last executing test programs: 5m42.983642707s ago: executing program 4 (id=16054): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$sock_int(r1, 0x1, 0x3c, 0x0, &(0x7f0000000000)) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000080)=ANY=[], 0x98}, 0x1, 0x0, 0x0, 0x44040}, 0x0) r2 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r2, 0x800442d4, &(0x7f0000000040)=0x3) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="e00000000a06010100000000000000000300000908000940800000010900020073797a310000000005000100070000000800094000000005880008800c000780080009"], 0x13a}, 0x1, 0x0, 0x0, 0x4800}, 0x48080) 5m42.469978156s ago: executing program 4 (id=16059): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000200)={'syztnl2\x00', 0x0, 0x40, 0x7800, 0x21ae, 0x7ff, {{0x5, 0x4, 0x3, 0x8, 0x14, 0x65, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102}}}}) setsockopt$inet_int(r1, 0x0, 0x1a, &(0x7f0000000240)=0x6, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x22800, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000540)={'syzkaller0\x00', 0x2}) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000580)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=@newtfilter={0x54, 0x2c, 0xd3f, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0xc, 0x4}, {0x0, 0x9}, {0x10, 0x9}}, [@filter_kind_options=@f_fw={{0x7}, {0x28, 0x2, [@TCA_FW_CLASSID={0x4, 0x1, {0xfff1, 0xc}}, @TCA_FW_MASK={0x8, 0x5, 0x1ff}, @TCA_FW_INDEV={0x14, 0x3, 'bridge_slave_1\x00'}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x84}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000007c0), r6) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)={0x24, r7, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x24}}, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r8, &(0x7f0000000480)={0xa, 0x1234, 0x0, @loopback}, 0x1c) sendto$inet6(r8, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0xa, 0x1234, 0x2, @dev={0xfe, 0x80, '\x00', 0x45}}, 0x1c) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={0x28, r9, 0xb03, 0x8000000, 0x0, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x21f78bdc}]}]}, 0x28}}, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x80400004, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'macvlan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000340)={'syztnl0\x00', &(0x7f00000002c0)={'ip6gre0\x00', r10, 0x29, 0x2, 0x1, 0xc62, 0x1, @loopback, @private0, 0x8000, 0x8000, 0x7ff, 0x80000005}}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@map=0x1, 0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0xf, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x40}, 0x1c) r11 = socket$igmp(0x2, 0x3, 0x2) getsockopt$MRT(r11, 0x0, 0xd1, 0x0, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r12, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0) socket$inet6(0xa, 0x2, 0x0) 5m41.17615755s ago: executing program 4 (id=16065): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="300000003e0007010000000005000003047c00000400fc680c00018006210612"], 0x30}, 0x1, 0x0, 0x0, 0x8044}, 0x4010) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x3, 0x4, &(0x7f0000000680)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1}]}, &(0x7f00000006c0)='GPL\x00', 0x5, 0xc3, &(0x7f0000000700)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x19, &(0x7f0000000800), 0x8, 0x10, &(0x7f0000000840)={0x0, 0x2000000, 0x0, 0x8001}, 0x10}, 0x94) bind$bt_l2cap(r2, &(0x7f0000000180)={0x1f, 0x0, @any, 0x4}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000200)={0x3, 0x9, 0xfffd, 0x4}, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a32000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000008c0)={r0, 0x2b73ee37, 0x6, 0x8000}) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000900)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, r3, 0x5, 0x4, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007ba8f0ff00000000bda100000000000007000000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a300000095"], &(0x7f0000000480)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="20000000170a010200000000000000000200000009000100"], 0x20}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) 5m40.698366039s ago: executing program 4 (id=16068): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x20004000) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000a40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000b00)={0x2c, 0x8, 0x6, 0xb01, 0x0, 0x0, {0x5, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x84}, 0x4000) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000140)={'syztnl1\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x788e, 0x7, 0xb52, 0xef, {{0x1a, 0x4, 0x0, 0x1b, 0x68, 0x66, 0x0, 0x1, 0x2f, 0x0, @empty, @multicast1, {[@end, @end, @timestamp={0x44, 0x8, 0x8e, 0x0, 0x0, [0xd]}, @generic={0x0, 0xc, "5207f766ebaeeb396837"}, @generic={0x88, 0x4, "50b9"}, @end, @rr={0x7, 0x23, 0x6e, [@local, @loopback, @multicast1, @empty, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x3a}, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x1e}]}, @rr={0x7, 0x13, 0xdf, [@empty, @loopback, @empty, @loopback]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'syztnl1\x00', &(0x7f0000000180)={'sit0\x00', 0x0, 0x20, 0x8, 0x7fff, 0x10001, {{0x1f, 0x4, 0x3, 0x2d, 0x7c, 0x64, 0x0, 0x0, 0x4, 0x0, @multicast2, @multicast2, {[@noop, @ssrr={0x89, 0xf, 0xc2, [@rand_addr=0x64010101, @remote, @multicast2]}, @lsrr={0x83, 0x1f, 0xfd, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @empty, @loopback, @local, @local, @remote]}, @cipso={0x86, 0x6, 0xffffffffffffffff}, @timestamp_addr={0x44, 0xc, 0x89, 0x1, 0x6, [{@dev={0xac, 0x14, 0x14, 0x1a}, 0x2}]}, @cipso={0x86, 0x15, 0xffffffffffffffff, [{0x5, 0xf, "f465dc69ad7779aad9f9d422d5"}]}, @ra={0x94, 0x4}, @ssrr={0x89, 0xb, 0x10, [@multicast1, @loopback]}]}}}}}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7, 0xe}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newtfilter={0x38, 0x2c, 0xd2b, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x2}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x80000000}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4084}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000004c0)={'macvlan0\x00', 0x0}) r5 = bpf$ITER_CREATE(0x21, &(0x7f00000008c0), 0x8) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000940), r1) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x34, r6, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xff}, @L2TP_ATTR_MRU={0x6}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000040}, 0x4044) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r4, @ANYBLOB="00001700000000001c0037800b0001206970768a616e08000c0002800600010000000000050027"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) socket$packet(0x11, 0x3, 0x300) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000d80)={0x1f, 0xffff, 0x3}, 0x6) write(r8, &(0x7f0000000dc0)='4\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00\x00', 0xd) 5m38.902775294s ago: executing program 4 (id=16076): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000500)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f0000000000)={0x38, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x5, 0x10}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x38}}, 0x0) 5m37.593761394s ago: executing program 4 (id=16080): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@arena={0x21, 0x0, 0x0, 0x1c, 0x40400, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3}, 0x50) (async) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000000)=0x200824, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x5, &(0x7f00000001c0)=@raw=[@map_val={0x18, 0x2, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x200}, @generic={0xfb, 0x5, 0xe, 0x1, 0xf0e}, @exit, @alu={0x4, 0x0, 0xa, 0x4, 0x8}], &(0x7f0000000200)='syzkaller\x00', 0x1, 0xde, &(0x7f0000000240)=""/222, 0x5dee429ce260e835, 0x32, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000380)={0x0, 0x5, 0x8, 0x4}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000440)=[{0x2, 0x2, 0x10, 0x9}], 0x10, 0x40}, 0x94) (async) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7000fbdbdf250200000009000100737965616d300000000000000000000000b504b4b01e7756a2a9ac08f474eaa0601ca38f7d102059ce8b8f6cb30e8607e3587755d47910e6048a5404e6878474fd280640f6c8e754525c0c854f435f2ec6f92ab0b519292581aaca900f640500315bc49aafb73fb4fb1b4ceb3b61ed91762dd4b98b7908c12a05d598fe674efdfd04cbd04abb9f43a187eb07496c60b29cb3fa11007f00"/179], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x4) 5m22.038100735s ago: executing program 32 (id=16080): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@arena={0x21, 0x0, 0x0, 0x1c, 0x40400, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3}, 0x50) (async) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000000)=0x200824, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x5, &(0x7f00000001c0)=@raw=[@map_val={0x18, 0x2, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x200}, @generic={0xfb, 0x5, 0xe, 0x1, 0xf0e}, @exit, @alu={0x4, 0x0, 0xa, 0x4, 0x8}], &(0x7f0000000200)='syzkaller\x00', 0x1, 0xde, &(0x7f0000000240)=""/222, 0x5dee429ce260e835, 0x32, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000380)={0x0, 0x5, 0x8, 0x4}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000440)=[{0x2, 0x2, 0x10, 0x9}], 0x10, 0x40}, 0x94) (async) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7000fbdbdf250200000009000100737965616d300000000000000000000000b504b4b01e7756a2a9ac08f474eaa0601ca38f7d102059ce8b8f6cb30e8607e3587755d47910e6048a5404e6878474fd280640f6c8e754525c0c854f435f2ec6f92ab0b519292581aaca900f640500315bc49aafb73fb4fb1b4ceb3b61ed91762dd4b98b7908c12a05d598fe674efdfd04cbd04abb9f43a187eb07496c60b29cb3fa11007f00"/179], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x4) 4m30.277846091s ago: executing program 1 (id=16353): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080), 0x3c) r1 = socket(0x15, 0x5, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000580), 0x806000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) getsockopt(r1, 0x200000000114, 0x2710, &(0x7f00000005c0)=""/1, &(0x7f0000000600)=0xf002) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x4000002, 0x6e073, 0xffffffffffffffff, 0x100000000) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_FT_IES(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf256000000008000300", @ANYRES32=r4, @ANYBLOB="0c0099000600000050f600b2af3272e1f937f898"], 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x40000800) setsockopt$inet6_tcp_int(r0, 0x11a, 0x5, &(0x7f00000000c0)=0x3f9, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f0000000240)={0x6, 0x4, 0x0, 0x20000000, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x44}, @multicast2}, 0x10) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$BTRFS_IOC_ENCODED_READ(r6, 0x80809440, &(0x7f0000000480)={&(0x7f0000000440)=[{&(0x7f00000002c0)="49657548223aac2de94f0be0a816259879d1accfbe5eb9046c98e31be71bc9dadcdee8bb560eee7bc06c6d24f830ca75c2c320afd861119f1c16671aa354826d6c49a30f705638c0c95420c89b6df7b83ef168c661110f15b6341b52376910371bb145b520efce8dd88ef635ae61d6407b275b691832125d5adf12ba69c49810b1e257731ada6a73dff0ce1a65a08b43bfbbe28bf319f78fb835e634fc748d3b337e50d03e50121ffb72e9a0cdf00138065fbfc1e19fa5fab73d5c005c3bf0b55b9428", 0xc3}, {&(0x7f00000003c0)="f3dedc7ecf116490ecafe8eb5cdb7a7a0ecf0c09f2aed1ae48989e4548e88f4ee596312fe0df6f380f80857fb5476a82630d2e492a596b14422887322499145110aa275a91368aedcbe0a948bc0bbc63311905b6950bf88d63d8b6e59fcfcd47d55be37f9d442e5267a443df14aa863a18b43132", 0x74}], 0x2, 0xffff, 0x0, 0x9, 0x7, 0x9, 0x7, 0x7}) 4m29.527723993s ago: executing program 1 (id=16359): r0 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x60) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000000c0)) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f00000002c0)={0x2, 0xffffffffffffffff}, &(0x7f0000000300)=0xc) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000340)={0x0, 0x6800, 0xe3, 0x40, 0x7ff, 0x2}, &(0x7f0000000380)=0x14) (async) r4 = accept$inet6(r2, &(0x7f00000003c0)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000400)=0x1c) (async) ioctl$NILFS_IOCTL_GET_CPSTAT(r2, 0x80186e83, &(0x7f0000000440)) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r0, 0x8982, &(0x7f0000000480)) (async) r5 = accept4$nfc_llcp(r0, &(0x7f00000004c0), &(0x7f0000000540)=0x60, 0x800) ioctl$OCFS2_IOC_GROUP_ADD(r5, 0x40186f02, &(0x7f0000000580)={0x5, 0x9, 0x8}) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(r4, 0x84, 0x7a, &(0x7f00000005c0)={r1, 0xffffffffffffffff}, &(0x7f0000000600)=0xc) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r7, 0x84, 0x4, &(0x7f0000000640)=0x3, 0x4) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r4, 0x84, 0x23, &(0x7f0000000680)={r3, 0x1a59}, 0x8) (async) ioctl$XFS_IOC_GETPARENTS(r4, 0xc028583e, &(0x7f0000000740)={{[0x7, 0x6, 0x6, 0x55f]}, 0x0, 0x0, 0x5, 0x0, &(0x7f00000006c0)=[{{@align=0xffffffff80000000, {0x0, 0xfffa, 0x0, 0x8}}, 0x9, 0x0, '\x00'}, {{@align=0x5, {0x6, 0x6, 0x400, 0x40}}, 0x400, 0x0, '!\x00'}]}) getsockopt$inet_sctp6_SCTP_EVENT(r4, 0x84, 0x7f, &(0x7f0000000780)={r3, 0x8009, 0x1}, &(0x7f00000007c0)=0x8) (async) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000800)={{{@in6=@loopback, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000900)=0xe8) ioctl$sock_inet_SIOCSIFBRDADDR(r5, 0x891a, &(0x7f0000000940)={'batadv_slave_1\x00', {0x2, 0x4e24, @broadcast}}) ioctl$XFS_IOC_FSGEOMETRY_V4(r0, 0x8070587c, &(0x7f0000000980)) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r7, 0x84, 0xa, &(0x7f0000000a00)={0xf, 0xd7, 0x8, 0x100, 0x3, 0x785, 0xd9, 0x3, r3}, &(0x7f0000000a40)=0x20) (async) getsockopt$inet_sctp_SCTP_EVENT(0xffffffffffffffff, 0x84, 0x7f, &(0x7f0000000a80)={r6, 0x8003}, &(0x7f0000000ac0)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000b00)={r10, 0x4}, 0x8) (async, rerun: 64) r11 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000b40)='cgroup.procs\x00', 0x2, 0x0) (rerun: 64) ioctl$FS_IOC_ENABLE_VERITY(r11, 0x40806685, &(0x7f0000000cc0)={0x1, 0x3, 0x1000, 0x23, &(0x7f0000000b80)="bdcb25a1763a96cca878b106233d0b73d6dfa92d8bd71daf2e7d85f9f24ffb047c8f7c", 0xde, 0x0, &(0x7f0000000bc0)="14f9b2cb83b022b10933f60f6ffa273920e28b05bda7ce08fa4e5739d418f8b9829693ee7bfadd2d8cfd69c8aef88ca8a45519cdb428b9ece25131d404aa0bd2b2f4877a8d46e2a48c3905d1a0779fbc561635003ea50dc6919500997939ae7d35dfdad26e52d39aa283c16ef148f6fd8dc2c0321dc8ad37d3e3cc106a9718d7989ac2f130f5dafe4d8a9d16ef16151128158298ef8267ea6900bbab7a361ba693a34ee6001198141201da6e991b3ecfec9e26bee8bb3b23f1c6b345491b6ed75e4bf84450cbff4543cd09dee10494399a372f3244cfb87e451a4d1eb054"}) (async) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d80), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r2, &(0x7f0000000e80)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000dc0)={0x68, r12, 0x800, 0x70bd2c, 0x6ee83ecb, {{}, {@void, @val={0xc, 0x99, {0x5e92377a, 0x22}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x40000d0) (async) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000ec0)={r10, 0x8}, &(0x7f0000000f00)=0x8) (async) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000f40)={r8, 0xffffffffffffffff, 0x800}, &(0x7f0000000f80)=0xc) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF_FLAGS(r14, 0x84, 0x7a, &(0x7f0000000fc0)={r13, 0xffffffffffffffff, 0x80800}, &(0x7f0000001000)=0xc) ioctl(r15, 0x46f1, &(0x7f0000001040)="afb77e90af7f599b4b97b4acce24a1602f10995816973bcf418bc4fe7bef37fe74c1a31b07212e57b7f4fee9346682c2bdf3fece576e8f961406b1077715f9019b537a5dbe209614a59473764286fc65466c11bbac16eb") (async) close(r14) setsockopt$inet6_IPV6_PKTINFO(r7, 0x29, 0x32, &(0x7f00000010c0)={@local, r9}, 0x14) 4m28.678049152s ago: executing program 1 (id=16363): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000180)=ANY=[], 0x32600) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r2, 0x0, 0x480, &(0x7f0000000580), &(0x7f00000005c0)=0x40) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x82316000) r3 = socket(0x1e, 0x1, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f0000000040), 0x4) recvmmsg(r3, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/174, 0xae}], 0x1, &(0x7f0000000340)=""/65, 0xfffffffffffffde0}, 0x4}], 0x1, 0x40002122, 0x0) sendmsg$tipc(r3, &(0x7f0000000440)={&(0x7f0000000480)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x1, 0x2}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000500)="c9aa78c37d080000000000005a389162cb5dc330", 0x14}, {&(0x7f0000000540)="e9a13bf9163ed7ff3d1e8fae", 0xc}], 0x2, 0x0, 0x0, 0x20004800}, 0x4800) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x31, &(0x7f00000003c0)={0x0, 0x0}, 0x10) bind$inet6(r4, &(0x7f0000000400)={0xa, 0x4e20, 0x10001, @empty, 0x3}, 0x1c) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="18100000000000000000000000000000e500030008000000180001000700000000000000050000007a0ac0ff1000000018120000300a3c9ffe10dca069cc7c0dfc91747405b54f92f4f7ae41fb14a3cc2919a25af9103eaa600086074e8a4bb96332ad5223c26c946afb9e3c6f33d64ef4102cb76a8c5e6d81e3d90554a3e22ddd50edc289059c402b80f81b6ecfc6968dc0d113fced9cc7f863af4ea220e82f8b4141e3acf3030e6cb26e0cb1693ee4f59f37c61c48997528b55ce06625a955ebcf05a028f4", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) (async) write$cgroup_subtree(r1, &(0x7f0000000180)=ANY=[], 0x32600) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (async) getsockopt$IP_VS_SO_GET_VERSION(r2, 0x0, 0x480, &(0x7f0000000580), &(0x7f00000005c0)=0x40) (async) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x82316000) (async) socket(0x1e, 0x1, 0x0) (async) setsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f0000000040), 0x4) (async) recvmmsg(r3, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/174, 0xae}], 0x1, &(0x7f0000000340)=""/65, 0xfffffffffffffde0}, 0x4}], 0x1, 0x40002122, 0x0) (async) sendmsg$tipc(r3, &(0x7f0000000440)={&(0x7f0000000480)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x1, 0x2}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000500)="c9aa78c37d080000000000005a389162cb5dc330", 0x14}, {&(0x7f0000000540)="e9a13bf9163ed7ff3d1e8fae", 0xc}], 0x2, 0x0, 0x0, 0x20004800}, 0x4800) (async) socket$inet6(0xa, 0x80002, 0x0) (async) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) (async) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x31, &(0x7f00000003c0)={0x0, 0x0}, 0x10) (async) bind$inet6(r4, &(0x7f0000000400)={0xa, 0x4e20, 0x10001, @empty, 0x3}, 0x1c) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="18100000000000000000000000000000e500030008000000180001000700000000000000050000007a0ac0ff1000000018120000300a3c9ffe10dca069cc7c0dfc91747405b54f92f4f7ae41fb14a3cc2919a25af9103eaa600086074e8a4bb96332ad5223c26c946afb9e3c6f33d64ef4102cb76a8c5e6d81e3d90554a3e22ddd50edc289059c402b80f81b6ecfc6968dc0d113fced9cc7f863af4ea220e82f8b4141e3acf3030e6cb26e0cb1693ee4f59f37c61c48997528b55ce06625a955ebcf05a028f4", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) (async) 4m28.101832752s ago: executing program 1 (id=16366): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) socket(0xe, 0x3, 0x5) socket$inet6_sctp(0xa, 0x5, 0x84) socket(0xa, 0x3, 0x3a) socket(0xa, 0x3, 0xff) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xd, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50) r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) sendmmsg(r0, &(0x7f0000000980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000100100000c"], 0x28, 0xe000}, 0x5}], 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x4}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008081}, 0x20040040) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r2], 0x90}}, 0x0) 4m26.721914105s ago: executing program 1 (id=16373): r0 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x401, 0x70bd28, 0x8848, {0x0, 0x0, 0x0, 0x0, 0x8405, 0x8000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x40) 4m26.44320773s ago: executing program 1 (id=16376): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x2202, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000700)={'syzkaller1\x00', 0x5001}) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000740)={'syzkaller1\x00', 0x0}) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newsa={0x104, 0x10, 0x1, 0x0, 0x0, {{@in=@private=0xa010101, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in6=@remote, 0x0, 0x2b}, @in6=@empty, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@arena={0x21, 0x0, 0x0, 0x1, 0x400, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) mmap(&(0x7f0000100000/0x1000)=nil, 0x1000, 0x3, 0x11, r7, 0x0) bind$inet6(r6, &(0x7f00000003c0)={0xa, 0xe22, 0x0, @mcast1, 0x7}, 0x1c) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f0000000580)=[{&(0x7f00000005c0)="580000001500add427323b472545b45602117fffffff81000e224e217f000001925aa80020007b00090080007f000001e809000000ff0000f03ac7108f004000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r9 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@empty, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x2b}, 0xa, @in6=@empty, 0x0, 0x2}}, 0xe8) sendto$inet6(r9, 0x0, 0x0, 0xfff5, &(0x7f0000000540)={0xa, 0x1234, 0x0, @remote}, 0x1c) sendmsg$nl_route_sched(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmmsg$inet6(r4, &(0x7f0000001e40)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x200}, 0x1c, &(0x7f0000001a40)=[{&(0x7f0000000040)="60ba8c00852f3676e8be29f0b9108f8fd6b6d43770673df383a93701ab03a8eb69837b1cbb9dc698fa8afa0811b87bc7900493ba12c59c715778f34556c6dedd760f265b39763b3ab6ae498704ec85263041886186eff995f13b9210388768f36245ffad03f05b4f88eebe1f8748ef05e85297e23296f91da16d6c5b1b3ae94ab96257394d457dbfd04491ee67262234ec0c3dc1005896790249642ce29422bad376e8b6ce3ce736c3e178c4", 0xac}, {&(0x7f0000000100)="d483805b94fb6e9ea7b8e4dea43dc1843ff3281b658109ab49b86f46a9f04701db423087129dd2d4b408dc0d9eee735e69ca6cba226099a839d52f0fa5f9ffd6305d66f1f61a2cc6b91d2472a14c6900269460f079639dd0603ae30f729afa81548f7f6721f5a96d663f3248f0fa083b02bef110eae844042ee663566fe0d70530b819ba404767a844fcb083cbb5970d3022f9ed12b91422e27d5f111dc5c5f0b558ca34ff2a170fbd6e83bec5c3d18633e0ed985856eb03a462620b27366675cfa6a8b58fd2e6b5477c314364", 0xcd}, {&(0x7f0000000a40)="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", 0x1000}], 0x3}}, {{&(0x7f0000001a80)={0xa, 0x4e21, 0x3, @private1, 0x7ff}, 0x1c, &(0x7f0000001dc0)=[{&(0x7f0000001ac0)="2f655d9c9290aa5ecb9b1693618b27b15b62a3179e4dd4ff3bdd033680753fbe266f4e996a276f621959e2ad3a20bf67e2e13fb05cb57570a7bbdc00cbdd1785bd8cd44e97d8eb5e3a311a6ee1f3bb24d52053d03f6255de5ac3f1ae48ac708b56e3f9f708a9ceb0184eea952e46e32e2e75c3edeb175dbbe6395eab7610b83d64aee57246a2efc97e33d9cc905addace9726e88b7ed1ff5d46c63604891427b0565d8989226ae0df64a2f9d418757d7691612a6dedda98670ec8983893a0959f6ff1ca75db625f562e79ec0cf9392eec39f1a6a0f14ed8d837a1e", 0xdb}, {&(0x7f0000001bc0)="da44c0263e7586b3dac9b600cfd8f865ccf015b142ac4e00b9b87a60611be23c84648aed250a0f208846d1270b634e844ade696b5576a679d9459553a2d8d5a35aafe0ee0497d76797a23851", 0x4c}, {&(0x7f0000001c40)="cc14bb0071389695c28f917e2a455a02dfd5deabfa5d279da364a996a6f8a425f4b1a66a5728010f03b45f2514810decaa6038b45c2fcedd2af73b0e7e7d00bd4a9702ed0bcc79dd281c55846756cac40ff0a93913fcf7d46bf3600c183b20", 0x5f}, {&(0x7f0000001cc0)="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", 0xfa}], 0x4, &(0x7f0000001e00)}}], 0x2, 0x4804) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r10, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=[@rights={{0x14, 0x1, 0x1, [r11]}}], 0x18, 0x40800}}], 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001e00)={0xffffffffffffffff}) sendmsg$unix(r12, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000001f40)="10", 0x1}], 0x1, &(0x7f0000001f80)=[@rights={{0x14, 0x1, 0x1, [r12]}}], 0x18}, 0x8841) sendmsg$nl_route_sched(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000009c0)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xb, 0x7}, {0x0, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}]}, 0x80}}, 0x40000) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001fc0), r13) ioctl$sock_SIOCGIFINDEX_802154(r13, 0x8933, &(0x7f0000002000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r14, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002080)={&(0x7f00000020c0)={0x24, r15, 0x411, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r16}, @NL802154_ATTR_NETNS_FD={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x40000) 4m10.94336385s ago: executing program 33 (id=16376): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x2202, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000700)={'syzkaller1\x00', 0x5001}) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000740)={'syzkaller1\x00', 0x0}) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newsa={0x104, 0x10, 0x1, 0x0, 0x0, {{@in=@private=0xa010101, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in6=@remote, 0x0, 0x2b}, @in6=@empty, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@arena={0x21, 0x0, 0x0, 0x1, 0x400, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) mmap(&(0x7f0000100000/0x1000)=nil, 0x1000, 0x3, 0x11, r7, 0x0) bind$inet6(r6, &(0x7f00000003c0)={0xa, 0xe22, 0x0, @mcast1, 0x7}, 0x1c) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f0000000580)=[{&(0x7f00000005c0)="580000001500add427323b472545b45602117fffffff81000e224e217f000001925aa80020007b00090080007f000001e809000000ff0000f03ac7108f004000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r9 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@empty, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x2b}, 0xa, @in6=@empty, 0x0, 0x2}}, 0xe8) sendto$inet6(r9, 0x0, 0x0, 0xfff5, &(0x7f0000000540)={0xa, 0x1234, 0x0, @remote}, 0x1c) sendmsg$nl_route_sched(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmmsg$inet6(r4, &(0x7f0000001e40)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x200}, 0x1c, &(0x7f0000001a40)=[{&(0x7f0000000040)="60ba8c00852f3676e8be29f0b9108f8fd6b6d43770673df383a93701ab03a8eb69837b1cbb9dc698fa8afa0811b87bc7900493ba12c59c715778f34556c6dedd760f265b39763b3ab6ae498704ec85263041886186eff995f13b9210388768f36245ffad03f05b4f88eebe1f8748ef05e85297e23296f91da16d6c5b1b3ae94ab96257394d457dbfd04491ee67262234ec0c3dc1005896790249642ce29422bad376e8b6ce3ce736c3e178c4", 0xac}, {&(0x7f0000000100)="d483805b94fb6e9ea7b8e4dea43dc1843ff3281b658109ab49b86f46a9f04701db423087129dd2d4b408dc0d9eee735e69ca6cba226099a839d52f0fa5f9ffd6305d66f1f61a2cc6b91d2472a14c6900269460f079639dd0603ae30f729afa81548f7f6721f5a96d663f3248f0fa083b02bef110eae844042ee663566fe0d70530b819ba404767a844fcb083cbb5970d3022f9ed12b91422e27d5f111dc5c5f0b558ca34ff2a170fbd6e83bec5c3d18633e0ed985856eb03a462620b27366675cfa6a8b58fd2e6b5477c314364", 0xcd}, {&(0x7f0000000a40)="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", 0x1000}], 0x3}}, {{&(0x7f0000001a80)={0xa, 0x4e21, 0x3, @private1, 0x7ff}, 0x1c, &(0x7f0000001dc0)=[{&(0x7f0000001ac0)="2f655d9c9290aa5ecb9b1693618b27b15b62a3179e4dd4ff3bdd033680753fbe266f4e996a276f621959e2ad3a20bf67e2e13fb05cb57570a7bbdc00cbdd1785bd8cd44e97d8eb5e3a311a6ee1f3bb24d52053d03f6255de5ac3f1ae48ac708b56e3f9f708a9ceb0184eea952e46e32e2e75c3edeb175dbbe6395eab7610b83d64aee57246a2efc97e33d9cc905addace9726e88b7ed1ff5d46c63604891427b0565d8989226ae0df64a2f9d418757d7691612a6dedda98670ec8983893a0959f6ff1ca75db625f562e79ec0cf9392eec39f1a6a0f14ed8d837a1e", 0xdb}, {&(0x7f0000001bc0)="da44c0263e7586b3dac9b600cfd8f865ccf015b142ac4e00b9b87a60611be23c84648aed250a0f208846d1270b634e844ade696b5576a679d9459553a2d8d5a35aafe0ee0497d76797a23851", 0x4c}, {&(0x7f0000001c40)="cc14bb0071389695c28f917e2a455a02dfd5deabfa5d279da364a996a6f8a425f4b1a66a5728010f03b45f2514810decaa6038b45c2fcedd2af73b0e7e7d00bd4a9702ed0bcc79dd281c55846756cac40ff0a93913fcf7d46bf3600c183b20", 0x5f}, {&(0x7f0000001cc0)="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", 0xfa}], 0x4, &(0x7f0000001e00)}}], 0x2, 0x4804) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r10, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=[@rights={{0x14, 0x1, 0x1, [r11]}}], 0x18, 0x40800}}], 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001e00)={0xffffffffffffffff}) sendmsg$unix(r12, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000001f40)="10", 0x1}], 0x1, &(0x7f0000001f80)=[@rights={{0x14, 0x1, 0x1, [r12]}}], 0x18}, 0x8841) sendmsg$nl_route_sched(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000009c0)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xb, 0x7}, {0x0, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}]}, 0x80}}, 0x40000) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001fc0), r13) ioctl$sock_SIOCGIFINDEX_802154(r13, 0x8933, &(0x7f0000002000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r14, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002080)={&(0x7f00000020c0)={0x24, r15, 0x411, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r16}, @NL802154_ATTR_NETNS_FD={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x40000) 2m9.407759617s ago: executing program 2 (id=17058): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000240)='GPL\x00', 0x4, 0xfd90, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000380), 0x366, 0x10, &(0x7f00000003c0), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000004c0)={r0, r1, 0x26, 0x0, @val=@kprobe_multi=@addrs={0x0, 0x0, 0x0, 0x0, 0x3}}, 0x30) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0xe, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18020000000000000000000004000000850000002700000095"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000640)={r2, r3, 0x4, r0}, 0x10) syz_emit_ethernet(0x7a, &(0x7f0000000400)={@broadcast, @remote, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x40, 0x3a, 0xff, @private0, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "10b1a0", 0x0, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @local, [@srh={0x88, 0x0, 0x4, 0x0, 0x4, 0x8, 0xadaa}], "fafb17c133d11e59"}}}}}}}, 0x0) 2m9.182711314s ago: executing program 2 (id=17060): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="450a000000ff03ffc311a400100100001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r1}, &(0x7f0000000280), &(0x7f00000002c0)=r2}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0900000004000000e25f000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xa, 0x17, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000097090100000002816500feff0000000018010000646c6c2500000000002020207b9af8ff000000002e9100000000000037010000f8ffffffb702000008000000b70300000000000014000000060000805f93000000000000b5030000000000008500000076000000b70000000000000095"], &(0x7f0000000580)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xa, 0x17, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000097090100000002816500feff0000000018010000646c6c2500000000002020207b9af8ff000000002e9100000000000037010000f8ffffffb702000008000000b70300000000000014000000060000805f93000000000000b5030000000000008500000076000000b70000000000000095"], &(0x7f0000000580)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8d2, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x5}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000008c0)=@bpf_tracing={0x1a, 0x26, &(0x7f0000000640)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @map_fd={0x18, 0xb}, @call={0x85, 0x0, 0x0, 0x9e}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0xa1}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @generic={0x0, 0x8, 0xb, 0x200, 0x2}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000780)='syzkaller\x00', 0x9, 0x29, &(0x7f00000007c0)=""/41, 0x40f00, 0x61, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x4, 0x0, 0x4, 0x3}, 0x10, 0x7d6e, r0, 0x1, 0x0, &(0x7f0000000880)=[{0x5, 0x1, 0x5, 0x6}], 0x10, 0x7fff0000}, 0x94) 2m8.689315201s ago: executing program 2 (id=17061): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) socket(0x11, 0x3, 0x300) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c00000010fe1fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800e00010069703665727370616e000000100002800400120006001800177b000008000a00", @ANYRES32=r3], 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x4000) ioctl(r0, 0x890b, &(0x7f0000000040)="000000010000000000000000020000000f0000006c61706230") r5 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$kcm(0xa, 0x2, 0x0) socket$igmp6(0xa, 0x3, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f00000005c0)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) shutdown(0xffffffffffffffff, 0x1) r8 = socket(0x8, 0x3, 0x3) connect$netlink(r8, &(0x7f0000000600)=@kern={0x10, 0x0, 0x0, 0x40000}, 0xc) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x8907, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x23, &(0x7f0000000580), 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r5, 0x400442c8, &(0x7f0000000180)={r6, 0xfc000000, 0x4, "6d71badef6672fb21c3467a5ddc25ff814a82e8147476a35123567da8037f16051b1aaabfc8ebfd54a7cc348ee1ad9a5ea53ffbb1d6e692f83ce6110f9b8a2ebf01914b6405a9697943399e2005b08948b8f135c74eb7c94ac8d03827307cd9b8b"}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="500100001000130700000000000000007f00000100000000000000000000000000000000000001001000ffffac14140000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff010000697f00000000000000000001000000002b000000ff0204000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020004000000000000000000600012"], 0x150}}, 0x24000010) 2m7.409087803s ago: executing program 0 (id=17067): r0 = epoll_create1(0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_int(r2, 0x29, 0x42, 0x0, &(0x7f00000003c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1886c301}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x14}]}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0xc4}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000200)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtaction={0x68, 0x30, 0x101, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) syz_emit_ethernet(0xf6, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa429e82211cf886dd6aca000000c02901fe8000000000000000000000000000bbff0200000000000000000000000000012b000000000000000401090000000000b2000488680000007313000000000000419ab851f1df172f864461165341d7f62add3653975ac2dca2abd5345dbfb6a754e0b22eeca141eded8953a9d26d821ec270b65f588a1231605341e51576b560ba9480819dea8e8eea62c6706b60793070348f2f027eb7463e7cf93ef9c36d8772e1eb46d1c308da000e00a70cda05a1e887361e8eef5a50307f05752e88902771684ecf769fc421b70000000087fac4967f881f9af09eeafd740f7600000000"], 0x0) 2m6.90253305s ago: executing program 0 (id=17070): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000540)="68000000000905040000000000000000020000000900010073797a3000000000140002800600010000020000050002000600000008000500000000002c0004800800010000000001200002800c000100706f6c69637930000800020000000002080003000000001e", 0x68}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000640)="68000000000905040000000000000000020000000900010073797a3000000000140002800600010000030000050002000600000008000500000000002c0004800800010000000001200002800c000100706f6c696379300008000200000000ff080003000000001e", 0x68}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x16, 0x4, &(0x7f0000000780)=ANY=[@ANYBLOB="080000000000b51716c74fa19a14000091109600000000009500000000000000"], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000000040), 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_sys\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000080)={@broadcast, @multicast1, 0x1, "0d5011f02b7fab96e0aa834d3a9e7cfc12178ac0ab1e6227c2b6ddaa5effda90", 0x6, 0x16, 0xfffffffe, 0x1}, 0x3c) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r5, 0x0, 0xd2, &(0x7f0000000280)={@broadcast, @multicast1, 0x0, "12ceaac82ab7d944e84b6fbd6178697e3b10c9b81bede26c85ee73daab4158e8", 0x2, 0x6, 0x4, 0x4}, 0x3c) setsockopt$MRT_FLUSH(r5, 0x0, 0xd4, &(0x7f00000002c0)=0xe, 0x4) sendmsg$inet6(r2, &(0x7f0000000000)={&(0x7f0000000100)={0xa, 0x4e20, 0x0, @private2}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=[@dstopts_2292={{0x18, 0x29, 0x3b, {0x29}}}, @rthdr_2292={{0x28, 0x29, 0x5, {0x2b, 0x2, 0x2, 0x1, 0x0, [@remote]}}}], 0x40}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB="a00000000308030000000000000000ff0600000806000240001b000005000300881000004c0004800800014000000005080001400000000e0800010140000000070800014000000008080001400000bbb908000140000000040800014000000002080001400000000a0900010073797a31000000000600024088f50000050003000600000009005a6327e2423783cce8b93331010073797a30000000bc91481b947164bedcf9ec39da0c9f399200e9cdf8b74ada2dad9ec1cc4193c3307fff5812224546c627df579600"/213], 0xa0}}, 0x88) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1f, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}, [@alu={0x7, 0x0, 0x8, 0x8, 0x6, 0xfffffffffffffff8, 0xfffffffffffffff0}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) 2m6.061806952s ago: executing program 3 (id=17072): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSPASS(r0, 0x40107447, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$key(0xf, 0x3, 0x2) recvmmsg(r2, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=""/193, 0xc1}, 0x8}], 0x1, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x4b, &(0x7f0000000380)=0xfd87, 0x4) sendmsg$key(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=ANY=[@ANYBLOB="0216000002"], 0x10}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@newsa={0xf8, 0x10, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in=@dev, 0x0, 0x3c}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x405, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x48}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x405, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x84}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0xc05, 0x0, 0x0, {0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0x18, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x94}}, 0x0) 2m5.837769506s ago: executing program 0 (id=17074): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c0002"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f0000000240)=@framed={{0x18, 0x2}, [@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000280)='GPL\x00'}, 0x90) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x3c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x2}]}}]}, 0x3c}}, 0x20000004) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="3800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="800002000800000008001b000000000008002800a60b000008003a"], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001a00010000000000000000000a008000", @ANYRES32=0x0, @ANYBLOB="0000000008001f000000000014"], 0x38}}, 0x0) sendmsg(r0, &(0x7f0000001740)={&(0x7f00000003c0)=@ax25={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x80, &(0x7f00000016c0)=[{&(0x7f0000000440)="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", 0x1000}, {&(0x7f0000001440)="d8c74782823ba28f83bfd5518bc41978ae7b96158ebc9edf4bbd4283676e25cec0864e33446f90bab2bf9de2cfa1a761f4a2e95db123d5da851e2e0c27e8874bcd39cf603e74370381f9e3dd7fb8e1ea33efb22376eba20319787a8a4af7e0b64cb2a6531c3956c223a91c07fae28531225fe0f27d2b71de3afbdff191af021eb8fa562241", 0x85}, {&(0x7f0000001500)="784cb78d21bdbf98ebae7b489cb25a30de47ab1cb76f0ceff231b03c97fdb22f8793b1b1912f22c06e2b3ee1f36d35023bf8b891dbf6a4fa3104f1a3575b932aa606ff080f80c8548b8e752cb1842a9fcd63c5ac160969788c3ca819fa31ea7afc3fcdaf06dd467e47da6c77bf20", 0x6e}, {&(0x7f0000001580)="aa114ded73ea2923bc85f4c802e0f39503bac882c64cda24b485b7e3ec8680f7391b1efd657f9b07449e548ce53be9abbf54550bfd2b7c1764a9ffda50ee4ddaa0d5bd41879929898d349097bbf38d59e7a9aa7dd395b61104e0fbdd", 0x5c}, {&(0x7f0000001600)="7587125363109e5a2da0fcfc61b2181140aed7837c73a13136141818c10ee626925e5aa69ce7ace7a973db9a78ad8954bd6691c3048c0abdaad625b9832ac296943472dae77ace02018d113903b4cc96ba0d3b387cb673818d0dc86614ef3bbcde4691a6b3609abc3b163bdb1d778b1980226086955d01e8db5d1e0341c201c987418efa38e2dbece1831e96fc440a60a9b826477d0a62cdad864b7f8fd990c91fa4c2c83f5b7c", 0xa7}], 0x5}, 0x8040) 2m5.219359518s ago: executing program 5 (id=17076): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xac, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [], 0x0, [0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xf4240}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0x5}]}}]}, 0xac}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADDDEF(r6, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x1c, r7, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xf9d}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x800) bind$netlink(r5, &(0x7f0000000240)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000280), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f00000002c0)=0x7, 0x4) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newtaction={0x18, 0x31, 0x3d, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newtaction={0xcc, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x0, 0x0, 0x0, 0x0, {0x0, 0x2, 0x0, 0x0, 0x27}, {0x0, 0x0, 0x0, 0x0, 0xfffd}}}]]}, {0x4}, {0xfffffffffffffd8e}, {0xc, 0x8, {0x0, 0x2}}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x1}}]}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0xcc}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000640)={0x0, 0x1e5, &(0x7f0000000680)={&(0x7f00000006c0)=@deltaction={0x28, 0x31, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0) r10 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r10, &(0x7f0000000440)="f9", 0x1, 0x0, &(0x7f0000000480)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(r10, &(0x7f00000004c0)="9552f8964b", 0x5, 0x801, &(0x7f0000000700)={0xa, 0x4e22, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x3, 0x4, &(0x7f0000000880)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x7c}]}, &(0x7f00000008c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) shutdown(r10, 0x1) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r10, 0x84, 0x74, &(0x7f0000000740)={0x0, 0x0, 0x10}, &(0x7f0000000780)=0x18) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)={0x1c, 0x31, 0x9, 0x70bd2a, 0x0, {0x4}, [@nested={0x6, 0x18, 0x0, 0x1, [@generic="d65b"]}]}, 0x1c}}, 0x84) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x4a, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280000001000390400000000fcdbdf25000003e4", @ANYRES32=r3, @ANYBLOB="0000000008400000000034800000350070696d7265670000000000000000000000003500697036677265300000000000000000000000350065727370616e30000000030000000000"], 0x28}}, 0x0) 2m5.201440692s ago: executing program 2 (id=17077): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x1a, &(0x7f00000004c0)=@raw=[@generic={0xbf, 0x6, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @generic={0xbf, 0x1, 0x6}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff0}, @generic={0xb7, 0x3, 0x0, 0x0, 0xc}, @map_fd={0x18, 0x4, 0x1, 0x0, r0}, @generic={0xb7, 0x5}, @generic={0x85, 0x0, 0x0, 0x0, 0x54}, @generic={0x15, 0x0, 0x0, 0x2}, @generic={0xbf, 0x1}, @generic={0x85, 0x0, 0x0, 0x0, 0x56}, @generic={0x95, 0x0, 0x0, 0xfffc}], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x0, 0xe, 0x0, &(0x7f0000000380)="0000000000007fffffff00000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m5.196140986s ago: executing program 3 (id=17078): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000300), r0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001cc0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001d00)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000001dc0)={0x40, r2, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_LEVEL={0x24, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x96}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4010}, 0x10) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f0000001ec0)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001e80)={&(0x7f0000001e00)={0x54, 0x0, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x54}}, 0x1) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000480)={&(0x7f0000000980)=ANY=[@ANYBLOB="0200f6d8a5b0669f07d17a0000", @ANYRES16=r1, @ANYBLOB="000227bd7000fddbdf250700000008000500ffffffff0500010001000000050001000100000008000400ac1414bb080005006401010208000400e000000208000500ac1414bb08000500e0000001"], 0x54}, 0x1, 0x0, 0x0, 0x801}, 0x20040800) syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000007c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=@newqdisc={0x48, 0x24, 0x100, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "000e08000000000000cc554e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) sendmsg$DEVLINK_CMD_TRAP_SET(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40004}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="f42600081000030b000000000000000000e36590f77bd5c92724bbae7ee07ed907b868820f23682637e4b0a304ec58587a181cde83e6d661", @ANYRES32=0x0, @ANYBLOB], 0x48}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140011"], 0x48}}, 0x0) 2m5.141870765s ago: executing program 6 (id=17079): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010800000000000000000100000a0900010073797a300000000048000000090a010100000000000000000100000808000a40000000000900020073797a32000000000900010073797a300000000008000540000000020c000b4000000000000009212c0000000e0a01080000000000000000010000000900020073797a32000000000900010073797a30"], 0xbc}, 0x1, 0x0, 0x0, 0x801}, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r1) 2m4.825350385s ago: executing program 0 (id=17080): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$kcm(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[{0x10, 0x117, 0x4}], 0x10}, 0x20000001) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f00000003c0)=@ccm_128={{0x304}, "2041f09a821e1e3d", "bc1219b53b562baafd2400170f311e6d", "152d5cb7", "c2035c44dee1dcca"}, 0x28) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r3, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3000004, 0x10012, r3, 0x0) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r4, 0x8) r5 = accept4(r4, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x1e4, 0x368811b8, 0xffff}, 0x10) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "a06adadb1e8816ec", "de0000006deed7f21d74bc440900", "9884f958", "fc4bd6b33a9b93ca"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvfrom(r2, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) writev(r2, &(0x7f00000005c0)=[{&(0x7f0000000780)="58fdb007a47a8b1f458ab677d557ca", 0xf}], 0x1) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) 2m4.821231462s ago: executing program 2 (id=17081): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'sit0\x00'}) (async) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_tracing={0x1a, 0x2, &(0x7f0000000380)=ANY=[@ANYBLOB="b70000000000000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3f, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2bc85, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000004000000080000000100000001000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00', @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="0100000003"], 0x50) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x10, 0x4, &(0x7f0000000d80)=ANY=[@ANYBLOB="18000000000000000000000000000000b2b8b7bd2102509b6a7fb01055611040"], &(0x7f0000000dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x8, 0x3, 0x408, 0x138, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x338, 0xffffffff, 0xffffffff, 0x338, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0xffffff00, 0xff000000], [0xffffffff], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x88}, 0x0, 0x110, 0x138, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x0, 0x0, 0x3096, 0x7fff, 0x56e5, {0x2}}}, @common=@inet=@udplite={{0x30}, {[0x4e23, 0x4e23], [0x4e24, 0x4e21], 0x1}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @dev}, [], [0xff, 0x0, 0x0, 0xff000000], 'erspan0\x00', 'gre0\x00', {}, {}, 0x0, 0x0, 0x3}, 0x0, 0x1d0, 0x200, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x80000001, 0x3, 0x20, 0x0, 'syz1\x00', 0x4}}, @common=@ah={{0x30}, {[0x4d4, 0x4d4], 0x84, 0x25, 0x3}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0xffffffff}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x468) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000001340)=ANY=[@ANYBLOB="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"/262], 0x28}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) (async) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000e00)=0x100000001, 0x4) (async) connect$inet6(r3, &(0x7f0000000e40)={0xa, 0xe1e, 0x0, @empty, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000e80), 0x3) (async) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000ec0)=@gcm_256={{0x303, 0x36}, "00001f880000dbaa", "a504eb69a751e9d7e9fb434d1665e900000000ffffff7f0000000100", '\x00\t\x00', "a301fbcf1fe65504"}, 0x38) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000012c0)={&(0x7f0000001300)=ANY=[@ANYBLOB="2400000019000100b3b97000ffdbdf25022006ccff02fe060004000008001e0001"], 0x24}}, 0x0) (async) writev(r3, &(0x7f0000000f00)=[{&(0x7f0000000f40)="9de4e6943f67cbab616d5da0a1e6475b63c2424e239c9879fa22aa44d57c8c7ffc050ab2e16e7985ba09e4512e6447f177080be24b702ec89ad3be91398c78870adcd7395cf4c12b4a96ff021eb00b010e6e51fdb618057924e14a5d0f8c73ce66a65dcd2a6df36e2eb376d6e2ca05352b82fc65d15b6d5783c1351c2c7a09a95a7fff08be65c32904ac3034a378c170d50dc54bc310e885a6d529789d7921790313400503fa263d11a130345c66e450b54d947e6a1cdb7bd732b06fdaf31580c8", 0x4000}], 0x1) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000240), &(0x7f0000000280)=@udp6, 0x6}, 0x20) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0500000007000000040000000200000000000000", @ANYRES32, @ANYBLOB="00000000000000e5ffffffffffffff0000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000480)={r6, &(0x7f0000000500), &(0x7f0000000540)=@tcp}, 0x20) (async) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r7, 0x29, 0x12, 0x0, 0x0) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={r6, &(0x7f00000005c0)="a3", &(0x7f0000000600)=@tcp6, 0x2}, 0x20) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x10102, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000500)={'syzkaller1\x00', 0x1}) (async) r10 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000640)={'syzkaller1\x00', 0x0}) (async) sendmsg$nl_route_sched(r8, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000001100)=@deltaction={0x194, 0x31, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@TCA_ACT_TAB={0x90, 0x1, [{0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7ff}}, {0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}, {0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x14, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xd}}]}, @TCA_ACT_TAB={0x80, 0x1, [{0x14, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}, @TCA_ACT_TAB={0x70, 0x1, [{0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1000}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xea7e}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x79c8}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xcba6}}]}]}, 0x194}}, 0x2204c004) sendmsg$nl_route_sched(r8, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newtfilter={0x44, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0xfff2}, {0xfff1, 0xffff}, {0x300, 0x4}}, [@filter_kind_options=@f_route={{0xa}, {0x14, 0x2, [@TCA_ROUTE4_IIF={0x8, 0x4, r11}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x6}]}}]}, 0x44}}, 0x20000010) 2m4.50925727s ago: executing program 6 (id=17082): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xd0f, 0x2, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xf}, {0xffff, 0xffff}, {0x3}}}, 0x48}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x24, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000080)='pi', 0x2, 0x0, &(0x7f00000000c0)={0xa, 0x5000, 0x0, @loopback}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000001400791048000000000069001c000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xa3}, 0x21) 2m4.267283883s ago: executing program 6 (id=17083): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x4a, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x9c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000180)=0x9c) getsockname$packet(r0, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r2, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@ipv6_getaddr={0x28, 0x16, 0x200, 0x70fd2a, 0x25dfdbff, {0xa, 0x0, 0x80, 0x0, r2}, [@IFA_FLAGS={0x8, 0x8, 0xa0}, @IFA_RT_PRIORITY={0x8, 0x9, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x0) 2m4.056969878s ago: executing program 5 (id=17084): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="e00000000a06010100000000000000000300000908000940800000010900020073797a310000000005000100070000000800094000000005880008800c000780080009"], 0x13a}, 0x1, 0x5a00000000000000, 0x0, 0x4800}, 0x48080) 2m4.00289953s ago: executing program 3 (id=17085): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000b00)=0x14) sendmsg$nl_route(r1, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000c80)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2b, 0x0, {{@in6=@mcast2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x4000000000006, 0x3c, 0xffffffffffffffff, 0x200000000000}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x1, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x0, 0x32}, 0xa, @in6=@empty, 0x6, 0x4, 0x2}]}]}, 0xfc}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000e00)=ANY=[@ANYBLOB="6000000010001fff03000000fdfffeff00000000", @ANYRES32=0x0, @ANYBLOB="0000000040cc0300380012800b00010067656e657665000028000280140007000000000000000000000000000000000105000c00ffffffff050009000100000008000a00", @ANYRES32=r3], 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0xe, 0x4, &(0x7f0000000f40)=ANY=[@ANYBLOB="b40000000000000061115c0000000000060000000000000095", @ANYRESOCT=r2, @ANYRESHEX=r4, @ANYRES64=r5, @ANYRESDEC=r5, @ANYRES16=r0, @ANYBLOB="2f03e22836ae029a9b02e080eb562d21dda945030fae629b94e360d1d83e5d966dd84f013fc0e34a79c750082aa83fcd7a2920d513750e69cbe5677ad826a6dfdb147d2c795907cce23051cfeca50e26f8347ca60ed5458a7e6d40fa792a929cc49c90690fc462f6bebe0f33cc8f839cd5073a1e7b2a0f6d990221836f05f54f27493e072a565c0af8773ef9210d0b7294e482eb529cd4fe82a554f57121e00534a60603574ae521f1819db2bb84"], 0x0, 0x4, 0x0, 0x0, 0x41100, 0x13, '\x00', 0x0, @sk_skb}, 0x94) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000080), 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = accept$unix(0xffffffffffffffff, &(0x7f00000004c0)=@abs, &(0x7f0000000540)=0x6e) recvmsg$unix(r8, &(0x7f00000009c0)={&(0x7f0000000580), 0x6e, &(0x7f0000000900)=[{&(0x7f0000000600)=""/136, 0x88}, {&(0x7f00000006c0)=""/183, 0xb7}, {&(0x7f0000000780)=""/187, 0xbb}, {&(0x7f0000000840)=""/48, 0x30}, {&(0x7f0000000880)=""/68, 0x44}], 0x5, &(0x7f0000000980)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}, 0x10100) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x64, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xffff639c}]}, 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="3800000002011d04000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0x38}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001800090400000001fedbdf250a000000000000000000008008001e0001000000080008"], 0x2c}}, 0x0) 2m3.513284416s ago: executing program 6 (id=17086): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0xa, 0x3, 0x87) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0xc201}) close(0xffffffffffffffff) r1 = socket$kcm(0x2, 0xa, 0x2) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="034886dd120005120000140000006000000008008700fe88a43de1a400000000000000007d01ff020000000000000000000000000001", @ANYRES16, @ANYRES64=r1], 0xfdef) 2m3.507567885s ago: executing program 5 (id=17087): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$packet(0x11, 0x3, 0x300) (async) r1 = socket$l2tp(0x2, 0x2, 0x73) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/syz1\x00', 0x1ff) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000400)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000440), 0x12) (async) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000480)={0xffffffffffffffff, &(0x7f00000004c0)='cgroup\x00', 0x101, 0x0, 0xf, 0x0, 0x0}) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000540)=ANY=[], 0x3261e) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x13, r4, 0x0) (async) unshare(0x22020400) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000580)='ns/pid_for_children\x00') read(r5, &(0x7f00000005c0)=""/196, 0xc4) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WOWLAN(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x1c, r6, 0x1, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r7}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x80) (async) socket$packet(0x11, 0x2, 0x300) (async) close(0x3) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newsa={0x184, 0x10, 0x713, 0x0, 0x0, {{@in6=@private2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {@in=@broadcast, 0x0, 0x32}, @in6=@loopback, {}, {}, {0x0, 0x4}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4106(ccm-aes-ce)\x00'}, 0x0, 0x180}}, @algo_auth={0x48, 0x1, {{'xcbc(aes)\x00'}}}]}, 0x184}}, 0x0) 2m3.39630103s ago: executing program 2 (id=17088): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) socket(0x11, 0x3, 0x300) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c00000010001fff110000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800e00010069703665727370616e000000100002800400120006001800177b000008000a00", @ANYRES32=r3], 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x4000) ioctl(r0, 0x890b, &(0x7f0000000040)="000000010000000000000000020000000f0000006c61706230") r5 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$kcm(0xa, 0x2, 0x0) socket$igmp6(0xa, 0x3, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f00000005c0)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) shutdown(0xffffffffffffffff, 0x1) r8 = socket(0x8, 0x3, 0x3) connect$netlink(r8, &(0x7f0000000600)=@kern={0x10, 0x0, 0x0, 0x40000}, 0xc) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x8907, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x23, &(0x7f0000000580), 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r5, 0x400442c8, &(0x7f0000000180)={r6, 0xfc000000, 0x4, "6d71badef6672fb21c3467a5ddc25ff814a82e8147476a35123567da8037f16051b1aaabfc8ebfd54a7cc348ee1ad9a5ea53ffbb1d6e692f83ce6110f9b8a2ebf01914b6405a9697943399e2005b08948b8f135c74eb7c94ac8d03827307cd9b8b"}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="500100001000130700000000000000007f00000100000000000000000000000000000000000001001000ffffac14140000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff010000697f00000000000000000001000000002b000000ff0204000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020004000000000000000000600012"], 0x150}}, 0x24000010) 2m3.094867345s ago: executing program 5 (id=17089): r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@mangle={'mangle\x00', 0x2, 0x6, 0x530, 0x1c0, 0x390, 0x390, 0x1c0, 0xf0, 0x460, 0x460, 0x390, 0x460, 0x460, 0x6, 0x0, {[{{@ipv6={@mcast1, @mcast2, [], [0xffffffff, 0xff000000], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x21, 0xff, 0x0, 0x38}, 0x0, 0xa8, 0xf0, 0x0, {0x7a00000010000000}}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@private=0xa000000, @ipv4=@empty, 0x2f, 0x30, 0x1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0, 0x48000000}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0x6, 0x5}, {0xffffffffffffffff, 0x6, 0x1}, {0x0, 0x4, 0x2}, 0xfffffffe}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv4=@loopback, 0x38, 0x17}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) 2m2.659987932s ago: executing program 3 (id=17090): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) (async) socket(0x1e, 0x4, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) (async) socket$tipc(0x1e, 0x2, 0x0) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)) (async, rerun: 64) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)) (rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x20, r2, 0xb03, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}]}]}, 0x20}}, 0x0) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000004c0)=@broute={'broute\x00', 0x20, 0x6, 0x638, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000b80], 0x11, 0x0, &(0x7f0000000540)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x9, 0xa, 0x19, 'ipvlan1\x00', 'veth1_macvtap\x00', 'team0\x00', 'veth0_to_bond\x00', @remote, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], @broadcast, [0x0, 0xff, 0x0, 0x0, 0x0, 0xff], 0x0, 0x70, 0x70, 0xa8, [], [], @common=@mark={'mark\x00', 0x10, {{0xffffffe0, 0xfffffffffffffffe}}}}, {0x5, 0x0, 0x6002, 'bond_slave_1\x00', 'veth1_vlan\x00', 'vxcan1\x00', 'veth0\x00', @random="80ffc17a0467", [0xff, 0xff, 0xff], @random="9b1765d93258", [0xff, 0x0, 0xff, 0xff, 0x0, 0xff], 0x0, 0x70, 0xd0, 0x148, [], [@common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}, @common=@STANDARD={'\x00', 0x8}], @common=@nflog={'nflog\x00', 0x50, {{0x0, 0x44e, 0x8, 0x0, 0x0, "25570c563bae29924d99228ec57b1bf5122d37f85d3200c110b9373b8ce75f9f2eb227fbb106f73e2f88dca08fe393ab93d36b71d5211ea72867e9d185a9588b"}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x2, [{0x1, 0x11, 0x8914, 'veth0\x00', 'netpci0\x00', 'veth0\x00', 'veth0_macvtap\x00', @remote, [0xff, 0x0, 0x0, 0xff, 0xff], @empty, [0xff, 0x0, 0xff, 0xff, 0x0, 0xff], 0x0, 0x70, 0x70, 0xb8, [], [], @common=@ERROR={'ERROR\x00', 0x20, {"45668ab2ccc17f1d3420ba89735af5abfc629f90362a45a2deeda542708d"}}}, {0x5, 0x12, 0x8914, 'pim6reg\x00', 'veth0_vlan\x00', 'veth1_to_hsr\x00', 'syzkaller1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}, [0xff, 0xff, 0x0, 0xff, 0x0, 0xff], @empty, [0x0, 0xff, 0x0, 0xff, 0x101], 0x0, 0x70, 0x70, 0x1a0, [], [], @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x9, 'system_u:object_r:sendmail_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe, 0x2, [{0x5, 0x10, 0x886c, 'vcan0\x00', 'ipvlan0\x00', 'veth0\x00', 'macvtap0\x00', @multicast, [0xff, 0x0, 0xff, 0xff, 0xff, 0xff], @local, [0xff, 0x0, 0xff, 0x0, 0xff, 0xff], 0x0, 0x70, 0x70, 0xa8, [], [], @common=@dnat={'dnat\x00', 0x10, {{@empty, 0xffffffffffffffff}}}}, {0x11, 0x5, 0x17, 'rose0\x00', 'veth0_to_team\x00', 'nicvf0\x00', 'macsec0\x00', @random="8ddc8c31bd50", [0x0, 0x0, 0x0, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0x0, 0x0, 0xff, 0xff], 0x0, 0x70, 0x70, 0xb8, [], [], @common=@ERROR={'ERROR\x00', 0x20, {"bcdc785c8ad4257bb461451a5012cb88beb92769e6aebcd22601bcc3d496"}}}]}]}, 0x6b0) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)) (async, rerun: 32) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000001c0)) (async, rerun: 32) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)) (async, rerun: 32) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240)) (async, rerun: 32) socket$tipc(0x1e, 0x2, 0x0) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000280)) (async) socket$tipc(0x1e, 0x5, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000002c0)) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000300)) socket$tipc(0x1e, 0x2, 0x0) (async) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) write(r4, &(0x7f0000000340)="580000001400010300000000000000001e000000ffffffff00"/88, 0x58) (async) ioctl$SIOCSIFHWADDR(r0, 0x8b0f, &(0x7f0000000000)={'wlan0\x00', @broadcast}) 2m2.659386951s ago: executing program 5 (id=17091): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl(r0, 0x890b, &(0x7f0000000140)='\x00\x00\x00\x00\x00\x00\x00') bind$x25(r0, &(0x7f0000000080), 0x12) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newtfilter={0xf34, 0x2c, 0x10, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x17, 0x5}, {0x7bf8d573a645504b, 0xfff1}, {0x1, 0x6}}, [@TCA_CHAIN={0x8, 0xb, 0xedf}, @filter_kind_options=@f_fw={{0x7}, {0xef8, 0x2, [@TCA_FW_MASK={0x8, 0x5, 0x49}, @TCA_FW_ACT={0xeec, 0x4, [@m_nat={0x124, 0x1d, 0x0, 0x0, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x4, 0x0, 0x409, 0x7fff}, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xdbd2, 0x10, 0x20000000, 0xffff, 0x4}, @dev={0xac, 0x14, 0x14, 0x2e}, @rand_addr=0x64010101, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x200, 0xa7, 0x0, 0x4, 0x9}, @multicast2, @local, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x2, 0x4, 0x80000000, 0x6}, @dev={0xac, 0x14, 0x14, 0x1c}, @multicast2, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0x400, 0x4, 0x42cc, 0xfffffffb}, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x43, 0x400, 0x7, 0x5, 0xfffffff8}, @empty, @remote, 0xffffffff}}]}, {0x9, 0x6, 'o0\r/y'}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_skbmod={0xdc4, 0x6, 0x0, 0x0, {{0xb}, {0x4}, {0xd95, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xfe, 0x5}}]}, 0xf34}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000001480), 0x4) sendmsg$kcm(r1, &(0x7f00000014c0)={&(0x7f0000001500)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, &(0x7f0000001580)=[{&(0x7f00000015c0)="27031c00160014000000002f1eafacf706e105400000894f00050004ee0b80558ddbba9b37242d37a518fc9c5be50eaf07c3650596", 0x26}], 0xf}, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) connect$x25(r0, &(0x7f0000001600)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}}, 0x12) socket$unix(0x1, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newtfilter={0x90, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x50, 0x2, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x8, 0x0, 0x102}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x90}}, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_ifreq(r0, 0x8921, &(0x7f0000000000)={'macsec0\x00', @ifru_hwaddr=@random="97bebe75e56c"}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'bond0\x00', 0x2000}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0002, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r6, 0x107, 0xa, &(0x7f0000000440)=0x2, 0x4) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000480)=@req3={0x1000, 0x7fff, 0x1000, 0x3a, 0x0, 0xfffffffd}, 0x1c) ioctl$TUNGETFEATURES(r5, 0x800454cf, &(0x7f0000000100)) 2m2.294068829s ago: executing program 0 (id=17092): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) close(0x3) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000240)={0x18, 0x0, {0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, 'macvlan1\x00'}}, 0x1e) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="010029bd7000040000008900000008000300", @ANYRES32=0x0, @ANYBLOB="d29c0eae03b4089d69fdb0db7c9529d872fa18cbd4c2cf4ac9dd07545b0b48132f471f433be4b4ecac6f5c7c615fbfa6"], 0x5ea}, 0x1, 0x0, 0x0, 0x4804}, 0x80) unshare(0x24020400) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0xd, 0x2, &(0x7f00000005c0)=@raw=[@call={0x85, 0x0, 0x0, 0x8f}, @exit], &(0x7f0000000600)='GPL\x00'}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x2f, &(0x7f0000000200), 0x3b) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r6, 0x107, 0x12, 0x0, &(0x7f0000000000)) sendmsg$netlink(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)={0x20, 0x11, 0xa8e1de361b15f141, 0x0, 0x25dfdbff, "", [@nested={0x10, 0x0, 0x0, 0x0, [@typed={0xb, 0x0, 0x0, 0x0, @binary="56ccabd869c203"}]}]}, 0x20}], 0x1, 0x0, 0x0, 0x4004080}, 0x40080) r7 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r7, &(0x7f00000003c0)="aa139f27b86af79ae48aa071a6f768e4ef303580f58814ee60136cd1b42bbdb65ac449840b40b2e103c656f1126dc2f634e2014017d97e11dc3d42e97fd9947a0f1ba9277487ffd1ca286afe85dd1c37c351d5dd52f1f96efc7f27f8a577da4121372f63d41e5daefb8af2d02be3bf5413ca08fcc781b56c6a25409ef82c71245d8612fd6b443143da5526f7530e0d9a9d1a2b9cc1d150d2a514f488751321ba5bb050559e75f45b01fcc6123d35a3ce3ee38f3be283a260344fc3925b520fad607805f3388345ab55cfc26e383909a18f8adcd06a42b282d2c0d6b3318c0d12a91127ad00c7ae358454a0ff455dcc5d2e", 0xf1, 0x8000, &(0x7f00000004c0)={0xa, 0x0, 0x4, @private0={0xfc, 0x0, '\x00', 0x20}, 0x3, 0x1}, 0x20) ioctl$BTRFS_IOC_SUBVOL_CREATE(r4, 0x5000940e, &(0x7f0000000640)={{r0}, "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"}) 2m2.290088151s ago: executing program 6 (id=17093): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x50, r1, 0x121, 0x70bd28, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_KEYS={0x1c, 0x51, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_SEQ={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "24d8ea0e7f"}, @NL80211_KEY_DEFAULT={0x4}]}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x7840}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x17, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf090000000000009409010000000281650000000000000018010000646c6c2500000000002020207b9af8ff000000002e9100000000000037010000f8ffffffb702000008000000b70300000000000014000000060000805f93000000000000b5030000000000008500000076000000b70000000000000095"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000380), r4) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x1c}}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r7, &(0x7f0000000100)="94", 0x1) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r7, 0x89f9, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000140)={@private2={0xfc, 0x2, '\x00', 0x1}, @broadcast, 0x15, 0x1f}}) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r4, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x14, r5, 0x400, 0x70bd2b, 0x0, {0x6, 0x0, 0x900}}, 0x14}, 0x2, 0x34005}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x50, r1, 0x121, 0x70bd28, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_KEYS={0x1c, 0x51, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_SEQ={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "24d8ea0e7f"}, @NL80211_KEY_DEFAULT={0x4}]}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x7840}, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x17, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf090000000000009409010000000281650000000000000018010000646c6c2500000000002020207b9af8ff000000002e9100000000000037010000f8ffffffb702000008000000b70300000000000014000000060000805f93000000000000b5030000000000008500000076000000b70000000000000095"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000380), r4) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x1c}}, 0x0) (async) pipe(&(0x7f00000000c0)) (async) write(r7, &(0x7f0000000100)="94", 0x1) (async) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r7, 0x89f9, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000140)={@private2={0xfc, 0x2, '\x00', 0x1}, @broadcast, 0x15, 0x1f}}) (async) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r4, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x14, r5, 0x400, 0x70bd2b, 0x0, {0x6, 0x0, 0x900}}, 0x14}, 0x2, 0x34005}, 0x0) (async) 2m1.709745669s ago: executing program 3 (id=17094): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000000c0)={'ip_vti0\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x1, 0x10, 0x8, 0x2, {{0x20, 0x4, 0x2, 0x8, 0x80, 0x67, 0x0, 0x99, 0x2f, 0x0, @remote, @multicast1, {[@lsrr={0x83, 0x13, 0x81, [@local, @local, @private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @cipso={0x86, 0xd, 0xffffffffffffffff, [{0x0, 0x7, "2439b126c0"}]}, @ssrr={0x89, 0x13, 0x6b, [@dev={0xac, 0x14, 0x14, 0x26}, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @private=0xa010101]}, @cipso={0x86, 0x9, 0x0, [{0x0, 0x3, "80"}]}, @generic={0x94, 0xd, "d9762b2d7a3efc7e275fda"}, @timestamp_addr={0x44, 0xc, 0x4a, 0x1, 0x4, [{@empty, 0x1}]}, @ra={0x94, 0x4}, @end, @lsrr={0x83, 0xf, 0xaf, [@empty, @empty, @dev={0xac, 0x14, 0x14, 0x33}]}]}}}}}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c00000030000504000000000000000000000000480001804400018009000100676174650000000034000280180002000000000000000000000000000000000000000000100005800c000180080003000100000008000a"], 0x5c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=@bridge_newneigh={0x34, 0x1c, 0x100, 0x70bd28, 0x25dfdbfd, {0xa, 0x0, 0x0, r1, 0x1, 0x10, 0x9}, [@NDA_LINK_NETNSID={0x8, 0xa, 0x6}, @NDA_PROBES={0x8, 0x4, 0x7d2}, @NDA_NH_ID={0x8, 0xd, 0x2}]}, 0x34}}, 0x8040) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@ipmr_getroute={0x1c, 0x1a, 0x800, 0x70bd2b, 0x25dfdbfd, {0x80, 0x10, 0x0, 0x6, 0xfe, 0x4, 0xc8, 0x9, 0x800}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) socket(0x10, 0x803, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000000c0)={'ip_vti0\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x1, 0x10, 0x8, 0x2, {{0x20, 0x4, 0x2, 0x8, 0x80, 0x67, 0x0, 0x99, 0x2f, 0x0, @remote, @multicast1, {[@lsrr={0x83, 0x13, 0x81, [@local, @local, @private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @cipso={0x86, 0xd, 0xffffffffffffffff, [{0x0, 0x7, "2439b126c0"}]}, @ssrr={0x89, 0x13, 0x6b, [@dev={0xac, 0x14, 0x14, 0x26}, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @private=0xa010101]}, @cipso={0x86, 0x9, 0x0, [{0x0, 0x3, "80"}]}, @generic={0x94, 0xd, "d9762b2d7a3efc7e275fda"}, @timestamp_addr={0x44, 0xc, 0x4a, 0x1, 0x4, [{@empty, 0x1}]}, @ra={0x94, 0x4}, @end, @lsrr={0x83, 0xf, 0xaf, [@empty, @empty, @dev={0xac, 0x14, 0x14, 0x33}]}]}}}}}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c00000030000504000000000000000000000000480001804400018009000100676174650000000034000280180002000000000000000000000000000000000000000000100005800c000180080003000100000008000a"], 0x5c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=@bridge_newneigh={0x34, 0x1c, 0x100, 0x70bd28, 0x25dfdbfd, {0xa, 0x0, 0x0, r1, 0x1, 0x10, 0x9}, [@NDA_LINK_NETNSID={0x8, 0xa, 0x6}, @NDA_PROBES={0x8, 0x4, 0x7d2}, @NDA_NH_ID={0x8, 0xd, 0x2}]}, 0x34}}, 0x8040) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@ipmr_getroute={0x1c, 0x1a, 0x800, 0x70bd2b, 0x25dfdbfd, {0x80, 0x10, 0x0, 0x6, 0xfe, 0x4, 0xc8, 0x9, 0x800}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) (async) 2m1.709278719s ago: executing program 5 (id=17095): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000300), r0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001cc0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001d00)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000001dc0)={0x40, r2, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_LEVEL={0x24, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x96}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4010}, 0x10) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f0000001ec0)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001e80)={&(0x7f0000001e00)={0x54, 0x0, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x54}}, 0x1) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000480)={&(0x7f0000000980)=ANY=[@ANYBLOB="0200f6d8a5b0669f07d17a0000", @ANYRES16=r1, @ANYBLOB="000227bd7000fddbdf250700000008000500ffffffff0500010001000000050001000100000008000400ac1414bb080005006401010208000400e000000208000500ac1414bb08000500e0000001"], 0x54}, 0x1, 0x0, 0x0, 0x801}, 0x20040800) syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000007c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=@newqdisc={0x48, 0x24, 0x100, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "000e08000000000000cc554e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) sendmsg$DEVLINK_CMD_TRAP_SET(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40004}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="f42600081000030b000000000000000000e36590f77bd5c92724bbae7ee07ed907b868820f23682637e4b0a304ec58587a181cde83e6d661", @ANYRES32=0x0, @ANYBLOB], 0x48}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140011"], 0x48}}, 0x0) 2m1.554889671s ago: executing program 6 (id=17096): sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="78000000070a010200000000000000000a0000060900010073797a3100000000580004805400018009e201006d6574610000008844000280080003400000000b080003400000000008000140000000010800014000000009080001400000000b08000140000000120800015cb54d491508000240000000228248694989eadbe80560ac9c060c16f646e255395e8a804f4c5596fa630f7309e8da22ace72828f442a6a8a708f7453fe531ea19b1"], 0x78}, 0x1, 0x0, 0x0, 0x48055}, 0x1000c080) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0xa, 0x6, &(0x7f0000000a40)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x37}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit={0x95, 0x0, 0x1008}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000980)='syzkaller\x00', 0x5, 0xc3, &(0x7f0000000ac0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@gettclass={0x24, 0x2a, 0x8, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xffff}, {0x5, 0x9}, {0xfff3, 0xfff2}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000009c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000001140)=ANY=[@ANYBLOB="5400000013000500010000000000000007000000", @ANYRES32=r5, @ANYBLOB="000000000000000034001a0006000000020000002800048024000880"], 0x54}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000001180)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000013000500010000000000000007000000", @ANYRES64=r2, @ANYBLOB="000000000000000024001a00060000000200000018000480140009"], 0x44}}, 0x0) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x4, &(0x7f00000008c0)=""/78, &(0x7f0000000940)=0x4e) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r6, 0x29, 0x41, &(0x7f0000000c00)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) r7 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r7, 0x0, 0x27, &(0x7f0000000200)={@multicast2, @local}, 0xfffffed9) r8 = bpf$ITER_CREATE(0x21, &(0x7f0000000240), 0x8) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000d00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r9, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000dc0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r10, @ANYRESHEX=r1, @ANYRES32=r11, @ANYBLOB="08003f000002"], 0x24}, 0x1, 0x0, 0x0, 0x46004}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000e00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r8, &(0x7f0000001040)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001000)={&(0x7f0000000e40)=ANY=[@ANYBLOB, @ANYRES16=r10, @ANYBLOB="02002dbd7000fcdbdf252700000008000300", @ANYRES32=r12, @ANYBLOB="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"], 0x188}}, 0x8040) r13 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r13, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000140)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_PROTO_DOWN={0x5, 0x27, 0x7}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x2}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xbf67}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x4001) r14 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r8, &(0x7f0000000600)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000005c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="fc010000", @ANYRES16=r14, @ANYBLOB="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"], 0x1fc}, 0x1, 0x0, 0x0, 0x20004000}, 0x40000) syz_emit_ethernet(0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa080045000028006400000402907800000000e000000211009078e000000200010001000000000000000029f6054efdf11d976fb444e59b361af06c3e5cd13527920ee68a1c4c8dd2b003f4e7bb85965fda7a6e8fc4c6b311e74e9573b3e3c25f5374412b818deb97e3710456b8e2a82eaf1f4a56d9b3ad0bd2e46ed177c47f7cdac935583ccd577297808847f5"], 0x0) r15 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r15, &(0x7f0000000640)={0x2, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="021800000b0000000000000000000000270005000000000002000000e00000010000000000000000030012000000000002000000000000000000000000000000030006000000000002000000ffffffff0000000000000000"], 0x58}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 1m54.8505536s ago: executing program 0 (id=17097): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x11, 0x800000002, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) ioctl(r1, 0x8b2c, &(0x7f0000000040)) recvmmsg(r0, &(0x7f0000000880)=[{{0x0, 0x0, 0x0}, 0x85}, {{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000009c0)=""/208, 0xd0}, {&(0x7f0000000ac0)=""/70, 0x46}, {&(0x7f0000000b40)=""/203, 0xcb}, {&(0x7f0000000c40)=""/12, 0xc}, {&(0x7f0000000c80)=""/154, 0x9a}, {&(0x7f0000000d40)=""/4085, 0xff5}, {&(0x7f0000001d40)=""/220, 0xdc}, {&(0x7f0000001e40)=""/129, 0x81}], 0x8}, 0x257a}, {{0x0, 0x0, 0x0}, 0xffffffff}], 0x3, 0x20, 0x0) 1m54.681558011s ago: executing program 3 (id=17098): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001240)=@ipv4_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e22, 0x4e22}}]}, 0x24}}, 0x40) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000010c0)={@in={{0x2, 0x4e24, @remote}}, 0x0, 0x0, 0x1a, 0x0, "2506f7348c22d9b183b1886b6ffbafd994020ed06f4a634af1f5ca78af172b649228d0a5f00b14a1cb1fbcec5b3a3d787af933729b97b98e6cae6cd9c57f65e1c8610df593c8942b7abe349a210b2888"}, 0xd8) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000780)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000740)={&(0x7f0000000580)={0x1a8, r4, 0x400, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_IE={0xd9, 0x2a, [@mic={0x8c, 0x10, {0x24d, "ab0bce3c0d34", @short="2dc7cacd3297fb1f"}}, @random={0x4, 0xa9, "b7879ff2eae9a5ce21d7fde3dbf6016f18941b5bf7d28f72b472dad44f6d3de55b76f413da298a2361c74cd7802dc0ffacf98336c989895324972d41949f9091f00caa47a31b7ce08a580284675bb88c25ddd3fe86c2dfe881456d779234fdfd0defa79fe02c8eb92236321298e134efaecb5a082d95cdb50d523467c531d0e5f0dc1c6ef2b22c789734d286c2b8c702b60aa681d6c1a9ce84d8f30b130f434502e46696f8af9cccb6"}, @erp={0x2a, 0x1}, @erp={0x2a, 0x1, {0x0, 0x1}}, @chsw_timing={0x68, 0x4, {0x64b8, 0x9}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x1, 0x1, 0x0, 0x1, 0x1, 0x28}}, @supported_rates={0x1, 0x1, [{0x6c}]}]}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3}, @NL80211_ATTR_IE={0x9f, 0x2a, [@perr={0x84, 0x48, {0xff, 0x4, [{{}, @device_a, 0x7, @void, 0x31}, {{0x0, 0x1}, @device_b, 0x5, @value=@broadcast, 0x2}, {{0x0, 0x1}, @broadcast, 0x9, @value=@device_b, 0x2c}, {{0x0, 0x1}, @broadcast, 0x5, @value, 0x36}]}}, @link_id={0x65, 0x12, {@random='%9e>\vc', @device_b, @device_b}}, @mic={0x8c, 0x18, {0xe73, "8b336cee221d", @long="76c0ab99c650f9796f300c96a225c117"}}, @gcr_ga={0xbd, 0x6, @broadcast}, @sec_chan_ofs={0x3e, 0x1, 0x2}, @peer_mgmt={0x75, 0x16, {0x1, 0x8, @val=0xa, @void, @val="f29022116f67b0ce755d0a8dbf8d2c84"}}]}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x6}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x8000000}, 0x40) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010200000000000000006700000008000300", @ANYRES32=r6, @ANYBLOB="0800c300741300000800c400010000000c00c5800800080001000000"], 0x38}}, 0x0) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000007c0), r7) sendmsg$NLBL_CIPSOV4_C_ADD(r7, &(0x7f0000000800)={0x0, 0x6, &(0x7f0000000840)={&(0x7f0000000880)={0x30, r8, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x4}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_DOI={0x8}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\x00 \x00\x00', @ANYRES16=r3, @ANYBLOB="040027bd7000fedbdf250600000008000300", @ANYRES32=r6, @ANYBLOB="0a00180003030303030300000a00e80008021100000000001c00e700bcdb15c3270fee598ee585e01b896b97ec05619fa660b0bf0a00e800ffffffffffff00000a00e800ffffffffffff00000a001800030303030303000005005300010000000a00180003030303030300000a0018000303030303030000"], 0x94}, 0x1, 0x0, 0x0, 0x8015}, 0x240208c0) (async) r9 = socket(0x10, 0x3, 0x0) sendmsg$OSF_MSG_ADD(r9, &(0x7f0000001080)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001040)={&(0x7f0000000900)={0x710, 0x0, 0x5, 0x0, 0x0, 0x0, {0x5, 0x0, 0x3}, [{{0x254, 0x1, {{0x3, 0x3}, 0x1, 0x8, 0x40, 0x3ff, 0x1a, 'syz0\x00', "bbce0b93f5eac9017ff688bb5f664cf150610b85b44483bcc6d6b89e82cd96b9", "88d5afc3b862a390da98843f208ffae402ae97de6bbdc4f0a685afbe1c265393", [{0x2, 0xb, {0x3, 0x2}}, {0xff7f, 0x3, {0x1, 0x8}}, {0xa1, 0xf, {0x3, 0x6}}, {0x9, 0x0, {0x3, 0x101}}, {0x3ff, 0x3, {0x0, 0xe12}}, {0x0, 0xbf, {0x1, 0x4}}, {0x4ca, 0xbe, {0x1, 0x2}}, {0x3, 0x7ff, {0x1, 0x8}}, {0x400, 0x1c, {0x3, 0x4aea6268}}, {0x4, 0xe}, {0xcd, 0x4, {0x1, 0x80000001}}, {0xfc8, 0x0, {0x3, 0xa}}, {0x3ff, 0xff, {0x1, 0xfffffffd}}, {0xd0e5, 0xf, {0x2}}, {0x8, 0x5, {0x0, 0x4}}, {0x8, 0x88c, {0x2, 0x2}}, {0x8, 0x800, {0x1, 0x3ff}}, {0x8f9, 0x400, {0x2}}, {0x0, 0x6, {0x3, 0x8001}}, {0xcb, 0x9, {0x0, 0x9}}, {0x81, 0xdb5, {0x2, 0xfffffff8}}, {0x1000, 0x4840, {0x1}}, {0x7, 0x4, {0x2, 0x5}}, {0x8d, 0xb98a, {0x2, 0x5}}, {0x9, 0x7, {0x0, 0x5}}, {0x7, 0xa, {0x1, 0x10001}}, {0x78f1, 0x7, {0x1, 0xffffffff}}, {0x3eaa, 0x3, {0x3, 0x5}}, {0x4, 0x2, {0x3, 0x20ff}}, {0x0, 0x1022, {0x2, 0x24}}, {0x800, 0x5, {0x2, 0x10000}}, {0x5, 0x0, {0x1, 0x7f}}, {0x2, 0x9, {0x1, 0x2}}, {0x7, 0x8, {0x2}}, {0x1, 0x5, {0x0, 0x7}}, {0x8, 0x2, {0x0, 0xfffffff0}}, {0xfff8, 0x9, {0x2}}, {0x2, 0x1000, {0x0, 0xd152}}, {0x8110, 0x213b, {0x0, 0x6}}, {0xf, 0x4, {0x2, 0x1c5e}}]}}}, {{0x254, 0x1, {{0x3, 0x10}, 0xfd, 0x21, 0x575, 0x8, 0xb, 'syz0\x00', "22598c41a0d75144a5fe27880645ba1bdb0a7c76619e04ae05b15e4a0765c462", "f5d2916b099e5a0468d37a0ccd4add124a4e2bcd13ca456bfbc3c6b9a7c5c8a4", [{0x6, 0x9, {0x0, 0x1}}, {0x400, 0x7, {0x2, 0xfffffffc}}, {0x3, 0x7, {0x2, 0x2}}, {0x2, 0x3, {0x70bba66d66a9746a, 0x3}}, {0x25, 0x0, {0x3, 0x34}}, {0x1ff, 0x800, {0x3, 0x96}}, {0x1, 0x7f, {0x3, 0x3}}, {0x7, 0x1, {0x2, 0x5}}, {0x6, 0x81, {0x1, 0x3}}, {0x2, 0x8, {0x0, 0x6}}, {0x4, 0x1, {0x2, 0x4}}, {0x8, 0xff00, {0x2, 0x100}}, {0x1, 0x8001, {0x1, 0x8000}}, {0x400, 0x6, {0x0, 0x6}}, {0x7ff, 0x1, {0x3, 0x7fffffff}}, {0x1ff, 0x0, {0x1, 0x1a9}}, {0xc81, 0xe, {0x1, 0x4}}, {0x1, 0x3, {0x2, 0x4}}, {0x9, 0x0, {0x2, 0x5}}, {0x2, 0x7ff, {0x0, 0x6}}, {0x7, 0x3, {0x1, 0x87}}, {0xffc0, 0x8, {0x0, 0x3}}, {0x5, 0x5, {0x2, 0x10}}, {0x81, 0x2, {0x0, 0x9}}, {0x0, 0x1, {0x2, 0x1}}, {0x40, 0x6, {0x1, 0x4}}, {0xe, 0x0, {0x3, 0x3}}, {0xf, 0xf21, {0x2, 0x9}}, {0xa, 0x4a7, {0x3, 0x9}}, {0x116, 0x2700, {0x1, 0x5a}}, {0xff, 0x2, {0x2, 0x80000000}}, {0x7, 0x1, {0x2, 0x1}}, {0x1, 0x6c, {0x1, 0x10}}, {0x0, 0x3, {0x0, 0x3}}, {0x80, 0x1, {0x3, 0x7}}, {0x7fff, 0x7ca, {0x0, 0x5}}, {0x1, 0x8, {0x2, 0x8}}, {0x374d, 0x9, {0x2, 0x9e29}}, {0x9, 0xfff7, {0x3, 0x9}}, {0x0, 0x5, {0x1, 0x91}}]}}}, {{0x254, 0x1, {{0x0, 0x1}, 0x8, 0x8e, 0xff, 0x200, 0x11, 'syz0\x00', "3f7c74badffb1ba630e872a61faded1a7a5c933f9f2c1958ecd15615bb5add08", "0e8bace9f9733e402081e149b84aa71e2a0870441ca40ac875641e9f9ad37e51", [{0x6, 0x5, {0x0, 0x66aa}}, {0x2, 0x2, {0x0, 0xfd}}, {0x8, 0x40, {0x2, 0x8}}, {0x6, 0x0, {0x2, 0x7}}, {0x7f, 0x1, {0x2, 0x8}}, {0x2, 0x8c0, {0x3, 0x4}}, {0xebc3, 0x2, {0x3, 0x80000001}}, {0x0, 0x6, {0x1}}, {0xdb2, 0x100, {0x3, 0x400}}, {0x5, 0x3, {0x1, 0xef8}}, {0xc, 0x8, {0x3, 0x5}}, {0x1ff, 0x81, {0x0, 0xffffffff}}, {0xffff, 0x81, {0x2, 0x80000000}}, {0x7ff, 0x6, {0x2, 0xa4d7}}, {0xa, 0x80, {0x0, 0x7}}, {0x4, 0x3, {0x0, 0x5d}}, {0x81, 0x1, {0x0, 0xfffffff7}}, {0x8, 0x8000, {0x3, 0x3}}, {0x5, 0xa, {0x1, 0x2}}, {0x9, 0x0, {0x2, 0x5}}, {0x401, 0x2, {0x0, 0x90}}, {0x6d, 0xc2c, {0x3, 0x5}}, {0x138, 0x1ff, {0x1, 0x1ae}}, {0x5, 0x1, {0x2, 0x5d}}, {0x1ff, 0x5, {0x3, 0xb}}, {0x3, 0x2, {0x3, 0x4d0}}, {0x1, 0x7, {0x2, 0x2}}, {0x77a2, 0x3, {0x1, 0xff}}, {0x7, 0x4, {0x1, 0x7}}, {0x185, 0x4, {0x0, 0x2a}}, {0x2, 0x5, {0x1, 0x3}}, {0x101, 0x7fff, {0x2, 0x4}}, {0x6, 0x8, {0x1, 0x8}}, {0x3, 0x0, {0x3, 0xc}}, {0x0, 0x2, {0x0, 0x6}}, {0x8, 0x2, {0x0, 0x10001}}, {0x0, 0x81, {0x1, 0x80000000}}, {0x3, 0x0, {0x1, 0xbee}}, {0x2, 0x1, {0x1, 0x3ff}}, {0x9, 0x2, {0x0, 0x3f}}]}}}]}, 0x710}, 0x1, 0x0, 0x0, 0x4000000}, 0x44801) (async) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000040)={0xf4, 0x0, 0xfffffffe}, 0x10) (async) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r0) sendmsg$BATADV_CMD_GET_HARDIF(r9, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r10, 0x4, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4040014) (async) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1800000052000164f274e7b7c53ab2001c000000040003"], 0x18}}, 0x0) 1m46.172290019s ago: executing program 34 (id=17088): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) socket(0x11, 0x3, 0x300) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c00000010001fff110000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800e00010069703665727370616e000000100002800400120006001800177b000008000a00", @ANYRES32=r3], 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x4000) ioctl(r0, 0x890b, &(0x7f0000000040)="000000010000000000000000020000000f0000006c61706230") r5 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$kcm(0xa, 0x2, 0x0) socket$igmp6(0xa, 0x3, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f00000005c0)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) shutdown(0xffffffffffffffff, 0x1) r8 = socket(0x8, 0x3, 0x3) connect$netlink(r8, &(0x7f0000000600)=@kern={0x10, 0x0, 0x0, 0x40000}, 0xc) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x8907, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x23, &(0x7f0000000580), 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r5, 0x400442c8, &(0x7f0000000180)={r6, 0xfc000000, 0x4, "6d71badef6672fb21c3467a5ddc25ff814a82e8147476a35123567da8037f16051b1aaabfc8ebfd54a7cc348ee1ad9a5ea53ffbb1d6e692f83ce6110f9b8a2ebf01914b6405a9697943399e2005b08948b8f135c74eb7c94ac8d03827307cd9b8b"}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="500100001000130700000000000000007f00000100000000000000000000000000000000000001001000ffffac14140000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff010000697f00000000000000000001000000002b000000ff0204000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020004000000000000000000600012"], 0x150}}, 0x24000010) 1m43.233813988s ago: executing program 35 (id=17096): sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="78000000070a010200000000000000000a0000060900010073797a3100000000580004805400018009e201006d6574610000008844000280080003400000000b080003400000000008000140000000010800014000000009080001400000000b08000140000000120800015cb54d491508000240000000228248694989eadbe80560ac9c060c16f646e255395e8a804f4c5596fa630f7309e8da22ace72828f442a6a8a708f7453fe531ea19b1"], 0x78}, 0x1, 0x0, 0x0, 0x48055}, 0x1000c080) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0xa, 0x6, &(0x7f0000000a40)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x37}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit={0x95, 0x0, 0x1008}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000980)='syzkaller\x00', 0x5, 0xc3, &(0x7f0000000ac0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@gettclass={0x24, 0x2a, 0x8, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xffff}, {0x5, 0x9}, {0xfff3, 0xfff2}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000009c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000001140)=ANY=[@ANYBLOB="5400000013000500010000000000000007000000", @ANYRES32=r5, @ANYBLOB="000000000000000034001a0006000000020000002800048024000880"], 0x54}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000001180)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000013000500010000000000000007000000", @ANYRES64=r2, @ANYBLOB="000000000000000024001a00060000000200000018000480140009"], 0x44}}, 0x0) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x4, &(0x7f00000008c0)=""/78, &(0x7f0000000940)=0x4e) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r6, 0x29, 0x41, &(0x7f0000000c00)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) r7 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r7, 0x0, 0x27, &(0x7f0000000200)={@multicast2, @local}, 0xfffffed9) r8 = bpf$ITER_CREATE(0x21, &(0x7f0000000240), 0x8) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000d00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r9, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000dc0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r10, @ANYRESHEX=r1, @ANYRES32=r11, @ANYBLOB="08003f000002"], 0x24}, 0x1, 0x0, 0x0, 0x46004}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000e00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r8, &(0x7f0000001040)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001000)={&(0x7f0000000e40)=ANY=[@ANYBLOB, @ANYRES16=r10, @ANYBLOB="02002dbd7000fcdbdf252700000008000300", @ANYRES32=r12, @ANYBLOB="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"], 0x188}}, 0x8040) r13 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r13, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000140)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_PROTO_DOWN={0x5, 0x27, 0x7}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x2}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xbf67}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x4001) r14 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r8, &(0x7f0000000600)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000005c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="fc010000", @ANYRES16=r14, @ANYBLOB="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"], 0x1fc}, 0x1, 0x0, 0x0, 0x20004000}, 0x40000) syz_emit_ethernet(0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa080045000028006400000402907800000000e000000211009078e000000200010001000000000000000029f6054efdf11d976fb444e59b361af06c3e5cd13527920ee68a1c4c8dd2b003f4e7bb85965fda7a6e8fc4c6b311e74e9573b3e3c25f5374412b818deb97e3710456b8e2a82eaf1f4a56d9b3ad0bd2e46ed177c47f7cdac935583ccd577297808847f5"], 0x0) r15 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r15, &(0x7f0000000640)={0x2, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="021800000b0000000000000000000000270005000000000002000000e00000010000000000000000030012000000000002000000000000000000000000000000030006000000000002000000ffffffff0000000000000000"], 0x58}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 1m38.229734924s ago: executing program 36 (id=17095): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000300), r0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001cc0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001d00)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000001dc0)={0x40, r2, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_LEVEL={0x24, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x96}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4010}, 0x10) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f0000001ec0)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001e80)={&(0x7f0000001e00)={0x54, 0x0, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x54}}, 0x1) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000480)={&(0x7f0000000980)=ANY=[@ANYBLOB="0200f6d8a5b0669f07d17a0000", @ANYRES16=r1, @ANYBLOB="000227bd7000fddbdf250700000008000500ffffffff0500010001000000050001000100000008000400ac1414bb080005006401010208000400e000000208000500ac1414bb08000500e0000001"], 0x54}, 0x1, 0x0, 0x0, 0x801}, 0x20040800) syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000007c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=@newqdisc={0x48, 0x24, 0x100, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "000e08000000000000cc554e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) sendmsg$DEVLINK_CMD_TRAP_SET(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40004}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="f42600081000030b000000000000000000e36590f77bd5c92724bbae7ee07ed907b868820f23682637e4b0a304ec58587a181cde83e6d661", @ANYRES32=0x0, @ANYBLOB], 0x48}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140011"], 0x48}}, 0x0) 1m33.839384119s ago: executing program 37 (id=17097): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x11, 0x800000002, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) ioctl(r1, 0x8b2c, &(0x7f0000000040)) recvmmsg(r0, &(0x7f0000000880)=[{{0x0, 0x0, 0x0}, 0x85}, {{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000009c0)=""/208, 0xd0}, {&(0x7f0000000ac0)=""/70, 0x46}, {&(0x7f0000000b40)=""/203, 0xcb}, {&(0x7f0000000c40)=""/12, 0xc}, {&(0x7f0000000c80)=""/154, 0x9a}, {&(0x7f0000000d40)=""/4085, 0xff5}, {&(0x7f0000001d40)=""/220, 0xdc}, {&(0x7f0000001e40)=""/129, 0x81}], 0x8}, 0x257a}, {{0x0, 0x0, 0x0}, 0xffffffff}], 0x3, 0x20, 0x0) 1m29.752780995s ago: executing program 38 (id=17098): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001240)=@ipv4_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e22, 0x4e22}}]}, 0x24}}, 0x40) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000010c0)={@in={{0x2, 0x4e24, @remote}}, 0x0, 0x0, 0x1a, 0x0, "2506f7348c22d9b183b1886b6ffbafd994020ed06f4a634af1f5ca78af172b649228d0a5f00b14a1cb1fbcec5b3a3d787af933729b97b98e6cae6cd9c57f65e1c8610df593c8942b7abe349a210b2888"}, 0xd8) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000780)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000740)={&(0x7f0000000580)={0x1a8, r4, 0x400, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_IE={0xd9, 0x2a, [@mic={0x8c, 0x10, {0x24d, "ab0bce3c0d34", @short="2dc7cacd3297fb1f"}}, @random={0x4, 0xa9, "b7879ff2eae9a5ce21d7fde3dbf6016f18941b5bf7d28f72b472dad44f6d3de55b76f413da298a2361c74cd7802dc0ffacf98336c989895324972d41949f9091f00caa47a31b7ce08a580284675bb88c25ddd3fe86c2dfe881456d779234fdfd0defa79fe02c8eb92236321298e134efaecb5a082d95cdb50d523467c531d0e5f0dc1c6ef2b22c789734d286c2b8c702b60aa681d6c1a9ce84d8f30b130f434502e46696f8af9cccb6"}, @erp={0x2a, 0x1}, @erp={0x2a, 0x1, {0x0, 0x1}}, @chsw_timing={0x68, 0x4, {0x64b8, 0x9}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x1, 0x1, 0x0, 0x1, 0x1, 0x28}}, @supported_rates={0x1, 0x1, [{0x6c}]}]}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3}, @NL80211_ATTR_IE={0x9f, 0x2a, [@perr={0x84, 0x48, {0xff, 0x4, [{{}, @device_a, 0x7, @void, 0x31}, {{0x0, 0x1}, @device_b, 0x5, @value=@broadcast, 0x2}, {{0x0, 0x1}, @broadcast, 0x9, @value=@device_b, 0x2c}, {{0x0, 0x1}, @broadcast, 0x5, @value, 0x36}]}}, @link_id={0x65, 0x12, {@random='%9e>\vc', @device_b, @device_b}}, @mic={0x8c, 0x18, {0xe73, "8b336cee221d", @long="76c0ab99c650f9796f300c96a225c117"}}, @gcr_ga={0xbd, 0x6, @broadcast}, @sec_chan_ofs={0x3e, 0x1, 0x2}, @peer_mgmt={0x75, 0x16, {0x1, 0x8, @val=0xa, @void, @val="f29022116f67b0ce755d0a8dbf8d2c84"}}]}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x6}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x8000000}, 0x40) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010200000000000000006700000008000300", @ANYRES32=r6, @ANYBLOB="0800c300741300000800c400010000000c00c5800800080001000000"], 0x38}}, 0x0) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000007c0), r7) sendmsg$NLBL_CIPSOV4_C_ADD(r7, &(0x7f0000000800)={0x0, 0x6, &(0x7f0000000840)={&(0x7f0000000880)={0x30, r8, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x4}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_DOI={0x8}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\x00 \x00\x00', @ANYRES16=r3, @ANYBLOB="040027bd7000fedbdf250600000008000300", @ANYRES32=r6, @ANYBLOB="0a00180003030303030300000a00e80008021100000000001c00e700bcdb15c3270fee598ee585e01b896b97ec05619fa660b0bf0a00e800ffffffffffff00000a00e800ffffffffffff00000a001800030303030303000005005300010000000a00180003030303030300000a0018000303030303030000"], 0x94}, 0x1, 0x0, 0x0, 0x8015}, 0x240208c0) (async) r9 = socket(0x10, 0x3, 0x0) sendmsg$OSF_MSG_ADD(r9, &(0x7f0000001080)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001040)={&(0x7f0000000900)={0x710, 0x0, 0x5, 0x0, 0x0, 0x0, {0x5, 0x0, 0x3}, [{{0x254, 0x1, {{0x3, 0x3}, 0x1, 0x8, 0x40, 0x3ff, 0x1a, 'syz0\x00', "bbce0b93f5eac9017ff688bb5f664cf150610b85b44483bcc6d6b89e82cd96b9", "88d5afc3b862a390da98843f208ffae402ae97de6bbdc4f0a685afbe1c265393", [{0x2, 0xb, {0x3, 0x2}}, {0xff7f, 0x3, {0x1, 0x8}}, {0xa1, 0xf, {0x3, 0x6}}, {0x9, 0x0, {0x3, 0x101}}, {0x3ff, 0x3, {0x0, 0xe12}}, {0x0, 0xbf, {0x1, 0x4}}, {0x4ca, 0xbe, {0x1, 0x2}}, {0x3, 0x7ff, {0x1, 0x8}}, {0x400, 0x1c, {0x3, 0x4aea6268}}, {0x4, 0xe}, {0xcd, 0x4, {0x1, 0x80000001}}, {0xfc8, 0x0, {0x3, 0xa}}, {0x3ff, 0xff, {0x1, 0xfffffffd}}, {0xd0e5, 0xf, {0x2}}, {0x8, 0x5, {0x0, 0x4}}, {0x8, 0x88c, {0x2, 0x2}}, {0x8, 0x800, {0x1, 0x3ff}}, {0x8f9, 0x400, {0x2}}, {0x0, 0x6, {0x3, 0x8001}}, {0xcb, 0x9, {0x0, 0x9}}, {0x81, 0xdb5, {0x2, 0xfffffff8}}, {0x1000, 0x4840, {0x1}}, {0x7, 0x4, {0x2, 0x5}}, {0x8d, 0xb98a, {0x2, 0x5}}, {0x9, 0x7, {0x0, 0x5}}, {0x7, 0xa, {0x1, 0x10001}}, {0x78f1, 0x7, {0x1, 0xffffffff}}, {0x3eaa, 0x3, {0x3, 0x5}}, {0x4, 0x2, {0x3, 0x20ff}}, {0x0, 0x1022, {0x2, 0x24}}, {0x800, 0x5, {0x2, 0x10000}}, {0x5, 0x0, {0x1, 0x7f}}, {0x2, 0x9, {0x1, 0x2}}, {0x7, 0x8, {0x2}}, {0x1, 0x5, {0x0, 0x7}}, {0x8, 0x2, {0x0, 0xfffffff0}}, {0xfff8, 0x9, {0x2}}, {0x2, 0x1000, {0x0, 0xd152}}, {0x8110, 0x213b, {0x0, 0x6}}, {0xf, 0x4, {0x2, 0x1c5e}}]}}}, {{0x254, 0x1, {{0x3, 0x10}, 0xfd, 0x21, 0x575, 0x8, 0xb, 'syz0\x00', "22598c41a0d75144a5fe27880645ba1bdb0a7c76619e04ae05b15e4a0765c462", "f5d2916b099e5a0468d37a0ccd4add124a4e2bcd13ca456bfbc3c6b9a7c5c8a4", [{0x6, 0x9, {0x0, 0x1}}, {0x400, 0x7, {0x2, 0xfffffffc}}, {0x3, 0x7, {0x2, 0x2}}, {0x2, 0x3, {0x70bba66d66a9746a, 0x3}}, {0x25, 0x0, {0x3, 0x34}}, {0x1ff, 0x800, {0x3, 0x96}}, {0x1, 0x7f, {0x3, 0x3}}, {0x7, 0x1, {0x2, 0x5}}, {0x6, 0x81, {0x1, 0x3}}, {0x2, 0x8, {0x0, 0x6}}, {0x4, 0x1, {0x2, 0x4}}, {0x8, 0xff00, {0x2, 0x100}}, {0x1, 0x8001, {0x1, 0x8000}}, {0x400, 0x6, {0x0, 0x6}}, {0x7ff, 0x1, {0x3, 0x7fffffff}}, {0x1ff, 0x0, {0x1, 0x1a9}}, {0xc81, 0xe, {0x1, 0x4}}, {0x1, 0x3, {0x2, 0x4}}, {0x9, 0x0, {0x2, 0x5}}, {0x2, 0x7ff, {0x0, 0x6}}, {0x7, 0x3, {0x1, 0x87}}, {0xffc0, 0x8, {0x0, 0x3}}, {0x5, 0x5, {0x2, 0x10}}, {0x81, 0x2, {0x0, 0x9}}, {0x0, 0x1, {0x2, 0x1}}, {0x40, 0x6, {0x1, 0x4}}, {0xe, 0x0, {0x3, 0x3}}, {0xf, 0xf21, {0x2, 0x9}}, {0xa, 0x4a7, {0x3, 0x9}}, {0x116, 0x2700, {0x1, 0x5a}}, {0xff, 0x2, {0x2, 0x80000000}}, {0x7, 0x1, {0x2, 0x1}}, {0x1, 0x6c, {0x1, 0x10}}, {0x0, 0x3, {0x0, 0x3}}, {0x80, 0x1, {0x3, 0x7}}, {0x7fff, 0x7ca, {0x0, 0x5}}, {0x1, 0x8, {0x2, 0x8}}, {0x374d, 0x9, {0x2, 0x9e29}}, {0x9, 0xfff7, {0x3, 0x9}}, {0x0, 0x5, {0x1, 0x91}}]}}}, {{0x254, 0x1, {{0x0, 0x1}, 0x8, 0x8e, 0xff, 0x200, 0x11, 'syz0\x00', "3f7c74badffb1ba630e872a61faded1a7a5c933f9f2c1958ecd15615bb5add08", "0e8bace9f9733e402081e149b84aa71e2a0870441ca40ac875641e9f9ad37e51", [{0x6, 0x5, {0x0, 0x66aa}}, {0x2, 0x2, {0x0, 0xfd}}, {0x8, 0x40, {0x2, 0x8}}, {0x6, 0x0, {0x2, 0x7}}, {0x7f, 0x1, {0x2, 0x8}}, {0x2, 0x8c0, {0x3, 0x4}}, {0xebc3, 0x2, {0x3, 0x80000001}}, {0x0, 0x6, {0x1}}, {0xdb2, 0x100, {0x3, 0x400}}, {0x5, 0x3, {0x1, 0xef8}}, {0xc, 0x8, {0x3, 0x5}}, {0x1ff, 0x81, {0x0, 0xffffffff}}, {0xffff, 0x81, {0x2, 0x80000000}}, {0x7ff, 0x6, {0x2, 0xa4d7}}, {0xa, 0x80, {0x0, 0x7}}, {0x4, 0x3, {0x0, 0x5d}}, {0x81, 0x1, {0x0, 0xfffffff7}}, {0x8, 0x8000, {0x3, 0x3}}, {0x5, 0xa, {0x1, 0x2}}, {0x9, 0x0, {0x2, 0x5}}, {0x401, 0x2, {0x0, 0x90}}, {0x6d, 0xc2c, {0x3, 0x5}}, {0x138, 0x1ff, {0x1, 0x1ae}}, {0x5, 0x1, {0x2, 0x5d}}, {0x1ff, 0x5, {0x3, 0xb}}, {0x3, 0x2, {0x3, 0x4d0}}, {0x1, 0x7, {0x2, 0x2}}, {0x77a2, 0x3, {0x1, 0xff}}, {0x7, 0x4, {0x1, 0x7}}, {0x185, 0x4, {0x0, 0x2a}}, {0x2, 0x5, {0x1, 0x3}}, {0x101, 0x7fff, {0x2, 0x4}}, {0x6, 0x8, {0x1, 0x8}}, {0x3, 0x0, {0x3, 0xc}}, {0x0, 0x2, {0x0, 0x6}}, {0x8, 0x2, {0x0, 0x10001}}, {0x0, 0x81, {0x1, 0x80000000}}, {0x3, 0x0, {0x1, 0xbee}}, {0x2, 0x1, {0x1, 0x3ff}}, {0x9, 0x2, {0x0, 0x3f}}]}}}]}, 0x710}, 0x1, 0x0, 0x0, 0x4000000}, 0x44801) (async) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000040)={0xf4, 0x0, 0xfffffffe}, 0x10) (async) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r0) sendmsg$BATADV_CMD_GET_HARDIF(r9, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r10, 0x4, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4040014) (async) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1800000052000164f274e7b7c53ab2001c000000040003"], 0x18}}, 0x0) 0s ago: executing program 8 (id=17100): write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, 0x0, 0x0) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x48, r1, 0x601, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x1}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}, @IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "000102030405060708090a0b0c0d0e0f"}]}, 0x48}}, 0x20000000) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x38, r1, 0x601, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}]}, 0x38}}, 0x0) kernel console output (not intermixed with test programs): ][T10827] RBP: 00007f426bd1b090 R08: 0000000000000000 R09: 0000000000000000 [ 1164.388795][T10827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1164.388806][T10827] R13: 00007f426b026038 R14: 00007f426b025fa0 R15: 00007ffd3e6034c8 [ 1164.388840][T10827] [ 1165.785693][T10849] __nla_validate_parse: 1 callbacks suppressed [ 1165.785714][T10849] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16072'. [ 1165.785730][T10849] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16072'. [ 1165.839650][T10845] 8021q: adding VLAN 0 to HW filter on device bond18 [ 1165.995148][T10845] netlink: 'syz.2.16072': attribute type 4 has an invalid length. [ 1165.995176][T10845] netlink: 152 bytes leftover after parsing attributes in process `syz.2.16072'. [ 1166.198613][T10847] bond19 (unregistering): Released all slaves [ 1166.324633][T10860] FAULT_INJECTION: forcing a failure. [ 1166.324633][T10860] name failslab, interval 1, probability 0, space 0, times 0 [ 1166.324667][T10860] CPU: 1 UID: 0 PID: 10860 Comm: syz.0.16075 Not tainted syzkaller #0 PREEMPT(full) [ 1166.324688][T10860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1166.324699][T10860] Call Trace: [ 1166.324706][T10860] [ 1166.324715][T10860] dump_stack_lvl+0xe8/0x150 [ 1166.324752][T10860] should_fail_ex+0x3eb/0x540 [ 1166.324785][T10860] should_failslab+0xa8/0x100 [ 1166.324816][T10860] __kmalloc_noprof+0xf9/0x710 [ 1166.324841][T10860] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 1166.324866][T10860] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 1166.324898][T10860] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 1166.324930][T10860] genl_family_rcv_msg_doit+0xda/0x340 [ 1166.324961][T10860] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1166.324993][T10860] ? apparmor_capable+0x126/0x170 [ 1166.325022][T10860] ? bpf_lsm_capable+0x9/0x20 [ 1166.325079][T10860] ? security_capable+0x7e/0x2c0 [ 1166.325172][T10860] genl_rcv_msg+0x614/0x7a0 [ 1166.325203][T10860] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1166.325224][T10860] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 1166.325297][T10860] ? __pfx_nl80211_connect+0x10/0x10 [ 1166.325343][T10860] ? __pfx_nl80211_post_doit+0x10/0x10 [ 1166.325383][T10860] netlink_rcv_skb+0x226/0x4a0 [ 1166.325412][T10860] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1166.325436][T10860] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1166.325481][T10860] ? down_read+0x2b9/0x320 [ 1166.325513][T10860] genl_rcv+0x28/0x40 [ 1166.325533][T10860] netlink_unicast+0x8ef/0xa80 [ 1166.325579][T10860] netlink_sendmsg+0x7f0/0xb20 [ 1166.325614][T10860] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1166.325646][T10860] ? aa_sock_msg_perm+0x144/0x210 [ 1166.325681][T10860] ? apparmor_socket_sendmsg+0x98/0x360 [ 1166.325710][T10860] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1166.325737][T10860] sock_sendmsg_nosec+0x14e/0x190 [ 1166.325767][T10860] ____sys_sendmsg+0x54e/0x850 [ 1166.325796][T10860] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1166.325829][T10860] ? import_iovec+0x73/0xa0 [ 1166.325858][T10860] ___sys_sendmsg+0x2a5/0x360 [ 1166.325878][T10860] ? __lock_acquire+0x747/0x2de0 [ 1166.325908][T10860] ? __pfx____sys_sendmsg+0x10/0x10 [ 1166.325971][T10860] ? __fget_files+0x3a2/0x420 [ 1166.325996][T10860] ? __fget_files+0x2a/0x420 [ 1166.326030][T10860] __x64_sys_sendmsg+0x1b1/0x290 [ 1166.326055][T10860] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1166.326103][T10860] do_syscall_64+0x166/0x520 [ 1166.326126][T10860] ? trace_irq_disable+0x3b/0x140 [ 1166.326159][T10860] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1166.326179][T10860] ? clear_bhb_loop+0x70/0xc0 [ 1166.326203][T10860] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1166.326222][T10860] RIP: 0033:0x7f3aecb9fb19 [ 1166.326241][T10860] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1166.326257][T10860] RSP: 002b:00007f3aed9d4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1166.326279][T10860] RAX: ffffffffffffffda RBX: 00007f3aece25fa0 RCX: 00007f3aecb9fb19 [ 1166.326293][T10860] RDX: 0000000000000000 RSI: 00002000000019c0 RDI: 0000000000000004 [ 1166.326305][T10860] RBP: 00007f3aed9d4090 R08: 0000000000000000 R09: 0000000000000000 [ 1166.326317][T10860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1166.326328][T10860] R13: 00007f3aece26038 R14: 00007f3aece25fa0 R15: 00007ffe72790e08 [ 1166.326361][T10860] [ 1166.848128][T10849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1166.888480][T10849] bond18: (slave bond0): Enslaving as an active interface with a down link [ 1166.997445][T10845] .`: renamed from bond0 (while UP) [ 1168.182045][T10886] batadv_slave_1: Caught tx_queue_len zero misconfig [ 1168.782735][T10896] FAULT_INJECTION: forcing a failure. [ 1168.782735][T10896] name failslab, interval 1, probability 0, space 0, times 0 [ 1168.782767][T10896] CPU: 1 UID: 0 PID: 10896 Comm: syz.1.16086 Not tainted syzkaller #0 PREEMPT(full) [ 1168.782790][T10896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1168.782801][T10896] Call Trace: [ 1168.782809][T10896] [ 1168.782818][T10896] dump_stack_lvl+0xe8/0x150 [ 1168.782856][T10896] should_fail_ex+0x3eb/0x540 [ 1168.782885][T10896] ? __alloc_skb+0x1db/0x7a0 [ 1168.782905][T10896] should_failslab+0xa8/0x100 [ 1168.782935][T10896] ? __alloc_skb+0x1db/0x7a0 [ 1168.782951][T10896] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 1168.782976][T10896] ? __alloc_skb+0x18d/0x7a0 [ 1168.782995][T10896] ? __alloc_skb+0x1db/0x7a0 [ 1168.783029][T10896] __alloc_skb+0x1db/0x7a0 [ 1168.783053][T10896] netlink_sendmsg+0x5cd/0xb20 [ 1168.783089][T10896] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1168.783121][T10896] ? aa_sock_msg_perm+0x144/0x210 [ 1168.783160][T10896] ? apparmor_socket_sendmsg+0x98/0x360 [ 1168.783190][T10896] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1168.783217][T10896] sock_sendmsg_nosec+0x14e/0x190 [ 1168.783247][T10896] ____sys_sendmsg+0x54e/0x850 [ 1168.783275][T10896] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1168.783308][T10896] ? import_iovec+0x73/0xa0 [ 1168.783335][T10896] ___sys_sendmsg+0x2a5/0x360 [ 1168.783355][T10896] ? __lock_acquire+0x747/0x2de0 [ 1168.783383][T10896] ? __pfx____sys_sendmsg+0x10/0x10 [ 1168.783444][T10896] ? __fget_files+0x3a2/0x420 [ 1168.783468][T10896] ? __fget_files+0x2a/0x420 [ 1168.783502][T10896] __x64_sys_sendmsg+0x1b1/0x290 [ 1168.783527][T10896] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1168.783573][T10896] do_syscall_64+0x166/0x520 [ 1168.783597][T10896] ? trace_irq_disable+0x3b/0x140 [ 1168.783622][T10896] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1168.783641][T10896] ? clear_bhb_loop+0x70/0xc0 [ 1168.783665][T10896] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1168.783684][T10896] RIP: 0033:0x7f426ad9fb19 [ 1168.783703][T10896] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1168.783720][T10896] RSP: 002b:00007f426bd1b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1168.783742][T10896] RAX: ffffffffffffffda RBX: 00007f426b025fa0 RCX: 00007f426ad9fb19 [ 1168.783756][T10896] RDX: 0000000000000000 RSI: 0000200000000680 RDI: 0000000000000003 [ 1168.783768][T10896] RBP: 00007f426bd1b090 R08: 0000000000000000 R09: 0000000000000000 [ 1168.783780][T10896] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1168.783791][T10896] R13: 00007f426b026038 R14: 00007f426b025fa0 R15: 00007ffd3e6034c8 [ 1168.783824][T10896] [ 1169.322858][T10898] netlink: 32 bytes leftover after parsing attributes in process `syz.2.16087'. [ 1169.713251][T10887] netlink: 44 bytes leftover after parsing attributes in process `syz.0.16082'. [ 1170.373431][T10912] netlink: 28 bytes leftover after parsing attributes in process `syz.1.16090'. [ 1170.373464][T10912] netlink: 28 bytes leftover after parsing attributes in process `syz.1.16090'. [ 1170.420723][T10912] netlink: 132 bytes leftover after parsing attributes in process `syz.1.16090'. [ 1170.420753][T10912] netlink: 28 bytes leftover after parsing attributes in process `syz.1.16090'. [ 1171.111060][T10920] FAULT_INJECTION: forcing a failure. [ 1171.111060][T10920] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1171.111093][T10920] CPU: 1 UID: 0 PID: 10920 Comm: syz.2.16093 Not tainted syzkaller #0 PREEMPT(full) [ 1171.111115][T10920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1171.111126][T10920] Call Trace: [ 1171.111134][T10920] [ 1171.111143][T10920] dump_stack_lvl+0xe8/0x150 [ 1171.111180][T10920] should_fail_ex+0x3eb/0x540 [ 1171.111211][T10920] _copy_to_user+0x31/0xb0 [ 1171.111239][T10920] simple_read_from_buffer+0xe1/0x170 [ 1171.111271][T10920] proc_fail_nth_read+0x1bb/0x230 [ 1171.111296][T10920] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1171.111320][T10920] ? rw_verify_area+0x24a/0x4c0 [ 1171.111349][T10920] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1171.111368][T10920] vfs_read+0x213/0xa80 [ 1171.111400][T10920] ? __pfx___mutex_lock+0x10/0x10 [ 1171.111427][T10920] ? __pfx_vfs_read+0x10/0x10 [ 1171.111454][T10920] ? __fget_files+0x2a/0x420 [ 1171.111477][T10920] ? __fget_files+0x3a2/0x420 [ 1171.111499][T10920] ? __fget_files+0x2a/0x420 [ 1171.111527][T10920] ? fdget+0x1ac/0x250 [ 1171.111559][T10920] ksys_read+0x150/0x270 [ 1171.111588][T10920] ? __pfx_ksys_read+0x10/0x10 [ 1171.111627][T10920] do_syscall_64+0x166/0x520 [ 1171.111651][T10920] ? trace_irq_disable+0x3b/0x140 [ 1171.111676][T10920] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1171.111697][T10920] ? clear_bhb_loop+0x70/0xc0 [ 1171.111724][T10920] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1171.111743][T10920] RIP: 0033:0x7f87fdd6034e [ 1171.111762][T10920] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1171.111779][T10920] RSP: 002b:00007f87fec34fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1171.111801][T10920] RAX: ffffffffffffffda RBX: 00007f87fec356c0 RCX: 00007f87fdd6034e [ 1171.111815][T10920] RDX: 000000000000000f RSI: 00007f87fec350a0 RDI: 0000000000000004 [ 1171.111827][T10920] RBP: 00007f87fec35090 R08: 0000000000000000 R09: 0000000000000000 [ 1171.111839][T10920] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1171.111850][T10920] R13: 00007f87fe026038 R14: 00007f87fe025fa0 R15: 00007ffd0f7593e8 [ 1171.111884][T10920] [ 1171.856582][T10925] netlink: 'syz.2.16095': attribute type 1 has an invalid length. [ 1172.153112][T10925] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1172.171955][T10931] veth0: Caught tx_queue_len zero misconfig [ 1173.855106][T10950] netlink: 16 bytes leftover after parsing attributes in process `syz.2.16100'. [ 1173.906427][T10952] netlink: 28 bytes leftover after parsing attributes in process `syz.0.16101'. [ 1173.906461][T10952] netlink: 28 bytes leftover after parsing attributes in process `syz.0.16101'. [ 1175.051616][T10965] netlink: 36 bytes leftover after parsing attributes in process `syz.0.16105'. [ 1175.153748][T10967] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16106'. [ 1175.255713][T10968] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16106'. [ 1175.302684][T10954] netlink: 44 bytes leftover after parsing attributes in process `syz.1.16102'. [ 1175.325827][T10973] netlink: 24 bytes leftover after parsing attributes in process `syz.2.16106'. [ 1175.378617][T10967] 8021q: adding VLAN 0 to HW filter on device bond19 [ 1176.355770][T10979] sch_tbf: burst 255 is lower than device syzkaller0 mtu (65589) ! [ 1176.564283][T10984] syzkaller0: mtu less than device minimum [ 1179.253110][T11024] pim6reg: entered allmulticast mode [ 1179.271907][T11025] pim6reg: left allmulticast mode [ 1179.887556][T11041] syzkaller0: mtu less than device minimum [ 1180.441302][T11049] geneve1: Caught tx_queue_len zero misconfig [ 1180.559554][T11049] netlink: 'syz.1.16124': attribute type 2 has an invalid length. [ 1180.669257][T11053] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16124'. [ 1180.885057][T11027] netlink: 44 bytes leftover after parsing attributes in process `syz.3.16119'. [ 1182.397536][T11083] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16130'. [ 1183.468854][T11101] syzkaller0: mtu less than device minimum [ 1184.172810][T11108] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1184.177016][T11108] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1184.181232][T11108] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1184.197128][T11108] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1184.215393][T11108] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1184.545143][ T5723] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1184.610056][ T5723] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1184.612098][ T5723] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1184.613568][ T5723] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1184.614322][ T5723] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1185.933552][T11130] netlink: 28 bytes leftover after parsing attributes in process `syz.3.16139'. [ 1185.933583][T11130] netlink: 28 bytes leftover after parsing attributes in process `syz.3.16139'. [ 1185.975158][T11130] netlink: 132 bytes leftover after parsing attributes in process `syz.3.16139'. [ 1185.975216][T11130] netlink: 28 bytes leftover after parsing attributes in process `syz.3.16139'. [ 1186.679920][ T5723] Bluetooth: hci5: command tx timeout [ 1187.435938][T11148] sch_tbf: burst 255 is lower than device syzkaller0 mtu (65589) ! [ 1187.966143][T11155] syzkaller0: mtu less than device minimum [ 1188.218164][T11105] rxe_eth0 speed is unknown, defaulting to 1000 [ 1188.656102][T11132] netlink: 44 bytes leftover after parsing attributes in process `syz.0.16140'. [ 1188.752022][T11164] pim6reg: entered allmulticast mode [ 1188.753071][T11164] netlink: 16 bytes leftover after parsing attributes in process `syz.3.16146'. [ 1188.753109][T11164] netlink: 16 bytes leftover after parsing attributes in process `syz.3.16146'. [ 1188.760563][T11108] Bluetooth: hci5: command tx timeout [ 1188.845853][T11173] netlink: 16 bytes leftover after parsing attributes in process `syz.3.16146'. [ 1188.845918][T11173] netlink: 16 bytes leftover after parsing attributes in process `syz.3.16146'. [ 1190.118705][T11193] sch_tbf: burst 255 is lower than device syzkaller0 mtu (65589) ! [ 1190.141008][T11193] syzkaller0: mtu less than device minimum [ 1190.839896][ T5723] Bluetooth: hci5: command tx timeout [ 1191.372237][T11105] C speed is unknown, defaulting to 1000 [ 1192.257302][T11229] sch_tbf: burst 255 is lower than device syzkaller0 mtu (65589) ! [ 1192.352883][T11229] syzkaller0: mtu less than device minimum [ 1192.793996][T11242] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16171'. [ 1192.935059][ T5723] Bluetooth: hci5: command tx timeout [ 1192.965496][T11246] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16171'. [ 1195.593259][T11105] bridge0: port 1(bridge_slave_0) entered blocking state [ 1195.596391][T11105] bridge0: port 1(bridge_slave_0) entered disabled state [ 1195.596575][T11105] bridge_slave_0: entered allmulticast mode [ 1195.626319][T11105] bridge_slave_0: entered promiscuous mode [ 1195.640844][T11289] syzkaller0: mtu less than device minimum [ 1195.662541][T11105] bridge0: port 2(bridge_slave_1) entered blocking state [ 1195.662666][T11105] bridge0: port 2(bridge_slave_1) entered disabled state [ 1195.662869][T11105] bridge_slave_1: entered allmulticast mode [ 1195.665923][T11105] bridge_slave_1: entered promiscuous mode [ 1195.983104][T11105] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1196.035812][T11105] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1196.221565][T11299] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16182'. [ 1196.244102][T11105] team0: Port device team_slave_0 added [ 1196.264423][T11105] team0: Port device team_slave_1 added [ 1196.548265][T11105] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1196.548286][T11105] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1196.548312][T11105] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1196.615861][T11105] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1196.615884][T11105] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1196.615910][T11105] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1197.004318][T11105] hsr_slave_0: entered promiscuous mode [ 1197.016542][T11105] hsr_slave_1: entered promiscuous mode [ 1197.033701][T11105] debugfs: 'hsr0' already exists in 'hsr' [ 1197.033726][T11105] Cannot create hsr debugfs directory [ 1197.980982][T11319] netlink: 20 bytes leftover after parsing attributes in process `syz.2.16186'. [ 1198.218185][T11319] ip6gre2: entered promiscuous mode [ 1198.218219][T11319] ip6gre2: entered allmulticast mode [ 1198.958434][T11337] netlink: 28 bytes leftover after parsing attributes in process `syz.1.16191'. [ 1198.958466][T11337] netlink: 28 bytes leftover after parsing attributes in process `syz.1.16191'. [ 1198.964795][T11343] netlink: 132 bytes leftover after parsing attributes in process `syz.1.16191'. [ 1198.964822][T11343] netlink: 28 bytes leftover after parsing attributes in process `syz.1.16191'. [ 1199.046944][T11338] sch_tbf: burst 255 is lower than device syzkaller0 mtu (65589) ! [ 1199.330733][T11345] syzkaller0: mtu less than device minimum [ 1204.217672][T11105] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1204.277922][T11105] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1204.289439][T11105] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1204.473203][T11105] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1204.477019][T11105] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1204.536111][T11105] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1204.553467][T11105] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1204.642172][T11105] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1204.751143][T11375] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16200'. [ 1204.941596][T11388] netlink: 20 bytes leftover after parsing attributes in process `syz.1.16201'. [ 1205.046572][T11376] Can't find ip_set type hesh:net,port,net [ 1205.142934][T11393] netlink: 224 bytes leftover after parsing attributes in process `syz.0.16202'. [ 1205.170344][T11388] ip6gre2: entered promiscuous mode [ 1205.170370][T11388] ip6gre2: entered allmulticast mode [ 1205.841817][T11404] sch_tbf: burst 255 is lower than device syzkaller0 mtu (65589) ! [ 1205.866870][T11404] syzkaller0: mtu less than device minimum [ 1206.183632][T11105] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1206.434775][T11105] 8021q: adding VLAN 0 to HW filter on device team0 [ 1206.550170][ T5222] bridge0: port 1(bridge_slave_0) entered blocking state [ 1206.550301][ T5222] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1206.597677][ T1462] bridge0: port 2(bridge_slave_1) entered blocking state [ 1206.597794][ T1462] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1206.891453][T11413] netlink: 16 bytes leftover after parsing attributes in process `syz.1.16207'. [ 1207.090825][T11412] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16206'. [ 1207.297085][T11423] netlink: 112 bytes leftover after parsing attributes in process `syz.0.16209'. [ 1208.113871][T11436] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1208.742759][T11454] netlink: 'syz.0.16215': attribute type 1 has an invalid length. [ 1209.027659][T11461] ip_tables: iptables: counters copy to user failed while replacing table [ 1209.317329][T11454] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1210.615039][T11483] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16220'. [ 1210.890366][T11487] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16220'. [ 1210.993322][T11489] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16220'. [ 1212.092649][T11105] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1212.873872][T11524] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1213.245029][T11529] netlink: 'syz.3.16228': attribute type 2 has an invalid length. [ 1213.347658][T11536] netlink: 28 bytes leftover after parsing attributes in process `syz.1.16230'. [ 1213.347690][T11536] netlink: 28 bytes leftover after parsing attributes in process `syz.1.16230'. [ 1213.377262][T11536] netlink: 132 bytes leftover after parsing attributes in process `syz.1.16230'. [ 1213.377292][T11536] netlink: 28 bytes leftover after parsing attributes in process `syz.1.16230'. [ 1213.806787][T11541] FAULT_INJECTION: forcing a failure. [ 1213.806787][T11541] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1213.806820][T11541] CPU: 1 UID: 0 PID: 11541 Comm: syz.1.16232 Not tainted syzkaller #0 PREEMPT(full) [ 1213.806843][T11541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1213.806854][T11541] Call Trace: [ 1213.806862][T11541] [ 1213.806871][T11541] dump_stack_lvl+0xe8/0x150 [ 1213.806913][T11541] should_fail_ex+0x3eb/0x540 [ 1213.806946][T11541] _copy_from_iter+0x1d3/0x1680 [ 1213.806971][T11541] ? __alloc_skb+0x27a/0x7a0 [ 1213.806998][T11541] ? __alloc_skb+0x27a/0x7a0 [ 1213.807021][T11541] ? __alloc_skb+0x27a/0x7a0 [ 1213.807043][T11541] ? __pfx__copy_from_iter+0x10/0x10 [ 1213.807063][T11541] ? kmem_cache_alloc_node_noprof+0x1f4/0x600 [ 1213.807089][T11541] ? __alloc_skb+0x27a/0x7a0 [ 1213.807107][T11541] ? __alloc_skb+0x27a/0x7a0 [ 1213.807133][T11541] ? netlink_sendmsg+0x64f/0xb20 [ 1213.807164][T11541] ? skb_put+0x112/0x210 [ 1213.807188][T11541] netlink_sendmsg+0x6bb/0xb20 [ 1213.807225][T11541] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1213.807258][T11541] ? aa_sock_msg_perm+0x144/0x210 [ 1213.807296][T11541] ? apparmor_socket_sendmsg+0x18b/0x360 [ 1213.807326][T11541] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1213.807354][T11541] sock_sendmsg_nosec+0x14e/0x190 [ 1213.807386][T11541] ____sys_sendmsg+0x54e/0x850 [ 1213.807416][T11541] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1213.807449][T11541] ? import_iovec+0x73/0xa0 [ 1213.807478][T11541] ___sys_sendmsg+0x2a5/0x360 [ 1213.807498][T11541] ? __lock_acquire+0x747/0x2de0 [ 1213.807531][T11541] ? __pfx____sys_sendmsg+0x10/0x10 [ 1213.807606][T11541] ? __fget_files+0x3a2/0x420 [ 1213.807632][T11541] ? __fget_files+0x2a/0x420 [ 1213.807667][T11541] __x64_sys_sendmsg+0x1b1/0x290 [ 1213.807694][T11541] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1213.807741][T11541] do_syscall_64+0x166/0x520 [ 1213.807768][T11541] ? trace_irq_disable+0x3b/0x140 [ 1213.807795][T11541] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1213.807816][T11541] ? clear_bhb_loop+0x70/0xc0 [ 1213.807841][T11541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1213.807861][T11541] RIP: 0033:0x7f426ad9fb19 [ 1213.807881][T11541] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1213.807898][T11541] RSP: 002b:00007f426bd1b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1213.807921][T11541] RAX: ffffffffffffffda RBX: 00007f426b025fa0 RCX: 00007f426ad9fb19 [ 1213.807935][T11541] RDX: 0000000024000090 RSI: 0000200000000600 RDI: 0000000000000003 [ 1213.807949][T11541] RBP: 00007f426bd1b090 R08: 0000000000000000 R09: 0000000000000000 [ 1213.807962][T11541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1213.807979][T11541] R13: 00007f426b026038 R14: 00007f426b025fa0 R15: 00007ffd3e6034c8 [ 1213.808014][T11541] [ 1214.617968][T11105] veth0_vlan: entered promiscuous mode [ 1214.729671][T11105] veth1_vlan: entered promiscuous mode [ 1214.767614][T11546] netlink: 'syz.1.16235': attribute type 1 has an invalid length. [ 1214.880564][T11551] Cannot find add_set index 0 as target [ 1214.986926][T11546] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1215.074119][T11105] veth0_macvtap: entered promiscuous mode [ 1215.220087][T11105] veth1_macvtap: entered promiscuous mode [ 1215.467946][T11105] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1215.576779][T11105] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1215.713213][ T63] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1215.713278][ T63] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1215.713311][ T63] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1215.713350][ T63] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1216.298623][T11563] ip_tables: iptables: counters copy to user failed while replacing table [ 1216.357979][T11567] bridge7: entered allmulticast mode [ 1216.472335][T22919] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1216.472360][T22919] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1216.510718][T11559] tc_dump_action: action bad kind [ 1216.768166][ T8390] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1216.768191][ T8390] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1216.950059][T11574] tipc: Enabling of bearer rejected, failed to enable media [ 1216.957511][T11574] sch_tbf: burst 255 is lower than device syzkaller0 mtu (65589) ! [ 1216.986279][T11574] syzkaller0: mtu less than device minimum [ 1217.234423][T11577] netlink: 28 bytes leftover after parsing attributes in process `syz.2.16242'. [ 1217.234456][T11577] netlink: 28 bytes leftover after parsing attributes in process `syz.2.16242'. [ 1217.236109][T11577] netlink: 132 bytes leftover after parsing attributes in process `syz.2.16242'. [ 1217.236136][T11577] netlink: 28 bytes leftover after parsing attributes in process `syz.2.16242'. [ 1217.469131][T11580] netlink: 'syz.0.16243': attribute type 1 has an invalid length. [ 1217.838225][T11580] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1218.533666][T11599] netlink: 60 bytes leftover after parsing attributes in process `syz.5.16133'. [ 1218.557226][T11598] netlink: 60 bytes leftover after parsing attributes in process `syz.5.16133'. [ 1219.158176][T11614] tipc: Enabling of bearer rejected, no device for the media [ 1219.187066][T11614] sch_tbf: burst 255 is lower than device syzkaller0 mtu (65589) ! [ 1219.574276][T11616] syzkaller0: mtu less than device minimum [ 1220.050394][T11622] nbd: socks must be embedded in a SOCK_ITEM attr [ 1220.168612][T11626] netlink: 'syz.2.16256': attribute type 10 has an invalid length. [ 1220.942021][T11642] netlink: 68 bytes leftover after parsing attributes in process `syz.2.16260'. [ 1220.973326][T11632] netlink: 'syz.1.16249': attribute type 1 has an invalid length. [ 1220.973359][T11632] netlink: 96 bytes leftover after parsing attributes in process `syz.1.16249'. [ 1221.143199][T11608] syz_tun: left allmulticast mode [ 1221.143232][T11608] syz_tun: left promiscuous mode [ 1221.143686][T11608] bridge0: port 3(syz_tun) entered disabled state [ 1221.292370][ T1999] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1221.565865][T11608] bridge_slave_0: left allmulticast mode [ 1221.565896][T11608] bridge_slave_0: left promiscuous mode [ 1221.566124][T11608] bridge0: port 1(bridge_slave_0) entered disabled state [ 1221.730124][T11608] bridge_slave_1: left promiscuous mode [ 1221.730374][T11608] bridge0: port 2(bridge_slave_1) entered disabled state [ 1222.014990][T11608] : (slave bond_slave_0): Releasing backup interface [ 1222.098087][T11608] : (slave bond_slave_1): Releasing backup interface [ 1222.185117][T11608] team0: Port device team_slave_0 removed [ 1222.225992][ T1999] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1222.264550][T11608] team0: Port device team_slave_1 removed [ 1222.292606][T11608] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1223.380170][T11680] netlink: 228 bytes leftover after parsing attributes in process `syz.3.16270'. [ 1223.736644][T11686] netlink: 260 bytes leftover after parsing attributes in process `syz.3.16271'. [ 1223.824297][T11686] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16271'. [ 1224.029962][T11691] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16273'. [ 1224.030166][T11691] FAULT_INJECTION: forcing a failure. [ 1224.030166][T11691] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1224.030190][T11691] CPU: 1 UID: 0 PID: 11691 Comm: syz.2.16273 Not tainted syzkaller #0 PREEMPT(full) [ 1224.030211][T11691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1224.030223][T11691] Call Trace: [ 1224.030231][T11691] [ 1224.030240][T11691] dump_stack_lvl+0xe8/0x150 [ 1224.030277][T11691] should_fail_ex+0x3eb/0x540 [ 1224.030308][T11691] _copy_from_user+0x2d/0xb0 [ 1224.030334][T11691] kstrtouint_from_user+0xd6/0x180 [ 1224.030363][T11691] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1224.030394][T11691] ? lock_acquire+0x115/0x350 [ 1224.030424][T11691] proc_fail_nth_write+0x8e/0x210 [ 1224.030448][T11691] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1224.030478][T11691] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1224.030506][T11691] vfs_write+0x296/0xba0 [ 1224.030545][T11691] ? __pfx_vfs_write+0x10/0x10 [ 1224.030573][T11691] ? __fget_files+0x2a/0x420 [ 1224.030597][T11691] ? __fget_files+0x3a2/0x420 [ 1224.030619][T11691] ? __fget_files+0x2a/0x420 [ 1224.030647][T11691] ? fdget+0x1ac/0x250 [ 1224.030680][T11691] ksys_write+0x150/0x270 [ 1224.030710][T11691] ? __pfx_ksys_write+0x10/0x10 [ 1224.030750][T11691] do_syscall_64+0x166/0x520 [ 1224.030776][T11691] ? trace_irq_disable+0x3b/0x140 [ 1224.030800][T11691] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1224.030820][T11691] ? clear_bhb_loop+0x70/0xc0 [ 1224.030845][T11691] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1224.030864][T11691] RIP: 0033:0x7f87fdd6034e [ 1224.030883][T11691] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1224.030899][T11691] RSP: 002b:00007f87fec34fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1224.030922][T11691] RAX: ffffffffffffffda RBX: 00007f87fec356c0 RCX: 00007f87fdd6034e [ 1224.030936][T11691] RDX: 0000000000000001 RSI: 00007f87fec350a0 RDI: 0000000000000004 [ 1224.030948][T11691] RBP: 00007f87fec35090 R08: 0000000000000000 R09: 0000000000000000 [ 1224.030961][T11691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1224.030972][T11691] R13: 00007f87fe026038 R14: 00007f87fe025fa0 R15: 00007ffd0f7593e8 [ 1224.031007][T11691] [ 1224.451421][T11690] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16274'. [ 1224.564334][T11694] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16275'. [ 1224.702371][T11699] netlink: 20 bytes leftover after parsing attributes in process `syz.3.16277'. [ 1224.826169][T11706] netlink: 76 bytes leftover after parsing attributes in process `syz.3.16281'. [ 1225.252186][T11718] netlink: 44 bytes leftover after parsing attributes in process `syz.2.16282'. [ 1225.292153][T11716] ip_tables: iptables: counters copy to user failed while replacing table [ 1225.893818][T11732] netlink: 8 bytes leftover after parsing attributes in process `syz.5.16289'. [ 1225.893922][T11732] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1225.893933][T11732] IPv6: NLM_F_CREATE should be set when creating new route [ 1225.893966][T11732] IPv6: NLM_F_CREATE should be set when creating new route [ 1226.789833][T11761] netlink: 'syz.3.16297': attribute type 64 has an invalid length. [ 1227.058688][T11762] tc_dump_action: action bad kind [ 1228.297048][T11795] tipc: Enabling of bearer rejected, media not registered [ 1228.423620][T11802] __nla_validate_parse: 6 callbacks suppressed [ 1228.423646][T11802] netlink: 88 bytes leftover after parsing attributes in process `syz.3.16312'. [ 1228.423666][T11802] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16312'. [ 1228.423680][T11802] netlink: 16 bytes leftover after parsing attributes in process `syz.3.16312'. [ 1228.804892][T11806] sch_tbf: burst 255 is lower than device syzkaller0 mtu (65589) ! [ 1228.824518][T11806] syzkaller0: mtu less than device minimum [ 1229.024520][T11808] erspan0: left promiscuous mode [ 1229.068546][T11810] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16314'. [ 1229.370296][T11808] bridge0: port 1(syz_tun) entered blocking state [ 1229.370466][T11808] bridge0: port 1(syz_tun) entered listening state [ 1229.377411][T11808] bridge0: left promiscuous mode [ 1229.407808][ T2014] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1229.441899][T11808] 8021q: adding VLAN 0 to HW filter on device .` [ 1229.451742][T11808] 8021q: adding VLAN 0 to HW filter on device team0 [ 1229.648178][T11821] netlink: 'syz.0.16316': attribute type 1 has an invalid length. [ 1229.731017][ T5723] Bluetooth: hci5: command 0x0405 tx timeout [ 1229.791147][T11824] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16316'. [ 1229.813139][ T2000] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1229.891891][T11808] veth1_macvtap: left promiscuous mode [ 1229.896407][T11808] veth0_macvtap: left promiscuous mode [ 1229.918210][T11808] veth0_macvtap: entered promiscuous mode [ 1229.936869][T11808] veth1_macvtap: entered promiscuous mode [ 1230.118600][T11808] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1230.196373][T11808] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1230.334650][T11808] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1230.405696][T11808] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1230.427698][T11808] A link change request failed with some changes committed already. Interface syztnl2 may have been left with an inconsistent configuration, please check. [ 1230.490737][ T1999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1230.547542][T11821] workqueue: Failed to create a rescuer kthread for wq "bond15": -EINTR [ 1230.650508][ T2014] syz2: Port: 1 Link ACTIVE [ 1230.686000][ T12] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1230.686346][ T12] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1230.897250][ T1999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1231.168620][ T1429] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1231.195150][ T1429] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1231.399436][ C1] bridge0: port 1(syz_tun) entered learning state [ 1231.426823][T11840] dvmrp0: entered allmulticast mode [ 1231.562775][ T2014] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1231.642484][ T2014] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1231.810729][T11856] sch_tbf: burst 255 is lower than device syzkaller0 mtu (65589) ! [ 1231.932893][T11861] netlink: zone id is out of range [ 1231.932943][T11861] netlink: zone id is out of range [ 1231.932952][T11861] netlink: zone id is out of range [ 1231.932960][T11861] netlink: zone id is out of range [ 1232.651556][T11882] netlink: 'syz.1.16335': attribute type 1 has an invalid length. [ 1232.762035][T11882] veth0_to_bond: left allmulticast mode [ 1232.791193][T11882] bond15: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 1232.794014][T11884] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16335'. [ 1232.795972][T11884] 8021q: adding VLAN 0 to HW filter on device bond15 [ 1233.091001][T11889] netlink: 12 bytes leftover after parsing attributes in process `syz.5.16340'. [ 1233.115478][T11889] netlink: 92 bytes leftover after parsing attributes in process `syz.5.16340'. [ 1233.116623][T11891] netlink: 20 bytes leftover after parsing attributes in process `syz.0.16338'. [ 1233.462488][T11898] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16341'. [ 1233.479866][ C1] bridge0: port 1(syz_tun) entered forwarding state [ 1233.479893][ C1] bridge0: topology change detected, propagating [ 1233.893244][T11914] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16345'. [ 1234.034004][T11918] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16348'. [ 1234.168539][T11923] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16348'. [ 1234.933686][T11941] xt_ipcomp: unknown flags 1D [ 1235.000807][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1235.480055][ C1] net_ratelimit: 3 callbacks suppressed [ 1235.480080][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1235.808079][T11958] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.16360'. [ 1236.115272][T11966] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16361'. [ 1236.115871][T11963] syzkaller1: entered promiscuous mode [ 1236.115891][T11963] syzkaller1: entered allmulticast mode [ 1236.261122][T11968] netlink: 20 bytes leftover after parsing attributes in process `syz.5.16362'. [ 1236.261149][T11968] tipc: Invalid UDP bearer configuration [ 1236.261197][T11968] tipc: Enabling of bearer rejected, failed to enable media [ 1236.297446][T11963] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16360'. [ 1236.795753][T11979] ip_tables: iptables: counters copy to user failed while replacing table [ 1237.015021][T11982] ebt_among: dst integrity fail: 101 [ 1237.312061][T11993] syzkaller0: left promiscuous mode [ 1237.312086][T11993] syzkaller0: left allmulticast mode [ 1237.446672][T11996] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16367'. [ 1237.574805][T12001] netlink: 28 bytes leftover after parsing attributes in process `syz.2.16367'. [ 1237.643597][T11992] netlink: 'syz.1.16366': attribute type 7 has an invalid length. [ 1237.643626][T11992] netlink: 'syz.1.16366': attribute type 8 has an invalid length. [ 1237.734844][T11992] ip6gretap0: entered promiscuous mode [ 1237.762398][T11992] syz_tun: entered promiscuous mode [ 1237.778836][T11992] tipc: Resetting bearer [ 1237.784966][T11992] gretap0: entered promiscuous mode [ 1237.921404][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1238.476272][T12016] __nla_validate_parse: 3 callbacks suppressed [ 1238.476295][T12016] netlink: 20 bytes leftover after parsing attributes in process `syz.3.16375'. [ 1238.708027][T11979] NFSD: Failed to start, no listeners configured. [ 1238.805246][T12028] netlink: 32 bytes leftover after parsing attributes in process `syz.5.16378'. [ 1239.642974][T12040] netlink: 32 bytes leftover after parsing attributes in process `syz.5.16382'. [ 1239.959831][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1241.504394][T12073] netlink: 'syz.0.16391': attribute type 1 has an invalid length. [ 1241.597758][T12080] netlink: 'syz.0.16391': attribute type 1 has an invalid length. [ 1241.654634][T12074] bond16: Unable to set peer notification delay as MII monitoring is disabled [ 1241.672054][T12074] bond16 (unregistering): Released all slaves [ 1242.049773][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1242.086463][T12079] bond16: Unable to set peer notification delay as MII monitoring is disabled [ 1242.201066][T12079] bond16 (unregistering): Released all slaves [ 1242.882833][T11108] Bluetooth: hci5: SCO packet too small [ 1243.165332][T12112] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16399'. [ 1243.800624][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1244.129604][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1244.444812][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1245.146643][T12142] netlink: 20 bytes leftover after parsing attributes in process `syz.3.16407'. [ 1245.358509][T12145] netlink: 12 bytes leftover after parsing attributes in process `syz.5.16409'. [ 1245.697008][T12151] netlink: 32 bytes leftover after parsing attributes in process `syz.2.16412'. [ 1246.027547][T12158] FAULT_INJECTION: forcing a failure. [ 1246.027547][T12158] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1246.027579][T12158] CPU: 1 UID: 0 PID: 12158 Comm: syz.3.16416 Not tainted syzkaller #0 PREEMPT(full) [ 1246.027601][T12158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1246.027613][T12158] Call Trace: [ 1246.027621][T12158] [ 1246.027629][T12158] dump_stack_lvl+0xe8/0x150 [ 1246.027667][T12158] should_fail_ex+0x3eb/0x540 [ 1246.027698][T12158] _copy_from_iter+0x1d3/0x1680 [ 1246.027720][T12158] ? __alloc_skb+0x27a/0x7a0 [ 1246.027742][T12158] ? __alloc_skb+0x27a/0x7a0 [ 1246.027763][T12158] ? __alloc_skb+0x27a/0x7a0 [ 1246.027781][T12158] ? __pfx__copy_from_iter+0x10/0x10 [ 1246.027802][T12158] ? kmem_cache_alloc_node_noprof+0x1f4/0x600 [ 1246.027825][T12158] ? __alloc_skb+0x27a/0x7a0 [ 1246.027842][T12158] ? __alloc_skb+0x27a/0x7a0 [ 1246.027867][T12158] ? netlink_sendmsg+0x64f/0xb20 [ 1246.027895][T12158] ? skb_put+0x112/0x210 [ 1246.027918][T12158] netlink_sendmsg+0x6bb/0xb20 [ 1246.027952][T12158] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1246.027985][T12158] ? aa_sock_msg_perm+0x144/0x210 [ 1246.028018][T12158] ? apparmor_socket_sendmsg+0x98/0x360 [ 1246.028047][T12158] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1246.028074][T12158] sock_sendmsg_nosec+0x14e/0x190 [ 1246.028104][T12158] ____sys_sendmsg+0x54e/0x850 [ 1246.028131][T12158] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1246.028163][T12158] ? import_iovec+0x73/0xa0 [ 1246.028191][T12158] ___sys_sendmsg+0x2a5/0x360 [ 1246.028211][T12158] ? __lock_acquire+0x747/0x2de0 [ 1246.028240][T12158] ? __pfx____sys_sendmsg+0x10/0x10 [ 1246.028310][T12158] ? __fget_files+0x3a2/0x420 [ 1246.028332][T12158] ? __fget_files+0x2a/0x420 [ 1246.028365][T12158] __x64_sys_sendmsg+0x1b1/0x290 [ 1246.028390][T12158] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1246.028436][T12158] do_syscall_64+0x166/0x520 [ 1246.028464][T12158] ? trace_irq_disable+0x3b/0x140 [ 1246.028489][T12158] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1246.028509][T12158] ? clear_bhb_loop+0x70/0xc0 [ 1246.028532][T12158] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1246.028551][T12158] RIP: 0033:0x7eff9019fb19 [ 1246.028570][T12158] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1246.028587][T12158] RSP: 002b:00007eff90f93028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1246.028609][T12158] RAX: ffffffffffffffda RBX: 00007eff90425fa0 RCX: 00007eff9019fb19 [ 1246.028623][T12158] RDX: 0000000000000040 RSI: 0000200000000040 RDI: 0000000000000003 [ 1246.028635][T12158] RBP: 00007eff90f93090 R08: 0000000000000000 R09: 0000000000000000 [ 1246.028646][T12158] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1246.028658][T12158] R13: 00007eff90426038 R14: 00007eff90425fa0 R15: 00007ffd4ad22ce8 [ 1246.028692][T12158] [ 1246.201267][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1246.568319][T12162] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16415'. [ 1246.922243][T12169] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16418'. [ 1248.280958][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1248.816471][T12227] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16430'. [ 1248.836117][T12228] netlink: 'syz.3.16429': attribute type 1 has an invalid length. [ 1248.882919][T12231] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16429'. [ 1249.022548][T12228] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1249.234365][T12240] netlink: 'syz.5.16431': attribute type 64 has an invalid length. [ 1249.234395][T12240] netlink: 5 bytes leftover after parsing attributes in process `syz.5.16431'. [ 1249.533386][T12244] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16433'. [ 1249.558994][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1249.718528][T12245] netlink: 'syz.3.16433': attribute type 21 has an invalid length. [ 1249.773092][T12244] syzkaller1: entered promiscuous mode [ 1249.773116][T12244] syzkaller1: entered allmulticast mode [ 1249.838017][T12245] netlink: 132 bytes leftover after parsing attributes in process `syz.3.16433'. [ 1250.369870][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1250.808869][T12263] netlink: 'syz.0.16438': attribute type 10 has an invalid length. [ 1251.098507][T12267] __nla_validate_parse: 1 callbacks suppressed [ 1251.098532][T12267] netlink: 8 bytes leftover after parsing attributes in process `syz.5.16439'. [ 1252.073547][T12263] team0: Device wg2 is of different type [ 1252.439553][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1252.771668][T12288] bridge0: port 3(syz_tun) entered blocking state [ 1252.773592][T12288] bridge0: port 3(syz_tun) entered disabled state [ 1252.773783][T12288] syz_tun: entered allmulticast mode [ 1252.801357][T12288] syz_tun: entered promiscuous mode [ 1252.804840][T12288] bridge0: port 3(syz_tun) entered blocking state [ 1252.804973][T12288] bridge0: port 3(syz_tun) entered forwarding state [ 1253.057699][T12297] netlink: 8 bytes leftover after parsing attributes in process `syz.5.16444'. [ 1253.186319][T12284] netlink: 8 bytes leftover after parsing attributes in process `syz.5.16444'. [ 1253.186663][T12284] netlink: 8 bytes leftover after parsing attributes in process `syz.5.16444'. [ 1253.201296][T12284] netlink: 8 bytes leftover after parsing attributes in process `syz.5.16444'. [ 1253.201504][T12284] netlink: 8 bytes leftover after parsing attributes in process `syz.5.16444'. [ 1254.337478][T12308] netlink: 32 bytes leftover after parsing attributes in process `syz.3.16450'. [ 1254.528943][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1255.002451][ T5723] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1255.012049][ T5723] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1255.020859][ T5723] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1255.037536][ T5723] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1255.047736][ T5723] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1255.278614][T12321] netlink: 28 bytes leftover after parsing attributes in process `syz.5.16452'. [ 1255.278648][T12321] netlink: 28 bytes leftover after parsing attributes in process `syz.5.16452'. [ 1255.408435][T12321] netlink: 132 bytes leftover after parsing attributes in process `syz.5.16452'. [ 1255.827193][T12328] ip6t_rpfilter: unknown options [ 1256.418644][T12334] __nla_validate_parse: 1 callbacks suppressed [ 1256.418670][T12334] netlink: 8 bytes leftover after parsing attributes in process `syz.5.16457'. [ 1256.599260][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1257.252382][T11108] Bluetooth: hci4: command tx timeout [ 1257.602126][T12027] tipc: Resetting bearer [ 1257.913016][T12027] tipc: Disabling bearer [ 1257.927277][T12027] syz_tun (unregistering): left promiscuous mode [ 1258.436801][T12316] rxe_eth0 speed is unknown, defaulting to 1000 [ 1258.680014][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1259.319445][T11108] Bluetooth: hci4: command tx timeout [ 1259.458664][T12381] netlink: 32 bytes leftover after parsing attributes in process `syz.2.16469'. [ 1259.462673][T12378] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16467'. [ 1260.768935][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1261.079350][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1261.400606][T11108] Bluetooth: hci4: command tx timeout [ 1262.359928][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1262.404892][T12430] netlink: 32 bytes leftover after parsing attributes in process `syz.3.16481'. [ 1262.541405][T12429] netlink: 4 bytes leftover after parsing attributes in process `syz.5.16479'. [ 1262.596075][T12316] C speed is unknown, defaulting to 1000 [ 1262.698647][T12429] netlink: 'syz.5.16479': attribute type 1 has an invalid length. [ 1262.698674][T12429] netlink: 52 bytes leftover after parsing attributes in process `syz.5.16479'. [ 1262.699438][T12429] netlink: 'syz.5.16479': attribute type 1 has an invalid length. [ 1262.699454][T12429] netlink: 'syz.5.16479': attribute type 2 has an invalid length. [ 1262.839065][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1262.996879][T12433] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16482'. [ 1262.996913][T12433] netlink: 14 bytes leftover after parsing attributes in process `syz.2.16482'. [ 1263.489780][T11108] Bluetooth: hci4: command tx timeout [ 1263.517442][T12437] wireguard: wg2: Could not create IPv4 socket [ 1263.517731][T12429] netlink: 36 bytes leftover after parsing attributes in process `syz.5.16479'. [ 1263.642213][T12429] bridge0: port 2(bridge_slave_1) entered disabled state [ 1264.148069][T12451] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1264.920522][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1265.279450][T12469] netlink: 32 bytes leftover after parsing attributes in process `syz.0.16492'. [ 1265.801281][T12479] wireguard: wg2: Could not create IPv4 socket [ 1266.188565][T12484] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16498'. [ 1266.243505][T12485] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16497'. [ 1266.947512][T12499] netlink: 6024 bytes leftover after parsing attributes in process `syz.2.16503'. [ 1266.998935][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1267.433128][T12507] IPv6: addrconf: prefix option has invalid lifetime [ 1267.433148][T12507] IPv6: addrconf: prefix option has invalid lifetime [ 1267.433726][ C1] IPv6: addrconf: prefix option has invalid lifetime [ 1267.433738][ C1] IPv6: addrconf: prefix option has invalid lifetime [ 1267.708347][T12316] bridge0: port 1(bridge_slave_0) entered blocking state [ 1267.708470][T12316] bridge0: port 1(bridge_slave_0) entered disabled state [ 1267.708663][T12316] bridge_slave_0: entered allmulticast mode [ 1267.763389][T12316] bridge_slave_0: entered promiscuous mode [ 1267.798335][T12316] bridge0: port 2(bridge_slave_1) entered blocking state [ 1267.800887][T12316] bridge0: port 2(bridge_slave_1) entered disabled state [ 1267.801057][T12316] bridge_slave_1: entered allmulticast mode [ 1267.840305][T12316] bridge_slave_1: entered promiscuous mode [ 1267.988504][T12316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1268.017554][T12316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1268.336897][T12516] wireguard: wg2: Could not create IPv4 socket [ 1268.464226][T12316] team0: Port device team_slave_0 added [ 1268.488450][T12521] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16510'. [ 1268.511343][T12316] team0: Port device team_slave_1 added [ 1268.555694][T12522] netlink: 48 bytes leftover after parsing attributes in process `syz.5.16511'. [ 1268.771527][T12316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1268.771548][T12316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1268.771576][T12316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1268.928240][T12316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1268.928264][T12316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1268.928291][T12316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1269.088928][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1269.135026][T12525] netlink: 'syz.2.16512': attribute type 1 has an invalid length. [ 1269.301447][T12525] 8021q: adding VLAN 0 to HW filter on device bond21 [ 1269.359931][T12532] netlink: 36 bytes leftover after parsing attributes in process `syz.5.16515'. [ 1269.420948][T12535] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16514'. [ 1269.565751][T12316] hsr_slave_0: entered promiscuous mode [ 1269.585495][T12316] hsr_slave_1: entered promiscuous mode [ 1269.605592][T12316] debugfs: 'hsr0' already exists in 'hsr' [ 1269.605614][T12316] Cannot create hsr debugfs directory [ 1271.160971][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1271.480573][T12558] netlink: 'syz.2.16523': attribute type 4 has an invalid length. [ 1271.480603][T12558] netlink: 4568 bytes leftover after parsing attributes in process `syz.2.16523'. [ 1271.615690][T12558] netlink: 2 bytes leftover after parsing attributes in process `syz.2.16523'. [ 1271.659031][ C1] bridge0: port 1(syz_tun) neighbor 0000.00:00:00:00:00:00 lost [ 1271.659753][ C1] bridge0: topology change detected, propagating [ 1271.720987][T12560] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16523'. [ 1271.779249][T12563] netlink: 8 bytes leftover after parsing attributes in process `syz.5.16524'. [ 1272.302966][T12316] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1272.364376][T12316] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1272.385032][T12316] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1272.436843][T12316] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1272.482157][T12316] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1272.525626][T12316] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1272.681955][T12316] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1272.711677][T12316] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1273.241253][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1273.847094][T12593] netlink: 1196 bytes leftover after parsing attributes in process `syz.5.16533'. [ 1273.952167][T12595] wireguard: wg2: Could not create IPv4 socket [ 1274.013333][T12316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1274.188232][T12316] 8021q: adding VLAN 0 to HW filter on device team0 [ 1274.285376][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1274.285532][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1274.375526][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1274.375653][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1275.284286][T12614] netlink: 108 bytes leftover after parsing attributes in process `syz.2.16541'. [ 1275.320160][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1276.976682][T12648] netlink: 8 bytes leftover after parsing attributes in process `syz.5.16550'. [ 1277.398313][T12657] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16552'. [ 1277.400537][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1277.978135][T12666] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1278.490230][T12316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1279.265426][T12692] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16565'. [ 1279.478967][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1280.090289][T12701] netlink: 'syz.0.16566': attribute type 1 has an invalid length. [ 1280.204325][T12706] ip_tables: iptables: counters copy to user failed while replacing table [ 1280.235585][T12701] bond16: entered promiscuous mode [ 1280.236161][T12701] 8021q: adding VLAN 0 to HW filter on device bond16 [ 1280.257181][T12706] C: renamed from lo [ 1280.267784][T12706] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1280.759069][T12715] netlink: 'syz.3.16571': attribute type 1 has an invalid length. [ 1281.150481][T12725] openvswitch: netlink: Missing valid actions attribute. [ 1281.150520][T12725] openvswitch: netlink: Actions may not be safe on all matching packets [ 1281.191711][T12715] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1281.505028][T12316] veth0_vlan: entered promiscuous mode [ 1281.560200][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1281.606797][T12316] veth1_vlan: entered promiscuous mode [ 1281.894379][T12316] veth0_macvtap: entered promiscuous mode [ 1281.954862][T12316] veth1_macvtap: entered promiscuous mode [ 1282.107944][T12316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1282.240376][T12316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1282.390149][ T8390] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1282.391619][ T8390] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1282.391662][ T8390] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1282.391696][ T8390] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1282.705152][T12740] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16578'. [ 1283.032450][ T8392] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1283.032477][ T8392] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1283.264897][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1283.264926][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1283.649106][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1283.721941][T12750] netlink: 32 bytes leftover after parsing attributes in process `syz.5.16581'. [ 1284.081206][T12753] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16582'. [ 1285.355738][T12774] netlink: 'syz.3.16588': attribute type 1 has an invalid length. [ 1285.719162][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1286.218116][T12774] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1286.405927][T12789] FAULT_INJECTION: forcing a failure. [ 1286.405927][T12789] name failslab, interval 1, probability 0, space 0, times 0 [ 1286.405960][T12789] CPU: 1 UID: 0 PID: 12789 Comm: syz.5.16592 Not tainted syzkaller #0 PREEMPT(full) [ 1286.405982][T12789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1286.405994][T12789] Call Trace: [ 1286.406001][T12789] [ 1286.406010][T12789] dump_stack_lvl+0xe8/0x150 [ 1286.406047][T12789] should_fail_ex+0x3eb/0x540 [ 1286.406078][T12789] should_failslab+0xa8/0x100 [ 1286.406110][T12789] __kmalloc_cache_noprof+0x9e/0x600 [ 1286.406137][T12789] ? rtnl_newlink+0x147/0x1c30 [ 1286.406157][T12789] ? rtnl_newlink+0x147/0x1c30 [ 1286.406178][T12789] ? stack_trace_save+0xa9/0x100 [ 1286.406206][T12789] rtnl_newlink+0x147/0x1c30 [ 1286.406225][T12789] ? stack_depot_save_flags+0x33/0x810 [ 1286.406332][T12789] ? __lock_acquire+0x740/0x2de0 [ 1286.406361][T12789] ? kasan_save_track+0x4f/0x80 [ 1286.406385][T12789] ? kasan_save_track+0x3e/0x80 [ 1286.406415][T12789] ? kasan_save_free_info+0x40/0x50 [ 1286.406435][T12789] ? __kasan_slab_free+0x5c/0x80 [ 1286.406462][T12789] ? __pfx_rtnl_newlink+0x10/0x10 [ 1286.406480][T12789] ? __netlink_deliver_tap+0x4f1/0x6e0 [ 1286.406508][T12789] ? netlink_deliver_tap+0x19c/0x1b0 [ 1286.406533][T12789] ? netlink_unicast+0x8c1/0xa80 [ 1286.406555][T12789] ? netlink_sendmsg+0x7f0/0xb20 [ 1286.406580][T12789] ? sock_sendmsg_nosec+0x14e/0x190 [ 1286.406608][T12789] ? ____sys_sendmsg+0x54e/0x850 [ 1286.406626][T12789] ? ___sys_sendmsg+0x2a5/0x360 [ 1286.406645][T12789] ? __x64_sys_sendmsg+0x1b1/0x290 [ 1286.406664][T12789] ? do_syscall_64+0x166/0x520 [ 1286.406687][T12789] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1286.406745][T12789] ? kasan_quarantine_put+0xbb/0x1f0 [ 1286.406770][T12789] ? lockdep_hardirqs_on+0x7b/0x110 [ 1286.406798][T12789] ? nlmon_xmit+0xb0/0x100 [ 1286.406823][T12789] ? kmem_cache_free+0x182/0x650 [ 1286.406858][T12789] ? __lock_acquire+0x747/0x2de0 [ 1286.406888][T12789] ? __pfx_hook_capable+0x10/0x10 [ 1286.406906][T12789] ? __dev_queue_xmit+0x29b/0x3920 [ 1286.406934][T12789] ? __pfx_hook_capable+0x10/0x10 [ 1286.406953][T12789] ? lockdep_hardirqs_on+0x7b/0x110 [ 1286.406985][T12789] ? lock_acquire+0x115/0x350 [ 1286.407008][T12789] ? __pfx_rtnl_newlink+0x10/0x10 [ 1286.407042][T12789] ? __pfx_rtnl_newlink+0x10/0x10 [ 1286.407062][T12789] rtnetlink_rcv_msg+0x802/0xc00 [ 1286.407086][T12789] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1286.407106][T12789] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1286.407130][T12789] ? __copy_skb_header+0xa3/0x4a0 [ 1286.407166][T12789] netlink_rcv_skb+0x226/0x4a0 [ 1286.407194][T12789] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1286.407217][T12789] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1286.407258][T12789] ? netlink_deliver_tap+0x2e/0x1b0 [ 1286.407285][T12789] ? netlink_deliver_tap+0x2e/0x1b0 [ 1286.407318][T12789] netlink_unicast+0x8ef/0xa80 [ 1286.407362][T12789] netlink_sendmsg+0x7f0/0xb20 [ 1286.407405][T12789] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1286.407436][T12789] ? aa_sock_msg_perm+0x144/0x210 [ 1286.407471][T12789] ? apparmor_socket_sendmsg+0x98/0x360 [ 1286.407499][T12789] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1286.407526][T12789] sock_sendmsg_nosec+0x14e/0x190 [ 1286.407555][T12789] ____sys_sendmsg+0x54e/0x850 [ 1286.407583][T12789] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1286.407615][T12789] ? import_iovec+0x73/0xa0 [ 1286.407644][T12789] ___sys_sendmsg+0x2a5/0x360 [ 1286.407663][T12789] ? __lock_acquire+0x747/0x2de0 [ 1286.407692][T12789] ? __pfx____sys_sendmsg+0x10/0x10 [ 1286.407753][T12789] ? __fget_files+0x3a2/0x420 [ 1286.407777][T12789] ? __fget_files+0x2a/0x420 [ 1286.407811][T12789] __x64_sys_sendmsg+0x1b1/0x290 [ 1286.407835][T12789] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1286.407881][T12789] do_syscall_64+0x166/0x520 [ 1286.407903][T12789] ? trace_irq_disable+0x3b/0x140 [ 1286.407929][T12789] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1286.407948][T12789] ? clear_bhb_loop+0x70/0xc0 [ 1286.407972][T12789] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1286.407990][T12789] RIP: 0033:0x7f4e2a99fb19 [ 1286.408009][T12789] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1286.408026][T12789] RSP: 002b:00007f4e2b8d3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1286.408048][T12789] RAX: ffffffffffffffda RBX: 00007f4e2ac25fa0 RCX: 00007f4e2a99fb19 [ 1286.408062][T12789] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 1286.408075][T12789] RBP: 00007f4e2b8d3090 R08: 0000000000000000 R09: 0000000000000000 [ 1286.408087][T12789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1286.408099][T12789] R13: 00007f4e2ac26038 R14: 00007f4e2ac25fa0 R15: 00007ffcfbe94ce8 [ 1286.408132][T12789] [ 1287.219264][T12794] netlink: 'syz.0.16593': attribute type 4 has an invalid length. [ 1287.616504][T12795] 8021q: adding VLAN 0 to HW filter on device .` [ 1287.799087][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1287.905712][T12795] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1287.938337][ T5222] bridge0: port 1(bridge_slave_0) entered blocking state [ 1287.938514][ T5222] bridge0: port 1(bridge_slave_0) entered listening state [ 1287.963894][ T5222] bridge0: port 2(bridge_slave_1) entered blocking state [ 1287.964046][ T5222] bridge0: port 2(bridge_slave_1) entered listening state [ 1288.301252][T29495] bond11: (slave .`): link status definitely up, 20000 Mbps full duplex [ 1288.301407][T29495] bond11: (slave .`): making interface the new active one [ 1288.346617][T29495] bond11: active interface up! [ 1288.563122][T12811] ip_tables: iptables: counters copy to user failed while replacing table [ 1289.105989][T12818] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1289.777675][T12827] netlink: 12 bytes leftover after parsing attributes in process `syz.5.16605'. [ 1289.863811][T12829] netlink: 16 bytes leftover after parsing attributes in process `syz.0.16606'. [ 1289.883438][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1289.914611][T12829] netlink: 28 bytes leftover after parsing attributes in process `syz.0.16606'. [ 1289.914652][T12829] netlink: 28 bytes leftover after parsing attributes in process `syz.0.16606'. [ 1289.948646][T12840] netlink: 8 bytes leftover after parsing attributes in process `syz.5.16605'. [ 1290.005014][T12831] sctp: [Deprecated]: syz.3.16607 (pid 12831) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1290.005014][T12831] Use struct sctp_sack_info instead [ 1290.134576][T12827] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1290.707950][T12857] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16612'. [ 1290.741508][T12860] openvswitch: netlink: Missing valid actions attribute. [ 1290.741548][T12860] openvswitch: netlink: Actions may not be safe on all matching packets [ 1290.953866][T12871] syzkaller0: entered promiscuous mode [ 1290.954015][T12871] syzkaller0: entered allmulticast mode [ 1290.975482][T12871] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1291.959442][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1292.730922][T12831] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1293.750852][T12899] team0: Cannot enslave team device to itself [ 1293.865569][T12902] xt_policy: neither incoming nor outgoing policy selected [ 1294.039490][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1294.581470][T12909] ip6gre3: entered promiscuous mode [ 1294.581497][T12909] ip6gre3: entered allmulticast mode [ 1295.182584][T12928] netlink: 'syz.6.16632': attribute type 4 has an invalid length. [ 1295.182611][T12928] netlink: 5620 bytes leftover after parsing attributes in process `syz.6.16632'. [ 1295.687816][T12936] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16637'. [ 1295.925889][T12942] syzkaller0: MTU not usable for tipc bearer [ 1295.925938][T12942] tipc: Enabling of bearer rejected, failed to enable media [ 1295.984618][T12942] sch_tbf: burst 255 is lower than device syzkaller0 mtu (65589) ! [ 1296.120613][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1296.241918][T12945] syzkaller0: mtu less than device minimum [ 1296.306374][T12947] netlink: 8 bytes leftover after parsing attributes in process `syz.5.16640'. [ 1296.882822][T12954] ip6gre3: entered promiscuous mode [ 1296.882863][T12954] ip6gre3: entered allmulticast mode [ 1296.920859][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1297.559006][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1297.873003][T12976] syzkaller0: entered promiscuous mode [ 1297.873026][T12976] syzkaller0: entered allmulticast mode [ 1298.181992][T12981] netlink: 20 bytes leftover after parsing attributes in process `syz.3.16650'. [ 1298.203140][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1298.216164][T12982] x_tables: unsorted underflow at hook 4 [ 1298.256197][T12980] netlink: 'syz.5.16649': attribute type 1 has an invalid length. [ 1298.944472][T12980] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1299.667256][T12989] udevd[12989]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1299.736315][T12989] udevd[12989]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1299.959867][T13002] lo: entered promiscuous mode [ 1299.960488][T13002] tunl0: entered promiscuous mode [ 1299.960939][T13002] gre0: entered promiscuous mode [ 1299.989493][T13002] gretap0: entered promiscuous mode [ 1299.990036][T13002] erspan0: entered promiscuous mode [ 1299.990456][T13002] ip_vti0: entered promiscuous mode [ 1300.013964][T13002] ip6_vti0: entered promiscuous mode [ 1300.030321][T13002] sit0: entered promiscuous mode [ 1300.030732][T13002] ip6tnl0: entered promiscuous mode [ 1300.050474][T13002] ip6gre0: entered promiscuous mode [ 1300.072447][T13002] syz_tun: entered promiscuous mode [ 1300.073035][T13002] ip6gretap0: entered promiscuous mode [ 1300.091580][T13002] bridge0: entered promiscuous mode [ 1300.092199][T13002] vcan0: entered promiscuous mode [ 1300.097270][T13002] bond0: entered promiscuous mode [ 1300.097293][T13002] bond_slave_0: entered promiscuous mode [ 1300.097509][T13002] bond_slave_1: entered promiscuous mode [ 1300.139735][T13002] team0: entered promiscuous mode [ 1300.139760][T13002] team_slave_0: entered promiscuous mode [ 1300.144960][T13002] team_slave_1: entered promiscuous mode [ 1300.145968][T13002] dummy0: entered promiscuous mode [ 1300.209611][T13002] nlmon0: entered promiscuous mode [ 1300.210187][T13002] batadv0: entered promiscuous mode [ 1300.240973][T13002] vxcan0: entered promiscuous mode [ 1300.241466][T13002] vxcan1: entered promiscuous mode [ 1300.269861][T13002] veth0: entered promiscuous mode [ 1300.270457][T13002] veth1: entered promiscuous mode [ 1300.280546][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1300.282148][T13002] wg0: entered promiscuous mode [ 1300.330263][T13002] wg1: entered promiscuous mode [ 1300.330876][T13002] wg2: entered promiscuous mode [ 1300.331390][T13002] veth0_to_bridge: entered promiscuous mode [ 1300.362008][T13002] veth1_to_bridge: entered promiscuous mode [ 1300.387415][T13002] veth0_to_bond: entered promiscuous mode [ 1300.449570][T13002] veth1_to_bond: entered promiscuous mode [ 1300.466484][T13002] veth0_to_team: entered promiscuous mode [ 1300.467778][T13002] veth1_to_team: entered promiscuous mode [ 1300.534300][T13002] veth0_to_batadv: entered promiscuous mode [ 1300.534842][T13002] batadv_slave_0: entered promiscuous mode [ 1300.572795][T13002] veth1_to_batadv: entered promiscuous mode [ 1300.573472][T13002] batadv_slave_1: entered promiscuous mode [ 1300.594074][T13002] xfrm0: entered promiscuous mode [ 1300.596744][T13002] veth0_to_hsr: entered promiscuous mode [ 1300.627264][T13002] veth1_to_hsr: entered promiscuous mode [ 1300.693473][T13002] hsr0: entered promiscuous mode [ 1300.694168][T13002] veth1_virt_wifi: entered promiscuous mode [ 1300.697400][T13002] veth0_virt_wifi: entered promiscuous mode [ 1300.697943][T13002] virt_wifi0: entered promiscuous mode [ 1300.729401][T13002] vlan0: entered promiscuous mode [ 1300.730280][T13002] vlan1: entered promiscuous mode [ 1300.731399][T13002] macvlan0: entered promiscuous mode [ 1300.733338][T13002] macvlan1: entered promiscuous mode [ 1300.735862][T13002] ipvlan0: entered promiscuous mode [ 1300.736059][T13002] ipvlan1: entered promiscuous mode [ 1300.738363][T13002] macvtap0: entered promiscuous mode [ 1300.807354][T13002] macsec0: entered promiscuous mode [ 1300.807952][T13002] geneve0: entered promiscuous mode [ 1300.828686][T13002] geneve1: entered promiscuous mode [ 1300.833148][T13002] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 1300.859900][T13002] netdevsim netdevsim6 netdevsim1: entered promiscuous mode [ 1300.860537][T13002] netdevsim netdevsim6 netdevsim2: entered promiscuous mode [ 1300.885703][T13002] netdevsim netdevsim6 netdevsim3: entered promiscuous mode [ 1300.886571][T13002] mac80211_hwsim hwsim34 wlan0: entered promiscuous mode [ 1300.912152][T13002] mac80211_hwsim hwsim35 wlan1: entered promiscuous mode [ 1300.926692][T13003] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16654'. [ 1301.374528][T13012] netlink: 196 bytes leftover after parsing attributes in process `syz.0.16657'. [ 1301.844667][T13019] netlink: 216 bytes leftover after parsing attributes in process `syz.0.16660'. [ 1301.844731][T13019] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16660'. [ 1301.987488][T13024] netlink: 'syz.3.16661': attribute type 1 has an invalid length. [ 1302.062154][T13024] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1302.152330][T13024] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16661'. [ 1302.257159][T13032] syzkaller0: entered promiscuous mode [ 1302.257185][T13032] syzkaller0: entered allmulticast mode [ 1302.359230][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1302.883252][T13037] tipc: Resetting bearer [ 1302.883779][T13037] tipc: Resetting bearer [ 1303.170603][T13053] netlink: Unknown conntrack attr (0) [ 1303.330227][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 1303.330427][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 1303.344752][ T308] tipc: Resetting bearer [ 1303.356265][T13051] netlink: 8 bytes leftover after parsing attributes in process `syz.6.16668'. [ 1303.585740][T13060] netlink: 32 bytes leftover after parsing attributes in process `syz.0.16670'. [ 1303.818559][T13063] syzkaller0: MTU not usable for tipc bearer [ 1303.818607][T13063] tipc: Enabling of bearer rejected, failed to enable media [ 1303.867540][T13063] sch_tbf: burst 255 is lower than device syzkaller0 mtu (65589) ! [ 1304.156827][T13070] netlink: 'syz.0.16674': attribute type 1 has an invalid length. [ 1304.206567][T13072] netlink: 'syz.2.16675': attribute type 3 has an invalid length. [ 1304.356402][T13076] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16674'. [ 1304.439390][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1304.496950][T13079] netlink: 56 bytes leftover after parsing attributes in process `syz.3.16676'. [ 1304.576458][T13070] 8021q: adding VLAN 0 to HW filter on device bond17 [ 1304.964126][T13079] bond15 (unregistering): Released all slaves [ 1305.695182][T13106] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 1305.933861][T13113] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1305.977920][T13106] Cannot find add_set index 4 as target [ 1306.139171][T13119] netlink: 48 bytes leftover after parsing attributes in process `syz.2.16681'. [ 1306.204817][T13121] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16683'. [ 1306.408175][T13124] ipvlan0: left promiscuous mode [ 1306.520631][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1307.314308][T13141] netlink: 'syz.5.16689': attribute type 1 has an invalid length. [ 1307.416111][T13141] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1308.600484][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1308.610947][T13169] netlink: 4 bytes leftover after parsing attributes in process `syz.5.16698'. [ 1308.906144][T13172] tipc: Enabling of bearer rejected, failed to enable media [ 1309.498384][T13169] rxe_eth0 speed is unknown, defaulting to 1000 [ 1309.605600][T13176] netlink: 20 bytes leftover after parsing attributes in process `syz.6.16700'. [ 1309.673475][T13196] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16702'. [ 1310.487479][T13211] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16704'. [ 1310.586285][T13209] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16704'. [ 1310.679030][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1311.125868][T13218] openvswitch: netlink: Missing valid actions attribute. [ 1311.125909][T13218] openvswitch: netlink: Actions may not be safe on all matching packets [ 1311.336873][T13220] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16707'. [ 1311.898778][T13236] netlink: 12 bytes leftover after parsing attributes in process `syz.6.16712'. [ 1312.759808][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1313.160852][T13256] netlink: 8 bytes leftover after parsing attributes in process `syz.6.16716'. [ 1313.160960][T13256] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1313.160972][T13256] IPv6: NLM_F_CREATE should be set when creating new route [ 1313.161006][T13256] IPv6: NLM_F_CREATE should be set when creating new route [ 1313.532961][T13169] C speed is unknown, defaulting to 1000 [ 1313.885433][T13273] netlink: 68 bytes leftover after parsing attributes in process `syz.6.16721'. [ 1313.910885][T13276] netlink: 28 bytes leftover after parsing attributes in process `syz.0.16722'. [ 1313.910918][T13276] netlink: 28 bytes leftover after parsing attributes in process `syz.0.16722'. [ 1314.839647][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1315.063339][T13294] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1315.173303][T13298] netlink: 32 bytes leftover after parsing attributes in process `syz.2.16730'. [ 1315.568259][T13304] netlink: 52 bytes leftover after parsing attributes in process `syz.6.16733'. [ 1315.675929][T13305] syzkaller0: MTU not usable for tipc bearer [ 1315.675978][T13305] tipc: Enabling of bearer rejected, failed to enable media [ 1316.757453][T13326] netlink: 16 bytes leftover after parsing attributes in process `syz.6.16736'. [ 1316.829736][T13326] netlink: 8 bytes leftover after parsing attributes in process `syz.6.16736'. [ 1316.829792][T13326] netlink: 'syz.6.16736': attribute type 26 has an invalid length. [ 1316.829807][T13326] netlink: 4 bytes leftover after parsing attributes in process `syz.6.16736'. [ 1316.830971][T13326] netlink: 8 bytes leftover after parsing attributes in process `syz.6.16736'. [ 1316.830995][T13326] netlink: 'syz.6.16736': attribute type 26 has an invalid length. [ 1316.831009][T13326] netlink: 4 bytes leftover after parsing attributes in process `syz.6.16736'. [ 1316.918870][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1317.845239][T13341] netlink: 8 bytes leftover after parsing attributes in process `syz.6.16743'. [ 1317.845270][T13341] netlink: 12 bytes leftover after parsing attributes in process `syz.6.16743'. [ 1317.845295][T13341] netlink: 4 bytes leftover after parsing attributes in process `syz.6.16743'. [ 1318.284680][ T1403] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1318.285156][ T1403] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1318.285196][ T1403] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1318.285231][ T1403] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1318.689233][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1318.689263][ C1] bridge0: topology change detected, propagating [ 1318.689527][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1318.689541][ C1] bridge0: topology change detected, propagating [ 1319.009059][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1319.443985][T13359] netlink: 12 bytes leftover after parsing attributes in process `syz.6.16747'. [ 1319.585467][T13362] netlink: 12 bytes leftover after parsing attributes in process `syz.6.16747'. [ 1319.763686][T13361] veth0_to_bond: left promiscuous mode [ 1320.765095][T13379] batadv_slave_1: entered promiscuous mode [ 1320.882328][ T12] IPVS: starting estimator thread 0... [ 1321.078921][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1321.273535][T13376] IPVS: Scheduler module ip_vs_mh not found [ 1321.276723][T13383] IPVS: using max 27 ests per chain, 64800 per kthread [ 1321.363782][T13378] batadv_slave_1: left promiscuous mode [ 1321.433024][T13392] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 1321.461466][T13396] openvswitch: netlink: Missing valid actions attribute. [ 1321.461504][T13396] openvswitch: netlink: Actions may not be safe on all matching packets [ 1321.930841][T13401] __nla_validate_parse: 3 callbacks suppressed [ 1321.930864][T13401] netlink: 60 bytes leftover after parsing attributes in process `syz.0.16758'. [ 1322.103805][T13403] netlink: 60 bytes leftover after parsing attributes in process `syz.0.16758'. [ 1322.104202][T13403] netlink: 60 bytes leftover after parsing attributes in process `syz.0.16758'. [ 1322.104522][T13403] netlink: 60 bytes leftover after parsing attributes in process `syz.0.16758'. [ 1322.104957][T13403] netlink: 60 bytes leftover after parsing attributes in process `syz.0.16758'. [ 1322.114225][T13403] netlink: 60 bytes leftover after parsing attributes in process `syz.0.16758'. [ 1322.114536][T13403] netlink: 60 bytes leftover after parsing attributes in process `syz.0.16758'. [ 1322.123815][T13403] netlink: 60 bytes leftover after parsing attributes in process `syz.0.16758'. [ 1322.124174][T13403] netlink: 60 bytes leftover after parsing attributes in process `syz.0.16758'. [ 1322.124449][T13403] netlink: 60 bytes leftover after parsing attributes in process `syz.0.16758'. [ 1322.346743][T13407] netlink: 'syz.3.16759': attribute type 1 has an invalid length. [ 1322.467848][ T1462] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1322.467876][ T1462] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1322.698972][T13407] bond15: option mode: invalid value (9) [ 1322.772924][T13407] bond15 (unregistering): Released all slaves [ 1322.913274][T13431] netlink: 'syz.6.16762': attribute type 2 has an invalid length. [ 1323.133193][T13431] !: entered promiscuous mode [ 1323.146155][T13432] !: left promiscuous mode [ 1323.169493][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1325.239252][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1327.234255][T13498] __nla_validate_parse: 23 callbacks suppressed [ 1327.234280][T13498] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16788'. [ 1327.320197][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1327.614208][T13514] netlink: 'syz.2.16792': attribute type 49 has an invalid length. [ 1327.710989][T13522] netlink: 'syz.2.16792': attribute type 49 has an invalid length. [ 1327.960829][T13531] Bluetooth: hci0: unsupported parameter 5161 [ 1327.960858][T13531] Bluetooth: hci0: unsupported parameter 8192 [ 1327.960871][T13531] Bluetooth: hci0: unsupported parameter 5161 [ 1327.960882][T13531] Bluetooth: hci0: unsupported parameter 8192 [ 1329.400321][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1330.059848][T13563] netlink: 32 bytes leftover after parsing attributes in process `syz.5.16806'. [ 1330.156485][T13566] netlink: 288 bytes leftover after parsing attributes in process `syz.5.16806'. [ 1330.386667][T13572] netlink: 28 bytes leftover after parsing attributes in process `syz.2.16807'. [ 1330.386698][T13572] netlink: 28 bytes leftover after parsing attributes in process `syz.2.16807'. [ 1330.832877][T13579] netlink: 'syz.2.16811': attribute type 2 has an invalid length. [ 1330.946194][T13577] Bluetooth: hci0: unsupported parameter 5135 [ 1330.946221][T13577] Bluetooth: hci0: unsupported parameter 8192 [ 1330.946235][T13577] Bluetooth: hci0: unsupported parameter 5135 [ 1330.946247][T13577] Bluetooth: hci0: unsupported parameter 8192 [ 1331.158551][T13586] bond4: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 1331.173203][T13586] bond4 (unregistering): Released all slaves [ 1331.481865][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1332.444856][T13622] netlink: 'syz.5.16819': attribute type 2 has an invalid length. [ 1332.738203][T13636] batadv_slave_0: Caught tx_queue_len zero misconfig [ 1333.559475][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1333.754204][T13663] netlink: 32 bytes leftover after parsing attributes in process `syz.2.16829'. [ 1334.285651][T13681] macvlan0: left promiscuous mode [ 1334.296620][T13681] netlink: 'syz.6.16835': attribute type 2 has an invalid length. [ 1335.108226][T13694] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16839'. [ 1335.108255][T13694] netlink: 5740 bytes leftover after parsing attributes in process `syz.0.16839'. [ 1335.111254][T13694] ip_tables: iptables: counters copy to user failed while replacing table [ 1335.278226][T13697] netlink: 48 bytes leftover after parsing attributes in process `syz.6.16840'. [ 1335.640133][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1335.773181][T13708] netlink: 32 bytes leftover after parsing attributes in process `syz.6.16843'. [ 1335.910346][T13711] netlink: 'syz.0.16844': attribute type 1 has an invalid length. [ 1336.092886][T13711] 8021q: adding VLAN 0 to HW filter on device bond18 [ 1336.206576][ T1403] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1336.206602][ T1403] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1336.791315][T13722] macvlan0: left promiscuous mode [ 1336.791344][T13722] macvlan0: left allmulticast mode [ 1336.791536][T13722] netlink: 'syz.2.16846': attribute type 2 has an invalid length. [ 1337.720581][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1338.457377][T13755] netlink: 32 bytes leftover after parsing attributes in process `syz.5.16855'. [ 1338.542963][T13756] netlink: 'syz.0.16857': attribute type 14 has an invalid length. [ 1338.750216][T13759] netlink: 'syz.6.16858': attribute type 1 has an invalid length. [ 1338.904823][T13759] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1339.034248][T13765] netlink: 244 bytes leftover after parsing attributes in process `syz.3.16859'. [ 1339.711156][T29495] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1339.711219][T29495] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1339.711253][T29495] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1339.711285][T29495] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1339.799704][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1341.325117][T13812] veth1_to_hsr: entered allmulticast mode [ 1341.880134][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1342.318238][T13835] netlink: 'syz.5.16876': attribute type 1 has an invalid length. [ 1343.726145][T13825] syzkaller0: left promiscuous mode [ 1343.726174][T13825] syzkaller0: left allmulticast mode [ 1343.748282][T13826] netlink: 'syz.2.16873': attribute type 2 has an invalid length. [ 1343.783667][T13835] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 1343.962444][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1344.850191][T13854] netlink: 'syz.6.16881': attribute type 83 has an invalid length. [ 1345.046213][T13860] FAULT_INJECTION: forcing a failure. [ 1345.046213][T13860] name failslab, interval 1, probability 0, space 0, times 0 [ 1345.046246][T13860] CPU: 1 UID: 0 PID: 13860 Comm: syz.2.16884 Not tainted syzkaller #0 PREEMPT(full) [ 1345.046268][T13860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1345.046279][T13860] Call Trace: [ 1345.046287][T13860] [ 1345.046296][T13860] dump_stack_lvl+0xe8/0x150 [ 1345.046350][T13860] should_fail_ex+0x3eb/0x540 [ 1345.046381][T13860] ? __alloc_skb+0x1db/0x7a0 [ 1345.046405][T13860] should_failslab+0xa8/0x100 [ 1345.046438][T13860] ? __alloc_skb+0x1db/0x7a0 [ 1345.046455][T13860] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 1345.046480][T13860] ? __alloc_skb+0x18d/0x7a0 [ 1345.046500][T13860] ? __alloc_skb+0x1db/0x7a0 [ 1345.046527][T13860] __alloc_skb+0x1db/0x7a0 [ 1345.046552][T13860] netlink_sendmsg+0x5cd/0xb20 [ 1345.046591][T13860] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1345.046624][T13860] ? aa_sock_msg_perm+0x144/0x210 [ 1345.046664][T13860] ? apparmor_socket_sendmsg+0x98/0x360 [ 1345.046694][T13860] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1345.046723][T13860] sock_sendmsg_nosec+0x14e/0x190 [ 1345.046754][T13860] ____sys_sendmsg+0x54e/0x850 [ 1345.046782][T13860] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1345.046813][T13860] ? import_iovec+0x73/0xa0 [ 1345.046843][T13860] ___sys_sendmsg+0x2a5/0x360 [ 1345.046863][T13860] ? __lock_acquire+0x747/0x2de0 [ 1345.046894][T13860] ? __pfx____sys_sendmsg+0x10/0x10 [ 1345.046955][T13860] ? __fget_files+0x3a2/0x420 [ 1345.046981][T13860] ? __fget_files+0x2a/0x420 [ 1345.047015][T13860] __x64_sys_sendmsg+0x1b1/0x290 [ 1345.047041][T13860] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1345.047086][T13860] do_syscall_64+0x166/0x520 [ 1345.047113][T13860] ? trace_irq_disable+0x3b/0x140 [ 1345.047140][T13860] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1345.047162][T13860] ? clear_bhb_loop+0x70/0xc0 [ 1345.047186][T13860] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1345.047206][T13860] RIP: 0033:0x7f87fdd9fb19 [ 1345.047229][T13860] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1345.047246][T13860] RSP: 002b:00007f87fec35028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1345.047269][T13860] RAX: ffffffffffffffda RBX: 00007f87fe025fa0 RCX: 00007f87fdd9fb19 [ 1345.047283][T13860] RDX: 0000000000008000 RSI: 0000200000000400 RDI: 0000000000000003 [ 1345.047297][T13860] RBP: 00007f87fec35090 R08: 0000000000000000 R09: 0000000000000000 [ 1345.047317][T13860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1345.047329][T13860] R13: 00007f87fe026038 R14: 00007f87fe025fa0 R15: 00007ffd0f7593e8 [ 1345.047362][T13860] [ 1345.539835][T13866] netlink: 'syz.6.16885': attribute type 1 has an invalid length. [ 1345.776967][T13866] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1345.805979][T13872] netlink: 36 bytes leftover after parsing attributes in process `syz.2.16886'. [ 1346.041449][T13872] netlink: 'syz.2.16886': attribute type 2 has an invalid length. [ 1346.053722][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1346.241699][T13880] syzkaller0: left promiscuous mode [ 1346.241727][T13880] syzkaller0: left allmulticast mode [ 1347.198563][T13899] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1347.358164][T13894] netlink: 32 bytes leftover after parsing attributes in process `syz.6.16894'. [ 1348.120549][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1348.367346][T11108] Bluetooth: hci5: unexpected cc 0x2040 length: 2 > 1 [ 1348.367421][T11108] Bluetooth: hci5: unexpected event for opcode 0x2040 [ 1348.400579][T13925] IPVS: set_ctl: invalid protocol: 135 224.0.0.1:20003 [ 1348.402667][T13924] netlink: 'syz.5.16902': attribute type 6 has an invalid length. [ 1348.535537][T13925] IPVS: set_ctl: invalid protocol: 135 224.0.0.1:20003 [ 1349.347452][T13942] netlink: 'syz.2.16906': attribute type 1 has an invalid length. [ 1349.347482][T13942] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16906'. [ 1349.791179][T13946] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 1349.791179][T13946] Please contact the netfilter-devel mailing list or update your nftables rules. [ 1350.122788][T13954] openvswitch: netlink: Missing valid actions attribute. [ 1350.122831][T13954] openvswitch: netlink: Actions may not be safe on all matching packets [ 1350.199332][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1350.215738][T13953] syzkaller1: entered promiscuous mode [ 1350.215975][T13953] syzkaller1: entered allmulticast mode [ 1350.339610][T13959] netlink: 8 bytes leftover after parsing attributes in process `syz.6.16912'. [ 1350.436788][T13962] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16914'. [ 1350.489085][T13965] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16914'. [ 1351.226736][ C1] vcan0: j1939_tp_rxtimer: 0xffff88808ae9a800: rx timeout, send abort [ 1351.228029][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88808ae9a800: 0x10000: (3) A timeout occurred and this is the connection abort to close the session. [ 1351.682620][T13993] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16921'. [ 1351.682651][T13993] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16921'. [ 1351.736241][T13993] netlink: 'syz.2.16921': attribute type 83 has an invalid length. [ 1351.821855][T13993] netlink: 'syz.2.16921': attribute type 3 has an invalid length. [ 1352.279147][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1352.875050][T14019] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 1352.906549][T14020] netlink: 4 bytes leftover after parsing attributes in process `syz.6.16931'. [ 1352.990302][T14022] netlink: 'syz.6.16931': attribute type 12 has an invalid length. [ 1352.990334][T14022] netlink: 132 bytes leftover after parsing attributes in process `syz.6.16931'. [ 1353.093804][T14024] netlink: 28 bytes leftover after parsing attributes in process `syz.2.16932'. [ 1353.224515][T14025] netlink: 24 bytes leftover after parsing attributes in process `syz.2.16932'. [ 1353.246761][T14025] netlink: 'syz.2.16932': attribute type 34 has an invalid length. [ 1353.246784][T14025] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16932'. [ 1354.197326][T14039] tc_dump_action: action bad kind [ 1354.368965][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1355.396800][T14056] bond4 (unregistering): Released all slaves [ 1355.424487][T14071] netlink: 'syz.2.16946': attribute type 1 has an invalid length. [ 1355.651608][T14071] 8021q: adding VLAN 0 to HW filter on device bond23 [ 1356.112516][T14084] netlink: 824 bytes leftover after parsing attributes in process `syz.5.16952'. [ 1356.403256][T14091] netlink: 'syz.2.16951': attribute type 2 has an invalid length. [ 1356.449726][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1357.162052][T14109] openvswitch: netlink: Missing valid actions attribute. [ 1357.162094][T14109] openvswitch: netlink: Actions may not be safe on all matching packets [ 1357.611344][T14113] netlink: 8 bytes leftover after parsing attributes in process `syz.5.16961'. [ 1357.611385][T14113] netlink: 8 bytes leftover after parsing attributes in process `syz.5.16961'. [ 1357.622711][T14112] macvlan0: entered promiscuous mode [ 1357.930238][T14121] FAULT_INJECTION: forcing a failure. [ 1357.930238][T14121] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1357.930272][T14121] CPU: 1 UID: 0 PID: 14121 Comm: syz.3.16963 Not tainted syzkaller #0 PREEMPT(full) [ 1357.930295][T14121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1357.930306][T14121] Call Trace: [ 1357.930315][T14121] [ 1357.930324][T14121] dump_stack_lvl+0xe8/0x150 [ 1357.930362][T14121] should_fail_ex+0x3eb/0x540 [ 1357.930392][T14121] _copy_from_user+0x2d/0xb0 [ 1357.930419][T14121] ___sys_sendmsg+0x1c6/0x360 [ 1357.930441][T14121] ? __lock_acquire+0x747/0x2de0 [ 1357.930472][T14121] ? __pfx____sys_sendmsg+0x10/0x10 [ 1357.930534][T14121] ? __fget_files+0x3a2/0x420 [ 1357.930559][T14121] ? __fget_files+0x2a/0x420 [ 1357.930592][T14121] __x64_sys_sendmsg+0x1b1/0x290 [ 1357.930618][T14121] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1357.930664][T14121] do_syscall_64+0x166/0x520 [ 1357.930689][T14121] ? trace_irq_disable+0x3b/0x140 [ 1357.930722][T14121] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1357.930742][T14121] ? clear_bhb_loop+0x70/0xc0 [ 1357.930767][T14121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1357.930786][T14121] RIP: 0033:0x7eff9019fb19 [ 1357.930806][T14121] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1357.930823][T14121] RSP: 002b:00007eff8e3f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1357.930846][T14121] RAX: ffffffffffffffda RBX: 00007eff90426090 RCX: 00007eff9019fb19 [ 1357.930861][T14121] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000005 [ 1357.930874][T14121] RBP: 00007eff8e3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1357.930886][T14121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1357.930898][T14121] R13: 00007eff90426128 R14: 00007eff90426090 R15: 00007ffd4ad22ce8 [ 1357.930931][T14121] [ 1358.519912][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1358.538511][T14129] netlink: 'syz.5.16967': attribute type 1 has an invalid length. [ 1358.786175][T14129] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1358.904767][T14146] netlink: 'syz.3.16970': attribute type 7 has an invalid length. [ 1358.933102][T14146] Bluetooth: hci0: invalid length 0, exp 4 for type 32 [ 1359.436244][T14155] netlink: 20 bytes leftover after parsing attributes in process `syz.0.16971'. [ 1360.600112][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1361.711365][T14189] netlink: 'syz.0.16981': attribute type 2 has an invalid length. [ 1362.087039][T14213] netlink: 12 bytes leftover after parsing attributes in process `syz.6.16986'. [ 1362.541928][T14223] netlink: 'syz.2.16987': attribute type 2 has an invalid length. [ 1362.680041][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1362.785566][T14228] syzkaller0: entered promiscuous mode [ 1362.785593][T14228] syzkaller0: entered allmulticast mode [ 1363.057436][T14233] IPVS: sh: FWM 1 0x00000001 - no destination available [ 1363.789798][T14238] netlink: 128 bytes leftover after parsing attributes in process `syz.0.16995'. [ 1364.281834][T11108] Bluetooth: hci5: command 0x0405 tx timeout [ 1364.759135][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1365.738747][T14272] netlink: 32 bytes leftover after parsing attributes in process `syz.5.17006'. [ 1366.617473][ T38] tipc: Subscription rejected, illegal request [ 1366.710860][T14279] block nbd0: NBD_DISCONNECT [ 1366.710891][T14279] block nbd0: Send disconnect failed -32 [ 1366.710910][T14279] block nbd0: shutting down sockets [ 1366.838938][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1367.019019][T14282] netlink: 'syz.0.17010': attribute type 2 has an invalid length. [ 1367.319864][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1368.102134][T14306] netlink: 16 bytes leftover after parsing attributes in process `syz.2.17017'. [ 1368.102179][T14306] netlink: 16 bytes leftover after parsing attributes in process `syz.2.17017'. [ 1368.308614][T14312] netlink: 'syz.0.17018': attribute type 1 has an invalid length. [ 1368.560523][T14312] 8021q: adding VLAN 0 to HW filter on device bond19 [ 1368.583056][T14323] netlink: 'syz.5.17019': attribute type 1 has an invalid length. [ 1368.640154][T14316] bond19: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1368.814007][T14323] bond5: option mode: invalid value (7) [ 1368.830823][T14323] bond5 (unregistering): Released all slaves [ 1368.919214][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1369.447278][T14336] netlink: 'syz.2.17023': attribute type 1 has an invalid length. [ 1369.723375][T14336] 8021q: adding VLAN 0 to HW filter on device bond24 [ 1370.573948][T14350] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.17026'. [ 1370.629871][T14352] netlink: 24 bytes leftover after parsing attributes in process `syz.6.17027'. [ 1371.007209][T14357] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17028'. [ 1371.008850][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1371.544930][T14365] siw: device registration error -23 [ 1371.973607][T14370] 8021q: adding VLAN 0 to HW filter on device bond20 [ 1372.269225][T14385] netlink: 'syz.0.17039': attribute type 1 has an invalid length. [ 1372.372364][T14385] 8021q: adding VLAN 0 to HW filter on device bond21 [ 1372.440380][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1372.960393][T14397] netlink: 15 bytes leftover after parsing attributes in process `syz.6.17042'. [ 1373.080500][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1373.661590][T14407] can: request_module (can-proto-4) failed. [ 1373.905655][T14421] netlink: 'syz.2.17047': attribute type 2 has an invalid length. [ 1374.511340][T14424] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1374.944700][T14445] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17056'. [ 1375.032692][T14439] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17053'. [ 1375.032793][T14439] syz_tun: left allmulticast mode [ 1375.032814][T14439] syz_tun: left promiscuous mode [ 1375.033065][T14439] bridge0: port 4(syz_tun) entered disabled state [ 1375.158926][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1375.195739][T14439] gretap0: left allmulticast mode [ 1375.195770][T14439] gretap0: left promiscuous mode [ 1375.233973][T14439] bridge0: port 3(gretap0) entered disabled state [ 1375.427845][T14439] bridge_slave_1: left allmulticast mode [ 1375.427879][T14439] bridge_slave_1: left promiscuous mode [ 1375.454191][T14439] bridge0: port 2(bridge_slave_1) entered disabled state [ 1375.480251][T14439] bridge_slave_0: left allmulticast mode [ 1375.486715][T14439] bridge_slave_0: left promiscuous mode [ 1375.487797][T14439] bridge0: port 1(bridge_slave_0) entered disabled state [ 1375.637605][T14463] netlink: 'syz.3.17059': attribute type 9 has an invalid length. [ 1375.795799][T14470] netlink: 'syz.3.17059': attribute type 9 has an invalid length. [ 1376.650307][T14486] netlink: 'syz.2.17061': attribute type 1 has an invalid length. [ 1376.830580][T14486] 8021q: adding VLAN 0 to HW filter on device bond25 [ 1377.239413][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1378.547265][T14523] pimreg: left allmulticast mode [ 1378.547423][T14523] dvmrp3: left allmulticast mode [ 1378.988605][T14530] x_tables: duplicate underflow at hook 4 [ 1379.043286][T14530] netlink: 8 bytes leftover after parsing attributes in process `syz.6.17071'. [ 1379.320747][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1380.367393][T14560] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17081'. [ 1380.367423][T14560] openvswitch: netlink: Key type 907 is out of range max 32 [ 1380.367703][T14549] netlink: 24 bytes leftover after parsing attributes in process `syz.5.17076'. [ 1380.367729][T14549] netlink: 'syz.5.17076': attribute type 3 has an invalid length. [ 1380.367747][T14549] netlink: 24 bytes leftover after parsing attributes in process `syz.5.17076'. [ 1380.385338][T14549] netlink: 'syz.5.17076': attribute type 3 has an invalid length. [ 1380.532584][T14567] netlink: 36 bytes leftover after parsing attributes in process `syz.6.17082'. [ 1380.535644][T14567] IPVS: sh: FWM 1 0x00000001 - no destination available [ 1380.614668][T14549] netlink: 8 bytes leftover after parsing attributes in process `syz.5.17076'. [ 1381.090735][T14570] netlink: 8 bytes leftover after parsing attributes in process `syz.6.17083'. [ 1381.283243][T14574] netlink: 32 bytes leftover after parsing attributes in process `syz.5.17084'. [ 1381.381337][T14573] netlink: 'syz.3.17085': attribute type 1 has an invalid length. [ 1381.409378][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1381.756063][T14573] 8021q: adding VLAN 0 to HW filter on device bond15 [ 1381.815562][T14588] netlink: 'syz.2.17088': attribute type 1 has an invalid length. [ 1381.952122][T14577] bond15: (slave geneve5): making interface the new active one [ 1381.981098][T14577] bond15: (slave geneve5): Enslaving as an active interface with an up link [ 1382.275097][T14588] 8021q: adding VLAN 0 to HW filter on device bond26 [ 1383.479612][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1385.569090][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1387.648880][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1389.719521][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1391.798881][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1393.889142][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1395.968830][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1398.044108][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1400.118884][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1402.209069][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1404.288890][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1406.359127][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1408.439849][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1410.519110][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1412.598873][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1414.679180][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1416.769146][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1418.849211][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1420.919355][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1420.964953][T11108] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1422.063161][T23381] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1422.066070][T23381] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1422.068624][T23381] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1422.078085][T23381] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1422.595145][ T5723] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1422.606357][ T5723] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1422.700999][ T5723] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1422.999164][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1423.009497][ T5723] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1423.134377][ T5723] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1424.364257][T11108] Bluetooth: hci1: command tx timeout [ 1425.079890][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1425.741756][T11108] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1426.438854][T11108] Bluetooth: hci1: command tx timeout [ 1426.829715][T11108] Bluetooth: hci6: command tx timeout [ 1427.159137][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1427.496974][T11108] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1427.752309][T11108] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1428.117854][T11108] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1428.120458][T11108] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1428.519699][T11108] Bluetooth: hci1: command tx timeout [ 1428.849862][T11108] Bluetooth: hci6: command tx timeout [ 1429.239475][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1430.553309][T11108] Bluetooth: hci7: command tx timeout [ 1430.664183][T11108] Bluetooth: hci1: command tx timeout [ 1430.998694][T11108] Bluetooth: hci6: command tx timeout [ 1431.319697][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1432.655966][T11108] Bluetooth: hci7: command tx timeout [ 1433.160879][T11108] Bluetooth: hci6: command tx timeout [ 1433.409094][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1434.011768][ T5723] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1434.030182][ T5723] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1434.033369][ T5723] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1434.700264][ T5723] Bluetooth: hci7: command tx timeout [ 1435.029245][ T5723] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1435.200344][ T5723] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1435.489086][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1436.760446][ T5723] Bluetooth: hci7: command tx timeout [ 1437.559219][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1438.114316][ T5723] Bluetooth: hci8: command tx timeout [ 1439.100384][T14659] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1439.107952][T14659] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1439.639919][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1439.789854][T14659] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1439.822248][T14659] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1439.823836][T14659] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1440.210085][T14659] Bluetooth: hci8: command tx timeout [ 1441.728836][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1442.289205][ T5723] Bluetooth: hci8: command tx timeout [ 1442.454290][ T5723] Bluetooth: hci9: command tx timeout [ 1443.799090][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1444.378709][ T5723] Bluetooth: hci8: command tx timeout [ 1444.527866][ T5723] Bluetooth: hci9: command tx timeout [ 1445.878825][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1446.663352][ T5723] Bluetooth: hci9: command tx timeout [ 1447.959122][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1448.687701][ T5723] Bluetooth: hci9: command tx timeout [ 1450.038868][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1452.119575][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1454.208867][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1456.289086][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1458.359320][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1460.439697][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1462.528892][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1464.610443][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1466.678817][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1467.791367][ T5718] bridge0: port 1(syz_tun) entered disabled state [ 1468.769054][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1470.849017][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1472.929226][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1473.301305][ T5718] syz_tun (unregistering): left allmulticast mode [ 1473.301751][ T5718] syz_tun (unregistering): left promiscuous mode [ 1473.302254][ T5718] bridge0: port 1(syz_tun) entered disabled state [ 1474.998797][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1477.079098][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1479.158857][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1481.239633][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1483.328910][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1484.501060][T14659] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1484.570150][T14659] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1484.601534][T14659] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1484.603948][T14659] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1485.031200][T14659] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1485.399098][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1487.488964][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1487.969963][ T5723] Bluetooth: hci0: command tx timeout [ 1489.559197][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1490.302916][T14659] Bluetooth: hci0: command tx timeout [ 1490.597394][T14659] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1490.681868][T14659] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1490.684042][T14659] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1490.686613][T14659] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1490.688132][T14659] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1491.640391][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1492.159500][T11105] bridge0: port 3(syz_tun) entered disabled state [ 1492.528866][T14659] Bluetooth: hci0: command tx timeout [ 1493.729051][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1494.599502][T14659] Bluetooth: hci2: command tx timeout [ 1494.600401][T14659] Bluetooth: hci0: command tx timeout [ 1495.240653][ T5723] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 1495.798777][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1496.679418][ T5723] Bluetooth: hci2: command tx timeout [ 1497.879679][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1498.849817][ T5723] Bluetooth: hci2: command tx timeout [ 1499.495772][T11105] syz_tun (unregistering): left allmulticast mode [ 1499.496307][T11105] syz_tun (unregistering): left promiscuous mode [ 1499.496890][T11105] bridge0: port 3(syz_tun) entered disabled state [ 1499.968801][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1501.121479][ T5723] Bluetooth: hci2: command tx timeout [ 1502.039565][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1502.852039][T11108] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1503.582722][T11108] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1503.586962][T11108] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1503.604002][T11108] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1503.614709][T11108] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1504.128832][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1504.861666][ T5723] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1504.866995][ T5723] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1504.868457][ T5723] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1505.550596][ T5723] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1505.584950][ T5723] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1506.139206][T11108] Bluetooth: hci4: command tx timeout [ 1506.200004][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1508.210646][T11108] Bluetooth: hci4: command tx timeout [ 1508.278794][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1508.876572][T11108] Bluetooth: hci5: command tx timeout [ 1510.368951][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1510.488480][T11108] Bluetooth: hci4: command tx timeout [ 1510.680844][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1510.929891][ T5723] Bluetooth: hci5: command tx timeout [ 1512.439381][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1512.766367][ T5723] Bluetooth: hci4: command tx timeout [ 1513.011656][ T5723] Bluetooth: hci5: command tx timeout [ 1514.519537][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1515.111144][ T5723] Bluetooth: hci5: command tx timeout [ 1515.799395][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1516.598846][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1518.678966][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1520.758819][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1522.838937][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1524.928780][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1526.999172][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1529.088988][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1531.162518][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1533.239141][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1535.328960][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1537.399279][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1539.489122][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1541.568756][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1543.639117][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1545.718813][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1547.799172][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1549.888833][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1550.733212][ T1429] dvmrp0: left allmulticast mode [ 1550.738483][ T1429] bond9: left allmulticast mode [ 1550.738502][ T1429] ip6gre1: left allmulticast mode [ 1551.968936][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1554.048779][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1556.129066][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1558.199309][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1558.848708][T11108] Bluetooth: hci8: command 0x0406 tx timeout [ 1560.279243][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1562.368761][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1564.439762][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1566.518939][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1567.529473][T11108] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1567.536880][T11108] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1567.540586][T11108] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1567.575174][T11108] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1567.585600][T11108] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1568.599171][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1569.777066][T11108] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1569.867128][T11108] Bluetooth: hci1: command tx timeout [ 1570.688809][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1571.381211][T11108] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1571.560612][T11108] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1571.563231][T11108] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1571.564937][T11108] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1571.878736][T11108] Bluetooth: hci1: command tx timeout [ 1572.496660][ T5723] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1572.758973][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1573.020236][ T5723] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1573.022462][ T5723] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1573.220854][ T5723] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1573.340914][ T5723] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1574.061013][T11108] Bluetooth: hci1: command tx timeout [ 1574.512328][T11108] Bluetooth: hci3: command tx timeout [ 1574.848764][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1575.485153][T11108] Bluetooth: hci6: command tx timeout [ 1576.122166][T14659] Bluetooth: hci1: command tx timeout [ 1576.519372][T14659] Bluetooth: hci3: command tx timeout [ 1576.535442][T14659] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1576.873705][T14659] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1576.919436][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1577.011532][T14659] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1577.019695][T23381] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1577.036260][T23381] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1577.046659][T23381] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1577.058269][T23381] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1577.083191][T23381] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1577.145658][T11108] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1577.147208][T11108] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1577.559830][T14758] Bluetooth: hci6: command tx timeout [ 1578.680240][T14758] Bluetooth: hci3: command tx timeout [ 1578.998803][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1579.200106][T14758] Bluetooth: hci7: command tx timeout [ 1579.498479][T14659] Bluetooth: hci9: command tx timeout [ 1579.639365][T14659] Bluetooth: hci6: command tx timeout [ 1580.760641][T14659] Bluetooth: hci3: command tx timeout [ 1581.089223][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1581.239341][T14659] Bluetooth: hci7: command tx timeout [ 1581.559192][T14659] Bluetooth: hci9: command tx timeout [ 1581.759831][T14659] Bluetooth: hci6: command tx timeout [ 1583.168763][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1583.628756][T14758] Bluetooth: hci7: command tx timeout [ 1583.719979][T14758] Bluetooth: hci9: command tx timeout [ 1585.239633][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1585.675691][T14758] Bluetooth: hci7: command tx timeout [ 1585.816551][T14758] Bluetooth: hci9: command tx timeout [ 1587.318901][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1589.409019][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1591.478737][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1593.559780][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1595.639252][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1597.719315][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1599.799253][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1601.878916][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1603.969111][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1606.042858][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1608.119265][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1610.049238][T14659] Bluetooth: hci0: command 0x0406 tx timeout [ 1610.198921][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1612.290648][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1614.368911][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1615.395296][T14659] Bluetooth: hci2: command 0x0406 tx timeout [ 1616.448913][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1618.528901][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1620.608775][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1622.679286][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1624.759235][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1626.838992][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1628.928728][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1630.613812][T11108] Bluetooth: hci4: command 0x0406 tx timeout [ 1630.613919][T11108] Bluetooth: hci5: command 0x0406 tx timeout [ 1630.998984][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1633.079632][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1635.150272][T11108] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1635.169072][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1635.548495][T11108] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1635.558389][T11108] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1635.758782][T14758] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1635.779715][T14758] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1636.897597][ T5723] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1637.239493][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1637.240727][T11108] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1637.399360][T14659] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1637.596668][T14659] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1638.143735][T14659] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1638.777643][T14659] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1638.820060][T14659] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1638.822387][T14659] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1638.824687][T14659] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1638.841416][T14659] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1639.319223][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1639.497140][T11108] Bluetooth: hci8: command tx timeout [ 1640.439837][T14758] Bluetooth: hci10: command tx timeout [ 1641.398787][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1641.658954][T11108] Bluetooth: hci11: command tx timeout [ 1641.659932][T11108] Bluetooth: hci8: command tx timeout [ 1641.990150][T14659] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 1642.327265][T11108] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 1642.343102][T11108] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 1642.526201][T11108] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 1642.526289][T11108] Bluetooth: hci10: command tx timeout [ 1642.675835][T14659] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 1643.489115][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1643.729273][T14659] Bluetooth: hci11: command tx timeout [ 1643.729383][T14758] Bluetooth: hci8: command tx timeout [ 1644.600942][T14758] Bluetooth: hci10: command tx timeout [ 1645.080210][T14758] Bluetooth: hci12: command tx timeout [ 1645.568764][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1645.830284][T14659] Bluetooth: hci8: command tx timeout [ 1645.830326][T14659] Bluetooth: hci11: command tx timeout [ 1645.832094][T11108] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 1646.680212][T11108] Bluetooth: hci10: command tx timeout [ 1647.028939][T11108] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 1647.052489][T11108] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 1647.091675][T11108] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 1647.093388][T11108] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 1647.201954][T14758] Bluetooth: hci12: command tx timeout [ 1647.639820][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1647.696136][ T32] INFO: task syz-executor:14703 blocked for more than 143 seconds. [ 1647.696168][ T32] Not tainted syzkaller #0 [ 1647.696179][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1647.696190][ T32] task:syz-executor state:D stack:26360 pid:14703 tgid:14703 ppid:1 task_flags:0x400140 flags:0x00080002 [ 1647.696258][ T32] Call Trace: [ 1647.696267][ T32] [ 1647.696283][ T32] __schedule+0x17dd/0x5830 [ 1647.696355][ T32] ? __pfx___schedule+0x10/0x10 [ 1647.696391][ T32] ? schedule+0x90/0x2b0 [ 1647.696419][ T32] schedule+0x164/0x2b0 [ 1647.696446][ T32] schedule_preempt_disabled+0x13/0x30 [ 1647.696469][ T32] __mutex_lock+0x7c4/0x15a0 [ 1647.696500][ T32] ? __mutex_lock+0x5cd/0x15a0 [ 1647.696531][ T32] ? inet_rtm_newaddr+0x470/0x19f0 [ 1647.696691][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 1647.696732][ T32] ? __nla_parse+0x40/0x60 [ 1647.696770][ T32] inet_rtm_newaddr+0x470/0x19f0 [ 1647.696795][ T32] ? kernel_text_address+0xa5/0xe0 [ 1647.696838][ T32] ? __pfx_hook_capable+0x10/0x10 [ 1647.696861][ T32] ? unwind_get_return_address+0x4d/0x90 [ 1647.696895][ T32] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1647.696923][ T32] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 1647.696970][ T32] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 1647.696989][ T32] rtnetlink_rcv_msg+0x802/0xc00 [ 1647.697019][ T32] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1647.697041][ T32] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1647.697064][ T32] ? __lock_acquire+0x747/0x2de0 [ 1647.697105][ T32] netlink_rcv_skb+0x226/0x4a0 [ 1647.697139][ T32] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1647.697165][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1647.697211][ T32] ? netlink_deliver_tap+0x2e/0x1b0 [ 1647.697241][ T32] ? netlink_deliver_tap+0x2e/0x1b0 [ 1647.697291][ T32] netlink_unicast+0x8ef/0xa80 [ 1647.697340][ T32] netlink_sendmsg+0x7f0/0xb20 [ 1647.697378][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1647.697413][ T32] ? aa_sock_msg_perm+0x144/0x210 [ 1647.697451][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 1647.697482][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1647.697512][ T32] sock_sendmsg_nosec+0x14e/0x190 [ 1647.697547][ T32] __sys_sendto+0x408/0x5a0 [ 1647.697576][ T32] ? __pfx___sys_sendto+0x10/0x10 [ 1647.697643][ T32] ? do_user_addr_fault+0xd3f/0x1480 [ 1647.697676][ T32] __x64_sys_sendto+0xde/0x100 [ 1647.697703][ T32] do_syscall_64+0x166/0x520 [ 1647.697728][ T32] ? trace_irq_disable+0x3b/0x140 [ 1647.697757][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1647.697780][ T32] ? clear_bhb_loop+0x70/0xc0 [ 1647.697807][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1647.697829][ T32] RIP: 0033:0x7f8e72b6034e [ 1647.697850][ T32] RSP: 002b:00007fffbb3487d8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1647.697873][ T32] RAX: ffffffffffffffda RBX: 0000555577784500 RCX: 00007f8e72b6034e [ 1647.697889][ T32] RDX: 0000000000000028 RSI: 00007f8e73954670 RDI: 0000000000000003 [ 1647.697918][ T32] RBP: 0000000000000001 R08: 00007fffbb348854 R09: 000000000000000c [ 1647.697931][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1647.697944][ T32] R13: 0000000000000000 R14: 00007f8e73954670 R15: 0000000000000000 [ 1647.697979][ T32] [ 1647.697988][ T32] INFO: task syz-executor:14708 blocked for more than 143 seconds. [ 1647.698004][ T32] Not tainted syzkaller #0 [ 1647.698014][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1647.698024][ T32] task:syz-executor state:D stack:26360 pid:14708 tgid:14708 ppid:1 task_flags:0x400140 flags:0x00080002 [ 1647.698080][ T32] Call Trace: [ 1647.698088][ T32] [ 1647.698101][ T32] __schedule+0x17dd/0x5830 [ 1647.698159][ T32] ? __pfx___schedule+0x10/0x10 [ 1647.698194][ T32] ? schedule+0x90/0x2b0 [ 1647.698223][ T32] schedule+0x164/0x2b0 [ 1647.698249][ T32] schedule_preempt_disabled+0x13/0x30 [ 1647.698273][ T32] __mutex_lock+0x7c4/0x15a0 [ 1647.698304][ T32] ? __mutex_lock+0x5cd/0x15a0 [ 1647.698336][ T32] ? inet_rtm_newaddr+0x470/0x19f0 [ 1647.698360][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 1647.698401][ T32] ? __nla_parse+0x40/0x60 [ 1647.698435][ T32] inet_rtm_newaddr+0x470/0x19f0 [ 1647.698460][ T32] ? kernel_text_address+0xa5/0xe0 [ 1647.698487][ T32] ? __pfx_hook_capable+0x10/0x10 [ 1647.698507][ T32] ? unwind_get_return_address+0x4d/0x90 [ 1647.698533][ T32] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1647.879243][T14758] Bluetooth: hci11: command tx timeout [ 1649.069787][ T32] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 1649.069857][ T32] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 1649.069878][ T32] rtnetlink_rcv_msg+0x802/0xc00 [ 1649.069907][ T32] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1649.069937][ T32] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1649.069961][ T32] ? __lock_acquire+0x747/0x2de0 [ 1649.070002][ T32] netlink_rcv_skb+0x226/0x4a0 [ 1649.070034][ T32] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1649.070058][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1649.070103][ T32] ? netlink_deliver_tap+0x2e/0x1b0 [ 1649.070131][ T32] ? netlink_deliver_tap+0x2e/0x1b0 [ 1649.070167][ T32] netlink_unicast+0x8ef/0xa80 [ 1649.070215][ T32] netlink_sendmsg+0x7f0/0xb20 [ 1649.070253][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1649.070287][ T32] ? aa_sock_msg_perm+0x144/0x210 [ 1649.070324][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 1649.070354][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1649.070383][ T32] sock_sendmsg_nosec+0x14e/0x190 [ 1649.070416][ T32] __sys_sendto+0x408/0x5a0 [ 1649.070444][ T32] ? __pfx___sys_sendto+0x10/0x10 [ 1649.070499][ T32] ? do_user_addr_fault+0xd3f/0x1480 [ 1649.070530][ T32] __x64_sys_sendto+0xde/0x100 [ 1649.070556][ T32] do_syscall_64+0x166/0x520 [ 1649.070582][ T32] ? trace_irq_disable+0x3b/0x140 [ 1649.070608][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1649.070629][ T32] ? clear_bhb_loop+0x70/0xc0 [ 1649.070655][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1649.070676][ T32] RIP: 0033:0x7ff29e36034e [ 1649.070696][ T32] RSP: 002b:00007ffd00bdc648 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1649.070720][ T32] RAX: ffffffffffffffda RBX: 00005555816e8500 RCX: 00007ff29e36034e [ 1649.070736][ T32] RDX: 0000000000000028 RSI: 00007ff29f154670 RDI: 0000000000000003 [ 1649.070749][ T32] RBP: 0000000000000001 R08: 00007ffd00bdc6c4 R09: 000000000000000c [ 1649.070762][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1649.070774][ T32] R13: 0000000000000000 R14: 00007ff29f154670 R15: 0000000000000000 [ 1649.070809][ T32] [ 1649.070837][ T32] [ 1649.070837][ T32] Showing all locks held in the system: [ 1649.070846][ T32] locks held by kworker/u8:0/12: 3, last CPU#0: [ 1649.070862][ T32] #0: ffff88813fe4c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1649.070920][ T32] #1: ffffc90000117c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1649.070985][ T32] #2: ffff88807e8e8258 (&devlink->lock_key#7){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb30 [ 1649.071167][ T32] locks held by pr/ttyS0/31: 1, last CPU#1: [ 1649.071182][ T32] #0: ffffffff90033d58 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60 [ 1649.071235][ T32] locks held by khungtaskd/32: 1, last CPU#1: [ 1649.071248][ T32] #0: ffffffff9015a2a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1649.071312][ T32] locks held by kworker/u8:2/38: 3, last CPU#1: [ 1649.071325][ T32] #0: ffff88813fe4c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1649.071379][ T32] #1: ffffc90000ae7c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1649.071433][ T32] #2: ffff88808a0eb258 (&devlink->lock_key#6){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb30 [ 1649.071490][ T32] locks held by kworker/u8:4/63: 2, last CPU#1: [ 1649.071504][ T32] #0: ffff88813fe4c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1649.071557][ T32] #1: ffffc9000204fc40 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1649.071615][ T32] locks held by kworker/u8:8/308: 3, on CPU#1: [ 1649.071628][ T32] #0: ffff88801d707948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1649.071682][ T32] #1: ffffc900030bfc40 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1649.071737][ T32] #2: ffffffff91693720 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 1649.071859][ T32] locks held by kworker/u8:11/1429: 5, on CPU#0: [ 1649.071873][ T32] #0: ffff88801d28e148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1649.071935][ T32] #1: ffffc900059a7c40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1649.071989][ T32] #2: ffffffff91684a48 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810 [ 1649.072059][ T32] #3: ffffffff91693720 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x28e/0x8f0 [ 1649.072105][ T32] #4: ffffffff9172c320 (flowtable_lock){+.+.}-{4:4}, at: nf_flow_table_cleanup+0x24/0x100 [ 1649.072189][ T32] locks held by kworker/u8:15/1553: 4, last CPU#1: [ 1649.072203][ T32] #0: ffff888036622948 ((wq_completion)krds_cp_wq#9/5){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1649.072258][ T32] #1: ffffc90005d37c40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1649.304579][T14758] Bluetooth: hci12: command tx timeout [ 1649.324428][T14758] Bluetooth: hci13: command tx timeout [ 1649.724495][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1649.725828][ T32] #2: ffff88808467d880 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x ** replaying previous printk message ** [ 1649.725828][ T32] #2: ffff88808467d880 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 1649.726025][ T32] #3: ffff8880b833c5e0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2d/0x160 [ 1649.726102][ T32] locks held by getty/5390: 2, on CPU#1: [ 1649.726117][ T32] #0: ffff888036ced0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1649.726207][ T32] #1: ffffc900032362e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 1649.726253][ T32] locks held by syz-executor/5622: 1, last CPU#0: [ 1649.726268][ T32] #0: ffff888076f9a800 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x19c/0xa40 [ 1649.726320][ T32] locks held by kworker/0:4/5831: 2, last CPU#0: [ 1649.726334][ T32] #0: ffff88813fe0dd48 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1649.726389][ T32] #1: ffffc90004b3fc40 ((work_completion)(&barr->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1649.726448][ T32] locks held by kworker/u8:3/19326: 4, last CPU#1: [ 1649.726461][ T32] #0: ffff888036626948 ((wq_completion)krds_cp_wq#9/7){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1649.726510][ T32] #1: ffffc90006507c40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1649.726563][ T32] #2: ffff88808467d280 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 1649.726612][ T32] #3: ffff8880377fb960 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: __inet6_bind+0x301/0xf30 [ 1649.726690][ T32] locks held by kworker/u8:5/22918: 2, last CPU#1: [ 1649.726704][ T32] #0: ffff88813fe4c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1649.726756][ T32] #1: ffffc9000378fc40 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1649.726810][ T32] locks held by kworker/u8:6/22919: 4, last CPU#1: [ 1649.726823][ T32] #0: ffff88807ceef148 ((wq_completion)krds_cp_wq#9/2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1649.727152][ T32] #1: ffffc900085dfc40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1649.727208][ T32] #2: ffff88808467e180 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 1649.727258][ T32] #3: ffff88805679aba0 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: __inet6_bind+0x301/0xf30 [ 1649.727306][ T32] locks held by kworker/u8:7/29495: 4, last CPU#1: [ 1649.727320][ T32] #0: ffff888036620148 ((wq_completion)krds_cp_wq#9/6){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1649.727373][ T32] #1: ffffc90004c0fc40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1649.727426][ T32] #2: ffff88808467d580 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 1649.727475][ T32] #3: ffff8880377f8260 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: __inet6_bind+0x301/0xf30 [ 1649.727523][ T32] locks held by kworker/1:9/2000: 3, on CPU#1: [ 1649.727537][ T32] #0: ffff88813fe0ed48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1649.727590][ T32] #1: ffffc9001cfc7c40 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1649.727642][ T32] #2: ffffffff91693720 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 1649.727743][ T32] locks held by kworker/u8:9/4298: 3, last CPU#1: [ 1649.727757][ T32] #0: ffff88807899a148 ((wq_completion)krds_cp_wq#9/0){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1649.727810][ T32] #1: ffffc90003c2fc40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1649.727862][ T32] #2: ffff88808467e780 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 1649.727921][ T32] locks held by kworker/u8:13/5222: 3, last CPU#1: [ 1649.727936][ T32] #0: ffff88807cee9948 ((wq_completion)krds_cp_wq#9/3){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1649.727990][ T32] #1: ffffc9000a207c40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1649.728043][ T32] #2: ffff88808467de80 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 1649.728093][ T32] locks held by kworker/u8:14/7380: 3, last CPU#1: [ 1649.728106][ T32] #0: ffff88807ceea948 ((wq_completion)krds_cp_wq#9/4){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1649.728159][ T32] #1: ffffc90006d7fc40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1649.728213][ T32] #2: ffff88808467db80 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 1649.728262][ T32] locks held by kworker/u8:16/7381: 3, on CPU#1: [ 1649.728276][ T32] #0: ffff88813fe4c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1649.728328][ T32] #1: ffffc90006cdfc40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1649.728381][ T32] #2: ffffffff91693720 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 1649.728433][ T32] locks held by kworker/u8:17/8281: 3, last CPU#0: [ 1649.728447][ T32] #0: ffff88807cee8148 ((wq_completion)krds_cp_wq#9/1){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1649.728500][ T32] #1: ffffc9001c4efc40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1650.051800][ T32] #2: ffff88808467e480 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 1650.051877][ T32] locks held by kworker/u8:18/8390: 2, on CPU#0: [ 1650.051893][ T32] #0: ffff88813fe4c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1650.051957][ T32] #1: ffffc9001c5afc40 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1650.052013][ T32] locks held by kworker/u8:19/8391: 2, on CPU#1: [ 1650.052027][ T32] #0: ffff88813fe4c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1650.052081][ T32] #1: ffffc9001c59fc40 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1650.052145][ T32] locks held by kworker/1:5/14195: 3, on CPU#1: [ 1650.052159][ T32] #0: ffff88813fe0ed48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1650.052212][ T32] #1: ffffc9000fb67c40 (netdev_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1650.052266][ T32] #2: ffffffff91693720 (rtnl_mutex){+.+.}-{4:4}, at: netdev_work_proc+0x209/0x780 [ 1650.052429][ T32] locks held by kworker/u8:21/14675: 3, last CPU#1: [ 1650.052444][ T32] #0: ffff888076820948 ((wq_completion)krds_cp_wq#27/0){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1650.052499][ T32] #1: ffffc9000df6fc40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1650.052555][ T32] #2: ffff8880742b8680 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 1650.052628][ T32] locks held by kworker/u8:22/14677: 2, on CPU#1: [ 1650.052642][ T32] #0: ffff88813fe4c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1650.052695][ T32] #1: ffffc90005687c40 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1650.052748][ T32] locks held by kworker/u8:23/14684: 2, on CPU#1: [ 1650.052761][ T32] #0: ffff88813fe4c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1650.052814][ T32] #1: ffffc90005387c40 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1650.052869][ T32] locks held by kworker/u8:24/14692: 3, last CPU#1: [ 1650.052882][ T32] #0: ffff88813fe4c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1650.052943][ T32] #1: ffffc90006e67c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1650.052997][ T32] #2: ffff88802b066258 (&devlink->lock_key#5){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb30 [ 1650.053053][ T32] locks held by syz-executor/14703: 1, on CPU#0: [ 1650.053067][ T32] #0: ffffffff91693720 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 1650.053114][ T32] locks held by syz-executor/14708: 1, on CPU#1: [ 1650.053126][ T32] #0: ffffffff91693720 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 1650.053173][ T32] locks held by syz-executor/14715: 1, on CPU#1: [ 1650.053186][ T32] #0: ffffffff91693720 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 1650.053231][ T32] locks held by syz-executor/14717: 1, on CPU#1: [ 1650.053245][ T32] #0: ffffffff91693720 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 1650.053291][ T32] locks held by syz-executor/14739: 1, on CPU#1: [ 1650.053304][ T32] #0: ffffffff91693720 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 1650.053349][ T32] locks held by syz-executor/14742: 1, on CPU#1: [ 1650.053363][ T32] #0: ffffffff91693720 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 1650.053408][ T32] locks held by syz-executor/14743: 1, on CPU#0: [ 1650.053421][ T32] #0: ffffffff91693720 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 1650.053466][ T32] locks held by syz-executor/14752: 1, on CPU#0: [ 1650.053480][ T32] #0: ffffffff91693720 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 1650.053525][ T32] locks held by syz-executor/14754: 1, on CPU#1: [ 1650.053546][ T32] #0: ffffffff91693720 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 1650.053591][ T32] locks held by syz-executor/14780: 1, on CPU#1: [ 1650.053605][ T32] #0: ffffffff91693720 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 1650.053650][ T32] locks held by kworker/u8:25/14792: 5, last CPU#1: [ 1650.053664][ T32] #0: ffff88813fe4c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1650.053718][ T32] #1: ffffc900035c7c40 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1650.053773][ T32] #2: ffffffff8ffe6050 (cpu_hotplug_lock){++++}-{0:0}, at: static_key_enable+0x12/0x20 [ 1650.053833][ T32] #3: ffffffff9023cb80 (jump_label_mutex){+.+.}-{4:4}, at: static_key_enable_cpuslocked+0xcb/0x240 [ 1650.053881][ T32] #4: ffffffff8fffd0a0 (text_mutex){+.+.}-{4:4}, at: arch_jump_label_transform_apply+0x17/0x30 [ 1650.053956][ T32] locks held by modprobe/14794: 1, last CPU#0: [ 1650.053970][ T32] #0: ffff88807e040f80 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x2d5/0xa40 [ 1650.054018][ T32] locks held by modprobe/14795: 2, last CPU#1: [ 1650.054032][ T32] #0: ffff888076f9ccc0 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x2d5/0xa40 [ 1650.054077][ T32] #1: ffffffff9015a2a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 1650.054130][ T32] locks held by dhcpcd/14799: 2, last CPU#1: [ 1650.054143][ T32] #0: ffff888076f9f180 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x2d5/0xa40 [ 1650.054189][ T32] #1: ffffffff9015a2a0 (rcu_read_lock){....}-{1:3}, at: page_ext_get+0x22/0x2e0 [ 1650.054244][ T32] locks held by modprobe/14801: 2, last CPU#0: [ 1650.054257][ T32] #0: ffff88807e044cc0 (&mm->mmap_lock){++++}-{4:4}, at: vm_brk_flags+0x202/0x730 [ 1650.054303][ T32] #1: ffffffff9029bd10 (kfree_rcu_sheaf_map-wait-type-override){+.+.}-{3:3}, at: __kfree_rcu_sheaf+0x21/0x690 [ 1650.054361][ T32] [ 1650.054367][ T32] ============================================= [ 1650.054367][ T32] [ 1650.054377][ T32] NMI backtrace for cpu 1 [ 1650.054392][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1650.054415][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1650.054427][ T32] Call Trace: [ 1650.054436][ T32] [ 1650.054447][ T32] dump_stack_lvl+0xe8/0x150 [ 1650.054479][ T32] nmi_cpu_backtrace+0x274/0x2d0 [ 1650.054505][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1650.054540][ T32] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 1650.054566][ T32] sys_info+0x135/0x170 [ 1650.054584][ T32] watchdog+0x1073/0x10f0 [ 1650.054633][ T32] ? watchdog+0x209/0x10f0 [ 1650.054667][ T32] kthread+0x38b/0x480 [ 1650.054690][ T32] ? __pfx_watchdog+0x10/0x10 [ 1650.054713][ T32] ? __pfx_kthread+0x10/0x10 [ 1650.054738][ T32] ret_from_fork+0x514/0xb70 [ 1650.054764][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1650.054786][ T32] ? __switch_to+0xc78/0x1410 [ 1650.054818][ T32] ? __pfx_kthread+0x10/0x10 [ 1650.054842][ T32] ret_from_fork_asm+0x1a/0x30 [ 1650.054880][ T32] [ 1650.054889][ T32] Sending NMI from CPU 1 to CPUs 0: [ 1650.054927][ C0] NMI backtrace for cpu 0 [ 1650.054942][ C0] CPU: 0 UID: 0 PID: 29495 Comm: kworker/u8:7 Not tainted syzkaller #0 PREEMPT(full) [ 1650.054963][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1650.054975][ C0] Workqueue: krds_cp_wq#9/6 rds_connect_worker [ 1650.055041][ C0] RIP: 0010:native_apic_msr_write+0x39/0x50 [ 1650.055069][ C0] Code: 74 2a 83 ff 30 74 25 eb 10 81 ff d0 00 00 00 74 1b 81 ff e0 00 00 00 74 13 c1 ef 04 81 c7 00 08 00 00 89 f9 89 f0 31 d2 0f 30 <66> 90 c3 cc cc cc cc cc 89 f6 31 d2 e9 c6 20 b7 03 66 0f 1f 44 00 [ 1650.055084][ C0] RSP: 0018:ffffc90000007e50 EFLAGS: 00000046 [ 1650.055099][ C0] RAX: 000000000000000f RBX: ffff8880b8223f40 RCX: 0000000000000838 [ 1650.055112][ C0] RDX: 0000000000000000 RSI: 000000000000000f RDI: 0000000000000838 [ 1650.055122][ C0] RBP: ffffc90000007f10 R08: 0000000000000100 R09: 0000000000000001 [ 1650.055134][ C0] R10: 0000000000000003 R11: ffffffff8175c510 R12: ffffffff8175c510 [ 1650.055147][ C0] R13: 1ffff110170447f1 R14: 0000000000000000 R15: ffff8880b8223f8c [ 1650.055160][ C0] FS: 0000000000000000(0000) GS:ffff88812340a000(0000) knlGS:0000000000000000 [ 1650.055175][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1650.055187][ C0] CR2: 00007fd752d30b4c CR3: 0000000084674000 CR4: 00000000003526f0 [ 1650.055205][ C0] Call Trace: [ 1650.055213][ C0] [ 1650.055219][ C0] lapic_next_event+0x11/0x20 [ 1650.055241][ C0] clockevents_program_event+0x44e/0x630 [ 1650.055270][ C0] ? __pfx_clockevents_program_event+0x10/0x10 [ 1650.055291][ C0] ? tick_program_event+0x8f/0x120 [ 1650.055315][ C0] hrtimer_run_softirq+0x255/0x2e0 [ 1650.055338][ C0] handle_softirqs+0x265/0x8d0 [ 1650.055373][ C0] ? __inet6_bind+0x301/0xf30 [ 1650.055392][ C0] do_softirq+0x77/0xd0 [ 1650.055421][ C0] [ 1650.055427][ C0] [ 1650.055434][ C0] __local_bh_enable_ip+0x100/0x140 [ 1650.055456][ C0] __inet6_bind+0x301/0xf30 [ 1650.055480][ C0] kernel_bind+0x13e/0x1c0 [ 1650.055504][ C0] ? __pfx_kernel_bind+0x10/0x10 [ 1650.055531][ C0] ? rds_tcp_conn_path_connect+0x336/0x920 [ 1650.055554][ C0] rds_tcp_conn_path_connect+0x53b/0x920 [ 1650.055581][ C0] ? __pfx_rds_tcp_conn_path_connect+0x10/0x10 [ 1650.055605][ C0] ? lock_acquire+0x115/0x350 [ 1650.055631][ C0] rds_connect_worker+0x1d8/0x290 [ 1650.055656][ C0] ? process_scheduled_works+0x97a/0x1630 [ 1650.055680][ C0] process_scheduled_works+0xc3d/0x1630 [ 1650.055719][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1650.055746][ C0] ? assign_work+0x3cf/0x5d0 [ 1650.055773][ C0] worker_thread+0xa47/0xfb0 [ 1650.055804][ C0] ? __kthread_parkme+0x71/0x1f0 [ 1650.055826][ C0] kthread+0x38b/0x480 [ 1650.055846][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1650.055870][ C0] ? __pfx_kthread+0x10/0x10 [ 1650.055890][ C0] ret_from_fork+0x514/0xb70 [ 1650.055910][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1650.055929][ C0] ? __switch_to+0xc78/0x1410 [ 1650.055956][ C0] ? __pfx_kthread+0x10/0x10 [ 1650.055975][ C0] ret_from_fork_asm+0x1a/0x30 [ 1650.056001][ C0] [ 1651.256322][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 1652.757650][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1652.766780][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1652.776848][ T32] Call Trace: [ 1652.780155][ T32] [ 1652.783102][ T32] vpanic+0x26f/0x710 [ 1652.787106][ T32] panic+0xc5/0xd0 [ 1652.790831][ T32] ? __pfx_panic+0x10/0x10 [ 1652.795508][ T32] ? preempt_schedule_common+0x7f/0xd0 [ 1652.800978][ T32] ? preempt_schedule_thunk+0x16/0x40 [ 1652.806356][ T32] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 1652.812518][ T32] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 1652.818775][ T32] watchdog+0x10e7/0x10f0 [ 1652.823121][ T32] ? watchdog+0x209/0x10f0 [ 1652.827548][ T32] kthread+0x38b/0x480 [ 1652.831621][ T32] ? __pfx_watchdog+0x10/0x10 [ 1652.836310][ T32] ? __pfx_kthread+0x10/0x10 [ 1652.840906][ T32] ret_from_fork+0x514/0xb70 [ 1652.845690][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1652.850806][ T32] ? __switch_to+0xc78/0x1410 [ 1652.855505][ T32] ? __pfx_kthread+0x10/0x10 [ 1652.860121][ T32] ret_from_fork_asm+0x1a/0x30 [ 1652.864902][ T32] [ 1652.868275][ T32] Kernel Offset: disabled [ 1652.872601][ T32] Rebooting in 86400 seconds..