last executing test programs: 2m27.2585432s ago: executing program 32 (id=534): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000001280)=@mangle={'mangle\x00', 0x2, 0x6, 0x630, 0x350, 0x280, 0x1b0, 0x280, 0x560, 0x560, 0x560, 0x560, 0x560, 0x560, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x21}, 0x0, 0x188, 0x1b0, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x18}, @local, @private2}}, @common=@inet=@multiport={{0x50}}]}, @HL={0x28}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x2a}, @dev, [], [], 'veth1_macvtap\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x5, 0x0, 0x52}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x2, 0xf}}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'netdevsim0\x00', 'bond_slave_0\x00'}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv4=@loopback, 0xfc}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0x5}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x690) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000001c0)={0x14, 0x26, 0x1, 0x70bd25, 0x25dfdbfc, {0x6}}, 0x14}}, 0x20006004) 2m24.85884571s ago: executing program 33 (id=553): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="14000000260001000000003e0000000006"], 0x14}], 0x1}, 0x0) 2m17.520190767s ago: executing program 5 (id=759): r0 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x2, &(0x7f0000000400)=""/217, &(0x7f0000000500)=0xd9) r1 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x800) read$alg(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007e40), 0x0, 0x20044894) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x45, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x2c, 0x2c, 0xd3f, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x10, 0x9}, {0x0, 0x9}, {0xf, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000050}, 0x20040054) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="fc000000160033060000000000000080ff0100000000000000000000000000017f00000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xfc}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) close(r1) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x38, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x1c, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x15, 0x0, 0x0, @uid}, @typed={0x8, 0x9, 0x0, 0x0, @fd}]}, @nested={0x4, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$IP6T_SO_GET_ENTRIES(r7, 0x29, 0x41, 0x0, &(0x7f0000000100)=0x28) readv(r1, &(0x7f00000003c0)=[{&(0x7f0000000080)=""/43, 0x2b}], 0x1) 2m16.968901939s ago: executing program 5 (id=766): r0 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) r1 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r1, &(0x7f0000000080)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0) 2m16.765600353s ago: executing program 5 (id=769): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x5, 0x5, 0x8001) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$BTRFS_IOC_SYNC(r1, 0x9408, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x5}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_INTERVAL={0x8}]}}]}, 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x5}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_INTERVAL={0x8}]}}]}, 0x3c}}, 0x0) 2m16.507134285s ago: executing program 5 (id=772): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r0, 0x10c, 0x3, 0x0, &(0x7f0000000080)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0, 0x4}, 0x94) r1 = socket$kcm(0xa, 0x1, 0x106) (async) r2 = socket$kcm(0x29, 0x9, 0x0) sendmsg$kcm(r2, &(0x7f0000000780)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local}, 0x80, 0x0}, 0xe07e872420dfefca) (async) sendmmsg(r1, &(0x7f0000002300)=[{{&(0x7f0000000540)=@sco, 0x80, 0x0}}], 0x1, 0x20000014) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="11000000040000000400000005"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r4, 0xffffffffffffffff, 0x500}, 0x57) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000002aec000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r5, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) (async) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'veth1\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x2, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x0, 0x8}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4000}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xfa, 0xf, 0x100, 0x3, 0x1, 0x7fffffff, 0xb}}, {0x4}}]}]}, 0x5c}}, 0x0) (async) r9 = socket$kcm(0x2, 0x7, 0x2) r10 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) (async) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r12, &(0x7f0000000200)={0x0, 0x2000000, &(0x7f00000001c0)={&(0x7f0000000440)={0x54, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}]}, 0x54}}, 0x0) (async) sendmsg$nl_route_sched(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {}, {0x0, 0xfff3}, {0xd, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x0, 0xfff3}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041004}, 0x0) r13 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90924fc60", 0x8c0}], 0x1, 0x0, 0x0, 0x600}, 0x0) ioctl$XFS_IOC_AG_GEOMETRY(r9, 0xc080583d, &(0x7f0000000000)={0xffffffdf, 0x7, 0x0, 0x8, 0xff, 0x7, 0x4, 0x8}) 2m16.040015461s ago: executing program 5 (id=777): bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0), 0x8) (async, rerun: 64) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, 0x9}, 0x94) (rerun: 64) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d440fe0000000000002900000003000000", 0xfe60) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) socket(0x10, 0x803, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) (async, rerun: 32) r3 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r3, @ANYBLOB="060015000700fdff0c00168008000100", @ANYRES32=r2], 0x38}}, 0x10) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) r4 = socket$packet(0x11, 0x2, 0x300) (async) r5 = socket(0x10, 0x3, 0x0) sendto$inet6(r5, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020506050e020409430009003f0000000a0000000d0085a168d0bf46d32345653600648d0a0012000200000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000180)=r7, 0x4) (async) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r9, &(0x7f00000000c0)=[{&(0x7f0000000180)='wi', 0x2}], 0x1, 0x1) (async) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, 0x0, 0xc800) (async) splice(r8, 0x0, r10, 0x0, 0x10d00, 0xf) syz_emit_ethernet(0x68, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa230180c200000308004500005a0066000040119078000000000000000000004e2015469078b698566847ba33143c1c023463d36229737a37803451124ffe3104ba7d1dbdf4d5d587914923039744df3235f4400ff0920f2348bab7c023e5728767b982"], 0x0) (async, rerun: 64) getsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f00000006c0)=""/231, &(0x7f00000007c0)=0xe7) (async, rerun: 64) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000080), 0x24) 2m15.751830191s ago: executing program 5 (id=780): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000e40000000006"], 0x14}], 0x1}, 0x0) 2m0.877845683s ago: executing program 6 (id=1008): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x8001, {0x0, 0x0, 0x0, 0x0, 0x8002, 0x8}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0x3}]}, 0x4c}, 0x1, 0x0, 0x2000000000000000}, 0x0) 2m0.708340697s ago: executing program 34 (id=780): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000e40000000006"], 0x14}], 0x1}, 0x0) 2m0.659335309s ago: executing program 6 (id=1012): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000300)=@updsa={0xf0, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @remote}, @in=@initdev={0xac, 0x1e, 0x20, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xb0}, {@in6=@empty}, @in6=@private2, {}, {}, {}, 0x0, 0x0, 0x2}}, 0xf0}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r2) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x20, r3, 0x60b, 0x70bd28, 0x4000, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x8000000, 0x0, 0x1}, 0x400c0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000006c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xfffa, 0x2}, {}, {0xa, 0xfff1}}, [@TCA_CHAIN={0x8, 0xb, 0xec}, @filter_kind_options=@f_bpf={{0x8}, {0x0, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_OPS={{0x6}, {0x4}}]}}]}, 0x4c}}, 0x24004000) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x88, 0x2c, 0xf3f, 0x70bd2b, 0x25dfdbbd, {0x0, 0x0, 0x0, r5, {0xffe0, 0xc}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_EMATCHES={0x54, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x48, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x44, 0x1, 0x0, 0x0, {{0x8, 0x7, 0x6}, {{0x1, 0x0, 0x1}, {0x0, 0x0, 0x1}}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x7fff, 0x7, 0x7}, {{0x2, 0x1}, {0x4, 0x1}}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0xffff, 0x3, 0xb}, {0x6, 0x2, 0x7, 0x5}}}]}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x20041090}, 0x4880) 2m0.407615094s ago: executing program 6 (id=1016): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x99c}}, 0x0) 2m0.354065044s ago: executing program 6 (id=1017): r0 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f0000000040)={{0x10000, 0x200}, 0x6}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x1, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f0000000400000004000000a2"], 0x50) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000140), 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmmsg$inet6(r0, &(0x7f0000000340)=[{{&(0x7f0000000380)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5, '\x00', 0x0}}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000100)="a0002883781ecc0e", 0x4008}], 0x6}}], 0x1, 0x0) 2m0.188272823s ago: executing program 6 (id=1019): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) (async) write$tun(r2, &(0x7f0000000040)={@val={0x0, 0x8100}, @void, @eth={@broadcast, @local, @val={@void, {0x8100, 0x7, 0x1, 0x2}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x4000, 0xe000, 0x6, 0x2f, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x41}}, {0xa001, 0x880b, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x8, 0x0, @void}}}}}}}}, 0x36) (async) sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14, r1, 0x1, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) 2m0.020004789s ago: executing program 6 (id=1021): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000001100000006"], 0x14}], 0x1}, 0x0) 1m44.915203568s ago: executing program 35 (id=1021): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000001100000006"], 0x14}], 0x1}, 0x0) 1m40.343189051s ago: executing program 7 (id=1280): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300031000000000000000000000000200090008000000e40000000000000005000600000000000a00000000000000fc01000000000000000000000000000000000000000000000200010000000000000000000000000005000500000000000a00"/128], 0x80}, 0x1, 0x7}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaeaaffffffffff74ab00450001280000000000019078ac1e0001ffffffff0e0090787fff01fbfffffff30054271e"], 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000100)}, 0x20) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f00000001c0)={"7974de94734d815f7058cd97b58c15a7", 0x0, 0x0, {0x62e, 0xad}, {0x9, 0x6}, 0x3, [0xf, 0xf9e217b, 0x8001, 0xffff, 0x840, 0x4, 0x7fffffffffffffff, 0x5, 0x7e, 0x8, 0x3, 0xa4, 0x5, 0x3, 0x5, 0x8]}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r7) getsockname$packet(r7, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a80)=ANY=[@ANYRES64=r5, @ANYRES8=r7], 0x3c}}, 0x100) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x5}, {0xffff, 0xffff}, {0xffe0, 0x5}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8810}, 0x4000080) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r9, 0xc038943b, &(0x7f0000000a40)={0x3, 0x18, '\x00', 0x759f989b2b4d01ce, &(0x7f0000000a00)=[0x0, 0x0, 0x0]}) bind$packet(r5, &(0x7f0000000040)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r5, &(0x7f0000000680)="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", 0x24a, 0x880, 0x0, 0x0) getsockopt$inet6_int(r7, 0x29, 0x1a, &(0x7f0000000900), &(0x7f0000000940)=0x4) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000040000000900000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0d00000004000000040000000900000050010000", @ANYRES32=r10, @ANYBLOB="000000003b67a4547f0c4e", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockopt$IP_SET_OP_GET_BYINDEX(r0, 0x1, 0x53, &(0x7f0000000980)={0x7, 0x7, 0x1}, &(0x7f00000009c0)=0x28) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r3, 0xc0c89425, &(0x7f00000002c0)={"57f0ef4f4e6c20f0d215d6a22d67750f", r4, 0x0, {0x3397, 0xfffffff7}, {0x8, 0xef}, 0x106, [0x13c4000000, 0x5, 0x2, 0x3, 0x2, 0x8, 0x3200, 0x94, 0x7, 0x0, 0xfffffffffffffffe, 0x0, 0x8, 0xe, 0x3, 0x6]}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000600)={'macvtap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001400010000000000fbdbdf250a00a100", @ANYRES32=r11, @ANYBLOB="14000100ff05000000000000dfce00000000000108000800"], 0x34}}, 0x0) r12 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000015"], 0x34}, 0x1, 0x0, 0x0, 0x41c1}, 0x4040800) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000005c0)={r1, &(0x7f00000003c0)="8c77279760f500da3f75ac14915dec8f9b01eaa0e97ea8548d81fe6bcb161de339052e5eb31321a58a706e7e7c955df3734a69be19bb0d9bddfe07b9042399fee622c96d9de23f7455dc1928fd26584cc9d13610747460d6b67d5c548a422dfd2e6a047ae6e78e2f07311aa45c81d1432fbae4578452b5c5ca9bfd724761f930c67a140db8257c84d13a51cea8", &(0x7f0000000480)=""/215, 0x4}, 0x20) 1m40.108478297s ago: executing program 7 (id=1283): r0 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$XFS_IOC_RTGROUP_GEOMETRY(r0, 0xc0805841, &(0x7f0000000000)={0x9, 0x6, 0x3, 0x10001, 0x9}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={r0}) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), r0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000280)={'syztnl1\x00', &(0x7f0000000140)={'ip_vti0\x00', 0x0, 0x7800, 0x0, 0xfffffff0, 0x1, {{0x42, 0x4, 0x0, 0x1, 0x108, 0x68, 0x0, 0x1, 0x4, 0x0, @empty, @local, {[@timestamp_addr={0x44, 0x14, 0x73, 0x1, 0x6, [{@dev={0xac, 0x14, 0x14, 0x3e}, 0x7fffffff}, {@dev={0xac, 0x14, 0x14, 0x1c}, 0x7}]}, @generic={0x0, 0x7, "3e76e0d999"}, @ssrr={0x89, 0xf, 0xac, [@remote, @empty, @private=0xa010100]}, @timestamp_prespec={0x44, 0x4c, 0xb4, 0x3, 0xb, [{@dev={0xac, 0x14, 0x14, 0x19}, 0xfff}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x36}, 0x2c8167dd}, {@loopback, 0x3}, {@private=0xa010101, 0x8}, {@remote, 0x8}, {@empty}, {@dev={0xac, 0x14, 0x14, 0x2f}, 0x2}, {@rand_addr=0x64010100, 0x4}]}, @timestamp_prespec={0x44, 0x4c, 0x32, 0x3, 0xa, [{@dev={0xac, 0x14, 0x14, 0x1c}, 0x7}, {@dev={0xac, 0x14, 0x14, 0x42}, 0xa1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9158}, {@empty, 0x9}, {@remote, 0x2}, {@loopback, 0x5}, {@rand_addr=0x64010101, 0xfffffff8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}, {@multicast2, 0x86e0}]}, @lsrr={0x83, 0x1b, 0x62, [@local, @local, @empty, @local, @multicast1, @local]}, @timestamp_addr={0x44, 0x14, 0xed, 0x1, 0x8, [{@multicast2, 0x5b}, {@private=0xa010100, 0xffffffc2}]}]}}}}}) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, r2, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x800}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r3}]}, 0x3c}}, 0x10000000) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000f80)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000f40)={&(0x7f00000003c0)={0xb70, r2, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_PEERS={0xaf8, 0x8, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x6, @dev={0xfe, 0x80, '\x00', 0x24}, 0x80000001}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "5c3b53a7c3f39b54f19359641af17a5f6f97eb5bcd4817138555ca3d2ca6b83f"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x2}]}, {0x50, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}}, @WGPEER_A_PUBLIC_KEY={0x24}]}, {0xa4c, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x430, 0x9, 0x0, 0x1, [{0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x21}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x23}}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x3}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x1a}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0x244, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xe}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x3}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "2b6d920f8e1f50c116e69d0d236580cde3b8e2f5ebc79c947a51da8639781380"}, @WGPEER_A_ALLOWEDIPS={0x358, 0x9, 0x0, 0x1, [{0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x36}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x1}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x2}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x2}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x21}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x32}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}]}]}]}, 0xb70}, 0x1, 0x0, 0x0, 0x40000d4}, 0x8000) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000fc0), 0x500000, 0x0) ioctl$PPPIOCSACTIVE(r4, 0x40107446, &(0x7f0000001040)={0x2, &(0x7f0000001000)=[{0xff, 0x7, 0xd, 0x7}, {0x8, 0xbf, 0x5, 0x800}]}) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r1, &(0x7f0000001200)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000011c0)={&(0x7f00000010c0)={0xd0, 0x1, 0x8, 0x3, 0x0, 0x0, {0xa, 0x0, 0x6}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x4c, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x5658}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfff}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8000}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0xffffffff}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_ESTABLISHED={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_TCP_SYN_SENT2={0x8, 0x9, 0x1, 0x0, 0xfffffff6}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_TCP_RETRANS={0x8, 0xa, 0x1, 0x0, 0xffff0000}, @CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0x24000}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x40}, 0x4000) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000001280)={0x8, &(0x7f0000001240)=[{0x200, 0x7, 0x2, 0x8}, {0x2, 0x2, 0x5, 0x81}, {0x7ff, 0x7, 0x4, 0x6}, {0x1, 0xa7, 0x3, 0x10}, {0x3, 0x8, 0x53, 0x7}, {0x9, 0x5, 0x3, 0x206}, {0x2, 0x3, 0x9, 0x1}, {0x8, 0x6, 0x5, 0x800}]}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001300), r1) sendmsg$NL80211_CMD_REQ_SET_REG(r5, &(0x7f0000001400)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001340)={0x54, r6, 0x404, 0x70bd25, 0x1, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_DFS_REGION={0x5}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x6}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x32}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x40) r7 = accept$inet(r1, 0x0, &(0x7f0000001440)) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000001480)={0x0, 0xffff}, &(0x7f00000014c0)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000001540)={r8, 0x0, &(0x7f0000001500)}, &(0x7f0000001580)=0x10) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000001600), r1) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000001700)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001640)={0x4c, r9, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8011}, 0x20008844) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000001800)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x24, r9, 0x28, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x8000) socketpair(0x1e, 0x806, 0xe9fa, &(0x7f0000001840)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000001b40)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001b00)={&(0x7f00000018c0)={0x220, r6, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x28, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x2}, @NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0x4cfba95d, 0x8, 0x5, 0x5]}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x17f}]}, @NL80211_ATTR_CQM={0x3c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x6d2}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x51}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x7}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x108}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x9}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x3}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x1000}]}, @NL80211_ATTR_CQM={0x5c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x6}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x3}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x522}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x7}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x8}, @NL80211_ATTR_CQM_RSSI_THOLD={0x20, 0x1, [0x1, 0x1, 0x1, 0x7, 0x0, 0x1, 0x8]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x9}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x10000}]}, @NL80211_ATTR_CQM={0x34, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x46}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x2}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x4b}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0xa9a, 0x2, 0x3ff]}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x6e1}]}, @NL80211_ATTR_CQM={0x58, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x1}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x77}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x9}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x13}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x6aa}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x5}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x5d7}, @NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0x4, 0x4, 0x3, 0x3d8]}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xd466}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x1022}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x10}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x5a9}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x9fb}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xdf3}]}, @NL80211_ATTR_CQM={0x3c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x5}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x104}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x9}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x7afa66c6]}, @NL80211_ATTR_CQM_TXE_PKTS={0x8}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3fa}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x137}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xffffffff}]}, @NL80211_ATTR_CQM={0x44, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x7}, @NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0x4, 0x63324de8, 0xfffffeff, 0x0]}, @NL80211_ATTR_CQM_RSSI_THOLD={0x24, 0x1, [0x10000, 0x9, 0x101, 0x4, 0x1, 0x6, 0x5, 0x8000]}]}]}, 0x220}, 0x1, 0x0, 0x0, 0x20008080}, 0x20000051) ioctl$SIOCX25GDTEFACILITIES(r11, 0x89ea, &(0x7f0000001b80)) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001c00), r10) sendmsg$TIPC_NL_MEDIA_GET(r11, &(0x7f0000001d40)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001d00)={&(0x7f0000001c40)={0xb4, r12, 0x332, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8000000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}, @TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @private=0xa010102}}, {0x14, 0x2, @in={0x2, 0x4e20, @multicast1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) sendmsg$NL80211_CMD_SET_REG(r5, &(0x7f0000001e40)={&(0x7f0000001d80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001e00)={&(0x7f0000001dc0)={0x40, r6, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x42}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x12}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x9}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008060}, 0x80) sendmsg$BATADV_CMD_GET_HARDIF(r5, &(0x7f0000001f80)={&(0x7f0000001e80)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001f40)={&(0x7f0000001ec0)={0x68, r9, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xe3}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4f4}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x68}, 0x1, 0x0, 0x0, 0x4080}, 0x20000000) r13 = socket$netlink(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000002000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r13, &(0x7f0000002140)={&(0x7f0000001fc0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002100)={&(0x7f0000002040)={0x8c, r6, 0x800, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x74, 0x6}}}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r14}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x4}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x80}, @NL80211_ATTR_STA_WME={0x44, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}, @NL80211_STA_WME_MAX_SP={0x5}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0xe}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0xc6}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x8}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x81}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0xd}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x6}]}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x4}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4008050}, 0x8008) 1m39.963643833s ago: executing program 7 (id=1285): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockname(r0, 0x0, &(0x7f00000000c0)) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r2, 0x111, 0x1, 0x4, 0x4) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x80, 0x0, 0x4c, 0xf3, 0x48, [0x4, 0x9, 0x0, 0x2, 0x5, 0x0, 0x0, 0x40000002]}}) 1m39.883547964s ago: executing program 7 (id=1286): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xfffe, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r2, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000f"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) 1m39.65205646s ago: executing program 7 (id=1290): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000380)={0x0, 0xff23, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000040)={0x34, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x59}]}]}]}, 0x34}}, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r2, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) sendmmsg$inet6(r2, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000008c0)="4b000ffd096c1b77cd99b1458609c4b82100370c57411e734cc8e9627df29e9b97a002d7f15ea9f42bd71401384ed6b5772b5c618c35c4aab72b1d515ceada9e64d7a35fd435e98f06243fcd53966c196ff3f47537912a1a5dec7e8e1fbf4543d1a6c80467d6ba3d241e3fd22efa09c638c98b4ce9fbe6d2053fcfa334eaee64efad2d349f048afb2635ae06c05697746fe073ed230c9c7c4643396305424c1c7eaa3ee09891995a607de26be9abcd2b65a4f9093da8a07eea61b1ff21ea3b323b191f95b997cfdface3dc21a664e38896f9f689bc06f4800d5c957102358770b0d8425f098be9383b5e487e7165e847191d5e95233e971edd", 0xf9}, {&(0x7f0000000680)="5f62f632763c84825847145170282f67ba6d5dadf0baf135d503e93a17ee5604080000005f0de32b0e53e4d26d04c825d923318fd574b1924b09ebb91d5be30b532a2fb95030c6be2a14ccfbce6eef05ea88d2413dc3fc0ae8a2e071f8764a4843611ae28b340100ddefa8ffed32420677397aa63e880adc56d03d8799429f33741886bd6c4065bba5005d74f67508dc3434165b51bf8f73bf1a7c158d8905e518e8", 0xa2}, {&(0x7f0000000c80)="0b0ec2a1e3fc84788972f461fec27348bd54a57f68a85a0200ad43c367bae5f7bd6c1e1d9017109e232e5bb561d280b32fa2b07a0cd31f1b8b9acdc89d4d5725350a9ec9303e53def89bcb6bb6ea83324927b43749f25be60c4f8707382b8e3062032c28dcccb784fdcfe6f2febd55e05bf1ccb63237c1d1bea4db828a5be79e518cf55a88e130609528b84359e76eee93584aad3f751172c449fb00"/165, 0xa5}, {&(0x7f0000003b80)="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", 0xfffffffc}, {&(0x7f0000000180)="a405df87c6e89abd7ae7e6b8550f9923917c9d38e14a4e", 0x17}], 0x5}}], 0x1, 0x4004000) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff87}, &(0x7f0000000000)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffcdf, 0x1, 0x0}, &(0x7f00000000c0)=0x40) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000003c0)={'wg0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000400)={@mcast1, 0x23, r7}) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r8, 0x1, 0x4c, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000002000010000001700000000000a000000000000000000000005001e"], 0x24}}, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000800)=ANY=[@ANYBLOB="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"/1810], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x35}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000200)=r10, 0x4) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) sendto$unix(r1, &(0x7f00000004c0)="ebb567fa9b", 0x5, 0x4c010, 0x0, 0x0) 1m39.443589866s ago: executing program 7 (id=1292): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000020000006"], 0x14}], 0x1}, 0x0) 1m24.370420315s ago: executing program 36 (id=1292): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000020000006"], 0x14}], 0x1}, 0x0) 1m19.415762064s ago: executing program 3 (id=1523): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000140)={r3, 0x4}, &(0x7f0000000180)=0x8) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) bpf$TOKEN_CREATE(0x24, &(0x7f0000000300), 0x8) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r4, 0x2) bind$alg(0xffffffffffffffff, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x600}, 0x0) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 1m19.307898984s ago: executing program 3 (id=1526): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x4, 0x4) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x84, r1, 0x100, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x48}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x10}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xb}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x200}]}, 0x84}, 0x1, 0x0, 0x0, 0x20040001}, 0x48081) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_PIM(r2, 0x0, 0xcf, &(0x7f0000000200), 0x4) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000240)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000440)={"e3b31e3f33b9267ec9a9723ca59345bd", 0x0, r3, {0x6, 0xccc}, {0x5, 0x1ff}, 0x6, [0xfffffffffffffffe, 0x3, 0x5, 0xaa3, 0x22b00000000000, 0xb50, 0x6, 0x5, 0xffffffff80000001, 0x9, 0x1, 0xfffffffffffffffd, 0xffffffffffffffff, 0x5, 0x4]}) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000540)={0x0, 0x7, 0x5, [0x7, 0xfff8, 0x20, 0xff, 0x1dff]}, 0x12) r4 = socket(0x25, 0x2, 0xcd) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000580)={0x2, 'nicvf0\x00'}, 0x18) getsockopt$inet_mreq(r4, 0x0, 0x23, &(0x7f00000005c0)={@broadcast, @initdev}, &(0x7f0000000600)=0x8) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000640), r4) getsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000680), &(0x7f00000006c0)=0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = accept4$inet6(r6, &(0x7f0000000700)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000740)=0x1c, 0x80000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000780)={'xfrm0\x00', 0x0}) ioctl$SIOCGSTAMPNS(r4, 0x8907, &(0x7f00000007c0)) ioctl$sock_qrtr_SIOCGIFADDR(r4, 0x8915, &(0x7f0000000800)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000880)={'macvtap0\x00', 0x800}) sendmsg$TIPC_NL_BEARER_DISABLE(r4, &(0x7f0000000a80)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000a40)={&(0x7f0000000900)={0x138, r5, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xe7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}]}, @TIPC_NLA_BEARER={0xa0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @private=0xa010100}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x8, @private0, 0x7}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0xf7e, @local, 0x9}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @multicast1}}, {0x14, 0x2, @in={0x2, 0x4e22, @private=0xa010100}}}}]}, @TIPC_NLA_SOCK={0x48, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x100}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x926}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8f1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffe}]}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) ioctl$VFAT_IOCTL_READDIR_SHORT(r6, 0x82307202, &(0x7f0000000ac0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000d00), &(0x7f0000000d40)=0xc) getsockopt$TIPC_NODE_RECVQ_DEPTH(r9, 0x10f, 0x83, &(0x7f0000000d80), &(0x7f0000000dc0)=0x4) getsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, &(0x7f0000000e00)=0x1, &(0x7f0000000e40)=0x4) getsockname$packet(r4, &(0x7f0000000e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000ec0)=0x14) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000f00)={0x2, 0x3, 0x15c0d88fd5ad4576, 0xfffffff7, 0x8, 0x0, [{0x6, 0x1ff, 0x8f0e, '\x00', 0x80}, {0x3ad, 0x100, 0x0, '\x00', 0x800}, {0x80000000, 0x2, 0x1000, '\x00', 0x1}, {0x0, 0x67, 0xfffffffffffffffd, '\x00', 0x2804}, {0x3, 0x8, 0x0, '\x00', 0x88}, {0x8514, 0x40, 0x9, '\x00', 0x2808}, {0x7ff, 0x2, 0x8, '\x00', 0x1400}, {0x100000000, 0x401, 0xfffffffffffffff7, '\x00', 0x600}]}) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000001180)={'broute\x00', 0x0, 0x4, 0x21, [0x7, 0xbe9e, 0x1, 0xb, 0x80000001, 0xfff], 0x2, &(0x7f0000001100)=[{}, {}], &(0x7f0000001140)=""/33}, &(0x7f0000001200)=0x78) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000001400)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001300)={0xbc, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x9}, @ETHTOOL_A_LINKMODES_HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x99}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4015}, 0x10) 1m17.117274089s ago: executing program 3 (id=1529): socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a5a8698dfa871c5165c14b6fb57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d00", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) 1m16.926898623s ago: executing program 3 (id=1533): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x99c}}, 0x0) 1m16.819201965s ago: executing program 3 (id=1535): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bic', 0xff3d) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss={0x2, 0x1}, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x2000000000000205) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000100)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0], 0x0, 0x2c, &(0x7f0000000240)=[{}, {}], 0x10, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0xcb, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000480)={@multicast1, @multicast2, r1}, 0xc) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 1m15.844073337s ago: executing program 3 (id=1542): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000920006"], 0x14}], 0x1}, 0x0) 1m0.81869213s ago: executing program 37 (id=1542): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000920006"], 0x14}], 0x1}, 0x0) 50.603640013s ago: executing program 2 (id=1809): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x2, 0x3, 0x0, 0x3, 0x10, 0x0, 0x70bd2c, 0x25dfdbfb, [@sadb_key={0x2, 0x9, 0x40, 0x0, "e9ff000000000000"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x2}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2, 0x7}}]}, 0x80}, 0x1, 0x7, 0x1900}, 0x4008000) 50.565501847s ago: executing program 2 (id=1810): r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r3, 0x10040) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000340)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0xfffe, 0x0, 0x95, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0xc0, 0x8, 0x0, 0x1000, {[@timestamp={0x8, 0xa, 0x8001, 0x400056}]}}}}}}}, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x148, r2, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x3c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x74, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x80}, 0x804) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000540)={0x1c, r4, 0x101, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffffe}]}, 0x1c}}, 0x0) 50.486526025s ago: executing program 2 (id=1812): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x6, 0x4, &(0x7f0000002180)=ANY=[@ANYBLOB="180200000000000000000000cfffffff850000001700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth0_macvtap\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r1, r2, 0x25, 0x4, @val=@netkit={@void, @value=r1}}, 0x1c) r3 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000340), 0x8) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r4, 0x29, 0x49, &(0x7f0000000140)=0x5, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xa, 0xb, 0x1, 0x2, 0x30020, 0x1, 0x65, '\x00', r2, 0xffffffffffffffff, 0x2, 0x1, 0x2, 0x0, @void, @value, @value=r3}, 0x50) r5 = socket$inet_udp(0x2, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000001700)=[{0x0}], 0x1) sendmsg$inet(r5, &(0x7f00000052c0)={&(0x7f0000003fc0)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000050c0)=ANY=[@ANYBLOB="240000000000000000000000070000008612ffffffff0204dadd02eb"], 0x28}, 0x40) syz_emit_ethernet(0x285, &(0x7f0000000000)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @generic={0xb, 0x6, "6b8222", 0x24f, 0x21, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, {[@srh={0x1, 0x2, 0x4, 0x1, 0xea, 0x40, 0x1, [@remote]}, @srh={0x84, 0x6, 0x4, 0x3, 0x0, 0x0, 0x2, [@mcast1, @mcast2, @empty]}, @hopopts={0x2, 0x4, '\x00', [@enc_lim={0x4, 0x1, 0x3f}, @enc_lim={0x4, 0x1, 0x6}, @calipso={0x7, 0x18, {0x2, 0x4, 0x2, 0x4, [0x7, 0x5]}}]}, @srh={0x6, 0xa, 0x4, 0x5, 0xe, 0x60, 0x4, [@private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback]}, @dstopts={0x89, 0x9, '\x00', [@generic={0x6, 0x22, "ffa043a307192fafda341195540915bc89ae5dd8b3e884ffaa5b2d2fb0c8254eae6b"}, @calipso={0x7, 0x28, {0x0, 0x8, 0x7f, 0x4, [0x0, 0x7f, 0x614b29bb, 0x8]}}]}, @routing={0x0, 0x8, 0x0, 0xcf, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00', @empty, @mcast2]}, @srh={0x3c, 0x10, 0x4, 0x8, 0x5, 0x10, 0xb6, [@rand_addr=' \x01\x00', @mcast2, @remote, @private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0x36}, @private2]}, @srh={0x2f, 0x6, 0x4, 0x3, 0xda, 0x10, 0x4, [@loopback, @private2={0xfc, 0x2, '\x00', 0x1}, @remote]}], "ef7be0d740811c6ab03207c97f3cad24b51beba9290c7a44d2c6e58489d957"}}}}}, 0x0) 50.123690676s ago: executing program 2 (id=1820): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x55, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x78}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) (async) r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000001140)={{r0, &(0x7f0000000040)='\x00', 0x143302, &(0x7f0000000080)={@align, {0x4, 0x3, 0x1000}}, 0x9, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000100)=0x7}, {[0x800, 0x8c58, 0x0, 0x2]}, 0x7, 0x1000, &(0x7f0000000140)=""/4096}) (async) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000001140)={{r0, &(0x7f0000000040)='\x00', 0x143302, &(0x7f0000000080)={@align, {0x4, 0x3, 0x1000}}, 0x9, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000100)=0x7}, {[0x800, 0x8c58, 0x0, 0x2]}, 0x7, 0x1000, &(0x7f0000000140)=""/4096}) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f00000011c0)='veth1\x00') ioctl$sock_bt_bnep_BNEPGETCONNINFO(r0, 0x800442d3, &(0x7f0000000000)={0x2, 0x3ac, 0x81, @remote, 'veth0_to_bridge\x00'}) 50.06300187s ago: executing program 2 (id=1821): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x2, 0x3, 0x0, 0x3, 0x10, 0x0, 0x70bd2c, 0x25dfdbfb, [@sadb_key={0x2, 0x9, 0x40, 0x0, "e9ff000000000000"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x2}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2, 0x7}}]}, 0x80}, 0x1, 0x7, 0x1d00}, 0x4008000) 49.881340347s ago: executing program 2 (id=1825): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000009206"], 0x14}], 0x1}, 0x0) 34.570644398s ago: executing program 38 (id=1825): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000009206"], 0x14}], 0x1}, 0x0) 11.772931032s ago: executing program 0 (id=2293): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000001c0)={0x9f54, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) sendmmsg$inet(r1, &(0x7f0000004cc0)=[{{&(0x7f0000000800)={0x2, 0x6e1e, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)="1bc7a7fab25c4d096d13ab609699ccfad50f833b12f72e7d9a802d8457394031e7227a4d2e5133ed69e3195918c45d8b0ef7819b03d71ace368b2fd8c3db9191abc22ee97998989d915efcc43b63e353a9d8e8dfe21a31a73a4d908795b98c62b655664130a6af358e15446e3b497e599e062848ec62e3b3ead00bd921780434f1561243737f27a2bf98d708c1bf4fd2c2e3f8ea2617d0c69dc73c597a12ba4be2bb9439d7a518eac95b7b8776223bfefeed41d09154ce0983f0450acd463a6e3f8285a144a20dec45b607a1720ceb95883a14ea680f7f00d86053bec5d49bc08e692bd70c", 0xe5}, {&(0x7f0000001700)="6242870f0e6b4396205a2c501f10b0602b64a04104bf0ef28ebfda215394bae4413f4292888a899117ec83cfbb17c52caa27a3b4f2621e6941138caa786f3f6d7ebf1863150a9b64333542704a410fa62c556d76d8250364fa", 0x59}, {&(0x7f0000000e00)="55bbeefbb9a13c80e6527d489144bf9bdcfdf9108b8fbd754043e281e3c4af285fd285f0ccc9655dfb2c2330aba5e7f71f81f05b23afb867db3b29e2d37b802dfc57772a9a4a6f8e948f5bbcbb8308ae67d57e70daa13148536e5cfe1eec171afbbf0a99f64a3b065896289be98f34a3ac141f9996f71a6c32cd9e930f86b9aa8d31e566b3e6f38babdb6943940ad3a772bfbba76c205db0390a5999f80a4ec5c8ca2ae9532691b027a98af073a6b8f1234f061a67721ca6916c3da920777acaa2688ef7f260a84ba993724ccd39a57523737647ba14d05506ad45203755dbdc3b9fc27e95564bef7c0f09b0656de99b66345d30f779c1aba8e315d5db46a8f82879463414bdd56f061752fff03f3cd61d8435d0751553a8c148d6d147ae9f526faf54b697999288af2a1552361670107d3205ea4fd9d85205e90eec595170333c6810082430c1440149de0b3aff45e2ef41cb4bad29ae9c4e5d58390e5e30d90c361020bebe314e697dce98a0a4c3df2d05e2247d5eba3133", 0x179}, {&(0x7f0000000640)="3e6069e04318de6ead0334bb1e66cb4e88bc998b266287091cf880dc0fb0e8b3bbdf8d45987e6302f1ac521b8e43d5135865c441efb1377fa4b4c9946f8ba2f5999ff4070213fdf5716b9c7992cc57adb3691cbedd46c70c123cb43ed522a35874f4503d56d44c71c7", 0x69}, {&(0x7f0000000880)="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"/371, 0x173}, {&(0x7f0000000400)="ac6aed94fbb8c7fecccf1fbe0f823f4711e4d4e5831b1172b79994156deeb8f47a21f6bd119ffeb486267bd8dbaa3b868deca95efc3fea013ea88ddd3222ff7cc0a3448434dca51f5bc1972720dc071c5c5e2358a62bb3d9ccb581431764476f92bc0dd581a715f7ff8cef23b35dceb96809ab4bfbc85cd9eed4820e2a821913e94ed62ce3b44103e31a82b7c14ea5dae6b42906b14cc21e24fcb7b255b5fd8b3d9eda621defc3f398cc545fb03d6549353921bb4a52b3230008f967ddc1ad8635d58667b82a58ec030a57d199f14b1714330e476a95", 0xd6}], 0x6}}], 0x2, 0x2404c044) writev(r1, &(0x7f0000001580)=[{&(0x7f0000000f80)="94ecf32a56f69ed7a392eed45ecbbf33b3432020a42e656f5be0b2bec03f3df8442095fbeb7fff058b0acae17b8c2f27449d4376d8654e1d193eb59a0d67d712f19e9bcfa06b82e73796d9dff25a85c9131a3d69c73b0fcd121f2e77552e5082b29ce0885896f46619199994bd3671f5dda81c10e5360df6c9a3bd8899c920b08a342252a8bcfbd0fed6ae361c86153b8a73d1bbd18d0b9f56ebadaa119529", 0x9f}], 0x1) 11.618308108s ago: executing program 0 (id=2296): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304001880000000000000007400", @ANYRES32=r2, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000f"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) 11.34049803s ago: executing program 0 (id=2302): r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r2, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r3, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b6b9037200001800c0005000400070200000200080001000300000005000200030000000500020008000000240003"], 0x12c}, 0x1, 0x1000000, 0x0, 0x24004821}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={0x1c, 0x15, 0x1, 0x0, 0xfffffffc, {0xe}, [@typed={0x8, 0x2, 0x0, 0x0, @u32=0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x20000080) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x80}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x0, 0x0, 0x7fdf}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x28, r6, 0x1, 0x0, 0x25dfdbfc, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e1d}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}]}, 0x28}}, 0x880) ioctl$BTRFS_IOC_SUBVOL_CREATE(r5, 0x5000940e, &(0x7f0000000500)={{r4}, "ec9dab7f9b3e09708f78bc0d82938c6e8ee03d0c6d2cf8295a44e9a5248ee71a0b6a69efce185d1c0ddf9946b1d9f9e68edf8100701794dce9cc98063d296f3c1bcee824b5cf991857f827a8cad25b57a0793246665080ab6927618fea3d199c903d61b62d0e237dc690e0af0da4e9dc507d64e221070d0ee1d6e53006fd0644e101b71c4671b47c0be037f6d61d03af7af6dad7dc39fa09be75d72f25848b3acd06fe584720a562cf91c2e1f8c34c09d16a450208e9e4a51c1493e9ecf0bea07a4ee2032f7bdf0c83cd54cb68b94a97afdfd7d9548b605e476b873fecc2aa368b1c56f5e1a97602956ae28d1902ba59011e94d2f637fc8d3349e29ac1453e4fff87ce912f921673ee0685394dbdab87c424800c4c2483c19ae803d4a2576cac8ac072a208e6f4617f0bba7aaba770aa68cde53b62ab15a5d688f8b3d9e8501a889d354b9b0b263b103c448137fa72b25b90bf7b396ef5795df04c96b0312624c76de8a7a90d35b2923c4233368dc35f315ce9a099293a2fc3474e21a28afc25bcef1f57cb2f9c7ef28d6cd9b25434899f8eaf4cb0e28674a39767c0363356b855949aed775787f575e651c10ec7135504a6489b804ba39f71f2b38bca683039672df2316d608db6df9b0bd54dd5771a62e1120a510f3808f83de224556f3ecb290ef3fc85ab042227f9c30097deea8c6a74e949dd33a26db2a3075acfdeba871e40591d80672dd5a7713295f038f5e2ce08ce1778b90a33c289687b58b01d9f71881eb4ffabb1df8b7c14bea91b7a4fab0cff23fe2a311cd3a37fc41e78ccc6b5c8a8df9d7bb297bb7699d960ccad1188c157057d3ae9f97d02682fe92f9e5f50070f5ab943df85f119fecf2a3c9fb404057955d3a13790f67be266c21da8cfca9b4bb8b8f646480e5c8dfffb9b718a043ef08f6e600c864a8b94aa0221914f5788b3651c49fade6dcb403293928af63288da013ef703f01dd7753cff2764a492665c75a9a4c86a2f52a1c12fb44580b7cb1013387b6f6e8dc4cb11d25419591c19fe597b058b43e93034b842581fb9c103e5d03680b4c397fe28e8842318b79269cc3169829671fe7584ff1e1ce88cf263426107640d4ae93a5a1e86afd87031b10cfd9258c68d001655d135a247cd7f496273405f09f94b12bb00805352056c0101e0cc752cc687b53199c7d9d2cee5499a9f169a09e5e09d115b1f9f1cad995652869894add7ff033bb5ec95b66283d0135c7f3d05796df4eea02796e82a7477a7813bc703b79bb1f68d0e32c7109cafd7ad63cd9c1cd0070f66e74bb6fa273a8a8c9b959c1cc28f0dcba575d4ece01703edd312c358ceba62f064b9b651641b2f840e73aa962d600babc9c38796007c07f59fe4d38bb17d73434c2bda0170d622db43d5f962fcf99d7d6607ddb9e8cc66af3b017a2fdb50f16bec9911754d5bf05d28bd762aaae9c037b098791d5edb044c7c0d210763b2004f674e554fb9e594b0c1941bece5f410a8f4fec93b5243bc5d0dca60becbe33baa40746d71db7245e71e458231f20e1353df6bdfbc79564adf136fe2df6a8e1000788261f00e3e661a06446fb057123302941581ebb5676ecb40a3c76f61687f93650a3528eaa2851207311c90f682b397bba1e69436739aa6ab6de4d65a1b751506daf97cd8458e7529156557936ae07033955d3fbc7e4008c6848e191e2bbef7fa43d424f3f071bc30b397b571cc898c2d046dbb57dd7003264603a0120fc7cdc9719251314b34bfece52ce2e83f7d6fdfbdb5df406066903c4f5b44ed90a3a09ff75735429b3183f836dfe7fa1b8384fd769044fe285c2e552bae94011f25bf5f143c0c84ba51adf04577515905732f03accf0d1ac9f9cc2b3003a8b0b106e3fd0e58e654509c3763990e49ef009c7d02602d2f74c1437c68d308192f1bf79877f82372254687b461a9e0e054ef8e2f1c600e535350a06d7f148f58ebb231bab16c85b29dc26400230631c886b639b435add8b4714c15c572112b68a3b28334eb0da653953853671bd8346b8c8bb43deed9a8dfc673e5a50f33fb45f5a4c5000f5042f6950f05d89c745c8e1d5ae0ab8cb0a557f5064df1fa362c05a95f6cb023162ee132fe5fabcb29fd9f51089cd50090822f0009f9978d8902fce9f7a664ba96b7dc19caec0125d86b1dd3fb5b481673e4384c45880595bb8eaea25d0ce73db4c8f45f2dac6ba200c2dbf40ccbef82e6aa3d888bb0f091c4d129cecd49bf5bddae3fe33ca53ca12592ffa14e2e6debdac740b2bbffd738dec8ea9ae06b881714d57b8b651f6b39defeb203f052a731f116814e299304c183b14493543ef67d72b0c739e80061029a01744dfc5a26b87aa7d7f6591f72cb84c5fdabc1607a28a31eb327b734340bf4431d76b70662a0cbca1fa9df1767d6fdb79ef99c8c2dbf50cab61e2d8eece97ee4525829a75915913cf85d03da457b63e3bdf69ced46b6c1d990fa7a19552316c622885df728520aaa6555cda40b18af0058bac71ea3aff90c5b758f7e22adf2e09667ca68dafa18d5735b59d3b386b4f28a4891f2558bea97d728be02b9b82c71007a2ce93aebab701fd1cf31d2b2a6a0d4eabbda94611438dc88bc4b9cd6bda6b9694c3c297d10bdefa049cde28bfd69808f45efce64421009dce43ef80d18c6c3051e6569fea758d3a3e8947497e772ffd229afb1bc6dfd9a3b9fd7844939d50a4a068442a34d80ca9132b52c920543b22653e058341061fc289290830bd9cdb4fd483f63da56d293746a339d08130e72396d4f7d5bc33def6630947911b7de0b8d88cba98dcda31e07be9b0e0078d6cf058ae358c69a44d9bac204fd4cad2b6a73305023f48e764add0f408b664e7e6ad50b91e236f85d409da835bfe34c1a8ce36f040c7c58d8d3ce5a348d55a938d63b2dca772a3c0e6b8260326f27e24210e5293d7f0631428cde76b0fcefe5321a5fe7dc0d501a8ca31d317bfcfcaf45f2dd8690da25e34339e68154d826d9ba8fb10fb0f7c034edd6b98d4bf3bbf71a3c7beb8e0541487a5c4f65e9d3b49cc668201105a21ec69cb7014f53367459c2670c9e18319866ab8526ec9068481b62a4d793c6df20518d6307376e56512504e50155c0cb32fc5113b8276ac961d3c4689569d05678b0d15df893d56d7c06c612628b15806e71458c19f93555fdc2fb7160cb7e491c3e94dd0608209da901ed24cc5fb09cd36e723a33da34cf8111aad72cd4ab79c613419d0212444b80a96cf521db6e32ad0018061fb4100cbd9aeb1429709cc35c460ff6005d461d0c39fb9000e287df0967356c6f5da6aed30b9f39acd370f340dfc23c07f8cbd313b608ba7857102e17fb7fe170c23c93acfc08ffb9fb293fd3323eb8c864a402cb076f215919eaab0f95a849308c40d1a7ad8263ce6e401af0d920a31b511ea200259c41940a4bf14d8ee56e87332206dc152dac22e6337946d143334272896626eed4cbf013bd43f0dd402dadd519fa54baa6942bf023250d43052df7f61f78e22796c986fad3cffed08474458c086c54ef06993b123dd1ee6c0c802bf07e7f8ed2cc4578e40e21969c09260fbb34b2a2ecb31378adb8e5ad346b9acdc45e3fa94fc6a71f6b3886cf99a6b60835af4c5f8e1ca5637059c9f5ebf07e37b32e21c39ba6789df4192a90006417b59b6b4696e309001ae43a4d794d40f02e735af35bff76136afdf66481b72a9f4c478332229220ddc60a394627753b1d8aa68220e0c789eb6ebe08a698ac050d13fdf2f9ab03ddaa4e239114e81d002ba963fc68b3eabd678d0bed474b3265fe1acb4d0e873340fc2871179c0bda31039f022f1eb622070b33b2c0585d8a0a29b5964baf40e07e85dba10b7d77deb4fabaf9c8d4f16ef6227fb9f6646e88a05593e1cad414a890b6db8c9df1969a8886c499c27dc6175612385443d63899f1326dbc59c69af176a4d93ec32e7323ff105d7e1286d8a7d1b4683878eae1fe4723c1378dbf136db85c11f0c2b037a0f69e4adea32b5226a17f3178f1c73a3a7709786c092be3bf0c06441b3e356825dd6a1fd53814488407d660cb800dbceb8873ca6343dc0406d6a2e71576bd77c2542db1909304dc8e8741b8343ce7463f7b5bd29bb33fbacbdcb25b0b8165eca7a3056a591bff33a793dd8cd5039a7b1d8970885011cf7453236a3bfdfe2e270e6f6df6e59f61c48fedb85338a02f988bbca2c6dc96db1bbe21c0075df2948a9b42d38e5a9816b6af02d89fc54c1a132027e487fbca708274d2c490c0d3e63d8e2cbba6b284cbf9b0e924c1277deb7f7c080fb9e69f9f92f4c478f96bce89a77bcd33a5f6237fb56fbd66b89781b40bb451ade6767866407e3bfca58c5e862ee72c3f1ae1b06fe7a9373e56e4c0c180bb153c2b524bf71a59bfdc926e49e03347bba3f9f6ec98fdb00484ea523cd5d1714bed255488db01fb977f8318b02d412886553829a3ed2ccbaef60d1f9b45561d795c6361ddf293f933eab211fe32d237beb30f00bc77db614479a77535126650be58a1d59fb2e23da8aec1c6237de8bc0db8e4e3436dceea668d6731617fe552adbbb47a18c1f3e56cb4c28d7ec7a5d4a8464849fc77a3a4a9907e0f048a4190a855d181534319935951fc30da3437144bd14883637e5a40dc5fcf7d081f18a38d4687f4c00bfe39ac1295d8c388c5b180a812e90455c19afff82bbac42b13b2a483caf0a5636034f59907c314f992bfaf0ca7ae4b6ad537a1bbb69bf0cc0ece3cbf21e5b6c418786012caf4d5575b0941d9d6edd0110f706bf831d5448279257a285f52bd868a7454dec2ae81b0f8d182a86b38da6082d2b000b8fb03912c894c478dc5e9b65ae427bfe7d0d0d3e64dbcc33a068d301934796463a3d9396c4a403620192ba036e7678994e6aa9e3744bbde2ed9eae836e913087a42d4e0697030d81b27c04873a58c4ea3deefd842397f5f4b487ff44f7a2725e9ff74c50621307ae1fc89b7427f57059b0075f032e49513afec8087ebad71e626ffcb5651c184d4225a53d7d17eaa175cceac2f2d8710842b2656859becf2004a36085c1481534784a8c52014e35b06551d4f4ec7568633dd62065b12620c945e53dd2719baa43607711fcddea7fb317c8a812e5a3a8ae371a5b0af75019c213948df55d46418fac0768d6305d3e96563ff5fecfd47591f1f82d272f647da0d7544638c644a7f681fe49e1bdfbecf568c1682327858c867293d35d06092237da4a891508efb8ae71585fda789d9110bd3ad840d8028ee3a2d0cb229513b6c52dbd1bb7c0f8331e132b6b5ebe4ce6996212a701508efc66801be14ec13229b996e3f2446f6bb96e2c0293a12ee8365d936e73147fdc5d43f7a9e73641887f8ff7bd113db41f03c37e94e9e62c4935c33ad4a7cb3135f7968b765c722c1380b1249be4d9181db43c5fe44e8496b08a0b48dc9fdad30bcc89c90801f68c4bd73da1659a890de70ac57b431a620ef6cb308c53988143c658becba6af0790dbb07cbaf84aa9ad2e78011d832b1afe9211332fafdd1a406550d2ae4c5cb4ffd05cb141f272b739ea2ca230fc4e532a6ebe0e2d08a3ef54c135626176a4e7452807a86f17de29100b518e94cdf014d48c1a4ee7279ffed59d0d560d5e6970c18f5d142e1182ffd33fa514d8dea933c9ea6192f015c82b44d922c9d190d1738be94ce219225bc9c9e5437532eea746fd13ae1836a3e120a94b27ed1e84d59544668e8c97d10209d923dfbf459a63fa94c80108c"}) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DEST(r4, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0xc0, r7, 0x800, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x960}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x4}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x56}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x3}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffa64}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xb9000}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xe224}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000080) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f00000007c0)=@mangle={'mangle\x00', 0x2, 0x6, 0x730, 0x270, 0x190, 0x0, 0x190, 0x0, 0x660, 0x660, 0x660, 0x660, 0x660, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'bond_slave_0\x00', 'vlan1\x00', {}, {}, 0x21}, 0x0, 0x168, 0x190, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @empty, @mcast2, @private2, [], [0x0, 0xffffffff], [], 0x0, 0x10}}, @common=@inet=@dccp={{0x30}, {[0x4e24, 0x4e24], [0x4e23, 0x4e24], 0xd, 0x20, 0x4, 0x7}}]}, @HL={0x28}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0x2}, [], [], 'bridge0\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {0x0, 0xfd}, 0x300, 0x4}}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'bridge0\x00', 'bond_slave_0\x00', {0xff}}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@loopback, @local, [0xff, 0x0, 0xff, 0xff000000], [0xff000000, 0xff000000, 0xffffffff, 0xffffff00], 'macvlan0\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x8, 0x81, 0x1, 0x36}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@private1, 0x0, 0x37}}}, {{@uncond, 0x0, 0x208, 0x230, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, @mcast2, @mcast2, @private0, @empty, @loopback, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @remote, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0]}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x790) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r5, &(0x7f0000001500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x50, r8, 0x400, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x2fb}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$inet6(r0, &(0x7f0000005100)={&(0x7f0000003c00)={0xa, 0x4e21, 0x2, @remote, 0x5}, 0x1c, 0x0, 0x0, &(0x7f00000050c0)=ANY=[@ANYBLOB="288000000000000029000000390000000c02020600000000fe8000000000000000000000000000aa"], 0x28}, 0x0) 11.071841236s ago: executing program 0 (id=2306): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xb, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="620ac4ff000000007110bd000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x90) 10.919199053s ago: executing program 0 (id=2311): setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e01, 0x5, @loopback, 0xa}}, 0x0, 0x0, 0x3d, 0x0, "bb02a3c364ca41d6357e544524474004000b42a21d7214bf92494925208a0e2f964e0000c534a6324d6193fcf19b2df3ee818afaa4ff1f56c54dc46d8b6d2ccd008aa0cc1dc2767bbe00"}, 0xd8) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="3400000034fdbededc927f672c6f6f23e241e1602aea16db223eeec6bc42e75e5fc1f0b2f1308ce4398c96d4fd77b882c09ae76333b197db4b5819c299829adda4cf77c8e4d09e97d75964548128e3fac38c7c3db830f2dca8a944a6e77d80dcb4fe51e0adaafec40ca682714c66918f1913791882933840fcff174662b2fdf51179062a831b9000710b1112bf23e4c6b913a3d39428dc1322330b23cb22c0874c0b966a691400"/182, @ANYRES16=r1, @ANYBLOB="037c2abd7000ffdbdf25230000000a0001007770616e3400000005002700f00000000a0001007770616e30000000"], 0x34}}, 0x8000) r2 = socket$kcm(0x23, 0x5, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x401, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x4}, 0x50) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'macsec0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@bloom_filter={0x1e, 0x4, 0x0, 0xd, 0x2e2ca, r3, 0x1, '\x00', r6, 0xffffffffffffffff, 0x1, 0x3, 0x2, 0xb}, 0x50) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) listen(r2, 0x800) r8 = socket$inet6(0xa, 0x1, 0x84) setsockopt$inet6_int(r8, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000900)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f400002000000000000080000000000000000010000000000000044000500ac1414aa000004000000000000000000000000003c00000002000000ac1414aa0000000000000000000000000600000004"], 0xfc}}, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) clock_gettime(0x6, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000180)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x1c, 0x2c, 0x0, @remote, @local, {[], {{0x600, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, {[@fastopen={0x22, 0x7, "dadc73cf1d"}]}}}}}}}}, 0x0) 10.511779025s ago: executing program 0 (id=2320): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x14, 0x26, 0x301, 0x70bd24, 0x25dfdbfd, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4004004}, 0x4000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xe}}, 0x57) sendto$inet(r3, &(0x7f00000002c0)="abc7153306", 0xffffff59, 0x4000805, 0x0, 0x0) recvmmsg(r3, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)=""/137, 0x89}], 0x1}}], 0x1, 0x22, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r3, 0x6, 0x15, &(0x7f0000000000)=0x3, 0x4) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010027bd7000000000000c00"], 0x50}}, 0x0) 9.663970961s ago: executing program 9 (id=2336): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000040000000800000002"], 0x50) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$nci(r2, &(0x7f00000002c0)=@NCI_OP_CORE_CONN_CLOSE_RSP={0x0, 0x1, 0x2, 0x5, 0x8}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r1}, &(0x7f0000000080), &(0x7f0000000240)=r3}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x800, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) 9.456489693s ago: executing program 9 (id=2339): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a14000000050a010100000000000000000700000120000000020a01010000000000000000000000020900010073797a310000000014000000160a01080000000000000000a0000007140000000b0a050000000000000000000000000814000000080a0500000000000000000003000001140000001100010000000000000000000a00000ad343b9d3d2e67cc015c8fe65bd2f6386a632e85a1f0e3a204404399252ef28802fed861ca6b37ccf73b222e8e1916a67a61d62f879dde539dc23c87f4162f7d7ca43ebd5274fe90c020cb3e7d9757d5855760deb559c8b"], 0x98}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000c00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x20, 0xc, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWOBJ={0x24, 0x12, 0xa, 0xd49a439dcb04cd9b, 0x0, 0x0, {0x2, 0x0, 0x1}, @NFT_OBJECT_COUNTER=@NFTA_OBJ_DATA={0x10, 0x4, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x3}]}}, @NFT_MSG_DELRULE={0x478, 0x8, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_RULE_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x420, 0x4, 0x0, 0x1, [{0x238, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x228, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_INFO={0x14, 0x3, "a86063961c7007bfc77395ca05c5800e"}, @NFTA_MATCH_NAME={0xb, 0x1, 'string\x00'}, @NFTA_MATCH_INFO={0xfa, 0x3, "09b66cda85461fd1cec810a66f4313364fc52d4149c831d402add4e0987497fb55b692309b8004f97ed45890e0f8e81cb34c775a0c02b622abda7607d48f3a807eae5f034703e3526866bf46b9f1f9d9d8a163d08c2afe7e530141b4d1d9775cfc5bfc9f0818d62fb45a12de169e2c0fc8dfe6049df1f2e55f9f622b785703b9e46f790739d0e4a542e4f5382c8fdffcc8f2a2826b798cbd0bfc1e91f4aef3d6d90435f3dcd696a32b99315e1ded7d082db7e89502a21e31ed608b1a36b302e411ac047c45d362fc4d66eef32be3742136c81252f77dfc165fe0c39e6e882f860b0e8ab852de05f9ba1333edd3faf4f5ff6f05723f8f"}, @NFTA_MATCH_INFO={0xa, 0x3, "0d9a86cbbaf3"}, @NFTA_MATCH_INFO={0xdf, 0x3, "32d107f8cb5a6f1056071b290ae8cdc503b7222fb4aa64583a88587f31714960c188c97b9315440aad789e73c105e8ab16e1ccd26dc632c5407bcbb9bd03d9816697b09d56be9b3c8d32953878c55b39c8755115e344c7df0a28d7002b474d57be65f4ff94825721031a24cdcb23321c789bfafe2b69ae46218356c59cab7125454ae8b1a0af7099f37713378337c17caf5859efc971198e5bcf2049a93567a853138a8e2d7e1031d11c56610c77638fbd300233821cb177d775ef670d7a21fae62618090731bd8eeb5613c3f1fa39664a3d3687f098e825fd0f06"}, @NFTA_MATCH_NAME={0xa, 0x1, 'realm\x00'}, @NFTA_MATCH_NAME={0x8, 0x1, 'mac\x00'}]}}}, {0xf8, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0xe4, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0xe0, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xdb, 0x1, "2259a1bfd3e78f14ba99ae3963bd009269ef9c71dca4d63d29219a607405629d294f276ad1b2d9353252580dd15a262bd34bb2ce0075f767387ecdfe12fa52edadaf1c22697fc787e88c99e15bfcca06fcd9c3c563c40c9f4e421e4fb4a5f3f90d1b7e98962a01d91cc158f77a16a5376a20c85c1b4f0493458d742b7eadd8954ac04ecf1cb1f0d12bdbf71386619299de62c852ce1d00bb51bc40da30ee47527a5a3a67892ae36e9f12e1c34af22fbf9fad73a8b3baa994c75b67a4db0d8ccdbc5e79e2a617eacf0e18d2ae2b7957be7a8d5800608099"}]}]}}}, {0x5c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x50, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0x4c, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1b, 0x1, "9f9172887b8f12881c247963d14729fab73bc150f1e688"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}]}]}]}}}, {0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x12}]}}}, {0x1c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x4}]}}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}, {0x20, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x5}]}}}, {0x10, 0x1, 0x0, 0x1, @match={{0xa}, @void}}, {0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_RULE_ID={0x8}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELRULE={0x204, 0x8, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_RULE_EXPRESSIONS={0x78, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}, {0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}, {0x44, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x9}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x39}]}}}, {0x10, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}]}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}, @NFTA_RULE_EXPRESSIONS={0x154, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}, @NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0x8}]}}}, {0x54, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_LOG_PREFIX={0x9, 0x2, 0x1, 0x0, ']./}\x00'}, @NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x1}, @NFTA_LOG_FLAGS={0x8, 0x6, 0x1, 0x0, 0x23}, @NFTA_LOG_QTHRESHOLD={0x6, 0x4, 0x1, 0x0, 0xffcb}, @NFTA_LOG_SNAPLEN={0x8, 0x3, 0x1, 0x0, 0x9538}, @NFTA_LOG_QTHRESHOLD={0x6, 0x4, 0x1, 0x0, 0x1}]}}}, {0x50, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_NAT_TYPE={0x8}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NAT_REG_ADDR_MAX={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_NAT_REG_ADDR_MAX={0x8, 0x4, 0x1, 0x0, 0x10}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x2}]}}}, {0x20, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xd}]}}}, {0x10, 0x1, 0x0, 0x1, @target={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}, {0x1c, 0x1, 0x0, 0x1, @range={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x16}]}}}, {0xc, 0x1, 0x0, 0x1, @dup={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}, {0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x728}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d43afffe800000000000000000000000000010ff02000000000000000000000000000189"], 0x340a) 9.23401955s ago: executing program 9 (id=2344): mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x42072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x2010, 0xffffffffffffffff, 0x2000) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001180)=@delchain={0x32a4, 0x65, 0x4, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xe, 0x10}, {0x0, 0x4}, {0xfff3, 0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x1ab4, 0x2, [@TCA_BASIC_ACT={0x15c8, 0x3, [@m_ife={0x1078, 0x1f, 0x0, 0x0, {{0x8}, {0x50, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0x1b4f}, @TCA_IFE_TYPE={0x6, 0x5, 0x25}, @TCA_IFE_METALST={0x24, 0x6, [@IFE_META_PRIO={0x8}, @IFE_META_PRIO={0x8, 0x3, @val=0x1dac}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x3}]}, @TCA_IFE_SMAC={0xa}, @TCA_IFE_SMAC={0xa, 0x4, @broadcast}]}, {0x1004, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_bpf={0xa0, 0x1f, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x8, 0x1, 0x3, 0x5, 0x7}}]}, {0x60, 0x6, "bd77c5041632b8bedacf15fdb8e37894e0ba8b92f20262463298ebfc2400f6b83ce116f3f300b9dd201b7d1086a264f9d7e57061b96cf2d3b514692cc698aa34f14521927011b167ca8c75d3037b2b78c2c6c2771b37dedcabc89268"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_simple={0xcc, 0x19, 0x0, 0x0, {{0xb}, {0x94, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x8, 0x8, 0x10000000, 0x3, 0x6}}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x2, 0x3, 0x8, 0xfff, 0x81}}, @TCA_DEF_PARMS={0x18, 0x2, {0x854a, 0x0, 0x1, 0x50, 0x7f}}, @TCA_DEF_DATA={0x7, 0x3, '(:\x00'}, @TCA_DEF_DATA={0x6, 0x3, '\\\x00'}, @TCA_DEF_DATA={0xb, 0x3, 'vxcan0\x00'}, @TCA_DEF_DATA={0xb, 0x3, 'vxcan0\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0xce, 0x15f2, 0x1, 0x0, 0x1}}]}, {0xe, 0x6, "aa44a6b8a9ac7e505419"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_nat={0x144, 0x7, 0x0, 0x0, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x6, 0x4, 0x76, 0x3}, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xad, 0x5, 0x5, 0x3, 0x6}, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0xffffffffffffffff, 0x7, 0x8001}, @multicast1, @multicast2, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x5, 0x5, 0x2, 0x5d}, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x57467acd0fd93dce, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x7, 0x1, 0x3, 0x3}, @broadcast, @local, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0x9e3, 0x10000000, 0xd0, 0xfffffffa}, @remote, @private=0xa010101, 0xff000000}}]}, {0x2b, 0x6, "a79e297896b6d21bec774edf4fd1629833fd5911f65ae75ffb11ace0c502d83bf1935065b4d8de"}, {0xc}, {0xc, 0x8, {0x3}}}}, @m_simple={0xc0, 0x16, 0x0, 0x0, {{0xb}, {0x18, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x7, 0x3, '/*\x00'}, @TCA_DEF_DATA={0xb, 0x3, 'geneve\x00'}]}, {0x80, 0x6, "da097384e19827fa165a7536266392f1fb79b9eb422832abbbefbc87c1551ec36b9af18705bf4965942028d8364b676f5c69d2f61609bcb4cd81a635924bf860a972bb66089bb61ca2c911a0c4876383e99e1c580dd8db15c7c05fec2af22c8093087a237c9ef5bdb648607075b4759fa8d11ec28a46c7130324f7a5"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_mpls={0xcc, 0x0, 0x0, 0x0, {{0x9}, {0x14, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5, 0x6, 0x4}, @TCA_MPLS_TTL={0x5, 0x7, 0x82}]}, {0x8e, 0x6, "7d155e26c4f7c32415ec25c8ee8f750395e1ec554f48bccb2627c422bd4e9bda46b11d7f2e85139f756cd6ed6cc1c05350e9fa9bcff19d76faade3625dfbd98f21da6621dcd02c815c63c939ec9633a7b6d465f91a96054f6428cfc93912e73be00d299898527b1f8b39a8074fc917d111299028a70501e2b61949efb5917212feb9ae03d1fb776d2239"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_vlan={0x110, 0xa, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}]}, {0xdc, 0x6, "9265cd46889d7075229d4b7720899616509827716f72f221f27f325133f8218c81a44121d339d16a5d14a91b5327bfa4fefa5c55cf036271994ef47912b9b90b3fde219a8fd1708bc24d73266c0ea4c8193c30eef572804cbae437ee6f734f41f5d5c661141ad1e472c5513db87421b7c7befffcceffe8abd273c5e8e3c6a8204e6296da60d2cad8688efd481736d9eedc887776bf65eeb24fe08705d5d1a24588791fbe38741149bc83a05cf98facd7efe36dc83e7d8d54a7fa66ba4683b31c7d4f50507386bd95be289fb11685a178027935880c447f59"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xffe0, 0x9}}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x2, 0x6}}, @TCA_BASIC_EMATCHES={0x14, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xa41}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xe}}]}, @TCA_BASIC_POLICE={0x41c, 0x4, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1fffe00000000000}, @TCA_POLICE_RATE={0x404, 0x2, [0x7ff, 0x4, 0x6, 0x10, 0xfffffffe, 0xfff, 0x80000001, 0x2, 0xc361, 0x0, 0x8, 0x80000000, 0x200, 0x0, 0xffffffff, 0x1, 0x19, 0xfff, 0xffff, 0x9, 0x1, 0x8, 0x1, 0xfb, 0x4, 0xfffffffa, 0x3, 0x6, 0x6e, 0x4, 0x10000, 0x2, 0x3, 0xfffffffb, 0x3, 0x8149, 0x3, 0x9, 0x2, 0x8, 0x1a, 0x6, 0x9, 0x890, 0x3ff, 0x0, 0xe87, 0x5, 0x1000, 0x81, 0xfffffff3, 0x1ff, 0x1, 0x9, 0x7ff, 0x3, 0xfffffffb, 0x9, 0x10001, 0x0, 0x0, 0x8, 0xdf88, 0x8, 0x1, 0x4, 0xa39, 0x800, 0x4e8, 0x7, 0xfff, 0x1, 0x4, 0x4, 0x7, 0x2, 0x80000000, 0x0, 0x2800, 0x8001, 0x8617, 0x1ff, 0x8, 0x952f, 0x2, 0x673, 0x1ff, 0x4, 0x3, 0x3, 0x8, 0xa, 0x1, 0x8, 0x7, 0x5, 0x7, 0x22, 0xe, 0x4dba, 0x0, 0x4, 0x7ff, 0x1000, 0xd2, 0xf0, 0x0, 0x7, 0xffffced8, 0x2, 0x7f, 0x3, 0x3, 0x7fffffff, 0x80000000, 0x5, 0x8, 0x8, 0x4, 0x9, 0x4, 0x2, 0x5, 0x100, 0xfffffff9, 0x1, 0x38, 0xd, 0x4, 0x9, 0x1, 0x6, 0x5, 0x9, 0x7, 0x3, 0x2, 0x5, 0x58, 0x3, 0x6, 0x7, 0x5, 0x7, 0x7, 0x2, 0x4, 0x8000, 0x4d, 0x400000, 0x8, 0x4, 0x6, 0x4, 0x5, 0xe, 0x2, 0x9, 0x80, 0x6, 0x7, 0x9, 0x0, 0x2, 0x5, 0x1, 0xae, 0x0, 0xe79, 0x0, 0x7ff, 0x0, 0x9, 0x89, 0x0, 0x3, 0x4, 0x0, 0xd, 0xffff, 0x4, 0x1f3, 0x4, 0x0, 0x7fffffff, 0x200, 0x3, 0x80000000, 0x800, 0x7fffffff, 0x4, 0xb, 0x5, 0x8, 0x1, 0x7, 0x7, 0x8, 0x6, 0x1, 0x3, 0x7f, 0x26, 0x3, 0x9, 0x4000000, 0x7, 0x4, 0x7fff, 0x4, 0x40000000, 0xcbde, 0xa, 0x6, 0x66, 0x2, 0x6, 0x0, 0xfffffff8, 0x3, 0xb2, 0x4, 0x4, 0x3ff, 0x7, 0xfffffffc, 0x0, 0x7f, 0x6, 0x8a6, 0x6, 0x81, 0x7, 0x0, 0x2, 0xff, 0xea, 0x0, 0x7, 0x4, 0xb6, 0xabf, 0x4, 0x9, 0x5, 0x8, 0x6000, 0x10000, 0xcd, 0x4, 0xfffffff7, 0x5, 0x4e, 0x2, 0x2e]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x2}]}, @TCA_BASIC_ACT={0xa8, 0x3, [@m_skbmod={0xa4, 0x4, 0x0, 0x0, {{0xb}, {0x10, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @broadcast}]}, {0x69, 0x6, "d06f0aa7c15546881024e88938c5f8682d5ce829aa70e7046472153217df8f398237f6a1ed9d99070494e47a5b33992ccf1c4ccb68429d43e2032df4863cbd02c5bd0692941fce445149eb692443687efdf0b298b2e42bf3e2dd194e6b5c805bd6687e4ef3"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}, @filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x5, 0xfff3}}]}}, @TCA_RATE={0x6, 0x5, {0x4, 0x3}}, @filter_kind_options=@f_cgroup={{0xb}, {0x132c, 0x2, [@TCA_CGROUP_ACT={0x250, 0x1, [@m_xt={0x180, 0x3, 0x0, 0x0, {{0x7}, {0x100, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xc7, 0x6, {0x9, 'security\x00', 0x50, 0x200, "4ad9c42c724ce84ddde7f2ab861ecc66f21f8bb0046bbf2683167c7ae31c672057de70f96d4dec77ab3371ea15224c92bcee72ebfa2cc1876be74d1e4056ca3efa012c7b08b71da3dc7d1364ceef77fdc76902ff18b18325e0baa7d9c6fe4675daecc83adf3a13be24891c1352e54f82503f25a800eb26ef50a40ca625acae443742a98b4703de5757a588f2fd3ca5f702137eedf8cd0d5d4808f8ee8e"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x100}]}, {0x5b, 0x6, "aa30fa80f609c60d06ee0d8be3d4b70aa3930b06e2ef523d15ea562441813dfa4bf120937146f45f298a8cd9c86d0e09d8f5a3e012ee5ce975001f00d7919fe4ac6d0e952872cb0357b7f7ed0a36e16203afba32ccfaf6"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_skbmod={0xcc, 0x6, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x8}, @TCA_SKBMOD_DMAC={0xa}, @TCA_SKBMOD_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x1}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x8}]}, {0x6e, 0x6, "4f0ecf18d9ce6a5a4d70022e3b8bc0bfafb4687af236545b2a32c30cfb4685b38db29c6d23a95b7429b004d75d46e080fe99dc2b09fb77daa208df9479bae439470a383d20496a340eca5b7ff1a3e5d91354ebcaff3ed13ff4303149578c89d4864fbc88bfffe8bf08a1"}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}, @TCA_CGROUP_POLICE={0x86c, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x800, 0x8, 0x1, 0x80, 0x4, 0x8, 0x3, 0x0, 0x7, 0x45f, 0x3e0, 0x60, 0x0, 0x5d1, 0x7, 0x7, 0x2, 0x3, 0xbc, 0x2, 0x63d6ddd, 0x8, 0x10000, 0x4, 0x3, 0x6, 0x3a, 0x4, 0x81, 0x5, 0x6, 0xe4, 0x7, 0x8, 0xd, 0x3, 0x5, 0x47, 0xfffffffa, 0x5, 0x5f8, 0x5, 0x3, 0x7, 0x419, 0xfff, 0x10, 0x3, 0x9, 0x5, 0x8000, 0x116d951b, 0x0, 0x81, 0x6, 0xe, 0x8001, 0x5, 0x2d, 0x3, 0x800, 0x5, 0x800, 0x9, 0x0, 0x2, 0xff, 0x3ff, 0x7fff, 0xff, 0xb4, 0x3, 0x6, 0xe97, 0xce, 0x1, 0x1, 0x0, 0x200, 0x4, 0x10000, 0x2288, 0x95, 0x1, 0x3ff, 0x8, 0x2, 0x48d, 0x8000, 0x14, 0x5, 0xfff, 0x5, 0x0, 0x1, 0xf, 0x6f, 0x2, 0x80, 0x1000, 0xa5, 0x6, 0x3, 0x3, 0xa36b, 0x1, 0x1, 0x5, 0x5, 0x6, 0x5, 0x1, 0x8, 0x3, 0x40, 0xe0, 0x8, 0x7, 0x3ff, 0x0, 0x1, 0xffffffff, 0x0, 0xeb4d, 0x4, 0x14c6, 0x3, 0x2, 0x7, 0x8, 0x1ff, 0xe4a2, 0x9, 0x9, 0x7220, 0x6, 0x7017, 0x9a8d, 0x80, 0x1, 0xc, 0xfff, 0x81, 0xd, 0x1, 0x0, 0x9, 0x2f, 0x80, 0xa, 0x4, 0x9, 0xff, 0xd8, 0xffffffff, 0x6, 0x1000, 0x1, 0x6, 0x8, 0x10, 0x10, 0x7, 0xffffff38, 0xae2, 0xff, 0x33e, 0xd0, 0x12, 0x6d, 0x0, 0x9, 0x1, 0x5, 0x1328, 0x2, 0x10, 0x1, 0x80c8, 0x6, 0x5, 0x1, 0x10000, 0x0, 0x7, 0x4, 0xfff, 0x8, 0x10001, 0x9, 0x96c4, 0x8000, 0x3, 0x0, 0x4, 0x4, 0x2, 0x2, 0x6, 0x2, 0x8, 0x5, 0x5bb0, 0x0, 0x9, 0xd7b, 0x4, 0x5, 0x37, 0x80, 0x8000, 0x9, 0x6, 0x3, 0xae1d, 0x4, 0x7fff, 0xad, 0x6, 0x0, 0x1000, 0x0, 0xe05647f, 0x9, 0xfffffffd, 0x8, 0x1a0, 0xbbcb, 0x2, 0x4, 0x960a, 0x8, 0xb06, 0x0, 0x6, 0x444c, 0x7, 0x7, 0xd6e, 0x4, 0x3, 0x2, 0x2, 0x2, 0x1, 0x9, 0x8, 0x4, 0x7, 0x7fffffff, 0x5, 0x9, 0x3, 0x2, 0x0, 0x62ebce71]}, @TCA_POLICE_RATE={0x404, 0x2, [0xae4c, 0x7, 0x5, 0x7fffffff, 0x4, 0x4, 0xfffffffe, 0x6, 0x45656d1, 0xfffffff8, 0x5, 0x80000001, 0x4, 0x0, 0x2, 0x5, 0x6, 0x9, 0x9, 0x6e, 0x8000, 0x6, 0x2, 0x7, 0xff, 0x3e6, 0x7, 0x80, 0xfac4, 0xfffffffb, 0x8000, 0x7, 0x10001, 0x2, 0x3, 0x7, 0x10001, 0x1, 0x7, 0x8000, 0x2, 0x5, 0x3, 0x81, 0x80000001, 0x3, 0xfffffffb, 0xd2b, 0x6, 0x6, 0x6, 0x7fff, 0x61, 0x8, 0x8d9, 0xff000000, 0x7, 0xb, 0x2bfd, 0x6, 0x7, 0x8, 0x3, 0x38d, 0x7, 0x2, 0x9, 0x3, 0x8, 0x4, 0x6, 0x1, 0x101, 0x8, 0x5, 0x5, 0x4, 0x9, 0xfffffe00, 0x7, 0x6, 0x3, 0xefb, 0x3, 0x9, 0x1, 0x7ff, 0xe5b2, 0x7, 0xe, 0x5, 0x80000001, 0x3, 0x8, 0x7, 0x580b, 0x400, 0x7d, 0xff, 0xb, 0x2, 0x9e7, 0x17, 0x9, 0x8, 0x9, 0x0, 0x5, 0xb324, 0x43, 0x70db, 0x4, 0x7, 0x7fff, 0x4, 0x1, 0x41, 0x4, 0x6, 0x9, 0x9, 0x9, 0x8d, 0x3, 0x7, 0x3, 0x7, 0x400, 0x0, 0x2, 0x7, 0x6, 0x80000000, 0xe, 0x5, 0x7, 0x101, 0x10, 0x8, 0xfffffff2, 0x4dcc, 0xffff, 0x3ac6, 0x9, 0x80000001, 0x8, 0x8, 0x80000000, 0x4, 0x2, 0xe, 0x0, 0x400, 0x3, 0x5, 0xe, 0xb, 0x80, 0x7ff, 0x27, 0x9, 0x1, 0x7, 0x5, 0xff, 0x8, 0x5, 0x9, 0x4, 0x5d, 0x5, 0xc00, 0x2, 0x9, 0x1800000, 0x4, 0x10001, 0x2, 0xba, 0x0, 0xa31b339, 0x18, 0x9, 0x6, 0x7, 0xb, 0x2, 0x58, 0x55ce, 0x0, 0x7fff, 0x7f, 0x6f, 0x3ff, 0x3, 0x7, 0x2, 0xffffff53, 0xa, 0x5, 0x3, 0x3, 0x6, 0x8, 0x1, 0x80000000, 0x5, 0x7, 0x9, 0x802, 0xde9, 0xf, 0xffff, 0x3, 0x1, 0x1ff, 0x3, 0x1000, 0x7, 0x6, 0x5, 0x2, 0x3ff, 0x0, 0x1ff, 0x0, 0x8, 0x0, 0x200, 0xc4a4646, 0x11, 0x6, 0x3, 0x695b, 0x80000000, 0x1000, 0x7f, 0x5eb73451, 0xffffffff, 0x9, 0x8, 0x800, 0xffffffff, 0xfffffff8, 0x2, 0x0, 0x5, 0x6e9, 0x5, 0xc0, 0xffff, 0x800, 0x81, 0x9, 0x240d, 0x5]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x5}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x1}, @TCA_POLICE_RATE64={0xc, 0x8, 0x400000}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x20000000, 0x9, 0xc241, 0xb, {0x8, 0x2, 0x0, 0x65c, 0x0, 0x9}, {0x10, 0x3, 0x3, 0x200, 0x7f, 0x2}, 0xd, 0xfffffff7, 0xfff}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}]}, @TCA_CGROUP_POLICE={0x868, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xffffffff, 0x6, 0x5, 0x3, 0x3, 0x4, 0x4a0e, 0x27, 0x80, 0x9, 0x9, 0x0, 0x345, 0xc45, 0x80000, 0x7, 0x1, 0x1, 0x1, 0x6, 0x3, 0x1ff, 0x62, 0x2, 0x1, 0xd, 0x6, 0xa2, 0x9, 0x9, 0x5d3c328a, 0x5, 0xd34f, 0x2, 0xffff, 0x100000, 0x0, 0x1000, 0xfffffffc, 0xb, 0x5, 0xc79b, 0x8, 0x10000, 0x4, 0x4, 0xcd, 0x1, 0x80, 0x80000000, 0xfffffff9, 0xe8, 0xffff, 0xfffffff7, 0x5, 0xa637, 0xff, 0xc63, 0x80000000, 0xc8, 0x6, 0x2, 0x1, 0x7, 0x9, 0x1000, 0x4, 0x9, 0x9, 0x6d, 0x5, 0x6, 0x8, 0x9, 0x0, 0x1, 0xdce, 0xc37, 0x5, 0x101, 0x1ff, 0x6, 0x800, 0xc, 0x7, 0x6, 0x1, 0x7, 0xfffffff9, 0x7f, 0x6, 0x3, 0x1, 0x4, 0x8000, 0xc0, 0x80000001, 0x9, 0x8, 0x2, 0x4, 0x6, 0x2, 0x6, 0x80000000, 0x6, 0x7, 0x10, 0x4, 0x3, 0x7, 0x1, 0x4aa7, 0x2, 0x2, 0xfffffff9, 0x0, 0x4, 0x20000000, 0x0, 0x8, 0x7, 0x80, 0xb, 0x1ffe, 0x8, 0x9, 0x9, 0xfff, 0x0, 0x5, 0x6, 0x10000000, 0x5, 0x6, 0xffff1c21, 0x0, 0x400, 0x80000001, 0x101, 0x5, 0x100, 0x7, 0x8d, 0x8, 0xd3c00, 0x8000, 0xf, 0x6, 0x4168, 0x3, 0x8, 0x1, 0x10000, 0x7, 0x9d, 0x3, 0x5, 0x400, 0x9, 0xae8, 0xa, 0x9, 0x9, 0x4, 0x5, 0x9, 0x6, 0x10001, 0x1, 0x50, 0x3, 0xffff, 0x7, 0x9c, 0x3, 0x1, 0xf, 0x3ff, 0x8, 0x3, 0x8, 0x739a, 0x0, 0x10000, 0xf, 0x0, 0x101, 0x81, 0x9, 0x1, 0x7, 0x6, 0x4, 0x8, 0xeff, 0x8, 0x4, 0x5, 0x101, 0x8, 0x800, 0x8, 0x6, 0x0, 0x1, 0x0, 0x7, 0x4, 0xdbb1, 0x4, 0x1fa, 0x7, 0x6c, 0xffff, 0xe, 0x8, 0x1ff, 0x6, 0x5d7, 0x401, 0xf, 0xe66d, 0x4, 0x6, 0xe, 0x21, 0x6, 0x800, 0x3, 0x651, 0x817, 0x10000, 0x9, 0x400, 0xc1, 0x8, 0xa33a, 0x5, 0x1ff, 0x5, 0x6, 0x7, 0xfff, 0x2d6a, 0xffff, 0x7fff, 0x1, 0xffffa3e6, 0x0, 0x0, 0xffffff01, 0x0, 0x8, 0xffffffff, 0x7f]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1700, 0x5, 0xe8, 0x0, 0x0, {0x5, 0x1, 0x1, 0xfffa, 0x7f}, {0x4, 0x0, 0x6, 0x80, 0x7, 0x3}, 0x29f, 0x8, 0xf6a}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7ff}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x4, 0x4, 0x5, 0x1, 0x68028a5e, 0x1, 0x4, 0x800, 0x6523, 0xfff, 0x6, 0x7, 0x2, 0x1, 0x1, 0x5, 0x1, 0x8, 0x7, 0x10, 0x9, 0xfffffff9, 0x7, 0x9, 0x8, 0x8, 0x80000000, 0x1000, 0x28, 0x5, 0x0, 0x32b9, 0x8000, 0x3c1, 0x1, 0x0, 0xffff8001, 0x2, 0xc45, 0x4, 0x4a, 0x913, 0x4, 0x1, 0x5e5, 0x5, 0x4f2, 0x7, 0x5, 0xa, 0x6, 0x7, 0xee42, 0x400, 0x4, 0x6, 0xfffffff1, 0x8, 0x80000000, 0x6, 0x3, 0x6, 0xc9, 0xf, 0x3, 0x800, 0x4, 0x4, 0x3, 0x80000000, 0x400, 0x4, 0x1, 0x7, 0x4, 0x0, 0x1, 0x3, 0x4, 0x62, 0x4, 0x3, 0x8, 0xde89, 0x7, 0xe, 0x2, 0xffff, 0x10000, 0x4f4b, 0x8, 0x3, 0xffff, 0x7, 0x0, 0x5, 0xd4e, 0x0, 0x800, 0xfffffff9, 0x67e3, 0x5, 0x5, 0x1, 0xfffffff9, 0x800, 0x1, 0x9b06, 0x7fffffff, 0xa, 0xa, 0x0, 0x400, 0x8, 0x6, 0x8, 0x4, 0xa, 0x9, 0x95a5, 0x1, 0xcca1, 0x953, 0x2, 0xffff, 0x2, 0x10001, 0x8, 0x3, 0x200, 0x8, 0x1e, 0xffffff00, 0xbb, 0x3ff, 0x101, 0x1, 0x1bf6bd7, 0x4, 0x3, 0x1, 0x6, 0x3, 0x3e9, 0x9, 0x6, 0x2b726706, 0x7, 0x10000, 0xfffffff8, 0x7, 0x3ecc, 0x1b5b, 0xffffffff, 0x3, 0x6, 0x0, 0x9, 0x6, 0x0, 0x6, 0x9, 0x20, 0x5, 0x2, 0x4, 0x3, 0x7fff, 0xec4a, 0x6, 0xfffffff8, 0xfffffffd, 0x9, 0x8, 0x80, 0x1, 0x2, 0x4, 0x4, 0x5, 0x400, 0x80, 0x6, 0xffffffff, 0x7, 0x7, 0xfffffff7, 0x60, 0x10000, 0x5, 0x3, 0xff, 0x800, 0x76, 0x2, 0xe2, 0xbbca, 0xa, 0x34, 0x8, 0x7fffffff, 0x3, 0x4b, 0x80000001, 0x0, 0x1, 0x4, 0x3, 0x10001, 0x0, 0x9, 0x1ff, 0x3, 0xfffffffb, 0xfffffffd, 0x1a, 0x5, 0x1, 0x4, 0x80, 0xffff17f1, 0x4, 0x3, 0x800, 0x6, 0x3, 0x401, 0x4, 0xd, 0x0, 0x10000, 0x8, 0x4, 0x3ff, 0xbde2, 0x7, 0x7ff, 0xfffffc00, 0x0, 0x1, 0x4, 0x1, 0x6, 0x8, 0x6, 0x8, 0x8, 0x7, 0x23, 0x6, 0x0, 0x3, 0x5, 0x16be296b, 0x1000]}, @TCA_POLICE_RATE64={0xc}, @TCA_POLICE_RESULT={0x8, 0x5, 0x5}]}, @TCA_CGROUP_ACT={0x4}]}}, @filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_MPLS_LABEL={0x8, 0x46, 0x8}, @TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}, @TCA_RATE={0x6, 0x5, {0x8, 0x9}}, @TCA_CHAIN={0x8, 0xb, 0x7fff}, @filter_kind_options=@f_basic={{0xa}, {0x428, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xf, 0xd}}, @TCA_BASIC_POLICE={0x414, 0x4, [@TCA_POLICE_RATE64={0xc, 0x8, 0x9}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0xffff, 0xfffffff3, 0x4, 0x7, 0x3, 0x1, 0x7fff, 0x5, 0x0, 0x7fff, 0x658f, 0x8, 0x5, 0xa, 0xffff76c8, 0xd3, 0x7, 0x4, 0xffffffff, 0xfffffffd, 0x8, 0x9, 0x1, 0x0, 0x7fffffff, 0xaa, 0x7, 0xd, 0x7, 0x5, 0x8, 0x7, 0x4b1, 0x81, 0x100, 0x40, 0x1, 0x8001, 0xa40, 0xc, 0xff, 0x49aa, 0x2, 0x400, 0x5, 0x122, 0x6, 0x6, 0x4, 0x9, 0x2, 0x6, 0xed, 0x5, 0x3, 0x101, 0xaf2c, 0x9, 0x9, 0x1c2, 0x4, 0x3, 0x4, 0x9, 0x9, 0x2, 0x5, 0x9, 0x80, 0x3, 0x5, 0x1ff, 0x3, 0xe, 0xf980, 0x0, 0x9, 0x3, 0x7fff, 0x80000000, 0x80000001, 0x4, 0x4000, 0x1, 0x3, 0x1, 0x9, 0xc, 0x5, 0x8, 0x5, 0x6d1, 0x3, 0x9, 0x10001, 0x4, 0x5, 0x6, 0xe, 0x8, 0x9, 0xac393def, 0x6, 0x2, 0xfffffc00, 0x7a7, 0x2, 0x3d1, 0x400, 0x2, 0x8a, 0x7, 0x62, 0x1ff, 0x5, 0xb, 0x4, 0xfffffffc, 0x5dd, 0x8, 0x4, 0xffffffff, 0x7, 0x0, 0x3ff, 0x8, 0x1, 0x7, 0x580, 0x0, 0x9, 0xffffffff, 0x0, 0x8, 0x0, 0x4, 0x9, 0xe, 0x3, 0x6, 0x6, 0x0, 0xff, 0xa55d, 0x3173b559, 0x7f, 0x24d, 0x10001, 0xd, 0x9, 0x7, 0xa0, 0x4, 0x3, 0x400, 0x55, 0xffffff89, 0xfffffffa, 0x4, 0xfffffffe, 0x0, 0xa, 0x4, 0x8, 0x8, 0x0, 0x4b0, 0xc0ba, 0xd16c, 0x10000, 0xfc, 0x3, 0x3c158d84, 0x69b, 0x8001, 0x0, 0x6, 0x9, 0x7ff, 0x2, 0x80, 0x3, 0x7, 0x6, 0x7, 0x5, 0xbef, 0x6b, 0x9, 0xffff, 0x8, 0xffff, 0x6, 0x6, 0x1, 0x9, 0x0, 0x1, 0x0, 0x1e407f15, 0x80, 0x4, 0xffff, 0x4, 0x10000, 0x6, 0x3, 0xfffff8eb, 0xd, 0x5, 0x8, 0x0, 0xd4f, 0x7, 0x3, 0xec700000, 0x7ff, 0x1000, 0x6, 0x5, 0x2, 0x9, 0x9, 0x10001, 0x6, 0xfff, 0xfffffff9, 0x3, 0x490ba20, 0x8000, 0x10, 0xffffffff, 0x8000, 0x8, 0x6, 0xff, 0xd3, 0x3, 0xffff, 0x4, 0x8, 0x7, 0x6, 0x6, 0x0, 0x5, 0x9, 0x8381, 0x2, 0x8, 0x8, 0x10000, 0x4, 0x1, 0x401]}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xb, 0x3}}]}}]}, 0x32a4}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCINQ(r4, 0x541b, &(0x7f0000001140)) r5 = socket$can_bcm(0x1d, 0x2, 0x2) r6 = socket$rxrpc(0x21, 0x2, 0x2) r7 = socket(0x2000000000000021, 0x2, 0x10000000000002) sendmmsg(r7, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f80)=ANY=[], 0x18}}], 0x1, 0x0) bind$rxrpc(r6, &(0x7f0000000100)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x2, @local}}, 0x24) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="5009e6ffffffffffffff0089d8841f000000000077d5e8dea5ee7fe39475afebb1845b969d0b7ac028330c0a8210402820b590bb66a633f34b3b731d3e3315c72a68f7bb524a97a623d38780664b15741a17934b302e57cefd8341e87c759875c8a0e99e98c57e8a5421c23656c5e4c781da9bb41bfa56dda818b832ba289e22243db1ec6b9166ef4c5cde56c23e4ae5016d1d4d106bbec9143a6c9ca305186a120a16efa0442b59d61e9cbdc50ba456ce9624029165e67c6b5b3ef55e9234aac3ef0bdbba643a4f9e", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010067656e6576650000040002800a0001000000000000000000"], 0x40}}, 0x0) connect$can_bcm(r5, &(0x7f0000000140)={0x1d, r8}, 0x10) sendmsg$can_bcm(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) r10 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r10, &(0x7f0000000380)={0x1d, r11, 0x1, {0x0, 0x0, 0x1}, 0xfd}, 0x18) r12 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r12, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) r14 = socket$netlink(0x10, 0x3, 0x4) writev(r14, &(0x7f0000000300)=[{&(0x7f0000000180)="580000001400192340834b80040d8c560a11820fffff5bab4e210000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000c0c100000000000224e0000", 0x58}], 0x1) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r16 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) splice(r16, &(0x7f0000000040)=0xfffffffffffffffc, r15, 0x0, 0x800000000ff, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x1, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r13, {0x8}, {0x7, 0xf}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x44060}, 0x98) 8.885094959s ago: executing program 9 (id=2347): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) 8.839077022s ago: executing program 9 (id=2348): bind$alg(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newqdisc={0x2c, 0x24, 0xd0f, 0xfffffffd, 0xffffffff, {0x60, 0x0, 0x0, 0x0, {0xffe0, 0x2}, {0xfff2, 0x10}, {0xfff3, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x4c}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000844}, 0x2000c8d1) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000ff070000000000000300000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r0) socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0500000003f01f00660000007f00000001000000", @ANYRES32, @ANYRES32], 0x48) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) 8.788133461s ago: executing program 9 (id=2349): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000300), r0) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x28, r1, 0x223, 0x0, 0x0, {0x3}, [@SEG6_ATTR_DST={0x14, 0x1, @loopback={0xe0ffff00000000}}]}, 0x28}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xe, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0x81}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (async, rerun: 32) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (rerun: 32) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) (async, rerun: 32) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000071116200000000008510000002000000a50000000500000095000000000000009500a5050000000078432dd442f68ba7fe2d282dc5bd6363a98aecd4b0deda447fc21574f82c7ff3eac5b814f85708ac7765aba5cb99845d8d1de7b9aefaa8b749ef36251fbe292c7e339c9d436dbdd3bcfa4c0b42413a1b5693c9ab00b0973b57cbf344499e932f11ea0126896b99df066fc1"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) (rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a00)={r4, 0x0, 0x1d, 0xdc, &(0x7f0000000040)="e9d40b357a64e3855462089018e8f20d343e70ad920f8d7c44aaaad510", &(0x7f0000000740)=""/220, 0x0, 0x0, 0xf8, 0x74, &(0x7f0000000880)="90faa6f7be05959dfebc662a0acf23e42433c462e45d1bfcafa88fd1a76f8583e38c6e76c8ee1e919c2416379225c37a2bfb18c8a65850699f53c1438123332d1a268066daa00b193248238a936bed7314add60362f8294dec06a11ec530af294a1e33b2bdb7c94a9fb45a30628c27a78739387787229ca547988dd3b2aa234308fc535f1fd022e2b79c261e540cc42e49fe6d2d4df2708044c0e9190366d356dca3a196b84e9962c99478eb97041731e113cebfba6b0b29d9dba459796a1974b2ec5af4f330dd38a320ef011e6565861f8e3d56a187f5dd3e0d5f1acc3cc7f15cdfedcf64e059dd28bb4be9b6eb9b80284f50f3fc1f4e49", &(0x7f0000000980)="026010574cad02e09d7596852153f379b94b0d83879478764b87b526d8aadaf87ca73f806dcf4462c2bd1732fb528776ddecdd8a5fe2b473b7973c53683c1e28df59252bae2adb47f20620007be9929ddc6945c24441c4082440c096dc22d44c78cda875ecfc8a343579512720b7096923b1d58b", 0x1, 0x0, 0x1}, 0x50) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r6 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) (rerun: 64) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0500feffffff000000004b00000008000300", @ANYRES32=r8], 0x30}}, 0x0) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001", @ANYRES64=r2], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x38, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x60}}, 0x0) (async, rerun: 64) sendmsg$NFT_BATCH(r9, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}}, 0x0) (async, rerun: 64) ioctl$XFS_IOC_START_COMMIT(r9, 0x80585882, &(0x7f00000003c0)={0xffffffffffffffff}) recvmsg$unix(r10, &(0x7f00000039c0)={&(0x7f0000000640)=@abs, 0x6e, &(0x7f0000003800)=[{&(0x7f0000000a80)=""/249, 0xf9}, {&(0x7f0000000b80)=""/101, 0x65}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/86, 0x56}, {&(0x7f0000001c80)=""/31, 0x1f}, {&(0x7f00000025c0)=""/4096, 0x1000}, {&(0x7f00000035c0)=""/219, 0xdb}, {&(0x7f00000036c0)=""/57, 0x39}, {&(0x7f0000003700)=""/213, 0xd5}], 0x9, &(0x7f00000038c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xe0}, 0x0) r11 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x42, &(0x7f00000006c0)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@generic={0x44, 0x2}]}}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x10, 0x0, 0x0, 0xd0a, 0x2c, 0x1, 0x0, @multicast1, @loopback}}}}}}, 0x0) (async) setsockopt$IP6T_SO_SET_REPLACE(r11, 0x29, 0x40, &(0x7f0000001880)=@raw={'raw\x00', 0x3c1, 0x3, 0x12c0, 0x1100, 0x18c, 0x203, 0x1100, 0x19030000, 0x11f0, 0x2e0, 0x2e0, 0x11f0, 0x2e0, 0x7fffffe, 0x0, {[{{@ipv6={@loopback, @mcast1, [0x0, 0x0, 0xff, 0xff], [0x7fffffff, 0xff000000, 0xff000000, 0xff000000], 'bond_slave_1\x00', 'bond0\x00', {}, {}, 0x84, 0x7, 0x2, 0x55}, 0x300, 0x10d8, 0x1100, 0x0, {0x1000000}, [@common=@unspec=@cgroup1={{0x1030}, {0x1, 0x1, 0x1, 0x11, './cgroup.cpu/syz1\x00', 0xfffffffc, {0x3}}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x5, 0x1, 0x1, 'syz0\x00', {0x7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1320) (async) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004ec0)=ANY=[@ANYBLOB="28000000400007012bbd700000080000017a03000400c2800c0001800800108004000e80040002"], 0x28}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 719.984553ms ago: executing program 4 (id=2398): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x2c}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x90) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e20, @empty}}, 0x80000000, 0x6, 0x0, 0x9, 0x8a, 0x6, 0x2}, 0x0) socket$igmp(0x2, 0x3, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="10000000040000000800000002"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xd, 0x4, 0x4, 0xc, 0x0, r2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x15, 0x0, 0x40b, 0x9, 0xfffffffe}) write$bt_hci(r1, &(0x7f0000000080)=ANY=[], 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0x0, 0x51792e7248df3904}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5}, @IFLA_GENEVE_COLLECT_METADATA={0x4, 0xe}]}}}]}, 0x40}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = accept4(0xffffffffffffffff, &(0x7f0000000040)=@llc, &(0x7f00000000c0)=0x80, 0x40800) sendmsg$kcm(r4, &(0x7f0000001bc0)={&(0x7f0000000980)=@ieee802154={0x24, @short={0x2, 0x3, 0xaaa3}}, 0x80, &(0x7f0000001b40)=[{&(0x7f0000000a00)="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", 0x1000}, {&(0x7f0000001a00)="b5289d3015af7285e94c99669bdda49352dc9aac47ce34434962894e386b6145f02a9b448327609315ad9e4c74ddf7e3bf88df044cdb994f626725", 0x3b}, {&(0x7f0000001a40)="46f9c55c12cd689db02252cb2ea8d34278df4d16514f5c66945a2b43020e67fc05dceb42cae4c01ed6e9355c1e59d15df6d8b653c85583be40a10dd9667eeb92d840bf2a4a43e8e42037508fb874ed9dda8a0db0b1a9a8475c3645b5007442d92aab4de17bf39c0c914b49af8a1865847e1ab55cf058d1cfda6e5fdf07d89b3bbe2b94f05b95489760b6983ce10d00c6da5b48e3755a70231e7e2d4750852f045a951b422e7212dffb95cbeaa3ff0c1e4c98745ec1fbf21c03afbe9900ac77f46806b7059a8f11db6c91", 0xca}], 0x3, &(0x7f0000001b80)}, 0x4000000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) recvfrom(r5, 0x0, 0x0, 0x2000, 0x0, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="680000000a0a0101"], 0x68}, 0x1, 0x0, 0x0, 0x8001}, 0x20004800) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) 695.248048ms ago: executing program 8 (id=2400): socket$inet6(0xa, 0x802, 0x7) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) r0 = socket$kcm(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x14, 0x4, 0x4, 0x3, 0x804}, 0x48) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x20, 0x0, 0x9, 0x101, 0x0, 0x0, {}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'lblcr\x00', 0x1, 0x80005, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e20, 0x2, 0xcd}}, 0x44) sendmsg$sock(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@in6={0x2, 0x4e21, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000180)=ANY=[@ANYBLOB="611076000000000095"], &(0x7f0000000200)='GPL\x00'}, 0x94) 565.010082ms ago: executing program 1 (id=2402): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="00052bbd7000010000000100"], 0x28}, 0x1, 0x0, 0x0, 0x4080}, 0x20002001) r2 = socket(0x5, 0x800, 0x1) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x2004c840) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r2, 0x11, 0x1, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="080029bd7000fddbdf2508000000440003800800030003000000080003000b00000008000300165d0000080003000000000008000100001000000800030000000000080002"], 0x58}, 0x1, 0x0, 0x0, 0x4008010}, 0x10) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r5, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) sendmsg$nl_xfrm(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="500000002700010000000000000000000a000100000000000000000000000000ac1e01010000000000000000000000000000000000000800000000002b000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffea000000000000"], 0x50}, 0x1, 0x0, 0x0, 0x2000c0c0}, 0x0) 512.59082ms ago: executing program 8 (id=2403): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'syz_tun\x00', 0x0}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0x20, &(0x7f0000000500)={&(0x7f0000000380)=""/69, 0x45, 0x0, &(0x7f0000000400)=""/234, 0xea}}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000580)={r2, r3, 0x25, 0x1, @val=@tracing={r4, 0x8000000000000001}}, 0x20) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03080000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021440000000c0a09030000000000000000070000000900020073797a31000000000900010073797a300000000018000380140000800800034000000002050006405200000014000000110001"], 0xc8}}, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r6, 0x0, 0x7, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r2, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "182325", 0x8, 0x2c, 0x0, @remote, @local, {[@hopopts]}}}}}, 0x0) socket$inet(0x2, 0x1, 0xc8c8) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000280)="52073d7cc0b46ed7e9f9e78896a3f0bdd251e10b4bab0db3046bab6d822056f11758145614557817d7d81a127d6f13d98ec30eef54ca816de926958213cfc54b3a9136e02ad1d0", 0x0}, 0x20) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x9, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70700000000000085000000080000019500000000000010"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x18, &(0x7f0000000100)=@raw=[@map_val={0x18, 0x5, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x9}, @generic={0x40, 0x3, 0x7, 0x2f32, 0x63bb}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x2f}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @ldst={0x0, 0x2, 0x1, 0x2, 0x7, 0x10, 0x10}, @alu={0x4, 0x1, 0x9, 0x9, 0x6, 0xc, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5}], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0xb, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x1}, 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) 490.584675ms ago: executing program 4 (id=2404): syz_emit_ethernet(0x46, &(0x7f0000000400)={@local, @random="df00004000", @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x38, 0x0, 0x300, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x11}, {[@ssrr={0x89, 0x7, 0xa2, [@broadcast]}, @cipso={0x86, 0x6, 0x1}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 416.576647ms ago: executing program 4 (id=2405): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="50000000020603000000000000000000000000000500010007000000090002"], 0x50}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000140)={0x58, r1, 0x1, 0x80000000, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x82}}]}, 0x58}}, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000068000100000000000000000000000000000000001c0002000000000000000000020000000000b45cbe"], 0x34}}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000440)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@generic={0x88fb}}}}, 0x12) r6 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x28, 0x0, 0x0, 0x8002}, {0x6}]}, 0x10) sendmmsg$unix(r7, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000100)="9cdfa98e", 0xdf9c}], 0x1}}], 0x1, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r6, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000580)={&(0x7f0000000480)={0xf0, r2, 0x20, 0x70bd2c, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_IOC_EXPIRE(r6, 0x810c9365, &(0x7f0000000600)={{0xf92f, 0x6}, 0x100, './file0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_SET(r9, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x54, r10, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xba5}, {0x6, 0x11, 0x4}, {0x8, 0x13, 0x401}, {0x5}}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x400c040) sendmsg$DEVLINK_CMD_RATE_DEL(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0b1600000000000000f6490000000800b8"], 0x3c}}, 0x0) 415.05722ms ago: executing program 1 (id=2406): sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="010000000000fcdbdf251200000018000180140002007665746830000000000000000800000008"], 0x3c}, 0x1, 0x0, 0x0, 0x400c000}, 0x2004c0a0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x13, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000073010a000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x90) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac1414003400080004"], 0x2c}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'ip6gre0\x00', 0x0, 0x4, 0x7, 0x8, 0x6, 0x2, @loopback, @remote, 0x8000, 0x1, 0x7, 0xba7}}) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="010000000000fcdbdf251200000018000180140002007665746830000000000000000800000008"], 0x3c}, 0x1, 0x0, 0x0, 0x400c000}, 0x2004c0a0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x13, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000073010a000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x90) (async) socket$inet6(0x10, 0x3, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac1414003400080004"], 0x2c}}, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'ip6gre0\x00', 0x0, 0x4, 0x7, 0x8, 0x6, 0x2, @loopback, @remote, 0x8000, 0x1, 0x7, 0xba7}}) (async) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) (async) 360.296703ms ago: executing program 8 (id=2407): r0 = socket(0xa, 0x3, 0x3a) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000020a010200000000000000000a0000060900010073797a310000000008000240000000018c000000020a010100000000000000000000000369000600e62807258a6d38caf4cb1d7a776a7a05e57912414e63207c5e61d47bb4016b21bd5593b033b0968722f2f0f4818a1a13fbb43e79d0ae674d071c0164df9d3701cc15211300766b6ebe326ada9e49cca5c2a07460e46e35eabfb48a4cd2cd83790d7e705b010000000900010073797a31000000001c000000090a030000000000000000000a00000208000c4004"], 0xf8}, 0x1, 0x0, 0x0, 0x2000c814}, 0x4000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a3100000000140003800800014000000000"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1, 0x0, 0x0, 0x810}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4004000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[], 0xa4}}, 0x0) 319.899097ms ago: executing program 8 (id=2408): socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mreqsrc(r1, 0x0, 0x53, &(0x7f0000000300)={@dev, @local, @broadcast}, &(0x7f0000000040)=0xc) sendto$inet6(r0, &(0x7f0000000280)="02043c00ec074802010e0200c52cf7c20675e005b02f0800eb2b2ff0dac8897c6b112002faffffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0xfc13, 0x800, 0x0, 0x2f) 275.108166ms ago: executing program 1 (id=2409): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$FS_IOC_GETFSUUID(r1, 0x80111500, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="000100010000000000000000000000007f0000010000000000000000000000000000fdffffff00000000ffffac1414aa00001e00000000000002b227afbdd67e4a18cdc6499a32897c00000600000069718b85e2aa0ea80022eb63511945dc87763baa22fc23fd8bbbcc0c1a123eeaf790ef2c3991610c3ca342ab5c846f4b79fc45d85f27b328b41f958e8348c414a8", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="fe8000000000000000000000000000bb0000000033000000fe880000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000fe5d0000050019002b000000"], 0x100}}, 0x0) 175.59755ms ago: executing program 8 (id=2410): syz_emit_ethernet(0x76, &(0x7f0000000680)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "e400ff", 0x40, 0x3a, 0x0, @private2, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, '\x00', 0x0, 0x11, 0x0, @empty, @ipv4={'\x00', '\xff\xff', @multicast1}, [], "17c17f07000000000000000000002d56"}}}}}}}, 0x0) (async) r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @dev={0xac, 0x14, 0x14, 0x10}}, 0xc) (async) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f00000002c0)={0x4, {{0x2, 0x4e22, @multicast2}}}, 0x88) (async) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f00000003c0)={'raw\x00', 0x0, [0x3, 0x100, 0x8, 0xe, 0x6]}, &(0x7f0000000440)=0x54) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd26, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0xfffd, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20000000007, 0xfffffffffffffffb}, {0x0, 0x0, 0x0, 0xfffffffffffffffe}}}, 0xb8}}, 0x10) (async) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0xfffffffe, {{@in=@multicast1=0xe0000002, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x10, 0x20}, {0x0, 0x1, 0x100, 0x0, 0x0, 0x9, 0xffffffff}, {}, 0x0, 0x6e6bb5}}, 0xb8}}, 0x0) (async) getsockopt$inet_buf(r1, 0x0, 0x29, &(0x7f0000000000)=""/137, &(0x7f0000000200)=0x89) (async) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@ipv4_newroute={0x1c, 0x18, 0x113, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}}, 0x1c}}, 0x4000) (async) getsockopt(r0, 0x1, 0x6, 0x0, &(0x7f00000008c0)) 174.789666ms ago: executing program 1 (id=2411): ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) (async, rerun: 32) sendto$phonet(0xffffffffffffffff, &(0x7f0000000040)="833c8fbb7ef403757b61f65ca5063f399781e18ac5fea6a75e808fa58ae14a20f8026116b6d1f4017a2d6dcf0abc791df5ab99270b3958b9260246f85348da810cb84186bb87b65425a8a53c03703046678a1447a7704b8f7000987b3a16c0f0624277930cd040055ae8ec337002eb8a6605ebd495004cf347812544196e86f052338d151847b7647c837d0ee7d2d95163be19f353cbb67bc6b52295a76f3cf7d3020350f483b6e4f8711e76399d223bd8c2c417482fd71d2cf588b858d6e97fcca1539638c695c195a7a97bf9612b0dac6fb9180fa289ec", 0xd8, 0x4845, &(0x7f0000000140)={0x23, 0xe, 0x5, 0x4}, 0x10) (async, rerun: 32) r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0) vmsplice(r0, &(0x7f00000001c0)=[{&(0x7f0000000180)="ff79c681e5f28fe12296fc64df1ee086b6b58971fd8ca557b26807daafcc4fb41320950e8b96466e27f0006b080c", 0x2e}], 0x1, 0x1) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000000200), 0x1) (async, rerun: 64) sendmsg$rds(r1, &(0x7f0000001bc0)={&(0x7f0000000240)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1, &(0x7f0000001b00)=[@rdma_args={0x48, 0x114, 0x1, {{0x8, 0x1800}, {&(0x7f00000012c0)=""/174, 0xae}, &(0x7f00000018c0)=[{&(0x7f0000001380)=""/122, 0x7a}, {&(0x7f0000001400)=""/19, 0x13}, {&(0x7f0000001440)=""/40, 0x28}, {&(0x7f0000001480)=""/204, 0xcc}, {&(0x7f0000001580)=""/223, 0xdf}, {&(0x7f0000001680)=""/71, 0x47}, {&(0x7f0000001700)=""/158, 0x9e}, {&(0x7f00000017c0)=""/151, 0x97}, {&(0x7f0000001880)}], 0x9, 0x20, 0x6}}, @rdma_args={0x48, 0x114, 0x1, {{0x1, 0xfffffff2}, {&(0x7f0000001980)=""/104, 0x68}, &(0x7f0000001ac0)=[{&(0x7f0000001a00)=""/124, 0x7c}, {&(0x7f0000001a80)=""/59, 0x3b}], 0x2, 0x2d, 0x9}}], 0x90, 0x4}, 0x0) (async, rerun: 64) ioctl$NILFS_IOCTL_GET_SUSTAT(r1, 0x80306e85, &(0x7f0000001c00)) (async) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4058587a, &(0x7f0000001e40)={{r1, &(0x7f0000001c40)='\x00', 0x101000, &(0x7f0000001c80)={@_ha_fsid={[0xfffff1c3, 0x6]}, {0xca, 0x5, 0x3, 0x10000}}, 0x6, &(0x7f0000001cc0)={@_ha_fsid}, &(0x7f0000001d00)=0x3786dbcb}, {[0x1ff, 0x6b0f, 0xffffffff, 0x14]}, 0x3, 0xe1, &(0x7f0000001d40)=""/225}) epoll_pwait(r2, &(0x7f0000001ec0)=[{}, {}, {}, {}, {}, {}, {}], 0x7, 0x3, &(0x7f0000001f40), 0x8) (async, rerun: 32) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) (rerun: 32) syz_genetlink_get_family_id$tipc2(&(0x7f0000001f80), r2) (async) r4 = socket(0x18, 0x5, 0x2) sendmsg$kcm(r4, &(0x7f0000003780)={&(0x7f0000001fc0)=@nl=@kern={0x10, 0x0, 0x0, 0x4a1a0000}, 0x80, &(0x7f0000002340)=[{&(0x7f0000002040)="fa1140b0424255294593294cae43b592a89c6ea89c481128a642d010b90d39e316895d681a723ed4c9f0ec4b5c3afb158805214979a6f220413ab322924bd6e17a64a97f21d04566857c9639e3fcd734e7882e59", 0x54}, {&(0x7f00000020c0)="45277f101a272c7855229a726f5d28138fedcf7aceb2ebb98f3bf37696e68386b3bc999ec74947e1b72c894e369769c6fc30420c171a48ea2033c961364a94db15dc624475df9d5bf009", 0x4a}, {&(0x7f0000002140)="b18b3ab5397c345be91db661914a510de7a530bda9572dfdec9f606d0c1c7e5017298e4e9270cd067ad27f0aeec581437f4640476cb191d785e685784348713477cf55ca3c660ade76f843c817e9a5183d20c46104cc442bb116c9277fdb324b", 0x60}, {&(0x7f00000021c0)="3cf09c93d4313f93df51906cfaced9bce99fcb0e620f955b57480220e1de26864854efd5a8f5bd5f55435194a8e6b421214ad42167bdae4ea822b02ff216b70ed2691b8202f630f2c279856ae8631acf7105bce2327e2a1502a2f7a93c54c01c2bd3c0a61082ca3da8cb9e8174aa47679d764d561fc97b80772f5f28031b80d46e345216d256735dc9dd2e9d36aa249cdfd44f32b52398b4ab996a8c211153c38722f3397c6a7fdcfdf15abc27d61e3e316c4418d7e6a13b7ee2a0787bbdb2e1fdba1d0a3b170e0b54139a38edb5e84c25ebf071064e1119ad40f04d000e30da2c5a4309", 0xe4}, {&(0x7f00000022c0)="9d0fcac4ad048c9a2ed49c10af9133497f86a0095e89f8e1c21db7d0df25cb08b24bf3deeb662cc67b7de705def7253cb492e0ae1e2459f3af711698321561d0231b577fed4adff6fae47982997e37aab4b3eccff96dfe20c8eefa6d7979ed68581c7b311f51152bcff8be6b35510c5185ec", 0x72}], 0x5, &(0x7f00000023c0)=[{0xd0, 0xff, 0xfff, "be9f109f468465e8c26da3d05f1dbcae533129079be6e81b308d6299b25ac591087c50a8a1aa0da016a9e775a81d2c55d82e86aebf07f08b215b6b8816b2facc9b33c8c4e4885c99ea07320d61a9e3d5fe9864ca1a50eaad2c00e713cac39f31767159375ffe44669e9759e55482f9c538de62d1d0577be57d67f7088b4e39324d76a2279794e945b78f9fb9e92f8b62a6e402245f8fc74f6851d06c99aeeaab10d1f117452e299f6b74e4ceccc52b76bf68722e038fba150dedb50b59"}, {0xb0, 0x1, 0x8, "3b1c22a770b7fce7486664c9b3641a34c0364b84610f767a73cc9d92e7378ec281ccba3e982b8fb690d7f7ad7dd396f968c094523f6690a031d67d41b40386e7a3e3df13911826d18b06c1bff27d6c0aae3db1424bc51d7d11f1a5c5d2ed50070a6605aeca5660a96db3b9ac42be58b8e00a312ce96bd80fefcf5d996e11dad66190de3e9d0740c7fd6f92dd0418a5a4876cabad43902be68ba0"}, {0x58, 0x11, 0xc54d, "1760d59a5c52dfd3b29af0ad2b3bc7dfc3a2667c987bf5f35bbacc9aad2c2302e5cbb802c339eb587168aac81c24690b895401a12afb7dcdf9bcad69a8533be9688db1"}, {0x30, 0x118, 0x8, "e6dad1808959a160e3ecdbdf00fe5fbb5a6ae3528793a56100ce45c695602c"}, {0x20, 0x11, 0xf40, "5c47fa159459f50114"}, {0x48, 0x101, 0xaad, "420284b5e313a99a11774fc5734965a3453311849b650df73558b97c1229f3e849ece286ae0ad17366ef27bf4bc08370d130fec0"}, {0x38, 0xff, 0x6, "b7bfb9c5e8e4d9fd58ea28b19e76677df6bc5efcc388924699cb1deb66bfe7ce133afe859c8031"}, {0xd0, 0x29, 0x5eb0, "caa4b5be5e7de81586120a61a2d74c94b17e3c066080e95c82655549681cb8f228143ca06b8014b62555b05f27f09e19937ce74b958443799bb729c5073e0a22b8ccbc7ae62af9faa3c0346bf26d60dae6e8a96c195eaebeb26ed3a1dfa0095feb2a71b75fd15847f807eb0a939c31c829ba3df6ea13fc55351915682c8c40db154f705c074eb15a2cb494c47f0506d205ed404a0ab8bc531c6b672a8faa016af6e4e7a263af1e6405d1cc1309eae88b727638d0a832517b60ecc925da"}, {0x1010, 0x3a, 0x3, "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"}], 0x1388}, 0xc044) (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f00000037c0)=[@timestamp, @window={0x3, 0x9, 0x1}, @window={0x3, 0x0, 0x4}, @sack_perm, @timestamp, @mss={0x2, 0x3e}, @mss={0x2, 0x1}, @mss={0x2, 0x400000}, @window={0x3, 0x0, 0xf}, @window={0x3, 0x7, 0x97f}], 0xa) (async) ioctl$TUNGETFEATURES(r3, 0x800454cf, &(0x7f0000003840)) (async, rerun: 64) r5 = accept4$llc(r2, &(0x7f0000003880)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f00000038c0)=0x10, 0x800) (rerun: 64) ioctl$AUTOFS_IOC_PROTOVER(r5, 0x80049363, &(0x7f0000003900)) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, &(0x7f0000003940)=0x39c, 0x4) (async) r6 = socket$rds(0x15, 0x5, 0x0) connect$rds(r6, &(0x7f0000003980)={0x2, 0x4e22, @multicast2}, 0x10) bind$packet(r2, &(0x7f00000039c0)={0x11, 0x1b, 0x0, 0x1, 0x3, 0x6, @link_local}, 0x14) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, &(0x7f0000003a00)=0x1, 0x4) r7 = epoll_create(0xf) ioctl$INCFS_IOC_CREATE_FILE(r7, 0xc058671e, &(0x7f0000003dc0)={{'\x00', 0x1}, {0x402c}, 0x25, 0x0, 0x0, &(0x7f0000003a40)='./file0\x00', &(0x7f0000003a80)='./file0\x00', &(0x7f0000003ac0)="af8c7020adc18533939dcb948b5c37324074bee65a982909817cb2cc011f462447f383211678628e1d40456ce1a607e19cf0c317920c5e6a9b819bf5e5d1c6e4a880b72506dedcc21d5617caccbd7bf3b1d45982baed7ebf570c9358a93fcc01649dd26b365bda7f59e352d2c4825be7f73f4e752b5e1d47ed23f24f383fa914833a42b173eb58c28701d0af67405831a0af154bfeffbb1f38fb193d43fcaac27da4f8d96855bf9525aab8693c4247f48064ce862972a74d2a46d6094692f9670a51bdc0862ae3331caf0ccab4c24ac2fc2afedc6d257eabda536272e1e10d95580b62191401538664eb1213c2fa5bbcc4bb0e699e68c85a6794375eba1284aaa2f24c1fc3fb25aebfc6c8b3cfb06af02b394bc3cc523c35138dad8bdc4bf16044494756dc954ea629ac82bd718a63e50458", 0x132, 0x0, &(0x7f0000003c00)={0x2, 0x17c, {0x0, 0xc, 0xa9, "5b78cff2e9ceaececbbba2af70a126023a6a30a22ba5a96c95af6e569341a06d027a17f6c68834441c8de74a9a53c52cd7a093a3ceebc92182d9b233f10f17b8bf72b4602d78d59bd6fdaec1c28aaabf9c897cb2d4a108922635d6ff9adf9ab4ba477ac653045c0ac19952906090c3ab9f94ba1dd3405edce11f4c8bc9789bdb665bcd2e3d947aa437726f667d5509405b592ba704e1250486212ce15a679d927d5492a11973f95f0e", 0xc6, "00d6bf25e8621876d563a94d6925ca4210e5f7878c08765118e042311d52082c184b15771345c81a01c903aa488b741cc65452a4215c0d897b930f73372e5d296bd5b942d531807e2d2172a79db11dec4325258ad7b00c3e54bd3ccee883938ab7017d99d114dac7b0029e9bdd8817940d0d38e1b3929a66cf46f65535dcb65c2fdbc6d53e389706732df8c9a90303e88074a4d542dea4a1b3eaf332bca4a4ef2b967f2c57fe2c535b680e15c55fed8fbb202c262b5b926e4d79b94a88494b3cb4db5cfcf1cb"}, 0x13, "384247b6306344533f0e1fe7cf3ef83efaead4"}, 0x19b}) ioctl$XFS_IOC_READLINK_BY_HANDLE(r6, 0xc038586c, &(0x7f0000003f40)={r1, &(0x7f0000003e40)='\'\'\x00', 0x8100, &(0x7f0000003e80)={@_ha_fsid={[0x794f5eec]}, {0x8, 0x2c9, 0xff, 0x6}}, 0x40, &(0x7f0000003ec0), &(0x7f0000003f00)=0x3}) (async, rerun: 32) getsockname$inet(r2, &(0x7f0000003f80)={0x2, 0x0, @initdev}, &(0x7f0000003fc0)=0x10) (rerun: 32) sendmsg$nl_route(r4, &(0x7f00000040c0)={&(0x7f0000004000)={0x10, 0x0, 0x0, 0x480}, 0xc, &(0x7f0000004080)={&(0x7f0000004040)=@ipv6_getrule={0x1c, 0x22, 0xa11, 0x70bd25, 0x25dfdbfe, {0xa, 0x10, 0x14, 0x2, 0x4, 0x0, 0x0, 0x7, 0x10005}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4810}, 0x4040000) (async) sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000004300)={&(0x7f0000004100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000042c0)={&(0x7f0000004140)={0x16c, 0x0, 0x0, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x7ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x192}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}]}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8000}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK={0x40, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xbf6a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_LINK={0x28, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5215}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x74e3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa}, @TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_BEARER={0x7c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xe}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffd}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x24}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x10}, 0x40000) getsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000004340), &(0x7f0000004380)=0x4) 135.364312ms ago: executing program 4 (id=2412): socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a5a8698dfa871c5165c14b6fb57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d00", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) 125.84289ms ago: executing program 8 (id=2413): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) socket(0x1, 0x2, 0x0) (async) r3 = socket(0x1, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="aa00"/21, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="aa00"/21, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r4, &(0x7f0000000600), &(0x7f0000001380)=@udp=r3}, 0x20) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r4, &(0x7f0000000600), &(0x7f0000001380)=@udp=r3}, 0x20) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x5, @loopback, 0xa}}, 0x0, 0x0, 0x3d, 0x0, "bb02a3d364ca41ffff45244746bd4c0b42a21d7294bf92594925208a0e2f964e654dc534a6324d4993fcf19b39f3ee818a118a7c211521899f6d8b6d2ccd00"}, 0xd8) socket$kcm(0x23, 0x5, 0x0) (async) r5 = socket$kcm(0x23, 0x5, 0x0) sendmsg$sock(r5, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$sock(r5, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) (async) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r6, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff000000"], 0x78) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x5452, &(0x7f0000000380)={'gre0\x00', 0x0}) recvmsg(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000440)=""/103, 0x67}], 0x1}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r8, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000001880)={0x1c, 0x1, 0x4, 0x3, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x1c}}, 0x0) (async) sendmsg$NFULNL_MSG_CONFIG(r8, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000001880)={0x1c, 0x1, 0x4, 0x3, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x1c}}, 0x0) sendmmsg$unix(r3, &(0x7f0000001040)=[{{&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) (async) sendmmsg$unix(r3, &(0x7f0000001040)=[{{&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=@deltaction={0x80, 0x31, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@TCA_ACT_TAB={0x4}, @TCA_ACT_TAB={0x48, 0x1, [{0xc, 0x801, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x15a2}}, {0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}, @TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x400}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x20000800}, 0x20008010) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r9, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r10 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000200)={'ip_vti0\x00', 0x0}) sendto$packet(r10, &(0x7f0000000080)="330320", 0x3, 0x40008c1, &(0x7f0000000480)={0x11, 0x0, r11, 0x1, 0x62, 0x6, @broadcast}, 0x14) (async) sendto$packet(r10, &(0x7f0000000080)="330320", 0x3, 0x40008c1, &(0x7f0000000480)={0x11, 0x0, r11, 0x1, 0x62, 0x6, @broadcast}, 0x14) write$bt_hci(r9, &(0x7f0000000580)=ANY=[@ANYBLOB="5300000002"], 0x8) (async) write$bt_hci(r9, &(0x7f0000000580)=ANY=[@ANYBLOB="5300000002"], 0x8) 52.228116ms ago: executing program 1 (id=2414): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @empty}]}}}]}, 0x4c}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x56, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x88}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 51.675775ms ago: executing program 4 (id=2415): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000520001002bbd70000000000002"], 0x1c}}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000300), 0x8) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x2) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 16.31577ms ago: executing program 4 (id=2416): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="00052bbd7000010000000100"], 0x28}, 0x1, 0x0, 0x0, 0x4080}, 0x20002001) r2 = socket(0x5, 0x800, 0x1) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x2004c840) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r2, 0x11, 0x1, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="080029bd7000fddbdf2508000000440003800800030003000000080003000b00000008000300165d0000080003000000000008000100001000000800030000000000080002"], 0x58}, 0x1, 0x0, 0x0, 0x4008010}, 0x10) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r5, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) sendmsg$nl_xfrm(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="500000002700010000000000000000000a000100000000000000000000000000ac1e01010000000000000000000000000000000000000800000000002b000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffea000000000000"], 0x50}, 0x1, 0x0, 0x0, 0x2000c0c0}, 0x0) 0s ago: executing program 1 (id=2417): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)=@deltfilter={0x80, 0x2d, 0x20, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x8}, {0xfff2, 0x34684a1c0b47d85a}, {0xffff, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x38, 0x2, [@TCA_FLOWER_KEY_ARP_SIP_MASK={0x8}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8100}, @TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x80f3}, @TCA_FLOWER_KEY_ENC_IPV6_DST={0x14, 0x21, @private1}, @TCA_FLOWER_KEY_ENC_IPV4_SRC={0x8, 0x1b, @broadcast}]}}, @TCA_CHAIN={0x8, 0xb, 0x326}, @TCA_RATE={0x6, 0x5, {0x9, 0xfa}}, @TCA_CHAIN={0x8, 0xb, 0x4}]}, 0x80}, 0x1, 0x0, 0x0, 0x10}, 0x4005) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x1, 0x803, 0x0) (async, rerun: 64) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), r1) (rerun: 64) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0xb4, r3, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x64, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x29}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2e}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x84000000}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20000080}, 0x20048004) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x4040004) (async) socket(0x10, 0x3, 0x0) (async) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_RT_PRIORITY={0x8, 0x9, 0x8}]}, 0x34}}, 0x0) kernel console output (not intermixed with test programs): parsing attributes in process `syz.5.759'. [ 158.571134][ T8288] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048) [ 158.590633][ T8291] CPU: 0 UID: 0 PID: 8291 Comm: syz.4.760 Not tainted syzkaller #0 PREEMPT(full) [ 158.590658][ T8291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 158.590668][ T8291] Call Trace: [ 158.590675][ T8291] [ 158.590683][ T8291] dump_stack_lvl+0xe8/0x150 [ 158.590708][ T8291] should_fail_ex+0x412/0x560 [ 158.590736][ T8291] should_failslab+0xa8/0x100 [ 158.590763][ T8291] ? __kernfs_new_node+0xea/0x970 [ 158.590787][ T8291] kmem_cache_alloc_noprof+0x87/0x650 [ 158.590819][ T8291] __kernfs_new_node+0xea/0x970 [ 158.590847][ T8291] ? __pfx___kernfs_new_node+0x10/0x10 [ 158.590869][ T8291] ? kernfs_root+0x1c/0x230 [ 158.590895][ T8291] ? kernfs_root+0x1c/0x230 [ 158.590914][ T8291] ? kernfs_root+0x1c/0x230 [ 158.590931][ T8291] ? kernfs_root+0x1c/0x230 [ 158.590953][ T8291] kernfs_new_node+0x102/0x210 [ 158.590979][ T8291] __kernfs_create_file+0x4b/0x2e0 [ 158.590998][ T8291] sysfs_add_file_mode_ns+0x238/0x300 [ 158.591024][ T8291] sysfs_create_file_ns+0x12b/0x1b0 [ 158.591044][ T8291] ? __pfx_sysfs_create_file_ns+0x10/0x10 [ 158.591065][ T8291] ? rfcomm_reparent_device+0x385/0x470 [ 158.591087][ T8291] ? rfcomm_reparent_device+0x5d/0x470 [ 158.591106][ T8291] ? device_create_file+0xf4/0x1b0 [ 158.591127][ T8291] rfcomm_dev_ioctl+0x1c0c/0x21d0 [ 158.591155][ T8291] ? kasan_quarantine_put+0xbb/0x1f0 [ 158.591177][ T8291] ? __pfx_rfcomm_dev_ioctl+0x10/0x10 [ 158.591205][ T8291] ? tomoyo_path_number_perm+0x219/0x630 [ 158.591226][ T8291] ? tomoyo_path_number_perm+0x219/0x630 [ 158.591254][ T8291] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 158.591287][ T8291] sock_do_ioctl+0x101/0x320 [ 158.591315][ T8291] ? __pfx_sock_do_ioctl+0x10/0x10 [ 158.591338][ T8291] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 158.591376][ T8291] sock_ioctl+0x5c6/0x7f0 [ 158.591403][ T8291] ? __pfx_sock_ioctl+0x10/0x10 [ 158.591426][ T8291] ? __fget_files+0x2a/0x420 [ 158.591446][ T8291] ? __fget_files+0x3a0/0x420 [ 158.591465][ T8291] ? __fget_files+0x2a/0x420 [ 158.591488][ T8291] ? bpf_lsm_file_ioctl+0x9/0x20 [ 158.591513][ T8291] ? __pfx_sock_ioctl+0x10/0x10 [ 158.591538][ T8291] __se_sys_ioctl+0xfc/0x170 [ 158.591561][ T8291] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.591580][ T8291] do_syscall_64+0x15f/0xf80 [ 158.591600][ T8291] ? trace_irq_disable+0x3b/0x140 [ 158.591631][ T8291] ? clear_bhb_loop+0x40/0x90 [ 158.591652][ T8291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.591668][ T8291] RIP: 0033:0x7f3a4e99cdd9 [ 158.591685][ T8291] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 158.591699][ T8291] RSP: 002b:00007f3a4f921028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 158.591718][ T8291] RAX: ffffffffffffffda RBX: 00007f3a4ec15fa0 RCX: 00007f3a4e99cdd9 [ 158.591729][ T8291] RDX: 0000200000000100 RSI: 00000000400452c8 RDI: 0000000000000004 [ 158.591740][ T8291] RBP: 00007f3a4f921090 R08: 0000000000000000 R09: 0000000000000000 [ 158.591749][ T8291] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 158.591759][ T8291] R13: 00007f3a4ec16038 R14: 00007f3a4ec15fa0 R15: 00007ffd1378b898 [ 158.591787][ T8291] [ 158.591795][ T8291] Bluetooth: Failed to create address attribute [ 158.936426][ T8297] mac80211_hwsim hwsim3 wlan1: Caught tx_queue_len zero misconfig [ 159.036240][ T8303] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.765'. [ 159.109479][ T8078] veth0_vlan: entered promiscuous mode [ 159.125874][ T8078] veth1_vlan: entered promiscuous mode [ 159.224736][ T8078] veth0_macvtap: entered promiscuous mode [ 159.265766][ T8078] veth1_macvtap: entered promiscuous mode [ 159.341996][ T8078] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 159.383809][ T8078] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 159.435825][ T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.461040][ T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.508890][ T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.551884][ T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.687180][ T5636] Bluetooth: hci6: command tx timeout [ 159.778939][ T1167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.809535][ T1167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 159.901977][ T1036] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.926447][ T1036] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 160.100756][ T8349] netlink: 'syz.5.777': attribute type 5 has an invalid length. [ 160.240889][ T8362] netlink: 8 bytes leftover after parsing attributes in process `syz.2.779'. [ 160.635024][ T8383] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.789'. [ 160.758957][ T8393] netlink: 4 bytes leftover after parsing attributes in process `syz.3.790'. [ 160.801399][ T8395] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40 [ 160.915721][ T8400] netlink: 'syz.2.794': attribute type 12 has an invalid length. [ 161.074658][ T8408] netlink: 'syz.2.795': attribute type 2 has an invalid length. [ 161.135812][ T8407] 8021q: adding VLAN 0 to HW filter on device bond2 [ 161.147583][ T8407] bridge0: port 1(bond2) entered blocking state [ 161.162516][ T8407] bridge0: port 1(bond2) entered disabled state [ 161.175575][ T8407] bond2: entered allmulticast mode [ 161.183933][ T8407] bond2: entered promiscuous mode [ 161.391453][ T8423] FAULT_INJECTION: forcing a failure. [ 161.391453][ T8423] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 161.426354][ T8423] CPU: 0 UID: 0 PID: 8423 Comm: syz.4.802 Not tainted syzkaller #0 PREEMPT(full) [ 161.426386][ T8423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 161.426397][ T8423] Call Trace: [ 161.426404][ T8423] [ 161.426411][ T8423] dump_stack_lvl+0xe8/0x150 [ 161.426436][ T8423] should_fail_ex+0x412/0x560 [ 161.426461][ T8423] _copy_from_iter+0x1d3/0x1670 [ 161.426486][ T8423] ? rcu_is_watching+0x15/0xb0 [ 161.426513][ T8423] ? __pfx__copy_from_iter+0x10/0x10 [ 161.426542][ T8423] ? netlink_sendmsg+0x650/0xb40 [ 161.426560][ T8423] ? skb_put+0x11b/0x210 [ 161.426585][ T8423] netlink_sendmsg+0x6c0/0xb40 [ 161.426611][ T8423] ? __pfx_netlink_sendmsg+0x10/0x10 [ 161.426642][ T8423] ? aa_sock_msg_perm+0xf1/0x1b0 [ 161.426665][ T8423] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 161.426691][ T8423] ____sys_sendmsg+0x972/0x9f0 [ 161.426711][ T8423] ? __might_fault+0xaf/0x130 [ 161.426738][ T8423] ? __pfx_____sys_sendmsg+0x10/0x10 [ 161.426770][ T8423] ? import_iovec+0x73/0xa0 [ 161.426794][ T8423] ___sys_sendmsg+0x2a5/0x360 [ 161.426812][ T8423] ? __lock_acquire+0x6b5/0x2cf0 [ 161.426832][ T8423] ? __pfx____sys_sendmsg+0x10/0x10 [ 161.426885][ T8423] ? __fget_files+0x2a/0x420 [ 161.426904][ T8423] ? __fget_files+0x3a0/0x420 [ 161.426933][ T8423] __x64_sys_sendmsg+0x1bd/0x2a0 [ 161.426955][ T8423] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 161.426982][ T8423] ? __pfx_ksys_write+0x10/0x10 [ 161.427012][ T8423] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.427029][ T8423] do_syscall_64+0x15f/0xf80 [ 161.427049][ T8423] ? trace_irq_disable+0x3b/0x140 [ 161.427073][ T8423] ? clear_bhb_loop+0x40/0x90 [ 161.427095][ T8423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.427112][ T8423] RIP: 0033:0x7f3a4e99cdd9 [ 161.427128][ T8423] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 161.427141][ T8423] RSP: 002b:00007f3a4f921028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 161.427160][ T8423] RAX: ffffffffffffffda RBX: 00007f3a4ec15fa0 RCX: 00007f3a4e99cdd9 [ 161.427172][ T8423] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 161.427182][ T8423] RBP: 00007f3a4f921090 R08: 0000000000000000 R09: 0000000000000000 [ 161.427192][ T8423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 161.427202][ T8423] R13: 00007f3a4ec16038 R14: 00007f3a4ec15fa0 R15: 00007ffd1378b898 [ 161.427230][ T8423] [ 161.870050][ T8439] vlan2: entered allmulticast mode [ 161.901793][ T8439] veth1_virt_wifi: entered allmulticast mode [ 162.060783][ T8450] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 162.251070][ T30] audit: type=1800 audit(1777951127.748:2): pid=8460 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.817" name="memory.events" dev="tmpfs" ino=888 res=0 errno=0 [ 162.362241][ T8465] FAULT_INJECTION: forcing a failure. [ 162.362241][ T8465] name failslab, interval 1, probability 0, space 0, times 0 [ 162.379727][ T8465] CPU: 1 UID: 0 PID: 8465 Comm: syz.2.818 Not tainted syzkaller #0 PREEMPT(full) [ 162.379752][ T8465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 162.379762][ T8465] Call Trace: [ 162.379769][ T8465] [ 162.379777][ T8465] dump_stack_lvl+0xe8/0x150 [ 162.379804][ T8465] should_fail_ex+0x412/0x560 [ 162.379832][ T8465] should_failslab+0xa8/0x100 [ 162.379858][ T8465] ? skb_clone+0x212/0x3a0 [ 162.379882][ T8465] kmem_cache_alloc_noprof+0x87/0x650 [ 162.379906][ T8465] ? __netlink_lookup+0xc6/0x8b0 [ 162.379933][ T8465] skb_clone+0x212/0x3a0 [ 162.379967][ T8465] __netlink_deliver_tap+0x404/0x850 [ 162.380000][ T8465] ? netlink_deliver_tap+0x2e/0x1b0 [ 162.380024][ T8465] netlink_deliver_tap+0x19c/0x1b0 [ 162.380046][ T8465] netlink_unicast+0x730/0x8e0 [ 162.380071][ T8465] netlink_sendmsg+0x813/0xb40 [ 162.380100][ T8465] ? __pfx_netlink_sendmsg+0x10/0x10 [ 162.380126][ T8465] ? aa_sock_msg_perm+0xf1/0x1b0 [ 162.380151][ T8465] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 162.380178][ T8465] ____sys_sendmsg+0x972/0x9f0 [ 162.380201][ T8465] ? __might_fault+0xaf/0x130 [ 162.380230][ T8465] ? __pfx_____sys_sendmsg+0x10/0x10 [ 162.380262][ T8465] ? import_iovec+0x73/0xa0 [ 162.380290][ T8465] ___sys_sendmsg+0x2a5/0x360 [ 162.380311][ T8465] ? __lock_acquire+0x6b5/0x2cf0 [ 162.380333][ T8465] ? __pfx____sys_sendmsg+0x10/0x10 [ 162.380391][ T8465] ? __fget_files+0x2a/0x420 [ 162.380411][ T8465] ? __fget_files+0x3a0/0x420 [ 162.380439][ T8465] __x64_sys_sendmsg+0x1bd/0x2a0 [ 162.380462][ T8465] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 162.380492][ T8465] ? __pfx_ksys_write+0x10/0x10 [ 162.380523][ T8465] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.380541][ T8465] do_syscall_64+0x15f/0xf80 [ 162.380562][ T8465] ? trace_irq_disable+0x3b/0x140 [ 162.380586][ T8465] ? clear_bhb_loop+0x40/0x90 [ 162.380607][ T8465] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.380622][ T8465] RIP: 0033:0x7fc75079cdd9 [ 162.380639][ T8465] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 162.380651][ T8465] RSP: 002b:00007fc74e9f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 162.380670][ T8465] RAX: ffffffffffffffda RBX: 00007fc750a15fa0 RCX: 00007fc75079cdd9 [ 162.380681][ T8465] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 162.380692][ T8465] RBP: 00007fc74e9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 162.380702][ T8465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 162.380712][ T8465] R13: 00007fc750a16038 R14: 00007fc750a15fa0 R15: 00007ffec8273928 [ 162.380741][ T8465] [ 162.650539][ T8469] netlink: 'syz.6.819': attribute type 2 has an invalid length. [ 162.897164][ T8483] lo: Caught tx_queue_len zero misconfig [ 163.009365][ T8487] netlink: 4 bytes leftover after parsing attributes in process `syz.2.827'. [ 163.350476][ T8503] FAULT_INJECTION: forcing a failure. [ 163.350476][ T8503] name failslab, interval 1, probability 0, space 0, times 0 [ 163.388938][ T8503] CPU: 0 UID: 0 PID: 8503 Comm: syz.4.832 Not tainted syzkaller #0 PREEMPT(full) [ 163.388961][ T8503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 163.388971][ T8503] Call Trace: [ 163.388977][ T8503] [ 163.388983][ T8503] dump_stack_lvl+0xe8/0x150 [ 163.389006][ T8503] should_fail_ex+0x412/0x560 [ 163.389031][ T8503] should_failslab+0xa8/0x100 [ 163.389056][ T8503] __kmalloc_noprof+0xe8/0x760 [ 163.389079][ T8503] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 163.389109][ T8503] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 163.389141][ T8503] genl_family_rcv_msg_doit+0xd9/0x330 [ 163.389174][ T8503] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 163.389213][ T8503] ? apparmor_capable+0x126/0x170 [ 163.389242][ T8503] ? bpf_lsm_capable+0x9/0x20 [ 163.389260][ T8503] ? security_capable+0x7e/0x2c0 [ 163.389287][ T8503] genl_rcv_msg+0x61c/0x7a0 [ 163.389319][ T8503] ? __pfx_genl_rcv_msg+0x10/0x10 [ 163.389341][ T8503] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 163.389359][ T8503] ? __pfx_nl80211_start_ap+0x10/0x10 [ 163.389378][ T8503] ? __pfx_nl80211_post_doit+0x10/0x10 [ 163.389397][ T8503] ? __pfx_ref_tracker_free+0x10/0x10 [ 163.389423][ T8503] ? __asan_memcpy+0x40/0x70 [ 163.389443][ T8503] ? __skb_clone+0x63/0x7a0 [ 163.389474][ T8503] netlink_rcv_skb+0x232/0x4b0 [ 163.389494][ T8503] ? __pfx_genl_rcv_msg+0x10/0x10 [ 163.389520][ T8503] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 163.389557][ T8503] ? down_read+0x270/0x2e0 [ 163.389578][ T8503] ? genl_rcv+0xd/0x40 [ 163.389603][ T8503] genl_rcv+0x28/0x40 [ 163.389626][ T8503] netlink_unicast+0x75c/0x8e0 [ 163.389657][ T8503] netlink_sendmsg+0x813/0xb40 [ 163.389689][ T8503] ? __pfx_netlink_sendmsg+0x10/0x10 [ 163.389715][ T8503] ? aa_sock_msg_perm+0xf1/0x1b0 [ 163.389738][ T8503] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 163.389764][ T8503] ____sys_sendmsg+0x972/0x9f0 [ 163.389787][ T8503] ? __might_fault+0xaf/0x130 [ 163.389815][ T8503] ? __pfx_____sys_sendmsg+0x10/0x10 [ 163.389847][ T8503] ? import_iovec+0x73/0xa0 [ 163.389874][ T8503] ___sys_sendmsg+0x2a5/0x360 [ 163.389895][ T8503] ? __lock_acquire+0x6b5/0x2cf0 [ 163.389917][ T8503] ? __pfx____sys_sendmsg+0x10/0x10 [ 163.389975][ T8503] ? __fget_files+0x2a/0x420 [ 163.389995][ T8503] ? __fget_files+0x3a0/0x420 [ 163.390025][ T8503] __x64_sys_sendmsg+0x1bd/0x2a0 [ 163.390050][ T8503] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 163.390081][ T8503] ? __pfx_ksys_write+0x10/0x10 [ 163.390115][ T8503] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.390132][ T8503] do_syscall_64+0x15f/0xf80 [ 163.390150][ T8503] ? trace_irq_disable+0x3b/0x140 [ 163.390174][ T8503] ? clear_bhb_loop+0x40/0x90 [ 163.390202][ T8503] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.390218][ T8503] RIP: 0033:0x7f3a4e99cdd9 [ 163.390235][ T8503] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 163.390247][ T8503] RSP: 002b:00007f3a4f921028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 163.390266][ T8503] RAX: ffffffffffffffda RBX: 00007f3a4ec15fa0 RCX: 00007f3a4e99cdd9 [ 163.390279][ T8503] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 163.390290][ T8503] RBP: 00007f3a4f921090 R08: 0000000000000000 R09: 0000000000000000 [ 163.390299][ T8503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 163.390308][ T8503] R13: 00007f3a4ec16038 R14: 00007f3a4ec15fa0 R15: 00007ffd1378b898 [ 163.390338][ T8503] [ 163.407641][ T8506] netlink: 28 bytes leftover after parsing attributes in process `syz.2.833'. [ 164.296091][ T8545] netlink: 12 bytes leftover after parsing attributes in process `syz.2.847'. [ 164.379513][ T8551] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.849'. [ 164.392017][ T8551] netlink: Unknown conntrack attr (0) [ 164.444187][ T8553] team0: No ports can be present during mode change [ 165.222162][ T8567] IPVS: set_ctl: invalid protocol: 51 10.1.1.2:20004 [ 165.262189][ T9] IPVS: starting estimator thread 0... [ 165.338580][ T8578] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.860'. [ 165.348720][ T8578] netlink: Unknown conntrack attr (0) [ 165.356730][ T8575] IPVS: using max 39 ests per chain, 93600 per kthread [ 165.586529][ T8594] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.866'. [ 165.810343][ T8604] netlink: 44 bytes leftover after parsing attributes in process `syz.6.871'. [ 165.821399][ T8604] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.828941][ T8604] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.940932][ T8606] Unknown options in mask b7f2 [ 166.099370][ T8612] bond1: Removing last ns target with arp_interval on [ 166.554983][ T8632] can: request_module (can-proto-0) failed. [ 166.572342][ T8628] can: request_module (can-proto-0) failed. [ 166.686370][ T8648] netlink: 184 bytes leftover after parsing attributes in process `syz.2.889'. [ 166.710188][ T8648] ip6t_srh: unknown srh match flags 4000 [ 166.720417][ T8648] netlink: 184 bytes leftover after parsing attributes in process `syz.2.889'. [ 166.832360][ T8659] xt_nfacct: accounting object `syz1' does not exist [ 166.848320][ T8659] netlink: 12 bytes leftover after parsing attributes in process `syz.3.893'. [ 167.004813][ T8667] netlink: 'syz.3.897': attribute type 4 has an invalid length. [ 167.028381][ T8667] netlink: 'syz.3.897': attribute type 4 has an invalid length. [ 167.126704][ T5633] Bluetooth: hci6: command 0x0405 tx timeout [ 167.290539][ T8681] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 167.617605][ T8689] syzkaller0: entered promiscuous mode [ 167.641411][ T8689] syzkaller0: entered allmulticast mode [ 167.691618][ T8702] netlink: 32 bytes leftover after parsing attributes in process `syz.6.911'. [ 167.716132][ T8704] netlink: 12 bytes leftover after parsing attributes in process `syz.2.913'. [ 169.386302][ T8718] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 169.386302][ T8718] Please contact the netfilter-devel mailing list or update your nftables rules. [ 169.511704][ T8725] netlink: 12 bytes leftover after parsing attributes in process `syz.2.919'. [ 169.559998][ T8727] netlink: 44 bytes leftover after parsing attributes in process `syz.4.921'. [ 169.936523][ T8744] veth0: Caught tx_queue_len zero misconfig [ 170.056923][ T8753] Unknown options in mask b7f2 [ 170.389529][ T8761] smc: net device team0 applied user defined pnetid SYZ2 [ 170.732122][ T8775] Unknown options in mask b7f2 [ 171.629568][ T8819] netlink: 32 bytes leftover after parsing attributes in process `syz.4.956'. [ 171.661276][ T8819] nftables ruleset with unbound set [ 171.811548][ T8824] netlink: 'syz.3.957': attribute type 1 has an invalid length. [ 171.832209][ T8824] netlink: 280 bytes leftover after parsing attributes in process `syz.3.957'. [ 171.933451][ T8827] tipc: Enabling of bearer rejected, failed to enable media [ 171.952213][ T8827] syzkaller0: entered promiscuous mode [ 171.959928][ T8827] syzkaller0: entered allmulticast mode [ 172.111586][ T8832] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 172.356997][ T8842] netlink: 16 bytes leftover after parsing attributes in process `syz.4.963'. [ 172.820903][ T8848] lo: Caught tx_queue_len zero misconfig [ 172.964959][ T8857] sit0: entered promiscuous mode [ 172.983641][ T8857] netlink: 'syz.2.969': attribute type 1 has an invalid length. [ 173.011749][ T8857] netlink: 1 bytes leftover after parsing attributes in process `syz.2.969'. [ 173.029889][ T8860] Unknown options in mask b7f2 [ 173.159401][ T8864] syzkaller0: entered promiscuous mode [ 173.182030][ T8864] syzkaller0: entered allmulticast mode [ 173.190014][ T8866] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 173.565918][ T8890] bond0: Caught tx_queue_len zero misconfig [ 173.643222][ T8895] netlink: 36 bytes leftover after parsing attributes in process `syz.6.983'. [ 173.643662][ T8892] syzkaller0: entered promiscuous mode [ 173.675490][ T8892] syzkaller0: entered allmulticast mode [ 173.890098][ T8907] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode [ 174.004559][ T8918] netlink: 44 bytes leftover after parsing attributes in process `syz.4.990'. [ 174.211286][ T8927] netlink: 12 bytes leftover after parsing attributes in process `syz.4.995'. [ 174.262064][ T5636] block nbd0: Receive control failed (result -107) [ 174.273151][ T8930] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 174.290284][ T8930] netlink: 'syz.4.995': attribute type 29 has an invalid length. [ 174.309049][ T8930] netlink: 'syz.4.995': attribute type 29 has an invalid length. [ 174.346977][ T8927] netlink: 'syz.4.995': attribute type 29 has an invalid length. [ 174.355179][ T8927] netlink: 'syz.4.995': attribute type 29 has an invalid length. [ 174.363728][ T8927] netlink: 'syz.4.995': attribute type 29 has an invalid length. [ 174.371942][ T8927] netlink: 'syz.4.995': attribute type 29 has an invalid length. [ 174.380357][ T8927] netlink: 'syz.4.995': attribute type 29 has an invalid length. [ 174.547120][ T8939] batadv1: entered allmulticast mode [ 174.715989][ T8950] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1000'. [ 174.741121][ T8950] sch_tbf: burst 12 is lower than device bridge2 mtu (1514) ! [ 174.773868][ T8950] netlink: 'syz.2.1000': attribute type 4 has an invalid length. [ 174.784189][ T8950] netlink: 216 bytes leftover after parsing attributes in process `syz.2.1000'. [ 174.908082][ T8958] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1003'. [ 175.466804][ T5633] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 175.478860][ T5633] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 175.490595][ T5633] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 175.501492][ T5633] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 175.509527][ T5633] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 175.606396][ T8999] batadv_slave_0: Caught tx_queue_len zero misconfig [ 176.971650][ T8994] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.978976][ T8994] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.994973][ T8994] bridge_slave_0: entered allmulticast mode [ 177.018496][ T8994] bridge_slave_0: entered promiscuous mode [ 177.029545][ T8994] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.055679][ T8994] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.071716][ T8994] bridge_slave_1: entered allmulticast mode [ 177.087405][ T8994] bridge_slave_1: entered promiscuous mode [ 177.126959][ T8994] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 177.160554][ T8994] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 177.279026][ T8994] team0: Port device team_slave_0 added [ 177.306287][ T8994] team0: Port device team_slave_1 added [ 177.410508][ T8994] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 177.434000][ T8994] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 177.485388][ T8994] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 177.510764][ T8994] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 177.526733][ T8994] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 177.585725][ T8994] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 177.610780][ T5636] Bluetooth: hci7: command tx timeout [ 177.739695][ T8994] hsr_slave_0: entered promiscuous mode [ 177.762844][ T8994] hsr_slave_1: entered promiscuous mode [ 177.778225][ T8994] debugfs: 'hsr0' already exists in 'hsr' [ 177.784079][ T8994] Cannot create hsr debugfs directory [ 178.194233][ T8994] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 178.216047][ T8994] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 178.241068][ T8994] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 178.261688][ T8994] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 178.284298][ T8994] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 178.298201][ T8994] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 178.339264][ T8994] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 178.355504][ T8994] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 178.590487][ T8994] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.654271][ T8994] 8021q: adding VLAN 0 to HW filter on device team0 [ 178.684640][ T1036] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.691895][ T1036] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.714866][ T1036] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.722127][ T1036] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.783262][ T9147] __nla_validate_parse: 4 callbacks suppressed [ 178.783279][ T9147] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1058'. [ 179.436829][ T9177] syzkaller0: entered promiscuous mode [ 179.451992][ T9177] syzkaller0: entered allmulticast mode [ 179.563899][ T9177] veth0: entered promiscuous mode [ 179.582893][ T9175] veth0: left promiscuous mode [ 179.602725][ T9181] syzkaller0: entered promiscuous mode [ 179.620652][ T9181] syzkaller0: entered allmulticast mode [ 179.653668][ T9185] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1065'. [ 179.678958][ T9185] validate_nla: 2 callbacks suppressed [ 179.678975][ T9185] netlink: 'syz.2.1065': attribute type 7 has an invalid length. [ 179.687884][ T5636] Bluetooth: hci7: command tx timeout [ 179.710300][ T9185] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1065'. [ 179.918146][ T9195] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1067'. [ 179.957624][ T9195] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.965405][ T9195] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.085662][ T8994] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 180.133954][ T9206] tipc: Enabling of bearer rejected, failed to enable media [ 180.225125][ T9214] veth0_to_team: Caught tx_queue_len zero misconfig [ 180.282499][ T9214] team0: Device gtp0 is of different type [ 180.560025][ T9229] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.1080'. [ 180.571273][ T9229] netlink: Unknown conntrack attr (0) [ 180.659205][ T9234] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1081'. [ 180.769628][ T8994] veth0_vlan: entered promiscuous mode [ 180.805800][ T8994] veth1_vlan: entered promiscuous mode [ 180.839709][ T9241] veth1_macvtap: entered allmulticast mode [ 180.862957][ T9241] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1084'. [ 180.872200][ T8994] veth0_macvtap: entered promiscuous mode [ 180.877524][ T8994] veth1_macvtap: entered promiscuous mode [ 180.905059][ T9241] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1084'. [ 180.947466][ T8994] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 181.014283][ T9241] veth1_macvtap (unregistering): left allmulticast mode [ 181.120856][ T8994] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 181.143025][ T3304] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.159361][ T1036] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.176110][ T1036] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.199537][ T1036] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.321735][ T9254] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.1091'. [ 181.338106][ T9254] netlink: Unknown conntrack attr (0) [ 181.343689][ T3304] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.355874][ T3304] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.400396][ T1167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.409823][ T1167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.487043][ T9262] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1094'. [ 181.767522][ T5636] Bluetooth: hci7: command tx timeout [ 181.826417][ T9274] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 181.840124][ T9278] syzkaller0: entered promiscuous mode [ 181.845795][ T9278] syzkaller0: entered allmulticast mode [ 181.961949][ T9284] netlink: Unknown conntrack attr (0) [ 182.350912][ T9301] syzkaller0: entered promiscuous mode [ 182.359358][ T9301] syzkaller0: entered allmulticast mode [ 182.508921][ T9310] syzkaller1: entered promiscuous mode [ 182.516298][ T9310] syzkaller1: entered allmulticast mode [ 182.768042][ T9322] netlink: Unknown conntrack attr (0) [ 183.100885][ T9345] syzkaller0: entered promiscuous mode [ 183.114797][ T9345] syzkaller0: entered allmulticast mode [ 183.459417][ T9364] netlink: Unknown conntrack attr (0) [ 183.582330][ T9373] netlink: 'syz.7.1132': attribute type 2 has an invalid length. [ 183.847671][ T5636] Bluetooth: hci7: command tx timeout [ 184.014159][ T9384] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1500) ! [ 184.028800][ T9384] syzkaller0: entered promiscuous mode [ 184.037763][ T9384] syzkaller0: entered allmulticast mode [ 186.368831][ T9358] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 186.390884][ T9394] netlink: 'syz.3.1139': attribute type 1 has an invalid length. [ 186.642594][ T9412] only policy match revision 0 supported [ 186.642616][ T9412] unable to load match [ 186.835857][ T9422] __nla_validate_parse: 10 callbacks suppressed [ 186.835876][ T9422] netlink: 211856 bytes leftover after parsing attributes in process `syz.2.1148'. [ 187.367227][ T9445] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1155'. [ 187.591582][ T9453] netlink: 'syz.3.1159': attribute type 3 has an invalid length. [ 187.804560][ T9465] syzkaller0: entered promiscuous mode [ 187.810905][ T9465] syzkaller0: entered allmulticast mode [ 188.107779][ T9481] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1168'. [ 188.303261][ T9485] netlink: 'syz.4.1171': attribute type 1 has an invalid length. [ 188.315036][ T9485] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1171'. [ 188.326399][ T9485] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1171'. [ 188.335561][ T9485] netlink: 'syz.4.1171': attribute type 2 has an invalid length. [ 188.343521][ T9485] netlink: 'syz.4.1171': attribute type 2 has an invalid length. [ 188.353345][ T9485] netlink: 'syz.4.1171': attribute type 2 has an invalid length. [ 188.368462][ T9488] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1171'. [ 188.531121][ T9495] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1173'. [ 188.544516][ T9495] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1173'. [ 188.696961][ T9506] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1177'. [ 188.722042][ T9506] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1177'. [ 188.732096][ T9506] netlink: 'syz.7.1177': attribute type 15 has an invalid length. [ 188.783246][ T9506] netlink: 'syz.7.1177': attribute type 15 has an invalid length. [ 188.849705][ T9512] bond1 (unregistering): Released all slaves [ 188.911202][ T1167] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 256 - 0 [ 188.920185][ T1167] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0 [ 188.932279][ T1167] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0 [ 188.969501][ T1167] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0 [ 189.102501][ T9527] Unknown options in mask b7f2 [ 189.112941][ T9529] ip6tnl0: Caught tx_queue_len zero misconfig [ 189.873361][ T9568] xt_hashlimit: size too large, truncated to 1048576 [ 190.363583][ T9591] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 190.441976][ T9595] syzkaller0: entered promiscuous mode [ 190.451196][ T9595] syzkaller0: entered allmulticast mode [ 191.220523][ T9636] vlan1: Caught tx_queue_len zero misconfig [ 191.370080][ T9641] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 191.420403][ T5633] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 191.433251][ T5633] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 191.457101][ T5633] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 191.470499][ T5633] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 191.479587][ T5633] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 191.632845][ T9656] netlink: Unknown conntrack attr (0) [ 191.710148][ T9657] syzkaller0: entered promiscuous mode [ 191.733394][ T9657] syzkaller0: entered allmulticast mode [ 191.904692][ T9668] tipc: Enabled bearer , priority 0 [ 191.927733][ T9664] syzkaller0: entered promiscuous mode [ 191.942050][ T9664] syzkaller0: entered allmulticast mode [ 192.051965][ T9663] tipc: Resetting bearer [ 192.083742][ T9679] Unknown options in mask b7f2 [ 192.095143][ T9663] tipc: Disabling bearer [ 192.887608][ T9727] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode [ 193.073434][ T9735] __nla_validate_parse: 11 callbacks suppressed [ 193.073454][ T9735] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1244'. [ 193.137883][ T9737] tipc: Started in network mode [ 193.160641][ T9737] tipc: Node identity e6e05522f0f1, cluster identity 4711 [ 193.181232][ T9737] tipc: Enabled bearer , priority 0 [ 193.197977][ T9742] syzkaller0: entered promiscuous mode [ 193.211979][ T9742] syzkaller0: entered allmulticast mode [ 193.254636][ T9737] tipc: Resetting bearer [ 193.288896][ T9736] tipc: Resetting bearer [ 193.339675][ T9736] tipc: Disabling bearer [ 193.516480][ T9753] netlink: 44 bytes leftover after parsing attributes in process `syz.7.1248'. [ 193.528017][ T5633] Bluetooth: hci8: command tx timeout [ 193.541508][ T9753] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.549426][ T9753] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.085647][ T9781] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.1259'. [ 194.097258][ T9781] netlink: Unknown conntrack attr (0) [ 194.197825][ T9788] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1260'. [ 194.211038][ T9642] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.220508][ T9642] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.228191][ T9642] bridge_slave_0: entered allmulticast mode [ 194.236389][ T9642] bridge_slave_0: entered promiscuous mode [ 194.245332][ T9788] veth: renamed from veth0_vlan [ 194.261121][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.267946][ T9642] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.275271][ T9642] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.282799][ T9642] bridge_slave_1: entered allmulticast mode [ 194.292228][ T9642] bridge_slave_1: entered promiscuous mode [ 194.362044][ T9642] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 194.399423][ T9642] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 194.400108][ T9794] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1262'. [ 194.412822][ T9790] mac80211_hwsim hwsim8 syzkaller0: left promiscuous mode [ 194.425888][ T9790] mac80211_hwsim hwsim8 syzkaller0: left allmulticast mode [ 194.464275][ T9642] team0: Port device team_slave_0 added [ 194.483611][ T9642] team0: Port device team_slave_1 added [ 194.539957][ T9642] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 194.547154][ T9642] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 194.586731][ T9642] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 194.614428][ T9642] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 194.638470][ T9642] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 194.706321][ T9642] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 194.825948][ T9642] hsr_slave_0: entered promiscuous mode [ 194.848109][ T9642] hsr_slave_1: entered promiscuous mode [ 194.868046][ T9642] debugfs: 'hsr0' already exists in 'hsr' [ 194.892838][ T9642] Cannot create hsr debugfs directory [ 195.067022][ T9818] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1272'. [ 195.438828][ T9642] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 195.450965][ T9642] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 195.462212][ T9642] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 195.491266][ T9642] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 195.499971][ T9642] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 195.529960][ T9642] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 195.544264][ T9642] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 195.556918][ T9642] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 195.606797][ T5633] Bluetooth: hci8: command tx timeout [ 195.692905][ T9642] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.732048][ T9642] 8021q: adding VLAN 0 to HW filter on device team0 [ 195.753276][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.760511][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 195.781739][ T9696] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.788923][ T9696] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.213276][ T9866] netlink: 44 bytes leftover after parsing attributes in process `syz.7.1286'. [ 196.246325][ T9869] netlink: 'syz.4.1288': attribute type 1 has an invalid length. [ 196.328215][ T9870] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1289'. [ 196.344912][ T9870] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1289'. [ 196.378956][ T9869] 8021q: adding VLAN 0 to HW filter on device bond1 [ 196.411403][ T9875] ip_vti0: entered promiscuous mode [ 196.684050][ T9894] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1295'. [ 196.724376][ T9891] syzkaller0: entered promiscuous mode [ 196.734631][ T9891] syzkaller0: entered allmulticast mode [ 196.861107][ T9642] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 197.172791][ T9913] macsec1: entered promiscuous mode [ 197.186820][ T9913] bridge0: entered promiscuous mode [ 197.203605][ T9913] macsec1: entered allmulticast mode [ 197.217337][ T9913] bridge0: entered allmulticast mode [ 197.232736][ T9913] bridge0: port 3(macsec1) entered blocking state [ 197.240240][ T9913] bridge0: port 3(macsec1) entered disabled state [ 197.253849][ T9913] bridge0: left allmulticast mode [ 197.260455][ T9913] bridge0: left promiscuous mode [ 197.358729][ T9642] veth0_vlan: entered promiscuous mode [ 197.411587][ T9642] veth1_vlan: entered promiscuous mode [ 197.503590][ T9642] veth0_macvtap: entered promiscuous mode [ 197.533560][ T9642] veth1_macvtap: entered promiscuous mode [ 197.599179][ T9642] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 197.639601][ T9642] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 197.675846][ T9935] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 197.686996][ T5633] Bluetooth: hci8: command tx timeout [ 197.709870][ T9934] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 197.721964][ T9696] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.732309][ T9694] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.756138][ T9694] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.773051][ T48] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.004048][ T9701] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.027922][ T9701] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.100980][ T9949] __nla_validate_parse: 3 callbacks suppressed [ 198.101000][ T9949] netlink: 116 bytes leftover after parsing attributes in process `syz.2.1316'. [ 198.125910][ T135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.152558][ T135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.202865][ T9954] netlink: 'syz.4.1317': attribute type 4 has an invalid length. [ 198.231832][ T9954] netlink: 208 bytes leftover after parsing attributes in process `syz.4.1317'. [ 198.420060][ T9967] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1320'. [ 198.442600][ T9967] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1320'. [ 198.453715][ T9967] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1320'. [ 198.465701][ T9967] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1320'. [ 198.480727][ T9967] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1320'. [ 198.494533][ T9967] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1320'. [ 198.504814][ T9967] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1320'. [ 198.514483][ T9967] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1320'. [ 198.527817][ T9972] veth0: entered promiscuous mode [ 198.803168][ T9986] IPVS: set_ctl: invalid protocol: 59 127.0.0.1:20003 [ 199.019424][ T9694] nci: nci_rx_work: unknown MT 0x1 [ 199.071182][T10005] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 199.139184][T10005] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 199.168816][ T48] smc: removing ib device syz1 [ 199.191232][ T5742] syz1: Port: 1 Link DOWN [ 199.255647][ T48] smbdirect: ib_dev[syz1] removed [ 199.776901][ T5636] Bluetooth: hci8: command tx timeout [ 201.451403][ T5636] Bluetooth: hci3: command 0x0406 tx timeout [ 201.451689][ T5634] Bluetooth: hci2: command 0x0406 tx timeout [ 201.458457][ T5634] Bluetooth: hci1: command 0x0406 tx timeout [ 201.939780][ T9996] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 201.951865][T10021] netlink: 'syz.8.1337': attribute type 11 has an invalid length. [ 202.220671][T10032] netlink: 'syz.4.1342': attribute type 10 has an invalid length. [ 202.281956][T10032] team0: Port device dummy0 added [ 202.341229][T10036] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 202.429048][T10042] veth0_virt_wifi: Caught tx_queue_len zero misconfig [ 202.540759][T10044] team0: Port device dummy0 removed [ 202.841075][T10062] h: entered promiscuous mode [ 203.215233][T10081] __nla_validate_parse: 11 callbacks suppressed [ 203.215253][T10081] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1360'. [ 203.475026][T10090] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1362'. [ 203.770300][T10102] lo: Caught tx_queue_len zero misconfig [ 203.776398][T10102] netem: change failed [ 203.779792][T10104] Bluetooth: MGMT ver 1.23 [ 204.056874][T10116] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode [ 204.064686][T10116] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode [ 204.819275][T10148] sock: sock_set_timeout: `syz.3.1378' (pid 10148) tries to set negative timeout [ 204.860678][T10154] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 204.878917][T10148] netlink: 'syz.3.1378': attribute type 39 has an invalid length. [ 205.317713][T10175] netlink: 'syz.4.1387': attribute type 20 has an invalid length. [ 205.461390][T10175] netlink: 'syz.4.1387': attribute type 1 has an invalid length. [ 205.574697][T10192] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1392'. [ 205.584189][T10193] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1393'. [ 205.596334][T10192] netlink: 'syz.2.1392': attribute type 5 has an invalid length. [ 205.673675][T10197] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1395'. [ 205.702132][T10197] syzkaller0: entered promiscuous mode [ 205.710673][T10197] syzkaller0: entered allmulticast mode [ 206.371544][T10237] syzkaller0: entered promiscuous mode [ 206.381356][T10237] syzkaller0: entered allmulticast mode [ 206.414736][T10239] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1411'. [ 206.415406][T10237] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1409'. [ 206.543311][T10243] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1413'. [ 206.754896][T10252] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1416'. [ 206.766738][T10252] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1416'. [ 206.909152][T10265] netlink: 'syz.3.1419': attribute type 12 has an invalid length. [ 206.927894][T10265] netlink: 'syz.3.1419': attribute type 29 has an invalid length. [ 206.940590][T10265] netlink: 'syz.3.1419': attribute type 3 has an invalid length. [ 206.948568][T10265] netlink: 'syz.3.1419': attribute type 2 has an invalid length. [ 207.093697][T10277] can: request_module (can-proto-0) failed. [ 207.383054][T10296] netlink: 'syz.8.1428': attribute type 39 has an invalid length. [ 207.397150][T10296] hsr_slave_0: left promiscuous mode [ 207.414043][T10296] hsr_slave_1: left promiscuous mode [ 207.538554][T10304] netlink: Unknown conntrack attr (0) [ 207.730569][T10315] IPVS: sed: FWM 3 0x00000003 - no destination available [ 207.739055][ T48] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 207.755697][ T48] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 207.787598][ T48] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 207.807627][ T48] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 208.091805][T10338] openvswitch: netlink: Flow key attribute not present in set flow. [ 208.256321][T10345] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.424099][ T5633] Bluetooth: hci2: command 0x0406 tx timeout [ 210.953796][T10325] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 211.114462][T10371] netlink: 'syz.3.1450': attribute type 3 has an invalid length. [ 211.329694][T10392] IPVS: set_ctl: invalid protocol: 50 255.255.255.255:20002 [ 211.458330][T10397] __nla_validate_parse: 11 callbacks suppressed [ 211.458348][T10397] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1458'. [ 211.470894][T10399] FAULT_INJECTION: forcing a failure. [ 211.470894][T10399] name failslab, interval 1, probability 0, space 0, times 0 [ 211.478586][T10397] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1458'. [ 211.486711][T10399] CPU: 1 UID: 0 PID: 10399 Comm: syz.8.1459 Not tainted syzkaller #0 PREEMPT(full) [ 211.486733][T10399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 211.486743][T10399] Call Trace: [ 211.486751][T10399] [ 211.486759][T10399] dump_stack_lvl+0xe8/0x150 [ 211.486787][T10399] should_fail_ex+0x412/0x560 [ 211.486816][T10399] should_failslab+0xa8/0x100 [ 211.486844][T10399] __kmalloc_node_noprof+0xf0/0x7c0 [ 211.486869][T10399] ? alloc_slab_obj_exts+0xbf/0x250 [ 211.486906][T10399] alloc_slab_obj_exts+0xbf/0x250 [ 211.486929][T10399] __memcg_slab_post_alloc_hook+0x5c4/0xe80 [ 211.486971][T10399] ? dst_alloc+0x105/0x170 [ 211.487002][T10399] kmem_cache_alloc_noprof+0x347/0x650 [ 211.487023][T10399] ? dst_alloc+0x105/0x170 [ 211.487043][T10399] ? ip6_pol_route+0x160/0x13d0 [ 211.487061][T10399] ? kmem_cache_alloc_noprof+0x15a/0x650 [ 211.487084][T10399] ? __pfx_ip6_dst_gc+0x10/0x10 [ 211.487103][T10399] dst_alloc+0x105/0x170 [ 211.487131][T10399] ip6_pol_route+0xafb/0x13d0 [ 211.487149][T10399] ? ip6_pol_route+0x160/0x13d0 [ 211.487172][T10399] ? __pfx_ip6_pol_route+0x10/0x10 [ 211.487208][T10399] fib6_rule_lookup+0x222/0x730 [ 211.487227][T10399] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 211.487247][T10399] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 211.487267][T10399] ? ip6_route_output_flags+0x2e/0x5d0 [ 211.487285][T10399] ? lock_acquire+0x106/0x350 [ 211.487305][T10399] ? ip6_route_output_flags+0x2e/0x5d0 [ 211.487340][T10399] ip6_route_output_flags+0x364/0x5d0 [ 211.487358][T10399] ? ip6_route_output_flags+0x2e/0x5d0 [ 211.487380][T10399] __nf_ip6_route+0x42/0xd0 [ 211.487400][T10399] nf_send_unreach6+0x4bb/0xba0 [ 211.487434][T10399] ? __pfx_nf_send_unreach6+0x10/0x10 [ 211.487476][T10399] ? siphash_3u32+0x25/0x250 [ 211.487500][T10399] ? nft_trace_init+0x283/0x4c0 [ 211.487520][T10399] ? __pfx_nft_trace_init+0x10/0x10 [ 211.487540][T10399] nft_reject_inet_eval+0x441/0x690 [ 211.487566][T10399] nft_do_chain+0x48d/0x1ae0 [ 211.487583][T10399] ? __local_bh_enable_ip+0xd0/0x130 [ 211.487615][T10399] ? __pfx_nft_do_chain+0x10/0x10 [ 211.487663][T10399] ? nf_nat_ipv6_fn+0xf3/0x2f0 [ 211.487689][T10399] nft_do_chain_inet+0x360/0x4b0 [ 211.487719][T10399] ? nf_nat_ipv6_in+0xed/0x2c0 [ 211.487740][T10399] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 211.487766][T10399] ? nf_nat_ipv6_in+0x203/0x2c0 [ 211.487788][T10399] ? __pfx_nf_nat_ipv6_in+0x10/0x10 [ 211.487809][T10399] ? lock_acquire+0x106/0x350 [ 211.487828][T10399] ? NF_HOOK+0x9e/0x3c0 [ 211.487850][T10399] ? ip_sabotage_in+0x57/0x270 [ 211.487872][T10399] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 211.487899][T10399] nf_hook_slow+0xc5/0x220 [ 211.487928][T10399] NF_HOOK+0x21f/0x3c0 [ 211.487952][T10399] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 211.487974][T10399] ? NF_HOOK+0x9e/0x3c0 [ 211.487994][T10399] ? __pfx_NF_HOOK+0x10/0x10 [ 211.488019][T10399] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 211.488049][T10399] ? netif_receive_skb+0x102/0xbf0 [ 211.488076][T10399] netif_receive_skb+0x278/0xbf0 [ 211.488107][T10399] ? __pfx_netif_receive_skb+0x10/0x10 [ 211.488138][T10399] ? tun_rx_batched+0x185/0x790 [ 211.488162][T10399] tun_rx_batched+0x1de/0x790 [ 211.488180][T10399] ? __build_skb+0x62/0x440 [ 211.488209][T10399] ? __pfx_tun_rx_batched+0x10/0x10 [ 211.488229][T10399] ? tun_get_user+0x2787/0x43e0 [ 211.488250][T10399] ? tun_get_user+0x2787/0x43e0 [ 211.488271][T10399] ? tun_get_user+0x2394/0x43e0 [ 211.488290][T10399] ? tun_get_user+0x2394/0x43e0 [ 211.488309][T10399] ? __local_bh_enable_ip+0xd0/0x130 [ 211.488332][T10399] tun_get_user+0x2bbc/0x43e0 [ 211.488356][T10399] ? tun_get_user+0x2787/0x43e0 [ 211.488393][T10399] ? aa_file_perm+0x50e/0x15e0 [ 211.488416][T10399] ? __pfx_tun_get_user+0x10/0x10 [ 211.488439][T10399] ? __lock_acquire+0x6b5/0x2cf0 [ 211.488477][T10399] ? ref_tracker_alloc+0x35c/0x4c0 [ 211.488503][T10399] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 211.488526][T10399] ? tun_get+0x1c/0x2f0 [ 211.488546][T10399] ? tun_get+0x1c/0x2f0 [ 211.488572][T10399] ? tun_get+0x1c/0x2f0 [ 211.488591][T10399] ? tun_get+0x1c/0x2f0 [ 211.488615][T10399] tun_chr_write_iter+0x113/0x200 [ 211.488639][T10399] vfs_write+0x61d/0xb90 [ 211.488673][T10399] ? __pfx_vfs_write+0x10/0x10 [ 211.488707][T10399] ? __fget_files+0x2a/0x420 [ 211.488736][T10399] ksys_write+0x150/0x270 [ 211.488763][T10399] ? __pfx_ksys_write+0x10/0x10 [ 211.488801][T10399] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.488820][T10399] do_syscall_64+0x15f/0xf80 [ 211.488841][T10399] ? trace_irq_disable+0x3b/0x140 [ 211.488866][T10399] ? clear_bhb_loop+0x40/0x90 [ 211.488888][T10399] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.488905][T10399] RIP: 0033:0x7f747a95d60e [ 211.488922][T10399] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 211.488936][T10399] RSP: 002b:00007f747b815fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 211.488955][T10399] RAX: ffffffffffffffda RBX: 00007f747b8166c0 RCX: 00007f747a95d60e [ 211.488968][T10399] RDX: 000000000000004e RSI: 0000200000000600 RDI: 00000000000000c8 [ 211.488978][T10399] RBP: 00007f747b816090 R08: 0000000000000000 R09: 0000000000000000 [ 211.488989][T10399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 211.488999][T10399] R13: 00007f747ac16038 R14: 00007f747ac15fa0 R15: 00007ffc9d4a86f8 [ 211.489038][T10399] [ 211.961914][ T5628] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 211.977802][T10406] tunl0: Caught tx_queue_len zero misconfig [ 212.005901][ T5628] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 212.067583][ T5628] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 212.077937][ T5628] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 212.089944][ T5628] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 212.175091][T10420] netlink: 60 bytes leftover after parsing attributes in process `syz.8.1462'. [ 212.278702][T10425] veth0: entered promiscuous mode [ 212.298145][T10425] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1463'. [ 212.304617][T10415] netlink: 'syz.8.1462': attribute type 12 has an invalid length. [ 212.332315][T10415] netlink: 'syz.8.1462': attribute type 29 has an invalid length. [ 212.346025][T10415] netlink: 148 bytes leftover after parsing attributes in process `syz.8.1462'. [ 212.363370][T10415] netlink: 'syz.8.1462': attribute type 1 has an invalid length. [ 212.373201][T10415] netlink: 'syz.8.1462': attribute type 2 has an invalid length. [ 212.381450][T10415] netlink: 7 bytes leftover after parsing attributes in process `syz.8.1462'. [ 212.428414][T10428] pimreg: entered allmulticast mode [ 212.556000][T10422] veth0: left promiscuous mode [ 212.612604][T10442] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1466'. [ 212.728016][T10445] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.1467'. [ 212.760009][T10445] netlink: Unknown conntrack attr (0) [ 213.228674][T10470] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1477'. [ 213.394912][T10481] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1480'. [ 213.531023][T10484] Unknown options in mask b7f2 [ 214.136816][T10504] FAULT_INJECTION: forcing a failure. [ 214.136816][T10504] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 214.161843][T10504] CPU: 0 UID: 0 PID: 10504 Comm: syz.3.1488 Not tainted syzkaller #0 PREEMPT(full) [ 214.161870][T10504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 214.161880][T10504] Call Trace: [ 214.161887][T10504] [ 214.161895][T10504] dump_stack_lvl+0xe8/0x150 [ 214.161922][T10504] should_fail_ex+0x412/0x560 [ 214.161949][T10504] _copy_from_user+0x2d/0xb0 [ 214.161973][T10504] ___sys_sendmsg+0x1c6/0x360 [ 214.161996][T10504] ? __lock_acquire+0x6b5/0x2cf0 [ 214.162018][T10504] ? __pfx____sys_sendmsg+0x10/0x10 [ 214.162072][T10504] ? __fget_files+0x2a/0x420 [ 214.162093][T10504] ? __fget_files+0x3a0/0x420 [ 214.162130][T10504] __x64_sys_sendmsg+0x1bd/0x2a0 [ 214.162155][T10504] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 214.162187][T10504] ? __pfx_ksys_write+0x10/0x10 [ 214.162220][T10504] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.162239][T10504] do_syscall_64+0x15f/0xf80 [ 214.162261][T10504] ? trace_irq_disable+0x3b/0x140 [ 214.162287][T10504] ? clear_bhb_loop+0x40/0x90 [ 214.162310][T10504] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.162328][T10504] RIP: 0033:0x7f811479cdd9 [ 214.162345][T10504] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 214.162360][T10504] RSP: 002b:00007f8115690028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 214.162380][T10504] RAX: ffffffffffffffda RBX: 00007f8114a15fa0 RCX: 00007f811479cdd9 [ 214.162392][T10504] RDX: 0000000000000000 RSI: 00002000000004c0 RDI: 0000000000000004 [ 214.162403][T10504] RBP: 00007f8115690090 R08: 0000000000000000 R09: 0000000000000000 [ 214.162414][T10504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 214.162425][T10504] R13: 00007f8114a16038 R14: 00007f8114a15fa0 R15: 00007fff6de26598 [ 214.162453][T10504] [ 214.167085][ T5628] Bluetooth: hci9: command tx timeout [ 214.424496][T10517] Unknown options in mask b7f2 [ 214.648298][T10529] geneve3: entered promiscuous mode [ 214.659055][T10407] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.676882][T10407] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.684282][T10407] bridge_slave_0: entered allmulticast mode [ 214.692278][T10407] bridge_slave_0: entered promiscuous mode [ 214.702106][T10407] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.709359][T10407] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.716827][T10407] bridge_slave_1: entered allmulticast mode [ 214.726060][T10407] bridge_slave_1: entered promiscuous mode [ 214.758348][ T48] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 40409 - 0 [ 214.767684][ T48] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 40409 - 0 [ 214.910555][ T48] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 40409 - 0 [ 214.943684][ T48] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 40409 - 0 [ 214.959482][T10407] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 214.990593][T10407] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 215.130996][T10407] team0: Port device team_slave_0 added [ 215.152046][T10407] team0: Port device team_slave_1 added [ 215.228565][T10557] tipc: Enabled bearer , priority 0 [ 215.236389][T10407] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 215.245096][T10407] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 215.275590][T10407] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 215.289560][T10557] syzkaller0: entered promiscuous mode [ 215.296054][T10557] syzkaller0: entered allmulticast mode [ 215.308335][T10407] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 215.316124][T10407] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 215.348419][T10407] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 215.396108][T10557] tipc: Resetting bearer [ 215.440093][T10556] tipc: Resetting bearer [ 215.491880][ T10] IPVS: starting estimator thread 0... [ 215.498980][T10556] tipc: Disabling bearer [ 215.551991][T10407] hsr_slave_0: entered promiscuous mode [ 215.563061][T10407] hsr_slave_1: entered promiscuous mode [ 215.581465][T10407] debugfs: 'hsr0' already exists in 'hsr' [ 215.587412][T10564] IPVS: using max 30 ests per chain, 72000 per kthread [ 215.604730][T10407] Cannot create hsr debugfs directory [ 216.406936][ T5628] Bluetooth: hci9: command tx timeout [ 218.486851][ T5628] Bluetooth: hci9: command tx timeout [ 218.776113][T10582] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 218.807988][T10407] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 218.868276][T10407] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 218.893143][T10407] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 218.955065][T10407] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 218.976929][T10644] SET target dimension over the limit! [ 218.988409][T10407] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 219.003005][T10647] __nla_validate_parse: 3 callbacks suppressed [ 219.003025][T10647] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1530'. [ 219.030914][T10407] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 219.091658][T10407] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 219.120196][T10407] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 219.143232][T10650] tipc: Started in network mode [ 219.149541][T10650] tipc: Node identity aa42514b6e58, cluster identity 4711 [ 219.157911][T10650] tipc: Enabled bearer , priority 0 [ 219.169360][T10650] syzkaller0: entered promiscuous mode [ 219.176219][T10650] syzkaller0: entered allmulticast mode [ 219.236013][T10664] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.1534'. [ 219.248454][T10650] tipc: Resetting bearer [ 219.273984][T10664] netlink: Unknown conntrack attr (0) [ 219.293709][T10649] tipc: Resetting bearer [ 219.340885][T10649] tipc: Disabling bearer [ 219.359802][T10669] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1536'. [ 219.383763][T10669] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1536'. [ 219.531225][T10407] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.583869][T10407] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.629363][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.636658][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.655165][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.662370][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.085977][T10407] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 220.313618][T10407] veth0_vlan: entered promiscuous mode [ 220.325959][T10407] veth1_vlan: entered promiscuous mode [ 220.358852][T10407] veth0_macvtap: entered promiscuous mode [ 220.369053][T10407] veth1_macvtap: entered promiscuous mode [ 220.389240][T10407] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 220.406415][T10407] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 220.422387][ T12] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.433326][ T12] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.449436][ T12] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.458480][ T12] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.577097][ T5628] Bluetooth: hci9: command tx timeout [ 222.552298][T10680] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 222.693324][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.709521][T10713] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1543'. [ 222.723438][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.772740][ T9694] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.793062][ T9694] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.848245][T10718] tipc: Enabled bearer , priority 0 [ 222.862157][T10720] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.1546'. [ 222.875596][T10720] netlink: Unknown conntrack attr (0) [ 222.939125][T10718] syzkaller0: entered promiscuous mode [ 222.945683][T10718] syzkaller0: entered allmulticast mode [ 222.952622][T10718] tipc: Resetting bearer [ 222.980850][T10727] tipc: Enabled bearer , priority 0 [ 222.991453][T10727] syzkaller0: entered promiscuous mode [ 222.998230][T10727] syzkaller0: entered allmulticast mode [ 223.073788][T10727] tipc: Resetting bearer [ 223.095703][T10726] tipc: Resetting bearer [ 223.104475][T10731] can: request_module (can-proto-0) failed. [ 223.134768][T10726] tipc: Disabling bearer [ 223.180643][T10737] netlink: 44 bytes leftover after parsing attributes in process `syz.9.1549'. [ 223.784127][T10714] tipc: Resetting bearer [ 223.811132][T10752] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1555'. [ 225.948713][T10714] tipc: Disabling bearer [ 225.970764][ T24] tipc: Node number set to 3290059083 [ 226.104983][T10802] syzkaller1: entered promiscuous mode [ 226.111067][T10802] syzkaller1: entered allmulticast mode [ 226.898844][T10840] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1576'. [ 227.050888][T10846] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1577'. [ 227.564838][T10858] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1581'. [ 227.581215][T10859] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1581'. [ 227.633542][T10790] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 227.785058][T10868] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1584'. [ 228.138142][T10892] syzkaller0: entered promiscuous mode [ 228.151401][T10892] syzkaller0: entered allmulticast mode [ 228.771947][T10914] syzkaller0: entered promiscuous mode [ 228.789157][T10914] syzkaller0: entered allmulticast mode [ 228.854588][T10914] FAULT_INJECTION: forcing a failure. [ 228.854588][T10914] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 228.871230][T10914] CPU: 1 UID: 0 PID: 10914 Comm: syz.9.1599 Not tainted syzkaller #0 PREEMPT(full) [ 228.871255][T10914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 228.871266][T10914] Call Trace: [ 228.871273][T10914] [ 228.871281][T10914] dump_stack_lvl+0xe8/0x150 [ 228.871308][T10914] should_fail_ex+0x412/0x560 [ 228.871337][T10914] _copy_from_user+0x2d/0xb0 [ 228.871362][T10914] ____sys_sendmsg+0x308/0x9f0 [ 228.871393][T10914] ? __pfx_____sys_sendmsg+0x10/0x10 [ 228.871425][T10914] ? import_iovec+0x73/0xa0 [ 228.871451][T10914] ___sys_sendmsg+0x2a5/0x360 [ 228.871490][T10914] ? __lock_acquire+0x6b5/0x2cf0 [ 228.871515][T10914] ? __pfx____sys_sendmsg+0x10/0x10 [ 228.871542][T10914] ? kstrtouint+0x6e/0xe0 [ 228.871588][T10914] ? __fget_files+0x2a/0x420 [ 228.871609][T10914] ? __fget_files+0x3a0/0x420 [ 228.871639][T10914] __sys_sendmmsg+0x27c/0x4e0 [ 228.871667][T10914] ? __pfx___sys_sendmmsg+0x10/0x10 [ 228.871687][T10914] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 228.871741][T10914] ? ksys_write+0x242/0x270 [ 228.871768][T10914] ? __pfx_ksys_write+0x10/0x10 [ 228.871799][T10914] __x64_sys_sendmmsg+0xa0/0xc0 [ 228.871821][T10914] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.871841][T10914] do_syscall_64+0x15f/0xf80 [ 228.871861][T10914] ? trace_irq_disable+0x3b/0x140 [ 228.871887][T10914] ? clear_bhb_loop+0x40/0x90 [ 228.871908][T10914] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.871926][T10914] RIP: 0033:0x7fc7dab9cdd9 [ 228.871944][T10914] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 228.871958][T10914] RSP: 002b:00007fc7db98d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 228.871978][T10914] RAX: ffffffffffffffda RBX: 00007fc7dae15fa0 RCX: 00007fc7dab9cdd9 [ 228.871991][T10914] RDX: 0000000000000001 RSI: 0000200000000a00 RDI: 0000000000000003 [ 228.872002][T10914] RBP: 00007fc7db98d090 R08: 0000000000000000 R09: 0000000000000000 [ 228.872013][T10914] R10: 0000000008000004 R11: 0000000000000246 R12: 0000000000000001 [ 228.872024][T10914] R13: 00007fc7dae16038 R14: 00007fc7dae15fa0 R15: 00007ffe88fb89f8 [ 228.872054][T10914] [ 229.172125][T10920] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 229.192586][T10920] bond2: (slave lo): Enslaving as an active interface with an up link [ 229.222020][T10920] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 229.321528][T10932] FAULT_INJECTION: forcing a failure. [ 229.321528][T10932] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 229.335906][T10932] CPU: 1 UID: 0 PID: 10932 Comm: syz.4.1608 Not tainted syzkaller #0 PREEMPT(full) [ 229.335930][T10932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 229.335940][T10932] Call Trace: [ 229.335947][T10932] [ 229.335955][T10932] dump_stack_lvl+0xe8/0x150 [ 229.335980][T10932] should_fail_ex+0x412/0x560 [ 229.336008][T10932] _copy_from_user+0x2d/0xb0 [ 229.336033][T10932] kstrtouint_from_user+0xd6/0x180 [ 229.336057][T10932] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 229.336095][T10932] proc_fail_nth_write+0x8e/0x210 [ 229.336118][T10932] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 229.336145][T10932] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 229.336168][T10932] vfs_write+0x29a/0xb90 [ 229.336201][T10932] ? __pfx_vfs_write+0x10/0x10 [ 229.336234][T10932] ? __fget_files+0x2a/0x420 [ 229.336259][T10932] ? __fget_files+0x3a0/0x420 [ 229.336278][T10932] ? __fget_files+0x2a/0x420 [ 229.336304][T10932] ksys_write+0x150/0x270 [ 229.336330][T10932] ? __pfx_ksys_write+0x10/0x10 [ 229.336360][T10932] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.336379][T10932] do_syscall_64+0x15f/0xf80 [ 229.336403][T10932] ? trace_irq_disable+0x3b/0x140 [ 229.336423][T10932] ? clear_bhb_loop+0x40/0x90 [ 229.336440][T10932] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.336453][T10932] RIP: 0033:0x7f3a4e95d60e [ 229.336468][T10932] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 229.336480][T10932] RSP: 002b:00007f3a4f920fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 229.336497][T10932] RAX: ffffffffffffffda RBX: 00007f3a4f9216c0 RCX: 00007f3a4e95d60e [ 229.336506][T10932] RDX: 0000000000000001 RSI: 00007f3a4f9210a0 RDI: 0000000000000004 [ 229.336514][T10932] RBP: 00007f3a4f921090 R08: 0000000000000000 R09: 0000000000000000 [ 229.336522][T10932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 229.336529][T10932] R13: 00007f3a4ec16038 R14: 00007f3a4ec15fa0 R15: 00007ffd1378b898 [ 229.336553][T10932] [ 229.347099][T10931] team0: No ports can be present during mode change [ 229.574707][T10939] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1609'. [ 230.017019][T10946] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.027459][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.097485][T10951] netlink: 'syz.9.1613': attribute type 30 has an invalid length. [ 230.111162][T10950] syzkaller0: entered promiscuous mode [ 230.121747][T10950] syzkaller0: entered allmulticast mode [ 230.241037][T10958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.249489][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.280282][T10955] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.288246][T10955] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.409366][T10955] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 230.454167][T10947] syzkaller0: entered promiscuous mode [ 230.461366][T10947] syzkaller0: entered allmulticast mode [ 230.489893][T10961] syzkaller1: entered promiscuous mode [ 230.495532][T10961] syzkaller1: entered allmulticast mode [ 230.713684][T10973] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 230.845198][T10983] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1624'. [ 230.918830][T10988] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1625'. [ 231.739572][T11018] netlink: 'syz.9.1632': attribute type 12 has an invalid length. [ 231.786279][T11018] netlink: 'syz.9.1632': attribute type 29 has an invalid length. [ 231.793823][T11016] netlink: 60 bytes leftover after parsing attributes in process `syz.9.1632'. [ 231.794538][T11018] netlink: 148 bytes leftover after parsing attributes in process `syz.9.1632'. [ 231.844738][T11018] netlink: 'syz.9.1632': attribute type 3 has an invalid length. [ 231.878365][T11018] netlink: 'syz.9.1632': attribute type 2 has an invalid length. [ 232.108236][T11043] __nla_validate_parse: 1 callbacks suppressed [ 232.108255][T11043] netlink: 212348 bytes leftover after parsing attributes in process `syz.9.1638'. [ 232.163048][T11043] netlink: Unknown conntrack attr (0) [ 232.303980][T11051] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1639'. [ 233.137081][T11077] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1647'. [ 233.179132][T11077] netlink: 'syz.2.1647': attribute type 1 has an invalid length. [ 233.195178][T11081] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1649'. [ 233.198077][T11077] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1647'. [ 233.217992][T11083] netlink: 212348 bytes leftover after parsing attributes in process `syz.9.1650'. [ 233.230807][T11083] netlink: Unknown conntrack attr (0) [ 233.384548][T11091] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1652'. [ 233.410743][T11091] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1652'. [ 233.421280][T11091] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1652'. [ 233.433784][T11091] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1652'. [ 233.639172][T11100] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.647595][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.331563][T11144] syzkaller0: entered promiscuous mode [ 234.343032][T11144] syzkaller0: entered allmulticast mode [ 234.372153][T11143] syzkaller0: entered promiscuous mode [ 234.376330][T11146] net_ratelimit: 4 callbacks suppressed [ 234.376346][T11146] netlink: Unknown conntrack attr (0) [ 234.397215][T11143] syzkaller0: entered allmulticast mode [ 235.212200][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.221802][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.243268][ T9701] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.253206][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.348168][ T5633] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 235.360301][ T5633] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 235.369592][ T5633] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 235.379838][ T5633] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 235.388902][ T5633] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 236.172966][T11222] syzkaller0: entered promiscuous mode [ 236.196014][T11222] syzkaller0: entered allmulticast mode [ 236.456086][T11234] netlink: 'syz.8.1695': attribute type 13 has an invalid length. [ 236.713396][T11246] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.721860][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.963515][T11260] tipc: Enabling of bearer rejected, failed to enable media [ 237.130312][T11270] __nla_validate_parse: 8 callbacks suppressed [ 237.130332][T11270] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1703'. [ 237.146162][T11267] netlink: 'syz.4.1705': attribute type 1 has an invalid length. [ 237.255381][T11276] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1707'. [ 237.290110][T11276] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1707'. [ 237.448103][ T5633] Bluetooth: hci10: command tx timeout [ 237.504444][T11287] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1708'. [ 237.533322][T11288] netlink: 32 bytes leftover after parsing attributes in process `syz.8.1703'. [ 237.681482][T11293] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1709'. [ 237.973070][T11201] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.017844][T11201] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.043999][T11201] bridge_slave_0: entered allmulticast mode [ 238.088520][T11201] bridge_slave_0: entered promiscuous mode [ 238.112579][T11309] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.120393][T11201] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.140118][T11201] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.160759][T11201] bridge_slave_1: entered allmulticast mode [ 238.185835][T11201] bridge_slave_1: entered promiscuous mode [ 238.361982][T11328] IPVS: sed: FWM 3 0x00000003 - no destination available [ 238.371291][T11328] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.427527][T11201] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 238.500629][T11201] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 238.633567][T11201] team0: Port device team_slave_0 added [ 238.664242][T11201] team0: Port device team_slave_1 added [ 238.750970][T11340] syzkaller0: entered promiscuous mode [ 238.762226][T11340] syzkaller0: entered allmulticast mode [ 238.775121][T11348] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1723'. [ 238.795740][T11201] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 238.810673][T11201] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 238.841642][T11349] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1723'. [ 238.854608][T11201] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 238.873112][T11201] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 238.880763][T11201] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 238.920976][T11201] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 239.154866][T11201] hsr_slave_0: entered promiscuous mode [ 239.169897][T11201] hsr_slave_1: entered promiscuous mode [ 239.193197][T11201] debugfs: 'hsr0' already exists in 'hsr' [ 239.229586][T11201] Cannot create hsr debugfs directory [ 239.402132][T11375] netlink: 'syz.8.1729': attribute type 1 has an invalid length. [ 239.427110][T11375] netlink: 'syz.8.1729': attribute type 2 has an invalid length. [ 239.456712][T11375] netlink: 'syz.8.1729': attribute type 1 has an invalid length. [ 239.526902][ T5633] Bluetooth: hci10: command tx timeout [ 239.795132][T11402] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1735'. [ 239.805965][T11398] syzkaller0: entered promiscuous mode [ 239.835794][T11398] syzkaller0: entered allmulticast mode [ 240.308278][T11201] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 240.441230][T11201] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.682482][T11446] netlink: 'syz.9.1741': attribute type 12 has an invalid length. [ 240.729406][T11446] netlink: 'syz.9.1741': attribute type 12 has an invalid length. [ 240.814129][T11201] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 240.840984][T11201] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.871041][T11446] netlink: 'syz.9.1741': attribute type 12 has an invalid length. [ 240.894953][T11446] netlink: 'syz.9.1741': attribute type 12 has an invalid length. [ 240.967904][ T9700] net_ratelimit: 7 callbacks suppressed [ 240.967924][ T9700] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.982143][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.053441][T11201] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 241.083892][T11201] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.139704][T11446] netlink: 'syz.9.1741': attribute type 12 has an invalid length. [ 241.308662][T11201] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 241.334942][T11201] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.609891][ T5633] Bluetooth: hci10: command tx timeout [ 241.812909][T11499] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1756'. [ 241.948755][T11201] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 241.976878][T11201] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 241.992579][T11201] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 242.023839][T11201] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 242.051312][T11201] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 242.092160][T11201] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 242.120680][T11201] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 242.151630][T11201] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 242.313309][T11527] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1764'. [ 242.402040][T11201] 8021q: adding VLAN 0 to HW filter on device bond0 [ 242.402448][T11529] netlink: 212348 bytes leftover after parsing attributes in process `syz.8.1765'. [ 242.424004][T11529] netlink: Unknown conntrack attr (0) [ 242.481508][T11201] 8021q: adding VLAN 0 to HW filter on device team0 [ 242.494508][T11534] validate_nla: 28 callbacks suppressed [ 242.494526][T11534] netlink: 'syz.2.1767': attribute type 1 has an invalid length. [ 242.605714][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.612942][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.683422][T11534] bond3: entered promiscuous mode [ 242.689007][T11534] 8021q: adding VLAN 0 to HW filter on device bond3 [ 242.732278][ T9696] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.739521][ T9696] bridge0: port 2(bridge_slave_1) entered forwarding state [ 243.020362][T11563] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.1778'. [ 243.033550][T11563] netlink: Unknown conntrack attr (0) [ 243.134327][T11569] netlink: 'syz.9.1779': attribute type 1 has an invalid length. [ 243.205472][T11569] bond1: (slave gretap1): making interface the new active one [ 243.215768][T11569] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 243.270505][T11577] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1777'. [ 243.341122][T11577] IPVS: set_ctl: invalid protocol: 50 100.1.1.0:20004 [ 243.474397][T11586] netlink: 'syz.9.1782': attribute type 12 has an invalid length. [ 243.482994][T11586] netlink: 'syz.9.1782': attribute type 29 has an invalid length. [ 243.491256][T11586] netlink: 148 bytes leftover after parsing attributes in process `syz.9.1782'. [ 243.502190][T11586] netlink: 'syz.9.1782': attribute type 3 has an invalid length. [ 243.510034][T11586] netlink: 'syz.9.1782': attribute type 2 has an invalid length. [ 243.518833][T11586] netlink: 35 bytes leftover after parsing attributes in process `syz.9.1782'. [ 243.529686][T11589] netlink: 60 bytes leftover after parsing attributes in process `syz.9.1782'. [ 243.686957][ T5633] Bluetooth: hci10: command tx timeout [ 243.790498][T11201] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 243.871717][T11201] veth0_vlan: entered promiscuous mode [ 243.899387][T11201] veth1_vlan: entered promiscuous mode [ 244.051330][T11201] veth0_macvtap: entered promiscuous mode [ 244.107014][T11201] veth1_macvtap: entered promiscuous mode [ 244.182380][T11201] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 244.210431][T11609] netlink: 212348 bytes leftover after parsing attributes in process `syz.8.1789'. [ 244.223101][T11201] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 244.239990][T11609] netlink: Unknown conntrack attr (0) [ 244.252028][ T57] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.284185][ T57] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.316187][ T57] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.325214][T11613] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1791'. [ 244.358330][ T57] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.383729][T11607] syzkaller0: entered promiscuous mode [ 244.392804][T11607] syzkaller0: entered allmulticast mode [ 244.408518][T11607] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 244.424327][T11615] netlink: 'syz.8.1792': attribute type 12 has an invalid length. [ 244.435508][T11615] netlink: 'syz.8.1792': attribute type 29 has an invalid length. [ 244.444255][T11615] netlink: 148 bytes leftover after parsing attributes in process `syz.8.1792'. [ 244.454455][T11615] netlink: 'syz.8.1792': attribute type 3 has an invalid length. [ 244.462823][T11615] netlink: 'syz.8.1792': attribute type 2 has an invalid length. [ 244.754748][ T89] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.781693][ T89] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.842710][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.858459][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.001719][T11641] tipc: Enabled bearer , priority 0 [ 245.016402][T11641] syzkaller0: entered promiscuous mode [ 245.023582][T11641] syzkaller0: entered allmulticast mode [ 245.078731][T11641] tipc: Resetting bearer [ 245.119119][T11639] tipc: Resetting bearer [ 245.152987][T11639] tipc: Disabling bearer [ 245.372570][T11658] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 245.381360][T11658] IPv6: NLM_F_CREATE should be set when creating new route [ 245.386035][T11660] syzkaller0: entered promiscuous mode [ 245.395085][T11660] syzkaller0: entered allmulticast mode [ 246.291225][T11710] »»»»»»: renamed from vlan1 (while UP) [ 246.538118][T11714] bond3: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 246.660127][T11719] bond3 (unregistering): (slave ip6gretap1): Releasing backup interface [ 246.699539][T11719] bond3 (unregistering): Released all slaves [ 246.771969][T11734] tipc: Started in network mode [ 246.777902][T11734] tipc: Node identity 5afa461e843, cluster identity 4711 [ 246.785274][T11734] tipc: Enabled bearer , priority 0 [ 246.838100][T11728] syzkaller0: entered promiscuous mode [ 246.857205][T11728] syzkaller0: entered allmulticast mode [ 246.958095][T11728] tipc: Resetting bearer [ 247.030691][T11747] syzkaller0: entered promiscuous mode [ 247.038912][T11747] syzkaller0: entered allmulticast mode [ 247.476179][T11727] tipc: Resetting bearer [ 247.497070][T11727] tipc: Disabling bearer [ 247.519639][T11764] __nla_validate_parse: 15 callbacks suppressed [ 247.519658][T11764] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1846'. [ 247.535525][T11765] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1846'. [ 247.579811][T11765] 8021q: adding VLAN 0 to HW filter on device bond1 [ 247.594809][T11764] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1846'. [ 247.654484][T11764] macvlan3: entered promiscuous mode [ 247.667163][T11764] macvlan3: entered allmulticast mode [ 247.691397][T11764] bond1: entered promiscuous mode [ 247.722689][T11764] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 247.768534][T11764] bond1: left promiscuous mode [ 247.802621][T11765] macvlan3: entered promiscuous mode [ 247.808138][T11765] macvlan3: entered allmulticast mode [ 247.814405][T11765] bond1: entered promiscuous mode [ 247.820255][T11765] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 247.829286][T11765] bond1: left promiscuous mode [ 247.914790][T11781] syzkaller0: entered promiscuous mode [ 247.920797][T11781] syzkaller0: entered allmulticast mode [ 248.323233][T11807] syzkaller0: entered promiscuous mode [ 248.329281][T11807] syzkaller0: entered allmulticast mode [ 249.489250][T11815] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1861'. [ 249.502438][T11815] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 249.509728][T11815] IPv6: NLM_F_CREATE should be set when creating new route [ 249.600985][T11819] syzkaller0: entered promiscuous mode [ 249.606493][T11819] syzkaller0: entered allmulticast mode [ 249.638757][T11820] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.645987][T11820] bridge0: port 2(bridge_slave_1) entered listening state [ 249.653410][T11820] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.660567][T11820] bridge0: port 1(bridge_slave_0) entered listening state [ 249.831697][T11826] syzkaller0: entered promiscuous mode [ 249.838408][T11826] syzkaller0: entered allmulticast mode [ 249.960715][T11828] netlink: 212408 bytes leftover after parsing attributes in process `syz.9.1866'. [ 251.119858][T11792] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 251.385458][T11843] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 251.421775][T11846] validate_nla: 6 callbacks suppressed [ 251.421793][T11846] netlink: 'syz.4.1873': attribute type 1 has an invalid length. [ 251.445140][T11846] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1873'. [ 251.483106][T11846] pimreg: entered allmulticast mode [ 251.503213][T11846] netlink: 'syz.4.1873': attribute type 5 has an invalid length. [ 251.558933][T11853] syzkaller0: entered promiscuous mode [ 251.569638][T11853] syzkaller0: entered allmulticast mode [ 251.765409][T11862] tipc: Enabled bearer , priority 0 [ 251.774626][T11862] syzkaller0: entered promiscuous mode [ 251.780779][T11862] syzkaller0: entered allmulticast mode [ 251.817849][T11862] tipc: Resetting bearer [ 251.834111][T11861] tipc: Resetting bearer [ 251.862013][T11861] tipc: Disabling bearer [ 252.276546][T11882] netlink: 'syz.9.1886': attribute type 1 has an invalid length. [ 252.463474][T11887] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1888'. [ 253.666278][T11912] syzkaller0: entered promiscuous mode [ 253.671822][T11912] syzkaller0: entered allmulticast mode [ 254.360287][T11920] syzkaller0: entered promiscuous mode [ 254.365801][T11920] syzkaller0: entered allmulticast mode [ 254.935403][T11869] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 255.701890][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.682635][T11959] netlink: 44 bytes leftover after parsing attributes in process `syz.9.1913'. [ 256.725896][T11963] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1914'. [ 256.740061][T11963] openvswitch: netlink: Unknown nsh attribute 0 [ 256.864300][T11965] tipc: Started in network mode [ 256.870935][T11965] tipc: Node identity 66b5ff970dd1, cluster identity 4711 [ 256.879595][T11965] tipc: Enabled bearer , priority 0 [ 256.921424][T11965] syzkaller0: entered promiscuous mode [ 256.926978][T11965] syzkaller0: entered allmulticast mode [ 256.933151][T11965] tipc: Resetting bearer [ 256.950165][T11964] tipc: Resetting bearer [ 257.044924][T11972] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1916'. [ 257.177138][T11977] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1917'. [ 258.721915][T11964] tipc: Disabling bearer [ 258.732769][T11975] syzkaller0: entered promiscuous mode [ 258.738322][T11975] syzkaller0: entered allmulticast mode [ 258.754093][ T5734] tipc: Node number set to 1801781143 [ 259.169024][T12015] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1927'. [ 259.261855][T12020] ieee802154 phy1 wpan1: encryption failed: -22 [ 259.401308][T12028] sch_fq: defrate 0 ignored. [ 260.015850][T12036] openvswitch: netlink: Multiple metadata blocks provided [ 260.070498][T12038] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1935'. [ 261.490549][ T5628] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 261.498631][ T5628] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 261.509063][ T5628] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 261.518192][ T5628] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 261.526375][ T5628] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 262.021946][T12056] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.029244][T12056] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.036871][T12056] bridge_slave_0: entered allmulticast mode [ 262.044040][T12056] bridge_slave_0: entered promiscuous mode [ 262.053777][T12056] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.061192][T12056] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.068636][T12056] bridge_slave_1: entered allmulticast mode [ 262.075624][T12056] bridge_slave_1: entered promiscuous mode [ 262.106293][T12056] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 262.118538][T12056] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 262.146247][T12056] team0: Port device team_slave_0 added [ 262.153875][T12056] team0: Port device team_slave_1 added [ 262.177671][T12056] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 262.184836][T12056] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 262.211429][T12056] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 262.223385][T12056] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 262.230698][T12056] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 262.244912][T12020] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 262.256957][T12056] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 262.477503][T12056] hsr_slave_0: entered promiscuous mode [ 262.484807][T12056] hsr_slave_1: entered promiscuous mode [ 262.492253][T12056] debugfs: 'hsr0' already exists in 'hsr' [ 262.502230][T12056] Cannot create hsr debugfs directory [ 262.509667][T12074] syzkaller0: entered promiscuous mode [ 262.515205][T12074] syzkaller0: entered allmulticast mode [ 262.670016][T12088] netlink: 'syz.9.1945': attribute type 12 has an invalid length. [ 262.680539][T12088] netlink: 'syz.9.1945': attribute type 29 has an invalid length. [ 262.690995][T12088] netlink: 148 bytes leftover after parsing attributes in process `syz.9.1945'. [ 262.701018][T12088] netlink: 59 bytes leftover after parsing attributes in process `syz.9.1945'. [ 262.701783][T12083] netlink: 60 bytes leftover after parsing attributes in process `syz.9.1945'. [ 262.765873][T12092] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1946'. [ 262.879786][T12096] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 262.887102][T12096] IPv6: NLM_F_CREATE should be set when creating new route [ 262.989316][T12100] netlink: 'syz.8.1950': attribute type 29 has an invalid length. [ 262.999942][T12100] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1950'. [ 263.126415][T12109] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.1952'. [ 263.135942][T12056] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.174778][T12112] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1954'. [ 263.221840][T12106] syzkaller0: entered promiscuous mode [ 263.225617][T12108] xt_CT: No such helper "snmp_trap" [ 263.236538][T12106] syzkaller0: entered allmulticast mode [ 263.313815][T12115] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1955'. [ 263.331740][T12056] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.469192][T12122] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1958'. [ 263.513981][T12056] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.610983][ T5633] Bluetooth: hci11: command tx timeout [ 263.631247][T12129] FAULT_INJECTION: forcing a failure. [ 263.631247][T12129] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 263.653160][T12056] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.663892][T12129] CPU: 0 UID: 0 PID: 12129 Comm: syz.8.1960 Not tainted syzkaller #0 PREEMPT(full) [ 263.663917][T12129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 263.663927][T12129] Call Trace: [ 263.663934][T12129] [ 263.663941][T12129] dump_stack_lvl+0xe8/0x150 [ 263.663967][T12129] should_fail_ex+0x412/0x560 [ 263.663995][T12129] _copy_from_iter+0x1d3/0x1670 [ 263.664020][T12129] ? rcu_is_watching+0x15/0xb0 [ 263.664045][T12129] ? __pfx__copy_from_iter+0x10/0x10 [ 263.664074][T12129] ? netlink_sendmsg+0x650/0xb40 [ 263.664094][T12129] ? skb_put+0x11b/0x210 [ 263.664117][T12129] netlink_sendmsg+0x6c0/0xb40 [ 263.664146][T12129] ? __pfx_netlink_sendmsg+0x10/0x10 [ 263.664169][T12129] ? aa_sock_msg_perm+0xf1/0x1b0 [ 263.664193][T12129] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 263.664219][T12129] ____sys_sendmsg+0x972/0x9f0 [ 263.664241][T12129] ? __might_fault+0xaf/0x130 [ 263.664276][T12129] ? __pfx_____sys_sendmsg+0x10/0x10 [ 263.664307][T12129] ? import_iovec+0x73/0xa0 [ 263.664334][T12129] ___sys_sendmsg+0x2a5/0x360 [ 263.664355][T12129] ? __lock_acquire+0x6b5/0x2cf0 [ 263.664378][T12129] ? __pfx____sys_sendmsg+0x10/0x10 [ 263.664434][T12129] ? __fget_files+0x2a/0x420 [ 263.664454][T12129] ? __fget_files+0x3a0/0x420 [ 263.664484][T12129] __x64_sys_sendmsg+0x1bd/0x2a0 [ 263.664508][T12129] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 263.664528][T12129] ? sched_clock_cpu+0x74/0x440 [ 263.664568][T12129] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.664588][T12129] do_syscall_64+0x15f/0xf80 [ 263.664612][T12129] ? clear_bhb_loop+0x40/0x90 [ 263.664634][T12129] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.664652][T12129] RIP: 0033:0x7f747a99cdd9 [ 263.664668][T12129] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 263.664683][T12129] RSP: 002b:00007f747b816028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 263.664701][T12129] RAX: ffffffffffffffda RBX: 00007f747ac15fa0 RCX: 00007f747a99cdd9 [ 263.664714][T12129] RDX: 0000000000040000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 263.664726][T12129] RBP: 00007f747b816090 R08: 0000000000000000 R09: 0000000000000000 [ 263.664737][T12129] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 263.664747][T12129] R13: 00007f747ac16038 R14: 00007f747ac15fa0 R15: 00007ffc9d4a86f8 [ 263.664777][T12129] [ 264.204579][T12148] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1967'. [ 264.245110][T12148] syzkaller1: entered promiscuous mode [ 264.253509][T12148] syzkaller1: entered allmulticast mode [ 264.277659][T12153] netlink: 'syz.4.1970': attribute type 3 has an invalid length. [ 264.358656][T12056] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 264.372335][T12056] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 264.380286][T12056] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 264.393054][T12056] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 264.416135][T12056] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 264.452029][T12056] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 264.471363][T12056] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 264.501498][T12056] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 264.600950][T12174] netlink: 'syz.1.1975': attribute type 11 has an invalid length. [ 264.675932][T12056] 8021q: adding VLAN 0 to HW filter on device bond0 [ 264.706410][T12056] 8021q: adding VLAN 0 to HW filter on device team0 [ 264.727135][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.734274][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 264.761632][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.768882][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 265.175420][T12199] netlink: 'syz.1.1981': attribute type 12 has an invalid length. [ 265.195350][T12199] netlink: 'syz.1.1981': attribute type 29 has an invalid length. [ 265.287409][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 265.297268][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 265.687822][ T5633] Bluetooth: hci11: command tx timeout [ 266.011825][T12234] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING [ 266.035784][T12236] pim6reg: entered allmulticast mode [ 266.058127][T12234] lo: Caught tx_queue_len zero misconfig [ 266.107720][T12241] netlink: 'syz.9.1994': attribute type 12 has an invalid length. [ 266.126362][T12241] netlink: 'syz.9.1994': attribute type 29 has an invalid length. [ 266.165717][T12056] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 266.413852][T12056] veth0_vlan: entered promiscuous mode [ 266.511115][T12056] veth1_vlan: entered promiscuous mode [ 266.594588][T12056] veth0_macvtap: entered promiscuous mode [ 266.640801][T12056] veth1_macvtap: entered promiscuous mode [ 266.704265][T12271] IPv6: sit1: Disabled Multicast RS [ 266.717334][T12271] netlink: 'syz.9.2006': attribute type 1 has an invalid length. [ 266.734600][T12056] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 266.801413][T12056] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 266.907929][ T9700] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.918665][ T89] bond0: (slave bond_slave_0): interface is now down [ 266.931799][ T9700] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.944176][ T89] bond0: (slave bond_slave_1): interface is now down [ 266.951089][ T9700] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.968445][T12290] netem: change failed [ 267.001270][ T9700] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.102841][ T12] bond0: (slave bond_slave_0): interface is now down [ 267.132939][ T12] bond0: (slave bond_slave_1): interface is now down [ 267.191648][T12297] ip6tnl0: Caught tx_queue_len zero misconfig [ 267.228799][ T9700] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 267.250570][ T9700] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 267.294840][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 267.304045][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 267.310081][ T13] bond0: (slave bond_slave_0): interface is now down [ 267.330868][ T13] bond0: (slave bond_slave_1): interface is now down [ 267.348270][T12303] Unknown options in mask b7f2 [ 267.370884][ T13] bond0: now running without any active interface! [ 267.765870][T12324] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 267.766978][ T5633] Bluetooth: hci11: command tx timeout [ 267.928176][T12334] __nla_validate_parse: 17 callbacks suppressed [ 267.928195][T12334] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2024'. [ 267.965653][T12334] bond0: (slave bond_slave_1): Releasing backup interface [ 268.007925][ T5633] Bluetooth: hci4: command 0x0406 tx timeout [ 268.340686][T12350] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2030'. [ 268.550047][T12365] xt_TPROXY: Can be used only with -p tcp or -p udp [ 269.322462][T12371] syzkaller0: entered allmulticast mode [ 269.330097][T12371] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2037'. [ 269.496231][T12378] Unknown options in mask b7f2 [ 269.503109][T12379] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.2041'. [ 269.513462][T12379] netlink: ct family unspecified [ 269.847141][ T5628] Bluetooth: hci11: command tx timeout [ 270.503034][T12310] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 270.731389][T12402] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2048'. [ 270.852016][T12409] validate_nla: 2 callbacks suppressed [ 270.853529][T12409] netlink: 'syz.0.2051': attribute type 10 has an invalid length. [ 270.923960][T12409] ip6tnl1: entered allmulticast mode [ 270.932850][T12415] Unknown options in mask b7f2 [ 270.953419][T12416] netlink: 'syz.0.2051': attribute type 10 has an invalid length. [ 271.163062][T12425] syzkaller0: entered promiscuous mode [ 271.186735][T12425] syzkaller0: entered allmulticast mode [ 271.275071][T12425] netlink: 'syz.8.2056': attribute type 29 has an invalid length. [ 271.302767][T12428] netlink: 'syz.8.2056': attribute type 29 has an invalid length. [ 271.333830][T12425] netlink: 264 bytes leftover after parsing attributes in process `syz.8.2056'. [ 271.361781][T12440] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2062'. [ 271.743665][T12454] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2065'. [ 271.749763][T12456] Unknown options in mask b7f2 [ 271.816141][T12458] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2067'. [ 272.344214][T12482] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 272.405884][T12484] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2078'. [ 272.625882][T12501] x_tables: duplicate underflow at hook 1 [ 272.782970][T12505] mac80211_hwsim hwsim25 wlan1: Caught tx_queue_len zero misconfig [ 272.894067][ T9696] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 272.911328][ T9696] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 272.948224][ T9696] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 272.983840][ T9696] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 273.004878][T12518] syzkaller0: entered promiscuous mode [ 273.029126][T12518] syzkaller0: entered allmulticast mode [ 273.050751][T12522] Unknown options in mask b7f2 [ 273.131054][ T5628] Bluetooth: hci5: command 0x0406 tx timeout [ 273.323785][T12532] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 273.503587][T12549] __nla_validate_parse: 3 callbacks suppressed [ 273.503606][T12549] netlink: 232 bytes leftover after parsing attributes in process `syz.9.2102'. [ 273.565373][T12555] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2104'. [ 274.121294][T12581] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2116'. [ 274.141073][T12586] syzkaller0: entered promiscuous mode [ 274.148150][T12586] syzkaller0: entered allmulticast mode [ 274.273082][T12590] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2115'. [ 274.307963][T12593] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2119'. [ 274.355125][ T30] audit: type=1804 audit(1777951239.858:3): pid=12593 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.8.2119" name="/newroot/184/cgroup.controllers" dev="tmpfs" ino=942 res=1 errno=0 [ 274.400690][ T30] audit: type=1800 audit(1777951239.858:4): pid=12593 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2119" name="cgroup.controllers" dev="tmpfs" ino=942 res=0 errno=0 [ 274.662208][T12614] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2127'. [ 274.905409][T12624] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2130'. [ 275.077684][T12629] tipc: Failed to remove unknown binding: 66,1,1/0:1462641232/1462641234 [ 275.093600][T12631] gre1: entered promiscuous mode [ 275.106766][T12629] tipc: Failed to remove unknown binding: 66,1,1/0:1462641232/1462641234 [ 275.187330][T12633] netlink: 'syz.1.2135': attribute type 3 has an invalid length. [ 275.225292][T12633] netlink: 'syz.1.2135': attribute type 8 has an invalid length. [ 275.237921][T12635] Bluetooth: hci1: too big key_count value 32778 [ 275.312326][T12639] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2137'. [ 275.419678][T12647] netlink: 'syz.1.2139': attribute type 12 has an invalid length. [ 275.440774][T12647] netlink: 'syz.1.2139': attribute type 29 has an invalid length. [ 275.459812][T12647] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2139'. [ 275.477447][T12641] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2139'. [ 275.668242][T12660] netlink: 'syz.8.2144': attribute type 1 has an invalid length. [ 275.782121][T12660] bond2: entered promiscuous mode [ 275.794499][T12660] 8021q: adding VLAN 0 to HW filter on device bond2 [ 275.922066][T12665] bond2: (slave bridge3): making interface the new active one [ 275.956769][T12665] bridge3: entered promiscuous mode [ 275.988074][T12665] bridge3: left promiscuous mode [ 276.796888][T12726] IPVS: sed: FWM 3 0x00000003 - no destination available [ 276.864854][T12728] xt_socket: unknown flags 0x8 [ 276.908300][T12728] bond0: entered promiscuous mode [ 276.913412][T12728] bond_slave_0: entered promiscuous mode [ 276.919749][T12728] bond_slave_1: entered promiscuous mode [ 276.929733][T12728] gretap0: entered promiscuous mode [ 276.937613][T12728] debugfs: 'hsr1' already exists in 'hsr' [ 276.943609][T12728] Cannot create hsr debugfs directory [ 276.949659][T12728] hsr1: entered promiscuous mode [ 277.224648][T12742] Cannot find add_set index 4 as target [ 277.418889][T12753] netlink: 'syz.8.2174': attribute type 5 has an invalid length. [ 277.459798][T12757] netlink: 'syz.9.2176': attribute type 12 has an invalid length. [ 277.478786][T12757] netlink: 'syz.9.2176': attribute type 29 has an invalid length. [ 278.087912][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 278.103408][T12796] netlink: 'syz.4.2186': attribute type 1 has an invalid length. [ 278.279819][T12802] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 278.308328][T12802] bond3: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 278.351436][T12802] bond3: (slave vxcan3): making interface the new active one [ 278.368052][T12802] bond3: (slave vxcan3): Enslaving as an active interface with an up link [ 278.403782][T12808] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.411750][T12808] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.459219][T12812] IPVS: set_ctl: invalid protocol: 2 172.30.1.9:20004 [ 278.477949][T12812] IPVS: set_ctl: invalid protocol: 43 255.255.255.255:20004 [ 278.500167][T12812] IPVS: set_ctl: invalid protocol: 58 172.30.1.9:20003 [ 278.712058][T12827] __nla_validate_parse: 13 callbacks suppressed [ 278.712076][T12827] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2201'. [ 278.731966][T12824] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2199'. [ 278.751722][T12829] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2202'. [ 279.093425][T12848] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2209'. [ 279.646045][T12878] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2218'. [ 279.829890][T12893] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2223'. [ 279.876989][T12893] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 279.939068][T12899] netlink: 'syz.4.2225': attribute type 126 has an invalid length. [ 280.069444][T12906] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2229'. [ 280.228640][T12914] netlink: 'syz.8.2231': attribute type 4 has an invalid length. [ 280.235836][T12918] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2233'. [ 280.245196][T12914] netlink: 240 bytes leftover after parsing attributes in process `syz.8.2231'. [ 280.309559][T12918] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2233'. [ 280.399684][T12923] gretap1: entered promiscuous mode [ 280.405619][T12923] batman_adv: batadv0: Adding interface: gretap1 [ 280.412646][T12923] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500. [ 280.434000][T12923] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 280.616509][T12934] netlink: 'syz.8.2238': attribute type 1 has an invalid length. [ 280.649802][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 280.657118][ C0] bridge0: topology change detected, propagating [ 280.663863][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 280.671685][ C0] bridge0: topology change detected, propagating [ 280.692449][T12934] 8021q: adding VLAN 0 to HW filter on device bond3 [ 280.761166][T12937] veth5: entered allmulticast mode [ 280.782409][T12941] bond3: (slave veth0_to_bond): making interface the new active one [ 280.792584][T12941] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 280.812492][T12934] bond3: entered promiscuous mode [ 280.828122][T12934] veth0_to_bond: entered promiscuous mode [ 280.856197][T12944] tipc: Enabled bearer , priority 0 [ 280.898906][T12944] syzkaller0: entered promiscuous mode [ 280.904582][T12944] syzkaller0: entered allmulticast mode [ 280.922687][T12948] tipc: Enabling of bearer rejected, failed to enable media [ 280.970126][T12944] tipc: Resetting bearer [ 281.000283][T12943] tipc: Resetting bearer [ 281.101777][T12943] tipc: Disabling bearer [ 281.489509][T12981] netlink: 'syz.4.2251': attribute type 2 has an invalid length. [ 281.997806][T13024] netlink: 'syz.8.2258': attribute type 1 has an invalid length. [ 282.022709][T13024] netlink: 'syz.8.2258': attribute type 4 has an invalid length. [ 282.338142][T13028] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 282.345433][T13028] IPv6: NLM_F_CREATE should be set when creating new route [ 282.437558][T13030] netlink: 'syz.1.2261': attribute type 1 has an invalid length. [ 282.673195][T13043] IPVS: set_ctl: invalid protocol: 60 172.20.20.170:2 [ 283.028705][T13055] veth5: entered allmulticast mode [ 283.604028][T13083] veth1_macvtap: entered allmulticast mode [ 283.767553][T13083] veth1_macvtap (unregistering): left allmulticast mode [ 283.819447][T13095] netlink: 'syz.8.2284': attribute type 2 has an invalid length. [ 283.827605][T13095] netlink: 'syz.8.2284': attribute type 11 has an invalid length. [ 283.835556][T13095] __nla_validate_parse: 10 callbacks suppressed [ 283.835572][T13095] netlink: 132 bytes leftover after parsing attributes in process `syz.8.2284'. [ 283.866747][T13096] bridge0: port 3(gretap0) entered blocking state [ 283.878917][T13097] netlink: 'syz.8.2284': attribute type 2 has an invalid length. [ 283.880181][T13096] bridge0: port 3(gretap0) entered disabled state [ 283.887110][T13097] netlink: 'syz.8.2284': attribute type 11 has an invalid length. [ 283.913103][T13096] gretap0: entered allmulticast mode [ 283.924463][T13097] netlink: 132 bytes leftover after parsing attributes in process `syz.8.2284'. [ 283.954554][T13096] gretap0: entered promiscuous mode [ 284.472212][T13132] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2296'. [ 284.564359][T13138] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2298'. [ 284.568833][T13134] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2297'. [ 284.655087][T13141] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 284.676811][T13140] netlink: 128 bytes leftover after parsing attributes in process `syz.9.2300'. [ 284.695829][T13140] netlink: 128 bytes leftover after parsing attributes in process `syz.9.2300'. [ 284.719010][T13146] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2302'. [ 285.257897][T13177] netlink: 'syz.8.2313': attribute type 83 has an invalid length. [ 285.420665][T13185] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2317'. [ 285.433184][T13186] --map-set only usable from mangle table [ 285.458305][T13185] tunl0: entered promiscuous mode [ 285.473672][T13185] tunl0: entered allmulticast mode [ 285.554750][T13195] IPVS: sed: FWM 3 0x00000003 - no destination available [ 285.601033][T13196] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2320'. [ 285.620620][T13198] openvswitch: netlink: Actions may not be safe on all matching packets [ 285.920618][T13218] FAULT_INJECTION: forcing a failure. [ 285.920618][T13218] name failslab, interval 1, probability 0, space 0, times 0 [ 285.942345][T13218] CPU: 1 UID: 0 PID: 13218 Comm: syz.8.2330 Not tainted syzkaller #0 PREEMPT(full) [ 285.942371][T13218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 285.942383][T13218] Call Trace: [ 285.942390][T13218] [ 285.942398][T13218] dump_stack_lvl+0xe8/0x150 [ 285.942425][T13218] should_fail_ex+0x412/0x560 [ 285.942453][T13218] should_failslab+0xa8/0x100 [ 285.942483][T13218] __kmalloc_noprof+0xe8/0x760 [ 285.942508][T13218] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 285.942538][T13218] tomoyo_realpath_from_path+0xe3/0x5d0 [ 285.942564][T13218] ? tomoyo_domain+0xd7/0x130 [ 285.942594][T13218] ? tomoyo_path_number_perm+0x219/0x630 [ 285.942615][T13218] tomoyo_path_number_perm+0x246/0x630 [ 285.942638][T13218] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 285.942658][T13218] ? __lock_acquire+0x6b5/0x2cf0 [ 285.942693][T13218] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 285.942738][T13218] ? __fget_files+0x2a/0x420 [ 285.942771][T13218] ? __fget_files+0x2a/0x420 [ 285.942790][T13218] ? __fget_files+0x3a0/0x420 [ 285.942809][T13218] ? __fget_files+0x2a/0x420 [ 285.942834][T13218] security_file_ioctl+0xc3/0x2a0 [ 285.942856][T13218] __se_sys_ioctl+0x47/0x170 [ 285.942882][T13218] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.942902][T13218] do_syscall_64+0x15f/0xf80 [ 285.942923][T13218] ? trace_irq_disable+0x3b/0x140 [ 285.942950][T13218] ? clear_bhb_loop+0x40/0x90 [ 285.942972][T13218] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.942989][T13218] RIP: 0033:0x7f747a99cdd9 [ 285.943006][T13218] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 285.943020][T13218] RSP: 002b:00007f747b816028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 285.943040][T13218] RAX: ffffffffffffffda RBX: 00007f747ac15fa0 RCX: 00007f747a99cdd9 [ 285.943053][T13218] RDX: 0000200000000000 RSI: 0000000000008b34 RDI: 0000000000000003 [ 285.943064][T13218] RBP: 00007f747b816090 R08: 0000000000000000 R09: 0000000000000000 [ 285.943082][T13218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 285.943092][T13218] R13: 00007f747ac16038 R14: 00007f747ac15fa0 R15: 00007ffc9d4a86f8 [ 285.943121][T13218] [ 285.943129][T13218] ERROR: Out of memory at tomoyo_realpath_from_path. [ 285.973004][T13219] netlink: 'syz.4.2329': attribute type 12 has an invalid length. [ 286.185662][T13219] netlink: 'syz.4.2329': attribute type 29 has an invalid length. [ 286.194827][T13219] netlink: 'syz.4.2329': attribute type 3 has an invalid length. [ 286.271049][T13232] netlink: 'syz.1.2333': attribute type 12 has an invalid length. [ 286.348701][T13234] bond0: entered promiscuous mode [ 286.357897][T13234] bond_slave_0: entered promiscuous mode [ 286.367597][T13234] bond_slave_1: entered promiscuous mode [ 286.394202][T13234] gretap0: entered promiscuous mode [ 286.402449][T13234] veth1_virt_wifi: entered promiscuous mode [ 286.418952][T13234] veth1_virt_wifi: left promiscuous mode [ 286.431512][T13234] bond0: left promiscuous mode [ 286.437182][T13234] bond_slave_0: left promiscuous mode [ 286.444304][T13234] bond_slave_1: left promiscuous mode [ 286.464584][T13234] gretap0: left promiscuous mode [ 287.561240][T13289] validate_nla: 3 callbacks suppressed [ 287.561253][T13289] netlink: 'syz.8.2352': attribute type 2 has an invalid length. [ 287.757544][T13300] x_tables: duplicate underflow at hook 1 [ 287.812246][T13303] FAULT_INJECTION: forcing a failure. [ 287.812246][T13303] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 287.825483][T13303] CPU: 0 UID: 0 PID: 13303 Comm: syz.1.2356 Not tainted syzkaller #0 PREEMPT(full) [ 287.825507][T13303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 287.825518][T13303] Call Trace: [ 287.825525][T13303] [ 287.825533][T13303] dump_stack_lvl+0xe8/0x150 [ 287.825559][T13303] should_fail_ex+0x412/0x560 [ 287.825586][T13303] _copy_from_user+0x2d/0xb0 [ 287.825612][T13303] wext_handle_ioctl+0xc7/0x1d0 [ 287.825637][T13303] ? __pfx_wext_handle_ioctl+0x10/0x10 [ 287.825656][T13303] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 287.825702][T13303] sock_ioctl+0x159/0x7f0 [ 287.825731][T13303] ? __pfx_sock_ioctl+0x10/0x10 [ 287.825756][T13303] ? __fget_files+0x2a/0x420 [ 287.825776][T13303] ? __fget_files+0x3a0/0x420 [ 287.825795][T13303] ? __fget_files+0x2a/0x420 [ 287.825819][T13303] ? bpf_lsm_file_ioctl+0x9/0x20 [ 287.825844][T13303] ? __pfx_sock_ioctl+0x10/0x10 [ 287.825869][T13303] __se_sys_ioctl+0xfc/0x170 [ 287.825894][T13303] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.825913][T13303] do_syscall_64+0x15f/0xf80 [ 287.825936][T13303] ? clear_bhb_loop+0x40/0x90 [ 287.825957][T13303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.825975][T13303] RIP: 0033:0x7fd5bcd9cdd9 [ 287.825992][T13303] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 287.826007][T13303] RSP: 002b:00007fd5bdccc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 287.826026][T13303] RAX: ffffffffffffffda RBX: 00007fd5bd015fa0 RCX: 00007fd5bcd9cdd9 [ 287.826039][T13303] RDX: 0000200000000000 RSI: 0000000000008b34 RDI: 0000000000000003 [ 287.826051][T13303] RBP: 00007fd5bdccc090 R08: 0000000000000000 R09: 0000000000000000 [ 287.826062][T13303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 287.826072][T13303] R13: 00007fd5bd016038 R14: 00007fd5bd015fa0 R15: 00007ffc0a041f88 [ 287.826102][T13303] [ 290.632423][T13293] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 290.749281][T13338] sctp: [Deprecated]: syz.1.2367 (pid 13338) Use of int in maxseg socket option. [ 290.749281][T13338] Use struct sctp_assoc_value instead [ 290.779183][T13340] __nla_validate_parse: 43 callbacks suppressed [ 290.779201][T13340] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2368'. [ 291.064657][T13356] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2373'. [ 291.371205][T13366] netlink: 60 bytes leftover after parsing attributes in process `syz.8.2376'. [ 291.542744][T13383] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2380'. [ 291.864835][T13386] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 291.932746][T13387] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2381'. [ 291.941916][T13387] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2381'. [ 293.617018][ T5628] Bluetooth: hci6: command 0x0405 tx timeout [ 294.432108][T13374] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 294.594784][T13397] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2385'. [ 294.600696][T13398] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2384'. [ 294.704953][T13401] netlink: 'syz.4.2387': attribute type 3 has an invalid length. [ 294.705867][T13402] veth0: entered promiscuous mode [ 294.721816][T13401] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2387'. [ 294.723250][T13402] veth0: left promiscuous mode [ 294.780188][T13402] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 294.799995][T13410] macsec0: Caught tx_queue_len zero misconfig [ 294.842010][T13407] netlink: 'syz.4.2389': attribute type 12 has an invalid length. [ 294.865220][T13407] netlink: 'syz.4.2389': attribute type 29 has an invalid length. [ 294.883236][T13407] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2389'. [ 295.485303][T13451] netlink: 'syz.1.2402': attribute type 12 has an invalid length. [ 295.501963][T13451] netlink: 'syz.1.2402': attribute type 29 has an invalid length. [ 295.616891][T13460] netlink: Unknown conntrack attr (0) [ 295.966791][T13484] __nla_validate_parse: 11 callbacks suppressed [ 295.966809][T13484] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2413'. [ 296.010506][ T31] INFO: task syz.0.553:7630 blocked for more than 143 seconds. [ 296.028338][ T31] Not tainted syzkaller #0 [ 296.045458][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 296.061805][ T31] task:syz.0.553 state:D stack:26840 pid:7630 tgid:7628 ppid:5624 task_flags:0x400140 flags:0x00080002 [ 296.074020][ T31] Call Trace: [ 296.078694][ T31] [ 296.081669][ T31] __schedule+0x17b4/0x5680 [ 296.086198][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 296.091393][ T31] ? __pfx___schedule+0x10/0x10 [ 296.096296][ T31] ? schedule+0x90/0x360 [ 296.100808][ T31] schedule+0x164/0x360 [ 296.105048][ T31] schedule_preempt_disabled+0x13/0x30 [ 296.110937][ T31] __mutex_lock+0x7f7/0x1550 [ 296.113460][T13500] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2416'. [ 296.115959][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 296.130371][ T31] ? __mutex_lock+0x608/0x1550 [ 296.135178][ T31] ? nfsd_nl_listener_set_doit+0x141/0x1670 [ 296.141189][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 296.146256][ T31] ? __asan_memset+0x22/0x50 [ 296.150968][ T31] ? __nla_validate_parse+0x2480/0x2dc0 [ 296.156563][ T31] nfsd_nl_listener_set_doit+0x141/0x1670 [ 296.163309][ T31] ? __pfx___nla_validate_parse+0x10/0x10 [ 296.170941][ T31] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 296.177882][ T31] ? __nla_parse+0x40/0x60 [ 296.182349][ T31] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 296.189645][ T31] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 296.196550][ T31] genl_family_rcv_msg_doit+0x22a/0x330 [ 296.202239][ T31] ? __asan_memcpy+0x40/0x70 [ 296.207198][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 296.213320][ T31] ? bpf_lsm_capable+0x9/0x20 [ 296.218168][ T31] ? security_capable+0x7e/0x2c0 [ 296.223160][ T31] genl_rcv_msg+0x61c/0x7a0 [ 296.227807][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 296.232866][ T31] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 296.239300][ T31] netlink_rcv_skb+0x232/0x4b0 [ 296.244179][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 296.249455][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 296.254807][ T31] ? down_read+0x270/0x2e0 [ 296.259275][ T31] ? genl_rcv+0xd/0x40 [ 296.263436][ T31] genl_rcv+0x28/0x40 [ 296.267527][ T31] netlink_unicast+0x75c/0x8e0 [ 296.272320][ T31] netlink_sendmsg+0x813/0xb40 [ 296.278309][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 296.284330][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 296.291014][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 296.296343][ T31] ____sys_sendmsg+0x972/0x9f0 [ 296.301315][ T31] ? __might_fault+0xaf/0x130 [ 296.306026][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 296.313079][ T31] ? import_iovec+0x73/0xa0 [ 296.319143][ T31] ___sys_sendmsg+0x2a5/0x360 [ 296.323873][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 296.329303][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 296.334545][ T31] ? futex_wait+0x2a2/0x390 [ 296.339173][ T31] ? __fget_files+0x2a/0x420 [ 296.343780][ T31] ? __fget_files+0x3a0/0x420 [ 296.348686][ T31] __x64_sys_sendmsg+0x1bd/0x2a0 [ 296.353662][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 296.359211][ T31] ? rcu_is_watching+0x15/0xb0 [ 296.363993][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.370165][ T31] do_syscall_64+0x15f/0xf80 [ 296.374874][ T31] ? trace_irq_disable+0x3b/0x140 [ 296.380041][ T31] ? clear_bhb_loop+0x40/0x90 [ 296.385127][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.391282][ T31] RIP: 0033:0x7f3b1c79cdd9 [ 296.395739][ T31] RSP: 002b:00007f3b1d587028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 296.404276][ T31] RAX: ffffffffffffffda RBX: 00007f3b1ca15fa0 RCX: 00007f3b1c79cdd9 [ 296.413485][ T31] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 296.421694][ T31] RBP: 00007f3b1c832d69 R08: 0000000000000000 R09: 0000000000000000 [ 296.432752][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 296.440989][ T31] R13: 00007f3b1ca16038 R14: 00007f3b1ca15fa0 R15: 00007ffc661c18e8 [ 296.449431][ T31] [ 296.453628][ T31] [ 296.453628][ T31] Showing all locks held in the system: [ 296.462973][ T31] 1 lock held by khungtaskd/31: [ 296.482934][ T31] #0: ffffffff8e95cd60 [ 296.482959][T13493] netlink: 'syz.4.2416': attribute type 12 has an invalid length. [ 296.482966][ T31] ( [ 296.482981][T13493] netlink: 'syz.4.2416': attribute type 29 has an invalid length. [ 296.487733][ T31] rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 296.511675][T13493] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2416'. [ 296.524749][ T31] 4 locks held by kworker/u8:3/48: [ 296.530592][ T31] #0: ffff8880b863aea0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x31/0x150 [ 296.536372][T13493] netlink: 59 bytes leftover after parsing attributes in process `syz.4.2416'. [ 296.544289][ T31] #1: ffff8880b8624588 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 296.559129][ T31] #2: ffff8880b8626118 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x8ee/0xf30 [ 296.569675][ T31] #3: ffff8880b8626118 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x1ae/0xf30 [ 296.587552][ T31] 1 lock held by udevd/4992: [ 296.596647][ T31] 2 locks held by getty/5381: [ 296.602633][ T31] #0: ffff8880367670a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 296.615228][ T31] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13a0 [ 296.625532][ T31] 2 locks held by syz.1.534/7567: [ 296.630624][ T31] #0: ffffffff8fe3e7e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 296.638913][ T31] #1: ffffffff8ec8aba0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x1670 [ 296.655235][ T31] 2 locks held by syz.0.553/7630: [ 296.664708][ T31] #0: ffffffff8fe3e7e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 296.673959][ T31] #1: ffffffff8ec8aba0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x1670 [ 296.684546][ T31] 2 locks held by syz.5.780/8361: [ 296.690276][ T31] #0: ffffffff8fe3e7e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 296.698579][ T31] #1: ffffffff8ec8aba0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x1670 [ 296.708847][ T31] 2 locks held by syz.6.1021/9024: [ 296.714033][ T31] #0: ffffffff8fe3e7e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 296.722423][ T31] #1: ffffffff8ec8aba0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x1670 [ 296.733366][ T31] 2 locks held by kworker/u8:10/9694: [ 296.738924][ T31] 2 locks held by syz.7.1292/9886: [ 296.744040][ T31] #0: ffffffff8fe3e7e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 296.752294][ T31] #1: ffffffff8ec8aba0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x1670 [ 296.762559][ T31] 2 locks held by syz.3.1542/10707: [ 296.767985][ T31] #0: ffffffff8fe3e7e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 296.776198][ T31] #1: ffffffff8ec8aba0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x1670 [ 296.786460][ T31] 2 locks held by syz.2.1825/11706: [ 296.792220][ T31] #0: ffffffff8fe3e7e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 296.800731][ T31] #1: ffffffff8ec8aba0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x1670 [ 296.811149][ T31] 3 locks held by syz.0.2320/13193: [ 296.816369][ T31] #0: ffffffff8fe3e7e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 296.824638][ T31] #1: ffff88802b09e6e8 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0xfe/0x7e0 [ 296.835279][ T31] #2: ffffffff8ec8aba0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_rpc_status_get_dumpit+0xdc/0x1410 [ 296.845817][ T31] 2 locks held by syz.9.2349/13280: [ 296.851067][ T31] #0: ffffffff8fe3e7e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 296.859397][ T31] #1: ffffffff8ec8aba0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x1670 [ 296.869657][ T31] 2 locks held by syz.8.2413/13490: [ 296.874840][ T31] #0: ffff88805863a040 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 296.885280][ T31] #1: ffffffff8e963068 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 296.897741][ T31] [ 296.900281][ T31] ============================================= [ 296.900281][ T31] [ 296.921498][ T31] NMI backtrace for cpu 1 [ 296.921518][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 296.921538][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 296.921549][ T31] Call Trace: [ 296.921556][ T31] [ 296.921564][ T31] dump_stack_lvl+0xe8/0x150 [ 296.921590][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 296.921617][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 296.921639][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 296.921668][ T31] sys_info+0x135/0x170 [ 296.921691][ T31] watchdog+0xfd3/0x1030 [ 296.921724][ T31] ? watchdog+0x1c9/0x1030 [ 296.921753][ T31] kthread+0x388/0x470 [ 296.921777][ T31] ? __pfx_watchdog+0x10/0x10 [ 296.921799][ T31] ? __pfx_kthread+0x10/0x10 [ 296.921821][ T31] ret_from_fork+0x514/0xb70 [ 296.921843][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 296.921862][ T31] ? __switch_to+0xc79/0x1410 [ 296.921889][ T31] ? __pfx_kthread+0x10/0x10 [ 296.921911][ T31] ret_from_fork_asm+0x1a/0x30 [ 296.921944][ T31] [ 296.921951][ T31] Sending NMI from CPU 1 to CPUs 0: [ 297.032330][ C0] NMI backtrace for cpu 0 [ 297.032347][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 297.032363][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 297.032373][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 297.032398][ C0] Code: 4b 7e 02 e9 93 f6 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 13 31 21 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 297.032411][ C0] RSP: 0018:ffffffff8e607dc0 EFLAGS: 00000242 [ 297.032425][ C0] RAX: 0000000000196749 RBX: ffffffff819a815a RCX: 0000000080000001 [ 297.032440][ C0] RDX: 0000000000000001 RSI: ffffffff8dfa897a RDI: ffffffff8c28abe0 [ 297.032450][ C0] RBP: ffffffff8e607eb0 R08: ffff8880b86339db R09: 1ffff110170c673b [ 297.032461][ C0] R10: dffffc0000000000 R11: ffffed10170c673c R12: 0000000000000000 [ 297.032471][ C0] R13: 1ffffffff1cd25d8 R14: 0000000000000000 R15: 1ffffffff1cd25d8 [ 297.032482][ C0] FS: 0000000000000000(0000) GS:ffff888125290000(0000) knlGS:0000000000000000 [ 297.032495][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 297.032505][ C0] CR2: 00007f3a4ebe8158 CR3: 0000000074c20000 CR4: 00000000003526f0 [ 297.032519][ C0] Call Trace: [ 297.032526][ C0] [ 297.032532][ C0] default_idle+0x9/0x20 [ 297.032551][ C0] default_idle_call+0x72/0xb0 [ 297.032573][ C0] do_idle+0x36a/0x5f0 [ 297.032593][ C0] ? __pfx_do_idle+0x10/0x10 [ 297.032614][ C0] cpu_startup_entry+0x43/0x60 [ 297.032631][ C0] rest_init+0x2de/0x300 [ 297.032652][ C0] start_kernel+0x38a/0x3e0 [ 297.032674][ C0] x86_64_start_reservations+0x24/0x30 [ 297.032690][ C0] x86_64_start_kernel+0x143/0x1c0 [ 297.032706][ C0] common_startup_64+0x13e/0x147 [ 297.032734][ C0] [ 297.230881][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 297.237790][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 297.246906][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 297.256952][ T31] Call Trace: [ 297.260223][ T31] [ 297.263141][ T31] vpanic+0x56c/0xa60 [ 297.267121][ T31] ? __pfx___schedule+0x10/0x10 [ 297.271957][ T31] ? __pfx_vpanic+0x10/0x10 [ 297.276465][ T31] ? nmi_trigger_cpumask_backtrace+0x1f4/0x300 [ 297.282616][ T31] panic+0xc5/0xd0 [ 297.286331][ T31] ? __pfx_panic+0x10/0x10 [ 297.290754][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 297.296137][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 297.302293][ T31] watchdog+0x102c/0x1030 [ 297.306627][ T31] ? watchdog+0x1c9/0x1030 [ 297.311049][ T31] kthread+0x388/0x470 [ 297.315113][ T31] ? __pfx_watchdog+0x10/0x10 [ 297.319786][ T31] ? __pfx_kthread+0x10/0x10 [ 297.324370][ T31] ret_from_fork+0x514/0xb70 [ 297.328950][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 297.334057][ T31] ? __switch_to+0xc79/0x1410 [ 297.338734][ T31] ? __pfx_kthread+0x10/0x10 [ 297.343321][ T31] ret_from_fork_asm+0x1a/0x30 [ 297.348091][ T31] [ 297.351707][ T31] Kernel Offset: disabled [ 297.356022][ T31] Rebooting in 86400 seconds..