last executing test programs: 56.998785322s ago: executing program 2 (id=3209): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r0, r3, 0x100000af5, 0x0) close(r2) close(r1) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x7, 0xd, &(0x7f0000000a80)=ANY=[@ANYBLOB="18000000040000000000000097aa000118430000fdffffff00000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000f1b60300004000000085000000b400000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 56.234774704s ago: executing program 2 (id=3212): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_int(r0, 0x0, 0x1, &(0x7f0000000000)=0xab7, 0x4) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x8000) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000340)={'batadv_slave_0\x00'}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030080e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000040}, 0x24004000) sendmsg$NFT_BATCH(r8, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000100)={&(0x7f000000c300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x4000400}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}], {0x14}}, 0x64}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r10, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x30, r10, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_IE={0x4}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x30}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_OCB(r7, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x28, r10, 0x1, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0x3, 0x19}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8800}, 0x8000) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000680)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014020d000a00000000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d00d00000000000000bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 54.855574966s ago: executing program 1 (id=3219): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x405, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x48}}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$kcm(0x23, 0x5, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001d00)={0x6, 0x26, &(0x7f0000000a80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x584f}, {}, {}, [@call={0x85, 0x0, 0x0, 0xce}, @call={0x85, 0x0, 0x0, 0xaf}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x8}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @generic={0x6, 0x7, 0xe, 0x7, 0x20}, @tail_call, @cb_func={0x18, 0x9}, @map_fd={0x18, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000bc0)='syzkaller\x00', 0x1, 0x1000, &(0x7f0000000c00)=""/4096, 0x41000, 0x28, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000001c00)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000001c40)={0x3, 0x2, 0x6, 0x401}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000001c80)=[0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff], &(0x7f0000001cc0)=[{0x4, 0x2, 0xc, 0x7}, {0x5, 0x1, 0x1, 0xa}, {0x4, 0x3, 0x6, 0x2}], 0x10, 0x5}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0xa, &(0x7f0000000a40)=r3, 0x4) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x541b, &(0x7f0000000940)={r2}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000a000000080000000200000fffffffff0e0000000000000003000010070000003d0000ca75ffffff00000000000000002e"], &(0x7f0000000040)=""/240, 0x46, 0xf0, 0x6}, 0x28) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000001c0)={0x1, 0x7}, 0x8) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000000)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x3, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'wlan0\x00'}]}]}], {0x14}}, 0xac}, 0x1, 0x0, 0x0, 0x4c841}, 0x802) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a000000060001001d00000019bbc04c013f1e3619a356600bb11564d97fe46601d3176cb35950c364cc7bbdaa688aaae0fbbbce8c39c579d9c81ea8e413c7b53e478e41d7a3de881ab967ea3f820e5498ab79370792640d65a53febe199b05d220766105b848ea44a9e5e490cc65920b45c96710ba959138cc59185ee9c2655cccc83a7f2a1fb9880cc"], 0x1c}}, 0x0) r6 = socket$nl_audit(0x10, 0x3, 0x9) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a08000000000a01010000000000010900010073797a30000000003c000000090a010400000000000000000700fffd08000a40000000000900020073797a31000000000900010073797a300000000000000540000000212c0000001e0a05010000000000000000070000070900020073797a31000000000900010073797a3000000000140000001000010000800000000000000084000a000000000000"], 0xb0}}, 0x40000) sendmsg$AUDIT_DEL_RULE(r6, &(0x7f0000000900)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x42c}, 0x1, 0x0, 0x0, 0x24004980}, 0x20000000) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f0000000280)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x3, 0x0, 0x9, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @loopback}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e24, @dev}}, @sadb_sa={0x2}, @sadb_x_sa2={0x2, 0x13, 0x1}]}, 0x60}, 0x1, 0x7}, 0x0) listen(r9, 0xfffffe00) sendmsg$IPSET_CMD_ADD(r8, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x160}, 0x1, 0x0, 0x0, 0xc5}, 0x0) 54.596733157s ago: executing program 2 (id=3220): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/uts\x00') (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) (async) socket(0x10, 0x803, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet(0x2, 0x2, 0x1) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000c00000009"], 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0xc, &(0x7f0000000340)=0x6, 0x4) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b\x00', @ANYRES32=r1], 0x24}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1e, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000010000000000000000000000791217000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24}, 0x94) 53.776928325s ago: executing program 2 (id=3224): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000fdffffff000000000400000085000000360000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000002000000850000001700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) r0 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0xfffe, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003580)={0x20, 0x24, 0x107, 0x70bd2e, 0x25dfdbfb, {0x2, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @u32=0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) 52.948663888s ago: executing program 2 (id=3227): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'ccm_base(xts-twofish-3way,sha224-ce)\x00'}, 0x58) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000640)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) socket$inet6_sctp(0xa, 0x4, 0x84) r2 = socket$inet6_sctp(0xa, 0x4, 0x84) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha512\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x52e4b000) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_timeval(r5, 0x1, 0x2, 0x0, 0x48) getsockopt$inet6_mptcp_buf(r5, 0x11c, 0x4, 0x0, &(0x7f00000005c0)) socket$igmp(0x2, 0x3, 0x2) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYRESHEX, @ANYRES16, @ANYBLOB="6dec66c5983d4ebfcefb1795a5ddc9656b131cee8e9041129835c20941d3fe057621fc879da17dbbeadb3a2bd8abc7d16c80c79c9b86a300a675bb2d20fe5998cabe9a52c303786b3803baab619f561a7d2df2aafdb45b0edf1507e508797610f80e886326f3d1bd2328b9906c397a08df8d8629e5766195f2fd174767874ac8146e3eefa810ef", @ANYRESDEC=r2], 0x18}, 0x1, 0x0, 0x0, 0x4000800}, 0x20000890) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001800), r7) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r8, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000001840)={0x3c, r9, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}]}, 0x3c}, 0x1, 0x0, 0x0, 0x5}, 0x2000040) socket$key(0xf, 0x3, 0x2) r10 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="e00000001100010027bd7000fbdbdf256c72772d63616d656c6c69612d61736d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000200"/224], 0xe0}, 0x1, 0x0, 0x0, 0x20040810}, 0x850) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r11, 0x117, 0x1, 0x0, 0x0) accept4(r11, 0x0, 0x0, 0x0) 51.138093355s ago: executing program 2 (id=3231): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a050000000000000000000100fffc0900010073797a300000000040000000030a01010000000000000000010000000900030073797a300000000014000480080002400000000008000140000000000900010073797a30000000004c000000060a010400000000000000000100000024000480200001800700010072740000140002800800014000000014080002400000000208000b40000000000900010073797a300000000014000000020a010100000700000000000100000914000000110001"], 0xe8}, 0x1, 0x500, 0x0, 0x8000}, 0x0) 50.348364341s ago: executing program 4 (id=3235): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x10, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b70800000000b0ff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 49.727827206s ago: executing program 4 (id=3236): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000a1c0)={0x330, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x30c, 0x2, 0x0, 0x1, [@nested={0x305, 0x14, 0x0, 0x1, [@generic=')', @nested={0x300, 0x80, 0x0, 0x1, [@typed={0x8d, 0x14e, 0x0, 0x0, @binary="b50f7296e52f0a27dbf2f3f34e05daf490aeb69b4466b961d838d2cca67cc982eed2d55dc953e13c9859911887a4f666ac70730864f38b49ef9ebd940b957f800491111732843bb9574325e7d00e50bcba0e1f82fac64cf6d83a04517c6699595e2ec75d7246f6c95efc045117684a93057570437eb0aa796bf70e7fc1b6f24dca0db1048c1a6eb847"}, @nested={0x269, 0xeb, 0x0, 0x1, [@generic="046e93c8136e9f963ce99849d9de871280f509d640d34be6e108cdb999f1056f0eae8647703a50e520ebf70f3fb9daa20be8160fa99a65898be01444fad3491c680c8bc78c07d92c23a644c0b711f506d58381e0f7a2a2097da6580b3f6463ab30d3876f3f4fdfcfc05359e8b9fc82c7e09ea3a892df3839abfe1608459fa1cee546cb3124e81ae381b45d09fc6934dd88b8042ae49a9e4382033b2d2cf1dafda7f8a45840763067f883b7e8c07e59017a1afa36", @typed={0x8, 0xbd, 0x0, 0x0, @uid}, @typed={0x8, 0x12d, 0x0, 0x0, @u32=0x80}, @generic="a84fce29a270699028b98ff1b7820e4444e7e00f6ed086db3bcb3f8a77", @typed={0x8, 0x153, 0x0, 0x0, @fd=r0}, @nested={0x125, 0x12d, 0x0, 0x1, [@typed={0x14, 0xe6, 0x0, 0x0, @ipv6=@private2}, @nested={0x4, 0x137}, @typed={0x8, 0x2c, 0x0, 0x0, @uid}, @nested={0x4, 0x5d}, @generic="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"]}, @typed={0x51, 0x3, 0x0, 0x0, @binary="a3a203dee0f2d2d50da83a06a4df6f289197c1b27c3e1c64942c17ff0a0732993c5faa29e6d57b423ded1632c06b0127c50bb536a17284cac023abed33b7ecfa8bf17d525df2a73af1cc0d053c"}]}]}]}]}]}, 0x330}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000001c0)={0x0, 0xfff}, &(0x7f0000000200)=0x8) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000380)={'pimreg\x00', 0x5005}) write$tun(r3, &(0x7f00000023c0)=ANY=[@ANYBLOB="0300080057e019000c0066"], 0xfca) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={r2, 0x3c, &(0x7f0000000240)=[@in={0x2, 0x4e23, @empty}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00', 0x7}]}, &(0x7f00000002c0)=0x10) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, 0x7, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x8}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x7}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x10001}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x9}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x4800}, 0x10) 49.381230467s ago: executing program 1 (id=3238): r0 = socket(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$ipvs(0x0, r0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b9040a1d080211000000040000a1180002000202000100000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e00360d8bcc00400040fad95667e0060000000000000080bb9ad809d5e1cace81b341139fe3cd4032e8edb12d1d2eb0c0ed0bff", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x48, r1, 0x200, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xd556}]}, 0x48}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f000000a280)={0x0, 0x0, 0x0}, 0x4004050) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) r4 = socket(0xa, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'gretap0\x00'}) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x8936, &(0x7f0000000000)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000300)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'syztnl2\x00', r5, 0x4, 0x2, 0x9, 0x1, 0x41, @local, @mcast2, 0x7800, 0x8, 0x274, 0x10001}}) 49.199020734s ago: executing program 0 (id=3239): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2fe00000000850000006e000000b700000000000010950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7f9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2c4af38ffb7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836801ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7ffff35e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0eb3280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d09a0a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96bf704526a8919bc700002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e820a74f91381ccc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f78fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb3c035fc6846abe389b25c988f0bbb889560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a504a0301f89c2ee627e949c68b3a4a426a9b7d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0dac4728288e78980c1184d8223edbccbf9258b7374e79a1f8bf3fb73cfd1e76982f3d899f71e4a9f0ba8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b7524642c248aa813edaa626f000000"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xb0ff, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffaf, 0x10, &(0x7f0000000040)}, 0x3c) 48.625895773s ago: executing program 4 (id=3241): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) r3 = socket$tipc(0x1e, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$sock(0xffffffffffffffff, &(0x7f00000028c0)={0x0, 0x0, 0x0}, 0x24000080) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="02ffffffffff"}) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x1}, 0x10) bind$tipc(r3, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000007900)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000200)={0x42, 0x3, 0x3}, 0x10) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=@newqdisc={0x90, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x5, 0xc}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x64, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x1, '\x00', 0x5, 0x5, 0xd}}, @TCA_CBS_PARMS={0x18, 0x1, {0xf9, '\x00', 0xfffffffe, 0x3f, 0xe2, 0x790e}}, @TCA_CBS_PARMS={0x18, 0x1, {0x6, '\x00', 0x4, 0x2, 0x0, 0x3ff}}, @TCA_CBS_PARMS={0x18, 0x1, {0x8, '\x00', 0xe, 0xfffff800, 0x0, 0x1}}]}}]}, 0x90}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@delchain={0x50, 0x64, 0xf31, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x2}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x1c, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40054}, 0x4814) 48.554050406s ago: executing program 0 (id=3242): unshare(0x20000400) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r1, 0x0, 0xc, &(0x7f00000002c0)=0x4, 0x4) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000080)="05000000010001", 0x7) (async) write(r2, &(0x7f0000000080)="05000000010001", 0x7) setsockopt$inet_int(r0, 0x0, 0x2a, &(0x7f0000000280)=0x5, 0x4) (async) setsockopt$inet_int(r0, 0x0, 0x2a, &(0x7f0000000280)=0x5, 0x4) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x4, 0x1, 0x1}]}, 0x10) bind$bt_hci(r3, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000000)={0xfffffce3, 0x13, 0x2, 0x5}, 0x10) (async) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000000)={0xfffffce3, 0x13, 0x2, 0x5}, 0x10) sendto$l2tp6(r5, &(0x7f0000000300)="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", 0xfd, 0x40000, &(0x7f0000000180)={0xa, 0x0, 0x408, @private0={0xfc, 0x0, '\x00', 0x1}, 0x400000, 0x2}, 0x20) (async) sendto$l2tp6(r5, &(0x7f0000000300)="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", 0xfd, 0x40000, &(0x7f0000000180)={0xa, 0x0, 0x408, @private0={0xfc, 0x0, '\x00', 0x1}, 0x400000, 0x2}, 0x20) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r4, 0x8982, &(0x7f0000000240)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000100)={r6, 0x3, 0x6, @remote}, 0x10) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f00000000c0)={0x0, 0x1, 0x6}, 0x10) setsockopt$inet6_buf(r5, 0x29, 0x29ea9320669e07b1, &(0x7f0000000440)="aa2ecdf8353f4971a68949a44f81ae2dd2d86e24a00091b830fb5f", 0x1b) (async) setsockopt$inet6_buf(r5, 0x29, 0x29ea9320669e07b1, &(0x7f0000000440)="aa2ecdf8353f4971a68949a44f81ae2dd2d86e24a00091b830fb5f", 0x1b) syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x2400485c}, 0x20040091) write$rfkill(0xffffffffffffffff, &(0x7f0000000480)={0x3ff, 0x3, 0x0, 0x0, 0x1}, 0x8) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8003}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r7, 0x400448ca, 0x0) getsockopt$inet_opts(r1, 0x0, 0x9, &(0x7f00000001c0)=""/16, &(0x7f0000000200)=0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r8, 0x400448c9, 0x0) bind$bt_hci(r8, &(0x7f0000000080)={0x1f, 0x0, 0x2}, 0x1) 48.362911138s ago: executing program 1 (id=3243): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000200)=[{0x40, 0x2, 0xff, 0x7}, {0x20, 0x7f, 0x4, 0xfffff034}, {0x6, 0x0, 0xff, 0x1}]}, 0x10) sendmmsg$inet(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) r2 = socket(0x2b, 0x1, 0x9) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r5, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r6 = socket(0x10, 0x803, 0x0) r7 = socket(0x10, 0x803, 0x2) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r9, @ANYRES16=r8], 0x3c}, 0x1, 0x0, 0x0, 0x40020c1}, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r10, 0x8916, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x56, r5}) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_inet6_SIOCSIFADDR(r11, 0x8916, &(0x7f0000000180)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2d, r9}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, &(0x7f0000000300)=ANY=[@ANYBLOB="724eb24629f112617700000000000000000000000000000000000000000000000000000000000300"/94], 0x58) ioctl$sock_bt_hci(r2, 0x800448d3, &(0x7f0000000480)="cd9699b2fa7855898cacedc3e23f45e2e23ba9ae9cedc0660979111f03951828d05e3b9791e4c1485438cb52e8699019384feef219b2a6ac95292cc6771e314d2cdcd5e74394cce48e2e45646a73992847dec903da9e88101cc18e44d46c9b03d16b8730696f0a7af182eef8cec7ab4a96d5c65a642d908ee41e85fc761503fd2281281c05f888dffe5f7d1639a9ef9fd328993a24ff0c286e61ace3048479506300af9847904eceea41e9") sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000000308010100000000000000000000000006000240000000002c541180"], 0x50}}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000002c0)={@rand_addr, 0x0}, &(0x7f0000000380)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000440)={'ip6tnl0\x00', &(0x7f00000003c0)={'ip6gre0\x00', r12, 0x29, 0x3, 0x3, 0x9, 0x14, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x7800, 0xa, 0x4}}) r13 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) setsockopt$inet6_opts(r2, 0x29, 0x39, &(0x7f0000000100)=@fragment={0xff, 0x0, 0x1, 0x1, 0x0, 0x9, 0x65}, 0x8) sendmsg$kcm(r13, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 47.745883727s ago: executing program 3 (id=3245): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket(0x1e, 0x805, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r2) r3 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c000000000000009500000000000000181000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000b1f8306e05d1e4aab009c16b5c05077115d0749619ca39f89974785ae0619b77c6585f678ac92a3b6b4148f56b43c3dd75d75f97c8f92f60a2def458df05e2fbfb3e849b2b3cffd4f29446ae60dd76654b2639b2bc14350706214a6ab7a712d4317fbc3ca01d0d3ed6110b3775903141a5091a4d3db8eb335414fbdb288aba73aaf6d18000a3a2a069cf7f9402e1425bb6bc370576aa1faea0fe222671ecf99038fce8dba53dcb11f87cca"], &(0x7f0000000140)='GPL\x00', 0x2, 0x95, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="1100000005000000"], 0x20) sendmmsg$unix(r2, &(0x7f0000007580)=[{{&(0x7f0000000a80)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f00000026c0)=[{&(0x7f0000000b80)="bd3675b3a97faeb8e28dfdb5d5e9538730fb55287bdbe0c1b49f428f", 0x1c}, {&(0x7f00000016c0)="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", 0x1000}], 0x2, &(0x7f0000002980)=[@rights={{0x14, 0x1, 0x1, [r1]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [r3, r3, r1, r0, 0xffffffffffffffff, r2, r1]}}, @rights={{0x28, 0x1, 0x1, [r0, 0xffffffffffffffff, r0, r2, r2, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [r2, r3, r1, 0xffffffffffffffff, r1, r0, r1]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [r1, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x100, 0x54}}, {{0x0, 0x0, &(0x7f0000002b40)=[{&(0x7f0000002a80)="45ce1afa41aa9766dc47bf702af26417ebf037c1b1cdc7b119e8fdc0b8ad0b3e19da02d2181cb831d5dc14e5032c3ecb0b42d7649f23a412fcb11b2be3ef3ef6f40e966582c33c137745abc7ca25b1eab38ff6ef658f7cca0326eb4f87cf60b0cc6d877a620d7fff56a3a0a023f8af7ce321ba08275c18181361d9c309e7a938d9238d79923e1b981bcbac53a77974b635528c603b79452b45194352651105c82e35efeb8af4645c", 0xa8}], 0x1, &(0x7f0000002b80)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee00}}}], 0x20, 0x20000000}}, {{&(0x7f0000002bc0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000004080)=[{&(0x7f0000002c40)="54e3a7964bb2fd76aa0c1a970b4951457b34db866c625843aa6b8edc0aa1057e711eca1105ae16db13d32096", 0x2c}, {&(0x7f0000002c80)="34b640cff53d04c9fe0213be82dbdbd1f91a26bd18c4143f0085658c2841ddb2f7cc6c4d3c00fe72b5f24f650f68d06ac3943e8d04e7db9a1d2f9853a931e16239fe863d342aacee8dc02e268ad5995903efe7e41ba3d64de96541afc0cb47e3ab2ede16d02030627802016ebc974db05c888e6a4f91ed85231ed1b459d5e1c1bba0e30a25c7e8abcac7e8018ef96c953a26330404da5ef96f793824ebdc183331adc18aecbbfd7f628bef69fd3c6e240f3516a04f8fcc5abbda461e77679da4205315c7a48012645cf7843914ca1d35", 0xd0}, {&(0x7f0000002d80)="f89d5c0ff4aac819fab78778d50174ecdd40b9812bcff16bfcc662530e36f9ce37131cd1f5f9c84d49d954b39824283ab2e9796106bee2eb1991c81a7c27552330a5a828d3fb48641c8b831088dab381ae7c86201d5db0f8b8e31b51b6ab4a7c6396e30ce9572bf06fb6b23ab14992ea6dd4582be34d2ebf6ee45176b07c343f30d59a07f3adfdeb218ba2c18a91c5a1b5abccbdbf4aa91eeebaffe422e67d47fbce01f50d775e052dac", 0xaa}, {&(0x7f0000002e40)="87c128b10e628d9fa14e01c1f250c9ef582122a747393e2d5792910db379adfc8c298cc381cedd85e4be0008849ca886baab10ce0aec12a11f03aee7187a1f8fdf175d73b868a32e337fe32ec7af40c0329ae653e23c9cde11af9efdadcaff6fc18f8a243ec9a12937fc2e2bff7fb6aec4ecffe0429cfc36a97b7557e0c7b3980f29f6680cda7138703503ad650b4f", 0x8f}, {&(0x7f0000002f00)="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", 0x1000}, {&(0x7f0000003f00)="ec2f7ca007d52b3090fcd189a94e9a5464863d903bf8a32482d13663c71ccfeb89c15dd360568754e56e2cbdae032dbd465d69204ee7b560ea857118131b5669b00c23152c3df342323da30f6e4966256a856b850d433de52ea5325a729b37031bd836f6bb838663b0d562e68086f8519167f472c37e5c2dc86e1cac215d20e85e9cff5673823d4e3e0e3febed1fe125a823ae8be5362576c228d02439a2c60a4b4482b5911b93757eda54043ccc6b0c5e9c67cfe2f2c44ff35498b6a2d11d640f7156b327da6612e083691ad56baea12a67c227bb7bf456e6e037afe9af4357ba", 0xe1}, {&(0x7f0000004000)="83fd266314e9572ad683b675d00a10fcfcaa6bd407d41b55e1d11d5ee111dffbe81e935439fc3c0cf905976b8aa6a98197744d76862d29aae377d679440601c10918b10f87f90f1273bac7710a919263ca8752b4ca589589c1e77d346123370927da4c427a07b7d2efc648a9343e36c44ea0d527e19eb9", 0x77}], 0x7, &(0x7f0000004440)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, r3, r2, r2, r1, r2, r1]}}, @cred={{0x1c}}], 0x70, 0x24004000}}, {{&(0x7f00000044c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000005600)=[{&(0x7f0000004540)="2f39116cd071c025259f65c9de5fc8cc7cca4dcead74e1e10297f2f28dc4affbfb865d133bfb91c5a7c3de8825528dd53e0497c15ae9764c38187c5c9b14112d23eb6fe85f3b54d854a745ebb7b255cfa98e9837ca93f2cd8fdd1f60d57564844517e9c5806f75ff7149679068cabe6572410b856a55aa4065ff5539d03b5fed79e06d138ecceac9524ce539023ed79065b3fc94416ddb134c23a681465e5df368b20e533e54ac", 0xa7}, {&(0x7f0000004600)="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", 0x1000}], 0x2, &(0x7f00000056c0)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40, 0x40002}}, {{&(0x7f0000005700)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000057c0)=[{&(0x7f0000005780)="597b4d80c4c3ed7760b5b26e37adee379dd17cd4eb00d18f9fb66f5c5155fd0399c2cfb0ef378680819ebba42a44", 0x2e}], 0x1, 0x0, 0x0, 0xd7fe09c124cbe372}}, {{&(0x7f0000005800)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000005dc0)=[{&(0x7f0000005880)="475e3f0a372ebb0e4fcb3fa3cbff615966b036b6e6c8881536dce5623d8b33f777b789a452f30f19ea8f9a15628cb5ebeee0492cd2260543aef162fc1aa607880352bc7d3458617e244c1b2662fffa8087393c8377a8688e812b46496f2e8d0794df43d0ec71a2b8d94e839da10e3580cdb9830666c2132ef625dc18b35d303bcbc7cc95aba50e9e3821", 0x8a}, {&(0x7f0000005940)="93f341446228d54cd2470fa202c939a852aeceb50197610a6a85d47927c4b61df9b97934b484227c892054550d3c7047803c3b076470d8dbde95e2c207a6f97078f0486e029d0e73085171d234acc0a96cf36d6a4343a54f48b228796a750745e7d15193a83160acb1c2b7d0ff402eafc8be528c06ec395471cb7f7a2d1b615d5bb1c40da33ce933926c310f68c5b4f749ffdffe5b103dcfa79685bb3462cd94695b02170d6dfbbb82c001cd6d", 0xad}, {&(0x7f0000005a00)="20dad3fac778e600cc0b4010645d380fdb653a92fc82883938e745d55c2a0853017fb3b90495094efb60ef3f7041db1835bbfbde692c6e90adcb64615f5b2894b4899cf2d38ec167b75a23175bd7d42c2ab9a97c80d0e77339559313b01fb2f0cb0e730c3c0a7f4aa7f029135e6a7d27fa0438f263fce7a9c95ce8decff5f51656631ee739916abb8d3d9cf19642e9fbb5a0c6c556e437d85c16f20a646bdc57bd39436d899e1c9ddbdd393823e1504a0689c8f64da897e9ba3ea539c0f08ac60816fd091ef38780", 0xc8}, {&(0x7f0000005b00)="ad5326f55ac140ade75b3e83b01aff91d7a55c74ddab1b9c9fe600a4dffea06385741eeadfd0ebaff33e03e7dbb838f48f64194b3a9d8eee9a7627ea4557110a11742bc78246d4ca47d02f5050cdaf38e6bd65ac98d206b9b7f44737101500f608b45be663f0bb7bd2d61096cb25d37e674c2c326b3ec72e81b8b0", 0x7b}, {&(0x7f0000005b80)="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", 0xfb}, {&(0x7f0000005c80)="cb2ef268e8c24e43402062ca0222a294233c383ddf8e1c993ff521002cf3ad0b6d71b267ccdf6e45b97ec2373d271a8ed60a372a84319d069a42530e7d88a275e29635c00f66afe00345a3c59625b0e395928a014a8de8ca03662ca7af87f2d39099a2db2100d56ded5d7a5fca327b0f0033b94fe47dbe0bbab014a893df0effdea67f8484a831c7a2c676587c5e576d87c1f38d64e79e688543f8fcfd4f3dfec6d0d3bf23175cc29ef6900c7678370726045af68a261160d41542a66a822a90f5badc094f5940d8d6d6bb", 0xcb}, {&(0x7f0000005d80)="4ba03d42da8785fa5ebfcce7f37ef379dbdb4b0f7be081137eae140cf330433ba4264fdae00cb7710d096d6b715b204bc906554039", 0x35}], 0x7, &(0x7f0000006040)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [r3, r2, r2, 0xffffffffffffffff, r2, r3, r2, r2]}}, @rights={{0x10}}], 0x80, 0x44}}, {{&(0x7f0000006100)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000006300)=[{&(0x7f0000006180)="8b343b99a3fb6bba35e72a7cffc2fade1e26182b382bce84cd4a67bf5eea766e5df97d4541c76ab7273c9e6a5419897b8ab4bfcfdf0429b7d2dc7f618707b060671afacf2e96ddfaa9f8af5bfd00db951cb8c59912ceda03369a971f663165aa6dd2048d71f17b379734252ba92646553a4e95426813588c7a41d277e69e64eaf5961816cfdca5323748229b8cf0f644ac29db818796428ede5014401b", 0x9d}, {&(0x7f0000006240)="23e85a890353de79ab78782c41e5f8b317cf88a609163ed6be73c525d50a96db40e680bace7c8da3ec134e895b330ad80a1095b4fa368e703af2bafadca3a2f0c2", 0x41}, {&(0x7f00000062c0)="97eeea6de5bd382c1f5b560e092dba62d1803bfbee2deea2c5da030fa31efa79f69dc30bef71", 0x26}], 0x3, 0x0, 0x0, 0x4}}, {{&(0x7f0000006340)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f00000073c0)=[{&(0x7f00000063c0)="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", 0x1000}], 0x1, &(0x7f0000007500)=[@rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x50, 0xbaa97ccf56996968}}], 0x8, 0x800) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[], 0x10) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000340)="0a000300010000", 0x7) recvmmsg(r1, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}, 0x5}], 0x40001af, 0x12122, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000008000000020000000000000700000000030000000000000f0100000000000000000000020200000000002e2e"], 0x0, 0x44}, 0x28) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000100)=0x8001, 0x4) r4 = socket(0x2b, 0x80801, 0x1) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e23, 0x3ff, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffe}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, 0x0, 0x0) ioctl$XFS_IOC_READLINK_BY_HANDLE(r4, 0xc038586c, &(0x7f0000000300)={r1, &(0x7f0000000000)='geneve1\x00', 0x2c0, &(0x7f0000000240)={@align=0x4, {0x99e7, 0x1, 0x9, 0xdf6f}}, 0x10001, &(0x7f0000000280)={@_ha_fsid}, &(0x7f00000002c0)=0x5}) setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000003c0)=0xffffffffffffffff, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d40)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0001000000500000240012800b00010067656e65766500001400028005000800000000000500096dd1f279d624aa39bccae57bbbb886120000000000d7972af36868fe37d3ae50ec78d035803770c123e7cf4ac5fd957c09ae181edff16eba9ea12ff1f252e80d59ed0b805d9f3649260d9c9be64455462be1d25f39b7f25fd287ed"], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x20010) sendmmsg$inet6(r0, &(0x7f0000000480), 0x0, 0x60800) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x3d8, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x308, 0x2e8, 0x2e8, 0x308, 0x2e8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, [], [0xff, 0x0, 0x0, 0xff000000], 'erspan0\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1f8, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcfcf0c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1a, 0x0, {0x80000}}}, @inet=@rpfilter={{0x28}, {0x6}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x17, 0x3, 0x6, 0x80000000, 'snmp\x00', 'syz0\x00', {0xe6}}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xff, 0xff000000, 0xff000000, 0xff], [0xffffff00, 0x0, 0xffffff00], 'wg0\x00', 'nicvf0\x00', {0xff}, {0xff}, 0x0, 0xc0, 0x0, 0x14}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x4, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x438) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f00000009c0)={'ip6gre0\x00', &(0x7f0000000940)={'syztnl2\x00', 0x0, 0x2f, 0xf, 0x7, 0x2, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, 0x8, 0x10, 0x9, 0x40}}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000a00)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r2, &(0x7f0000000c40)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000e00)=ANY=[], 0x58}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000b40)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000001200)=@deltfilter={0x488, 0x2d, 0x300, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0xfff1, 0xfff3}, {0x7, 0x7}, {0xfff1, 0x6}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x440, 0x2, [@TCA_CGROUP_EMATCHES={0x21c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x1cc, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x1c8, 0x1, 0x0, 0x0, {{0x9, 0x0, 0x8}, "db1a3e497ad0094f5212bd0887622893418e680c639ff580a4f0d39693e22f75a5825af2d75678abf430ae55825f59698b88e41e7b9eee3a89c74688ad3d068b2fe566b7b2502026dcfb59ac72f76102e1e6eef228ddcb6a649263e9765b0416ee6804cf7dbeaf1cae40c22134cc56e6c31b5818d03c3d9adc5f7511e25dddd3a657df06167a41aa91e389c49503bb2f9fa5786c40c6540f7397c9ac8ad5c5fbee533f0a855410e9f61e2c5fe6a3dfc3b6bcf1f9e29a5006088f5912f7ad4639eb36978cd90b6b465a26a61f9cb9baba81a4dc5de218a1a4c1f56d128846ca921e22445a7f43d548a814abe396406792312e24be059a152f7360632bc3c3e32f29df65825b79bee00764060cb70b5d1113934fbf594c6704d028737585ea18547c73fde30a21c68c04b81959b756c3fb3e5af938a90000000000000000000000000000c3ffa84123beb700a25ea4cefe5b7bb6715eaf021d3b846cfb0b21583235445c914c8577d27a85bdc21d7663cf064ad1085ce15d77c702254997a219b9d7bc5b11d8b80ae1aee630db82193dda003a82a210b8aa767c8e20ce0baebccfd16f5741edc313b7ea8b186f73869eeba34846b32e9fa7abfcf6"}}]}, @TCA_EMATCH_TREE_LIST={0x4c, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x8, 0x8, 0xccf1}, {0x2, 0x6, 0x1}}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x4, 0x8, 0x401}, {0x1, 0x1}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x2, 0x1, 0x9}, {0x4be3, 0xee, 0xfff7, 0x1, 0x4, 0x1, 0x2}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x401, 0x8, 0x5}, {0x4, 0x1}}}]}]}, @TCA_CGROUP_POLICE={0x18, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0x80}, @TCA_POLICE_RESULT={0x8}]}, @TCA_CGROUP_EMATCHES={0x208, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xd}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x700}}, @TCA_EMATCH_TREE_LIST={0x1e4, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0xfffd, 0x8, 0xebd7}, {0xffffffffffffffff, 0x1, 0x4}}}, @TCF_EM_CONTAINER={0x104, 0x2, 0x0, 0x0, {{0x4, 0x0, 0xb}, "f7df30c340e123332ee9d8af36ebd3ce391b54278d69a0a1dfbb8a3c4a130c0c1ddd40acbaf3c16fa62f6323eb9e184ec7451e6fde0de4263590d149b25e85baa0790e47ed77bc8232dc5a8d87e29e3b3c2b964bd9c359652f60a03cd4ec31fc8f516cd42625396efb2c3aab801f1b611a2c226262744b62d7427af9ca57c008fcf6df756f3c7fe6d38d0e0834147b61cfa3d990ba4aa2b5929f7f6c044f8877a82ea6bdc76d5818b57816a386d79339b2f76c7d270d8f019a8d7912fa12ac5ad13719c6dbf762fd196af6a8af840a55b9dc2ae1104bc472a8edce9b0a38578be7018ec425fff4544570eb18f8bd1ff2c104ce1d1750"}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x2, 0x7, 0x3}, {{0x0, 0x1, 0x1, 0x1}, {0x0, 0x1, 0x0, 0x1}}}}, @TCF_EM_META={0xc, 0x3, 0x0, 0x0, {{0x9, 0x4, 0x5}}}, @TCF_EM_CONTAINER={0xac, 0x2, 0x0, 0x0, {{0x1, 0x0, 0x7fff}, "1d244b7824e38037094651660ed8d113aa50661b5e12d063b357ffe29bf3a89ec8ee6b3f9f442cdf429066debdfb714c72815ce34e327962f3b1b1686cc592b6d85741c40dcfa4d4c8f555c55eae56f0a74b31c9a8ab805b84fd3c07a17e2b5eaa60ff2c5e38aa941f55e4201b24700a91d21e0562f19a52ac1083473b13e103d44c0995382bb55bc6f2707e32587bb8304ef50face5a62dd8ed8cfdbd"}}]}, @TCA_EMATCH_TREE_HDR={0x8}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x1}, @TCA_CHAIN={0x8, 0xb, 0x40}, @TCA_RATE={0x6, 0x5, {0x9, 0x4}}]}, 0x488}, 0x1, 0x0, 0x0, 0x40004}, 0x10) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="e796adec762aad77a3bc86e8885a581c969e793843582d492ab810c40491f56db1df576b0097ccb5e9a60e6db41a241cced1018f7f89611314aee8ff45463f", 0x3f, 0x800, &(0x7f0000000200)={0xa, 0x4e24, 0xf246, @loopback, 0x7ff}, 0x1c) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r7, &(0x7f0000000140)={0xa, 0x4e22, 0x9c7, @loopback, 0x1e}, 0x1c) sendmmsg$inet6(r7, &(0x7f0000000680)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0xab, @loopback, 0x8}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000900)='2', 0x1}], 0x1}}], 0x1, 0x20000014) 47.506803732s ago: executing program 0 (id=3246): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000100)='\x00\x00', 0x2, 0x14000b01, &(0x7f00000000c0)={0x11, 0x8100, r4, 0x1, 0x80, 0x6, @local}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x7, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="85000000070000006a0a00ff01010000260000000019e1b6950000000000000018100000", @ANYRES32, @ANYBLOB="100000000000002505000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x1, 0x95, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', r4, @fallback=0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4720}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x7, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="85000000070000006a0a00ff01010000260000000019e1b6950000000000000018100000", @ANYRES32, @ANYBLOB="100000000000002505000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x1, 0x95, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', r4, @fallback=0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4720}, 0x94) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)}, 0x44) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="18"], 0x20) recvfrom$phonet(r5, 0x0, 0x0, 0x40010102, 0x0, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) (async) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), r8) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000680)={0x1c, r9, 0x1, 0xfffffffd, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0x1c}, 0x1, 0x0, 0x0, 0xd49920d352514f42}, 0x4000040) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r7], 0x1c}}, 0x4008054) (async) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r7], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='p\x00\t'], 0xc) (async) write$nci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$nci(r0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="400104"], 0x14) socket(0x1e, 0x4, 0x0) (async) r11 = socket(0x1e, 0x4, 0x0) write$nci(r0, &(0x7f0000000380)=ANY=[], 0x14) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000480)={0x0, @in6={{0xa, 0x4e20, 0x69, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffcf}}, 0x1000, 0x2, 0x49b06197, 0x5, 0x0, 0xbba}, &(0x7f0000000540)=0x9c) getsockopt$inet_sctp_SCTP_CONTEXT(r11, 0x84, 0x11, &(0x7f0000000580)={r12, 0x1}, &(0x7f00000005c0)=0x8) (async) getsockopt$inet_sctp_SCTP_CONTEXT(r11, 0x84, 0x11, &(0x7f0000000580)={r12, 0x1}, &(0x7f00000005c0)=0x8) r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r13, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) (async) r14 = socket(0x400000000010, 0x3, 0x0) r15 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r15, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0x1}], 0x1}, 0x20000800) sendmsg$nl_route_sched(r14, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd27, 0x2, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {}, {0x8, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x58, 0x2, [@TCA_FLOW_ACT={0x54, 0x9, 0x0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xffffffff, 0x4000004, 0x20000001, 0x4, 0x2}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x88}}, 0x0) 47.232537071s ago: executing program 4 (id=3247): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4) r2 = socket(0x2, 0x2, 0x1) bind$unix(r2, &(0x7f0000000000)=@abs, 0x6e) sendmsg$IPSET_CMD_RENAME(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, 0x5, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x6}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000740)=@ieee802154={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x80, &(0x7f0000000540)=[{0x0}, {&(0x7f00000008c0)="7d3ed2ea1f2f210c0784b2", 0xb}], 0x2}, 0x2400c0c8) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)=@newqdisc={0x48, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x4}, @TCA_CAKE_AUTORATE={0x8}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2}, 0x2000084c) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f00000002c0)={0x0, 0x300, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="410000000000000001000603000014000300060a0004090300f006e8ffffffffffff07000700263a0909140002"], 0x44}, 0x1, 0x1000000}, 0x200000000000000) 46.477936557s ago: executing program 4 (id=3248): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='ip6tnl0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="11000000700001002abd70000000000007"], 0x24}}, 0x80) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000001000ffff2bbd7000bbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="582a0500231a0500340012800e00010069703665727370616e00000020000280060003003000f133140007001502000000000000000000000000000108000a00", @ANYRES32], 0x5c}, 0x1, 0x20000, 0x0, 0x240440d5}, 0x9080) 46.475662202s ago: executing program 0 (id=3249): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0xa, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x4e1f, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xd340}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x74, &(0x7f0000000240)={r4, 0xe23a, 0x20, 0x10001}, &(0x7f0000000840)=0x18) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r5, 0x400448e3, &(0x7f0000000100)={0x0, 0x4000, '\x00', 0x2}) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x45}, 0x4040040) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000018e1d000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a370000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x8c}}, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r7, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) setsockopt$inet_sctp6_SCTP_RTOINFO(r7, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x1, 0x8001, 0x6}, 0x10) sendto$inet6(r7, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000880)={{{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@private}}, &(0x7f0000000280)=0xe8) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000001cc0)=@nat={'nat\x00', 0x19, 0x4, 0xe00, [0x200000000ec0, 0x0, 0x0, 0x20000000110c, 0x200000001b0a], 0x0, &(0x7f0000000180), &(0x7f0000000ec0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x11, 0x10, 0x1, 'ip6gre0\x00', 'pimreg0\x00', 'veth0_virt_wifi\x00', 'veth0_to_bridge\x00', @random="1d967a0229fb", [0x0, 0xff, 0xff, 0x0, 0xff], @random="651465e551d3", [0xff, 0x0, 0xff, 0xff, 0xff, 0xff], 0x6e, 0xa6, 0xf6, [], [@arpreply={'arpreply\x00', 0x10, {{@multicast, 0xfffffffffffffffe}}}], @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0xff7, 'syz0\x00', {0xea}}}}}, {0xa, 0x10, 0x88e7, 'ip6gretap0\x00', 'netdevsim0\x00', 'pimreg\x00', 'ipvlan1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}, [0xff, 0xff, 0xff, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}, [0x0, 0x0, 0xff, 0x0, 0xff], 0xb6, 0xee, 0x126, [@limit={{'limit\x00', 0x0, 0x20}, {{0x8000, 0x0, 0x1, 0xbd02, 0x3c, 0x87b}}}], [@arpreply={'arpreply\x00', 0x10, {{@local, 0xffffffffffffffff}}}], @snat={'snat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{0x9, 0x0, 0x4305, 'veth1_virt_wifi\x00', 'virt_wifi0\x00', 'vlan0\x00', 'gretap0\x00', @remote, [0x0, 0xff, 0xff, 0x0, 0x0, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0xff, 0xff], 0x92e, 0x99e, 0x9ce, [@among={{'among\x00', 0x0, 0x898}, {{@zero, @zero, 0x2, {[0xa, 0x7fff, 0x3, 0x1ff, 0x7, 0x3, 0x0, 0x1000, 0xbeb, 0x6, 0x8, 0x1, 0x5, 0x7a0, 0x0, 0x1, 0x6, 0xfffffffe, 0xe, 0x1, 0x1, 0xbe, 0x1, 0x2, 0x3, 0x7, 0x9, 0xaf5, 0x2, 0x73, 0x8, 0x8, 0x7, 0x0, 0xbf1e, 0x0, 0x55c, 0x6, 0x9, 0x0, 0x3, 0x1, 0xf20, 0x6, 0xffffffaf, 0x7fff, 0xefe, 0xba, 0xe8, 0x5, 0x0, 0xa, 0x5, 0x472d, 0x3, 0x5aa0da34, 0x1, 0x8, 0x9, 0xf2, 0xffffffff, 0x9, 0x10, 0x3, 0x6, 0x9, 0x7, 0x3, 0x1ff, 0x5, 0x28e8, 0x7, 0x3, 0x4, 0xe, 0x15, 0x7ff, 0x6, 0x9, 0x8, 0x2, 0x7ff, 0x9a3, 0x2, 0x4, 0x6, 0x4, 0xfffffc01, 0x9, 0x4, 0xf966, 0x0, 0x2, 0x10000, 0x2fb, 0x800, 0x17, 0x6, 0xffff, 0xfffff34e, 0x5, 0x100, 0x7, 0x0, 0xc6bf41b, 0x8001, 0x9, 0x6, 0x2, 0x202f, 0x2, 0x1000, 0x6, 0x8, 0x349, 0x7, 0x7, 0x4bf2, 0x185, 0x0, 0x1000, 0x8, 0xbd58, 0x9, 0xfffffffc, 0xe, 0x1, 0x8, 0x5939, 0x9, 0xfffff739, 0xd2, 0x80000000, 0x2, 0x10000, 0x10001, 0x1, 0x0, 0x6, 0x2, 0xa5, 0x5, 0xffffffaa, 0x5, 0x5, 0x3, 0x120, 0xffff742f, 0xf95, 0x5, 0x9, 0x5dd, 0x3, 0x7, 0x8d34, 0x3, 0x5, 0x8, 0x4, 0x3, 0x10000, 0x81, 0x63d, 0x8, 0x5, 0x1, 0x7, 0x0, 0xbf, 0x1, 0xc, 0x1, 0xffffff13, 0x9, 0x1, 0x71bf1926, 0x8, 0x6, 0x2, 0x5, 0x2, 0xe, 0x0, 0x3ff, 0x68, 0x5, 0x8, 0x5323352d, 0xb88, 0x4, 0xffffff01, 0xc1ef, 0x4, 0x7f, 0x9, 0x4, 0x0, 0x3, 0x4, 0x16c, 0x5e, 0x3ad8, 0x4, 0x9, 0x6, 0x7, 0x1, 0x9, 0x5, 0x74, 0x8, 0x20000000, 0x9, 0xcf4, 0xb, 0xccab, 0x8000, 0x8, 0x1, 0x7fff, 0x7fff, 0x7, 0x11e, 0x401, 0x7, 0x9, 0x10000, 0x800, 0x3, 0x6, 0x7, 0x800, 0x4, 0x1, 0x80000000, 0x7fff, 0x7, 0xea, 0x3, 0x16, 0x0, 0x5, 0xff, 0x9, 0x0, 0x8001, 0x1, 0x3, 0x400, 0x4, 0x6, 0x3, 0xd39, 0x7, 0x5, 0x7, 0x4d48], 0x7, [{[0x6, 0x80000001], @initdev={0xac, 0x1e, 0x0, 0x0}}, {[0x1f7, 0x4], @empty}, {[0xfffffd07, 0x3], @broadcast}, {[0xe, 0x400], @rand_addr=0x64010100}, {[0x5, 0x3], @initdev={0xac, 0x1e, 0x1, 0x0}}, {[0xbd24, 0xfffffff9], @initdev={0xac, 0x1e, 0x0, 0x0}}, {[0x0, 0x4], @dev={0xac, 0x14, 0x14, 0x3d}}]}, {[0x1, 0x101, 0x159, 0x6, 0x5, 0x6, 0x6, 0x100, 0x6, 0xf9, 0x8, 0x44, 0x7, 0x5, 0x7ff, 0x4, 0x9db, 0x401, 0xfffffff8, 0x2f4, 0x9, 0x7, 0x4, 0xffff, 0x9, 0x2, 0x3, 0xfffffffd, 0x10000, 0x5, 0x5, 0x6, 0x5, 0x200, 0x8, 0x800, 0x3, 0x7f, 0x9, 0x2, 0x10000, 0xffffffff, 0x9, 0x80, 0x5, 0x7ff, 0x3, 0x8, 0x3, 0x1, 0xd5c7, 0xd, 0x7, 0x97, 0x200, 0x3, 0x1ff, 0x38428ab2, 0x6, 0x3, 0x0, 0x35, 0x3, 0xf835, 0x8, 0x6, 0xffffff57, 0x10001, 0x0, 0x2, 0x66, 0x8001, 0xb, 0x8, 0x78f5, 0x4, 0x3, 0x4f80, 0x7, 0x4, 0x3, 0x4b07e63b, 0x0, 0x5, 0xfffffff7, 0x3, 0x3, 0x0, 0x6, 0x3, 0x3, 0x7, 0x0, 0x7, 0x9, 0x9, 0x2, 0x10001, 0x7, 0x7, 0x6, 0x5, 0x19cc481a, 0x7, 0x1ff, 0x1, 0x3, 0x0, 0x72b0, 0x7fff, 0x5, 0x9, 0x9, 0xffffffff, 0xa120, 0x2, 0x1ff, 0xe, 0x240, 0xd77, 0x1, 0x1000000, 0x9, 0x4, 0x0, 0x5, 0x9, 0x5, 0x10, 0x2, 0x4, 0x0, 0x1, 0x0, 0x1, 0x6, 0x8, 0x30, 0x5, 0x8000000, 0x3, 0x0, 0xe04625ce, 0x7, 0x5, 0x742b3690, 0x400, 0x5, 0x40, 0x8, 0x3, 0x86, 0x6, 0x7, 0x943, 0x5, 0x80000000, 0x38f58f88, 0x4, 0x66, 0x0, 0x451c, 0x4, 0xd, 0x5, 0x1, 0x2, 0x4, 0x30b179c0, 0xffffffff, 0x80, 0xffffff7f, 0x0, 0x6, 0x4, 0x3da, 0x4, 0x4, 0x6, 0xffff, 0x120, 0xd92, 0x6423, 0x6, 0x7, 0x7, 0x80000001, 0x0, 0x0, 0x5, 0x1, 0x4, 0x80, 0x8000, 0x9, 0x3ff, 0x10000, 0x80000000, 0x71, 0x2cf97d79, 0x401, 0x1, 0x2, 0xd, 0x7f, 0x5, 0x800, 0x5, 0xd, 0xc2ff, 0x8, 0xffffffff, 0x7, 0x3ff, 0xe, 0x4, 0x6, 0x6, 0x3, 0x2ade, 0x7ff, 0x6, 0x7, 0x4, 0x5, 0x7f, 0x0, 0x3, 0x6, 0x6, 0x3, 0x77, 0x4, 0x80, 0x1, 0x7, 0x4, 0x6, 0x6, 0x0, 0x9, 0xe, 0x8, 0x0, 0x10000, 0x80000000, 0x0, 0x43b, 0x9, 0x80000001, 0x4, 0x9, 0x7bd, 0x3e, 0x6, 0x0, 0x5], 0x3, [{[0x6, 0xf9], @private=0xa010102}, {[0x0, 0x8], @initdev={0xac, 0x1e, 0x0, 0x0}}, {[0x5, 0x8], @remote}]}}}}], [@arpreply={'arpreply\x00', 0x10, {{@dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, 0xffffffffffffffff}}}, @snat={'snat\x00', 0x10, {{@random="4ec8e2833ae1", 0xfffffffffffffffe}}}], @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffc}}}]}, {0x0, '\x00', 0x3, 0xfffffffffffffffc, 0x1, [{0x11, 0x0, 0xf2, 'geneve0\x00', 'veth1_to_hsr\x00', 'ipvlan0\x00', 'veth0_to_bridge\x00', @broadcast, [0x0, 0x0, 0xff, 0x0, 0xff, 0xff], @random="6a1c920f78e1", [0xff, 0xff, 0xff, 0xff, 0xff], 0xde, 0x14e, 0x186, [@pkttype={{'pkttype\x00', 0x0, 0x8}, {{0x4}}}, @owner={{'owner\x00', 0x0, 0x18}, {{0x0, r10, 0xee00, 0xee00, 0x0, 0x5}}}], [@snat={'snat\x00', 0x10, {{@local, 0xffffffffffffffff}}}, @arpreply={'arpreply\x00', 0x10, {{@dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}, 0xffffffffffffffff}}}], @arpreply={'arpreply\x00', 0x10, {{@remote, 0xfffffffffffffffc}}}}]}]}, 0xe78) setsockopt(r9, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001f00)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}], 0x1, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r9, 0x84, 0x17, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYBLOB="02000120fa"], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r9, 0x84, 0x19, &(0x7f0000000100)={0x0, 0x2}, 0x8) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000010000108feffffff0000000000000000", @ANYRES32=0x0, @ANYRESHEX=r0, @ANYRES64=r0, @ANYRES16=0x0], 0x28}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback, 0xfffffffd}}, 0x0, 0x0, 0xc9a5, 0x0, 0x54, 0x6}, 0x9c) 46.468278394s ago: executing program 1 (id=3250): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x9, 0x4, 0xb47e, 0xb, 0x3, 0xd, 0xf, 0x1ff}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b928, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xb}, {0xffe0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x5, 0x7, 0x8, 0x1, 0xfffffffc, 0x6}, [@TCA_NETEM_REORDER={0xc, 0x3, {0x6, 0x8}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x240040e0}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000002000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) 46.45470535s ago: executing program 3 (id=3251): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockname$llc(r1, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000040)=0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="8c00000010802f0b77da69e39cca1f39ddd3ef001f", @ANYRES32=0x0, @ANYRES32], 0x8c}, 0x1, 0x0, 0x0, 0x800}, 0x14) 45.795344152s ago: executing program 3 (id=3252): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001180)=ANY=[@ANYRES16=0x0], &(0x7f0000000100)='GPL\x00', 0x0, 0x29, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x40}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) 45.606670689s ago: executing program 0 (id=3253): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@delsa={0x48, 0x12, 0x1, 0x0, 0x0, {@in=@dev}, [@srcaddr={0x14, 0xd, @in6=@rand_addr=' \x01\x00'}, @mark={0xc}]}, 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0xfffffffffffffe7d, 0x10, 0x401, 0x3, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x190, 0xf1f80502f07a58b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @wireguard}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40010}, 0x240080c1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0x401, 0x70bd28, 0x1, {0x0, 0x0, 0x0, 0x0, 0x8, 0x10000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) accept4(0xffffffffffffffff, &(0x7f0000000200)=@xdp, &(0x7f0000000280)=0x80, 0x400) 45.435603521s ago: executing program 4 (id=3254): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_int(r0, 0x0, 0x1, &(0x7f0000000000)=0xab7, 0x4) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x8000) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000340)={'batadv_slave_0\x00'}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030080e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000040}, 0x24004000) sendmsg$NFT_BATCH(r8, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000100)={&(0x7f000000c300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x4000400}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}], {0x14}}, 0x64}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r10, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x34, r10, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_IE={0x6, 0x2a, [@random={0xdd}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x34}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_OCB(r7, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x28, r10, 0x1, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0x3, 0x19}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8800}, 0x8000) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000680)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014020d000a00000000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d00d00000000000000bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 45.375391946s ago: executing program 3 (id=3255): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240), 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x2, 0x300}, {0x6e, 0x0, 0x0, 0xffffffc3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xc, 0x9, 0x0, 0x0, 0x10000258}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 45.023990364s ago: executing program 3 (id=3256): r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000040)={0x101, 0x5, 0x3ff, 0x8}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="000000008b2f00001c00128009000100626f6e64000000000c00028008000500ffedffff080003"], 0x44}}, 0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000e9e36c6b84f74a8e48fd5db394baa4f700", @ANYRES16=r2, @ANYBLOB="010027bd7000fcdbdf25010000000800020000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x200080c0}, 0x4000) socket$nl_generic(0x10, 0x3, 0x10) (async) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000040)={0x101, 0x5, 0x3ff, 0x8}, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="000000008b2f00001c00128009000100626f6e64000000000c00028008000500ffedffff080003"], 0x44}}, 0x0) (async) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), 0xffffffffffffffff) (async) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000e9e36c6b84f74a8e48fd5db394baa4f700", @ANYRES16=r2, @ANYBLOB="010027bd7000fcdbdf25010000000800020000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x200080c0}, 0x4000) (async) 44.972449868s ago: executing program 1 (id=3257): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240), 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xb0}, {{0x18, 0x1, 0x1, 0x0, r1, 0x0, 0x0, 0xa00}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x2, 0x300}, {0x6e}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xc, 0x9, 0x0, 0x0, 0x10000020}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x20000010}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 44.647194477s ago: executing program 1 (id=3258): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_int(r0, 0x0, 0x1, &(0x7f0000000000)=0xab7, 0x4) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x8000) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000340)={'batadv_slave_0\x00'}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030080e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000040}, 0x24004000) sendmsg$NFT_BATCH(r8, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000100)={&(0x7f000000c300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x4000400}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}], {0x14}}, 0x64}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r10, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x38, r10, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_IE={0xb, 0x2a, [@random={0xdd, 0x5, 'abcde'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x38}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_OCB(r7, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x28, r10, 0x1, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0x3, 0x19}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8800}, 0x8000) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000680)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014020d000a00000000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d00d00000000000000bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 44.371796902s ago: executing program 0 (id=3259): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) pipe(&(0x7f0000000240)={0xffffffffffffffff}) r3 = socket$netlink(0x10, 0x3, 0x0) splice(r2, 0x0, r3, 0x0, 0x10d00, 0xf) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000001c0)={0x1c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(r3, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, r5, 0x2, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xabf0}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x8040) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000880)=@setlink={0x28, 0x13, 0xbaa23f3d13f2d1f5, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_TXQLEN={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) recvmsg(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000c00)=""/96, 0xffffffffffffffdc}], 0x3}, 0x400002e1) sendmsg$FOU_CMD_ADD(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01002dbd7000000000000100000008000600e0000001050004000100000008000b"], 0x2c}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001dc0)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000340)="7b674bb8226d939af37f4b76bea4c48e6c376a2b3fb26af1cc509d47d8fabbad9e5fdc5a09bdd90fae1e4e1eac9b066912c5d43a284febe8a3afb1b43a39639aacd1480c0ba01ce28cbb25b292de234e42b706d031e9219567638a15b52e2b65d9e43a860e7b87f1787ebd76526da20b464e788a61ba5f252462d998adff01a34074ff45069f50f124f564ad7c0287065bbc4d224dbc7d845ab059a35ddc1a1123c400daf75cdf3884a74be4b6314a088fc6312d858b16a7742372b3cfa7c7a012f0724ad3599384c80fee834f2a262f", 0xd0}, {&(0x7f0000000440)="16a66589736ee316a6cc9099eb62365f474c27f9a52689be4aef50e141dea60bf6420f3937d71c5f4ab1f8d88ff4def7095ae93a49fccbb1e5304a9863acdfb20065c88dfcd6ec7b73397f8a64b6df9d6429253b7bfcef4de839cd2262bb2e4d7f", 0x61}, {&(0x7f0000000540)="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", 0xfc}, {&(0x7f0000000680)="d5a89b6f5abe00cdd233", 0xa}, {&(0x7f00000006c0)="7f6672bb61e104180a5fa389075ade0f9ad34829d6a46b975e10c3f9c80394a319e968f5f931b940a8c93653ed30e69c26b02eae7c4137f6924c20910f268ebc0965f9cc459d5b66329128c729c5b3a8ed5d969ed04ea9367153dde2841681715df0800764404deb2ce7888d414a434ab15f3020ccdee6cbc2115ab7a1e54326d80f1870c12bcbcffde939194491acf013e965d1c3e781867d8dcfeecc7995b0e28afe901ff845f00c40bc79fef9c448345db26b5d5c8f74e49351d93eb7fe01362cc9228f86d521f3c49f83f35e9ab8554ea60aa30d1acba1e5c82eefef22ce5289b1ad6d990e2981e3d9b871", 0xed}, {&(0x7f00000007c0)="9b5eb956d7ef7293c569597f", 0xc}], 0x6, &(0x7f0000000880)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @loopback, @broadcast}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7ff}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x54}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}], 0x68}}, {{&(0x7f0000000900)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000000e80)=[{&(0x7f0000000940)="a7b69508e27764cbe5ad2c7a28549b0acccd4ac64cebaaaa6b8e202f606f834c3d740d0083610a9615ac58892f111bda25223d7b30ee50570142db189aa0792b6f0efd46b7f632762e2a725ef2698009b231410e6d0f21b97a983830a682216803e4eb4594a6987d09b0c0f25b0039f9b256ba9bc91605c9461e9b00c565142831cae515076383b858924e544b3f50b677793a57bfc32dc7136972a2355b51e2de819393b575", 0xa6}, {&(0x7f0000000a00)="3150b901c2e2b75910c9bf02ed2bb391dda899ec72cec55acb0d7bf084b48eb0284b5ef386172f96ff57418261648da87629ca8d854c7d0486bf80a3a8c239396eec0ec5737a763caaca8292bd8a51ab4f7f5058de35e301648105932997b1ccd40f03505d8f7b9c9dafc4ec4a83c0b8de86ec0ea3652b59394334d021934519c64d20fc32a380472bf373723fc3eb9b2eb7b72cb81876b835bd11c359c5f5c298a0ebdb94687cc01227e7aeacef642f6ed33b954556b1ef4f57f13d1b8b63f1712a8451379147f6bfee503f61ec35d86fe3511b2229ffad5b44173267e653727d8fefdea8e92aa9", 0xe8}, {&(0x7f0000000b00)="950ec8c30644bf36dcd8819af9c12b9a88df8f0cadde2b83fcecfd3625055aa3ac2637a2fbb82e3af21b0673634923b225d4b01334185b3568db3e485b0bad977980a4add3a0348c1b6c8411f4df33b5f4edbec01d1c5abd1b66c4047b05bceb49c638490e5b62b1ad4867d911f50018299d60976b76f0651987cd2506cfb60ab6409730bff655f3dd08cfa731a8390e7d432272324ca4f0458d80ac1bf0f2e019801dc59fd3105d030ae37d89395b82131cd2402deaf8b9ee5f35fec8a0a0411e547f674b135f4993013b1033561b0a5e1378d5115c", 0xd6}, {&(0x7f0000000c00)="3050237e3a16a3dde7c6f7f211a08bf3d584cfbb03c071b249f702e230f9126337fc4f22ebd6740683bfe8954e952a8f57d45838a6e9dfccc884f6ee79a3b29f5de234cb3ad098a9a9990aa4e60fd1061d55011b104aee4944a44053bbab893a2c15b9c91de5ecc82a9df731d019209a7c0370134020b4fafc39fd4022f47fcb6b22fc8b2e36f27821b4d1298fbe9019", 0x90}, {&(0x7f0000000cc0)="860e987161c0f6217a5f1463738fffc0eadbb403065450f275140fddd7e84d28f0134aa78f6bcf47590b55497af53766a689eabb6fe2d0cae85c163275920a8532db709688dbba57348be1d5d07e811f2853bcee409d6e7d90ac3b5198244336624aa6336bb5064c3b5b17afa6237dd7ade21a0855e2d431b49848f69ff55ca95dc16fe7c5712cdfbe3f329cbd9655ccfaaf7733b07534923199e826ca7cadb585dffc", 0xa3}, {&(0x7f0000000d80)="788280363a71bef7d4956b608e978bbc2cb464c1b538f8f60ed183232c0db4350d8a7bcf6a610997654bc009608950367a7caf360dc6ab642bc2140d351854af7d1074c1bff7c984a7ad133b17b6c3c3c040420058d1584d061bbeb6c9bfd2082d62af5513bb7d16a46da8e0b145989863f1daa89a077f7a03620a0d8edad7b767850ad14978b81630a8339dabc4283319a2e78d9771b5ff062b45da3fdea92ea2ede6431932983997868beec7ba5cc125c8b2963d8f1e37589314286ce58ba035d9f4801254d965494905", 0xcb}], 0x6, &(0x7f0000000f00)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @local, @remote}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xc6}}], 0xb0}}, {{&(0x7f0000000fc0)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f0000001280)=[{&(0x7f0000001000)="1aee4d32c495e07fce73f90708eb876aecab04923d104cbe4569481a8d0c99c7", 0x20}, {&(0x7f0000001040)="2dff9c1c5a5e368d66214f817b13d347385dada94871fda8b34eadeb813b9b1497135f09eb4e4f9ddde053fd1ae47e48b9afb9e5b2f82f3b81d2568e4f73696b13d248bf2619d9d217bf7df2cffb893cd9b7ad8532d4339434cc80effa570475ae995624f2e4f4bc8743e95452a6c0623059c4dc0d63dcd8fc91", 0x7a}, {&(0x7f00000010c0)="b7ff5d00cc7da5d4329fe1dc1d942460287b53e29f28c7f9b01f1df8426ec92b7239dc93abee045ee93c268e395c50c0e3c843493fd098dacae9f0dc71386aa2607a1c413d62938bfe208ea6d4530ae62a64213a6a5794a56db429c03c33c2437228bd01460eb87bebfac836ddc0fc598cd0f59a6e20ad8f26f1f0d1b4ea068fbfce7f3546d659425e3ac5f2784e7b818c7b215aeb3fceb918f58c5961d0c6b42c8808da69f695cf13edaa5e382da9854f0714961849997aaa4624324940e194a6a1aafc1d706e1dabef3e0d04", 0xcd}, {&(0x7f00000011c0)="03a876f68fa2b32030b13e1dd8c9de7c1f3103b989eebb4bde385f5649dab6074f068286225a161bbb699b699b7e000a166981a2725a1dae66b0e3f3ba47233b9fc02dc0b02191605148434f84fd4669f8c1df45bc48c2ce782b22800250fca30329a1629e7c387c16006dcfc1d70814e917e1e630cd680990c9f01b214c77484b8f1d0a27817cc52437b81431c31ac542eb89eaed009523c3a50dbc", 0x9c}], 0x4, &(0x7f00000012c0)=[@ip_retopts={{0x98, 0x0, 0x7, {[@generic={0x94, 0xb, "5144123cf61459ce8e"}, @lsrr={0x83, 0xf, 0x5f, [@loopback, @private=0xa010101, @local]}, @rr={0x7, 0x23, 0x43, [@private=0xa010102, @multicast1, @loopback, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @rand_addr=0x64010100, @loopback]}, @ssrr={0x89, 0xf, 0x6d, [@dev={0xac, 0x14, 0x14, 0xa}, @private=0xa010102, @rand_addr=0x64010100]}, @lsrr={0x83, 0x1f, 0x3b, [@local, @private=0xa010101, @private=0xa010100, @remote, @loopback, @loopback, @remote]}, @rr={0x7, 0x1b, 0x33, [@private=0xa010100, @dev={0xac, 0x14, 0x14, 0x1a}, @rand_addr=0x64010102, @private=0xa010101, @local, @remote]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @multicast1, @broadcast}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xfffff000}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_retopts={{0xf0, 0x0, 0x7, {[@generic={0x86, 0x4, "0514"}, @end, @end, @timestamp_prespec={0x44, 0x34, 0x1b, 0x3, 0x6, [{@multicast1, 0xff}, {@loopback, 0x5}, {@dev={0xac, 0x14, 0x14, 0xc}, 0x6}, {@broadcast, 0x2}, {@remote, 0x3}, {@broadcast, 0x2000000}]}, @generic={0x14110e60e7afba9f, 0xe, "095524b09197ae1a670aaa1c"}, @timestamp_prespec={0x44, 0x34, 0x5d, 0x3, 0x1, [{@multicast1, 0x8000}, {@broadcast, 0x1}, {@remote, 0x3}, {@multicast2}, {@rand_addr=0x64010101, 0x990e}, {@loopback}]}, @timestamp_prespec={0x44, 0x54, 0x6, 0x3, 0x7, [{@loopback, 0x7}, {@loopback, 0x15c}, {@remote, 0x7fff}, {@broadcast, 0xb0a}, {@empty, 0x24ef}, {@multicast1, 0xf}, {@dev={0xac, 0x14, 0x14, 0x30}, 0xfffffe01}, {@empty, 0x8000}, {@multicast2, 0x2}, {@local, 0x8000}]}, @timestamp={0x44, 0x10, 0x3c, 0x0, 0x7, [0xd57b, 0x5, 0x3]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x453}}], 0x228}}, {{&(0x7f0000001500)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f0000001800)=[{&(0x7f0000001540)="be1c0420da8a70d683737164619fa02742943c820e4486be763c0bb74ba15677a1a00f03f808c2f37e6b047c549a794f0689cb36029fe2650c4f94c16a5673ac5cf106f0f5981ddbc523eec7464faa3dc9ca88d85aa64d991d6486ac30873cf50985684a2315a8697bd08c147dc79ef3c33ca2c145931a1d4f730bca8a724a0b9708b9b9a0e67c9066c5ce104d772f33841321b9c29968a169565d8214988228722d48339026aea8e69494f9bcaa61686d6ceab91d69aad07efcab0fe8c7d5685976191590930e9ecee53674d7af92119d4453de565555bcdbd5dfbc0e67dd25aa9bfef8c0e426db334983cc88f9bac8", 0xf0}, {&(0x7f0000001640)="3a874a12a3dd99e3ad7fa6c85f307dc4c27572af55c467cb58ab2111a032b0519fb7cdcceb6d8480d1536390eb7aea0d14bdc606f5dbe70f926804b7802577ec573ea2169dbe64d3c9fdca37937f4e325b218a6c37147154a99614ab97ef9e86d419084d182107048c1771ee3b50aa762fe2e0a173a467e0652a9f14f3ee2a974040af8a83a4070805425585dc2fdc341a212ed9457a58c9307a1c09f926ff", 0x9f}, {&(0x7f0000001700)="e687dcda204f4856eb982aa9ffd5d23f3ba977d7d174a7c8f5483902069680dc890036983e7209fcd3cec2d30b2bca33dcd0575d6c499192035cf5b26129f1d645f472b3d5c74eec07e2a183179c95b3ad525706f5c9c3e1e91597d0a452f8af9f63ccccdfd9105d4498e70824dffb7a2915885be2b692e42b72adf96f98c525172f3ece21df0d9178cc058da7a640c23c7c59433ee6e47a1d1b8986d5140d0e5395e42061f34cb597bdd8c13dceda11d46ad1df3a2e2f49c664114c6ec49c9b2da499de0b1aa9436a0469b4f3bf615f8aded08c926c", 0xd6}], 0x3, &(0x7f0000001840)=ANY=[@ANYBLOB="1400000000000000000000000200000008000000000000001c000000000000000000000008000000", @ANYRES32=r1, @ANYBLOB="64010100ac1414bb0000000014000000000000000000000002000000faffffff000000001400000000000000000000000100000020010000000000001c000000000000000000000008000000", @ANYRES32=r1, @ANYBLOB="0a010101ffffaabf00000000140000000000000000000000010000000001000000000000140000000000000000000000020000000400000000000000910000000000000000000000010000000200000000000000240000000000000000000000070000000713e3ac1e0001ac1e0101e00000020a0101020000000000"], 0xf8}}, {{&(0x7f0000001940)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000001c00)=[{&(0x7f0000001980)="6478dd5c641188c419d8e31f5e48496160d895babeac0654f2defc6424f9948407f29e5ab993cc231284285833b6fd240595b6bd248a694ae185fd9518f9572f22faf44c5842c52584cdd5f2342ec92ea42e7b4570605c83617755252477476ac2e8add51225948e10313a0e4a826800aa64c6ca540b371a0692762f2c754c550d64c0c9bca3131adea1ea4b7b5f79ffbf428630be013d2d80556c315fa0616ec2718127d74f24d9975734c1263b", 0xae}, {&(0x7f0000001a40)="b9b0473286b703710008114a0de3540455ff07853c790c6b61ba111a00792ebbc3a74543f8d97d55ab926920099784102a96455676f66e3490ee9e37927478949ab1f00cd634f311d0f2b1602eb07b87c93b005e46e4668a771199d992268c220c41d3a59d148f5b9ab46c2095e188d46ad4698981801180bd11d8347c5701cd9984a2b6af452d4d045b6d4da66ad3ec5382be9fc50d81e67739abe770ff4df9e6dcde62ef1369787c7d745501faa807b48bc0de586881625cf27e3aacd32a2154ccd848c01f0427d557523e89508adfb7f53e975a98dec14655b3ab85b98a3bf2dfdde5462ae92f", 0xe8}, {&(0x7f0000001b40)="e16080daf30cf81eee96c37afb5b67419c31809c9cf2bb478ce89b939e33f26265c01ab37291fc1a4c9c3aabc3d26092ef1a9975c06b81b79fb50d0639", 0x3d}, {&(0x7f0000001b80)="af32b0294de7ca285cf98cd8abe5f5950c29f840086dc952ebe2dcf1826b4bf2321d2783", 0x24}, {&(0x7f0000001bc0)="a0b872c161e319cde673ac2e7a631c603c2ac03b163ebbf09e6ea06d830ac83b45", 0x21}], 0x5, &(0x7f0000001c80)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_retopts={{0x30, 0x0, 0x7, {[@rr={0x7, 0x7, 0x8c, [@loopback]}, @noop, @lsrr={0x83, 0x7, 0x60, [@rand_addr=0x64010101]}, @lsrr={0x83, 0xf, 0x91, [@empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9f3}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @dev={0xac, 0x14, 0x14, 0x1f}, @rand_addr=0x64010101}}}, @ip_tos_int={{0x14}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @multicast2, @multicast1}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @rand_addr=0x64010101, @rand_addr=0x64010100}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xa7bb}}], 0x108}}], 0x5, 0x4000000) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a44, 0x1700) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) unshare(0x400) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000200)={@fallback=r12, r13, 0x36, 0x2010}, 0x20) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x0, 0x2}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r14 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r14, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000002e00b31d133f7000000000000400000004000e008dfb1644d2221752a83af913eb01430ef0c349da75eea3edd7dda103abc317c4"], 0x18}}, 0x0) 27.081276906s ago: executing program 3 (id=3260): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), r2) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="c22b00", @ANYRES16=r3, @ANYBLOB="010028bd7000fbdbdf25040000001400018008000500000000000600010002000000"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xb4, r3, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x60, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x8}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xffe0}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x24000010}, 0x4000) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x44, 0x2, 0x2, 0x201, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_EXPECT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x884}, 0x80) write$tun(r0, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x300, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x3c, 0x8016, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @broadcast}, {{0xa200, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x1}}}}, 0xfdef) 0s ago: executing program 32 (id=3259): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) pipe(&(0x7f0000000240)={0xffffffffffffffff}) r3 = socket$netlink(0x10, 0x3, 0x0) splice(r2, 0x0, r3, 0x0, 0x10d00, 0xf) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000001c0)={0x1c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(r3, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, r5, 0x2, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xabf0}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x8040) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000880)=@setlink={0x28, 0x13, 0xbaa23f3d13f2d1f5, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_TXQLEN={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) recvmsg(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000c00)=""/96, 0xffffffffffffffdc}], 0x3}, 0x400002e1) sendmsg$FOU_CMD_ADD(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01002dbd7000000000000100000008000600e0000001050004000100000008000b"], 0x2c}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001dc0)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000340)="7b674bb8226d939af37f4b76bea4c48e6c376a2b3fb26af1cc509d47d8fabbad9e5fdc5a09bdd90fae1e4e1eac9b066912c5d43a284febe8a3afb1b43a39639aacd1480c0ba01ce28cbb25b292de234e42b706d031e9219567638a15b52e2b65d9e43a860e7b87f1787ebd76526da20b464e788a61ba5f252462d998adff01a34074ff45069f50f124f564ad7c0287065bbc4d224dbc7d845ab059a35ddc1a1123c400daf75cdf3884a74be4b6314a088fc6312d858b16a7742372b3cfa7c7a012f0724ad3599384c80fee834f2a262f", 0xd0}, {&(0x7f0000000440)="16a66589736ee316a6cc9099eb62365f474c27f9a52689be4aef50e141dea60bf6420f3937d71c5f4ab1f8d88ff4def7095ae93a49fccbb1e5304a9863acdfb20065c88dfcd6ec7b73397f8a64b6df9d6429253b7bfcef4de839cd2262bb2e4d7f", 0x61}, {&(0x7f0000000540)="10cad00ffd23fc80f312fc5c8ad24291b9b830f432e1294c9b49eaf77bd45a05b16ec9ea2472c581f87b71e6fec4bcaff199aeb95165e370c6b162ffa71fbc967f0c4785f5225d1600df6ec50eabb52c9ff78237197a48d7453964514f6425d88528399a09643eff933d7980750f8a657a5bb50ce22e51c700089fc994917f49ad0d59aa7b970efd423465b12e06ac9f84a8eed08ecd4b8c05966bdbeaad9efb03e0428f3d3572a23d7725e6a135e602ab36d087b637c71bf3fd273ecfe9ea0bde893d3d92547b6498688bd0c290622ee9a717d13e018edcfeb0837e2f1d29a5891fa631b9b388b4e654f5f5f92fe3680b5becf9d9bf937b10904e6c", 0xfc}, {&(0x7f0000000680)="d5a89b6f5abe00cdd233", 0xa}, {&(0x7f00000006c0)="7f6672bb61e104180a5fa389075ade0f9ad34829d6a46b975e10c3f9c80394a319e968f5f931b940a8c93653ed30e69c26b02eae7c4137f6924c20910f268ebc0965f9cc459d5b66329128c729c5b3a8ed5d969ed04ea9367153dde2841681715df0800764404deb2ce7888d414a434ab15f3020ccdee6cbc2115ab7a1e54326d80f1870c12bcbcffde939194491acf013e965d1c3e781867d8dcfeecc7995b0e28afe901ff845f00c40bc79fef9c448345db26b5d5c8f74e49351d93eb7fe01362cc9228f86d521f3c49f83f35e9ab8554ea60aa30d1acba1e5c82eefef22ce5289b1ad6d990e2981e3d9b871", 0xed}, {&(0x7f00000007c0)="9b5eb956d7ef7293c569597f", 0xc}], 0x6, &(0x7f0000000880)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @loopback, @broadcast}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7ff}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x54}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}], 0x68}}, {{&(0x7f0000000900)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000000e80)=[{&(0x7f0000000940)="a7b69508e27764cbe5ad2c7a28549b0acccd4ac64cebaaaa6b8e202f606f834c3d740d0083610a9615ac58892f111bda25223d7b30ee50570142db189aa0792b6f0efd46b7f632762e2a725ef2698009b231410e6d0f21b97a983830a682216803e4eb4594a6987d09b0c0f25b0039f9b256ba9bc91605c9461e9b00c565142831cae515076383b858924e544b3f50b677793a57bfc32dc7136972a2355b51e2de819393b575", 0xa6}, {&(0x7f0000000a00)="3150b901c2e2b75910c9bf02ed2bb391dda899ec72cec55acb0d7bf084b48eb0284b5ef386172f96ff57418261648da87629ca8d854c7d0486bf80a3a8c239396eec0ec5737a763caaca8292bd8a51ab4f7f5058de35e301648105932997b1ccd40f03505d8f7b9c9dafc4ec4a83c0b8de86ec0ea3652b59394334d021934519c64d20fc32a380472bf373723fc3eb9b2eb7b72cb81876b835bd11c359c5f5c298a0ebdb94687cc01227e7aeacef642f6ed33b954556b1ef4f57f13d1b8b63f1712a8451379147f6bfee503f61ec35d86fe3511b2229ffad5b44173267e653727d8fefdea8e92aa9", 0xe8}, {&(0x7f0000000b00)="950ec8c30644bf36dcd8819af9c12b9a88df8f0cadde2b83fcecfd3625055aa3ac2637a2fbb82e3af21b0673634923b225d4b01334185b3568db3e485b0bad977980a4add3a0348c1b6c8411f4df33b5f4edbec01d1c5abd1b66c4047b05bceb49c638490e5b62b1ad4867d911f50018299d60976b76f0651987cd2506cfb60ab6409730bff655f3dd08cfa731a8390e7d432272324ca4f0458d80ac1bf0f2e019801dc59fd3105d030ae37d89395b82131cd2402deaf8b9ee5f35fec8a0a0411e547f674b135f4993013b1033561b0a5e1378d5115c", 0xd6}, {&(0x7f0000000c00)="3050237e3a16a3dde7c6f7f211a08bf3d584cfbb03c071b249f702e230f9126337fc4f22ebd6740683bfe8954e952a8f57d45838a6e9dfccc884f6ee79a3b29f5de234cb3ad098a9a9990aa4e60fd1061d55011b104aee4944a44053bbab893a2c15b9c91de5ecc82a9df731d019209a7c0370134020b4fafc39fd4022f47fcb6b22fc8b2e36f27821b4d1298fbe9019", 0x90}, {&(0x7f0000000cc0)="860e987161c0f6217a5f1463738fffc0eadbb403065450f275140fddd7e84d28f0134aa78f6bcf47590b55497af53766a689eabb6fe2d0cae85c163275920a8532db709688dbba57348be1d5d07e811f2853bcee409d6e7d90ac3b5198244336624aa6336bb5064c3b5b17afa6237dd7ade21a0855e2d431b49848f69ff55ca95dc16fe7c5712cdfbe3f329cbd9655ccfaaf7733b07534923199e826ca7cadb585dffc", 0xa3}, {&(0x7f0000000d80)="788280363a71bef7d4956b608e978bbc2cb464c1b538f8f60ed183232c0db4350d8a7bcf6a610997654bc009608950367a7caf360dc6ab642bc2140d351854af7d1074c1bff7c984a7ad133b17b6c3c3c040420058d1584d061bbeb6c9bfd2082d62af5513bb7d16a46da8e0b145989863f1daa89a077f7a03620a0d8edad7b767850ad14978b81630a8339dabc4283319a2e78d9771b5ff062b45da3fdea92ea2ede6431932983997868beec7ba5cc125c8b2963d8f1e37589314286ce58ba035d9f4801254d965494905", 0xcb}], 0x6, &(0x7f0000000f00)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @local, @remote}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xc6}}], 0xb0}}, {{&(0x7f0000000fc0)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f0000001280)=[{&(0x7f0000001000)="1aee4d32c495e07fce73f90708eb876aecab04923d104cbe4569481a8d0c99c7", 0x20}, {&(0x7f0000001040)="2dff9c1c5a5e368d66214f817b13d347385dada94871fda8b34eadeb813b9b1497135f09eb4e4f9ddde053fd1ae47e48b9afb9e5b2f82f3b81d2568e4f73696b13d248bf2619d9d217bf7df2cffb893cd9b7ad8532d4339434cc80effa570475ae995624f2e4f4bc8743e95452a6c0623059c4dc0d63dcd8fc91", 0x7a}, {&(0x7f00000010c0)="b7ff5d00cc7da5d4329fe1dc1d942460287b53e29f28c7f9b01f1df8426ec92b7239dc93abee045ee93c268e395c50c0e3c843493fd098dacae9f0dc71386aa2607a1c413d62938bfe208ea6d4530ae62a64213a6a5794a56db429c03c33c2437228bd01460eb87bebfac836ddc0fc598cd0f59a6e20ad8f26f1f0d1b4ea068fbfce7f3546d659425e3ac5f2784e7b818c7b215aeb3fceb918f58c5961d0c6b42c8808da69f695cf13edaa5e382da9854f0714961849997aaa4624324940e194a6a1aafc1d706e1dabef3e0d04", 0xcd}, {&(0x7f00000011c0)="03a876f68fa2b32030b13e1dd8c9de7c1f3103b989eebb4bde385f5649dab6074f068286225a161bbb699b699b7e000a166981a2725a1dae66b0e3f3ba47233b9fc02dc0b02191605148434f84fd4669f8c1df45bc48c2ce782b22800250fca30329a1629e7c387c16006dcfc1d70814e917e1e630cd680990c9f01b214c77484b8f1d0a27817cc52437b81431c31ac542eb89eaed009523c3a50dbc", 0x9c}], 0x4, &(0x7f00000012c0)=[@ip_retopts={{0x98, 0x0, 0x7, {[@generic={0x94, 0xb, "5144123cf61459ce8e"}, @lsrr={0x83, 0xf, 0x5f, [@loopback, @private=0xa010101, @local]}, @rr={0x7, 0x23, 0x43, [@private=0xa010102, @multicast1, @loopback, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @rand_addr=0x64010100, @loopback]}, @ssrr={0x89, 0xf, 0x6d, [@dev={0xac, 0x14, 0x14, 0xa}, @private=0xa010102, @rand_addr=0x64010100]}, @lsrr={0x83, 0x1f, 0x3b, [@local, @private=0xa010101, @private=0xa010100, @remote, @loopback, @loopback, @remote]}, @rr={0x7, 0x1b, 0x33, [@private=0xa010100, @dev={0xac, 0x14, 0x14, 0x1a}, @rand_addr=0x64010102, @private=0xa010101, @local, @remote]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @multicast1, @broadcast}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xfffff000}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_retopts={{0xf0, 0x0, 0x7, {[@generic={0x86, 0x4, "0514"}, @end, @end, @timestamp_prespec={0x44, 0x34, 0x1b, 0x3, 0x6, [{@multicast1, 0xff}, {@loopback, 0x5}, {@dev={0xac, 0x14, 0x14, 0xc}, 0x6}, {@broadcast, 0x2}, {@remote, 0x3}, {@broadcast, 0x2000000}]}, @generic={0x14110e60e7afba9f, 0xe, "095524b09197ae1a670aaa1c"}, @timestamp_prespec={0x44, 0x34, 0x5d, 0x3, 0x1, [{@multicast1, 0x8000}, {@broadcast, 0x1}, {@remote, 0x3}, {@multicast2}, {@rand_addr=0x64010101, 0x990e}, {@loopback}]}, @timestamp_prespec={0x44, 0x54, 0x6, 0x3, 0x7, [{@loopback, 0x7}, {@loopback, 0x15c}, {@remote, 0x7fff}, {@broadcast, 0xb0a}, {@empty, 0x24ef}, {@multicast1, 0xf}, {@dev={0xac, 0x14, 0x14, 0x30}, 0xfffffe01}, {@empty, 0x8000}, {@multicast2, 0x2}, {@local, 0x8000}]}, @timestamp={0x44, 0x10, 0x3c, 0x0, 0x7, [0xd57b, 0x5, 0x3]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x453}}], 0x228}}, {{&(0x7f0000001500)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f0000001800)=[{&(0x7f0000001540)="be1c0420da8a70d683737164619fa02742943c820e4486be763c0bb74ba15677a1a00f03f808c2f37e6b047c549a794f0689cb36029fe2650c4f94c16a5673ac5cf106f0f5981ddbc523eec7464faa3dc9ca88d85aa64d991d6486ac30873cf50985684a2315a8697bd08c147dc79ef3c33ca2c145931a1d4f730bca8a724a0b9708b9b9a0e67c9066c5ce104d772f33841321b9c29968a169565d8214988228722d48339026aea8e69494f9bcaa61686d6ceab91d69aad07efcab0fe8c7d5685976191590930e9ecee53674d7af92119d4453de565555bcdbd5dfbc0e67dd25aa9bfef8c0e426db334983cc88f9bac8", 0xf0}, {&(0x7f0000001640)="3a874a12a3dd99e3ad7fa6c85f307dc4c27572af55c467cb58ab2111a032b0519fb7cdcceb6d8480d1536390eb7aea0d14bdc606f5dbe70f926804b7802577ec573ea2169dbe64d3c9fdca37937f4e325b218a6c37147154a99614ab97ef9e86d419084d182107048c1771ee3b50aa762fe2e0a173a467e0652a9f14f3ee2a974040af8a83a4070805425585dc2fdc341a212ed9457a58c9307a1c09f926ff", 0x9f}, {&(0x7f0000001700)="e687dcda204f4856eb982aa9ffd5d23f3ba977d7d174a7c8f5483902069680dc890036983e7209fcd3cec2d30b2bca33dcd0575d6c499192035cf5b26129f1d645f472b3d5c74eec07e2a183179c95b3ad525706f5c9c3e1e91597d0a452f8af9f63ccccdfd9105d4498e70824dffb7a2915885be2b692e42b72adf96f98c525172f3ece21df0d9178cc058da7a640c23c7c59433ee6e47a1d1b8986d5140d0e5395e42061f34cb597bdd8c13dceda11d46ad1df3a2e2f49c664114c6ec49c9b2da499de0b1aa9436a0469b4f3bf615f8aded08c926c", 0xd6}], 0x3, &(0x7f0000001840)=ANY=[@ANYBLOB="1400000000000000000000000200000008000000000000001c000000000000000000000008000000", @ANYRES32=r1, @ANYBLOB="64010100ac1414bb0000000014000000000000000000000002000000faffffff000000001400000000000000000000000100000020010000000000001c000000000000000000000008000000", @ANYRES32=r1, @ANYBLOB="0a010101ffffaabf00000000140000000000000000000000010000000001000000000000140000000000000000000000020000000400000000000000910000000000000000000000010000000200000000000000240000000000000000000000070000000713e3ac1e0001ac1e0101e00000020a0101020000000000"], 0xf8}}, {{&(0x7f0000001940)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000001c00)=[{&(0x7f0000001980)="6478dd5c641188c419d8e31f5e48496160d895babeac0654f2defc6424f9948407f29e5ab993cc231284285833b6fd240595b6bd248a694ae185fd9518f9572f22faf44c5842c52584cdd5f2342ec92ea42e7b4570605c83617755252477476ac2e8add51225948e10313a0e4a826800aa64c6ca540b371a0692762f2c754c550d64c0c9bca3131adea1ea4b7b5f79ffbf428630be013d2d80556c315fa0616ec2718127d74f24d9975734c1263b", 0xae}, {&(0x7f0000001a40)="b9b0473286b703710008114a0de3540455ff07853c790c6b61ba111a00792ebbc3a74543f8d97d55ab926920099784102a96455676f66e3490ee9e37927478949ab1f00cd634f311d0f2b1602eb07b87c93b005e46e4668a771199d992268c220c41d3a59d148f5b9ab46c2095e188d46ad4698981801180bd11d8347c5701cd9984a2b6af452d4d045b6d4da66ad3ec5382be9fc50d81e67739abe770ff4df9e6dcde62ef1369787c7d745501faa807b48bc0de586881625cf27e3aacd32a2154ccd848c01f0427d557523e89508adfb7f53e975a98dec14655b3ab85b98a3bf2dfdde5462ae92f", 0xe8}, {&(0x7f0000001b40)="e16080daf30cf81eee96c37afb5b67419c31809c9cf2bb478ce89b939e33f26265c01ab37291fc1a4c9c3aabc3d26092ef1a9975c06b81b79fb50d0639", 0x3d}, {&(0x7f0000001b80)="af32b0294de7ca285cf98cd8abe5f5950c29f840086dc952ebe2dcf1826b4bf2321d2783", 0x24}, {&(0x7f0000001bc0)="a0b872c161e319cde673ac2e7a631c603c2ac03b163ebbf09e6ea06d830ac83b45", 0x21}], 0x5, &(0x7f0000001c80)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_retopts={{0x30, 0x0, 0x7, {[@rr={0x7, 0x7, 0x8c, [@loopback]}, @noop, @lsrr={0x83, 0x7, 0x60, [@rand_addr=0x64010101]}, @lsrr={0x83, 0xf, 0x91, [@empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9f3}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @dev={0xac, 0x14, 0x14, 0x1f}, @rand_addr=0x64010101}}}, @ip_tos_int={{0x14}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @multicast2, @multicast1}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @rand_addr=0x64010101, @rand_addr=0x64010100}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xa7bb}}], 0x108}}], 0x5, 0x4000000) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a44, 0x1700) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) unshare(0x400) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000200)={@fallback=r12, r13, 0x36, 0x2010}, 0x20) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x0, 0x2}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r14 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r14, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000002e00b31d133f7000000000000400000004000e008dfb1644d2221752a83af913eb01430ef0c349da75eea3edd7dda103abc317c4"], 0x18}}, 0x0) kernel console output (not intermixed with test programs): [T13166] CPU: 0 UID: 0 PID: 13166 Comm: syz.3.2368 Not tainted syzkaller #0 PREEMPT(full) [ 307.507769][T13166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 307.507781][T13166] Call Trace: [ 307.507790][T13166] [ 307.507798][T13166] dump_stack_lvl+0xe8/0x150 [ 307.507833][T13166] should_fail_ex+0x40c/0x560 [ 307.507871][T13166] should_failslab+0xa8/0x100 [ 307.507893][T13166] __kmalloc_noprof+0xe8/0x750 [ 307.507921][T13166] ? sock_kmalloc+0xd6/0x160 [ 307.507950][T13166] sock_kmalloc+0xd6/0x160 [ 307.507975][T13166] ____sys_sendmsg+0x1d7/0xa20 [ 307.508015][T13166] ? __pfx_____sys_sendmsg+0x10/0x10 [ 307.508048][T13166] ? import_iovec+0x73/0xa0 [ 307.508075][T13166] ___sys_sendmsg+0x2a5/0x360 [ 307.508096][T13166] ? __lock_acquire+0x683/0x2cd0 [ 307.508123][T13166] ? __pfx____sys_sendmsg+0x10/0x10 [ 307.508151][T13166] ? kstrtouint+0x6e/0xe0 [ 307.508209][T13166] ? __fget_files+0x2a/0x420 [ 307.508233][T13166] ? __fget_files+0x3a2/0x420 [ 307.508268][T13166] __sys_sendmmsg+0x27c/0x4e0 [ 307.508297][T13166] ? __pfx___sys_sendmmsg+0x10/0x10 [ 307.508316][T13166] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 307.508369][T13166] ? ksys_write+0x242/0x270 [ 307.508400][T13166] ? __pfx_ksys_write+0x10/0x10 [ 307.508437][T13166] __x64_sys_sendmmsg+0xa0/0xc0 [ 307.508460][T13166] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.508482][T13166] do_syscall_64+0x174/0x580 [ 307.508506][T13166] ? trace_irq_disable+0x3b/0x140 [ 307.508535][T13166] ? clear_bhb_loop+0x40/0x90 [ 307.508560][T13166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.508580][T13166] RIP: 0033:0x7f95c9f9ce59 [ 307.508600][T13166] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 307.508617][T13166] RSP: 002b:00007f95cae0c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 307.508640][T13166] RAX: ffffffffffffffda RBX: 00007f95ca215fa0 RCX: 00007f95c9f9ce59 [ 307.508655][T13166] RDX: 0000000000000002 RSI: 0000200000004700 RDI: 0000000000000003 [ 307.508668][T13166] RBP: 00007f95cae0c090 R08: 0000000000000000 R09: 0000000000000000 [ 307.508681][T13166] R10: 0000000024040814 R11: 0000000000000246 R12: 0000000000000001 [ 307.508694][T13166] R13: 00007f95ca216038 R14: 00007f95ca215fa0 R15: 00007fff8adc0b88 [ 307.508727][T13166] [ 307.546596][T13171] syzkaller1: entered promiscuous mode [ 307.769696][T13171] syzkaller1: entered allmulticast mode [ 308.025450][T13185] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.2375'. [ 308.090228][T13186] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2374'. [ 308.176487][T13189] ieee802154 phy0 wpan0: encryption failed: -22 [ 308.178893][T13186] netlink: 'syz.2.2374': attribute type 4 has an invalid length. [ 308.262934][T13186] netlink: 'syz.2.2374': attribute type 10 has an invalid length. [ 308.305254][T13186] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2374'. [ 308.726930][T13218] xt_NFQUEUE: number of queues (3633) out of range (got 69161) [ 309.122383][T13236] ieee802154 phy0 wpan0: encryption failed: -22 [ 309.190832][T13238] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.2392'. [ 309.556705][T13251] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2395'. [ 309.590634][T13251] dummy0: left promiscuous mode [ 309.607912][T13251] bridge13: port 1(dummy0) entered blocking state [ 309.612144][T13254] netlink: 'syz.4.2397': attribute type 10 has an invalid length. [ 309.623235][T13254] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2397'. [ 309.628924][T13251] bridge13: port 1(dummy0) entered disabled state [ 309.645387][T13255] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2396'. [ 309.646659][T13251] dummy0: entered allmulticast mode [ 309.664280][T13251] dummy0: entered promiscuous mode [ 309.673729][T13254] bridge0: port 3(team0) entered blocking state [ 309.680351][T13254] bridge0: port 3(team0) entered disabled state [ 309.689709][T13254] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 309.740141][T13257] dummy0: left promiscuous mode [ 309.761316][T13257] bridge11: port 1(dummy0) entered blocking state [ 309.777227][ T5630] Bluetooth: hci2: command 0x0401 tx timeout [ 309.777425][ T5637] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 309.793568][T13257] bridge11: port 1(dummy0) entered disabled state [ 309.802565][T13257] dummy0: entered allmulticast mode [ 309.816808][T13257] dummy0: entered promiscuous mode [ 309.826652][T13251] netlink: 'syz.0.2395': attribute type 10 has an invalid length. [ 309.882372][T13251] bridge13: port 1(dummy0) entered blocking state [ 309.889101][T13251] bridge13: port 1(dummy0) entered forwarding state [ 309.913724][T13251] dummy0: left allmulticast mode [ 309.919887][T13251] bridge13: port 1(dummy0) entered disabled state [ 309.986841][T13255] netlink: 'syz.3.2396': attribute type 10 has an invalid length. [ 310.002575][T13262] netlink: 'syz.1.2399': attribute type 4 has an invalid length. [ 310.036731][T13255] bridge11: port 1(dummy0) entered blocking state [ 310.043422][T13255] bridge11: port 1(dummy0) entered forwarding state [ 310.059329][T13255] dummy0: left allmulticast mode [ 310.068484][T13255] bridge11: port 1(dummy0) entered disabled state [ 310.136151][T13262] netlink: 'syz.1.2399': attribute type 10 has an invalid length. [ 310.222573][T13274] ieee802154 phy0 wpan0: encryption failed: -22 [ 310.263250][T13276] netlink: 'syz.4.2404': attribute type 29 has an invalid length. [ 310.360572][T13278] xt_TPROXY: Can be used only with -p tcp or -p udp [ 310.851700][T13304] IPv6: sit4: Disabled Multicast RS [ 310.876977][T13308] sctp: [Deprecated]: syz.1.2415 (pid 13308) Use of int in max_burst socket option. [ 310.876977][T13308] Use struct sctp_assoc_value instead [ 311.008084][T13314] ieee802154 phy0 wpan0: encryption failed: -22 [ 311.055732][T13308] IPv6: sit2: Disabled Multicast RS [ 311.090615][T13308] sit2: entered allmulticast mode [ 311.786612][T13335] vlan2: entered promiscuous mode [ 311.807334][T13335] gretap0: entered promiscuous mode [ 311.950234][T13342] validate_nla: 5 callbacks suppressed [ 311.950276][T13342] netlink: 'syz.3.2426': attribute type 4 has an invalid length. [ 312.022196][T13345] netlink: 'syz.3.2426': attribute type 10 has an invalid length. [ 312.057386][T13345] __nla_validate_parse: 13 callbacks suppressed [ 312.057411][T13345] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2426'. [ 312.211624][T13349] netlink: 'syz.0.2429': attribute type 29 has an invalid length. [ 312.235813][T13351] ieee802154 phy0 wpan0: encryption failed: -22 [ 312.250730][T13349] netlink: 'syz.0.2429': attribute type 29 has an invalid length. [ 312.315063][T13349] netlink: 'syz.0.2429': attribute type 4 has an invalid length. [ 312.408779][T13355] xt_TPROXY: Can be used only with -p tcp or -p udp [ 312.568563][T13358] syzkaller1: entered promiscuous mode [ 312.583789][T13358] syzkaller1: entered allmulticast mode [ 313.087932][T13379] ieee802154 phy0 wpan0: encryption failed: -22 [ 313.133199][T13381] netlink: 'syz.4.2443': attribute type 29 has an invalid length. [ 313.142937][T13381] netlink: 'syz.4.2443': attribute type 29 has an invalid length. [ 313.159346][T13381] netlink: 'syz.4.2443': attribute type 4 has an invalid length. [ 313.383369][T13390] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2447'. [ 313.547014][T13398] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2448'. [ 313.625826][T13398] netlink: 'syz.1.2448': attribute type 4 has an invalid length. [ 313.675861][T13398] netlink: 'syz.1.2448': attribute type 10 has an invalid length. [ 313.702846][T13398] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2448'. [ 313.729184][T13402] xt_TPROXY: Can be used only with -p tcp or -p udp [ 313.801465][T13406] ieee802154 phy0 wpan0: encryption failed: -22 [ 314.090097][T13413] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2458'. [ 314.143464][T13420] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2459'. [ 314.150964][T13421] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2460'. [ 314.275680][T13421] 8021q: adding VLAN 0 to HW filter on device bond13 [ 314.284707][T13420] dummy0: left promiscuous mode [ 314.314371][T13420] bridge8: port 1(dummy0) entered blocking state [ 314.321311][T13420] bridge8: port 1(dummy0) entered disabled state [ 314.328803][T13420] dummy0: entered allmulticast mode [ 314.336839][T13420] dummy0: entered promiscuous mode [ 314.476998][T13426] bond13: (slave veth23): Enslaving as an active interface with an up link [ 314.495303][T13420] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2459'. [ 314.575782][T13420] bridge8: port 1(dummy0) entered blocking state [ 314.582367][T13420] bridge8: port 1(dummy0) entered forwarding state [ 314.608772][T13420] dummy0: left allmulticast mode [ 314.623538][T13420] bridge8: port 1(dummy0) entered disabled state [ 314.636337][T13421] netlink: 200 bytes leftover after parsing attributes in process `syz.2.2460'. [ 314.702425][T13426] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2460'. [ 314.792596][T13426] bond13: (slave bridge16): Enslaving as an active interface with an up link [ 315.031666][T13454] ieee802154 phy0 wpan0: encryption failed: -22 [ 315.828673][T13482] dummy0: left promiscuous mode [ 315.853724][T13482] bridge13: port 1(dummy0) entered blocking state [ 315.881471][T13482] bridge13: port 1(dummy0) entered disabled state [ 315.894046][T13482] dummy0: entered allmulticast mode [ 315.909436][T13482] dummy0: entered promiscuous mode [ 315.977540][T13482] bridge13: port 1(dummy0) entered blocking state [ 315.984200][T13482] bridge13: port 1(dummy0) entered forwarding state [ 316.018412][T13482] dummy0: left allmulticast mode [ 316.023976][T13482] bridge13: port 1(dummy0) entered disabled state [ 316.458508][T13505] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.829713][ T30] audit: type=1800 audit(1781639605.386:3): pid=13519 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2491" name=C1 dev="tmpfs" ino=2371 res=0 errno=0 [ 317.223576][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.237760][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.038596][T13560] syzkaller0: entered promiscuous mode [ 318.052542][T13565] xt_TPROXY: Can be used only with -p tcp or -p udp [ 318.062603][T13560] syzkaller0: entered allmulticast mode [ 318.082657][T13563] __nla_validate_parse: 5 callbacks suppressed [ 318.082679][T13563] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2505'. [ 318.156581][T13567] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2506'. [ 318.306501][T13570] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 318.327479][T13570] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 318.782454][T13595] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2514'. [ 318.792139][T13598] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2517'. [ 318.808640][T13595] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2514'. [ 318.904694][T13598] dummy0: left promiscuous mode [ 318.923280][T13598] bridge15: port 1(dummy0) entered blocking state [ 318.929285][T13605] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2518'. [ 318.956495][T13598] bridge15: port 1(dummy0) entered disabled state [ 318.993773][T13603] validate_nla: 11 callbacks suppressed [ 318.993797][T13603] netlink: 'syz.0.2517': attribute type 4 has an invalid length. [ 319.029702][T13598] dummy0: entered allmulticast mode [ 319.076918][T13613] netlink: 'syz.0.2517': attribute type 10 has an invalid length. [ 319.102531][T13613] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2517'. [ 319.105314][T13598] dummy0: entered promiscuous mode [ 319.163167][T13616] xt_TPROXY: Can be used only with -p tcp or -p udp [ 319.180086][T13612] dummy0: left promiscuous mode [ 319.232932][T13612] bridge17: port 1(dummy0) entered blocking state [ 319.256337][T13619] netlink: 'syz.4.2521': attribute type 10 has an invalid length. [ 319.257040][T13612] bridge17: port 1(dummy0) entered disabled state [ 319.276561][T13619] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2521'. [ 319.292201][T13612] dummy0: entered allmulticast mode [ 319.305353][T13612] dummy0: entered promiscuous mode [ 319.318224][T13613] bridge15: port 1(dummy0) entered blocking state [ 319.324908][T13613] bridge15: port 1(dummy0) entered forwarding state [ 319.352386][T13613] dummy0: left allmulticast mode [ 319.365216][T13613] bridge15: port 1(dummy0) entered disabled state [ 319.373987][T13612] netlink: 'syz.2.2518': attribute type 10 has an invalid length. [ 319.384473][T13612] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2518'. [ 319.412077][T13612] bridge17: port 1(dummy0) entered blocking state [ 319.418775][T13612] bridge17: port 1(dummy0) entered forwarding state [ 319.428620][T13612] dummy0: left allmulticast mode [ 319.434070][T13612] bridge17: port 1(dummy0) entered disabled state [ 319.458117][T13619] bridge0: port 3(team0) entered blocking state [ 319.470889][T13619] bridge0: port 3(team0) entered disabled state [ 319.500810][T13619] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 319.647949][T13624] syzkaller0: entered promiscuous mode [ 319.668860][T13624] syzkaller0: entered allmulticast mode [ 320.093645][T13645] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2530'. [ 320.243803][T13645] veth11: entered promiscuous mode [ 320.295882][T13655] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 320.330535][T13655] netlink: 'syz.1.2535': attribute type 1 has an invalid length. [ 320.574726][T13655] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 321.131147][T13681] netlink: 'syz.4.2540': attribute type 3 has an invalid length. [ 321.910521][T13703] FAULT_INJECTION: forcing a failure. [ 321.910521][T13703] name failslab, interval 1, probability 0, space 0, times 0 [ 321.951604][T13703] CPU: 1 UID: 0 PID: 13703 Comm: syz.2.2549 Not tainted syzkaller #0 PREEMPT(full) [ 321.951633][T13703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 321.951646][T13703] Call Trace: [ 321.951653][T13703] [ 321.951662][T13703] dump_stack_lvl+0xe8/0x150 [ 321.951692][T13703] should_fail_ex+0x40c/0x560 [ 321.951729][T13703] should_failslab+0xa8/0x100 [ 321.951751][T13703] __kmalloc_cache_noprof+0x88/0x660 [ 321.951776][T13703] ? __pfx_stack_trace_save+0x10/0x10 [ 321.951833][T13703] ? rtnl_newlink+0x136/0x1bd0 [ 321.951868][T13703] rtnl_newlink+0x136/0x1bd0 [ 321.951899][T13703] ? kasan_save_track+0x4f/0x80 [ 321.951925][T13703] ? kasan_save_track+0x3e/0x80 [ 321.951958][T13703] ? kasan_save_free_info+0x40/0x50 [ 321.951979][T13703] ? __kasan_slab_free+0x5c/0x80 [ 321.952004][T13703] ? kmem_cache_free+0x182/0x650 [ 321.952029][T13703] ? dev_hard_start_xmit+0x2cd/0x830 [ 321.952099][T13703] ? __netlink_deliver_tap+0x5b4/0x860 [ 321.952120][T13703] ? netlink_deliver_tap+0x19c/0x1b0 [ 321.952139][T13703] ? netlink_unicast+0x77f/0x940 [ 321.952166][T13703] ? netlink_sendmsg+0x813/0xb40 [ 321.952188][T13703] ? __pfx_rtnl_newlink+0x10/0x10 [ 321.952214][T13703] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.952272][T13703] ? kasan_quarantine_put+0xbb/0x1f0 [ 321.952300][T13703] ? lockdep_hardirqs_on+0x7a/0x110 [ 321.952327][T13703] ? nlmon_xmit+0xb0/0x100 [ 321.952375][T13703] ? kmem_cache_free+0x182/0x650 [ 321.952414][T13703] ? __lock_acquire+0x683/0x2cd0 [ 321.952442][T13703] ? __dev_queue_xmit+0x29b/0x37f0 [ 321.952467][T13703] ? __local_bh_enable_ip+0xd0/0x130 [ 321.952489][T13703] ? lockdep_hardirqs_on+0x7a/0x110 [ 321.952510][T13703] ? __dev_queue_xmit+0x29b/0x37f0 [ 321.952531][T13703] ? __local_bh_enable_ip+0xd0/0x130 [ 321.952548][T13703] ? __dev_queue_xmit+0x29b/0x37f0 [ 321.952583][T13703] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 321.952614][T13703] ? __pfx_rtnl_newlink+0x10/0x10 [ 321.952656][T13703] ? __pfx_rtnl_newlink+0x10/0x10 [ 321.952684][T13703] rtnetlink_rcv_msg+0x802/0xc00 [ 321.952718][T13703] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 321.952747][T13703] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 321.952774][T13703] ? ref_tracker_free+0x689/0x830 [ 321.952799][T13703] ? __pfx_ref_tracker_free+0x10/0x10 [ 321.952832][T13703] netlink_rcv_skb+0x226/0x4a0 [ 321.952854][T13703] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 321.952885][T13703] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 321.952922][T13703] ? netlink_deliver_tap+0x2e/0x1b0 [ 321.952943][T13703] ? netlink_deliver_tap+0x2e/0x1b0 [ 321.952980][T13703] netlink_unicast+0x7bb/0x940 [ 321.953022][T13703] netlink_sendmsg+0x813/0xb40 [ 321.953054][T13703] ? __pfx_netlink_sendmsg+0x10/0x10 [ 321.953081][T13703] ? aa_sock_msg_perm+0xf1/0x1b0 [ 321.953112][T13703] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 321.953137][T13703] ? __pfx_netlink_sendmsg+0x10/0x10 [ 321.953162][T13703] ____sys_sendmsg+0x9b9/0xa20 [ 321.953184][T13703] ? __might_fault+0xaf/0x130 [ 321.953216][T13703] ? __pfx_____sys_sendmsg+0x10/0x10 [ 321.953248][T13703] ? import_iovec+0x73/0xa0 [ 321.953277][T13703] ___sys_sendmsg+0x2a5/0x360 [ 321.953296][T13703] ? __lock_acquire+0x683/0x2cd0 [ 321.953322][T13703] ? __pfx____sys_sendmsg+0x10/0x10 [ 321.953384][T13703] ? __fget_files+0x2a/0x420 [ 321.953408][T13703] ? __fget_files+0x3a2/0x420 [ 321.953444][T13703] __x64_sys_sendmsg+0x1bd/0x2a0 [ 321.953469][T13703] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 321.953501][T13703] ? __pfx_ksys_write+0x10/0x10 [ 321.953540][T13703] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.953561][T13703] do_syscall_64+0x174/0x580 [ 321.953583][T13703] ? trace_irq_disable+0x3b/0x140 [ 321.953612][T13703] ? clear_bhb_loop+0x40/0x90 [ 321.953637][T13703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.953656][T13703] RIP: 0033:0x7f2d3419ce59 [ 321.953676][T13703] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 321.953693][T13703] RSP: 002b:00007f2d34f9c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 321.953716][T13703] RAX: ffffffffffffffda RBX: 00007f2d34415fa0 RCX: 00007f2d3419ce59 [ 321.953730][T13703] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 321.953742][T13703] RBP: 00007f2d34f9c090 R08: 0000000000000000 R09: 0000000000000000 [ 321.953755][T13703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 321.953766][T13703] R13: 00007f2d34416038 R14: 00007f2d34415fa0 R15: 00007ffe78ba72d8 [ 321.953800][T13703] [ 322.713420][T13712] dummy0: left promiscuous mode [ 322.729349][T13712] bridge12: port 1(dummy0) entered blocking state [ 322.742880][T13712] bridge12: port 1(dummy0) entered disabled state [ 322.752964][T13712] dummy0: entered allmulticast mode [ 322.759122][T13719] netlink: 'syz.1.2556': attribute type 4 has an invalid length. [ 322.809324][T13719] netlink: 'syz.1.2556': attribute type 10 has an invalid length. [ 322.861049][T13712] dummy0: entered promiscuous mode [ 322.932061][T13719] bridge12: port 1(dummy0) entered blocking state [ 322.938757][T13719] bridge12: port 1(dummy0) entered forwarding state [ 322.960765][T13719] dummy0: left allmulticast mode [ 322.972097][T13719] bridge12: port 1(dummy0) entered disabled state [ 323.238561][T13737] netlink: 'syz.2.2563': attribute type 10 has an invalid length. [ 323.246652][T13737] __nla_validate_parse: 6 callbacks suppressed [ 323.246672][T13737] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2563'. [ 323.340835][T13740] netlink: 'syz.4.2565': attribute type 1 has an invalid length. [ 323.433399][T13740] bond4: entered allmulticast mode [ 323.445389][T13745] ieee802154 phy0 wpan0: encryption failed: -22 [ 323.522335][T13740] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2565'. [ 324.083173][T13778] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2575'. [ 324.115951][T13778] veth0_to_bridge: Caught tx_queue_len zero misconfig [ 324.395583][T13785] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2578'. [ 324.452214][T13785] dummy0: left promiscuous mode [ 324.491341][T13785] bridge16: port 1(dummy0) entered blocking state [ 324.512391][T13785] bridge16: port 1(dummy0) entered disabled state [ 324.540060][T13785] dummy0: entered allmulticast mode [ 324.558069][T13790] netlink: 'syz.0.2578': attribute type 4 has an invalid length. [ 324.559728][T13785] dummy0: entered promiscuous mode [ 324.665387][T13795] syzkaller0: entered promiscuous mode [ 324.690322][T13795] syzkaller0: entered allmulticast mode [ 324.726275][T13785] netlink: 'syz.0.2578': attribute type 10 has an invalid length. [ 324.755187][T13785] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2578'. [ 324.820220][T13785] bridge16: port 1(dummy0) entered blocking state [ 324.826886][T13785] bridge16: port 1(dummy0) entered forwarding state [ 324.873915][T13785] dummy0: left allmulticast mode [ 324.894543][T13785] bridge16: port 1(dummy0) entered disabled state [ 325.240977][T13818] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2591'. [ 325.587407][T13833] geneve1: entered promiscuous mode [ 325.631402][T13835] ieee802154 phy0 wpan0: encryption failed: -22 [ 325.933279][T13840] syzkaller0: entered promiscuous mode [ 325.944837][T13840] syzkaller0: entered allmulticast mode [ 326.034644][T13847] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 326.283152][T13852] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2605'. [ 326.728630][T13870] FAULT_INJECTION: forcing a failure. [ 326.728630][T13870] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 326.765596][T13867] bond10: option miimon: invalid value (18446744073709551607) [ 326.774757][T13867] bond10: option miimon: allowed values 0 - 2147483647 [ 326.784109][T13870] CPU: 1 UID: 0 PID: 13870 Comm: syz.2.2610 Not tainted syzkaller #0 PREEMPT(full) [ 326.784138][T13870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 326.784150][T13870] Call Trace: [ 326.784159][T13870] [ 326.784168][T13870] dump_stack_lvl+0xe8/0x150 [ 326.784199][T13870] should_fail_ex+0x40c/0x560 [ 326.784237][T13870] _copy_from_user+0x2d/0xb0 [ 326.784262][T13870] __sys_bpf+0x229/0x950 [ 326.784296][T13870] ? __pfx___sys_bpf+0x10/0x10 [ 326.784344][T13870] ? ksys_write+0x242/0x270 [ 326.784387][T13870] ? __pfx_ksys_write+0x10/0x10 [ 326.784421][T13870] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.784444][T13870] __x64_sys_bpf+0x7c/0x90 [ 326.784478][T13870] do_syscall_64+0x174/0x580 [ 326.784502][T13870] ? trace_irq_disable+0x3b/0x140 [ 326.784532][T13870] ? clear_bhb_loop+0x40/0x90 [ 326.784558][T13870] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.784579][T13870] RIP: 0033:0x7f2d3419ce59 [ 326.784599][T13870] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 326.784617][T13870] RSP: 002b:00007f2d34f7b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 326.784640][T13870] RAX: ffffffffffffffda RBX: 00007f2d34416090 RCX: 00007f2d3419ce59 [ 326.784656][T13870] RDX: 0000000000000020 RSI: 0000200000000100 RDI: 0000000000000001 [ 326.784669][T13870] RBP: 00007f2d34f7b090 R08: 0000000000000000 R09: 0000000000000000 [ 326.784682][T13870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 326.784694][T13870] R13: 00007f2d34416128 R14: 00007f2d34416090 R15: 00007ffe78ba72d8 [ 326.784728][T13870] [ 326.959213][T13867] bond10 (unregistering): Released all slaves [ 326.984835][T13873] ieee802154 phy0 wpan0: encryption failed: -22 [ 328.054369][T13910] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.061680][T13910] bridge0: port 2(bridge_slave_1) entered forwarding state [ 328.069414][T13910] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.076735][T13910] bridge0: port 1(bridge_slave_0) entered forwarding state [ 328.099192][T13914] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2626'. [ 328.163806][T13917] ieee802154 phy0 wpan0: encryption failed: -22 [ 328.264900][T13910] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 328.314832][T13910] 8021q: adding VLAN 0 to HW filter on device bond2 [ 328.335100][T13910] 8021q: adding VLAN 0 to HW filter on device bond4 [ 328.404953][ T140] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 328.489331][ T140] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 328.526016][ T140] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 328.578164][T13934] netlink: 'syz.3.2632': attribute type 10 has an invalid length. [ 328.600824][ T47] bond2: (slave veth7): link status definitely up, 10000 Mbps full duplex [ 328.616856][T13934] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2632'. [ 328.628652][ T47] bond2: (slave veth9): link status definitely up, 10000 Mbps full duplex [ 328.651123][ T47] bond2: (slave veth7): making interface the new active one [ 328.663540][ T47] veth7: entered allmulticast mode [ 328.696438][ T47] bond2: active interface up! [ 328.697784][T13937] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2633'. [ 328.732127][ T140] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 328.791954][T13942] dummy0: left promiscuous mode [ 328.819924][T13942] bridge18: port 1(dummy0) entered blocking state [ 328.889583][T13942] bridge18: port 1(dummy0) entered disabled state [ 328.924808][T13937] netlink: 'syz.2.2633': attribute type 4 has an invalid length. [ 328.936679][T13942] dummy0: entered allmulticast mode [ 328.942407][T13947] netlink: 'syz.3.2638': attribute type 10 has an invalid length. [ 328.959254][T13942] dummy0: entered promiscuous mode [ 328.964072][T13947] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2638'. [ 329.026798][T13937] netlink: 'syz.2.2633': attribute type 10 has an invalid length. [ 329.051687][T13937] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2633'. [ 329.078862][T13937] bridge18: port 1(dummy0) entered blocking state [ 329.085562][T13937] bridge18: port 1(dummy0) entered forwarding state [ 329.111015][T13937] dummy0: left allmulticast mode [ 329.124902][T13937] bridge18: port 1(dummy0) entered disabled state [ 329.272042][T13957] netlink: 'syz.3.2640': attribute type 29 has an invalid length. [ 329.293271][T13957] netlink: 'syz.3.2640': attribute type 29 has an invalid length. [ 329.311065][T13960] ieee802154 phy0 wpan0: encryption failed: -22 [ 329.335637][T13957] netlink: 'syz.3.2640': attribute type 4 has an invalid length. [ 329.592406][T13967] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2645'. [ 329.658636][T13973] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2646'. [ 329.676985][T13973] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2646'. [ 329.693924][T13967] bond5: entered promiscuous mode [ 329.700510][T13977] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2648'. [ 329.714420][T13967] bond5: entered allmulticast mode [ 329.722862][T13977] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 329.733292][T13977] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 330.066626][T13987] netlink: 'syz.3.2652': attribute type 10 has an invalid length. [ 330.085355][T13987] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2652'. [ 330.121499][T13991] netlink: 'syz.2.2654': attribute type 29 has an invalid length. [ 330.143570][T13991] netlink: 'syz.2.2654': attribute type 29 has an invalid length. [ 330.199432][T13991] netlink: 248 bytes leftover after parsing attributes in process `syz.2.2654'. [ 330.308412][T13999] ieee802154 phy0 wpan0: encryption failed: -22 [ 330.346768][T14001] netlink: 'syz.4.2655': attribute type 10 has an invalid length. [ 330.375275][T14001] bridge0: port 3(team0) entered blocking state [ 330.391582][T14001] bridge0: port 3(team0) entered disabled state [ 330.433627][T14001] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 330.772464][T14012] pim6reg1: entered promiscuous mode [ 330.805825][T14012] pim6reg1: entered allmulticast mode [ 331.035399][T14021] syzkaller0: entered promiscuous mode [ 331.061042][T14026] netlink: 'syz.0.2668': attribute type 29 has an invalid length. [ 331.062448][T14021] syzkaller0: entered allmulticast mode [ 331.110742][T14026] netlink: 'syz.0.2668': attribute type 29 has an invalid length. [ 331.221564][T14029] netlink: 'syz.1.2669': attribute type 10 has an invalid length. [ 331.291609][T14034] ieee802154 phy0 wpan0: encryption failed: -22 [ 331.450925][T14042] xt_TPROXY: Can be used only with -p tcp or -p udp [ 331.756633][T14044] syzkaller0: entered promiscuous mode [ 331.793259][T14044] syzkaller0: entered allmulticast mode [ 331.936757][T14060] netlink: 'syz.1.2682': attribute type 29 has an invalid length. [ 331.988693][T14060] netlink: 'syz.1.2682': attribute type 29 has an invalid length. [ 332.294531][T14071] netlink: 'syz.4.2683': attribute type 4 has an invalid length. [ 332.837386][T14077] ieee802154 phy0 wpan0: encryption failed: -22 [ 332.873528][T14061] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 333.730450][T14100] __nla_validate_parse: 9 callbacks suppressed [ 333.730472][T14100] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2694'. [ 333.914125][T14111] FAULT_INJECTION: forcing a failure. [ 333.914125][T14111] name failslab, interval 1, probability 0, space 0, times 0 [ 333.928351][T14111] CPU: 1 UID: 0 PID: 14111 Comm: syz.2.2698 Not tainted syzkaller #0 PREEMPT(full) [ 333.928381][T14111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 333.928395][T14111] Call Trace: [ 333.928404][T14111] [ 333.928413][T14111] dump_stack_lvl+0xe8/0x150 [ 333.928444][T14111] should_fail_ex+0x40c/0x560 [ 333.928483][T14111] should_failslab+0xa8/0x100 [ 333.928504][T14111] ? dst_alloc+0x105/0x170 [ 333.928595][T14111] kmem_cache_alloc_noprof+0x87/0x650 [ 333.928633][T14111] dst_alloc+0x105/0x170 [ 333.928664][T14111] ip_route_input_rcu+0x20ca/0x3190 [ 333.928772][T14111] ? __pfx_ip_route_input_rcu+0x10/0x10 [ 333.928800][T14111] ? irqentry_exit+0x218/0x8e0 [ 333.928849][T14111] ? ipt_do_table+0x137f/0x15d0 [ 333.928906][T14111] ? ip_route_input_noref+0xad/0x270 [ 333.928938][T14111] ip_route_input_noref+0x17c/0x270 [ 333.928975][T14111] ? __pfx_ip_route_input_noref+0x10/0x10 [ 333.929010][T14111] ? ipt_do_table+0x2b9/0x15d0 [ 333.929033][T14111] ? __pfx_ipt_do_table+0x10/0x10 [ 333.929059][T14111] ip_rcv_finish_core+0x593/0x1c00 [ 333.929098][T14111] ip_rcv_finish+0x14c/0x2a0 [ 333.929127][T14111] NF_HOOK+0x336/0x3c0 [ 333.929153][T14111] ? __pfx_ip_rcv_finish+0x10/0x10 [ 333.929175][T14111] ? NF_HOOK+0x9e/0x3c0 [ 333.929196][T14111] ? __pfx_NF_HOOK+0x10/0x10 [ 333.929223][T14111] ? __pfx_ip_rcv_finish+0x10/0x10 [ 333.929255][T14111] ? netif_receive_skb+0x102/0xbf0 [ 333.929281][T14111] ? __pfx_ip_rcv+0x10/0x10 [ 333.929304][T14111] netif_receive_skb+0x45b/0xbf0 [ 333.929347][T14111] ? __pfx_netif_receive_skb+0x10/0x10 [ 333.929381][T14111] ? tun_rx_batched+0x185/0x790 [ 333.929406][T14111] tun_rx_batched+0x1de/0x790 [ 333.929434][T14111] ? __pfx_tun_rx_batched+0x10/0x10 [ 333.929454][T14111] ? tun_get_user+0x26ca/0x4350 [ 333.929476][T14111] ? tun_get_user+0x26ca/0x4350 [ 333.929498][T14111] ? tun_get_user+0x2373/0x4350 [ 333.929519][T14111] ? tun_get_user+0x2373/0x4350 [ 333.929538][T14111] ? __local_bh_enable_ip+0xd0/0x130 [ 333.929564][T14111] tun_get_user+0x2b04/0x4350 [ 333.929591][T14111] ? tun_get_user+0x718/0x4350 [ 333.929618][T14111] ? tun_get_user+0x26ca/0x4350 [ 333.929642][T14111] ? aa_file_perm+0x4ed/0x15f0 [ 333.929662][T14111] ? __pfx_tun_get_user+0x10/0x10 [ 333.929685][T14111] ? __lock_acquire+0x683/0x2cd0 [ 333.929725][T14111] ? ref_tracker_alloc+0x341/0x4b0 [ 333.929746][T14111] ? get_pid_task+0x20/0x1f0 [ 333.929775][T14111] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 333.929801][T14111] ? tun_get+0x1c/0x2f0 [ 333.929821][T14111] ? tun_get+0x1c/0x2f0 [ 333.929847][T14111] ? tun_get+0x1c/0x2f0 [ 333.929867][T14111] ? tun_get+0x1c/0x2f0 [ 333.929891][T14111] tun_chr_write_iter+0x113/0x200 [ 333.929927][T14111] vfs_write+0x612/0xba0 [ 333.929966][T14111] ? __pfx_vfs_write+0x10/0x10 [ 333.930006][T14111] ? __fget_files+0x2a/0x420 [ 333.930041][T14111] ksys_write+0x150/0x270 [ 333.930072][T14111] ? __pfx_ksys_write+0x10/0x10 [ 333.930108][T14111] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.930132][T14111] do_syscall_64+0x174/0x580 [ 333.930156][T14111] ? trace_irq_disable+0x3b/0x140 [ 333.930185][T14111] ? clear_bhb_loop+0x40/0x90 [ 333.930212][T14111] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.930232][T14111] RIP: 0033:0x7f2d3415d68e [ 333.930252][T14111] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 333.930269][T14111] RSP: 002b:00007f2d34f9bfb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 333.930291][T14111] RAX: ffffffffffffffda RBX: 00007f2d34f9c6c0 RCX: 00007f2d3415d68e [ 333.930306][T14111] RDX: 000000000000003e RSI: 0000200000000080 RDI: 00000000000000c8 [ 333.930320][T14111] RBP: 00007f2d34f9c090 R08: 0000000000000000 R09: 0000000000000000 [ 333.930342][T14111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 333.930354][T14111] R13: 00007f2d34416038 R14: 00007f2d34415fa0 R15: 00007ffe78ba72d8 [ 333.930389][T14111] [ 334.806919][T14118] syzkaller0: entered promiscuous mode [ 334.827399][T14118] syzkaller0: entered allmulticast mode [ 335.035658][T14141] syzkaller1: entered promiscuous mode [ 335.082699][T14141] syzkaller1: entered allmulticast mode [ 336.040948][T14168] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2718'. [ 336.099082][T14155] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2713'. [ 336.163846][T14169] dummy0: left promiscuous mode [ 336.217646][T14169] bridge19: port 1(dummy0) entered blocking state [ 336.266245][T14169] bridge19: port 1(dummy0) entered disabled state [ 336.306014][T14169] dummy0: entered allmulticast mode [ 336.333476][T14169] dummy0: entered promiscuous mode [ 336.416328][T14168] validate_nla: 3 callbacks suppressed [ 336.417076][T14168] netlink: 'syz.2.2718': attribute type 10 has an invalid length. [ 336.441314][T14168] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2718'. [ 336.457605][T14168] bridge19: port 1(dummy0) entered blocking state [ 336.464450][T14168] bridge19: port 1(dummy0) entered forwarding state [ 336.480367][T14168] dummy0: left allmulticast mode [ 336.505446][T14168] bridge19: port 1(dummy0) entered disabled state [ 336.572232][T14182] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.2722'. [ 336.756308][T14191] xt_TPROXY: Can be used only with -p tcp or -p udp [ 336.786917][T14192] netlink: 7060 bytes leftover after parsing attributes in process `syz.4.2723'. [ 337.053415][T14197] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2726'. [ 337.102020][T14197] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2726'. [ 337.217455][ T5630] Bluetooth: hci2: command 0x0401 tx timeout [ 337.218677][ T5637] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 337.353308][T14212] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2731'. [ 337.500266][T14207] syzkaller0: entered promiscuous mode [ 337.527069][T14207] syzkaller0: entered allmulticast mode [ 337.584406][T14219] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2733'. [ 337.750019][T14224] netlink: 'syz.3.2733': attribute type 4 has an invalid length. [ 337.873853][T14223] dummy0: left promiscuous mode [ 337.930078][T14233] IPVS: stopping backup sync thread 8934 ... [ 337.950149][T14223] bridge14: port 1(dummy0) entered blocking state [ 337.982932][T14223] bridge14: port 1(dummy0) entered disabled state [ 338.016694][T14223] dummy0: entered allmulticast mode [ 338.022332][T14230] netlink: 'syz.3.2733': attribute type 10 has an invalid length. [ 338.093922][T14223] dummy0: entered promiscuous mode [ 338.219772][T14234] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 338.288647][T14230] bridge14: port 1(dummy0) entered blocking state [ 338.295256][T14230] bridge14: port 1(dummy0) entered forwarding state [ 338.341347][T14230] dummy0: left allmulticast mode [ 338.362805][T14230] bridge14: port 1(dummy0) entered disabled state [ 338.767665][T14249] xt_TPROXY: Can be used only with -p tcp or -p udp [ 338.943811][T14254] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 338.971635][T14254] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 339.047316][T14264] netlink: 'syz.3.2748': attribute type 26 has an invalid length. [ 339.381043][T14279] FAULT_INJECTION: forcing a failure. [ 339.381043][T14279] name failslab, interval 1, probability 0, space 0, times 0 [ 339.443847][T14279] CPU: 1 UID: 0 PID: 14279 Comm: syz.0.2754 Not tainted syzkaller #0 PREEMPT(full) [ 339.443878][T14279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 339.443890][T14279] Call Trace: [ 339.443899][T14279] [ 339.443909][T14279] dump_stack_lvl+0xe8/0x150 [ 339.443941][T14279] should_fail_ex+0x40c/0x560 [ 339.443981][T14279] should_failslab+0xa8/0x100 [ 339.444003][T14279] __kvmalloc_node_noprof+0x16e/0x890 [ 339.444034][T14279] ? alloc_netdev_mqs+0xcc4/0x1220 [ 339.444061][T14279] ? alloc_netdev_mqs+0xc18/0x1220 [ 339.444092][T14279] alloc_netdev_mqs+0xcc4/0x1220 [ 339.444124][T14279] rtnl_create_link+0x321/0xd70 [ 339.444156][T14279] rtnl_newlink_create+0x25f/0xb00 [ 339.444205][T14279] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 339.444237][T14279] ? __pfx___mutex_lock+0x10/0x10 [ 339.444272][T14279] ? ns_capable+0x89/0xe0 [ 339.444297][T14279] rtnl_newlink+0x167f/0x1bd0 [ 339.444343][T14279] ? __pfx_rtnl_newlink+0x10/0x10 [ 339.444369][T14279] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.444429][T14279] ? kasan_quarantine_put+0xbb/0x1f0 [ 339.444455][T14279] ? lockdep_hardirqs_on+0x7a/0x110 [ 339.444482][T14279] ? nlmon_xmit+0xb0/0x100 [ 339.444499][T14279] ? kmem_cache_free+0x182/0x650 [ 339.444539][T14279] ? __lock_acquire+0x683/0x2cd0 [ 339.444566][T14279] ? __dev_queue_xmit+0x29b/0x37f0 [ 339.444593][T14279] ? __local_bh_enable_ip+0xd0/0x130 [ 339.444612][T14279] ? lockdep_hardirqs_on+0x7a/0x110 [ 339.444633][T14279] ? __dev_queue_xmit+0x29b/0x37f0 [ 339.444654][T14279] ? __local_bh_enable_ip+0xd0/0x130 [ 339.444671][T14279] ? __dev_queue_xmit+0x29b/0x37f0 [ 339.444701][T14279] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 339.444749][T14279] ? __pfx_rtnl_newlink+0x10/0x10 [ 339.444777][T14279] rtnetlink_rcv_msg+0x802/0xc00 [ 339.444813][T14279] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 339.444842][T14279] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 339.444871][T14279] ? ref_tracker_free+0x689/0x830 [ 339.444897][T14279] ? __pfx_ref_tracker_free+0x10/0x10 [ 339.444932][T14279] netlink_rcv_skb+0x226/0x4a0 [ 339.444956][T14279] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 339.444989][T14279] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 339.445027][T14279] ? netlink_deliver_tap+0x2e/0x1b0 [ 339.445049][T14279] ? netlink_deliver_tap+0x2e/0x1b0 [ 339.445078][T14279] netlink_unicast+0x7bb/0x940 [ 339.445123][T14279] netlink_sendmsg+0x813/0xb40 [ 339.445162][T14279] ? __pfx_netlink_sendmsg+0x10/0x10 [ 339.445188][T14279] ? aa_sock_msg_perm+0xf1/0x1b0 [ 339.445220][T14279] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 339.445255][T14279] ? __pfx_netlink_sendmsg+0x10/0x10 [ 339.445280][T14279] ____sys_sendmsg+0x9b9/0xa20 [ 339.445303][T14279] ? __might_fault+0xaf/0x130 [ 339.445337][T14279] ? __pfx_____sys_sendmsg+0x10/0x10 [ 339.445368][T14279] ? import_iovec+0x73/0xa0 [ 339.445396][T14279] ___sys_sendmsg+0x2a5/0x360 [ 339.445416][T14279] ? __lock_acquire+0x683/0x2cd0 [ 339.445443][T14279] ? __pfx____sys_sendmsg+0x10/0x10 [ 339.445508][T14279] ? __fget_files+0x2a/0x420 [ 339.445533][T14279] ? __fget_files+0x3a2/0x420 [ 339.445569][T14279] __x64_sys_sendmsg+0x1bd/0x2a0 [ 339.445595][T14279] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 339.445628][T14279] ? __pfx_ksys_write+0x10/0x10 [ 339.445666][T14279] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.445688][T14279] do_syscall_64+0x174/0x580 [ 339.445710][T14279] ? trace_irq_disable+0x3b/0x140 [ 339.445738][T14279] ? clear_bhb_loop+0x40/0x90 [ 339.445764][T14279] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.445783][T14279] RIP: 0033:0x7f1179f9ce59 [ 339.445803][T14279] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 339.445820][T14279] RSP: 002b:00007f11781f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 339.445843][T14279] RAX: ffffffffffffffda RBX: 00007f117a215fa0 RCX: 00007f1179f9ce59 [ 339.445858][T14279] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 339.445870][T14279] RBP: 00007f11781f6090 R08: 0000000000000000 R09: 0000000000000000 [ 339.445883][T14279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 339.445895][T14279] R13: 00007f117a216038 R14: 00007f117a215fa0 R15: 00007ffff1592768 [ 339.445928][T14279] [ 340.171833][T14283] bridge0: port 3(team0) entered disabled state [ 340.178655][T14283] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.186461][T14283] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.348504][T14283] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 340.364940][T14283] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 340.977041][T14307] syzkaller0: entered promiscuous mode [ 341.023907][T14307] syzkaller0: entered allmulticast mode [ 341.061038][ T200] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.101035][ T200] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.128370][T14324] __nla_validate_parse: 2 callbacks suppressed [ 341.128407][T14324] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2763'. [ 341.181365][T14328] FAULT_INJECTION: forcing a failure. [ 341.181365][T14328] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 341.205311][T14328] CPU: 0 UID: 0 PID: 14328 Comm: syz.1.2764 Not tainted syzkaller #0 PREEMPT(full) [ 341.205343][T14328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 341.205355][T14328] Call Trace: [ 341.205363][T14328] [ 341.205372][T14328] dump_stack_lvl+0xe8/0x150 [ 341.205403][T14328] should_fail_ex+0x40c/0x560 [ 341.205443][T14328] _copy_from_iter+0x1d3/0x1660 [ 341.205470][T14328] ? rcu_is_watching+0x15/0xb0 [ 341.205501][T14328] ? __pfx__copy_from_iter+0x10/0x10 [ 341.205519][T14328] ? kmem_cache_alloc_node_noprof+0x3ca/0x680 [ 341.205557][T14328] ? netlink_sendmsg+0x650/0xb40 [ 341.205580][T14328] ? skb_put+0x112/0x210 [ 341.205604][T14328] netlink_sendmsg+0x6c0/0xb40 [ 341.205637][T14328] ? __pfx_netlink_sendmsg+0x10/0x10 [ 341.205664][T14328] ? aa_sock_msg_perm+0xf1/0x1b0 [ 341.205696][T14328] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 341.205721][T14328] ? __pfx_netlink_sendmsg+0x10/0x10 [ 341.205755][T14328] ____sys_sendmsg+0x9b9/0xa20 [ 341.205778][T14328] ? __might_fault+0xaf/0x130 [ 341.205811][T14328] ? __pfx_____sys_sendmsg+0x10/0x10 [ 341.205844][T14328] ? import_iovec+0x73/0xa0 [ 341.205871][T14328] ___sys_sendmsg+0x2a5/0x360 [ 341.205893][T14328] ? __lock_acquire+0x683/0x2cd0 [ 341.205919][T14328] ? __pfx____sys_sendmsg+0x10/0x10 [ 341.205982][T14328] ? __fget_files+0x2a/0x420 [ 341.206006][T14328] ? __fget_files+0x3a2/0x420 [ 341.206043][T14328] __x64_sys_sendmsg+0x1bd/0x2a0 [ 341.206069][T14328] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 341.206101][T14328] ? __pfx_ksys_write+0x10/0x10 [ 341.206139][T14328] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.206161][T14328] do_syscall_64+0x174/0x580 [ 341.206184][T14328] ? trace_irq_disable+0x3b/0x140 [ 341.206213][T14328] ? clear_bhb_loop+0x40/0x90 [ 341.206238][T14328] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.206259][T14328] RIP: 0033:0x7f7ad1f9ce59 [ 341.206280][T14328] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 341.206297][T14328] RSP: 002b:00007f7ad2dd4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 341.206320][T14328] RAX: ffffffffffffffda RBX: 00007f7ad2215fa0 RCX: 00007f7ad1f9ce59 [ 341.206335][T14328] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 341.206347][T14328] RBP: 00007f7ad2dd4090 R08: 0000000000000000 R09: 0000000000000000 [ 341.206362][T14328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 341.206374][T14328] R13: 00007f7ad2216038 R14: 00007f7ad2215fa0 R15: 00007ffc2f836d78 [ 341.206408][T14328] [ 341.633337][ T200] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.642044][ T200] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.904257][T14340] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2771'. [ 341.988427][T14345] netlink: 'syz.3.2771': attribute type 13 has an invalid length. [ 342.074091][T14351] netlink: 'syz.1.2774': attribute type 4 has an invalid length. [ 342.084253][T14348] netlink: 'syz.4.2773': attribute type 4 has an invalid length. [ 342.106437][T14340] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 342.136520][T14340] syzkaller0: entered promiscuous mode [ 342.142617][T14340] syzkaller0: entered allmulticast mode [ 342.152697][T14351] netlink: 'syz.1.2774': attribute type 10 has an invalid length. [ 342.163077][T14348] netlink: 'syz.4.2773': attribute type 10 has an invalid length. [ 342.171058][T14351] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2774'. [ 342.177254][T14348] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2773'. [ 342.710685][T14362] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2780'. [ 342.791569][T14362] 8021q: adding VLAN 0 to HW filter on device bond14 [ 342.852928][T14366] 8021q: adding VLAN 0 to HW filter on device bond15 [ 342.862692][T14366] bond14: (slave bond15): Enslaving as an active interface with an up link [ 342.913716][T14362] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2780'. [ 342.973694][T14362] bond14 (unregistering): (slave bond15): Releasing backup interface [ 343.004720][T14362] bond14 (unregistering): Released all slaves [ 343.160061][T14375] syzkaller0: entered promiscuous mode [ 343.171744][T14375] syzkaller0: entered allmulticast mode [ 343.400650][T14389] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.2787'. [ 343.539135][T14393] xt_TPROXY: Can be used only with -p tcp or -p udp [ 344.075057][T14405] FAULT_INJECTION: forcing a failure. [ 344.075057][T14405] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 344.099996][T14405] CPU: 0 UID: 0 PID: 14405 Comm: syz.0.2795 Not tainted syzkaller #0 PREEMPT(full) [ 344.100027][T14405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 344.100040][T14405] Call Trace: [ 344.100049][T14405] [ 344.100057][T14405] dump_stack_lvl+0xe8/0x150 [ 344.100089][T14405] should_fail_ex+0x40c/0x560 [ 344.100127][T14405] _copy_from_user+0x2d/0xb0 [ 344.100153][T14405] ___sys_sendmsg+0x1c6/0x360 [ 344.100176][T14405] ? __lock_acquire+0x683/0x2cd0 [ 344.100203][T14405] ? __pfx____sys_sendmsg+0x10/0x10 [ 344.100265][T14405] ? __fget_files+0x2a/0x420 [ 344.100290][T14405] ? __fget_files+0x3a2/0x420 [ 344.100326][T14405] __x64_sys_sendmsg+0x1bd/0x2a0 [ 344.100351][T14405] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 344.100383][T14405] ? __pfx_ksys_write+0x10/0x10 [ 344.100445][T14405] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.100468][T14405] do_syscall_64+0x174/0x580 [ 344.100492][T14405] ? trace_irq_disable+0x3b/0x140 [ 344.100521][T14405] ? clear_bhb_loop+0x40/0x90 [ 344.100547][T14405] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.100568][T14405] RIP: 0033:0x7f1179f9ce59 [ 344.100588][T14405] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 344.100606][T14405] RSP: 002b:00007f11781f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 344.100629][T14405] RAX: ffffffffffffffda RBX: 00007f117a215fa0 RCX: 00007f1179f9ce59 [ 344.100643][T14405] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 344.100655][T14405] RBP: 00007f11781f6090 R08: 0000000000000000 R09: 0000000000000000 [ 344.100668][T14405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 344.100680][T14405] R13: 00007f117a216038 R14: 00007f117a215fa0 R15: 00007ffff1592768 [ 344.100714][T14405] [ 344.615806][T14421] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 344.682654][T14426] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2800'. [ 344.685611][T14421] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2804'. [ 344.711321][T14426] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2800'. [ 344.742126][T14429] bridge_slave_1: left allmulticast mode [ 344.760479][T14429] bridge_slave_1: left promiscuous mode [ 344.785025][T14429] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.813564][T14429] bridge_slave_0: left allmulticast mode [ 344.825744][T14429] bridge_slave_0: left promiscuous mode [ 344.845111][T14429] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.906084][T14429] bridge0 (unregistering): left promiscuous mode [ 344.924910][T14429] bridge0 (unregistering): left allmulticast mode [ 344.950531][T14429] team0: Port device bridge0 removed [ 345.941900][T14464] netlink: 'syz.4.2816': attribute type 322 has an invalid length. [ 346.144001][T14472] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 346.145640][T14473] __nla_validate_parse: 4 callbacks suppressed [ 346.145659][T14473] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2817'. [ 346.185705][T14472] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2819'. [ 346.219650][T14472] ip6tnl0: Caught tx_queue_len zero misconfig [ 346.234881][T14476] netlink: 'syz.2.2820': attribute type 10 has an invalid length. [ 346.242342][T14473] netlink: 'syz.3.2817': attribute type 10 has an invalid length. [ 346.254668][T14476] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2820'. [ 346.303410][T14473] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 346.674691][T14497] netlink: 'syz.3.2828': attribute type 1 has an invalid length. [ 346.703124][T14497] netlink: 'syz.3.2828': attribute type 2 has an invalid length. [ 346.967483][T14518] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2834'. [ 346.974337][T14501] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 347.048041][T14497] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2828'. [ 347.053597][T14521] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2834'. [ 347.357788][T14533] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2837'. [ 347.576628][T14545] validate_nla: 1 callbacks suppressed [ 347.576648][T14545] netlink: 'syz.4.2841': attribute type 10 has an invalid length. [ 347.576684][T14544] netlink: 10 bytes leftover after parsing attributes in process `syz.4.2841'. [ 347.722406][T14548] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2842'. [ 347.786582][T14552] ipt_rpfilter: unknown options [ 347.802185][T14548] dummy0: left promiscuous mode [ 347.836734][T14548] bridge17: port 1(dummy0) entered blocking state [ 347.872305][T14557] netlink: 'syz.0.2842': attribute type 4 has an invalid length. [ 347.905646][T14548] bridge17: port 1(dummy0) entered disabled state [ 347.966274][T14548] dummy0: entered allmulticast mode [ 347.975395][T14548] dummy0: entered promiscuous mode [ 348.054277][T14566] bridge0: entered promiscuous mode [ 348.078559][T14566] bridge0: entered allmulticast mode [ 348.099707][T14566] team0: Port device bridge0 added [ 348.110666][T14572] netlink: 'syz.0.2842': attribute type 10 has an invalid length. [ 348.122670][T14572] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2842'. [ 348.176670][T14561] bridge10: entered promiscuous mode [ 348.199034][T14561] bridge10: entered allmulticast mode [ 348.219627][T14561] team0: Port device bridge10 added [ 348.228097][T14572] bridge17: port 1(dummy0) entered blocking state [ 348.234728][T14572] bridge17: port 1(dummy0) entered forwarding state [ 348.281952][T14572] dummy0: left allmulticast mode [ 348.301481][T14572] bridge17: port 1(dummy0) entered disabled state [ 348.352512][T14574] veth1_to_bridge: Caught tx_queue_len zero misconfig [ 348.446041][T14584] gretap0: Device is already in use. [ 349.376682][ T5630] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 349.391263][ T5630] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 349.400535][ T5630] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 349.406727][T14610] netlink: 'syz.4.2866': attribute type 6 has an invalid length. [ 349.419554][ T5630] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 349.429829][ T5630] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 349.493810][T14610] IPv6: NLM_F_CREATE should be specified when creating new route [ 349.663451][T14628] xt_hashlimit: max too large, truncated to 1048576 [ 349.681138][T14628] xt_ecn: cannot match TCP bits for non-tcp packets [ 351.184559][T14676] dummy0: left promiscuous mode [ 351.196128][T14684] netlink: 'syz.2.2887': attribute type 4 has an invalid length. [ 351.208042][T14676] bridge20: port 1(dummy0) entered blocking state [ 351.216263][T14682] can: request_module (can-proto-0) failed. [ 351.224475][T14676] bridge20: port 1(dummy0) entered disabled state [ 351.232079][T14676] dummy0: entered allmulticast mode [ 351.242741][T14676] dummy0: entered promiscuous mode [ 351.261701][T14679] syzkaller0: entered promiscuous mode [ 351.282427][T14679] syzkaller0: entered allmulticast mode [ 351.356335][T14684] netlink: 'syz.2.2887': attribute type 10 has an invalid length. [ 351.374599][T14684] __nla_validate_parse: 6 callbacks suppressed [ 351.374620][T14684] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2887'. [ 351.414018][T14684] bridge20: port 1(dummy0) entered blocking state [ 351.420712][T14684] bridge20: port 1(dummy0) entered forwarding state [ 351.451893][T14684] dummy0: left allmulticast mode [ 351.468068][T14684] bridge20: port 1(dummy0) entered disabled state [ 351.537333][ T5637] Bluetooth: hci5: command tx timeout [ 351.553121][T14695] FAULT_INJECTION: forcing a failure. [ 351.553121][T14695] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 351.574006][T14695] CPU: 0 UID: 0 PID: 14695 Comm: syz.3.2892 Not tainted syzkaller #0 PREEMPT(full) [ 351.574036][T14695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 351.574048][T14695] Call Trace: [ 351.574056][T14695] [ 351.574065][T14695] dump_stack_lvl+0xe8/0x150 [ 351.574100][T14695] should_fail_ex+0x40c/0x560 [ 351.574150][T14695] _copy_to_user+0x31/0xb0 [ 351.574176][T14695] simple_read_from_buffer+0xe1/0x170 [ 351.574210][T14695] proc_fail_nth_read+0x1bb/0x230 [ 351.574244][T14695] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 351.574279][T14695] ? rw_verify_area+0x24a/0x4c0 [ 351.574311][T14695] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 351.574335][T14695] vfs_read+0x213/0xa80 [ 351.574371][T14695] ? __pfx___mutex_lock+0x10/0x10 [ 351.574402][T14695] ? __pfx_vfs_read+0x10/0x10 [ 351.574432][T14695] ? __fget_files+0x2a/0x420 [ 351.574464][T14695] ? __fget_files+0x3a2/0x420 [ 351.574489][T14695] ? __fget_files+0x2a/0x420 [ 351.574525][T14695] ksys_read+0x150/0x270 [ 351.574558][T14695] ? __pfx_ksys_read+0x10/0x10 [ 351.574596][T14695] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.574621][T14695] do_syscall_64+0x174/0x580 [ 351.574646][T14695] ? clear_bhb_loop+0x40/0x90 [ 351.574673][T14695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.574694][T14695] RIP: 0033:0x7f95c9f5d68e [ 351.574715][T14695] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 351.574734][T14695] RSP: 002b:00007f95cae0bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 351.574757][T14695] RAX: ffffffffffffffda RBX: 00007f95cae0c6c0 RCX: 00007f95c9f5d68e [ 351.574773][T14695] RDX: 000000000000000f RSI: 00007f95cae0c0a0 RDI: 0000000000000006 [ 351.574787][T14695] RBP: 00007f95cae0c090 R08: 0000000000000000 R09: 0000000000000000 [ 351.574800][T14695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 351.574813][T14695] R13: 00007f95ca216038 R14: 00007f95ca215fa0 R15: 00007fff8adc0b88 [ 351.574850][T14695] [ 352.098073][T14617] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.149676][T14617] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.165904][T14617] bridge_slave_0: entered allmulticast mode [ 352.189657][T14617] bridge_slave_0: entered promiscuous mode [ 352.244129][T14617] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.253190][T14617] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.277807][T14617] bridge_slave_1: entered allmulticast mode [ 352.286364][T14617] bridge_slave_1: entered promiscuous mode [ 352.358256][T14617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 352.372954][T14617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 352.539042][T14617] team0: Port device team_slave_0 added [ 352.551410][T14728] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2903'. [ 352.572963][T14617] team0: Port device team_slave_1 added [ 352.660557][T14732] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2906'. [ 352.756835][T14617] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 352.779056][T14617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 352.834151][T14617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 352.855556][T14617] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 352.872559][T14617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 352.931167][T14617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 353.110399][T14617] hsr_slave_0: entered promiscuous mode [ 353.132306][T14617] hsr_slave_1: entered promiscuous mode [ 353.193561][T14748] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 353.218558][T14748] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 353.341448][T14753] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2914'. [ 353.617446][ T5637] Bluetooth: hci5: command tx timeout [ 354.221638][T14773] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2920'. [ 354.280455][T14773] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2920'. [ 354.313362][T14773] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2920'. [ 354.355592][T14773] netlink: 'syz.2.2920': attribute type 13 has an invalid length. [ 354.605776][T14785] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.2925'. [ 354.707582][T14790] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2926'. [ 354.918354][T14800] bridge0: port 1(vlan2) entered blocking state [ 354.925053][T14800] bridge0: port 1(vlan2) entered disabled state [ 354.945804][T14800] vlan2: entered allmulticast mode [ 354.960172][T14800] vlan2: left allmulticast mode [ 355.314423][T14617] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 355.356378][T14617] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 355.384055][T14617] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 355.469248][T14817] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2933'. [ 355.477670][T14617] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 355.508292][T14617] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 355.539577][T14617] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 355.573928][T14617] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 355.635255][T14617] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 355.702573][ T5637] Bluetooth: hci5: command tx timeout [ 355.834083][T14832] ieee802154 phy0 wpan0: encryption failed: -22 [ 355.866846][T14836] netlink: 'syz.2.2937': attribute type 29 has an invalid length. [ 355.953718][T14837] netlink: 'syz.2.2937': attribute type 29 has an invalid length. [ 355.995339][T14836] netlink: 'syz.2.2937': attribute type 4 has an invalid length. [ 356.084314][T14617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 356.156289][T14617] 8021q: adding VLAN 0 to HW filter on device team0 [ 356.214119][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.221466][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 356.256487][T14847] netlink: 'syz.2.2941': attribute type 1 has an invalid length. [ 356.279901][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.287193][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 356.314815][T14845] netlink: 'syz.4.2939': attribute type 4 has an invalid length. [ 356.358767][T14847] 8021q: adding VLAN 0 to HW filter on device bond14 [ 356.391088][T14850] bond14: (slave veth25): Enslaving as an active interface with a down link [ 356.410400][T14845] netlink: 'syz.4.2939': attribute type 10 has an invalid length. [ 356.424372][T14845] __nla_validate_parse: 1 callbacks suppressed [ 356.424392][T14845] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2939'. [ 356.566052][T14847] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 356.567565][T14852] ieee802154 phy0 wpan0: encryption failed: -22 [ 356.591107][T14847] bond14: (slave batadv2): making interface the new active one [ 356.602158][T14847] batadv2: entered promiscuous mode [ 356.624476][T14847] bond14: (slave batadv2): Enslaving as an active interface with an up link [ 356.883054][T14858] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2943'. [ 357.309408][T14876] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2947'. [ 357.575917][T14882] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2951'. [ 357.576054][T14883] ieee802154 phy0 wpan0: encryption failed: -22 [ 357.778730][ T5637] Bluetooth: hci5: command tx timeout [ 357.888468][T14890] syzkaller0: entered promiscuous mode [ 357.901371][T14890] syzkaller0: entered allmulticast mode [ 358.142923][T14904] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2957'. [ 358.153939][T14617] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 358.200512][T14904] netlink: 'syz.4.2957': attribute type 4 has an invalid length. [ 358.241350][T14904] netlink: 'syz.4.2957': attribute type 10 has an invalid length. [ 358.289926][T14904] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2957'. [ 358.318066][T14617] veth0_vlan: entered promiscuous mode [ 358.376310][T14617] veth1_vlan: entered promiscuous mode [ 358.490958][T14617] veth0_macvtap: entered promiscuous mode [ 358.512595][T14617] veth1_macvtap: entered promiscuous mode [ 358.611520][T14617] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 358.664864][T14617] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 358.825908][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.847405][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.873438][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.895483][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.957893][T14911] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2960'. [ 359.275447][T14915] 8021q: adding VLAN 0 to HW filter on device bond5 [ 359.286938][T14923] FAULT_INJECTION: forcing a failure. [ 359.286938][T14923] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 359.316829][T14923] CPU: 0 UID: 0 PID: 14923 Comm: syz.0.2964 Not tainted syzkaller #0 PREEMPT(full) [ 359.316860][T14923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 359.316871][T14923] Call Trace: [ 359.316879][T14923] [ 359.316888][T14923] dump_stack_lvl+0xe8/0x150 [ 359.316917][T14923] should_fail_ex+0x40c/0x560 [ 359.316954][T14923] _copy_from_iter+0x1d3/0x1660 [ 359.316985][T14923] ? rcu_is_watching+0x15/0xb0 [ 359.317018][T14923] ? __pfx__copy_from_iter+0x10/0x10 [ 359.317037][T14923] ? kmem_cache_alloc_node_noprof+0x3ca/0x680 [ 359.317074][T14923] ? netlink_sendmsg+0x650/0xb40 [ 359.317100][T14923] ? skb_put+0x112/0x210 [ 359.317123][T14923] netlink_sendmsg+0x6c0/0xb40 [ 359.317154][T14923] ? __pfx_netlink_sendmsg+0x10/0x10 [ 359.317181][T14923] ? aa_sock_msg_perm+0xf1/0x1b0 [ 359.317214][T14923] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 359.317240][T14923] ? __pfx_netlink_sendmsg+0x10/0x10 [ 359.317264][T14923] ____sys_sendmsg+0x9b9/0xa20 [ 359.317286][T14923] ? __might_fault+0xaf/0x130 [ 359.317321][T14923] ? __pfx_____sys_sendmsg+0x10/0x10 [ 359.317353][T14923] ? import_iovec+0x73/0xa0 [ 359.317380][T14923] ___sys_sendmsg+0x2a5/0x360 [ 359.317401][T14923] ? __lock_acquire+0x683/0x2cd0 [ 359.317428][T14923] ? __pfx____sys_sendmsg+0x10/0x10 [ 359.317485][T14923] ? __fget_files+0x2a/0x420 [ 359.317509][T14923] ? __fget_files+0x3a2/0x420 [ 359.317544][T14923] __x64_sys_sendmsg+0x1bd/0x2a0 [ 359.317579][T14923] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 359.317612][T14923] ? __pfx_ksys_write+0x10/0x10 [ 359.317651][T14923] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.317673][T14923] do_syscall_64+0x174/0x580 [ 359.317694][T14923] ? trace_irq_disable+0x3b/0x140 [ 359.317721][T14923] ? clear_bhb_loop+0x40/0x90 [ 359.317747][T14923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.317767][T14923] RIP: 0033:0x7f1179f9ce59 [ 359.317788][T14923] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 359.317807][T14923] RSP: 002b:00007f11781f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 359.317829][T14923] RAX: ffffffffffffffda RBX: 00007f117a215fa0 RCX: 00007f1179f9ce59 [ 359.317845][T14923] RDX: 0000000000004040 RSI: 0000200000000080 RDI: 000000000000000a [ 359.317860][T14923] RBP: 00007f11781f6090 R08: 0000000000000000 R09: 0000000000000000 [ 359.317873][T14923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 359.317885][T14923] R13: 00007f117a216038 R14: 00007f117a215fa0 R15: 00007ffff1592768 [ 359.317920][T14923] [ 359.572777][T14925] ieee802154 phy0 wpan0: encryption failed: -22 [ 359.715515][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 359.723588][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 359.790230][ T3310] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 359.809889][ T3310] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 360.115812][T14938] xt_TPROXY: Can be used only with -p tcp or -p udp [ 360.131735][T14935] syzkaller0: entered promiscuous mode [ 360.160659][T14935] syzkaller0: entered allmulticast mode [ 360.331897][T14943] netlink: 9 bytes leftover after parsing attributes in process `syz.0.2972'. [ 360.442987][T14949] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2972'. [ 360.610485][T14954] FAULT_INJECTION: forcing a failure. [ 360.610485][T14954] name failslab, interval 1, probability 0, space 0, times 0 [ 360.612993][ T5630] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 360.636391][ T5630] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 360.645469][ T5630] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 360.662457][ T5630] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 360.670879][ T5630] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 360.682972][T14954] CPU: 1 UID: 0 PID: 14954 Comm: syz.1.2976 Not tainted syzkaller #0 PREEMPT(full) [ 360.683003][T14954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 360.683015][T14954] Call Trace: [ 360.683024][T14954] [ 360.683032][T14954] dump_stack_lvl+0xe8/0x150 [ 360.683065][T14954] should_fail_ex+0x40c/0x560 [ 360.683103][T14954] should_failslab+0xa8/0x100 [ 360.683127][T14954] __kmalloc_cache_noprof+0x88/0x660 [ 360.683153][T14954] ? __pfx_stack_trace_save+0x10/0x10 [ 360.683182][T14954] ? rtnl_newlink+0x136/0x1bd0 [ 360.683219][T14954] rtnl_newlink+0x136/0x1bd0 [ 360.683249][T14954] ? kasan_save_track+0x4f/0x80 [ 360.683273][T14954] ? kasan_save_track+0x3e/0x80 [ 360.683296][T14954] ? kasan_save_free_info+0x40/0x50 [ 360.683316][T14954] ? __kasan_slab_free+0x5c/0x80 [ 360.683341][T14954] ? kmem_cache_free+0x182/0x650 [ 360.683366][T14954] ? dev_hard_start_xmit+0x2cd/0x830 [ 360.683388][T14954] ? __netlink_deliver_tap+0x5b4/0x860 [ 360.683409][T14954] ? netlink_deliver_tap+0x19c/0x1b0 [ 360.683428][T14954] ? netlink_unicast+0x77f/0x940 [ 360.683455][T14954] ? netlink_sendmsg+0x813/0xb40 [ 360.683482][T14954] ? __pfx_rtnl_newlink+0x10/0x10 [ 360.683507][T14954] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.683573][T14954] ? kasan_quarantine_put+0xbb/0x1f0 [ 360.683599][T14954] ? lockdep_hardirqs_on+0x7a/0x110 [ 360.683627][T14954] ? nlmon_xmit+0xb0/0x100 [ 360.683647][T14954] ? kmem_cache_free+0x182/0x650 [ 360.683686][T14954] ? __lock_acquire+0x683/0x2cd0 [ 360.683714][T14954] ? __dev_queue_xmit+0x29b/0x37f0 [ 360.683741][T14954] ? __local_bh_enable_ip+0xd0/0x130 [ 360.683763][T14954] ? lockdep_hardirqs_on+0x7a/0x110 [ 360.683785][T14954] ? __dev_queue_xmit+0x29b/0x37f0 [ 360.683807][T14954] ? __local_bh_enable_ip+0xd0/0x130 [ 360.683825][T14954] ? __dev_queue_xmit+0x29b/0x37f0 [ 360.683854][T14954] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 360.683885][T14954] ? __pfx_rtnl_newlink+0x10/0x10 [ 360.683926][T14954] ? __pfx_rtnl_newlink+0x10/0x10 [ 360.683953][T14954] rtnetlink_rcv_msg+0x802/0xc00 [ 360.683985][T14954] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 360.684013][T14954] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 360.684040][T14954] ? ref_tracker_free+0x689/0x830 [ 360.684065][T14954] ? __pfx_ref_tracker_free+0x10/0x10 [ 360.684097][T14954] netlink_rcv_skb+0x226/0x4a0 [ 360.684121][T14954] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 360.684154][T14954] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 360.684189][T14954] ? netlink_deliver_tap+0x2e/0x1b0 [ 360.684210][T14954] ? netlink_deliver_tap+0x2e/0x1b0 [ 360.684238][T14954] netlink_unicast+0x7bb/0x940 [ 360.684282][T14954] netlink_sendmsg+0x813/0xb40 [ 360.684316][T14954] ? __pfx_netlink_sendmsg+0x10/0x10 [ 360.684342][T14954] ? aa_sock_msg_perm+0xf1/0x1b0 [ 360.684375][T14954] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 360.684402][T14954] ? __pfx_netlink_sendmsg+0x10/0x10 [ 360.684427][T14954] ____sys_sendmsg+0x9b9/0xa20 [ 360.684449][T14954] ? __might_fault+0xaf/0x130 [ 360.684482][T14954] ? __pfx_____sys_sendmsg+0x10/0x10 [ 360.684513][T14954] ? import_iovec+0x73/0xa0 [ 360.684541][T14954] ___sys_sendmsg+0x2a5/0x360 [ 360.684570][T14954] ? __lock_acquire+0x683/0x2cd0 [ 360.684596][T14954] ? __pfx____sys_sendmsg+0x10/0x10 [ 360.684658][T14954] ? __fget_files+0x2a/0x420 [ 360.684682][T14954] ? __fget_files+0x3a2/0x420 [ 360.684717][T14954] __x64_sys_sendmsg+0x1bd/0x2a0 [ 360.684744][T14954] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 360.684777][T14954] ? __pfx_ksys_write+0x10/0x10 [ 360.684815][T14954] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.684838][T14954] do_syscall_64+0x174/0x580 [ 360.684859][T14954] ? trace_irq_disable+0x3b/0x140 [ 360.684889][T14954] ? clear_bhb_loop+0x40/0x90 [ 360.684914][T14954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.684934][T14954] RIP: 0033:0x7f36f2b9ce59 [ 360.684953][T14954] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 360.684969][T14954] RSP: 002b:00007f36f39d6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 360.684991][T14954] RAX: ffffffffffffffda RBX: 00007f36f2e15fa0 RCX: 00007f36f2b9ce59 [ 360.685006][T14954] RDX: 0000000000004040 RSI: 0000200000000080 RDI: 000000000000000a [ 360.685019][T14954] RBP: 00007f36f39d6090 R08: 0000000000000000 R09: 0000000000000000 [ 360.685031][T14954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 360.685042][T14954] R13: 00007f36f2e16038 R14: 00007f36f2e15fa0 R15: 00007ffc9c9e0408 [ 360.685075][T14954] [ 361.246203][T14949] 0ªî{X¹¦: renamed from gretap0 [ 361.279854][T14949] 0ªî{X¹¦: entered allmulticast mode [ 361.299900][T14949] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 362.086494][T14999] FAULT_INJECTION: forcing a failure. [ 362.086494][T14999] name failslab, interval 1, probability 0, space 0, times 0 [ 362.124384][T14999] CPU: 0 UID: 0 PID: 14999 Comm: syz.1.2988 Not tainted syzkaller #0 PREEMPT(full) [ 362.124415][T14999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 362.124427][T14999] Call Trace: [ 362.124436][T14999] [ 362.124445][T14999] dump_stack_lvl+0xe8/0x150 [ 362.124475][T14999] should_fail_ex+0x40c/0x560 [ 362.124513][T14999] should_failslab+0xa8/0x100 [ 362.124536][T14999] __kmalloc_cache_noprof+0x88/0x660 [ 362.124570][T14999] ? __pfx_stack_trace_save+0x10/0x10 [ 362.124598][T14999] ? rtnl_newlink+0x136/0x1bd0 [ 362.124635][T14999] rtnl_newlink+0x136/0x1bd0 [ 362.124666][T14999] ? kasan_save_track+0x4f/0x80 [ 362.124691][T14999] ? kasan_save_track+0x3e/0x80 [ 362.124716][T14999] ? kasan_save_free_info+0x40/0x50 [ 362.124737][T14999] ? __kasan_slab_free+0x5c/0x80 [ 362.124762][T14999] ? kmem_cache_free+0x182/0x650 [ 362.124788][T14999] ? dev_hard_start_xmit+0x2cd/0x830 [ 362.124809][T14999] ? __netlink_deliver_tap+0x5b4/0x860 [ 362.124834][T14999] ? netlink_deliver_tap+0x19c/0x1b0 [ 362.124854][T14999] ? netlink_unicast+0x77f/0x940 [ 362.124882][T14999] ? netlink_sendmsg+0x813/0xb40 [ 362.124905][T14999] ? __pfx_rtnl_newlink+0x10/0x10 [ 362.124933][T14999] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.124993][T14999] ? kasan_quarantine_put+0xbb/0x1f0 [ 362.125020][T14999] ? lockdep_hardirqs_on+0x7a/0x110 [ 362.125048][T14999] ? nlmon_xmit+0xb0/0x100 [ 362.125066][T14999] ? kmem_cache_free+0x182/0x650 [ 362.125107][T14999] ? __lock_acquire+0x683/0x2cd0 [ 362.125133][T14999] ? __dev_queue_xmit+0x29b/0x37f0 [ 362.125160][T14999] ? __local_bh_enable_ip+0xd0/0x130 [ 362.125180][T14999] ? lockdep_hardirqs_on+0x7a/0x110 [ 362.125202][T14999] ? __dev_queue_xmit+0x29b/0x37f0 [ 362.125223][T14999] ? __local_bh_enable_ip+0xd0/0x130 [ 362.125242][T14999] ? __dev_queue_xmit+0x29b/0x37f0 [ 362.125272][T14999] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 362.125304][T14999] ? __pfx_rtnl_newlink+0x10/0x10 [ 362.125346][T14999] ? __pfx_rtnl_newlink+0x10/0x10 [ 362.125375][T14999] rtnetlink_rcv_msg+0x802/0xc00 [ 362.125410][T14999] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 362.125438][T14999] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 362.125463][T14999] ? ref_tracker_free+0x689/0x830 [ 362.125485][T14999] ? __pfx_ref_tracker_free+0x10/0x10 [ 362.125512][T14999] netlink_rcv_skb+0x226/0x4a0 [ 362.125530][T14999] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 362.125565][T14999] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 362.125599][T14999] ? netlink_deliver_tap+0x2e/0x1b0 [ 362.125619][T14999] ? netlink_deliver_tap+0x2e/0x1b0 [ 362.125646][T14999] netlink_unicast+0x7bb/0x940 [ 362.125687][T14999] netlink_sendmsg+0x813/0xb40 [ 362.125718][T14999] ? __pfx_netlink_sendmsg+0x10/0x10 [ 362.125744][T14999] ? aa_sock_msg_perm+0xf1/0x1b0 [ 362.125775][T14999] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 362.125801][T14999] ? __pfx_netlink_sendmsg+0x10/0x10 [ 362.125826][T14999] ____sys_sendmsg+0x9b9/0xa20 [ 362.125847][T14999] ? __might_fault+0xaf/0x130 [ 362.125880][T14999] ? __pfx_____sys_sendmsg+0x10/0x10 [ 362.125912][T14999] ? import_iovec+0x73/0xa0 [ 362.125938][T14999] ___sys_sendmsg+0x2a5/0x360 [ 362.125958][T14999] ? __lock_acquire+0x683/0x2cd0 [ 362.125983][T14999] ? __pfx____sys_sendmsg+0x10/0x10 [ 362.126042][T14999] ? __fget_files+0x2a/0x420 [ 362.126067][T14999] ? __fget_files+0x3a2/0x420 [ 362.126103][T14999] __x64_sys_sendmsg+0x1bd/0x2a0 [ 362.126129][T14999] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 362.126162][T14999] ? __pfx_ksys_write+0x10/0x10 [ 362.126201][T14999] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.126224][T14999] do_syscall_64+0x174/0x580 [ 362.126248][T14999] ? trace_irq_disable+0x3b/0x140 [ 362.126278][T14999] ? clear_bhb_loop+0x40/0x90 [ 362.126304][T14999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.126326][T14999] RIP: 0033:0x7f36f2b9ce59 [ 362.126348][T14999] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 362.126367][T14999] RSP: 002b:00007f36f39d6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 362.126391][T14999] RAX: ffffffffffffffda RBX: 00007f36f2e15fa0 RCX: 00007f36f2b9ce59 [ 362.126406][T14999] RDX: 0000000000004040 RSI: 0000200000000080 RDI: 000000000000000a [ 362.126419][T14999] RBP: 00007f36f39d6090 R08: 0000000000000000 R09: 0000000000000000 [ 362.126431][T14999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 362.126443][T14999] R13: 00007f36f2e16038 R14: 00007f36f2e15fa0 R15: 00007ffc9c9e0408 [ 362.126477][T14999] [ 362.819764][ T5630] Bluetooth: hci3: command tx timeout [ 362.911208][T15011] xt_TPROXY: Can be used only with -p tcp or -p udp [ 363.258410][T15019] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2993'. [ 363.465725][T15025] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2995'. [ 363.512685][T15025] unsupported nlmsg_type 40 [ 364.062880][T15046] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3000'. [ 364.109177][T14956] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.124615][T14956] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.132100][T14956] bridge_slave_0: entered allmulticast mode [ 364.142469][T14956] bridge_slave_0: entered promiscuous mode [ 364.152975][T14956] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.162134][T14956] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.170736][T14956] bridge_slave_1: entered allmulticast mode [ 364.179373][T14956] bridge_slave_1: entered promiscuous mode [ 364.188293][T15048] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 364.216636][T15049] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_tx_wq": -EINTR [ 364.238560][T14956] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 364.262272][T14956] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 364.375670][T14956] team0: Port device team_slave_0 added [ 364.413502][T14956] team0: Port device team_slave_1 added [ 364.526860][T14956] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 364.531264][T15072] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3007'. [ 364.534419][T14956] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 364.571378][T14956] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 364.589672][T14956] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 364.596685][T14956] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 364.623516][T14956] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 364.735877][T14956] hsr_slave_0: entered promiscuous mode [ 364.745369][T14956] hsr_slave_1: entered promiscuous mode [ 364.757832][T14956] debugfs: 'hsr0' already exists in 'hsr' [ 364.767462][T14956] Cannot create hsr debugfs directory [ 364.897891][ T5630] Bluetooth: hci3: command tx timeout [ 364.913683][T15083] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3011'. [ 364.945795][T15083] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3011'. [ 365.058324][T15086] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3012'. [ 365.176801][T15089] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3014'. [ 365.280949][T15091] FAULT_INJECTION: forcing a failure. [ 365.280949][T15091] name failslab, interval 1, probability 0, space 0, times 0 [ 365.294160][T15091] CPU: 0 UID: 0 PID: 15091 Comm: syz.2.3015 Not tainted syzkaller #0 PREEMPT(full) [ 365.294197][T15091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 365.294210][T15091] Call Trace: [ 365.294218][T15091] [ 365.294227][T15091] dump_stack_lvl+0xe8/0x150 [ 365.294258][T15091] should_fail_ex+0x40c/0x560 [ 365.294297][T15091] should_failslab+0xa8/0x100 [ 365.294321][T15091] __kmalloc_cache_noprof+0x88/0x660 [ 365.294349][T15091] ? trace_contention_end+0x3d/0x140 [ 365.294375][T15091] ? __hw_addr_create+0x62/0x240 [ 365.294404][T15091] __hw_addr_create+0x62/0x240 [ 365.294423][T15091] ? stack_depot_init+0x34/0x1b0 [ 365.294448][T15091] __hw_addr_add_ex+0x1ce/0x520 [ 365.294478][T15091] dev_addr_init+0x15a/0x240 [ 365.294502][T15091] ? __pfx_dev_addr_init+0x10/0x10 [ 365.294529][T15091] ? alloc_netdev_mqs+0xa9/0x1220 [ 365.294564][T15091] alloc_netdev_mqs+0x2b4/0x1220 [ 365.294587][T15091] ? __pfx_snprintf+0x10/0x10 [ 365.294680][T15091] ? __pfx_geneve_setup+0x10/0x10 [ 365.294733][T15091] rtnl_create_link+0x321/0xd70 [ 365.294768][T15091] rtnl_newlink_create+0x25f/0xb00 [ 365.294797][T15091] ? __mutex_lock+0x5c5/0x1590 [ 365.294825][T15091] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 365.294853][T15091] ? __pfx___mutex_lock+0x10/0x10 [ 365.294891][T15091] ? ns_capable+0x89/0xe0 [ 365.294917][T15091] rtnl_newlink+0x167f/0x1bd0 [ 365.294967][T15091] ? __pfx_rtnl_newlink+0x10/0x10 [ 365.295003][T15091] ? __lock_acquire+0x683/0x2cd0 [ 365.295034][T15091] ? __lock_acquire+0x683/0x2cd0 [ 365.295064][T15091] ? arch_stack_walk+0xfb/0x150 [ 365.295100][T15091] ? unwind_next_frame+0x8f/0x2550 [ 365.295136][T15091] ? is_bpf_text_address+0x26/0x2b0 [ 365.295185][T15091] ? __lock_acquire+0x683/0x2cd0 [ 365.295214][T15091] ? kernel_text_address+0xa5/0xe0 [ 365.295244][T15091] ? __kernel_text_address+0xd/0x30 [ 365.295271][T15091] ? unwind_get_return_address+0x4d/0x90 [ 365.295294][T15091] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 365.295323][T15091] ? arch_stack_walk+0xfb/0x150 [ 365.295353][T15091] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 365.295403][T15091] ? __pfx_rtnl_newlink+0x10/0x10 [ 365.295432][T15091] rtnetlink_rcv_msg+0x802/0xc00 [ 365.295460][T15091] ? kasan_save_track+0x3e/0x80 [ 365.295490][T15091] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 365.295519][T15091] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 365.295552][T15091] ? __lock_acquire+0x683/0x2cd0 [ 365.295588][T15091] netlink_rcv_skb+0x226/0x4a0 [ 365.295612][T15091] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 365.295645][T15091] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 365.295682][T15091] ? netlink_deliver_tap+0x2e/0x1b0 [ 365.295703][T15091] ? netlink_deliver_tap+0x2e/0x1b0 [ 365.295732][T15091] netlink_unicast+0x7bb/0x940 [ 365.295776][T15091] netlink_sendmsg+0x813/0xb40 [ 365.295810][T15091] ? __pfx_netlink_sendmsg+0x10/0x10 [ 365.295837][T15091] ? aa_sock_msg_perm+0xf1/0x1b0 [ 365.295870][T15091] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 365.295895][T15091] ? __pfx_netlink_sendmsg+0x10/0x10 [ 365.295920][T15091] ____sys_sendmsg+0x9b9/0xa20 [ 365.295942][T15091] ? __might_fault+0xaf/0x130 [ 365.295976][T15091] ? __pfx_____sys_sendmsg+0x10/0x10 [ 365.296008][T15091] ? import_iovec+0x73/0xa0 [ 365.296036][T15091] ___sys_sendmsg+0x2a5/0x360 [ 365.296056][T15091] ? __lock_acquire+0x683/0x2cd0 [ 365.296082][T15091] ? __pfx____sys_sendmsg+0x10/0x10 [ 365.296145][T15091] ? __fget_files+0x2a/0x420 [ 365.296172][T15091] ? __fget_files+0x3a2/0x420 [ 365.296202][T15091] __x64_sys_sendmsg+0x1bd/0x2a0 [ 365.296223][T15091] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 365.296251][T15091] ? __pfx_ksys_write+0x10/0x10 [ 365.296287][T15091] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 365.296307][T15091] do_syscall_64+0x174/0x580 [ 365.296325][T15091] ? trace_irq_disable+0x3b/0x140 [ 365.296350][T15091] ? clear_bhb_loop+0x40/0x90 [ 365.296372][T15091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 365.296389][T15091] RIP: 0033:0x7f2d3419ce59 [ 365.296407][T15091] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 365.296422][T15091] RSP: 002b:00007f2d34f9c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 365.296443][T15091] RAX: ffffffffffffffda RBX: 00007f2d34415fa0 RCX: 00007f2d3419ce59 [ 365.296456][T15091] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 365.296466][T15091] RBP: 00007f2d34f9c090 R08: 0000000000000000 R09: 0000000000000000 [ 365.296477][T15091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 365.296487][T15091] R13: 00007f2d34416038 R14: 00007f2d34415fa0 R15: 00007ffe78ba72d8 [ 365.296518][T15091] [ 365.296804][T15092] dummy0: left promiscuous mode [ 365.314815][T15089] netlink: 'syz.3.3014': attribute type 4 has an invalid length. [ 365.373738][T15092] bridge15: port 1(dummy0) entered blocking state [ 365.579526][T15102] netlink: 'syz.3.3014': attribute type 10 has an invalid length. [ 365.617993][T15092] bridge15: port 1(dummy0) entered disabled state [ 365.651029][T15102] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3014'. [ 365.688533][T15092] dummy0: entered allmulticast mode [ 365.775026][T15106] netlink: 'syz.2.3020': attribute type 29 has an invalid length. [ 365.843882][T15092] dummy0: entered promiscuous mode [ 365.913854][T15108] netlink: 'syz.2.3020': attribute type 4 has an invalid length. [ 365.951894][T15102] bridge15: port 1(dummy0) entered blocking state [ 365.958594][T15102] bridge15: port 1(dummy0) entered forwarding state [ 365.989592][T15102] dummy0: left allmulticast mode [ 366.012647][T15111] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 366.018102][T15102] bridge15: port 1(dummy0) entered disabled state [ 366.038872][T15115] netlink: 'syz.0.3022': attribute type 4 has an invalid length. [ 366.047482][T15115] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3022'. [ 366.063844][T15107] netlink: 'syz.2.3020': attribute type 29 has an invalid length. [ 366.242386][T14956] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.262803][T14956] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 366.470623][T14956] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.482172][T14956] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 366.528992][T15131] geneve2: entered promiscuous mode [ 366.615429][T14956] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.627413][T14956] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 366.661564][T15139] syzkaller0: entered promiscuous mode [ 366.677879][T15139] syzkaller0: entered allmulticast mode [ 366.689560][T15143] netlink: 'syz.1.3031': attribute type 2 has an invalid length. [ 366.698981][T15143] netlink: 'syz.1.3031': attribute type 2 has an invalid length. [ 366.797051][T14956] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.815569][T14956] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 366.836804][T15147] netlink: 'syz.3.3032': attribute type 29 has an invalid length. [ 366.925402][T15150] netlink: 'syz.3.3032': attribute type 29 has an invalid length. [ 366.978287][ T5630] Bluetooth: hci3: command tx timeout [ 367.292819][T15156] openvswitch: netlink: VXLAN extension 307 out of range max 1 [ 367.378050][T15162] GUP no longer grows the stack in syz.2.3037 (15162): 200000003000-20000000a000 (200000001000) [ 367.417709][T15162] CPU: 1 UID: 0 PID: 15162 Comm: syz.2.3037 Not tainted syzkaller #0 PREEMPT(full) [ 367.417740][T15162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 367.417752][T15162] Call Trace: [ 367.417761][T15162] [ 367.417770][T15162] dump_stack_lvl+0xe8/0x150 [ 367.417804][T15162] __get_user_pages+0x238c/0x2720 [ 367.417892][T15162] ? down_read_killable+0x1bb/0x340 [ 367.417930][T15162] __gup_longterm_locked+0xd52/0x15c0 [ 367.417961][T15162] ? lock_acquire+0x106/0x350 [ 367.418004][T15162] gup_fast_fallback+0x1d82/0x20d0 [ 367.418067][T15162] ? __pfx_gup_fast_fallback+0x10/0x10 [ 367.418093][T15162] ? futex_unqueue+0x22/0x240 [ 367.418143][T15162] ? is_valid_gup_args+0x11f/0x200 [ 367.418171][T15162] ? get_user_pages_fast+0x4d/0xb0 [ 367.418200][T15162] __iov_iter_get_pages_alloc+0x378/0xa40 [ 367.418234][T15162] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 367.418281][T15162] iov_iter_get_pages2+0x5e/0xa0 [ 367.418311][T15162] __se_sys_vmsplice+0x7b5/0x1660 [ 367.418364][T15162] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 367.418394][T15162] ? __pfx_futex_wait+0x10/0x10 [ 367.418437][T15162] ? fdget+0x148/0x1e0 [ 367.418484][T15162] ? put_files_struct+0x24f/0x350 [ 367.418518][T15162] ? 0xffffffffff600000 [ 367.418578][T15162] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.418603][T15162] do_syscall_64+0x174/0x580 [ 367.418630][T15162] ? clear_bhb_loop+0x40/0x90 [ 367.418656][T15162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.418675][T15162] RIP: 0033:0x7f2d3419ce59 [ 367.418697][T15162] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 367.418716][T15162] RSP: 002b:00007f2d34f9c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 367.418740][T15162] RAX: ffffffffffffffda RBX: 00007f2d34415fa0 RCX: 00007f2d3419ce59 [ 367.418756][T15162] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000000a [ 367.418771][T15162] RBP: 00007f2d34232d6f R08: 0000000000000000 R09: 0000000000000000 [ 367.418786][T15162] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 367.418799][T15162] R13: 00007f2d34416038 R14: 00007f2d34415fa0 R15: 00007ffe78ba72d8 [ 367.418837][T15162] [ 367.453612][T15153] syzkaller0: entered promiscuous mode [ 367.674881][T15153] syzkaller0: entered allmulticast mode [ 367.814344][T14956] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 367.870722][T14956] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 367.896510][T14956] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 367.931547][T14956] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 367.979058][ T5736] IPVS: starting estimator thread 0... [ 368.002571][T14956] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 368.034276][T14956] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 368.052641][T14956] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 368.098339][T15178] IPVS: using max 27 ests per chain, 64800 per kthread [ 368.104687][T14956] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 368.192818][T15189] FAULT_INJECTION: forcing a failure. [ 368.192818][T15189] name failslab, interval 1, probability 0, space 0, times 0 [ 368.206650][T15189] CPU: 1 UID: 0 PID: 15189 Comm: syz.0.3044 Not tainted syzkaller #0 PREEMPT(full) [ 368.206679][T15189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 368.206691][T15189] Call Trace: [ 368.206700][T15189] [ 368.206710][T15189] dump_stack_lvl+0xe8/0x150 [ 368.206742][T15189] should_fail_ex+0x40c/0x560 [ 368.206781][T15189] should_failslab+0xa8/0x100 [ 368.206805][T15189] __kmalloc_cache_noprof+0x88/0x660 [ 368.206834][T15189] ? __asan_memset+0x22/0x50 [ 368.206858][T15189] ? alloc_netdev_mqs+0xc18/0x1220 [ 368.206883][T15189] ? __kmalloc_cache_noprof+0x157/0x660 [ 368.206916][T15189] alloc_netdev_mqs+0xc18/0x1220 [ 368.206951][T15189] rtnl_create_link+0x321/0xd70 [ 368.206985][T15189] rtnl_newlink_create+0x25f/0xb00 [ 368.207014][T15189] ? __mutex_lock+0x5c5/0x1590 [ 368.207044][T15189] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 368.207072][T15189] ? __pfx___mutex_lock+0x10/0x10 [ 368.207120][T15189] ? ns_capable+0x89/0xe0 [ 368.207146][T15189] rtnl_newlink+0x167f/0x1bd0 [ 368.207194][T15189] ? __pfx_rtnl_newlink+0x10/0x10 [ 368.207222][T15189] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.207284][T15189] ? kasan_quarantine_put+0xbb/0x1f0 [ 368.207312][T15189] ? lockdep_hardirqs_on+0x7a/0x110 [ 368.207340][T15189] ? nlmon_xmit+0xb0/0x100 [ 368.207358][T15189] ? kmem_cache_free+0x182/0x650 [ 368.207401][T15189] ? __lock_acquire+0x683/0x2cd0 [ 368.207428][T15189] ? __dev_queue_xmit+0x29b/0x37f0 [ 368.207455][T15189] ? __local_bh_enable_ip+0xd0/0x130 [ 368.207476][T15189] ? lockdep_hardirqs_on+0x7a/0x110 [ 368.207497][T15189] ? __dev_queue_xmit+0x29b/0x37f0 [ 368.207517][T15189] ? __local_bh_enable_ip+0xd0/0x130 [ 368.207535][T15189] ? __dev_queue_xmit+0x29b/0x37f0 [ 368.207566][T15189] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 368.207611][T15189] ? __pfx_rtnl_newlink+0x10/0x10 [ 368.207635][T15189] rtnetlink_rcv_msg+0x802/0xc00 [ 368.207667][T15189] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 368.207697][T15189] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 368.207724][T15189] ? ref_tracker_free+0x689/0x830 [ 368.207750][T15189] ? __pfx_ref_tracker_free+0x10/0x10 [ 368.207783][T15189] netlink_rcv_skb+0x226/0x4a0 [ 368.207808][T15189] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 368.207841][T15189] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 368.207879][T15189] ? netlink_deliver_tap+0x2e/0x1b0 [ 368.207901][T15189] ? netlink_deliver_tap+0x2e/0x1b0 [ 368.207929][T15189] netlink_unicast+0x7bb/0x940 [ 368.207972][T15189] netlink_sendmsg+0x813/0xb40 [ 368.208005][T15189] ? __pfx_netlink_sendmsg+0x10/0x10 [ 368.208031][T15189] ? aa_sock_msg_perm+0xf1/0x1b0 [ 368.208061][T15189] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 368.208086][T15189] ? __pfx_netlink_sendmsg+0x10/0x10 [ 368.208119][T15189] ____sys_sendmsg+0x9b9/0xa20 [ 368.208141][T15189] ? __might_fault+0xaf/0x130 [ 368.208172][T15189] ? __pfx_____sys_sendmsg+0x10/0x10 [ 368.208204][T15189] ? import_iovec+0x73/0xa0 [ 368.208231][T15189] ___sys_sendmsg+0x2a5/0x360 [ 368.208252][T15189] ? __lock_acquire+0x683/0x2cd0 [ 368.208275][T15189] ? __pfx____sys_sendmsg+0x10/0x10 [ 368.208332][T15189] ? __fget_files+0x2a/0x420 [ 368.208354][T15189] ? __fget_files+0x3a2/0x420 [ 368.208388][T15189] __x64_sys_sendmsg+0x1bd/0x2a0 [ 368.208412][T15189] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 368.208444][T15189] ? __pfx_ksys_write+0x10/0x10 [ 368.208478][T15189] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.208498][T15189] do_syscall_64+0x174/0x580 [ 368.208518][T15189] ? trace_irq_disable+0x3b/0x140 [ 368.208548][T15189] ? clear_bhb_loop+0x40/0x90 [ 368.208572][T15189] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.208591][T15189] RIP: 0033:0x7f1179f9ce59 [ 368.208611][T15189] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 368.208629][T15189] RSP: 002b:00007f11781f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 368.208651][T15189] RAX: ffffffffffffffda RBX: 00007f117a215fa0 RCX: 00007f1179f9ce59 [ 368.208666][T15189] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 368.208679][T15189] RBP: 00007f11781f6090 R08: 0000000000000000 R09: 0000000000000000 [ 368.208691][T15189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 368.208704][T15189] R13: 00007f117a216038 R14: 00007f117a215fa0 R15: 00007ffff1592768 [ 368.208740][T15189] [ 368.793502][T15196] Bluetooth: MGMT ver 1.23 [ 369.058856][ T5630] Bluetooth: hci3: command tx timeout [ 371.276415][T15200] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3047'. [ 371.369892][T15200] validate_nla: 1 callbacks suppressed [ 371.369914][T15200] netlink: 'syz.1.3047': attribute type 4 has an invalid length. [ 371.483423][T15200] netlink: 'syz.1.3047': attribute type 10 has an invalid length. [ 371.532031][T15200] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3047'. [ 371.564332][T15204] bridge0: port 4(vlan5) entered blocking state [ 371.572301][T15204] bridge0: port 4(vlan5) entered disabled state [ 371.579300][T15204] vlan5: entered allmulticast mode [ 371.584550][T15204] bridge0: entered allmulticast mode [ 371.607886][T15204] vlan5: left allmulticast mode [ 371.636346][T15204] bridge0: left allmulticast mode [ 371.654406][T15200] dummy0: entered promiscuous mode [ 371.711692][T14956] 8021q: adding VLAN 0 to HW filter on device bond0 [ 371.842048][T14956] 8021q: adding VLAN 0 to HW filter on device team0 [ 371.906365][ T200] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.913617][ T200] bridge0: port 1(bridge_slave_0) entered forwarding state [ 371.982594][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.989889][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 372.226919][T15229] bridge0: port 3(team0) entered disabled state [ 372.295200][T15229] bridge_slave_0: left allmulticast mode [ 372.335331][T15229] bridge_slave_0: left promiscuous mode [ 372.362407][T15229] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.392967][T15229] bridge_slave_1: left allmulticast mode [ 372.399008][T15229] bridge_slave_1: left promiscuous mode [ 372.407083][T15229] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.423827][T15229] bond0: (slave bond_slave_0): Releasing backup interface [ 372.440956][T15229] bond0: (slave bond_slave_1): Releasing backup interface [ 372.464937][T15229] team_slave_0: left promiscuous mode [ 372.473328][T15229] team_slave_0: left allmulticast mode [ 372.481450][T15229] team0: Port device team_slave_0 removed [ 372.488641][T15229] team_slave_1: left promiscuous mode [ 372.494598][T15229] team_slave_1: left allmulticast mode [ 372.504091][T15229] team0: Port device team_slave_1 removed [ 372.512873][T15229] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 372.521754][T15229] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 372.548912][T15229] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 372.801836][T15229] team0: Mode changed to "activebackup" [ 372.850470][ T200] batadv2: left promiscuous mode [ 373.016747][T15258] bridge0: port 3(vlan2) entered blocking state [ 373.034773][T15258] bridge0: port 3(vlan2) entered disabled state [ 373.052096][T15264] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.3065'. [ 373.053238][T15258] vlan2: entered allmulticast mode [ 373.076796][T15263] netlink: 'syz.0.3066': attribute type 29 has an invalid length. [ 373.086435][T15258] bridge0: entered allmulticast mode [ 373.113552][T15258] vlan2: left allmulticast mode [ 373.126201][T15258] bridge0: left allmulticast mode [ 373.157542][T15272] netlink: 'syz.0.3066': attribute type 29 has an invalid length. [ 373.232762][T15263] netlink: 'syz.0.3066': attribute type 4 has an invalid length. [ 373.841222][T14956] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 374.053408][T15305] netlink: 'syz.1.3076': attribute type 1 has an invalid length. [ 374.335795][T15315] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.3077'. [ 374.344899][T15305] 8021q: adding VLAN 0 to HW filter on device bond1 [ 374.559803][T15312] bond1: (slave veth3): Enslaving as an active interface with a down link [ 375.074489][T15332] netlink: 'syz.0.3080': attribute type 29 has an invalid length. [ 375.099142][T15332] netlink: 'syz.0.3080': attribute type 29 has an invalid length. [ 375.142293][T15332] netlink: 'syz.0.3080': attribute type 4 has an invalid length. [ 375.206147][T14956] veth0_vlan: entered promiscuous mode [ 375.232130][T14956] veth1_vlan: entered promiscuous mode [ 375.304606][T14956] veth0_macvtap: entered promiscuous mode [ 375.344976][T14956] veth1_macvtap: entered promiscuous mode [ 375.385923][T14956] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 375.412667][T14956] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 375.453221][ T6501] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.462937][ T6501] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.491017][ T6501] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.502555][ T6501] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.747336][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 375.775776][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 375.849529][ T1165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 375.887642][ T1165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 375.935176][T15359] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 375.944130][T15359] IPv6: NLM_F_CREATE should be set when creating new route [ 375.951510][T15359] IPv6: NLM_F_CREATE should be set when creating new route [ 376.188014][T15367] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2971'. [ 376.231314][T15367] netlink: 'syz.4.2971': attribute type 4 has an invalid length. [ 376.312831][T15367] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2971'. [ 376.360621][T15367] dummy0: entered promiscuous mode [ 376.721785][ T5637] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 376.734990][ T5637] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 376.747579][ T5637] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 376.761219][ T5637] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 376.772007][ T5637] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 376.865253][T15387] validate_nla: 1 callbacks suppressed [ 376.865274][T15387] netlink: 'syz.3.3091': attribute type 29 has an invalid length. [ 377.001060][T15387] netlink: 'syz.3.3091': attribute type 29 has an invalid length. [ 377.199386][T15387] netlink: 'syz.3.3091': attribute type 4 has an invalid length. [ 377.375212][T15407] C: renamed from veth1_to_team [ 377.414170][T15407] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3095'. [ 377.499371][T15407] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3095'. [ 377.854067][ T47] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 377.903204][ T47] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.910413][T15428] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3098'. [ 378.055085][T15428] netlink: 'syz.2.3098': attribute type 4 has an invalid length. [ 378.137767][T15434] netlink: 'syz.2.3098': attribute type 10 has an invalid length. [ 378.186574][T15434] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3098'. [ 378.205187][ T47] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 378.217453][ T47] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.342564][ T47] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 378.358745][ T47] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.498663][ T47] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 378.509820][ T47] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.677817][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.684200][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.817501][ T5637] Bluetooth: hci4: command tx timeout [ 378.858687][ T47] bridge0: port 3(team0) entered disabled state [ 378.896192][ T47] bridge_slave_1: left allmulticast mode [ 378.917086][ T47] bridge_slave_1: left promiscuous mode [ 378.932284][ T47] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.954252][ T47] bridge_slave_0: left allmulticast mode [ 378.964542][ T47] bridge_slave_0: left promiscuous mode [ 378.975074][ T47] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.061599][T15450] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 379.101661][T15457] netlink: 'syz.4.3105': attribute type 29 has an invalid length. [ 379.264347][T15461] netlink: 'syz.4.3105': attribute type 4 has an invalid length. [ 379.968016][ T47] bond1 (unregistering): (slave bridge5): Releasing backup interface [ 379.982579][ T47] bond2 (unregistering): (slave bridge6): Releasing backup interface [ 380.065257][ T47] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 380.080057][ T47] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 380.093977][ T47] bond0 (unregistering): Released all slaves [ 380.118871][ T47] bond1 (unregistering): (slave veth5): Releasing backup interface [ 380.140202][ T47] bond1 (unregistering): Released all slaves [ 380.159018][ T47] bond2 (unregistering): (slave veth7): Releasing backup interface [ 380.170018][ T47] bond2 (unregistering): Released all slaves [ 380.191781][ T47] bond3 (unregistering): Released all slaves [ 380.461422][T15478] netlink: 616 bytes leftover after parsing attributes in process `syz.2.3110'. [ 380.558015][ T47] tipc: Left network mode [ 380.569687][T15487] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3113'. [ 380.637664][T15485] xt_CT: You must specify a L4 protocol and not use inversions on it [ 380.748830][T15497] netlink: 'syz.4.3113': attribute type 4 has an invalid length. [ 380.900038][ T5637] Bluetooth: hci4: command tx timeout [ 380.909838][T15484] syzkaller0: entered promiscuous mode [ 380.949246][T15484] syzkaller0: entered allmulticast mode [ 380.949307][T15504] netlink: 'syz.2.3114': attribute type 2 has an invalid length. [ 380.963185][T15504] netlink: 'syz.2.3114': attribute type 2 has an invalid length. [ 381.069328][T15508] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3113'. [ 382.081685][ T5291] 8021q: adding VLAN 0 to HW filter on device eth1 [ 382.112403][ T47] batman_adv: batadv0: Interface deactivated: wlan0 [ 382.151788][ T47] batman_adv: batadv0: Removing interface: wlan0 [ 382.362111][T15380] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.375681][T15380] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.385048][T15380] bridge_slave_0: entered allmulticast mode [ 382.393924][T15380] bridge_slave_0: entered promiscuous mode [ 382.404894][T15380] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.414013][T15380] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.421971][T15380] bridge_slave_1: entered allmulticast mode [ 382.433393][T15380] bridge_slave_1: entered promiscuous mode [ 382.616923][T15380] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 382.683865][T15380] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 382.731947][T15553] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3122'. [ 382.792508][T15553] gre0: entered promiscuous mode [ 382.802647][T15553] gre0: entered allmulticast mode [ 382.925686][T15380] team0: Port device team_slave_0 added [ 382.947855][T15564] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3124'. [ 382.962597][T15380] team0: Port device team_slave_1 added [ 382.980224][ T5637] Bluetooth: hci4: command tx timeout [ 383.127442][T15572] validate_nla: 1 callbacks suppressed [ 383.127463][T15572] netlink: 'syz.2.3124': attribute type 4 has an invalid length. [ 383.195348][T15380] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 383.215364][T15380] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 383.220819][T15573] netlink: 'syz.3.3126': attribute type 2 has an invalid length. [ 383.271669][T15581] netlink: 212336 bytes leftover after parsing attributes in process `syz.4.3127'. [ 383.274725][T15573] netlink: 'syz.3.3126': attribute type 2 has an invalid length. [ 383.284821][T15380] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 383.313431][T15572] netlink: 'syz.2.3124': attribute type 10 has an invalid length. [ 383.345234][T15380] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 383.357594][T15572] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3124'. [ 383.372446][T15380] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 383.438438][T15380] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 383.727855][T15380] hsr_slave_0: entered promiscuous mode [ 383.740104][T15380] hsr_slave_1: entered promiscuous mode [ 383.763446][T15380] debugfs: 'hsr0' already exists in 'hsr' [ 383.784966][T15380] Cannot create hsr debugfs directory [ 384.011274][ T5291] 8021q: adding VLAN 0 to HW filter on device eth2 [ 384.039415][ T47] hsr_slave_0: left promiscuous mode [ 384.049642][ T47] hsr_slave_1: left promiscuous mode [ 384.059105][ T47] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 384.074071][ T47] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 384.102459][ T47] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 384.123895][ T47] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 384.189454][ T47] veth1_macvtap: left promiscuous mode [ 384.196516][ T47] veth0_macvtap: left promiscuous mode [ 384.202903][ T47] veth1_vlan: left promiscuous mode [ 384.220704][ T47] veth0_vlan: left promiscuous mode [ 384.313355][T15612] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3137'. [ 384.363528][T15615] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3137'. [ 385.026591][ T47] team_slave_1 (unregistering): left promiscuous mode [ 385.034951][ T47] team_slave_1 (unregistering): left allmulticast mode [ 385.044440][ T47] team0 (unregistering): Port device team_slave_1 removed [ 385.060174][ T5637] Bluetooth: hci4: command tx timeout [ 385.074283][ T47] team_slave_0 (unregistering): left promiscuous mode [ 385.081597][ T47] team_slave_0 (unregistering): left allmulticast mode [ 385.093765][ T47] team0 (unregistering): Port device team_slave_0 removed [ 385.255400][T15609] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 385.305371][T15635] tipc: Enabling of bearer rejected, failed to enable media [ 385.498433][T15648] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3143'. [ 385.573400][T15650] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3142'. [ 385.618673][T15653] netlink: 'syz.3.3144': attribute type 7 has an invalid length. [ 385.649979][T15655] netlink: 'syz.3.3144': attribute type 7 has an invalid length. [ 385.652189][T15656] netlink: 'syz.4.3143': attribute type 4 has an invalid length. [ 385.838573][T15648] netlink: 'syz.4.3143': attribute type 10 has an invalid length. [ 385.881091][T15648] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3143'. [ 386.186519][ T47] IPVS: stop unused estimator thread 0... [ 386.563710][T15690] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3153'. [ 386.845441][T15704] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 386.880212][T15704] batadv3: entered promiscuous mode [ 386.910096][T15704] batadv3: entered allmulticast mode [ 386.982575][T15704] team0: Port device batadv3 added [ 387.354887][T15722] netlink: 'syz.1.3158': attribute type 4 has an invalid length. [ 387.418472][T15715] netlink: 'syz.1.3158': attribute type 10 has an invalid length. [ 388.037617][T15380] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 388.105061][T15380] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 388.154655][T15380] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 388.200692][T15380] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 388.224013][T15380] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 388.276734][T15380] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 388.315390][T15380] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 388.378476][T15380] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 388.836189][T15380] 8021q: adding VLAN 0 to HW filter on device bond0 [ 388.954695][T15380] 8021q: adding VLAN 0 to HW filter on device team0 [ 388.993516][T15789] __nla_validate_parse: 3 callbacks suppressed [ 388.993556][T15789] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3180'. [ 389.040741][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 389.048041][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 389.081612][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.088877][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 389.174232][T15792] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3181'. [ 389.621021][T15812] netlink: 'syz.3.3186': attribute type 13 has an invalid length. [ 389.647230][T15812] netlink: 'syz.3.3186': attribute type 17 has an invalid length. [ 389.844798][T15817] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3186'. [ 391.337792][T15812] 8021q: adding VLAN 0 to HW filter on device bond0 [ 391.349167][T15812] 8021q: adding VLAN 0 to HW filter on device team0 [ 391.362111][T15812] dummy0: left promiscuous mode [ 391.415978][T15836] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 391.420305][ T5760] IPVS: starting estimator thread 0... [ 391.484827][T15812] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 391.495586][T15812] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 391.517348][T15853] IPVS: using max 28 ests per chain, 67200 per kthread [ 391.536791][T15812] veth1_vlan: left promiscuous mode [ 391.544790][T15812] veth0_vlan: left promiscuous mode [ 391.551810][T15812] veth0_vlan: entered promiscuous mode [ 391.577016][T15812] veth1_vlan: entered promiscuous mode [ 391.609692][T15812] geneve1: left promiscuous mode [ 391.632274][T15812] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 391.661615][T15812] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 391.695807][T15812] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 391.721735][T15812] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 391.832305][T15812] 8021q: adding VLAN 0 to HW filter on device bond1 [ 391.982601][T15812] 8021q: adding VLAN 0 to HW filter on device bond2 [ 392.109939][T15812] 8021q: adding VLAN 0 to HW filter on device bond3 [ 392.130920][T15812] geneve4: left promiscuous mode [ 392.192149][T15812] 8021q: adding VLAN 0 to HW filter on device bond4 [ 392.213166][ T33] bridge0: port 1(bridge_slave_0) entered blocking state [ 392.220341][ T33] bridge0: port 1(bridge_slave_0) entered forwarding state [ 392.236419][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.243649][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 392.305793][ T33] bridge0: port 3(team0) entered blocking state [ 392.312320][ T33] bridge0: port 3(team0) entered forwarding state [ 392.399248][ T64] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 392.459888][ T64] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 392.502000][ T64] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 392.538219][ T64] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 392.565420][T15882] netlink: 'syz.1.3197': attribute type 29 has an invalid length. [ 392.593002][ T64] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 392.609909][ T64] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 392.631524][T15882] netlink: 'syz.1.3197': attribute type 29 has an invalid length. [ 392.669771][ T64] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 392.685641][ T64] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 392.714941][T15886] netlink: 'syz.1.3197': attribute type 4 has an invalid length. [ 392.883440][T15893] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3200'. [ 392.925839][T15893] dummy0: left promiscuous mode [ 392.936818][T15893] bridge1: port 1(dummy0) entered blocking state [ 392.943886][T15893] bridge1: port 1(dummy0) entered disabled state [ 392.958918][T15893] dummy0: entered allmulticast mode [ 392.968696][T15893] dummy0: entered promiscuous mode [ 393.000717][T15899] netlink: 'syz.4.3200': attribute type 4 has an invalid length. [ 393.085864][T15903] netlink: 84 bytes leftover after parsing attributes in process `syz.1.3201'. [ 393.132682][T15903] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3201'. [ 393.155261][T15893] netlink: 'syz.4.3200': attribute type 10 has an invalid length. [ 393.211037][T15893] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3200'. [ 393.261526][T15893] bridge1: port 1(dummy0) entered blocking state [ 393.268113][T15893] bridge1: port 1(dummy0) entered forwarding state [ 393.338335][T15893] dummy0: left allmulticast mode [ 393.353624][T15893] bridge1: port 1(dummy0) entered disabled state [ 393.699816][T15919] netlink: 'syz.1.3204': attribute type 2 has an invalid length. [ 393.747261][T15919] netlink: 'syz.1.3204': attribute type 2 has an invalid length. [ 394.164305][T15380] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 394.899325][T15944] netlink: 'syz.3.3211': attribute type 1 has an invalid length. [ 394.943322][T15947] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3212'. [ 394.954576][T15944] netlink: 2108 bytes leftover after parsing attributes in process `syz.3.3211'. [ 395.086141][T15951] dummy0: left promiscuous mode [ 395.275940][T15955] netlink: 'syz.2.3212': attribute type 4 has an invalid length. [ 395.764335][T15951] netlink: 'syz.2.3212': attribute type 10 has an invalid length. [ 395.786316][T15380] veth0_vlan: entered promiscuous mode [ 395.810141][T15951] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3212'. [ 395.871997][T15380] veth1_vlan: entered promiscuous mode [ 395.959051][T15951] dummy0: entered promiscuous mode [ 395.965691][T15963] netlink: 'syz.4.3217': attribute type 32 has an invalid length. [ 396.325037][T15380] veth0_macvtap: entered promiscuous mode [ 396.393064][T15380] veth1_macvtap: entered promiscuous mode [ 396.731896][T15380] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 396.881658][T15380] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 397.078627][ T155] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.156450][ T155] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.256199][ T155] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.322666][ T155] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.465178][T15984] netlink: 'syz.2.3224': attribute type 2 has an invalid length. [ 397.495075][T15984] netlink: 'syz.2.3224': attribute type 2 has an invalid length. [ 398.269839][ T6501] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 398.346967][ T6501] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 398.902566][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 399.041814][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 400.063240][T15972] netlink: 196 bytes leftover after parsing attributes in process `syz.1.3219'. [ 400.175568][T16020] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 400.242869][T16022] netlink: 'syz.3.3232': attribute type 21 has an invalid length. [ 400.255620][T16021] netlink: 'syz.0.3087': attribute type 89 has an invalid length. [ 400.331910][T16020] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 400.451287][T16022] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3232'. [ 400.561883][T16028] xt_l2tp: v2 doesn't support IP mode [ 400.835993][ C0] sched: DL replenish lagged too much [ 400.874450][T16022] netlink: 'syz.3.3232': attribute type 4 has an invalid length. [ 400.953967][T16022] netlink: 'syz.3.3232': attribute type 5 has an invalid length. [ 401.035422][T16022] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3232'. [ 401.429375][T16034] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 401.876198][ T5630] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 401.901666][ T5630] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 401.915195][ T5630] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 401.930472][ T5630] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 401.945606][ T5630] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 402.075701][T16040] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3238'. [ 402.599072][T16050] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3241'. [ 402.653009][T16052] Bluetooth: MGMT ver 1.23 [ 403.112486][T16064] netlink: 'syz.1.3243': attribute type 1 has an invalid length. [ 403.300978][T16067] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3243'. [ 403.664182][T16067] netlink: 212176 bytes leftover after parsing attributes in process `syz.1.3243'. [ 404.633195][T16091] syzkaller0: entered promiscuous mode [ 404.696920][T16091] syzkaller0: entered allmulticast mode [ 404.765639][T16094] bond0: (slave ip6tnl0): refused to change device type [ 404.962569][T16091] tipc: Started in network mode [ 404.989183][T16091] tipc: Node identity 0aa8a81d2613, cluster identity 4711 [ 405.024625][T16096] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3249'. [ 405.037067][T16091] tipc: Enabled bearer , priority 0 [ 405.143695][T16099] ip6erspan0: entered allmulticast mode [ 405.242327][T16090] tipc: Resetting bearer [ 405.434273][T16090] tipc: Disabling bearer [ 405.712056][T16106] bridge0: port 3(vlan2) entered blocking state [ 405.765888][T16106] bridge0: port 3(vlan2) entered disabled state [ 405.787545][T16111] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3254'. [ 405.802919][T16106] vlan2: entered allmulticast mode [ 405.836264][T16106] bridge0: entered allmulticast mode [ 405.879124][T16106] vlan2: left allmulticast mode [ 405.895946][T16106] bridge0: left allmulticast mode [ 405.922466][T16113] netlink: 'syz.4.3254': attribute type 4 has an invalid length. [ 406.033199][T16112] dummy0: left promiscuous mode [ 406.194662][T16116] netlink: 'syz.4.3254': attribute type 10 has an invalid length. [ 406.242683][T16115] workqueue: Failed to create a rescuer kthread for wq "": -EINTR [ 406.275311][T16116] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3254'. [ 406.436839][T16116] dummy0: entered promiscuous mode [ 440.245569][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.266930][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 473.249427][ T5640] Bluetooth: hci5: command 0x0406 tx timeout [ 486.758906][ T5640] Bluetooth: hci3: command 0x0406 tx timeout [ 502.003648][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.024878][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 504.118835][ T5640] Bluetooth: hci4: command 0x0406 tx timeout [ 556.037038][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 556.044038][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P16109/1:b..l P15380/1:b..l P16126/1:b..l [ 556.054983][ C0] rcu: (detected by 0, t=10503 jiffies, g=80865, q=1042758 ncpus=2) [ 556.063254][ C0] task:syz.0.3259 state:R running task stack:27680 pid:16126 tgid:16125 ppid:15380 task_flags:0x400040 flags:0x00080000 [ 556.077917][ C0] Call Trace: [ 556.081240][ C0] [ 556.084206][ C0] __schedule+0x1840/0x57a0 [ 556.088751][ C0] ? __lock_acquire+0x683/0x2cd0 [ 556.093739][ C0] ? unwind_next_frame+0x8f/0x2550 [ 556.098902][ C0] ? __lock_acquire+0x683/0x2cd0 [ 556.103874][ C0] ? __pfx___schedule+0x10/0x10 [ 556.108762][ C0] ? __lock_acquire+0x683/0x2cd0 [ 556.113743][ C0] preempt_schedule_irq+0x4d/0xa0 [ 556.118802][ C0] irqentry_exit+0x14f/0x8e0 [ 556.123506][ C0] ? trace_irq_disable+0x3b/0x140 [ 556.128576][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 556.134590][ C0] RIP: 0010:lock_acquire+0x221/0x350 [ 556.139908][ C0] Code: ff ff ff e8 b1 60 04 0a f7 44 24 08 00 02 00 00 0f 84 3a ff ff ff 65 48 8b 05 ab ab 96 11 48 3b 44 24 58 75 33 fb 48 83 c4 60 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 10 5c 07 0a cc 48 8d 3d 38 18 92 [ 556.161894][ C0] RSP: 0018:ffffc9000432f600 EFLAGS: 00000286 [ 556.168430][ C0] RAX: e070ab5435988000 RBX: 0000000000000000 RCX: 0000000000000046 [ 556.176434][ C0] RDX: 000000000973479e RSI: ffffffff8e2213c9 RDI: ffffffff8c2886a0 [ 556.184449][ C0] RBP: ffffffff81769f7f R08: ffffffff81769f7f R09: 0000000000000000 [ 556.192454][ C0] R10: 0000000000000000 R11: ffffffff8e958780 R12: 0000000000000002 [ 556.200558][ C0] R13: ffffffff8e958780 R14: 0000000000000000 R15: 0000000000000246 [ 556.208565][ C0] ? unwind_next_frame+0x8f/0x2550 [ 556.213723][ C0] ? unwind_next_frame+0x8f/0x2550 [ 556.218879][ C0] ? __kmalloc_cache_noprof+0x2b6/0x660 [ 556.224476][ C0] ? unwind_next_frame+0x8f/0x2550 [ 556.230323][ C0] unwind_next_frame+0xac/0x2550 [ 556.235379][ C0] ? unwind_next_frame+0x8f/0x2550 [ 556.240527][ C0] ? __kasan_slab_alloc+0x22/0x80 [ 556.245596][ C0] ? unwind_next_frame+0x8f/0x2550 [ 556.250841][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 556.257037][ C0] arch_stack_walk+0x11b/0x150 [ 556.261881][ C0] ? __kmalloc_cache_noprof+0x2b6/0x660 [ 556.267648][ C0] stack_trace_save+0xa9/0x100 [ 556.272541][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 556.277956][ C0] ? stack_depot_save_flags+0x33/0x800 [ 556.283452][ C0] save_stack+0x122/0x230 [ 556.287822][ C0] ? __pfx_save_stack+0x10/0x10 [ 556.292706][ C0] ? __free_frozen_pages+0xc0d/0xd20 [ 556.298031][ C0] ? __slab_free+0x274/0x2c0 [ 556.303179][ C0] ? qlist_free_all+0x99/0x100 [ 556.307973][ C0] ? kasan_quarantine_reduce+0x148/0x160 [ 556.313647][ C0] ? __kasan_slab_alloc+0x22/0x80 [ 556.318709][ C0] ? __kmalloc_cache_noprof+0x2b6/0x660 [ 556.324366][ C0] __reset_page_owner+0x71/0x1f0 [ 556.329346][ C0] __free_frozen_pages+0xc0d/0xd20 [ 556.334580][ C0] ? __free_slab+0x172/0x280 [ 556.339203][ C0] __slab_free+0x274/0x2c0 [ 556.343661][ C0] ? qlist_free_all+0x8e/0x100 [ 556.348462][ C0] qlist_free_all+0x99/0x100 [ 556.353123][ C0] kasan_quarantine_reduce+0x148/0x160 [ 556.358619][ C0] __kasan_slab_alloc+0x22/0x80 [ 556.363508][ C0] __kmalloc_cache_noprof+0x2b6/0x660 [ 556.368914][ C0] ? ref_tracker_alloc+0x15b/0x4b0 [ 556.374056][ C0] ? __kmalloc_cache_noprof+0x157/0x660 [ 556.379639][ C0] ref_tracker_alloc+0x15b/0x4b0 [ 556.384609][ C0] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 556.390179][ C0] ? trace_kmalloc+0x2a/0xf0 [ 556.394812][ C0] ? __raw_spin_lock_init+0x45/0x100 [ 556.400140][ C0] get_net_track+0x16e/0x230 [ 556.404769][ C0] sk_alloc+0x1da/0x390 [ 556.408980][ C0] __netlink_create+0x62/0x260 [ 556.413776][ C0] netlink_create+0x3ca/0x590 [ 556.418480][ C0] ? __pfx_rtnetlink_bind+0x10/0x10 [ 556.423730][ C0] __sock_create+0x4b3/0x9d0 [ 556.428370][ C0] __sys_socket+0xd6/0x1b0 [ 556.432825][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.438919][ C0] __x64_sys_socket+0x7a/0x90 [ 556.443635][ C0] do_syscall_64+0x174/0x580 [ 556.448258][ C0] ? trace_irq_disable+0x3b/0x140 [ 556.453336][ C0] ? clear_bhb_loop+0x40/0x90 [ 556.458050][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.463968][ C0] RIP: 0033:0x7f5e2e19ce59 [ 556.468413][ C0] RSP: 002b:00007f5e2f00a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 556.476860][ C0] RAX: ffffffffffffffda RBX: 00007f5e2e415fa0 RCX: 00007f5e2e19ce59 [ 556.484862][ C0] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010 [ 556.492861][ C0] RBP: 00007f5e2e232d6f R08: 0000000000000000 R09: 0000000000000000 [ 556.500872][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 556.508877][ C0] R13: 00007f5e2e416038 R14: 00007f5e2e415fa0 R15: 00007ffdf20101e8 [ 556.516992][ C0] [ 556.520053][ C0] task:syz-executor state:R running task stack:22128 pid:15380 tgid:15380 ppid:1 task_flags:0x40054c flags:0x00080002 [ 556.533682][ C0] Call Trace: [ 556.536999][ C0] [ 556.539964][ C0] __schedule+0x1840/0x57a0 [ 556.544571][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 556.549636][ C0] ? __pfx___schedule+0x10/0x10 [ 556.554521][ C0] ? page_table_check_clear+0x124/0x4f0 [ 556.560471][ C0] ? preempt_schedule_thunk+0x16/0x30 [ 556.565932][ C0] preempt_schedule_common+0x82/0xd0 [ 556.571261][ C0] preempt_schedule_thunk+0x16/0x30 [ 556.576512][ C0] _raw_spin_unlock+0x3f/0x50 [ 556.581275][ C0] __zap_vma_range+0x3e40/0x4c70 [ 556.586357][ C0] ? __pfx___zap_vma_range+0x10/0x10 [ 556.591696][ C0] ? mas_find+0xab1/0xcf0 [ 556.596115][ C0] ? unmap_vmas+0x1b9/0x550 [ 556.600662][ C0] unmap_vmas+0x390/0x550 [ 556.605036][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 556.609951][ C0] exit_mmap+0x293/0x9f0 [ 556.614231][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 556.619048][ C0] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 556.624725][ C0] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 556.630477][ C0] ? __pfx_exit_aio+0x10/0x10 [ 556.635210][ C0] ? arch_uprobe_clear_state+0x1c8/0x240 [ 556.640875][ C0] ? uprobe_clear_state+0x2ac/0x3e0 [ 556.646151][ C0] __mmput+0x118/0x420 [ 556.650249][ C0] exit_mm+0x1e4/0x2b0 [ 556.654357][ C0] do_exit+0x6cd/0x2360 [ 556.658572][ C0] ? __pfx_do_exit+0x10/0x10 [ 556.663202][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 556.668270][ C0] do_group_exit+0x22d/0x2f0 [ 556.672895][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 556.678121][ C0] get_signal+0x121b/0x12c0 [ 556.682674][ C0] arch_do_signal_or_restart+0xbb/0x860 [ 556.688260][ C0] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 556.693497][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 556.699696][ C0] ? __se_sys_clock_nanosleep+0x35b/0x3b0 [ 556.705461][ C0] exit_to_user_mode_loop+0xa9/0x6b0 [ 556.710776][ C0] ? rcu_is_watching+0x15/0xb0 [ 556.715572][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.721672][ C0] do_syscall_64+0x353/0x580 [ 556.726292][ C0] ? trace_irq_disable+0x3b/0x140 [ 556.731361][ C0] ? clear_bhb_loop+0x40/0x90 [ 556.736071][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.741988][ C0] RIP: 0033:0x7f5e2e15d68e [ 556.746432][ C0] RSP: 002b:00007ffdf20104c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 556.754880][ C0] RAX: 0000000000000000 RBX: 000055555d4d2500 RCX: 00007f5e2e15d68e [ 556.762881][ C0] RDX: 00007ffdf2010520 RSI: 0000000000000000 RDI: 0000000000000000 [ 556.770973][ C0] RBP: 00007ffdf201058c R08: 0000000000000000 R09: 0000000000000000 [ 556.778983][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000001388 [ 556.786986][ C0] R13: 00000000000927c0 R14: 000000000006337d R15: 00007ffdf20105e0 [ 556.795007][ C0] [ 556.798058][ C0] task:syz.4.3254 state:R running task stack:25608 pid:16109 tgid:16109 ppid:14956 task_flags:0x400040 flags:0x00080002 [ 556.811592][ C0] Call Trace: [ 556.814900][ C0] [ 556.817858][ C0] __schedule+0x1840/0x57a0 [ 556.822392][ C0] ? __lock_acquire+0x683/0x2cd0 [ 556.827392][ C0] ? __pfx___schedule+0x10/0x10 [ 556.832286][ C0] ? preempt_schedule_thunk+0x16/0x30 [ 556.838053][ C0] preempt_schedule_common+0x82/0xd0 [ 556.843375][ C0] ? nl80211_netlink_notify+0x6f4/0x840 [ 556.849061][ C0] preempt_schedule_thunk+0x16/0x30 [ 556.854309][ C0] __local_bh_enable_ip+0xe1/0x130 [ 556.859463][ C0] nl80211_netlink_notify+0x6f4/0x840 [ 556.864880][ C0] ? nl80211_netlink_notify+0x74/0x840 [ 556.870380][ C0] notifier_call_chain+0x1a5/0x3d0 [ 556.875539][ C0] blocking_notifier_call_chain+0x6a/0x90 [ 556.881295][ C0] netlink_release+0x11f8/0x1aa0 [ 556.886277][ C0] ? netlink_release+0x106/0x1aa0 [ 556.891342][ C0] ? __pfx_netlink_release+0x10/0x10 [ 556.896656][ C0] ? down_write+0x16d/0x200 [ 556.901202][ C0] ? __pfx_down_write+0x10/0x10 [ 556.906095][ C0] sock_close+0xad/0x220 [ 556.910374][ C0] ? __pfx_sock_close+0x10/0x10 [ 556.915273][ C0] __fput+0x418/0xa50 [ 556.919308][ C0] task_work_run+0x1d9/0x270 [ 556.923942][ C0] ? __pfx_task_work_run+0x10/0x10 [ 556.929097][ C0] exit_to_user_mode_loop+0x193/0x6b0 [ 556.934502][ C0] ? rcu_is_watching+0x15/0xb0 [ 556.939303][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.945423][ C0] do_syscall_64+0x353/0x580 [ 556.950134][ C0] ? trace_irq_disable+0x3b/0x140 [ 556.955195][ C0] ? clear_bhb_loop+0x40/0x90 [ 556.959904][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.965831][ C0] RIP: 0033:0x7f3de339ce59 [ 556.970271][ C0] RSP: 002b:00007ffc1ec69478 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 556.978724][ C0] RAX: 0000000000000000 RBX: 00007f3de3617da0 RCX: 00007f3de339ce59 [ 556.986829][ C0] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 556.994834][ C0] RBP: 00007f3de3617da0 R08: 0000000000000006 R09: 0000000000000000 [ 557.002841][ C0] R10: 00007f3de3617cb0 R11: 0000000000000246 R12: 00000000000633e5 [ 557.010862][ C0] R13: 00007f3de361627c R14: 00000000000632bf R15: 00007ffc1ec69580 [ 557.018930][ C0]