T12854] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1994'. [ 229.719067][T12860] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1997'. [ 229.736245][T12795] lo speed is unknown, defaulting to 1000 [ 230.066789][T12878] FAULT_INJECTION: forcing a failure. [ 230.066789][T12878] name failslab, interval 1, probability 0, space 0, times 0 [ 230.068850][T12880] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2000'. [ 230.134855][T12878] CPU: 1 UID: 0 PID: 12878 Comm: syz.4.2003 Not tainted syzkaller #0 PREEMPT(full) [ 230.134892][T12878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 230.134905][T12878] Call Trace: [ 230.134913][T12878] [ 230.134922][T12878] dump_stack_lvl+0x189/0x250 [ 230.134952][T12878] ? __pfx____ratelimit+0x10/0x10 [ 230.134974][T12878] ? __pfx_dump_stack_lvl+0x10/0x10 [ 230.134998][T12878] ? __pfx__printk+0x10/0x10 [ 230.135039][T12878] should_fail_ex+0x414/0x560 [ 230.135069][T12878] should_failslab+0xa8/0x100 [ 230.135099][T12878] __kmalloc_cache_noprof+0x70/0x3d0 [ 230.135125][T12878] ? sctp_add_bind_addr+0x8c/0x370 [ 230.135150][T12878] sctp_add_bind_addr+0x8c/0x370 [ 230.135173][T12878] sctp_copy_local_addr_list+0x30b/0x4e0 [ 230.135194][T12878] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 230.135213][T12878] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 230.135239][T12878] ? sctp_v4_is_any+0x35/0x60 [ 230.135259][T12878] ? sctp_copy_one_addr+0x93/0x360 [ 230.135282][T12878] sctp_bind_addr_copy+0x189/0x3c0 [ 230.135312][T12878] sctp_connect_new_asoc+0x2e0/0x690 [ 230.135341][T12878] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 230.135368][T12878] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 230.135393][T12878] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 230.135416][T12878] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 230.135442][T12878] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 230.135470][T12878] ? security_sctp_bind_connect+0x7e/0x2e0 [ 230.135501][T12878] sctp_sendmsg+0x155c/0x2810 [ 230.135539][T12878] ? __pfx_sctp_sendmsg+0x10/0x10 [ 230.135567][T12878] ? aa_sk_perm+0x81e/0x950 [ 230.135604][T12878] ? __pfx_aa_sk_perm+0x10/0x10 [ 230.135636][T12878] ? sock_rps_record_flow+0x19/0x410 [ 230.135669][T12878] ? inet_sendmsg+0x2f4/0x370 [ 230.135696][T12878] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 230.135721][T12878] __sock_sendmsg+0x19c/0x270 [ 230.135755][T12878] ____sys_sendmsg+0x505/0x830 [ 230.135786][T12878] ? __pfx_____sys_sendmsg+0x10/0x10 [ 230.135822][T12878] ? import_iovec+0x74/0xa0 [ 230.135853][T12878] ___sys_sendmsg+0x21f/0x2a0 [ 230.135888][T12878] ? __pfx____sys_sendmsg+0x10/0x10 [ 230.135947][T12878] ? __fget_files+0x2a/0x420 [ 230.135963][T12878] ? __fget_files+0x3a0/0x420 [ 230.135992][T12878] __x64_sys_sendmsg+0x19b/0x260 [ 230.136020][T12878] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 230.136056][T12878] ? __pfx_ksys_write+0x10/0x10 [ 230.136080][T12878] ? rcu_is_watching+0x15/0xb0 [ 230.136105][T12878] ? do_syscall_64+0xbe/0x3b0 [ 230.136132][T12878] do_syscall_64+0xfa/0x3b0 [ 230.136152][T12878] ? lockdep_hardirqs_on+0x9c/0x150 [ 230.136172][T12878] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.136192][T12878] ? clear_bhb_loop+0x60/0xb0 [ 230.136216][T12878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.136234][T12878] RIP: 0033:0x7f3c0318eec9 [ 230.136253][T12878] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 230.136269][T12878] RSP: 002b:00007f3c04033038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 230.136291][T12878] RAX: ffffffffffffffda RBX: 00007f3c033e5fa0 RCX: 00007f3c0318eec9 [ 230.136306][T12878] RDX: 0000000004000080 RSI: 0000200000000680 RDI: 0000000000000003 [ 230.136319][T12878] RBP: 00007f3c04033090 R08: 0000000000000000 R09: 0000000000000000 [ 230.136331][T12878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 230.136343][T12878] R13: 00007f3c033e6038 R14: 00007f3c033e5fa0 R15: 00007fff8de1e058 [ 230.136380][T12878] [ 230.640973][T12880] team0: Port device team_slave_1 removed [ 230.725407][T12887] netlink: 'syz.4.2005': attribute type 1 has an invalid length. [ 230.733712][T12887] netlink: 228 bytes leftover after parsing attributes in process `syz.4.2005'. [ 230.746274][T12795] lo speed is unknown, defaulting to 1000 [ 231.033389][T12795] lo speed is unknown, defaulting to 1000 [ 231.066040][T12893] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2008'. [ 231.187768][T12896] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2009'. [ 231.506283][T12914] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2011'. [ 231.526492][T12912] netlink: 'syz.3.2012': attribute type 10 has an invalid length. [ 231.545520][T12912] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2012'. [ 231.625226][T12912] dummy0: entered promiscuous mode [ 231.656649][T12912] bridge0: port 3(dummy0) entered blocking state [ 231.701152][T12912] bridge0: port 3(dummy0) entered disabled state [ 231.711503][T12912] dummy0: entered allmulticast mode [ 231.720293][T12912] bridge0: port 3(dummy0) entered blocking state [ 231.726972][T12912] bridge0: port 3(dummy0) entered forwarding state [ 231.751379][T12795] lo speed is unknown, defaulting to 1000 [ 231.881515][T12928] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2015'. [ 231.948308][T12928] hsr_slave_0: left promiscuous mode [ 231.984917][T12928] hsr_slave_1: left promiscuous mode [ 232.104320][T12936] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.2018'. [ 232.266924][T12795] lo speed is unknown, defaulting to 1000 [ 232.614262][T12795] lo speed is unknown, defaulting to 1000 [ 255.661388][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 286.074170][T12968] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 286.292910][T12980] netlink: 'syz.7.2031': attribute type 2 has an invalid length. [ 286.433987][T12984] x_tables: ip_tables: udp match: only valid for protocol 17 [ 286.565440][T12989] syzkaller0: create flow: hash 3463595632 index 1 [ 286.594780][T12988] __nla_validate_parse: 2 callbacks suppressed [ 286.594802][T12988] netlink: 65039 bytes leftover after parsing attributes in process `syz.7.2034'. [ 286.637550][ T6948] syzkaller0: tun_net_xmit 76 [ 286.645543][ T6948] syzkaller0: tun_net_xmit 48 [ 286.666152][ T1564] syzkaller0: tun_net_xmit 76 [ 286.680293][ T5189] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 286.693549][ T5189] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 286.703302][ T5189] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 286.714226][ T5189] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 286.726925][ T5189] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 286.804903][T12985] syzkaller0: delete flow: hash 3463595632 index 1 [ 288.788243][ T5189] Bluetooth: hci8: command tx timeout [ 288.952357][T12995] tipc: Enabled bearer , priority 0 [ 288.959744][T13003] netlink: 'syz.2.2035': attribute type 1 has an invalid length. [ 288.972416][T13000] tipc: Disabling bearer [ 288.974713][T13003] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2035'. [ 288.988390][T13003] workqueue: Failed to create a rescuer kthread for wq "phy3": -EINTR [ 289.055685][T12992] wg1 speed is unknown, defaulting to 1000 [ 289.087618][T12992] lo speed is unknown, defaulting to 1000 [ 289.242582][T13031] tipc: Started in network mode [ 289.269866][T13031] tipc: Node identity 2eaa20461386, cluster identity 4711 [ 289.314844][T13031] tipc: Enabled bearer , priority 0 [ 289.338626][T13043] netlink: 'syz.3.2048': attribute type 30 has an invalid length. [ 289.357409][T13041] syzkaller0: entered promiscuous mode [ 289.384934][T13041] syzkaller0: entered allmulticast mode [ 289.392761][ T9] hid-generic 0005:046D:0009.0001: unknown main item tag 0x0 [ 289.439026][ T9] hid-generic 0005:046D:0009.0001: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 289.491250][T13041] tipc: Resetting bearer [ 289.554010][T13041] tipc: Disabling bearer [ 289.736025][T13052] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2051'. [ 290.101428][T13072] tipc: Enabled bearer , priority 0 [ 290.148628][T13072] syzkaller0: entered promiscuous mode [ 290.183671][T13072] syzkaller0: entered allmulticast mode [ 290.218324][T13080] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2056'. [ 290.310330][T13072] tipc: Resetting bearer [ 290.320002][T13071] tipc: Resetting bearer [ 290.351990][T13071] tipc: Disabling bearer [ 290.371120][T12992] chnl_net:caif_netlink_parms(): no params data found [ 290.542072][T13089] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2060'. [ 290.617574][T13092] netlink: 'syz.2.2061': attribute type 6 has an invalid length. [ 290.643546][T13092] netlink: 'syz.2.2061': attribute type 6 has an invalid length. [ 290.692878][T13100] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2063'. [ 290.733025][T13103] syz_tun: entered allmulticast mode [ 290.745405][T12992] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.764143][T12992] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.775840][T12992] bridge_slave_0: entered allmulticast mode [ 290.783815][T12992] bridge_slave_0: entered promiscuous mode [ 290.792215][T13092] syz_tun: left allmulticast mode [ 290.798983][T13103] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2061'. [ 290.811271][T13103] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2061'. [ 290.812735][T12992] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.830665][T12992] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.838444][T12992] bridge_slave_1: entered allmulticast mode [ 290.846838][T12992] bridge_slave_1: entered promiscuous mode [ 290.865760][ T5189] Bluetooth: hci8: command tx timeout [ 290.996544][T12992] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 291.046901][T13114] netlink: 'syz.4.2066': attribute type 21 has an invalid length. [ 291.057527][T12992] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 291.070273][T13114] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2066'. [ 291.138984][T13115] team0: Device gtp2 is up. Set it down before adding it as a team port [ 291.190175][T13119] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2069'. [ 291.232081][T13119] bridge_slave_1: left allmulticast mode [ 291.239129][T13119] bridge_slave_1: left promiscuous mode [ 291.249051][T13119] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.275466][T13119] bridge_slave_0: left allmulticast mode [ 291.285066][T13119] bridge_slave_0: left promiscuous mode [ 291.295430][T13119] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.390522][T13128] netlink: 'syz.2.2072': attribute type 27 has an invalid length. [ 291.416860][T12992] team0: Port device team_slave_0 added [ 291.450860][T12992] team0: Port device team_slave_1 added [ 291.702079][T12992] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 291.757903][T12992] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 291.818962][T12992] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 291.919035][T12992] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 291.957523][T13154] netlink: 'syz.2.2075': attribute type 6 has an invalid length. [ 291.974712][T12992] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 292.038884][T12992] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 292.313394][T12992] hsr_slave_0: entered promiscuous mode [ 292.321418][T12992] hsr_slave_1: entered promiscuous mode [ 292.329271][T12992] debugfs: 'hsr0' already exists in 'hsr' [ 292.335848][T12992] Cannot create hsr debugfs directory [ 292.944841][ T5189] Bluetooth: hci8: command tx timeout [ 294.880756][T13212] tipc: Enabling of bearer rejected, already enabled [ 294.900231][T13221] syz_tun: entered allmulticast mode [ 294.910180][T13221] syz_tun: left allmulticast mode [ 295.017283][ T5189] Bluetooth: hci8: command tx timeout [ 295.060697][T13231] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2093'. [ 295.384146][T12992] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 295.407523][T12992] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 295.578042][T12992] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 295.609944][T13240] netem: change failed [ 295.618606][T12992] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 295.809884][T13269] Unsupported ieee802154 address type: 0 [ 295.822005][T13269] Unsupported ieee802154 address type: 0 [ 296.037892][T13281] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2105'. [ 296.074536][T12992] 8021q: adding VLAN 0 to HW filter on device bond0 [ 296.110922][T13281] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 296.158265][T12992] 8021q: adding VLAN 0 to HW filter on device team0 [ 296.193967][ T6992] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.205322][ T6992] bridge0: port 1(bridge_slave_0) entered forwarding state [ 296.262742][T13290] netlink: 'syz.2.2106': attribute type 6 has an invalid length. [ 296.282791][T13286] netlink: 'syz.7.2107': attribute type 1 has an invalid length. [ 296.298677][ T6996] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.306099][ T6996] bridge0: port 2(bridge_slave_1) entered forwarding state [ 296.334952][T13286] netlink: 'syz.7.2107': attribute type 4 has an invalid length. [ 296.343079][T13286] netlink: 9462 bytes leftover after parsing attributes in process `syz.7.2107'. [ 296.810537][T13312] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2113'. [ 296.939486][T13319] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2115'. [ 297.180114][T13332] netlink: 'syz.4.2117': attribute type 1 has an invalid length. [ 297.207667][T13332] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2117'. [ 297.215015][T13326] team0: Device vti0 is of different type [ 297.281470][T13335] netlink: 'syz.7.2118': attribute type 1 has an invalid length. [ 297.290949][T13332] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2117'. [ 297.302176][T13335] netlink: 'syz.7.2118': attribute type 10 has an invalid length. [ 297.326904][T13335] netlink: 236 bytes leftover after parsing attributes in process `syz.7.2118'. [ 297.348005][T13332] bond0: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 297.371356][T13332] bond0 (unregistering): Released all slaves [ 297.447440][T13347] openvswitch: netlink: Multiple metadata blocks provided [ 297.467896][T13326] syzkaller1: entered promiscuous mode [ 297.475918][T13326] syzkaller1: entered allmulticast mode [ 297.506212][T13348] lo speed is unknown, defaulting to 1000 [ 297.532634][T12992] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 298.299421][T12992] veth0_vlan: entered promiscuous mode [ 298.356706][T12992] veth1_vlan: entered promiscuous mode [ 298.481193][T12992] veth0_macvtap: entered promiscuous mode [ 298.493288][T12992] veth1_macvtap: entered promiscuous mode [ 298.531950][T12992] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 298.603525][T12992] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 298.640501][ T6988] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.669927][ T6988] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.697942][ T6981] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.718731][T13400] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2131'. [ 298.729410][T13400] netlink: 21 bytes leftover after parsing attributes in process `syz.7.2131'. [ 298.751734][ T6981] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.929136][ T6988] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 298.951822][ T6988] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 299.799882][ T6996] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 299.820308][ T6996] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 300.401713][T13476] netlink: zone id is out of range [ 300.416532][T13476] netlink: zone id is out of range [ 300.429986][T13476] netlink: zone id is out of range [ 300.439900][T13476] netlink: zone id is out of range [ 300.469701][T13476] netlink: zone id is out of range [ 300.492286][T13476] netlink: zone id is out of range [ 300.502689][T13476] netlink: zone id is out of range [ 300.516839][T13476] netlink: zone id is out of range [ 300.561271][T13481] netlink: 'syz.8.2153': attribute type 1 has an invalid length. [ 300.603396][T13481] __nla_validate_parse: 2 callbacks suppressed [ 300.603415][T13481] netlink: 236 bytes leftover after parsing attributes in process `syz.8.2153'. [ 300.907326][T13495] bond0: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 300.926738][T13495] bond0 (unregistering): Released all slaves [ 301.230780][T13505] netlink: 212 bytes leftover after parsing attributes in process `syz.2.2162'. [ 301.303202][T13507] dvmrp0: entered allmulticast mode [ 301.366235][T13507] dvmrp0: left allmulticast mode [ 301.484677][T13518] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2161'. [ 301.550769][T13514] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2165'. [ 302.068722][T13549] : left allmulticast mode [ 302.103383][T13549] : left promiscuous mode [ 302.110226][T13549] bridge0: port 1() entered disabled state [ 302.160944][T13549] bond2: (slave veth0_to_bond): Releasing active interface [ 302.214105][T13549] team_slave_0: left promiscuous mode [ 302.251248][T13549] team0: Port device team_slave_0 removed [ 302.272572][T13549] team_slave_1: left promiscuous mode [ 302.321739][T13549] team0: Port device team_slave_1 removed [ 302.341811][T13549] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 302.368538][T13549] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 302.407799][T13549] bond1: (slave geneve2): Releasing active interface [ 302.425410][T13549] bond2: (slave veth3): Releasing active interface [ 302.463727][T13549] bond5: (slave veth1): Releasing backup interface [ 302.485985][T13549] bond6: (slave bridge4): Releasing backup interface [ 302.493859][T13549] bridge4: left promiscuous mode [ 302.509369][T13549] batadv1: left allmulticast mode [ 302.515273][T13549] batadv1: left promiscuous mode [ 302.521134][T13549] bridge0: port 3(batadv1) entered disabled state [ 302.539158][T13549] bond8: (slave ip6gretap2): Releasing backup interface [ 302.555854][T13549] bond8: (slave ip6gretap2): the permanent HWaddr of slave - 8a:d0:ce:f9:af:de - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 302.564396][T13579] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2177'. [ 302.592746][T13549] bond8: (slave veth7): Releasing backup interface [ 302.606444][T13549] bond9: (slave macvlan7): Releasing backup interface [ 302.621524][ T6996] tipc: Resetting bearer [ 302.811440][T13587] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2182'. [ 302.886988][T13593] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2182'. [ 302.925286][T13593] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2182'. [ 302.989558][T13597] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2184'. [ 303.168568][T13605] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2186'. [ 305.091459][T13596] tipc: Enabling of bearer rejected, already enabled [ 305.834167][T13651] net_ratelimit: 379 callbacks suppressed [ 305.834187][T13651] veth1_to_hsr: mtu less than device minimum [ 306.041447][T13662] openvswitch: netlink: Missing key (keys=40, expected=100) [ 306.071183][T13663] openvswitch: netlink: Missing key (keys=40, expected=100) [ 306.202604][ T5875] IPVS: starting estimator thread 0... [ 306.244927][T13669] syzkaller1: entered promiscuous mode [ 306.252325][T13669] syzkaller1: entered allmulticast mode [ 306.327913][T13668] IPVS: using max 31 ests per chain, 74400 per kthread [ 306.446578][T13673] bond0 (unregistering): Released all slaves [ 306.510599][T13682] __nla_validate_parse: 4 callbacks suppressed [ 306.510620][T13682] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2207'. [ 306.530962][T13682] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2207'. [ 307.036415][T13701] netlink: 9 bytes leftover after parsing attributes in process `syz.3.2212'. [ 307.056016][T13703] netlink: 'syz.7.2213': attribute type 1 has an invalid length. [ 307.078201][T13704] netlink: 'syz.7.2213': attribute type 1 has an invalid length. [ 307.188586][T13711] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2215'. [ 307.204498][T13703] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 307.206155][T13704] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 307.281212][T13706] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 307.377334][T13724] netlink: 'syz.8.2216': attribute type 3 has an invalid length. [ 307.423416][T13725] IPv6: sit5: Disabled Multicast RS [ 307.451415][T13725] sit5: entered allmulticast mode [ 307.510120][T13730] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2217'. [ 307.553242][T13730] unsupported nlmsg_type 40 [ 307.574604][T13736] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2218'. [ 308.035715][T13766] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2226'. [ 308.154439][T13771] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2228'. [ 308.273841][T13776] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2229'. [ 308.366406][T13781] netlink: 'syz.8.2232': attribute type 1 has an invalid length. [ 308.382265][T13782] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2231'. [ 308.439101][T13785] bridge0: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 308.499855][T13785] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 308.755215][T13799] netlink: 'syz.2.2238': attribute type 1 has an invalid length. [ 308.960833][T13809] openvswitch: netlink: Unexpected mask (mask=810, allowed=10058) [ 309.521323][T13831] sit1: entered promiscuous mode [ 309.527174][T13831] sit1: entered allmulticast mode [ 309.811673][T13841] netlink: 'syz.7.2251': attribute type 1 has an invalid length. [ 310.107730][T13858] netlink: 'syz.4.2257': attribute type 1 has an invalid length. [ 310.382533][T13879] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 310.583402][T13898] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode active-backup(1) [ 310.644379][T13898] bond0 (unregistering): Released all slaves [ 310.678029][T13904] rdma_op ffff888054f781f0 conn xmit_rdma 0000000000000000 [ 310.890023][T13911] netlink: 'syz.2.2271': attribute type 1 has an invalid length. [ 311.038336][T13917] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 311.343308][ T979] hid-generic 0005:0007:0008.0002: unknown main item tag 0x0 [ 311.371768][ T979] hid-generic 0005:0007:0008.0002: item fetching failed at offset 1/2 [ 311.404190][ T979] hid-generic 0005:0007:0008.0002: probe with driver hid-generic failed with error -22 [ 311.872222][T13950] __nla_validate_parse: 16 callbacks suppressed [ 311.872242][T13950] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2281'. [ 312.136999][T13971] nbd: couldn't find a device at index -373156329 [ 312.165547][T13969] netlink: 'syz.8.2288': attribute type 12 has an invalid length. [ 312.227616][T13975] team0: No ports can be present during mode change [ 312.515291][T13991] netlink: 'syz.3.2294': attribute type 7 has an invalid length. [ 312.545316][T13991] netlink: 'syz.3.2294': attribute type 7 has an invalid length. [ 312.553963][T13991] netlink: 'syz.3.2294': attribute type 7 has an invalid length. [ 312.674519][T14001] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2296'. [ 312.705943][T14000] netlink: 252 bytes leftover after parsing attributes in process `syz.7.2298'. [ 312.940682][T14013] netlink: 'syz.8.2302': attribute type 6 has an invalid length. [ 312.951251][T14008] netlink: 'syz.2.2300': attribute type 21 has an invalid length. [ 312.962373][T14008] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2300'. [ 312.998106][T14014] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2302'. [ 313.022262][T14014] netlink: 'syz.8.2302': attribute type 20 has an invalid length. [ 313.074164][T14014] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2302'. [ 313.084367][ T6981] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 313.110423][ T6981] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 313.114815][T14014] netlink: 'syz.8.2302': attribute type 20 has an invalid length. [ 313.121590][T14019] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2303'. [ 313.151430][ T6981] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 313.267715][T14023] syzkaller0: entered promiscuous mode [ 313.278130][T14023] syzkaller0: entered allmulticast mode [ 313.299892][ T6981] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 313.382107][ T5875] IPVS: starting estimator thread 0... [ 313.412275][T14020] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2305'. [ 313.450713][T14038] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2308'. [ 313.475515][T14034] IPVS: using max 28 ests per chain, 67200 per kthread [ 313.586522][T14043] netlink: 64 bytes leftover after parsing attributes in process `syz.8.2309'. [ 313.646929][T14046] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 315.460349][T14038] pim6reg1: entered promiscuous mode [ 315.475253][T14038] pim6reg1: entered allmulticast mode [ 315.891812][T14068] syz_tun: entered allmulticast mode [ 315.958704][T14067] syz_tun: left allmulticast mode [ 316.020670][T14071] batadv3: entered allmulticast mode [ 316.092219][T14074] netlink: 'syz.3.2319': attribute type 4 has an invalid length. [ 316.308887][T14084] netlink: 'syz.3.2322': attribute type 1 has an invalid length. [ 316.459094][T14084] bond6: entered promiscuous mode [ 316.472590][T14084] 8021q: adding VLAN 0 to HW filter on device bond6 [ 316.574293][T14094] 8021q: adding VLAN 0 to HW filter on device bond6 [ 317.029150][T14135] __nla_validate_parse: 3 callbacks suppressed [ 317.029171][T14135] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2333'. [ 317.109381][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.128801][T14131] bond7: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 317.186235][T14131] bond7 (unregistering): Released all slaves [ 317.476561][T14153] validate_nla: 5 callbacks suppressed [ 317.476581][T14153] netlink: 'syz.7.2340': attribute type 4 has an invalid length. [ 317.575603][T14153] netlink: 'syz.7.2340': attribute type 2 has an invalid length. [ 317.594516][T14153] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2340'. [ 317.610148][T14164] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2343'. [ 317.820018][T14170] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2347'. [ 317.886177][T14178] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2345'. [ 318.165204][T14178] 8021q: adding VLAN 0 to HW filter on device bond1 [ 318.203005][T14194] netlink: 'syz.2.2350': attribute type 10 has an invalid length. [ 318.272161][T14179] 8021q: adding VLAN 0 to HW filter on device bond1 [ 318.279544][T14179] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 318.308631][T14179] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 318.426291][T14201] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2352'. [ 318.453327][T14201] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2352'. [ 318.479414][T14201] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 318.658517][T14213] tipc: Enabled bearer , priority 0 [ 318.667106][T14215] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2356'. [ 318.679211][T14213] syzkaller0: entered promiscuous mode [ 318.705483][T14213] syzkaller0: entered allmulticast mode [ 318.800566][T14213] tipc: Resetting bearer [ 318.827337][T14213] tipc: Enabled bearer , priority 10 [ 318.840544][T14223] netlink: 'syz.8.2359': attribute type 64 has an invalid length. [ 318.851816][T14223] netlink: 5 bytes leftover after parsing attributes in process `syz.8.2359'. [ 318.862039][T14212] tipc: Resetting bearer [ 318.893247][T14212] tipc: Disabling bearer [ 319.177437][ T5878] Bluetooth: hci5: command 0x0406 tx timeout [ 319.833706][T14259] netlink: 'syz.4.2369': attribute type 29 has an invalid length. [ 319.851545][T14259] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2369'. [ 319.953961][T14263] tipc: New replicast peer: 255.255.255.255 [ 320.006012][T14263] tipc: Enabled bearer , priority 10 [ 320.343572][T14279] vlan2: entered promiscuous mode [ 320.349693][T14279] bridge0: entered promiscuous mode [ 320.645359][T14293] netlink: 'syz.4.2377': attribute type 2 has an invalid length. [ 321.000431][ T10] tipc: Node number set to 987931374 [ 321.506860][T14317] netlink: 'syz.2.2384': attribute type 6 has an invalid length. [ 321.527016][T14317] netlink: 'syz.2.2384': attribute type 6 has an invalid length. [ 321.611677][T14321] netdevsim netdevsim7 netdevsim0: entered allmulticast mode [ 321.844249][T14321] bond0: (slave bond_slave_1): Releasing backup interface [ 321.869032][T14334] netlink: zone id is out of range [ 321.875787][T14334] netlink: zone id is out of range [ 321.881978][T14334] netlink: zone id is out of range [ 321.904840][T14334] netlink: zone id is out of range [ 321.912539][T14334] netlink: zone id is out of range [ 321.931037][T14334] netlink: zone id is out of range [ 321.945935][T14334] netlink: zone id is out of range [ 321.959415][T14334] netlink: zone id is out of range [ 322.026852][T14334] netlink: zone id is out of range [ 322.083989][T14318] netdevsim netdevsim7 netdevsim0: left allmulticast mode [ 322.097734][T14348] tipc: Enabled bearer , priority 0 [ 322.226173][T14331] syzkaller0: entered promiscuous mode [ 322.234036][T14331] syzkaller0: entered allmulticast mode [ 322.302481][ T10] IPVS: starting estimator thread 0... [ 322.367572][T14360] netlink: 'syz.4.2397': attribute type 10 has an invalid length. [ 322.434906][T14358] IPVS: using max 29 ests per chain, 69600 per kthread [ 322.678964][T14372] __nla_validate_parse: 3 callbacks suppressed [ 322.678984][T14372] netlink: 212408 bytes leftover after parsing attributes in process `syz.8.2400'. [ 322.739793][T14371] netlink: 212408 bytes leftover after parsing attributes in process `syz.8.2400'. [ 323.111189][T14383] netlink: 'syz.8.2403': attribute type 1 has an invalid length. [ 324.622351][T14331] tipc: Resetting bearer [ 324.629718][T14360] veth0_virt_wifi: entered allmulticast mode [ 324.638597][T14360] team0: Port device veth0_virt_wifi added [ 324.647568][T14362] netdevsim netdevsim4: Direct firmware load for failed with error -2 [ 324.658185][T14330] tipc: Resetting bearer [ 324.659367][T14362] netdevsim netdevsim4: Falling back to sysfs fallback for: [ 324.833105][T14397] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2407'. [ 324.891702][T14330] tipc: Disabling bearer [ 324.902837][T14377] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2401'. [ 324.908341][T14383] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 324.933835][T14377] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2401'. [ 325.125253][T14409] netlink: 56 bytes leftover after parsing attributes in process `syz.7.2411'. [ 325.205256][T14415] netlink: 56 bytes leftover after parsing attributes in process `syz.7.2411'. [ 325.265115][T14411] tipc: Started in network mode [ 325.275268][T14411] tipc: Node identity 8eef65a8ee0c, cluster identity 4711 [ 325.283050][T14411] tipc: Enabled bearer , priority 0 [ 325.362188][T14426] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2415'. [ 325.373458][T14422] syzkaller0: entered promiscuous mode [ 325.375285][T14425] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2416'. [ 325.395227][T14422] syzkaller0: entered allmulticast mode [ 325.414187][T14427] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2416'. [ 325.477384][T14411] tipc: Resetting bearer [ 325.546306][T14410] tipc: Resetting bearer [ 325.613833][T14410] tipc: Disabling bearer [ 325.667927][T14441] tipc: Enabled bearer , priority 0 [ 325.830424][T14450] netlink: 'syz.4.2423': attribute type 2 has an invalid length. [ 325.831204][T14441] syzkaller0: entered promiscuous mode [ 325.847221][T14441] syzkaller0: entered allmulticast mode [ 325.890072][T14441] tipc: Resetting bearer [ 325.959634][T14438] tipc: Resetting bearer [ 326.231113][T14471] netlink: 'syz.3.2428': attribute type 1 has an invalid length. [ 326.418298][T14474] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci8/hci8:200/input6 [ 328.563391][T14438] tipc: Disabling bearer [ 329.000549][T14503] __nla_validate_parse: 6 callbacks suppressed [ 329.000570][T14503] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2433'. [ 329.028356][T14496] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 330.052642][T14539] vlan2: entered allmulticast mode [ 330.121096][T14539] bridge0: entered allmulticast mode [ 330.466734][T14559] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2449'. [ 330.828247][T14552] net_ratelimit: 18 callbacks suppressed [ 330.828269][T14552] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 331.058645][T14567] netlink: 'syz.4.2451': attribute type 1 has an invalid length. [ 331.076327][T14567] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2451'. [ 331.087541][T14567] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2451'. [ 331.495421][T14587] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2457'. [ 331.763063][T14597] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 332.002366][T14613] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2462'. [ 332.013991][T14613] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.2462'. [ 332.030626][T14613] rdma_rxe: rxe_newlink: failed to add lo [ 332.553945][T14621] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2466'. [ 334.537792][ T5878] Bluetooth: hci6: command 0x0406 tx timeout [ 334.706815][T14630] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2464'. [ 334.786635][T14638] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2467'. [ 335.031502][T14656] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2471'. [ 335.061592][T14653] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 335.129121][T14653] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 335.164491][T14653] gretap2: entered promiscuous mode [ 335.215153][T14653] gretap2: entered allmulticast mode [ 335.333578][T14669] netlink: 'syz.7.2474': attribute type 10 has an invalid length. [ 335.408461][T14669] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 335.471937][T14675] netem: incorrect gi model size [ 335.490431][T14675] netem: change failed [ 335.776615][T14689] openvswitch: netlink: Multiple metadata blocks provided [ 336.409344][T14711] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 336.445985][T14711] openvswitch: netlink: IP tunnel dst address not specified [ 336.476422][T14711] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 336.724832][T14730] delete_channel: no stack [ 337.036884][T14747] netlink: 56 bytes leftover after parsing attributes in process `syz.8.2495'. [ 337.253269][T14759] bond2: option miimon: invalid value (18446744073709551585) [ 337.262017][T14759] bond2: option miimon: allowed values 0 - 2147483647 [ 337.275677][T14759] bond2 (unregistering): Released all slaves [ 337.320091][ T6996] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 337.331601][ T6996] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 337.357618][ T6996] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 337.398703][ T6996] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 337.540505][T14768] team_slave_0: entered promiscuous mode [ 337.546368][T14768] team_slave_1: entered promiscuous mode [ 337.572264][T14768] 8021q: adding VLAN 0 to HW filter on device macvlan31 [ 337.635838][T14774] 8021q: adding VLAN 0 to HW filter on device macvlan32 [ 337.935052][T14788] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2512'. [ 338.062001][T14797] netlink: 'syz.2.2516': attribute type 4 has an invalid length. [ 338.200364][T14808] IPVS: set_ctl: invalid protocol: 12 172.20.20.170:20004 [ 338.460597][T14822] netlink: 'syz.7.2522': attribute type 7 has an invalid length. [ 338.535830][ T30] audit: type=1804 audit(1759445197.252:6): pid=14825 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2523" name="/newroot/533/cgroup.controllers" dev="tmpfs" ino=2759 res=1 errno=0 [ 338.537797][T14822] : entered promiscuous mode [ 338.630551][ T30] audit: type=1800 audit(1759445197.252:7): pid=14825 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2523" name="cgroup.controllers" dev="tmpfs" ino=2759 res=0 errno=0 [ 338.707003][T14829] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2524'. [ 338.841771][T14835] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2528'. [ 338.862370][ T31] INFO: task syz.1.1572:11337 blocked for more than 143 seconds. [ 338.863595][T14833] netlink: 'syz.8.2527': attribute type 11 has an invalid length. [ 338.882491][T14835] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 338.893128][ T31] Not tainted syzkaller #0 [ 338.899378][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 338.909479][ T31] task:syz.1.1572 state:D stack:26184 pid:11337 tgid:11335 ppid:5877 task_flags:0x400040 flags:0x00004004 [ 338.922456][T14833] netlink: 'syz.8.2527': attribute type 11 has an invalid length. [ 338.931485][T14833] netlink: 152 bytes leftover after parsing attributes in process `syz.8.2527'. [ 338.947867][T14837] batman_adv: batadv0: Adding interface: dummy0 [ 338.951486][ T31] Call Trace: [ 338.954151][T14837] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 338.954523][T14837] batman_adv: batadv0: Interface activated: dummy0 [ 338.999894][ T31] [ 339.003122][ T31] __schedule+0x1798/0x4cc0 [ 339.010086][ T31] ? __lock_acquire+0xab9/0xd20 [ 339.017019][ T31] ? __lock_acquire+0xab9/0xd20 [ 339.023338][ T31] ? __pfx___schedule+0x10/0x10 [ 339.029277][ T31] ? schedule+0x91/0x360 [ 339.034241][ T31] schedule+0x165/0x360 [ 339.042732][T14833] ieee80211 phy31: Selected rate control algorithm 'minstrel_ht' [ 339.063364][ T31] schedule_preempt_disabled+0x13/0x30 [ 339.077934][T14839] netlink: 212376 bytes leftover after parsing attributes in process `syz.8.2527'. [ 339.140589][ T31] __mutex_lock+0x7e6/0x1350 [ 339.147825][ T31] ? __mutex_lock+0x5bb/0x1350 [ 339.155174][ T31] ? nfsd_nl_rpc_status_get_dumpit+0xdf/0x1290 [ 339.164007][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 339.170684][ T31] ? stack_trace_save+0x9c/0xe0 [ 339.176166][ T31] ? stack_depot_save_flags+0x40/0x860 [ 339.181924][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 339.189807][ T31] nfsd_nl_rpc_status_get_dumpit+0xdf/0x1290 [ 339.198565][ T31] ? __kmalloc_node_track_caller_noprof+0x271/0x4e0 [ 339.206520][ T31] ? kmalloc_reserve+0x136/0x290 [ 339.212195][ T31] ? __alloc_skb+0x142/0x2d0 [ 339.217831][ T31] ? netlink_dump+0x1b7/0xe90 [ 339.222718][ T31] ? __netlink_dump_start+0x5cb/0x7e0 [ 339.228785][ T31] ? genl_family_rcv_msg_dumpit+0x1e7/0x2c0 [ 339.237193][ T31] ? genl_rcv_msg+0x5da/0x790 [ 339.242320][ T31] ? netlink_rcv_skb+0x208/0x470 [ 339.248598][ T31] ? genl_rcv+0x28/0x40 [ 339.253054][ T31] ? netlink_unicast+0x82c/0x9e0 [ 339.259410][ T31] ? netlink_sendmsg+0x805/0xb30 [ 339.265405][ T31] ? __sock_sendmsg+0x21c/0x270 [ 339.270526][ T31] ? ____sys_sendmsg+0x505/0x830 [ 339.287573][ T31] ? ___sys_sendmsg+0x21f/0x2a0 [ 339.292684][ T31] ? __x64_sys_sendmsg+0x19b/0x260 [ 339.301280][ T31] ? do_syscall_64+0xfa/0x3b0 [ 339.306778][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.313200][ T31] ? __pfx_nfsd_nl_rpc_status_get_dumpit+0x10/0x10 [ 339.320663][ T31] ? rcu_is_watching+0x15/0xb0 [ 339.326138][ T31] ? trace_kmalloc+0x1f/0xd0 [ 339.332190][ T31] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 339.345662][ T31] ? __build_skb_around+0x257/0x3e0 [ 339.351383][ T31] genl_dumpit+0x10b/0x1b0 [ 339.365908][ T31] netlink_dump+0x6e1/0xe90 [ 339.371107][ T31] ? __pfx_netlink_dump+0x10/0x10 [ 339.383813][ T31] ? genl_start+0x499/0x6c0 [ 339.389460][ T31] __netlink_dump_start+0x5cb/0x7e0 [ 339.399928][ T31] genl_family_rcv_msg_dumpit+0x1e7/0x2c0 [ 339.406452][ T31] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 339.412739][ T31] ? genl_get_cmd+0x496/0x910 [ 339.417889][ T31] ? __pfx_genl_start+0x10/0x10 [ 339.422979][ T31] ? __pfx_genl_dumpit+0x10/0x10 [ 339.429640][ T31] ? __pfx_genl_done+0x10/0x10 [ 339.434462][ T31] ? stack_trace_save+0x9c/0xe0 [ 339.439494][ T31] genl_rcv_msg+0x5da/0x790 [ 339.444041][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 339.449551][ T31] ? __pfx_nfsd_nl_rpc_status_get_dumpit+0x10/0x10 [ 339.457657][ T31] netlink_rcv_skb+0x208/0x470 [ 339.462722][ T31] ? __lock_acquire+0xab9/0xd20 [ 339.469164][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 339.474984][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 339.480785][ T31] ? down_read+0x1ad/0x2e0 [ 339.485735][ T31] genl_rcv+0x28/0x40 [ 339.490088][ T31] netlink_unicast+0x82c/0x9e0 [ 339.499260][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 339.512305][ T31] ? netlink_sendmsg+0x642/0xb30 [ 339.518360][ T31] ? skb_put+0x11b/0x210 [ 339.523152][ T31] netlink_sendmsg+0x805/0xb30 [ 339.528631][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 339.534056][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 339.539929][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 339.546033][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 339.551528][ T31] __sock_sendmsg+0x21c/0x270 [ 339.556995][ T31] ____sys_sendmsg+0x505/0x830 [ 339.561809][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 339.567804][ T31] ? import_iovec+0x74/0xa0 [ 339.573050][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 339.578546][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 339.584073][ T31] ? __fget_files+0x2a/0x420 [ 339.589342][ T31] ? __fget_files+0x3a0/0x420 [ 339.594190][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 339.599503][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 339.607330][ T31] ? rcu_is_watching+0x15/0xb0 [ 339.612149][ T31] ? do_syscall_64+0xbe/0x3b0 [ 339.619399][ T31] do_syscall_64+0xfa/0x3b0 [ 339.624179][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 339.630037][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.636899][ T31] ? clear_bhb_loop+0x60/0xb0 [ 339.642055][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.648806][ T31] RIP: 0033:0x7f0f17b8eec9 [ 339.653363][ T31] RSP: 002b:00007f0f15df6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 339.662728][ T31] RAX: ffffffffffffffda RBX: 00007f0f17de5fa0 RCX: 00007f0f17b8eec9 [ 339.670910][ T31] RDX: 0000000000004000 RSI: 0000200000000180 RDI: 0000000000000004 [ 339.679265][ T31] RBP: 00007f0f17c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 339.687832][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 339.695993][ T31] R13: 00007f0f17de6038 R14: 00007f0f17de5fa0 R15: 00007ffefbf3da38 [ 339.704199][ T31] [ 339.709604][ T31] [ 339.709604][ T31] Showing all locks held in the system: [ 339.727687][ T31] 1 lock held by khungtaskd/31: [ 339.741625][ T31] #0: ffffffff8e13a0e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 339.754289][ T31] 2 locks held by getty/5624: [ 339.760796][ T31] #0: ffff8880306fc0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 339.772333][ T31] #1: ffffc900036c32f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 339.784522][ T31] 3 locks held by kworker/1:3/5875: [ 339.791440][ T31] #0: ffff8880b8739f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 339.802168][ T31] #1: ffff8880b8724008 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 339.812948][ T31] #2: ffff8880b8725918 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x1ae/0xf30 [ 339.823709][ T31] 2 locks held by syz.0.1364/10658: [ 339.829020][ T31] #0: ffffffff8f59f870 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 339.837806][ T31] #1: ffffffff8e418a88 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1690 [ 339.849207][ T31] 3 locks held by syz.1.1572/11337: [ 339.854733][ T31] #0: ffffffff8f59f870 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 339.863078][ T31] #1: ffff88807d4456d8 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0xfe/0x7e0 [ 339.873723][ T31] #2: ffffffff8e418a88 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_rpc_status_get_dumpit+0xdf/0x1290 [ 339.884406][ T31] 2 locks held by syz.5.1698/11797: [ 339.889841][ T31] #0: ffffffff8f59f870 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 339.903560][ T31] #1: ffffffff8e418a88 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1690 [ 339.916422][ T31] 2 locks held by syz.5.1698/11798: [ 339.921655][ T31] #0: ffffffff8f59f870 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 339.930695][ T31] #1: ffffffff8e418a88 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1690 [ 339.942249][ T31] 2 locks held by syz.6.1930/12649: [ 339.948049][ T31] #0: ffffffff8f59f870 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 339.957060][ T31] #1: ffffffff8e418a88 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1690 [ 339.969333][ T31] [ 339.971852][ T31] ============================================= [ 339.971852][ T31] [ 339.982287][ T31] NMI backtrace for cpu 0 [ 339.982304][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 339.982325][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 339.982338][ T31] Call Trace: [ 339.982350][ T31] [ 339.982358][ T31] dump_stack_lvl+0x189/0x250 [ 339.982389][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 339.982412][ T31] ? __pfx__printk+0x10/0x10 [ 339.982452][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 339.982485][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 339.982516][ T31] ? __pfx__printk+0x10/0x10 [ 339.982547][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 339.982580][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 339.982612][ T31] watchdog+0xf93/0xfe0 [ 339.982644][ T31] ? watchdog+0x1de/0xfe0 [ 339.982676][ T31] kthread+0x70e/0x8a0 [ 339.982703][ T31] ? __pfx_watchdog+0x10/0x10 [ 339.982727][ T31] ? __pfx_kthread+0x10/0x10 [ 339.982753][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 339.982771][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 339.982790][ T31] ? __pfx_kthread+0x10/0x10 [ 339.982821][ T31] ret_from_fork+0x439/0x7d0 [ 339.982844][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 339.982870][ T31] ? __switch_to_asm+0x39/0x70 [ 339.982894][ T31] ? __switch_to_asm+0x33/0x70 [ 339.982917][ T31] ? __pfx_kthread+0x10/0x10 [ 339.982942][ T31] ret_from_fork_asm+0x1a/0x30 [ 339.982984][ T31] [ 339.983015][ T31] Sending NMI from CPU 0 to CPUs 1: [ 340.148014][ C1] NMI backtrace for cpu 1 [ 340.148033][ C1] CPU: 1 UID: 0 PID: 6948 Comm: kworker/u8:16 Not tainted syzkaller #0 PREEMPT(full) [ 340.148053][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 340.148064][ C1] Workqueue: bat_events batadv_nc_worker [ 340.148094][ C1] RIP: 0010:preempt_count_sub+0x1f/0x170 [ 340.148122][ C1] Code: 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 53 48 bb 00 00 00 00 00 fc ff df 48 c7 c0 20 33 ac 99 48 c1 e8 03 0f b6 04 18 <84> c0 0f 85 d1 00 00 00 83 3d 22 34 1c 18 00 75 25 65 8b 05 29 e1 [ 340.148136][ C1] RSP: 0018:ffffc9000efb78c8 EFLAGS: 00000802 [ 340.148150][ C1] RAX: 0000000000000004 RBX: dffffc0000000000 RCX: 550ead5f0a655100 [ 340.148163][ C1] RDX: 0000000000000000 RSI: ffffffff8b89a9c0 RDI: 0000000000000001 [ 340.148173][ C1] RBP: ffffc9000efb7978 R08: ffffffff8fa3a837 R09: 1ffffffff1f47506 [ 340.148186][ C1] R10: dffffc0000000000 R11: fffffbfff1f47507 R12: ffffffff8b486308 [ 340.148199][ C1] R13: dffffc0000000000 R14: dffffc0000000000 R15: 1ffff92001df6f1c [ 340.148211][ C1] FS: 0000000000000000(0000) GS:ffff888125d12000(0000) knlGS:0000000000000000 [ 340.148225][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 340.148237][ C1] CR2: 00007fff8de1cb38 CR3: 0000000074cc2000 CR4: 00000000003526f0 [ 340.148252][ C1] Call Trace: [ 340.148258][ C1] [ 340.148267][ C1] __local_bh_enable_ip+0x128/0x1c0 [ 340.148284][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 340.148302][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 340.148323][ C1] ? batadv_nc_purge_paths+0x318/0x3b0 [ 340.148338][ C1] ? __pfx_batadv_nc_to_purge_nc_path_decoding+0x10/0x10 [ 340.148357][ C1] batadv_nc_purge_paths+0x318/0x3b0 [ 340.148379][ C1] batadv_nc_worker+0x369/0x610 [ 340.148403][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 340.148421][ C1] process_scheduled_works+0xae1/0x17b0 [ 340.148450][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 340.148475][ C1] worker_thread+0x8a0/0xda0 [ 340.148504][ C1] kthread+0x70e/0x8a0 [ 340.148525][ C1] ? __pfx_worker_thread+0x10/0x10 [ 340.148547][ C1] ? __pfx_kthread+0x10/0x10 [ 340.148567][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 340.148583][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 340.148599][ C1] ? __pfx_kthread+0x10/0x10 [ 340.148618][ C1] ret_from_fork+0x439/0x7d0 [ 340.148637][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 340.148656][ C1] ? __switch_to_asm+0x39/0x70 [ 340.148677][ C1] ? __switch_to_asm+0x33/0x70 [ 340.148697][ C1] ? __pfx_kthread+0x10/0x10 [ 340.148717][ C1] ret_from_fork_asm+0x1a/0x30 [ 340.148745][ C1] [ 340.149326][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 340.434470][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 340.444609][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 340.454779][ T31] Call Trace: [ 340.458069][ T31] [ 340.461085][ T31] dump_stack_lvl+0x99/0x250 [ 340.466895][ T31] ? __asan_memcpy+0x40/0x70 [ 340.472635][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 340.478810][ T31] ? __pfx__printk+0x10/0x10 [ 340.484071][ T31] vpanic+0x281/0x750 [ 340.488506][ T31] ? __pfx_vpanic+0x10/0x10 [ 340.493544][ T31] ? __x2apic_send_IPI_mask+0x1e4/0x260 [ 340.500571][ T31] ? preempt_schedule+0xae/0xc0 [ 340.505532][ T31] ? preempt_schedule_common+0x83/0xd0 [ 340.511702][ T31] panic+0xb9/0xc0 [ 340.515444][ T31] ? __pfx_panic+0x10/0x10 [ 340.519862][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 340.525245][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 340.531400][ T31] watchdog+0xfd2/0xfe0 [ 340.535572][ T31] ? watchdog+0x1de/0xfe0 [ 340.539926][ T31] kthread+0x70e/0x8a0 [ 340.544002][ T31] ? __pfx_watchdog+0x10/0x10 [ 340.548679][ T31] ? __pfx_kthread+0x10/0x10 [ 340.553357][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 340.558630][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 340.563827][ T31] ? __pfx_kthread+0x10/0x10 [ 340.568416][ T31] ret_from_fork+0x439/0x7d0 [ 340.573120][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 340.578315][ T31] ? __switch_to_asm+0x39/0x70 [ 340.583073][ T31] ? __switch_to_asm+0x33/0x70 [ 340.587920][ T31] ? __pfx_kthread+0x10/0x10 [ 340.593730][ T31] ret_from_fork_asm+0x1a/0x30 [ 340.598773][ T31] [ 340.602221][ T31] Kernel Offset: disabled [ 340.606571][ T31] Rebooting in 86400 seconds..