last executing test programs: 15.279453398s ago: executing program 4 (id=5534): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x11, 0xa, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000000), r1) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000037c0)=ANY=[@ANYBLOB="3418000040000901feffffff00000000017c0000040042800c00018006000600800a0000101802800918148005"], 0x1834}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 15.182450677s ago: executing program 4 (id=5536): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newtfilter={0x34, 0x2c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24004800}, 0x0) r5 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$6lowpan_enable(r5, &(0x7f0000000280)='0', 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="6000000055000500010000090000000007000000", @ANYRES32=r6, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="01000000ef"], 0x60}}, 0x0) 14.808132866s ago: executing program 4 (id=5537): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r1, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x1a, &(0x7f0000000140)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0xc2, &(0x7f0000000280)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x1b, 0xb4, 0x0, 0x0, 0xfb, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x25, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @broadcast, @rand_addr=0x640100fe, {[@cipso={0x86, 0x77, 0xffffffffffffffff, [{0x0, 0xe, "08c82ce8da6ee06cb8dd9452"}, {0x5, 0x9, "020007651442eb"}, {0x1, 0x12, "74b000561de584b703c87214d42243b6"}, {0x0, 0x9, "e706d30bd224f8"}, {0x2, 0x7, "cfa11cab1a"}, {0x0, 0x10, "84a4913275be675de6a70a05a0dc"}, {0x6, 0xa, "ed54fe6655490000"}, {0x2, 0x12, "73bc23f9ffffffa30900a301c8460028"}, {0x0, 0xc, "c8bf6909a79ea788f03d"}]}, @cipso={0x86, 0x6, 0x20}]}}, '\x00\x00\x00\x00'}}}}}, 0x0) unshare(0x2040400) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)=0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x1, @loopback, 0xfffffff7, 0x2}, 0x20) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000080)) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x400448df, &(0x7f0000000240)="810fe052") 14.275182647s ago: executing program 4 (id=5540): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000009c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000001480)={0x24, r2, 0x5, 0xffffffff, 0xfffffff8, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SUPP_RATES={0x8, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="fe5eddce00000000300012800b00010062726964676500002000028005000700080000000c002e000400000003"], 0x50}}, 0x800) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000640)={'geneve1\x00', 0x2}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000940)={&(0x7f0000001380)=ANY=[@ANYBLOB="9feb010018000000002400dd0024080020070000000000dfd49ee9e71302000000050000000040000000000000000000015e960f009880c84a00000000000000000000d71338e4a09fa7589891611e"], 0x0, 0x43}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xe, 0x16, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000001300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000001340), 0xffffffffffffffd2}, 0x48) readv(r5, &(0x7f0000000680)=[{&(0x7f00000007c0)=""/227, 0x1c}], 0x4) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f00000008c0)={'syzkaller1\x00', 0x1}) ioctl$TUNSETVNETHDRSZ(r5, 0x400454d8, &(0x7f0000000900)=0xaf) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f00000000c0)=0x800001, 0x4) bind$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0x0) ioctl$sock_proto_private(0xffffffffffffffff, 0x89e9, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000006c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "101040", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0xc2, 0x0, 0x0, 0x9}}}}}}}, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000740)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd6001c01900140600fe800000000000000000000100000034fe8000000000000000000000000000aa00024e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50c2ffff90780000"], 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0f000000040000000800000001"], 0x37) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000000280)='GPL\x00', 0x2, 0xfd90, &(0x7f0000000380)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r9 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000480)=ANY=[@ANYBLOB="12000000020000000800000002"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000004c0)=ANY=[@ANYRES32=r9, @ANYRES32=r8, @ANYBLOB='\a'], 0x10) close(r8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r7}, &(0x7f0000000580), &(0x7f00000005c0)=r8}, 0x20) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) 13.091617082s ago: executing program 4 (id=5544): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtaction={0x64, 0x30, 0xb, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_ZONE={0x6, 0x4, 0xb8b9}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000affc21dc000000100000001800018014000200776c616e300000000000000000000800080006"], 0x34}, 0x1, 0x0, 0x0, 0x40000c5}, 0x4040010) 12.972235079s ago: executing program 4 (id=5546): r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x0, 0x8}, 0x48) (async) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_raw(r2, &(0x7f00000000c0)={0x1d, r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x60, 0x10, 0x401, 0x70bd2d, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d82ba6a}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MULTICAST_ROUTER={0x5, 0x19, 0x3}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x9}]}, 0x60}, 0x1, 0x0, 0x0, 0x440d0}, 0x4050) bind$can_raw(r2, &(0x7f0000000240), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000005c0)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r5, {0xb, 0xfff2}, {0xe, 0xffff}, {0xb, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000040) 3.81842009s ago: executing program 1 (id=5637): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt(r0, 0xcd5, 0x8, &(0x7f0000000000)="67d038bf104a8ec996d2cc02dc1c99c5ff6d6adba5b5bacb47d799fd01a8f534c30095920e98c26ae832cc3ce6065d683b87ed5c3c956ea4ab4435842f22452bd462810e72cfc30a940367c44cc6fc8739fd7c0916500a61ffb2059d804a93cb9d43403e1ce2", 0x66) r1 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @private2}, &(0x7f00000000c0)=0x1c, 0x80000) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000100)={0x2, @in6={{0xa, 0x4e22, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, 0xaaa49c0}}, 0x7, 0x2}, &(0x7f00000001c0)=0x90) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000200)={r2, 0xfff}, &(0x7f0000000240)=0x8) r3 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r3, 0x800442d4, &(0x7f0000000280)=0x2) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48820}, 0x4000001) sendto(r1, &(0x7f00000003c0)="ea0b204490bffefd4c010f9de88f87391aecdda49188dd4dc0f482214a1c9c0188be5d0bd1f18555bc825449b26d61af96ae008f4f52630e4267e8a11e5c99a8a11c613da80ada3e9560475cab6036653850a0b6566fdfa68aa8f749c6ef597938dfdc74b0150d159d60eda33f5e8e551bb3e269e21510b6c7887ff295a3707088bbdde01d07786c43ac8d", 0x8b, 0x88c4, &(0x7f0000000480)=@in6={0xa, 0x4e20, 0x7f3, @local, 0xb3a3}, 0x80) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000500)=0x101, 0x4) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$NFC_CMD_ACTIVATE_TARGET(r4, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r5, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x4}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000006c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-ssse3\x00'}, 0x58) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000007c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x64, r7, 0x200, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0xa5b, 0x4d}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x64}}, 0x0) r9 = socket$packet_raw(0x11, 0x3, 0x300) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r9, 0x8983, &(0x7f0000000900)) r10 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r10, 0x114, 0x7, &(0x7f0000000a80)={@rxrpc=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0x4, @private0, 0x8}}, {&(0x7f0000000940)=""/201, 0xc9}, &(0x7f0000000a40), 0x10}, 0xa0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4000000, 0x10, r9, 0xb0d2c000) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000b80)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000bc0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000c00)=0x0) sendmsg$NFC_CMD_DEP_LINK_DOWN(r4, &(0x7f0000000d00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x201080}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x64, r5, 0x800, 0x70bd25, 0x25dfdbfd, {}, [@NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x1400001d) pwrite64(r9, &(0x7f0000000d40)="795ce4045690de8755bf676de5cd444ff98b9b16f8d0d4ba982c944900ecbf25163125f2428ed690cf909e8e87ff331f11fa9694359d7a46ba4617fa0c0493bd62fb63753961c8365acf514b130a394f2f84360b6aba4687d201dab8dd80", 0x5e, 0x2) connect$inet6(r1, &(0x7f0000000dc0)={0xa, 0x4e24, 0x4, @private1, 0x9}, 0x1c) socket$alg(0x26, 0x5, 0x0) 3.591822945s ago: executing program 1 (id=5640): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000140)={0x0, 0x2710}, 0x10) recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x10002, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xfffffffffffffe62}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040005}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="540000001800050401000000000000000a800000fe0300010000000014000100fd00000000000000000000000000000108000400010000000600150007000000140016800800010003000000080003"], 0x54}}, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r5, &(0x7f00000002c0), 0x4924b68, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$key(0xf, 0x3, 0x2) socket(0xa, 0x3, 0x3a) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="6800000000090504000000000000000002000000090001007379003000000000140002800600010000020000050002", 0x2f}, {&(0x7f0000000100)="f80aa072aef8f193fa8d08f16bf75ff963a413616d9f83c04b9af360b2c1094b1142f2b5a11e93ead5578843779567323c45e3fdef398819cf", 0x39}], 0x2}, 0x4004) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r6, 0x6628) 3.252212881s ago: executing program 1 (id=5644): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x44, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_CHANNEL={0x5}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_BCN_ORD={0x5}, @IEEE802154_ATTR_PAN_COORD={0x5}, @IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_SF_ORD={0x5}]}, 0x44}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', 0x0}) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x40041) sendmsg$nl_route(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="800000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e000000004000028006000100000ffe00340003800c0001000ffe0000000000000c00010000217fffff0080030c00010000010000000000000c000100040000000000000008000500", @ANYRES32=r3, @ANYBLOB="080003"], 0x80}, 0x1, 0x0, 0x0, 0x20044081}, 0x8000) 3.058134308s ago: executing program 1 (id=5647): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_tracing={0x1a, 0x2, &(0x7f0000000300)=ANY=[@ANYBLOB="b70000000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x3f, '\x00', 0x0, 0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2db8d, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@cgroup, 0x10, 0x1, 0x1000, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz0\x00', 0x200002, 0x0) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x25, 0x11, @void}, 0x10) r4 = socket$inet(0x2, 0x1, 0x0) r5 = socket$inet(0x2, 0x1, 0x6) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x1500, 0x0, 'sh\x00', 0x3d, 0x0, 0x36}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000580)={{0x6, @loopback, 0x1500, 0x0, 'rr\x00', 0x19}, {@loopback, 0x4908, 0x1, 0x1}}, 0x44) connect(r5, &(0x7f0000000600)=@in={0x2, 0x1500, @loopback}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000500)={r6, &(0x7f0000000540)='G', 0x0}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000200)=ANY=[@ANYRES32=r2, @ANYRES32=r0, @ANYBLOB="020000001020000000000000", @ANYRES32=r3, @ANYBLOB="3e6e7085b558fd9e50ac31d11fb497112b72eb39769bf7101cf57534a50bae9346a2e1a983bcd805ee4bb447f3929d6c67848872b93dc188ddba6873113ed561b0cec49be48986f2c8270ec6cf2279222cf36e2da1fd36ae10eb99adde12c81b50b70c117a84930653cfa238b2885df8daad116de6cb2d649c9a16eebd29a065799c40618a5087", @ANYRES64=r1], 0x20) 3.029088116s ago: executing program 2 (id=5648): sendmmsg$alg(0xffffffffffffffff, &(0x7f0000002d40)=[{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="07960e0300000000000031d9a58695a5f844d3cb97292f371d5923927db467e15c90628c0abb1fbba39fb49f85f8f261a9960da9b7a47c07f50eff5a8d2fc532738204", 0x43}], 0x1, 0x0, 0x0, 0x40000}], 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/8, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x50) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="600000000206050000000000000000000000000005000400000000000900020073797a3200000000140007800500140080ff000008000840000000000500050002000000050001000600000011000300686173683a6970"], 0x60}}, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000300)='0', 0x1}], 0x1, 0x18) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000180)={'wpan1\x00', 0x0}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r1, &(0x7f0000000380)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2800}, 0xc, &(0x7f0000000400)={&(0x7f0000000440)={0x1c, r2, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x6040000}, 0x8800) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001940)=ANY=[@ANYBLOB="180000000000000000000000000000006119040000000000950000000000000090"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0xb6) 2.72066457s ago: executing program 2 (id=5650): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001100050000000000000000000000000020862b0851581bdfc3e7aa0aef15dc855314be5c56ad82f7192e9b4d2379787246f82a7dea52b9b9eeb9118eacc166eac7b7f4", @ANYRES32=0x0, @ANYBLOB="00000000000000001400030062617461647630000000000000000000"], 0x34}}, 0x0) 2.635950612s ago: executing program 3 (id=5651): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0xfffffffe, {{@in=@multicast1=0xe0000002, @in=@multicast1, 0x4e20, 0x0, 0x0, 0x0, 0xa, 0x10, 0x20}, {0x0, 0x1, 0x100, 0x0, 0x0, 0x9, 0xffffffff}, {0x0, 0x200, 0x4}, 0x2000, 0x6e6bb5, 0x2, 0x0, 0x1}}, 0xb8}}, 0x24000080) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b04, &(0x7f0000000280)={'wlan0\x00'}) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000340)={r0, &(0x7f0000000100)='wlan0\x00', 0x8000, &(0x7f0000000140)={@_ha_fsid={[0xc, 0x1]}, {0x8, 0xcb, 0xfffffff8, 0x80000001}}, 0x4, &(0x7f00000002c0), &(0x7f0000000300)=0x10}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x84, r3, 0x200, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x4c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_NON_SRG_MAX_OFFSET={0x5, 0x3, 0x6}, @NL80211_HE_OBSS_PD_ATTR_SR_CTRL={0x5}, @NL80211_HE_OBSS_PD_ATTR_PARTIAL_BSSID_BITMAP={0xc, 0x5, "0eb10fe45ac63d9e"}, @NL80211_HE_OBSS_PD_ATTR_SR_CTRL={0x5, 0x6, 0xff}, @NL80211_HE_OBSS_PD_ATTR_BSS_COLOR_BITMAP={0xc, 0x4, "13828c1aaa6e04c2"}, @NL80211_HE_OBSS_PD_ATTR_BSS_COLOR_BITMAP={0xc, 0x4, "ad189034e1d03a31"}]}, @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6, 0x96, 0x97a}]}, 0x84}, 0x1, 0x0, 0x0, 0x40001}, 0x8000) ioctl(r1, 0x8915, &(0x7f0000000180)='wpan0') r4 = socket$packet_raw(0x11, 0x3, 0x300) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), r5) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_GETPARAMS(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)={0x14, r6, 0x1, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x84}, 0x810) getsockname$packet(r4, &(0x7f0000000000), &(0x7f0000000040)=0x14) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0xfffffffe, {{@in=@multicast1=0xe0000002, @in=@multicast1, 0x4e20, 0x0, 0x0, 0x0, 0xa, 0x10, 0x20}, {0x0, 0x1, 0x100, 0x0, 0x0, 0x9, 0xffffffff}, {0x0, 0x200, 0x4}, 0x2000, 0x6e6bb5, 0x2, 0x0, 0x1}}, 0xb8}}, 0x24000080) (async) socket$packet(0x11, 0x3, 0x300) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b04, &(0x7f0000000280)={'wlan0\x00'}) (async) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000340)={r0, &(0x7f0000000100)='wlan0\x00', 0x8000, &(0x7f0000000140)={@_ha_fsid={[0xc, 0x1]}, {0x8, 0xcb, 0xfffffff8, 0x80000001}}, 0x4, &(0x7f00000002c0), &(0x7f0000000300)=0x10}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x84, r3, 0x200, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x4c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_NON_SRG_MAX_OFFSET={0x5, 0x3, 0x6}, @NL80211_HE_OBSS_PD_ATTR_SR_CTRL={0x5}, @NL80211_HE_OBSS_PD_ATTR_PARTIAL_BSSID_BITMAP={0xc, 0x5, "0eb10fe45ac63d9e"}, @NL80211_HE_OBSS_PD_ATTR_SR_CTRL={0x5, 0x6, 0xff}, @NL80211_HE_OBSS_PD_ATTR_BSS_COLOR_BITMAP={0xc, 0x4, "13828c1aaa6e04c2"}, @NL80211_HE_OBSS_PD_ATTR_BSS_COLOR_BITMAP={0xc, 0x4, "ad189034e1d03a31"}]}, @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6, 0x96, 0x97a}]}, 0x84}, 0x1, 0x0, 0x0, 0x40001}, 0x8000) (async) ioctl(r1, 0x8915, &(0x7f0000000180)='wpan0') (async) socket$packet_raw(0x11, 0x3, 0x300) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), r5) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$IEEE802154_LLSEC_GETPARAMS(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)={0x14, r6, 0x1, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x84}, 0x810) (async) getsockname$packet(r4, &(0x7f0000000000), &(0x7f0000000040)=0x14) (async) 2.580767271s ago: executing program 2 (id=5652): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="2171c06204000000086c5c000500000000000000", @ANYRES32, @ANYRES8, @ANYRES32=0x0, @ANYRESDEC, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r0}, &(0x7f00000005c0), &(0x7f0000000600)=r1}, 0x20) r2 = socket$inet(0x10, 0x3, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000000680)={0xa, 0x4e23, 0xa, @empty, 0x9}, 0x1c) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r4, &(0x7f00000006c0)={0xa, 0x4e23, 0x100002, @ipv4={'\x00', '\xff\xff', @empty}, 0x1e}, 0x1c) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000d00)=@newtaction={0x2f8, 0x30, 0x871a15abc695fa3d, 0x0, 0x25dfdbff, {}, [{0x2e4, 0x1, [@m_csum={0x1ec, 0xe, 0x0, 0x0, {{0x9}, {0x11c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0xffff, 0x5, 0x8, 0x3}, 0x1c}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x0, 0xffffffffffffffff, 0x5c, 0x7947}, 0x2c}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x401, 0x0, 0xffffffffffffffff, 0x80000000, 0x10001}, 0x28}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3a8, 0x2, 0x10000000, 0x7ff, 0x1}, 0x28}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x7, 0x8, 0x0, 0x97d}, 0x1f}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x10000, 0x9, 0x7, 0xd9, 0x101}, 0x5e}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x10000, 0x6, 0x20000000, 0x3ff, 0xb64}, 0x71}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0xdef6, 0x6, 0x7fff, 0x1ff}, 0x76}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xffff0001, 0x1ff, 0x4, 0xb63f, 0x8}, 0x42}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x80, 0x1, 0xfffffff5, 0xfffffff6}, 0x1}}]}, {0xa8, 0x6, "abcf5ce9ed1ea986c6a135957835559a48edc7d7f1513b39701df45e1fa2ffb7fa64582c0437ee073b1cd7c9b8c3dd2b480d97901fb3097ab6341134496ee9d4a90807aa33d309bfed97b5c986cad0df9509f4cfa60e2545a808244aa60f0b1dbddc576fd22a2948c79a88ac9b94249088677b73ec5448307a6c5e0ff737fd2f68a6026a61dfc57721a61566f550012ff048a67f759e4f683499ada2a0219bbb395f460c"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x4}}}}, @m_skbmod={0xf4, 0xf, 0x0, 0x0, {{0xb}, {0x88, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x4}, @TCA_SKBMOD_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xc}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x8, 0xc0000000, 0x2, 0x3, 0x5}, 0x3}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x1}, @TCA_SKBMOD_DMAC={0xa}, @TCA_SKBMOD_SMAC={0xa}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x5}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x754, 0x6, 0x1, 0x51fe, 0x2}, 0xd}}]}, {0x44, 0x6, "1748cb02dd9e46d7e66c19210251996b49e0794d7de1aa043e72a7710b96de61f3ed1c875d7ad2e0d8174f42d5b0ef07d0da0ff2226b95565b851fcd75fcb8db"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x2f8}}, 0x0) r7 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_opts(r7, 0x29, 0x39, &(0x7f0000000700)=@fragment={0x1d, 0x0, 0x0, 0x1, 0x0, 0x7, 0x67}, 0x8) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$MAP_CREATE(0x0, 0x0, 0x48) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r10 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r10, &(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000ac0)={0x0, 0xff98, &(0x7f0000000b00)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000a95289000300000a480000060a01040000000000f8ffff090000040900010073797a31000000000900020073797a32000000001c000480180001800d00010073796e70726f787900000000040102801400000011000100000000000000a866f0a31052e3"], 0x70}, 0x1, 0x0, 0x0, 0x4000851}, 0x24044010) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f0000000bc0)={'ipvlan0\x00', 0x9, 0x1}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$inet6(r8, &(0x7f0000000cc0)={0xa, 0x4001, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3d}, 0x1c) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="800000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000003b005000128009000100766c616e000000004000028006000100000000000c00020000000000000000000c00020000000000000000001c0004800c00060004000000000800000a0001"], 0x80}, 0x1, 0xba01}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0x20, 0x70bd2b, 0xfffffdfd, {0x0, 0x0, 0x12, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x2}}}, 0x24}}, 0x0) 2.246731183s ago: executing program 0 (id=5654): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8000}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x3b}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x30, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_DATA={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x104}}, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000001a40)={{0xffffffffffffffff, 0x0, 0x218882, 0x0, 0x3, 0x0, 0x0}, 0x1, &(0x7f0000001940)=[{0x2, 0x9, 0x0, &(0x7f00000003c0)="8f8f623960e54101d6c0ba3d6034b05a569ba901854b9af1c65ec4ce7043a689641169db4153a728dac9e8dbc5179aad", 0x30, 0x30}]}) (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000030000004c0001800d0001007564703a73797a310000000038000400"], 0x60}}, 0x0) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000040)=0x60, 0x2) 2.002818251s ago: executing program 1 (id=5655): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r0) sendmsg$NL802154_CMD_GET_INTERFACE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r1, 0x300, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000080)={0x0, 0x0, 0xfffffffffffffffc}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r2, 0x84, 0x65, &(0x7f00000001c0)=[@in6={0xa, 0x4e21, 0x1000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}, @in={0x2, 0x4e20, @rand_addr=0x64010100}, @in={0x2, 0x4e22, @local}, @in6={0xa, 0x4e24, 0x3, @mcast1, 0x4}, @in={0x2, 0x3, @empty}, @in6={0xa, 0x4e22, 0xdb, @dev={0xfe, 0x80, '\x00', 0x1e}, 0x8}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e23, @multicast2}], 0xa4) 1.859694283s ago: executing program 0 (id=5656): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x6, 0xba8}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240), 0xa7c, r0}, 0x38) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000007c0)="d8000000140081044e81f782db44b90402", 0x11}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000800)={0x0, 0xc027, &(0x7f0000000840)=[{&(0x7f0000000880)="98eb000014006bcd9e", 0xeb98}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x1c}}, 0x0) getsockname$packet(r4, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r5, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newlink={0x44, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1006}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) close(r2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) ioctl$SIOCSIFHWADDR(r2, 0x8b19, &(0x7f0000000300)={'wlan0\x00', @random="7cf1e97c9e4f"}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x88, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFULA_CFG_FLAGS={0x6}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x7, 0x2}}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x65}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_FLAGS={0x6}, @NFULA_CFG_MODE={0xa, 0x2, {0xac9b, 0x2}}, @NFULA_CFG_MODE={0xa, 0x2, {0x1000, 0x2}}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x5}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7fffffff}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x40000}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x400}]}, 0x88}, 0x1, 0x0, 0x0, 0x44}, 0x0) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r3) sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000700)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0xb8, r7, 0x20, 0x70bd25, 0x3, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8000}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7}]}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg2\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xff}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xa2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4}, 0x801) 1.842449877s ago: executing program 3 (id=5657): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r2, 0x114, 0xa, 0x0, 0x4) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r2, 0x4058587a, &(0x7f0000000880)={{r2, &(0x7f0000000140)='}-+,\'\x9a+--/k]\x00', 0x30040, &(0x7f0000000600)={@align=0x9, {0x1, 0x9, 0x401, 0xf}}, 0x2, &(0x7f0000000640)={@_ha_fsid}, &(0x7f0000000680)=0x4}, {[0x3, 0x7, 0x673b, 0xfffffffa]}, 0x81, 0x3, &(0x7f00000006c0)=""/3}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000b40)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000c00)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000cc0)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xb, 0xfff7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}]}, 0x80}}, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000d80)={0x1, 0x0}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000dc0)=@bpf_lsm={0x12, 0x3, &(0x7f0000000e80)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0xa}}, 0x0, 0x1, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) pipe(&(0x7f0000000ec0)={0xffffffffffffffff}) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r9, 0x1, 0x3c, &(0x7f0000000f00)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r9, 0x6, 0x13, &(0x7f0000000f40)=0x1, 0x4) connect$inet(r9, &(0x7f0000000f80)={0x2, 0x4e24, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r9, 0x6, 0x13, &(0x7f0000000fc0)=0xffffffffffffffff, 0x4) sendmmsg(r9, &(0x7f0000001000)=[{{0x0, 0x0, &(0x7f0000001040)=[{&(0x7f0000001080)='E', 0x1}], 0x1}}], 0x1, 0x4000045) splice(r8, 0x0, r9, 0x0, 0xffff, 0xa) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000010c0)={0x1, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x11, 0x22, &(0x7f0000000900)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3698}, {}, {}, [@alu={0x7, 0x0, 0x0, 0xa, 0x2, 0x20, 0xc}, @generic={0x40, 0x6, 0x5, 0x5, 0x7}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1ff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000a40)='syzkaller\x00', 0x8, 0xaf, &(0x7f0000000a80)=""/175, 0x41000, 0x0, '\x00', r6, @fallback=0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000d40)={0x6, 0x3}, 0x8, 0x10, 0x0, 0x0, r7, r8, 0x0, &(0x7f0000001100)=[r10], 0x0, 0x10, 0x64}, 0x94) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x200000, 0x0, 0xff, 0x1}, 0x20) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1b, 0x14, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, [@cb_func={0x18, 0x5, 0x4, 0x0, 0x2}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @cb_func={0x18, 0xb, 0x4, 0x0, 0xffffffffffffffff}, @ringbuf_query, @cb_func={0x18, 0x4, 0x4, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x0, 0x0, 0x6, 0x9, 0x0, 0x20, 0xffffffffffffffff}]}, &(0x7f0000000380)='syzkaller\x00', 0x7f, 0x67, &(0x7f00000003c0)=""/103, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0xa, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, &(0x7f0000000480)=[0xffffffffffffffff, 0x1, 0x1], &(0x7f00000004c0)=[{0x3, 0x1, 0x7, 0x6}], 0x10, 0x2}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000005c0)=@o_path={&(0x7f0000000280)='./file0\x00', r12, 0x4000, r11}, 0x18) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x200000, 0x2, 0x0, 0x0, 0xfff9, 0x99}, 0x20) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)=ANY=[@ANYBLOB="581740d657f1ee0002000000000000222f6bac14887e1590bea1f513b0da5f2bf8e3c852db029f49aee0adff7774246ffbf98d694ef47a4c696da7b674e02787f1eed44edff208b48f92db00f518288bdd4f6ccc0439457ac89ff39f8dff57080b606cd94589f620f50cbd47085210cc79b25d24286794e24515cf5fb9553283fedd142c53c6223c25ebf82adf25c382aa59e2e340a8b9b5a898569085092b4da7fe4b932aa5ceb75a9f4c04583104", @ANYRES16=r1, @ANYBLOB="210128bd7000000000002b00000008000300", @ANYRESDEC=r1, @ANYBLOB="040046000a0034000202020202020000080026006c090000240051802000008005000200020000000800030001ac0f00090001009e1f50cc3c000000"], 0x58}, 0x1, 0x0, 0x0, 0x4000f044}, 0x0) 1.758302792s ago: executing program 1 (id=5658): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) (async, rerun: 32) socket$igmp6(0xa, 0x3, 0x2) (async, rerun: 32) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) (async) shutdown(0xffffffffffffffff, 0x1) socket(0x8, 0x1, 0x3) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x18, r2, 0x2799f5eec7981083, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0xbde8b7aa92ee725b}, 0x80) (async) socket$nl_route(0x10, 0x3, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) (async, rerun: 64) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/pid\x00') (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000200)={&(0x7f0000000240)=@qipcrtr={0x2a, 0xffffffffffffffff, 0x4000}, 0x80, 0x0}, 0x0) (async) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000002c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f0000000380)={0x44, r2, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x9}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x9}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x4}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x1}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0xff}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x9f}]}, 0x44}, 0x1, 0x0, 0x0, 0xc884}, 0x40000) (async, rerun: 64) listen(0xffffffffffffffff, 0x0) (async, rerun: 64) poll(&(0x7f0000000400)=[{0xffffffffffffffff, 0x401}], 0x1, 0x0) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018180000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000860629c98500000015000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r5 = socket(0x15, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) syz_genetlink_get_family_id$team(&(0x7f0000000680), 0xffffffffffffffff) (async, rerun: 32) getsockopt(r5, 0x200000000114, 0x2718, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000d40)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf2000000000000007000000080000002d0301000000000095000000000000007126000000000000bf670000000000005601000000ff07ad67060000020000006a0200000ee60000bf250000000000003d350000000000006507000002000000070700004c0000001f75000000000000bf54000000000000160400000400f9ffad3001000000000084000000000000004500000001f0ffff95000000000000006e8ad524a56601a5585b7351ca1136aef2e9407e5c2501d11900db85604036883647b1fb3f1403b816f511c8c56e56e40b01005505f8a89dae4293b10f3631b25fc9f189084c7fddccff01361d355f6cce8ec2abcdf1bc9040daef2cfa2046e2091e269f4734ffa55eb2d4e8de20b38c8808b365b46bd54c68cd30139a8c3827a7dd6d6e2b5fea3906f8456b0000000000ff07efffffff0047018ae79db613d2aec070f718ab629b4975320dd7a7da532281fd22c7b835005bf52715396669836db6000000005b4f0591ee7c8cd263dd172b28d01c5eaaf07391c763e1daf2cdad3d1a74a2f078aa6402483856a6e494408d0b33047f06aec2cc590df28efc7dbec6857db922195a271af103f03e1155197e067b2ebf4e2dae060959c9639564f000fc3cdd05a1575c91cf5ba8b2db403681ee48f5287123a0d246c0c4c00fe979dbc09ed4db22d7172adc6ae8faa5f9ad188e07000000000000008d88a0b4684559d46cae41db1b914e93f1f8000000000000000000e33de432e488ad0e724c2d14a1e770e116984a5700afb8a1f3d47277ef0e33e7e00ec5f74e10937ba0e321346977b7d1b18013f509675b5b0f352e30dffda780e95c301f4fc7d5a76475ace6b128b02bfd71023daffdf748a6bd356fcba6ec96373d1101000736ac0bbcb5f4836bddfe8bf46308000000ade9e59fcf271bb98bd0b8b5216b858b414c31682f9f3db2e4d8e5898e445fe55ac56c0d642986f8bbc7340bc6393f774318c9fc9b05788de2c6e601b50777e8dff581de1d5ae3d801ead7eba31126e2172fa1eadf5f3bec81004d00000000c8e4692e051c731f9ac766b7fd66278d40f0760f23e8c7d1f47cd8e02504e85e152955ad8acd989c0b2eea71414f533f5685c3904bfe1d0011ffc1ba5398f3d6812467c1a4186edd036f15bf847c50f79e1a0ad3d2b5080ecb0148e2b86177869884ae62420c9f1b534e969fce97ffff070000000000dbbfe0ed7c5853a665c0805752dca0e571d75cac5a5d8e4f6e05055b6dec5a9a5696f053a92d81fd9e5f2b9dbbe24f38e745b5a95d45003d0600e413dc623f3e6b096c8b0ad7438c6631388892c55b0671140afbfb83bba415f729fea4c8a8a86189dceedad84cdd17c46bdd847a1f4b0facd3744f5bbb06abb319204fca4bcd4297fe7b4cee75abf43e14fe861224799c0f12702964fc890a176fdafa2c9387280b5693c000c0304cece48642649375dae0b7979b229f708a97349e96e783af9a23cd3980a2c29d3d62875e5319cd51bdd224878a0b25edf0e83c930633bd9a0c3e28f359608ea326c77a1aa17318f392a0ec6c188916f452533d4327feccfd68ec8278a90252693fb133c4615801077e1d75420017c03990b855fe481a20b4919bb11c6d737b6545ef140a0fc339bb53953662f1454f9852e7c4e17eb8668f076c659f56d6c7f97a96d6cdf45cfe88b30c170000000001000000effbf33bd1becb0de0a080931f137967de563c29d81aacb3d48226a4e4b6670900000000000000fa68bff3693afc44db223f2be09295e4a8da03d23b48bb38b31a14ffcddd92c38f6b6d86a0e5ed47a82bad5d2a6dce4c4d353261260c9d7a6bd9f2c872c4172a3d2ac80dfb718cc159e6423065624f130000000000000000000000000000000000000000002a37163e8d7ef2f3c58d045f0700000094029acbe333aebd10f2118fbfeda3fa5500d52cd5241588d2b68a332edfef6d701c8936a25d68b841f982511392cc0d3a78616f8ce0f2877d099258bf85866d0ee7f803fa50fd41ef62b028d12028a7b497d92f544523290f520b0d"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) 1.382942115s ago: executing program 2 (id=5659): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x8, 0x81}]}}}, @IFLA_ADDRESS={0x8, 0x1, @dev}]}, 0x48}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$xdp(0x2c, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000007c0)={'wg1\x00', 0x0}) sendmsg$xdp(r2, &(0x7f0000003180)={&(0x7f0000000800)={0x2c, 0x1, r3, 0x18}, 0x10, &(0x7f0000003140)=[{&(0x7f0000002fc0)="a50be56a321f3b1c4ae891a1692bd97c85669707edec783c641faff87ead56", 0x1f}, {&(0x7f0000003000)="b9e1772f54ffce3f734e88713fede93ce8bae36c0c5255e4f4e03ac0580ac48660a0cedf271df2ef8fda25fcc8224c54f0317682073a2771bb3bae650ee1d3bab5dbb69121", 0x45}, {&(0x7f0000003080)="d1437ff60455b576e4c0a5f01ddf3bcfbb3dd467627541b15ed7bbbd2a27e3906d1de2939cf9d56a1f57319a0e543603780cdedcfc7ad87731f4b1bea5569c7fc3981e5d97e872e40876dd642b503f29e3a3b8c84686476092ff8f967d20e3790906e64208b0c92122db97e5e4bdce2661714ad69fb0157d17ada9d65b2ff71faa35761e9359c50c93a88f4b5bfa50", 0x8f}], 0x3, 0x0, 0x0, 0x44090}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000003440), 0x3) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a300000000040000000030a01040000000000000000020000000900010073797a30000000000900030073797a3000000000140004800800014000000003080002400000000098000000060a01040000000000000000020000000900010073797a30000000000900020073797a30000000036c000480680001800a0001006d61746368000000580002800e000100686173686c696d697400000008000240000000013c000300", @ANYRESHEX], 0x120}}, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x42072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x2000) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000009c0)={0x2, 0x998e, 0x0, 0x2}, &(0x7f0000000a00)=0x10) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000001200)={0x2, 0xe}, &(0x7f0000001240)=0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000002e00)={0x0, 0x46}, &(0x7f0000002e40)=0x8) r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000031c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000003200)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r10 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000003240)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000003280)={0x0, 0x0, &(0x7f00000032c0)={&(0x7f0000003300)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r11, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000003340)={0x0, 0x0, &(0x7f0000003380)={&(0x7f00000033c0)=@newtfilter={0x54, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r11, {0x2, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0x2f}, {0xffffffffffffffc6, 0x2, [@TCA_FLOWER_KEY_ARP_TIP={0x0, 0x3b, @broadcast}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_TC={0x5, 0x4, 0x10}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x5}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) sendmmsg$inet_sctp(r5, &(0x7f0000002ec0)=[{&(0x7f0000000080)=@in6={0xa, 0x4e21, 0x1, @private0, 0x1d94}, 0x1c, &(0x7f0000000940)=[{&(0x7f00000003c0)="07464b1cfdcceed877edfe546942b69de7358c428f7c9ac743fc0a5ef662491b448a3fba76101aa6bcd877023f9a3941fa0c076179166c8bc6adfa00e32349e3e8f54887e1023c6641dc532acdc099081ab32a608832d5277fd95aea085f742503addfcc482c13c9cd8fc08b950698e6720795baaa0ebddf56f6fd7800beed8b601041bff5533b04b2696c74026385bc12c1a4474605cd43cd892d87b66d00f9958b4dffa2ffdb88f5d3e8f8cdd36271d1ca829c3a25310beadb8428b7701c54b23fa69a06c8c37be66b558b49cb9bd16d2a94ee49", 0xd5}, {&(0x7f0000000580)="fbcaab32fe59438cce9450aa599250e6ba99aaa5c068a16689ce9bd926c17751a595d93e7aa7c5afc611690e38bf4f4b2cb47d50c146581c88ed258a0fd0de1483a6f4a3f3b60a5667e19e2584acb01cbb4855e5529552b2ad2405e2c7b53503d6dcbf037ab41e43ce8550de579002c873fd9b29c2c8dafae90d7dd41d9a3aec2dee884984e6c615f1550137fa43bc02d73db0c0857e4d4c90a2ae680208e9a7bbcc89a08e79c8a760d035d60fae9b7c6026e0f0b8", 0xb5}, {&(0x7f0000000640)="b098c58ec09df514bdf3493f4e36184ddf2fbe7c0d4ef72194a930afe45459651a4aabff643cbe8692ba47ab96501ff7a7404d0ba59b3c88032e20719ec92e44b485b2583fc63f218d3d9c92d3a8fc59893179d5ea06b882ced038aee3ea8ace949b256ccad5843451be46c550f9d640", 0x70}, {&(0x7f00000006c0)="bf35755d5b8fc1ea54822dd15363f1f4414e2bf386e2a44db4ad878db07cefd6ca810cd19401321cf7d904876ad82fc21afc3af095c4a015b7a5a148117bb8ca5334e67bcdf2d285606618e59ea1834c49898d5f6d7a7ad4f042e09ee240352a7aa10b73b1da2c42f18b3b84ad4a7d9791b4940a00fee29ca723cf9a91d6cf5d24781daea68033cec83bc8bbc2b36731afed7b39622a5a26c413025aae65f820a691fd0437f0101e16ffe73e32010a8f46aee37677faef93390e58795d12f917f32c78068b155246ddb22e3691ff3cfbf81a637a927f00a6212f8c558f55f5", 0xdf}, {&(0x7f0000000880)="7bcbf18af9b19ff659650f1b2d78bfdab849850cfb58ee1ce4e4205ae19bc76ba55e79083ab61498b26ba70b36b11ae46781473714eaa1c49e8184930a8bfa0911a7daf1372f96804858fbda10de1f8eb8c1cc5fad641b511d9056ff28d91bac4c20aa2f6e46d5204708d1e01792f114ab372163cb10ff072cc8acaf0a918509d9d98c22f7ca96379afc27cf66bf394a7f20f658ced035a79692eb8fe9a31c3d64b0c64853c7ef3d768248", 0xab}], 0x5, &(0x7f0000000a40)=ANY=[@ANYBLOB="3000000000000000840000000100000001000f00000300000300000001040000018000000300000000800000", @ANYRES32=r6, @ANYBLOB="180000000000000084000000060000006b000000003500000000f8ff00050000000000000018000000ba7c08000000000084000000052cc25da1943bd0"], 0x78}, {&(0x7f0000000ac0)=@in={0x2, 0x4e22, @empty}, 0x10, &(0x7f0000001140)=[{&(0x7f0000000b00)="aa3c437549fe6a05e1ff042a2cf0344fe54d64b8aa13e8594157b520ef84765785896bf3e2360a4563cac1483234178eca033f7ca1e12c54e5c925463a", 0x3d}, {&(0x7f0000000b40)="5c4805dcec25f12494a4f030817269753396cff688bbe6bfd6c8677107c6e24d1f932dd97f2c9ea44ce0b1fd5fbb306fac781dc54a7817a63041451c13222974c6aa3a2f016a1a51039f572efa75665e0b6d908588fe008030e70a557b1257079f9e6162f8ad0c944dcf169f5ebf2734b6c6c92bd03c79e65d6e49b47dc45e686ae4de817348ac1f93f61e946be4305151d3e952ee7bd9", 0x97}, {&(0x7f0000000c00)="36abbb9ff626672e9d123d89fd93e50185e0180936df240461f2a461fe48c115034ad8819803eb38e71340a74fcd1f58688449d3cdc276b994bcd35cf882f90d780bb541437a2d977c9a4aaa50e3515bba30b36e841d79b515c082372b4fed0e468c3abd2ec92dc05ca48bbc0fa513c0816fcc468af586782de9fc46068dec00494faa89ac2089cc493a9e94f297dabb2fe8b93edbcdefe431ae5d1236299e55f258d751f35f062cc076c02589f5c5befa07e873cf8e9018c7cb850093f46cb0ec78d829e3ad332bb498576815937244924276dede6807a7ca2a", 0xda}, {&(0x7f0000000d00)="9e1a57a8ef2b80b7f2caee60c553a0a23920a7ed69abd6932f9e127b706d0331503bd15bce5ab438f8408f496b9aa4588c83c08857303edf2d70e387a99c858d441c25f1ca8d77cfbac8b1f35e366144cb8503e1ed7cfdfaf2a7e9ffe543c8a99256a9c44ed2fe7e7ddc2e153ac6d31d5a9bf52397cd0de0364f85125231acdf64edf7119a0c6cce757c11ab11c6ab52af5533afd6151f9267c902cf02e9ca96b92b22915b4efb833531c9ee76e8674be78df12a7540dfd9", 0xb8}, {&(0x7f0000000dc0)="84f44d87ed34ee8fdc1f6c2f9660565ad714e468589af4609e258defe0be6345a96258ed796fbeeb053496850a2bd795f4b3f0772528985de16dea429e174402223d543d28ec5bd9b69a08582cfefb34804956ad4c047ecb5408ab5cf0636ae8b3ab3e6a46d37a66c3018bd44b59d9d8427cda875435ef92ff5644c1124365d014d2699b2588738d15046a88467fcbd2468056a81adb1332c55089b5ab868191ddc49bb048a139ceb75fb2db6564d7856a732df0e83d88743d2f33034fd051c58104b6a0310335d2a0df37c3334864ec974fdc2f3fc56573d829a4424bf37ade044f73c4f314c5597d8857ad22", 0xed}, {&(0x7f0000000ec0)="1610aa3897b51294a6db2f1bbefaefc685c1d3e1e944f505fce0b78359062aea88ce9e9e6a3f8fa9c08f8ef04c0f166b1b5a4c10b746a83aedd8e2bbb80d7ebfe9351f67938c2f405bd17b217a90a3047ff1faf7041228e2ad8cf6976228e38d3dc1d146d502a78bc170d8e4251be22de3de5c8dd6ea5a70242c5a9fbcf6902a5e74d0c75f0c92746eac745b62db72a1a3c87d6e7cc1e5db0bd880276e466f1a696b3a7f2e97cd06d08be348f14e2695fc", 0xb1}, {&(0x7f0000000f80)="473532bc21f1d040a77674e15630", 0xe}, {&(0x7f0000000fc0)="684926386235450a037752f6d8765f40230ee44398e46bfb8f5f9b301ba80e2cb4c4be2ad01d16f1a42cec9534d56a735bea573e65a173fd13a46d3c3bb1b78f7917a647f98551a0c9679f965ad854caee5fd6e279d9ad999a2905004c94f03c853a189dcaed98baa98b3c3cba7a7e025736a143ccfb5d65c921c17de1059ec00d79581002f7752282104dc2d2ffb521beaec19ba9cdff57ac5a917b685945de92045357ed6bcf29d01667818b48bf7ac49283aa2da06e447c76ba41c846b527cb4bf896b21b3b5d1f3c398cb76149361ef897a905327f863a716655943fa296141fc649f51a1f3fb2", 0xe9}, {&(0x7f00000010c0)="bda9626b897084a0d9e40f46ec82a6df52037412c60186c5cc4dc1a4115e278c949bab1163cf0d28c437819fe3dcb9cfd15fcb9430b60e3a8859f7ae605f736d9ab6cd979f42d9c295596396bc76726cebddef45878eaf", 0x57}], 0x9, &(0x7f0000001280)=[@dstaddrv6={0x20, 0x84, 0x8, @private2}, @sndinfo={0x20, 0x84, 0x2, {0x2, 0x4, 0x8, 0x7fff, r7}}, @prinfo={0x18, 0x84, 0x5, {0x30, 0x40}}], 0x58, 0x4040854}, {&(0x7f0000001300)=@in={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f0000002940)=[{&(0x7f0000001340)="d49700340f71c4d653ba9e362029b2fe0a6d5213391eed7e5be791158dd8fefbd00538d1796dd349dbdf256fab1ff5d5665f53692426ad102a3ef1584f8b44b5bff6cd523f8d7d472240875229047e65131432f478bd0a2a291a66843cdfda5e6c3725b2206b09b7343cbd9b5c5cfbb7a3d83db99c1f9a5c118580814c3fdc8d790cc1e6bab0c83d1e7a", 0x8a}, {&(0x7f0000001400)="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", 0x1000}, {&(0x7f0000002400)="13409b06ed0c599bbf82a5dc2cd95c3ec8f19d78da3a25829ebe9dd10ca51a7576d1320254b75f9694383a8468dd909be821ba4dee826f179224", 0x3a}, {&(0x7f0000002440)="99e2cf5376f42be6a1e10b13606649c3ff8bacea6d5e76f4106013e42f74488ebd50fe8755e449b351fa8c0f2fe485fba75030791f48c5f30eb60d41a78480d12fd49dbe7e94f88742529d392ab4ba0d77e26180ec07323f2bd139a449ffe11551e58307e8a02e6ec7756d112409ad0d2f4031e169a435792d3f553455d953b677dc05c6e144edce16e91b69d67438546ef004208a7e10bd2bf681cb16bf8f706b15b37b33b3dd044dde95", 0xab}, {&(0x7f0000002500)="a501f0d99aa2ca7c162f750cf2fa3d031a49984f47a9e887c5b6050c104afa8383ad8fdaefd150cb936387c9b0cfae35220ca18db426699a11d5a2b49183a2c9c82b7ff4ec02fe0200ed539a477669b7519e29c9c6e7f3672ea9af89373bfabe5febf7b2f2c01fa0a2b2c46f503fddf595492c8b53903a6484a5334aa8e730d19561ce8de179f3c53f461624a244ee5718be0d9c519c6f09c8e2ea932202f90c01", 0xa1}, {&(0x7f00000025c0)="d8cb287030c4b42d1672e8bea517ccedacebb16367af267d78e329bc5b7b95a83c538a8e58721f33e274c950ed18f8a645e0b5b4ec", 0x35}, {&(0x7f0000002600)="8f49ce4ff9b83cbf104b54357530c21f873ff86f5b8913be30a038a73843ee3ab0cd6160ce816254248a4161640e4fb2dce9ee232a3dee1b9b20b79c70b5cecdd410fd9d2122e9b5dec7c4c91f10c4d0805cd5baa79db793a9826e68f40a088d066d966bba7909e792cc3a6c0599afffcb9abb0fb84f6356890106176e68fa81e2426ddec59fe9a75be9b43f55d5d5e8ca46", 0x92}, {&(0x7f00000026c0)="1a2431c5335c258daf0c5f2ed3e4b9216fa56b53442db33ebecab6e8678501dd3b7c4304b3abf519f6a5adb8da7e73bff64ea8857356bdf84a52022546b65eb79ab904884fc05457d2a5bf4176d93182a5a279d719492857780f3961a858714b19cb932f9238d441aa6cac4211584f4c9569291f65297aa7fb30b6d437cd4f21288dda7d8fe04dbcb8836058b2f3b27dd36b743e1ca76ae6641427def9cc42762066e55b0d2a6fcf2b83bcc401f29c30597d20fd05c4ed159ef4230229e9505499ffee7bbf0cb19735fadf3a57d00d0e168dbcb334007e261f018a581c2c26dc258fbc63c680", 0xe6}, {&(0x7f00000027c0)="774511fc3c6011a929fef8547d1c46e374ec7c1f4688275eef3050437079f65ae2e533c4ca309f76f4130315ffef891578bd2fdd0806c6c2fd5a91bcde3e88e0735c398b314d2d5c2f694502b5ace26d91ed24", 0x53}, {&(0x7f0000002840)="12e8bf148f78da8466a8d4893d2004154aae4cacc4a7ef63071b41f6fe1e6b6f7aaf31f609127dcecd8bc2b8219279edd319a6ad0c2358771a58ce0ef03169710d5931bbc68f6ff15d928f52b8cd43cf26555d65a6a600101170e599d2417199c94ac01860f07f0f1a0de18c0b08b528be0bc8a339e69b83e2ee5f66308d51dfb52900c301b2b9b166be31846dd079e20890590f3ad0f581e15a55821e33c72c9722d4be5cecdb39c1145ab157b97dfba73e7ab346a527e426c006542e001f679effc5c41eb0f0eed214b148fd79bd", 0xcf}], 0xa, 0x0, 0x0, 0x45}, {&(0x7f0000002a00)=@in={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10, &(0x7f0000002dc0)=[{&(0x7f0000002a40)="aa8f27cc29e4d738df3ff7f59be99d91b2b96a4c192314ddef732f9101576efb8f1afe44b7305a3c909ed0e912eb2f6ee012df21cc7d12147b6fc9e2d88cde201a853b37c5bc8d9842ab20a69457284f5daa60b818726dc00687e96ea528685b02b62e1d4c673baf94b4986f2cfb6ae05ae5b466fb57e2b730260fab72f33e6cc39832aa18d7872a474234637900418a9ef83671badd2d4f9aa27889dd9d751e5320292a2c61ac977405bc3b209b0b956bd79f1a1db13a65baae3412e644ff039713da0457c29dd53c38ab23fcf31b", 0xcf}, {&(0x7f0000002b40)="c07115f60fa97dca55209c50c11c20c2cae39d068dc638b372e6ca1201a9ff908d04c6a4c6849965ba12168e875b14bdd296efa413fc1bfa9c57ec24e80f8c0e55a7e49a384f7ef03b3356ac93c68fab0de868600789ca6b93761928b65d2ce05e6fbdad8a3c22c3639b19b2612482e328df1155928bd1aa4dd1e99e4fdb7aac421a754e9c00f47b3751f4c1b358b8a3ac1564fbdfffad2aaa7c3eb7112870912e09a2b30f1039d2d59d8476a9b78c1e8da4ca037324ae2e457a1aeca37063cdaab079e6624ae269d4ae514d1ae737ab1b8fe9d536", 0xd5}, {&(0x7f0000002c40)="d3e1fbeaf7a6d919af981b89f33be92dd3ff0b47f168fb117d9f2b2f221ffe8cefa5abb08ec01bf7035a1371cf7f624741614cbbfee4b25dbc5cf5f7e56f10ad58a700527ac1e02274849403c4be4aa684ecc9d3a35ab939608286a8fe1b06b899813faeb05c1970a9add0b1b96ead73b41952946362c2d3b37c8b0a5b3ea4acf05b9bf5ac588bad5bfed6", 0x8b}, {&(0x7f0000002d00)="d2c7e451dec439ca2b24f66bff4868b69f64cce20ce70a6bc31855a6d30be7340afb709594696ef96aa1786bff4d877c40ec71d23b9152661123efc63979d8ce72ddbbabd3adb3a1436fd6e639fcf0a0ae0abce889b4e58ac96c405921dc17ee9377111d07f80cbdf59f04706c067fa5f502106905799d77929763330157963c8448f9790a6346f95c0837fcff573988f0829cfffa76274b4eb07779f70de652460d386199ea1c52584ea21c319a9b17c297aabb628d459d", 0xb8}], 0x4, &(0x7f0000002e80)=[@sndrcv={0x30, 0x84, 0x1, {0x5, 0x73, 0x820a, 0xffff, 0xa, 0xc, 0x100000, 0x6d3, r8}}], 0x30, 0x4800}], 0x4, 0x40) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000200b703000000000000850000000400000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000bfa200000000020000f8ffffffb703000008000000b7040000000000042ab9d2561a57adc82fe15643660085000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0xfffffffffffffdfb, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.170638098s ago: executing program 0 (id=5660): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x402) r1 = socket(0x1e, 0x4, 0x0) ioctl$SIOCPNADDRESOURCE(r1, 0x89e0, &(0x7f0000000040)=0x2) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000000080), 0x1) syz_emit_ethernet(0x308, &(0x7f0000000340)={@local, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x8, 0x6, "bf92c6", 0x2d2, 0x2f, 0xff, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {[@dstopts={0x88, 0x0, '\x00', [@pad1]}, @hopopts={0x11, 0x12, '\x00', [@ra={0x5, 0x2, 0x1}, @generic={0x7, 0x81, "fc8538c5630bdc633abe6aac92348ac506172bac3b0dfdbe8f7016947d98332425ee39e3b5bdd5db4afc39acea6eed99e0816d7b8878f90748083992e6a4d8059bfaf011269e0a3c364ecfe8d07025aa3e1ac93ca879f14fa331fc83f702f937d77298966595369dfab18eaaaf58ff581ba198ca9167fa1b925b53b1e65b561ff7"}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @pad1, @enc_lim={0x4, 0x1, 0xdd}]}, @srh={0x3a, 0x2, 0x4, 0x2, 0x0, 0x0, 0x7, {@private0={0xfc, 0x0, '\x00', 0x5}}}], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x93, 0x0, [], "91baf1bbe52d09202286b1a3e33327375526108c76344b73fcb8152b65c2612331ad0eac36ced173de9a4cf29fb77b13dd810dfadd58b18051aa4793e2396b8715c5468d58c6928e4c222d7434fd02eb0aea1ba0f3adf91b3704d248e6010ee4b45ec33e1c4fd765989a44bb53cf5e05353108720c10d2b105ad3f367fca28308ad6b00b34ca5e4d6460469c5387e79a0b6f83"}, {0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x800, [0x4f, 0x6, 0x9], "b1a8384576de8c51a0144b4370ee3d6371b612b6650c834234158d74a72b8ffb8ecac18e6d01245df11527ed50c65c08"}, {0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x86dd, [0x7, 0xf52], "5db3ea45db317b74e39b005a2f188d6085f00da6405725ce464b33aaa1a16f08c83c033c2313629437407dd57d87ca88ee1f1026ecab6998349cc66675bb85e36088db2a52b8f1d05d429099563c489e8490774c6c0fa1a62524741a0fc31255ff689c98e1739cd1dd644bb27d5e4fb91bb3f7e35a5e63a6117c2e251c9b7ef4a5199056d036995cb9471bbc8efd5e16d300e2cffc8ed23f1b6dc3800d77ad914302b7532a9600e1644f899d82680a973849faec81f93274c4f793d61757908cba61535a29ea49bd617ab7ad7d94f4a49cb1798a7928f2b2052e23033e9f8462a9b415fae3614deda99d77f21d8eade38c"}, {0x8, 0x88be, 0x1, {{0x6, 0x1, 0x3, 0x3, 0x0, 0x1, 0x5, 0x9}, 0x1, {0x4}}}, {0x8, 0x22eb, 0x3, {{0xd, 0x2, 0x70, 0x3, 0x0, 0x3, 0x3, 0xff}, 0x2, {0x7, 0x1000, 0x3, 0xe, 0x1, 0x0, 0x1, 0x0, 0x1}}}, {0x8, 0x6558, 0x3, "6fd092af190e3443"}}}}}}}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) (async) listen(r0, 0x402) (async) socket(0x1e, 0x4, 0x0) (async) ioctl$SIOCPNADDRESOURCE(r1, 0x89e0, &(0x7f0000000040)=0x2) (async) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000000080), 0x1) (async) syz_emit_ethernet(0x308, &(0x7f0000000340)={@local, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x8, 0x6, "bf92c6", 0x2d2, 0x2f, 0xff, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {[@dstopts={0x88, 0x0, '\x00', [@pad1]}, @hopopts={0x11, 0x12, '\x00', [@ra={0x5, 0x2, 0x1}, @generic={0x7, 0x81, "fc8538c5630bdc633abe6aac92348ac506172bac3b0dfdbe8f7016947d98332425ee39e3b5bdd5db4afc39acea6eed99e0816d7b8878f90748083992e6a4d8059bfaf011269e0a3c364ecfe8d07025aa3e1ac93ca879f14fa331fc83f702f937d77298966595369dfab18eaaaf58ff581ba198ca9167fa1b925b53b1e65b561ff7"}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @pad1, @enc_lim={0x4, 0x1, 0xdd}]}, @srh={0x3a, 0x2, 0x4, 0x2, 0x0, 0x0, 0x7, {@private0={0xfc, 0x0, '\x00', 0x5}}}], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x93, 0x0, [], "91baf1bbe52d09202286b1a3e33327375526108c76344b73fcb8152b65c2612331ad0eac36ced173de9a4cf29fb77b13dd810dfadd58b18051aa4793e2396b8715c5468d58c6928e4c222d7434fd02eb0aea1ba0f3adf91b3704d248e6010ee4b45ec33e1c4fd765989a44bb53cf5e05353108720c10d2b105ad3f367fca28308ad6b00b34ca5e4d6460469c5387e79a0b6f83"}, {0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x800, [0x4f, 0x6, 0x9], "b1a8384576de8c51a0144b4370ee3d6371b612b6650c834234158d74a72b8ffb8ecac18e6d01245df11527ed50c65c08"}, {0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x86dd, [0x7, 0xf52], "5db3ea45db317b74e39b005a2f188d6085f00da6405725ce464b33aaa1a16f08c83c033c2313629437407dd57d87ca88ee1f1026ecab6998349cc66675bb85e36088db2a52b8f1d05d429099563c489e8490774c6c0fa1a62524741a0fc31255ff689c98e1739cd1dd644bb27d5e4fb91bb3f7e35a5e63a6117c2e251c9b7ef4a5199056d036995cb9471bbc8efd5e16d300e2cffc8ed23f1b6dc3800d77ad914302b7532a9600e1644f899d82680a973849faec81f93274c4f793d61757908cba61535a29ea49bd617ab7ad7d94f4a49cb1798a7928f2b2052e23033e9f8462a9b415fae3614deda99d77f21d8eade38c"}, {0x8, 0x88be, 0x1, {{0x6, 0x1, 0x3, 0x3, 0x0, 0x1, 0x5, 0x9}, 0x1, {0x4}}}, {0x8, 0x22eb, 0x3, {{0xd, 0x2, 0x70, 0x3, 0x0, 0x3, 0x3, 0xff}, 0x2, {0x7, 0x1000, 0x3, 0xe, 0x1, 0x0, 0x1, 0x0, 0x1}}}, {0x8, 0x6558, 0x3, "6fd092af190e3443"}}}}}}}, 0x0) (async) 1.093030443s ago: executing program 3 (id=5661): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000040)={0x2ddf11b3, {{0xa, 0x4e23, 0x1, @remote, 0x780}}}, 0x90) syz_emit_ethernet(0x1016, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], &(0x7f0000001140)={0x1, 0x4, [0xc08, 0x7a2, 0x6ee, 0x671]}) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f0000000000)=0xffffffff, 0x4) 973.420309ms ago: executing program 0 (id=5662): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000040)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000080)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb3f66d6361dbb7d553b4e92155", 0x39}], 0x1}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b15, &(0x7f0000000000)={'wlan0\x00'}) 972.626834ms ago: executing program 3 (id=5663): r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000d80)={&(0x7f0000000000)={0xa, 0x4e1f, 0x80000, @remote, 0xfffffff8}, 0x1c, 0x0, 0x0, &(0x7f0000000e00), 0x18}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(r0, 0x84, 0x7a, &(0x7f0000000040)={0x2, 0xffffffffffffffff, 0x80000}, &(0x7f0000000080)=0xc) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f00000000c0)=0xfffffffb, 0x4) 938.306559ms ago: executing program 3 (id=5664): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000b00)={0x88, 0x32, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x75, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xf}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31"]}]}, 0x88}], 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000680)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000980)="3300000008000102030405060101", 0xe) sendto(r0, &(0x7f0000000040)="120000001200e7ef007b00000000000000a1", 0x12, 0x4044084, 0x0, 0x0) socket$kcm(0x11, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c000440000000000000000b14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000900)=ANY=[@ANYBLOB="501a00000d0a010800000000000000000a0000000900020073797a31000000000900010073797a3100000000241a038018013f800c00018006000100003f01000800034000000002"], 0x1a50}}, 0x8000) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0xc, &(0x7f0000000140)=0x4, 0x4) sendmsg$netlink(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="280000005f00013caf23b8000000000008003b"], 0x28}], 0x1}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000006c0)="1a816e725da15d021b3c01dd04841a801a811d7123e67800a44f5391535cf0e74fba2fa73ced207027cde855a4a9dc2cd57c578e088b4372f7fc3157ce6e8cf64c62fccc3bb7a8fad5bb21c5c7143bc5ea485f2493a5f424c53a49ffc92b997138809cc82e55d24f91834d4d82b576f380d689ec12df", 0x76}, {&(0x7f0000000880)="399d9d76de1b5dab38df3fa5cd161baeda6ace2391d8519decb90d8c1021f4d9a42525f28131affe5b3ca5fb087302cf5f7d3facc7275af4f5f405a1606d1c7a87cd094a51114879c7d841e34c3d5521", 0x50}, {&(0x7f0000000080)="4132efc42157c14e017dd43eea5724ee3b5ab28001aca51a4fa7300415f443450559adfb429f17b6b7a673385cfc99a67f7bd34a6f80441ce7bfcc7094629c91adedbed24827d11c9648c4601486f02581e2e63eec7c", 0x56}], 0x3}}], 0x1, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000000240)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a300000000048000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000210c0009800800014000000005600000000c0a010300000000000000000700fffe0900020073797a31000000000900010073797a300000000034000380300000802c000180250001002130404c6bfef3a31e2587ebd76200eb3ea056f39e3ab8a93c358099bf8cf3007d00000014000000110001"], 0xf0}}, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000100), 0x0, 0x42040040, &(0x7f0000003700)={r7, r8+10000000}) 835.824711ms ago: executing program 3 (id=5665): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000240), 0xe) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SREG_KEY={0x8, 0x4, 0x1, 0x0, 0xe}, @NFTA_DYNSET_FLAGS={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_DYNSET_OP={0x8, 0x3, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x90}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) accept4(r2, 0x0, 0x0, 0x800) shutdown(r2, 0x0) 735.099724ms ago: executing program 2 (id=5666): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_ECN_SUPPORTED(r0, 0x84, 0x82, &(0x7f0000000000)={0x0, 0x7}, &(0x7f0000000040)=0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SET(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x70, r3, 0x20, 0x70bd28, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x2}}]}, 0x70}, 0x1, 0x0, 0x0, 0x44}, 0x4) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) sendmsg$NL80211_CMD_ADD_TX_TS(r2, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x54, r4, 0x300, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x4, 0x28}}}}, [@NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x1}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x9}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x3}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x4000845) r5 = socket$unix(0x1, 0x5, 0x0) connect$unix(r5, &(0x7f0000000380)=@abs={0x1, 0x0, 0x4e23}, 0x6e) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r2, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r4, 0x200, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x802f, 0x72}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x8040) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000840)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000007c0), &(0x7f0000000800)}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000880)={&(0x7f0000000500)="00c52ae3cd33ef21c03dcd8cc362bef71a17a20efc960e8865e6cfe1d85853391b8be02a33430e240da14b3283fe4d21733996725b73d54054d9de928e595340c2db16cc24a6cea37c2f4a8d20c9edde03cbe9b7ebf1ac27b33074753631d39335163ed8e91c55d872d95bc37273d2dbaccb459b0173e16ec6f9308624ee2926669b", &(0x7f00000005c0)=""/52, &(0x7f0000000600)="2af17f2cb180e0f29393dd782892b4b3bc68dab33a655e10f6ece4324f885b7113972fda6ba6dcbfafd0466c94975796f0a5904e0729848c02a73a852a23e754d513ce3fa76f6791464a307676352f44d8aadfbb50e38507dc61cdd0c1fc55cd4c2747399d98a7be653947212a298ad7d987c6b5ace6763bfff88cf97942c305197090ecce37950141460b3c1846dadd7b8750f27e44e44f4f994a2e69c1c0736ef6c1452b006f2a1bdc0fd2e9268e0a959bca4cfba911f00d538f89b2fb17185a3bb8fe735668b7f3c34e3e08bd1bde15d50a774fee34b33e9f0571ef73b4", &(0x7f0000000700)="6e9c161a4f34297d2405c17054f4ea490281ee6fda793cdafe162c28743fa475779c6408f96a327cb7e83ca29231788777a5de325b241f9907c59dfcc9d6a0468e7a9dcd085f6324366799111b52c781934f45a8e266dc4e5089c59c4bc94d007f090e326665304cc982ad3ab82c149a24871607822c897a0ef9fd667ad2c3d3993a23e1a85b27bdc03933346e9f7d9566862f4e", 0x8, r6, 0x4}, 0x38) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f00000008c0)={r1, 0xffffffffffffffff, 0x800}, &(0x7f0000000900)=0xc) setsockopt$inet_sctp6_SCTP_ASCONF_SUPPORTED(r7, 0x84, 0x80, &(0x7f0000000940)={r1, 0x40}, 0x8) setsockopt$inet_sctp6_SCTP_EXPOSE_POTENTIALLY_FAILED_STATE(r7, 0x84, 0x83, &(0x7f0000000980)={r1}, 0x8) r8 = accept4$inet6_tcp(0xffffffffffffffff, &(0x7f00000009c0)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000a00)=0x1c, 0x80800) getsockopt$inet6_tcp_buf(r8, 0x6, 0xd, &(0x7f0000000a40)=""/246, &(0x7f0000000b40)=0xf6) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000c00), r9) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000c80), r9) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000cc0)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_KEY(r9, &(0x7f0000000dc0)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)={0x5c, r10, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r11}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x4}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x81}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x6}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24000860}, 0x41) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000e40), r2) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000f40)={'erspan0\x00', &(0x7f0000000e80)={'ip_vti0\x00', 0x0, 0x10, 0x10, 0x6, 0xd8e0, {{0x21, 0x4, 0x3, 0x6, 0x84, 0x65, 0x0, 0x4f, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x1c}, @private=0xa010100, {[@timestamp_prespec={0x44, 0x2c, 0xaf, 0x3, 0x0, [{@multicast1, 0xcb67}, {@private=0xa010102, 0x6}, {@remote, 0x4}, {@broadcast, 0xfffffffc}, {@rand_addr=0x64010101, 0x9930}]}, @cipso={0x86, 0x18, 0x0, [{0x1, 0xd, "fcc32a37920e4a26a2130e"}, {0x7, 0x2}, {0x2, 0x3, '.'}]}, @ssrr={0x89, 0x1f, 0x3d, [@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @empty, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101]}, @timestamp_prespec={0x44, 0xc, 0xc2, 0x3, 0xd, [{@loopback, 0x400}]}]}}}}}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000f80)={0x0, @initdev, @initdev}, &(0x7f0000000fc0)=0xc) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f00000017c0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001780)={&(0x7f0000001000)={0x74c, r12, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x90, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x8a, 0x4, "3a1aeaacf2a28b49b7e2bca059d9926a9538a509631b19afc72b90335588b97dc91824a1a8e156c47e728821dce16d03cafcb5790e72eb3cde1a0f20acb3ef3d4844831242d2a678034d580e32f24f09dfe2e38afef3b3dde99ff58aed0a49290b4253116cad9422d898d7de373ac25df835a6c9eca8517868e881f5e8593e6a2af607b61aa9"}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x314, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x2}, @ETHTOOL_A_BITSET_BITS={0x150, 0x3, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wpan1\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, ']{&^+[G{\'}\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10001}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x38c70730}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x4}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3ff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, ']\xc0$:@\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wpan1\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'netdevsim'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'nl802154\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x81}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '&/\xef(^\x00'}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffa}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '^\\:)-\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'pci\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '({@^%\\@(\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '\b-}\x00'}]}]}, @ETHTOOL_A_BITSET_VALUE={0x6d, 0x4, "c0009d421e4f362ee506800c6ec03a8da2f2a0812ecf59e0423c347a455e60bd06d5453eac8a9ddc45b188af992e5df7598b82b6a26ed9bb7fa61b75be4ef59dc37a46605481305ea10effd4818bb75ad075129b0a3747f2bd3b6c83437024c31515fdd10cf61f8763"}, @ETHTOOL_A_BITSET_BITS={0x108, 0x3, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x800}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, '&#&\xa2&::}}%@\x16.+\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '$\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xb}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ')\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x15, 0x2, '+.^@(--^*,@:,,$[\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wpan1\x00'}]}, {0x4}, {0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '$\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\\\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\xff\xff\xff\xff\xff\xff'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '!\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '0000:00:10.0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1000}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x1d, 0x5, "e461412b0dccd074dce56e1c737e5774b27024df249ca1d1aa"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xff}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x2}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x380, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xdd, 0x5, "fd033c499f161006b668eb330a21b173413b3e9b4e738e2895be297b27c01899dc31b46d324a6d9fa498c7351943d3d594f8575a79a442aa7a60d50d86f0d72a416f406b8b3b046ac3db8f0865c10ac326d04b102ecc25b8a1e2850ed742d1005d06527871db39c7ade80b84a4121501f31442d86bf6e391b780518ab1fe149d157bf39f2514fa487cd6f1287c807ca6f46f8bf294d6ebfc7a4018abf725f5686ddc55c2610decf9b6e3f0b8dee35b0dfad1597530ce5ad672b7cc929ccd5ae8212481b5360351a558da457775a17aacb32b4a712ade3cce80"}, @ETHTOOL_A_BITSET_BITS={0x70, 0x3, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '+\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '%(\',*--]:\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5f}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x81}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x10}, @ETHTOOL_A_BITSET_BITS={0x2c, 0x3, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xf2c}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7ff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_BITS={0x88, 0x3, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '![\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'pci\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x101}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '^\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffff7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x68e2}]}]}, @ETHTOOL_A_BITSET_BITS={0x64, 0x3, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'pci\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'pci\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\xff\xff\xff\xff\xff\xff'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wpan1\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xb3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'netdevsim\x00'}]}]}, @ETHTOOL_A_BITSET_VALUE={0x103, 0x4, "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"}]}, @ETHTOOL_A_DEBUG_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}]}, 0x74c}, 0x1, 0x0, 0x0, 0xa008810}, 0x8000) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001840)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_SCHED_SCAN(r2, &(0x7f0000002b40)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002b00)={&(0x7f0000001880)={0x1260, r4, 0x801, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r15}, @val={0xc, 0x99, {0x7, 0x3b}}}}, [@NL80211_ATTR_SCAN_SUPP_RATES={0x11dc, 0x7d, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xbd, 0x0, "6dbdc10c182e6edecf0e3249f3cc8fbb539a8cbe1a17ddd6b1528a5ef24667f18057ce20b4d1b84e5deade5c630c59f378ef3ccc510ac602143fd3ed0445cf831dab2f2841f930fd897eb8c547142665bacd502fb8dcb907319bf5a4473159c91643d2eeadadcac3fa81061b0eb23c4509fa43fe36faf30a97ad498f777c849ade80799dd16d7cb9899973ed19012dc4d4e78716a3a24f71edcf0a2e2e995206fe2dd063d41bfd6ed2b5cbb036ffa20a861a9dfcb164aa2b0a"}, @NL80211_BAND_5GHZ={0xcc, 0x1, "45572f5150ba88a41efe1ed012b7a79c396781903f30b842b772d04fec1940738e51afb9393bb1783a1c7db80d744cd3d80351421783202a1233a39e4a7fe020429b8cf750d31974ef0901f6ee4ce16b139d96d2ff7e298f23ddc340ef13913fba827afe15a06fc190abcdd97f9ac829e650f3dac86c58ba277d5f96452876149f8668375525f9ff18b3f789f449b46ecc4648e2c1368b1fd31097c9df534ecbc7e4668d8a5dc8796535f509d344a3d12d16cf3a2fd19ae333a6c5a3330968ae61f35bc56406dc00"}, @NL80211_BAND_6GHZ={0x1004, 0x3, "2c0fe9f8dd3d45d8711d8197a1bfb725e2c95a03fe370c83b83113a5d143b27d22d18e62a8c1be28127442d87676a58b51a8aabd17daa9b6bd4f5744eda9a23285ab38ac290ffc83b1b4b653f2c2145e2cd04e05234e8367a7e786772b63cff34f418f032f830350004999139a632d360f53b5dc7e07b631783630e5333c0da393f2682c793e636b9a74d76580e574c941cb0ddab7b3384ddbdfe4fda3d9aa0338b81fddb714ed3fd1726d4adf979ae7be68fbbdf2a31068e955400fb60ced0e01ec5cb12dca8200bf5f58403a1fd2b0296edb8a0855fbf0a569efe243e0bcabe20a1f617125a8a13b9f2bb7c053fb19ac955284e4efee0189e9401d84210640635b26512f27166ecddf15b93e74c0a385af2d9528057f3f096fa6ff4f6606cc4c478327542ef0e83cbf63af9b768be4d7ece7d135976e6bf2d66fc3de928557c896b2a5011511a3aac7e6048d7d201eb71f89b925c6e16a006b3d50c7dfdc158cf0a5368c3af226b618d4558259916846553fbdd393571e4e6f1b4fdf4a9a2cd81adad07a7ab91bdca44058dce621746cd849987dc9f8eb0fb873f535929d1b657a338f6bf7e3f1909252b44c90f3ea77c709cf96f04f9fb80c8feb02ec0be7bb976b4d0009273092fc89e3ae008ccd2f4388e9a97e9e9c75af695a37296cb31c3d0b715d08d4247fc847b32232f34eeb9d8d9a5f86c51763cc4af89140eec44392e6455ead5c47bbb166a0b4c94a7d5402e28f88854c106de5930c4233be751152f67577e93c0b5fdc803dc92fba5598132ce9b5de8cb862a2f458b96ebb2fb50502b70c6468094e267c3467129ced0629890d6a651ceea423326ec0eb324c2ea11866f66b9f52878102de107f05bfdee6f4a36d99bdaa58cabda69934d7b439d5b8e77e92bc6a93904792c685d6ebd582d7f1ab2331766a33e82e017e19a71fa48572a7794caa9fc60c65b84af1c9ecb47f56ddef5e8bd8160a7d171b84432c06cb39529a4050e85120294e2f221b3a7174e955b73b9f67c2e1bc20bca31fc0976f01270ce938114c14e940acf2ad7f2a18c3259555af0364c5eb8ccc362c060a7a44ae4dc6978ad016298f2b27ad2c3f4fd8e96f15459dfbc11caca2d84b69b1b410590b850c70c626cd2c15e4e7e3ecdcffcb73d9e1754ebec31e86da9d5fb7749d0f5e80c7578e5ab5abb58867c40889e7a7fb65f2f28f4401566d52ff492c7bb93481d4e9cdb9dd70e2818eb7fc5b36406c76aaa8c12d815245164c5206620e48d15d82fa69bb7a591c2419afa021a7ee7fedfdaf40025425244bdd9e828728d807bcc7db3d513876ab229dd1c7a85dab3988e34c15dd16d445955f7db991ea0c91d01615a4ad6c8cd7a984cb996bc49fcda9b88ebf04a1ff74e95cfa351541ee640ed21744a81bbea341300ff70930eccb20f7f9f184424a7cddc85827b2b983bb0986e6425519127b80b7adf40fd91034feec7ea319bb19159b13e244988d50e2109fa74126de6f1d3870078ef19b5d8ef7a7fabbd9205ef698c90025ef5e39079f9859aabd01e0f612d4c63aec51d424d476e394a187ebf59a7accf9ab4ee894034221a4592ff8cba1eaa7012bbb033e819242cf60c61fa3a1f6a009f2d1ae2aa8820a84416b4b81ff6ce466324cc3275d15e59c5e1334c7d754ceb4a3d9b352e7f74cd6bd37bb38c138e3c80c95923e24aa6bff70bff962de6ecb72df0f5416d8da6ace18bb27534b543d64ae3557a54e7a6ee0625305c1af5ebea0515343318a134b1f069767854ad5327d0d07ed1195853d4a2dd71c3cbde950b47d7cd76518cb97c0feeafb946da6b40ca709977219955ffc4dd3312effc3e3b4c0492caa744ed5d0c3430a4937b74e54b881e2071db0076a23e3fe2bc157309ffef3c36a7830b947d0c3600ae945482b3eb383cf5d4f9cbd70a88ead2c3fdbd0b4300021ea6b00b4abcb17171d47a70b49833757a949e01c6576dc9ba3ec5458b63b150ec48d0208f62ef2358789d98ce6f19c21048af758420489d25b9dcc9bdacf5b22a8256d73f613bfe9503f18d73e8a80aeb8dae9dc1abf8e298ac0821043c5ca14130e7825dce0a27af1966a27a8207ccac1809c97506a003e9f9d5ba072f706b42749e32a5abb702ada5fffdf483fd2302e3a544e732cbcb262e957baa5e60eaad970c38e83a3833fda8eb0f91128b6604965e075d6d22f90f3eb6046f6b39b67882f390c68d9abdab2ca5d4f785f16d563030dda71c3b8f3a632ed6396a6e5f1d934f4b085e186405cd14f3acfeabfe36271213d891a3f3ed2426dfbe4c16e8d564391f2d782240e65da33ebaac565fe0d690f1a70c4e0b22a008b3f98996548f7518a06fbd593150baa7b46f314ca0db6bf49dc2954258bfe88aec8eb1ff93bb95d35b45923fa9ca621d8b9edaff430988cba0ffae2095a631c39c425261e83f1da7e430b138a2f1332c2adcc47044ba655ddd8ecfc844370919f5df9574a254ccb05dd029ceb00aa83038dec361f64ca0ce5423d8e83487ea913a2b8fc92ba277b1012862f657deb45b1634f38253255456f334e7c0561ada6019009653f8e3bb334f830fd257ae5314f0e7b4d59eae1f70f9b606e9b5b38706bafa3bb90a0e9af231471d84803c9d8b0fb6a83b87a77167f2187a21e442aad85cdb7a750d7aef9311f2785aeade4874e14057c348822b540dec508b124d2498ef434d770d94de339d35d7b0d186a785444c17ba082f9ffbcaeeafa01546c3c49793ab77e423d6f06199f895f0ed147b3ec7b6fef568a551ba55de8d127db82f28deaedd0de9c984165da11f927a10a2882475d7ec8ccd1f7e4b9e8ae2d1c688b78e9e156c8d9a95ed307de310ccd491d864f95784eaf442447e28c6e479e761fde5d4758c8893880dc56fd78d4879780522d38aa4b9511572ad11558f03d6e56f429194d3840cd6a4c14f1f6f6f718ceaab08530010fd74b8563313bc51840d1c10582028033c5216a57d09876ba3750b3ef76ecbfda3dfe96412d8babec209256e1792d92eb3aa502c50ae1f9d3daa796f66d07993c8f6e08f25715a29945ce45c8a0e3bdb75cc2a8b871e263ef2f9807534bacd4dd5bbdaa97166fb34b57dbeaeba66d7ab7eeaf4190713b5e25bc771864f99ae0b35fad9034dfc832503e4398aeeafc459a1c48f22881f736010f6d9d534fecde48abb2b229bbc423282d4ac01caca5761957d8f2ba4cfdbad797af7f8cb4ee0c88238587282c6a30947b1208a649d132ace4f97e6bdd28156976300d8d5178f05443477abe6057dbf0c05ba6794bbc9c251454633e5b446c22ff1c223c2d65f38e1ea65648983566889776c701fbaa7dcd14b54e214e32e6491ccdbef725e6cd8d19075ff8da18171fceda09af8130143aeb5084c5a6aa77f19e84e28f07ac83d75b6df47ecb6b8fa0d46ab0fc35fc434d70889f0617d2fbd4e8534a93218ac5b4c6f7221753cc1bd35ade3cc2e3ec968300702e83e019388cfb52466ea421e491361036e4afb5650bab892ebfb4d049dae57fd415e38dacba9f534814e2721ffbdafb0dfad9a5c97f8f03a274c32939c1817f102d37d32e9b7c720b3bbd2f9f75d606c2ecbba16af72111e9360bf62c7c8f3d2511883b3b7848688e78959f5c88c88a56663c0503975b041afa5e30148996a8228cb787f9e61943a303f714896e1cf90e4bed8961d4ad78050392f63f9decf2ad357aa502b0a61dc65d7a4a5ac1f15c98db8f95d05d69fb2b0650ed70060df55e5c71aea0aea02007425acdc626911521991d96e8e54792adfcdc40ec5142a781e574c263a86e7e1b362c370c1b99f5ebd142ddea3ba6aa59cd95a1bd8bd5304ff3b0ca8653240ecdb2afa2c6d48197b15c0f8b06581f5234c09c360d1e3739d541c6a9893fb341809cc74e0dd849ee712b2b8526f188e41be8f89f297bbd83b37fdd3c94f9189756ed219806957e2c17279ceb1f8577675db2a837e78d24179734271ac7276e3975e2d0ebaa8b291f7105d9ba8c7abbe1177874da3979d0bbb2d85d72061305f95769e73c78c03c49d2dd50dbaf2630d95f50a86e2ee1470fb35a49a860f8832c05b9f29f7e6323731bd99fab397ec2aec40f2facf73fba70c77604a5fe478d76897d7e4042b44d88b4beb44d9f600a469953fef7f3da7bf5547dde8ab9e80169cfda62cfce0bf799f01a1bdb4afb1e358017e1a90521d0e8173a032926070964a27eb3632fd6933429290cc7e9542e2dbe4fe3c4ddb124065d5807867da4dc01e13b6c1f0e688c2bb7a1ad55495daa643db5990a9c7e61e8f489fd265a0e45d3773c72be53f073e09a074bf910efd8555a3ad9b81b0705adb0f740d5771bd8bed602d38dc91d9d5bfc47e98d2672b19cf929b31ac58f0bfe35559285752bcd03f6f9eb93d61474deb68c7d27f29616a76e1b9221fdfa3f4d760ab17e772c993b151c7f48e304e80afc6ffcb49f81096d6210b01e1b0da04984a315db2382e6502659ae8c35bfc911d7037b073c5a4ba770e7ad92c9d85d70146c45ad33b8a3ad499167886510d3894041063f5e6661076d61d0a16dbafda5ce6abf1d8bf019e493fa613b6af77e69c3a7d0d4868f02346af26c24693dccf1919ad8ac768974356f181da9ea6ec7459f7befef6cc43789febd7c597050100e112c6410feb7dcc69a69eda62535744cba3766e86200b89fa00dde2f4a2920c2d44ad1d24c35fda60709dca08c9d9eb709c083462d976d0c7e7238e1ab0056739cc2f072ccd9b33139c178c1f30f7e7c2a61dab877fd10e9ebef99140f9397285d93c912210b2d6c9490b399b67c27567413f5d004ee94f6eebe5466d5081c7f3e2489c3db0dbb7f4f33fc5aaa452d124e5d5da155de64fec99b34e805057a7ce93576811b4254a2115824265306212f4d6547f5d4649202fdf2ff956aac2087e48ae96738e29366c160004f04902e187f6e15f99c4e9fddf4c2a6597a256745dfc74ccf1c14058bb2e932aed8b7c580af45e7770c80d00e896e10118465631cc37e05a8d86d2e0664608d4a6468e900292d07ae0b1ced5cdd7b13f2c7f61e8b87bd608df06c645a1e54700e06dd5e4aece012bb267b62bbf6ebcdb952b0a3fc0f104600ea0a994f48ea924649382c0e15491839d0773df1e7d2cb143f54f87205288834c7bdd187265daded0582743130a98cda01f96087a66e48cea0bb29d74eb4e86debdcad6af8c14b1d84736318c627b1af358caab5a9034dc2eab5436367e0e3d2cd22e15af7b42f0afc7ae43009675c691831e9c3bda379212092539839fee4be226da0a71f7d3ae39a52b61cf6e03e88e9424ff577717f1c5ca5d9b2bc9449397c839ec636a24edc1844373e495bcf892968bb76735f7cfc873527daedf5f31b30b02e19a0f0f6752157efa45dc9bd640f39759c673502fa05620db86be84a929f240180573fb77ee9455fe2325792e61df2a0cf4d8a78da4bd2cfefe4c48d88459bb0d2d41394b8281af64277ff00b3c52294970cc44303975a463d3a795916f1ad3dd75bd478f14ab4a1b2aa6b10ea35805d7195048df7162645487c027bd90ffea06891830ed46b3f723297d1fb160559e92bdd31a3f71edbe6ffdbb79a7e88e8bde37621c540d168326dc442995bd0dd0bcc4991c93e9e94a341c4d2797e75459e7d53703c309d47e9c7ac2fcfe8adb6648e6674e410ebb6d2f4407fa31a96a4c19f2873cc2a6189b828101a359e17e08168626b8b54e193c12073bfdcebcb7e0bcccf9786cf02a964744034eac780c2b32c"}, @NL80211_BAND_5GHZ={0x45, 0x1, "ded32f4730f646a29f36fc6884078b337b8c2681e2e7e03e01f642fd9832a3518b3faa7f26affa227e53b87f39509111537e35cc3b9a0915aa3940e425181e8c36"}]}, @NL80211_ATTR_SCAN_SSIDS={0x1c, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}]}, @NL80211_ATTR_IE={0x1e, 0x2a, [@ext_channel_switch={0x3c, 0x4, {0x0, 0x9, 0xb6, 0x8}}, @link_id={0x65, 0x12, {@random="3d60850e3b82", @device_a, @device_b}}]}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_SCAN_FREQUENCIES={0xc, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x5}]}]}, 0x1260}, 0x1, 0x0, 0x0, 0x20000000}, 0x801) sendmsg$DEVLINK_CMD_PORT_SPLIT(r2, &(0x7f0000002cc0)={&(0x7f0000002b80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002c80)={&(0x7f0000002c00)={0x70, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x7}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x6}}]}, 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x4000091) 694.985812ms ago: executing program 0 (id=5667): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040), 0x2, 0x0) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000080)=0x6, 0x4) (async) r3 = openat$cgroup_int(r0, &(0x7f00000000c0)='io.bfq.weight\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f0000000100), 0x12) (async) ioctl$F2FS_IOC_GARBAGE_COLLECT(r1, 0x4004f506, &(0x7f0000000140)=0x1) (async) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) getsockopt$bt_rfcomm_RFCOMM_LM(r4, 0x12, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000200)={0x2, 0xffffffffffffffff, 0x80800}, &(0x7f0000000240)=0xc) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r6, 0x84, 0x16, &(0x7f0000000280)={0x6, [0x854, 0x8, 0x7f, 0x44d, 0xfff, 0xfffd]}, 0x10) (async) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r7, 0x11c, 0x2, &(0x7f00000002c0)=""/37, &(0x7f0000000300)=0x25) (async) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000340)="1f7296706ac2bbff7073b39fe8c697d70d40b70b8d8d86c026f182c594d991029028acd56afc3d597e5a9470ad9267327333b8452cf2bdfd0446262f955b802785a92f9c63464713af4dd4b9e19cdfadc9d70d70b5f10c4cbbd3dee44b9215e390de487df09fffda891552b77b58d0d0d0aece6da3f8d3553e21ee58f50caf4eaa78e398f524815eb4f4f8c21ee44c0b6a43a0820568c9e9b74595a5", 0x9c}], 0x1) ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f0000000440)={{0x0, 0x100000001, 0x2, 0x4, 0x6a7c, 0x2, 0x1f239edb, 0xd, 0x7f, 0x9, 0x8, 0x1, 0x3, 0x8, 0x1}}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r6, 0xc0709411, &(0x7f0000001440)={{r8, 0x5, 0x7, 0x9, 0x1000, 0x100000000, 0x7, 0xb, 0x2, 0x2, 0x0, 0x4, 0x1000, 0x6, 0x7}, 0x20, [0x0, 0x0, 0x0, 0x0]}) (async) write$tun(0xffffffffffffffff, &(0x7f0000001500)={@val={0x0, 0x88f7}, @val={0x3, 0x0, 0x7, 0x7, 0x4, 0x9}, @llc={@snap={0x1, 0x0, "f0", 'lU4', 0x8863, "7887837a48ba91ba52eb8b191962b55b7dd20859020319b74bc2ce92eddbb1b4f9a93dc7405a2609cdf0275b654a5df7adcf232d2a062ce328747bd0e5afdbe7d61022b700210d052bebe6f3bc1d8dd1da7b04030aaed1ed4ab1c76452232caeafb467787d6bb571e7fbf97cc3adc201896c5c062738d80ce30d"}}}, 0x90) (async) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f00000015c0), 0x4) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000001600)) (async) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000001640)=0x1, 0x4) (async) getsockopt$inet_sctp6_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f0000001680)={r5, 0x3, 0xfffffffa, 0x6}, &(0x7f00000016c0)=0x10) (async) openat$cgroup(r0, &(0x7f0000001700)='syz0\x00', 0x200002, 0x0) (async) r9 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_NODELAY(r9, 0x84, 0x3, &(0x7f0000001740)=0x8, 0x4) ioctl$OCFS2_IOC_RESVSP(r6, 0x40305828, &(0x7f0000001780)={0x0, 0x325cd0f2ed7a38e1, 0x2, 0x1, 0x8, 0x3}) (async) syz_extract_tcp_res$synack(&(0x7f00000017c0), 0x1, 0x0) syz_emit_ethernet(0x1e, &(0x7f0000001800)={@link_local, @remote, @void, {@can={0xc, {{0x4, 0x0, 0x0, 0x1}, 0x3, 0x2, 0x0, 0x0, "91c79cb3c3ee8dea"}}}}, &(0x7f0000001840)={0x1, 0x3, [0x1e5, 0x355, 0xc37, 0x587]}) (async) r10 = socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000001880)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r10, 0x89f0, &(0x7f0000001940)={'syztnl2\x00', &(0x7f00000018c0)={'gretap0\x00', r11, 0x7, 0x8, 0x7, 0x9, {{0x16, 0x4, 0x2, 0x3a, 0x58, 0x66, 0x0, 0x5, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x16}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@noop, @lsrr={0x83, 0x13, 0x97, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @lsrr={0x83, 0x1f, 0xcf, [@remote, @local, @broadcast, @private=0xa010101, @multicast1, @local, @rand_addr=0x64010100]}, @ra={0x94, 0x4}, @generic={0x83, 0xa, "e832cf79492d7ca4"}]}}}}}) 188.675283ms ago: executing program 2 (id=5669): socket(0x10, 0x3, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000840), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000880)=0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf25020000000800", @ANYRES32=r3], 0x1c}}, 0x840) write$nci(r0, &(0x7f0000000280)=@NCI_OP_RF_DISCOVER_RSP={0x1, 0x0, 0x2, 0x3, 0x36, 0x1}, 0x4) write$nci(r0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="710505060302000081036d"], 0x19) 0s ago: executing program 0 (id=5670): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x7, '\x00', 0x0, 0x0}, 0x50) (async) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xfffffffb}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x1000000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1200}, {0x3, 0x3, 0x3, 0xa, 0x2, 0xfff0}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x8, 0x400008}, {0x3, 0x3, 0x6, 0xa, 0x9, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r0}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f00000002c0)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b3}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0xa}}, @NFT_MSG_DELCHAIN={0x30, 0x5, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x4}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x6c}}, 0x0) (async) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) (async) write(r3, &(0x7f0000000800)="190004000800aaaaaa0103000000", 0xe) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000500)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) (async) write$bt_hci(r4, &(0x7f0000000540)=ANY=[], 0x138) (async) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=ANY=[@ANYBLOB="840100001900010000000000000000001d0109004d00108025b57e35619bf20cb7f2facde0a223b473fe77f3e5ba76fb70fa1f414813a2a20005006f88d6e1db9b2b000000000000000000fe88000000000000000000000000000137c14f9a8ead"], 0x184}}, 0x0) (async) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r8 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) bind$packet(r8, &(0x7f00000004c0)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @link_local}, 0x14) (async) r10 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGARP(r10, 0x8954, &(0x7f0000000540)={{0x2, 0x4e21, @broadcast}, {0x6, @multicast}, 0x2, {0x2, 0x4e23, @empty}, 'veth0_to_team\x00'}) (async) syz_emit_ethernet(0x21, &(0x7f0000000500)=ANY=[], 0x0) (async) pipe(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) (async) pipe(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_subtree(r12, &(0x7f00000008c0)={[{0x6, 'net'}]}, 0x5) (async) splice(r11, 0x0, r13, 0x0, 0x3, 0x4) (async) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}, @IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x4048000}, 0x0) (async) clock_gettime(0x0, &(0x7f0000000940)={0x0, 0x0}) sendmsg$can_bcm(r12, &(0x7f0000000a40)={&(0x7f0000000900)={0x1d, r7}, 0x10, &(0x7f0000000a00)={&(0x7f0000000980)={0x4, 0xa8, 0x101, {}, {r15, r16/1000+10000}, {0x1, 0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x0, 0x1, 0x1}, 0x1, 0x1, 0x0, 0x0, "0846aefb3ac18686"}}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4) (async) sendmsg$NFT_BATCH(r14, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, @NFT_OBJECT_CT_TIMEOUT=@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}}], {0x14}}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x0) kernel console output (not intermixed with test programs): 51535][T20728] vxcan3: entered promiscuous mode [ 462.751550][T20728] vxcan3: entered allmulticast mode [ 462.836687][T20732] netlink: 'syz.0.3827': attribute type 4 has an invalid length. [ 462.866582][T20734] netlink: 'syz.3.3826': attribute type 1 has an invalid length. [ 463.054503][T20743] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 463.220453][T20752] IPv6: sit1: Disabled Multicast RS [ 463.230955][T20752] __nla_validate_parse: 16 callbacks suppressed [ 463.230974][T20752] netlink: 216 bytes leftover after parsing attributes in process `syz.1.3834'. [ 463.253476][T20746] SET target dimension over the limit! [ 463.253744][T20746] SET target dimension over the limit! [ 463.253999][T20746] SET target dimension over the limit! [ 463.254237][T20746] SET target dimension over the limit! [ 463.254459][T20746] SET target dimension over the limit! [ 463.278821][T20758] netlink: 220 bytes leftover after parsing attributes in process `syz.3.3837'. [ 463.278839][T20758] tc_dump_action: action bad kind [ 463.279042][T20761] netlink: 220 bytes leftover after parsing attributes in process `syz.3.3837'. [ 463.279054][T20761] tc_dump_action: action bad kind [ 463.315893][T20746] SET target dimension over the limit! [ 463.316187][T20746] SET target dimension over the limit! [ 463.316407][T20746] SET target dimension over the limit! [ 463.316640][T20746] SET target dimension over the limit! [ 463.316921][T20746] SET target dimension over the limit! [ 463.357256][ T1160] IPVS: starting estimator thread 0... [ 463.447732][T20767] IPVS: using max 36 ests per chain, 86400 per kthread [ 463.540200][T20774] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3841'. [ 463.546051][T20774] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3841'. [ 463.617516][T20781] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3839'. [ 463.617542][T20781] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 463.617559][T20781] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 463.619936][T20781] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 463.619956][T20781] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 463.710603][T20786] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3843'. [ 463.840254][T20798] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3846'. [ 463.889433][T20800] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3847'. [ 463.928800][T20808] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3849'. [ 463.991148][ T30] audit: type=1107 audit(1794301660.283:2): pid=20810 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ù‹5ž÷Œ•%èÍUýAÊÃËÙ ë0ä™l…t¿Ý•/Öÿ Ž6òŠ¨Šç›' [ 464.191860][T20823] netlink: 'syz.0.3854': attribute type 5 has an invalid length. [ 465.628301][T20906] lo: entered allmulticast mode [ 465.682321][T20905] lo: left allmulticast mode [ 465.984944][T20923] bridge_slave_1: left allmulticast mode [ 465.985162][T20923] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.990961][T20923] bridge_slave_0: left allmulticast mode [ 465.990983][T20923] bridge_slave_0: left promiscuous mode [ 465.991187][T20923] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.071727][T20927] batman_adv: batadv0: Adding interface: veth0 [ 466.071746][T20927] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 466.071777][T20927] batman_adv: batadv0: Interface activated: veth0 [ 466.082054][T20927] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 466.082078][T20927] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 466.140725][T20927] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 466.140750][T20927] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 466.151548][T20927] batman_adv: batadv0: Interface deactivated: veth0 [ 466.151570][T20927] batman_adv: batadv0: Removing interface: veth0 [ 466.726840][T20953] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 466.776220][T20966] netlink: 'syz.1.3895': attribute type 2 has an invalid length. [ 466.851150][T20970] ip_tables: iptables: counters copy to user failed while replacing table [ 466.851262][T20971] Bluetooth: hci0: unsupported parameter 5135 [ 466.851277][T20971] Bluetooth: hci0: unsupported parameter 8192 [ 466.851287][T20971] Bluetooth: hci0: unsupported parameter 5135 [ 466.851297][T20971] Bluetooth: hci0: unsupported parameter 8192 [ 467.641560][T20980] xt_socket: unknown flags 0x4 [ 467.776343][T20984] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 467.863191][T20989] netlink: 'syz.3.3902': attribute type 6 has an invalid length. [ 467.959095][T20996] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 468.105196][T21006] netlink: 'syz.3.3908': attribute type 1 has an invalid length. [ 468.160860][T21009] x_tables: duplicate entry at hook 4 [ 468.361273][T21017] __nla_validate_parse: 23 callbacks suppressed [ 468.361294][T21017] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3912'. [ 468.416599][T21020] IPv6: NLM_F_REPLACE set, but no existing node found! [ 468.686470][T21024] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3915'. [ 468.767178][T21024] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3915'. [ 468.797060][T21034] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3918'. [ 468.836141][T21031] netlink: 100 bytes leftover after parsing attributes in process `syz.3.3915'. [ 469.227288][T21069] netlink: Conntrack attr has 8 unknown bytes [ 469.487612][T21081] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3933'. [ 469.522165][T21083] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3934'. [ 469.522191][T21083] openvswitch: netlink: Flow actions attr not present in new flow. [ 469.633918][T21074] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.634369][T21074] bridge0: port 1(bridge_slave_0) entered disabled state [ 469.970136][T21093] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3937'. [ 470.527768][T17694] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.527850][T17694] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.527881][T17694] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.527911][T17694] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.751989][T21108] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3944'. [ 470.752629][T21108] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3944'. [ 470.892112][T21118] netlink: 'syz.2.3946': attribute type 12 has an invalid length. [ 471.242727][T21133] netlink: 'syz.2.3949': attribute type 10 has an invalid length. [ 471.245079][T21133] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 471.250640][T21133] bridge0: port 3(netdevsim0) entered blocking state [ 471.250906][T21133] bridge0: port 3(netdevsim0) entered disabled state [ 471.254564][T21133] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 471.914506][T21150] netlink: 'syz.4.3950': attribute type 1 has an invalid length. [ 473.700281][T21178] __nla_validate_parse: 68 callbacks suppressed [ 473.700296][T21178] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3956'. [ 473.700310][T21178] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3956'. [ 473.701729][T21179] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3956'. [ 473.701746][T21179] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3956'. [ 473.704001][T21178] dummy0: entered promiscuous mode [ 473.709279][T21178] team0: entered promiscuous mode [ 473.709297][T21178] team_slave_0: entered promiscuous mode [ 473.709482][T21178] team_slave_1: entered promiscuous mode [ 473.807020][T21110] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 473.938937][T21181] ip_tables: iptables: counters copy to user failed while replacing table [ 474.071965][T21192] Bluetooth: hci0: invalid len left 17, exp >= 23 [ 474.126357][T21197] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3962'. [ 474.249460][T21210] netlink: 576 bytes leftover after parsing attributes in process `syz.3.3966'. [ 474.316607][T21215] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3967'. [ 474.427706][T21225] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 474.513537][T21226] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 474.681041][T21244] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3973'. [ 474.683659][T21244] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3973'. [ 474.683679][T21244] openvswitch: netlink: Flow key attr not present in new flow. [ 474.696019][T21244] netlink: 6 bytes leftover after parsing attributes in process `syz.3.3973'. [ 474.706403][T21244] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 474.724123][T21249] openvswitch: netlink: Flow key attr not present in new flow. [ 474.739042][T21250] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 474.879697][T21259] Bluetooth: hci0: unsupported parameter 5135 [ 474.879712][T21259] Bluetooth: hci0: unsupported parameter 8192 [ 474.879719][T21259] Bluetooth: hci0: unsupported parameter 5135 [ 474.879725][T21259] Bluetooth: hci0: unsupported parameter 8192 [ 474.881715][T21255] lo: entered promiscuous mode [ 474.884000][T21255] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 475.159265][T21278] netlink: 'syz.1.3983': attribute type 30 has an invalid length. [ 475.186797][T21278] bond2: option arp_missed_max: invalid value (0) [ 475.186814][T21278] bond2: option arp_missed_max: allowed values 1 - 255 [ 475.187913][T21278] bond2 (unregistering): Released all slaves [ 477.559469][T21235] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 477.563782][T21292] netlink: 'syz.1.3987': attribute type 1 has an invalid length. [ 479.047185][T21357] netlink: 'syz.4.4002': attribute type 1 has an invalid length. [ 479.047233][T21357] __nla_validate_parse: 11 callbacks suppressed [ 479.047245][T21357] netlink: 228 bytes leftover after parsing attributes in process `syz.4.4002'. [ 479.198424][ C1] vcan0: j1939_tp_rxtimer: 0xffff888062871400: rx timeout, send abort [ 479.198662][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888062871400: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 479.203532][ C1] vcan0: j1939_tp_rxtimer: 0xffff888062871000: rx timeout, send abort [ 479.203687][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888062871000: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 479.382746][T21373] netlink: 'syz.3.4006': attribute type 23 has an invalid length. [ 482.228909][T21407] ip_tables: iptables: counters copy to user failed while replacing table [ 482.375366][T21414] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 482.375446][T21414] syzkaller1: linktype set to 823 [ 482.375868][T21414] syzkaller1: tun_chr_ioctl cmd 37934 [ 482.462360][T21378] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 482.474248][T21395] nbd: must specify a device to reconfigure [ 482.913876][T21441] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4025'. [ 482.992299][T21442] ip_tables: iptables: counters copy to user failed while replacing table [ 482.993144][T21445] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4025'. [ 483.233944][T21454] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4027'. [ 483.286442][T21456] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4029'. [ 483.311355][T21456] v: renamed from vlan1 (while UP) [ 483.330843][T21461] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4029'. [ 483.472895][T21468] netlink: 'syz.3.4031': attribute type 1 has an invalid length. [ 483.733130][T21484] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 483.795569][T21484] xfrm0: entered promiscuous mode [ 483.805439][T21484] team0: Device xfrm0 is of different type [ 483.843287][T21485] tipc: Enabled bearer , priority 0 [ 484.083332][T21501] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4041'. [ 484.246849][T21512] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4046'. [ 484.519910][T21523] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4047'. [ 484.665089][T21526] Dead loop on virtual device lo (net 140), fix it urgently! [ 484.665271][T21526] Dead loop on virtual device lo (net 140), fix it urgently! [ 484.665410][T21526] Dead loop on virtual device lo (net 140), fix it urgently! [ 484.670703][T21526] Dead loop on virtual device lo (net 140), fix it urgently! [ 484.670860][T21526] Dead loop on virtual device lo (net 140), fix it urgently! [ 484.671001][T21526] Dead loop on virtual device lo (net 140), fix it urgently! [ 484.671411][T21526] Dead loop on virtual device lo (net 140), fix it urgently! [ 484.681345][T21530] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4049'. [ 484.710707][T21530] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4049'. [ 484.796710][T21536] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4051'. [ 485.039294][T21551] syzkaller1: entered promiscuous mode [ 485.039317][T21551] syzkaller1: entered allmulticast mode [ 485.102099][T21558] netlink: 872 bytes leftover after parsing attributes in process `syz.3.4057'. [ 485.373771][T21564] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4059'. [ 485.688616][T21585] ip6t_srh: unknown srh invflags 4000 [ 485.710775][T21590] netlink: 'syz.4.4064': attribute type 1 has an invalid length. [ 486.129402][T21620] IPv6: NLM_F_CREATE should be specified when creating new route [ 486.155422][T21625] netlink: 'syz.3.4071': attribute type 4 has an invalid length. [ 486.189044][T21620] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4069'. [ 486.242827][T21622] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4069'. [ 486.746977][T21665] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 486.810753][T21669] netlink: 'syz.4.4084': attribute type 2 has an invalid length. [ 486.810775][T21669] netlink: 'syz.4.4084': attribute type 11 has an invalid length. [ 487.120061][T21690] sctp: [Deprecated]: syz.3.4087 (pid 21690) Use of struct sctp_assoc_value in delayed_ack socket option. [ 487.120061][T21690] Use struct sctp_sack_info instead [ 487.356862][T21704] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 487.357466][T21704] xt_socket: unknown flags 0xc [ 487.497797][T21715] syz_tun: entered allmulticast mode [ 487.569612][T21714] net_ratelimit: 48 callbacks suppressed [ 487.569631][T21714] ip_tables: iptables: counters copy to user failed while replacing table [ 487.574429][T21713] syz_tun: left allmulticast mode [ 487.956983][T21749] netdevsim netdevsim0: Firmware load for './file0/../file0' refused, path contains '..' component [ 487.963838][T21750] netdevsim netdevsim0: Firmware load for './file0/../file0' refused, path contains '..' component [ 488.425979][T21773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 488.450546][T21773] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 488.670992][T21789] netlink: 'syz.4.4113': attribute type 72 has an invalid length. [ 489.030577][T21804] ip_tables: iptables: counters copy to user failed while replacing table [ 489.173650][T21815] __nla_validate_parse: 9 callbacks suppressed [ 489.173669][T21815] netlink: 112 bytes leftover after parsing attributes in process `syz.3.4121'. [ 489.281070][T21821] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4124'. [ 489.281135][T21824] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4127'. [ 489.352425][T21826] netlink: 'syz.3.4126': attribute type 72 has an invalid length. [ 489.352448][T21826] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4126'. [ 489.624056][T21843] xt_NETMAP: bad MAP_IPS. [ 489.691198][T21855] tunl0: entered promiscuous mode [ 489.691219][T21855] tunl0: entered allmulticast mode [ 489.909925][T21870] netlink: 'syz.1.4141': attribute type 72 has an invalid length. [ 489.909949][T21870] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4141'. [ 489.941554][T21874] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4139'. [ 490.315422][T21896] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4146'. [ 490.342541][T21899] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4148'. [ 490.344769][T21899] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4148'. [ 490.344788][T21899] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4148'. [ 491.362253][T21951] openvswitch: netlink: Invalid VLAN frame [ 491.883754][T21974] netlink: 'syz.2.4169': attribute type 2 has an invalid length. [ 492.011914][T21986] veth1: entered allmulticast mode [ 492.351748][T22012] ip_tables: iptables: counters copy to user failed while replacing table [ 492.442360][T22011] NFSD: Failed to start, no listeners configured. [ 492.478326][T22023] Cannot find del_set index 3 as target [ 492.699938][T22034] netlink: ct family unspecified [ 492.702408][T22032] tipc: Started in network mode [ 492.702426][T22032] tipc: Node identity , cluster identity 4711 [ 492.702437][T22032] tipc: Failed to obtain node identity [ 492.702462][T22032] tipc: Enabling of bearer rejected, failed to enable media [ 492.704246][T22032] syzkaller0: entered promiscuous mode [ 492.704267][T22032] syzkaller0: entered allmulticast mode [ 492.718545][T22038] netlink: ct family unspecified [ 493.507715][T22096] netlink: 'syz.0.4207': attribute type 11 has an invalid length. [ 493.507738][T22096] netlink: 'syz.0.4207': attribute type 5 has an invalid length. [ 494.128886][T22126] netlink: set zone limit has 4 unknown bytes [ 494.224559][T22131] __nla_validate_parse: 20 callbacks suppressed [ 494.224581][T22131] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4217'. [ 494.284033][T22129] syzkaller0: entered promiscuous mode [ 494.284056][T22129] syzkaller0: entered allmulticast mode [ 494.322636][T22129] ip_tables: iptables: counters copy to user failed while replacing table [ 494.550881][T22152] ip6t_ah: unknown flags 5 [ 494.607120][T22157] netlink: 'syz.1.4224': attribute type 21 has an invalid length. [ 494.607145][T22157] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4224'. [ 494.610647][T22148] veth0: entered promiscuous mode [ 494.611211][T22150] tunl0: left promiscuous mode [ 494.619357][T22150] dummy0: left promiscuous mode [ 494.631461][T22150] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 494.663884][T22150] 8021q: adding VLAN 0 to HW filter on device bond1 [ 494.675765][T22150] 8021q: adding VLAN 0 to HW filter on device bond2 [ 494.676424][T22150] vxlan0: left promiscuous mode [ 494.678112][T22150] 8021q: adding VLAN 0 to HW filter on device bond3 [ 494.680290][T22150] vxcan3: left promiscuous mode [ 494.740087][T22160] netlink: 144 bytes leftover after parsing attributes in process `syz.0.4223'. [ 494.750550][T22161] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4224'. [ 494.751625][T22161] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4224'. [ 494.784061][T22157] netlink: 3 bytes leftover after parsing attributes in process `syz.1.4224'. [ 494.784466][T22146] veth0: left promiscuous mode [ 494.831462][T22158] bond4: entered allmulticast mode [ 494.831964][T22158] 8021q: adding VLAN 0 to HW filter on device bond4 [ 494.850214][T18966] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 494.953223][T22167] netlink: 'syz.4.4226': attribute type 1 has an invalid length. [ 494.998981][T22167] bond3: entered promiscuous mode [ 494.999382][T22167] 8021q: adding VLAN 0 to HW filter on device bond3 [ 495.049315][T22167] 8021q: adding VLAN 0 to HW filter on device bond3 [ 495.049692][T22167] bond3: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 495.049711][T22167] bond3: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 495.082858][T22167] bond3: (slave ip6gre1): making interface the new active one [ 495.082883][T22167] ip6gre1: entered promiscuous mode [ 495.091049][T22167] bond3: (slave ip6gre1): Enslaving as an active interface with an up link [ 495.678162][T22208] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4238'. [ 495.814733][T22215] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4240'. [ 495.870334][T22218] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4241'. [ 496.044433][T22228] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4244'. [ 496.044467][T22228] netlink: 'syz.4.4244': attribute type 5 has an invalid length. [ 496.075709][T22228] geneve2: entered promiscuous mode [ 496.077290][T22228] geneve2: entered allmulticast mode [ 496.110385][ T141] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 496.110431][ T141] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 496.110462][ T141] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 496.110509][ T141] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 496.580249][T22253] netlink: 'syz.1.4248': attribute type 1 has an invalid length. [ 496.609322][T22250] veth5: entered allmulticast mode [ 496.776976][T22251] 8021q: adding VLAN 0 to HW filter on device team1 [ 497.462226][T22306] macvlan0: entered promiscuous mode [ 497.479286][T22303] netlink: 'syz.4.4264': attribute type 1 has an invalid length. [ 497.969664][T22347] netlink: zone id is out of range [ 497.969681][T22347] netlink: set zone limit has 4 unknown bytes [ 497.993348][T22348] netlink: 'syz.3.4277': attribute type 1 has an invalid length. [ 498.066599][T22348] 8021q: adding VLAN 0 to HW filter on device bond7 [ 498.140038][T22351] bond7: (slave veth0_to_bond): making interface the new active one [ 498.158857][T22351] bond7: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 498.193030][T22348] bond7: entered promiscuous mode [ 498.193054][T22348] veth0_to_bond: entered promiscuous mode [ 498.194419][T22348] bond7: entered allmulticast mode [ 498.194435][T22348] veth0_to_bond: entered allmulticast mode [ 498.243257][T22351] macvlan2: entered promiscuous mode [ 498.243279][T22351] macvlan2: entered allmulticast mode [ 498.262364][T22351] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 498.277194][T22351] bond7: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of veth0_to_bond [ 498.507632][T22361] bond2: Removing last arp target with arp_interval on [ 498.641245][T22365] tipc: Enabling of bearer rejected, media not registered [ 498.894413][T22390] openvswitch: netlink: IP tunnel dst address not specified [ 499.175083][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 500.050619][T22442] ip_tables: iptables: counters copy to user failed while replacing table [ 500.502837][T22457] __nla_validate_parse: 8 callbacks suppressed [ 500.502860][T22457] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4306'. [ 500.629578][T22467] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 500.776549][T22478] openvswitch: netlink: Message has 70 unknown bytes. [ 500.776585][T22478] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 500.802063][T22478] pimreg3: entered allmulticast mode [ 500.979583][T22487] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4320'. [ 501.001554][T22489] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 501.038879][T22489] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 501.047284][T22491] netlink: 'syz.0.4319': attribute type 9 has an invalid length. [ 501.047303][T22491] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4319'. [ 501.049452][T22491] netlink: 'syz.0.4319': attribute type 9 has an invalid length. [ 501.049468][T22491] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4319'. [ 501.301962][T22504] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 501.370887][T22513] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 501.470409][T22525] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4332'. [ 501.470670][T22525] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4332'. [ 501.577816][T22533] xt_policy: neither incoming nor outgoing policy selected [ 501.699971][T22543] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4338'. [ 501.771170][T22546] netlink: 'syz.1.4339': attribute type 1 has an invalid length. [ 501.915288][T22549] vlan1: entered allmulticast mode [ 501.915310][T22549] bond0: entered allmulticast mode [ 501.915323][T22549] bond_slave_0: entered allmulticast mode [ 501.915339][T22549] bond_slave_1: entered allmulticast mode [ 501.930464][T22546] bond3: (slave gretap0): making interface the new active one [ 501.936138][T22546] bond3: (slave gretap0): Enslaving as an active interface with an up link [ 502.034060][T22559] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4342'. [ 502.297928][T22571] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 502.301256][T22571] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 502.449381][T22580] Bluetooth: hci0: unsupported parameter 5135 [ 502.449405][T22580] Bluetooth: hci0: unsupported parameter 8192 [ 502.449416][T22580] Bluetooth: hci0: unsupported parameter 5135 [ 502.449427][T22580] Bluetooth: hci0: unsupported parameter 8192 [ 502.472278][T22582] netlink: 'syz.4.4350': attribute type 11 has an invalid length. [ 502.500288][T22580] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4348'. [ 502.634523][T22588] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4353'. [ 502.646901][T22588] ip_tables: iptables: counters copy to user failed while replacing table [ 503.042468][T22604] hsr0: entered allmulticast mode [ 503.042515][T22604] hsr_slave_0: entered allmulticast mode [ 503.042532][T22604] hsr_slave_1: entered allmulticast mode [ 503.093668][T22604] hsr0: entered promiscuous mode [ 503.340587][T22628] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 503.356089][T22634] netlink: 'syz.0.4366': attribute type 9 has an invalid length. [ 503.376537][T22603] hsr0: left promiscuous mode [ 503.382928][T22603] hsr0: left allmulticast mode [ 503.382954][T22603] hsr_slave_0: left allmulticast mode [ 503.382968][T22603] hsr_slave_1: left allmulticast mode [ 503.410894][T22632] bridge_slave_0: entered promiscuous mode [ 503.678598][T22649] bond4: option lacp_active: mode dependency failed, not supported in mode active-backup(1) [ 503.697734][T22649] bond4 (unregistering): Released all slaves [ 504.221975][T22692] netlink: 'syz.1.4381': attribute type 1 has an invalid length. [ 504.815779][T22719] Bluetooth: MGMT ver 1.23 [ 505.102779][ T5298] veth1_vlan: left promiscuous mode [ 505.117931][T22734] netlink: 'syz.0.4391': attribute type 2 has an invalid length. [ 505.117954][T22734] nbd: couldn't find a device at index -2147221500 [ 505.328673][T22755] sctp: [Deprecated]: syz.2.4395 (pid 22755) Use of int in maxseg socket option. [ 505.328673][T22755] Use struct sctp_assoc_value instead [ 505.672866][T22772] netlink: 'syz.2.4397': attribute type 49 has an invalid length. [ 505.689796][T22775] netlink: 'syz.4.4399': attribute type 30 has an invalid length. [ 505.843314][T22787] sctp: [Deprecated]: syz.1.4400 (pid 22787) Use of struct sctp_assoc_value in delayed_ack socket option. [ 505.843314][T22787] Use struct sctp_sack_info instead [ 505.961553][T22791] __nla_validate_parse: 5 callbacks suppressed [ 505.961572][T22791] netlink: 80 bytes leftover after parsing attributes in process `syz.4.4403'. [ 505.961595][T22791] openvswitch: netlink: Missing key (keys=40, expected=80) [ 505.996955][T22795] netlink: 'syz.1.4404': attribute type 1 has an invalid length. [ 505.998541][T22791] ip6t_rt: address list match requested but addrnr is 0 [ 506.098863][T22795] bond4: entered promiscuous mode [ 506.101201][T22795] 8021q: adding VLAN 0 to HW filter on device bond4 [ 506.152436][T22802] FAULT_INJECTION: forcing a failure. [ 506.152436][T22802] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 506.152475][T22802] CPU: 0 UID: 0 PID: 22802 Comm: syz.3.4405 Not tainted syzkaller #0 PREEMPT(full) [ 506.152500][T22802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 506.152518][T22802] Call Trace: [ 506.152525][T22802] [ 506.152533][T22802] dump_stack_lvl+0xe8/0x150 [ 506.152566][T22802] should_fail_ex+0x3eb/0x540 [ 506.152592][T22802] _copy_from_user+0x2d/0xb0 [ 506.152616][T22802] ___sys_sendmsg+0x1c6/0x360 [ 506.152635][T22802] ? __lock_acquire+0x747/0x2de0 [ 506.152664][T22802] ? __pfx____sys_sendmsg+0x10/0x10 [ 506.152723][T22802] ? __fget_files+0x3a2/0x420 [ 506.152746][T22802] ? __fget_files+0x2a/0x420 [ 506.152778][T22802] __x64_sys_sendmsg+0x1b1/0x290 [ 506.152803][T22802] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 506.152850][T22802] do_syscall_64+0x166/0x520 [ 506.152873][T22802] ? trace_irq_disable+0x3b/0x140 [ 506.152896][T22802] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.152914][T22802] ? clear_bhb_loop+0x70/0xc0 [ 506.152938][T22802] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.152961][T22802] RIP: 0033:0x7faebada8f19 [ 506.152979][T22802] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 506.152995][T22802] RSP: 002b:00007faebbbdf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 506.153016][T22802] RAX: ffffffffffffffda RBX: 00007faebb025fa0 RCX: 00007faebada8f19 [ 506.153038][T22802] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000005 [ 506.153050][T22802] RBP: 00007faebbbdf090 R08: 0000000000000000 R09: 0000000000000000 [ 506.153062][T22802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 506.153073][T22802] R13: 00007faebb026038 R14: 00007faebb025fa0 R15: 00007fffee7c0138 [ 506.153112][T22802] [ 506.442406][T22795] 8021q: adding VLAN 0 to HW filter on device bond4 [ 506.442849][T22795] bond4: (slave wireguard0): The slave device specified does not support setting the MAC address [ 506.442870][T22795] bond4: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 506.554587][T22795] bond4: (slave wireguard0): making interface the new active one [ 506.554613][T22795] wireguard0: entered promiscuous mode [ 506.582879][T22795] bond4: (slave wireguard0): Enslaving as an active interface with an up link [ 506.615058][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 506.660142][T22812] gretap0: entered promiscuous mode [ 506.678751][T22823] erspan0: entered promiscuous mode [ 506.770289][T22823] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4407'. [ 506.892870][T22837] Cannot find map_set index 2 as target [ 507.328537][T22865] xt_hashlimit: overflow, try lower: 3/0 [ 507.394629][T22865] netlink: 'syz.2.4416': attribute type 9 has an invalid length. [ 507.417916][T22872] FAULT_INJECTION: forcing a failure. [ 507.417916][T22872] name failslab, interval 1, probability 0, space 0, times 1 [ 507.417946][T22872] CPU: 0 UID: 0 PID: 22872 Comm: syz.0.4418 Not tainted syzkaller #0 PREEMPT(full) [ 507.417966][T22872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 507.417976][T22872] Call Trace: [ 507.417983][T22872] [ 507.417991][T22872] dump_stack_lvl+0xe8/0x150 [ 507.418024][T22872] should_fail_ex+0x3eb/0x540 [ 507.418049][T22872] ? __alloc_skb+0x1db/0x7a0 [ 507.418068][T22872] should_failslab+0xa8/0x100 [ 507.418096][T22872] ? __alloc_skb+0x1db/0x7a0 [ 507.418110][T22872] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 507.418133][T22872] ? __alloc_skb+0x18d/0x7a0 [ 507.418149][T22872] ? __alloc_skb+0x1db/0x7a0 [ 507.418175][T22872] __alloc_skb+0x1db/0x7a0 [ 507.418197][T22872] netlink_sendmsg+0x5cd/0xb20 [ 507.418233][T22872] ? __pfx_netlink_sendmsg+0x10/0x10 [ 507.418263][T22872] ? aa_sock_msg_perm+0x144/0x210 [ 507.418294][T22872] ? apparmor_socket_sendmsg+0x98/0x360 [ 507.418321][T22872] ? __pfx_netlink_sendmsg+0x10/0x10 [ 507.418346][T22872] sock_sendmsg_nosec+0x14e/0x190 [ 507.418376][T22872] ____sys_sendmsg+0x54e/0x850 [ 507.418403][T22872] ? __pfx_____sys_sendmsg+0x10/0x10 [ 507.418431][T22872] ? import_iovec+0x73/0xa0 [ 507.418456][T22872] ___sys_sendmsg+0x2a5/0x360 [ 507.418482][T22872] ? __lock_acquire+0x747/0x2de0 [ 507.418511][T22872] ? __pfx____sys_sendmsg+0x10/0x10 [ 507.418571][T22872] ? __fget_files+0x3a2/0x420 [ 507.418593][T22872] ? __fget_files+0x2a/0x420 [ 507.418626][T22872] __x64_sys_sendmsg+0x1b1/0x290 [ 507.418650][T22872] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 507.418695][T22872] do_syscall_64+0x166/0x520 [ 507.418718][T22872] ? trace_irq_disable+0x3b/0x140 [ 507.418743][T22872] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.418762][T22872] ? clear_bhb_loop+0x70/0xc0 [ 507.418786][T22872] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.418804][T22872] RIP: 0033:0x7f911bda8f19 [ 507.418821][T22872] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 507.418838][T22872] RSP: 002b:00007f911cbb8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 507.418858][T22872] RAX: ffffffffffffffda RBX: 00007f911c025fa0 RCX: 00007f911bda8f19 [ 507.418871][T22872] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000005 [ 507.418884][T22872] RBP: 00007f911cbb8090 R08: 0000000000000000 R09: 0000000000000000 [ 507.418896][T22872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 507.418907][T22872] R13: 00007f911c026038 R14: 00007f911c025fa0 R15: 00007ffd671246c8 [ 507.418940][T22872] [ 507.816542][T22884] netlink: 'syz.2.4420': attribute type 15 has an invalid length. [ 507.895016][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 508.146787][T22901] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4421'. [ 508.358534][T22908] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4424'. [ 508.467033][T22914] netlink: 23 bytes leftover after parsing attributes in process `syz.4.4425'. [ 508.623811][T22924] vxlan0: entered promiscuous mode [ 508.623857][T22924] vxlan0: entered allmulticast mode [ 508.646780][ T13] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 508.647601][ T13] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 508.647647][ T13] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 508.647678][ T13] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 508.807237][T22937] netlink: 120 bytes leftover after parsing attributes in process `syz.0.4436'. [ 508.919256][T22941] netlink: 'syz.3.4437': attribute type 20 has an invalid length. [ 508.919280][T22941] IPv6: NLM_F_CREATE should be specified when creating new route [ 508.922822][T22941] ip_tables: iptables: counters copy to user failed while replacing table [ 508.951943][T22941] netlink: 4337 bytes leftover after parsing attributes in process `syz.3.4437'. [ 508.951988][T22941] openvswitch: netlink: Actions may not be safe on all matching packets [ 508.954562][T22941] netlink: 108 bytes leftover after parsing attributes in process `syz.3.4437'. [ 508.993203][T22947] FAULT_INJECTION: forcing a failure. [ 508.993203][T22947] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 508.993235][T22947] CPU: 1 UID: 0 PID: 22947 Comm: syz.0.4441 Not tainted syzkaller #0 PREEMPT(full) [ 508.993278][T22947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 508.993288][T22947] Call Trace: [ 508.993295][T22947] [ 508.993303][T22947] dump_stack_lvl+0xe8/0x150 [ 508.993335][T22947] should_fail_ex+0x3eb/0x540 [ 508.993362][T22947] _copy_from_iter+0x1d3/0x1680 [ 508.993384][T22947] ? __alloc_skb+0x27a/0x7a0 [ 508.993404][T22947] ? __alloc_skb+0x27a/0x7a0 [ 508.993423][T22947] ? __alloc_skb+0x27a/0x7a0 [ 508.993440][T22947] ? __pfx__copy_from_iter+0x10/0x10 [ 508.993459][T22947] ? kmem_cache_alloc_node_noprof+0x1f4/0x600 [ 508.993480][T22947] ? __alloc_skb+0x27a/0x7a0 [ 508.993497][T22947] ? __alloc_skb+0x27a/0x7a0 [ 508.993519][T22947] ? netlink_sendmsg+0x64f/0xb20 [ 508.993546][T22947] ? skb_put+0x112/0x210 [ 508.993566][T22947] netlink_sendmsg+0x6bb/0xb20 [ 508.993599][T22947] ? __pfx_netlink_sendmsg+0x10/0x10 [ 508.993630][T22947] ? aa_sock_msg_perm+0x144/0x210 [ 508.993664][T22947] ? apparmor_socket_sendmsg+0x98/0x360 [ 508.993692][T22947] ? __pfx_netlink_sendmsg+0x10/0x10 [ 508.993718][T22947] sock_sendmsg_nosec+0x14e/0x190 [ 508.993747][T22947] ____sys_sendmsg+0x54e/0x850 [ 508.993773][T22947] ? __pfx_____sys_sendmsg+0x10/0x10 [ 508.993804][T22947] ? import_iovec+0x73/0xa0 [ 508.993840][T22947] ___sys_sendmsg+0x2a5/0x360 [ 508.993859][T22947] ? __lock_acquire+0x747/0x2de0 [ 508.993887][T22947] ? __pfx____sys_sendmsg+0x10/0x10 [ 508.993947][T22947] ? __fget_files+0x3a2/0x420 [ 508.993970][T22947] ? __fget_files+0x2a/0x420 [ 508.994003][T22947] __x64_sys_sendmsg+0x1b1/0x290 [ 508.994028][T22947] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 508.994072][T22947] do_syscall_64+0x166/0x520 [ 508.994095][T22947] ? trace_irq_disable+0x3b/0x140 [ 508.994120][T22947] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 508.994138][T22947] ? clear_bhb_loop+0x70/0xc0 [ 508.994162][T22947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 508.994180][T22947] RIP: 0033:0x7f911bda8f19 [ 508.994198][T22947] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 508.994213][T22947] RSP: 002b:00007f911cbb8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 508.994233][T22947] RAX: ffffffffffffffda RBX: 00007f911c025fa0 RCX: 00007f911bda8f19 [ 508.994247][T22947] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000005 [ 508.994259][T22947] RBP: 00007f911cbb8090 R08: 0000000000000000 R09: 0000000000000000 [ 508.994277][T22947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 508.994288][T22947] R13: 00007f911c026038 R14: 00007f911c025fa0 R15: 00007ffd671246c8 [ 508.994320][T22947] [ 509.422927][T22965] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4442'. [ 509.619515][T22972] Bluetooth: hci0: load_link_keys: too big key_count value 25857 [ 509.797273][T22985] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4453'. [ 510.091236][T23010] syzkaller1: entered promiscuous mode [ 510.091259][T23010] syzkaller1: entered allmulticast mode [ 510.476978][T23038] xt_TCPMSS: Only works on TCP SYN packets [ 510.673446][T23045] netlink: 'syz.0.4471': attribute type 1 has an invalid length. [ 511.564065][T23095] __nla_validate_parse: 12 callbacks suppressed [ 511.564085][T23095] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4481'. [ 511.672560][T23101] xt_cgroup: no path or classid specified [ 512.113727][T23114] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4485'. [ 512.393831][T23139] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.4494'. [ 512.398070][T23139] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4494'. [ 514.739628][T23103] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 515.004460][T23161] bond0: (slave vlan4): Error -34 calling dev_set_mtu [ 515.206250][T23182] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4504'. [ 515.567275][T23190] ªªªªª»: renamed from dummy0 [ 515.748369][T23198] netlink: 'syz.4.4508': attribute type 1 has an invalid length. [ 515.982522][T23198] 8021q: adding VLAN 0 to HW filter on device bond6 [ 516.011027][T23209] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 516.056110][T23200] bond6: (slave gretap1): making interface the new active one [ 516.057015][T23200] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 516.279790][T23213] bond5 (unregistering): Released all slaves [ 516.552946][T23245] xt_ecn: cannot match TCP bits for non-tcp packets [ 516.670627][T23240] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 516.710419][T23255] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4525'. [ 516.710534][T23255] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 516.710809][T23255] bridge0: port 3(netdevsim0) entered disabled state [ 516.724076][T23255] bridge_slave_1: left allmulticast mode [ 516.724102][T23255] bridge_slave_1: left promiscuous mode [ 516.724323][T23255] bridge0: port 2(bridge_slave_1) entered disabled state [ 516.743582][T23255] bridge_slave_0: left allmulticast mode [ 516.743608][T23255] bridge_slave_0: left promiscuous mode [ 516.743835][T23255] bridge0: port 1(bridge_slave_0) entered disabled state [ 516.850422][T23267] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4525'. [ 516.869780][T23262] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 516.871554][T23266] team0: entered allmulticast mode [ 516.871574][T23266] team_slave_0: entered allmulticast mode [ 516.871591][T23266] team_slave_1: entered allmulticast mode [ 517.004313][T23272] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4529'. [ 517.004336][T23272] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4529'. [ 517.004360][T23272] netlink: 'syz.4.4529': attribute type 14 has an invalid length. [ 517.004372][T23272] netlink: 'syz.4.4529': attribute type 13 has an invalid length. [ 517.033935][T23272] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 517.061000][T23275] netlink: 'syz.2.4530': attribute type 21 has an invalid length. [ 517.061100][T23275] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4530'. [ 517.121911][T23275] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4530'. [ 517.211521][T23289] xt_policy: neither incoming nor outgoing policy selected [ 517.216124][T23289] team0: Caught tx_queue_len zero misconfig [ 517.772803][T23317] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4537'. [ 517.776033][T23317] veth0: Caught tx_queue_len zero misconfig [ 518.141990][T23348] ipt_ECN: cannot use operation on non-tcp rule [ 518.552658][T23373] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4553'. [ 518.552704][T23373] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4553'. [ 518.574396][T23373] openvswitch: netlink: Tunnel attr 10 has unexpected len 0 expected 2 [ 518.968220][T23390] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 519.227753][T23405] 8021q: adding VLAN 0 to HW filter on device bond5 [ 519.229942][T23405] bond0: (slave bond5): Enslaving as an active interface with an up link [ 519.336833][T23415] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4567'. [ 519.509251][T23423] ip6gre2: entered promiscuous mode [ 519.509275][T23423] ip6gre2: entered allmulticast mode [ 521.980061][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 522.156105][T23431] lo: left promiscuous mode [ 522.292271][T23473] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 522.539183][T23495] macvlan0: entered promiscuous mode [ 522.827059][T23515] __nla_validate_parse: 2 callbacks suppressed [ 522.827077][T23515] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4582'. [ 523.055273][T23526] Bluetooth: hci0: unsupported parameter 5134 [ 523.055295][T23526] Bluetooth: hci0: unsupported parameter 8192 [ 523.055308][T23526] Bluetooth: hci0: unsupported parameter 5134 [ 523.055319][T23526] Bluetooth: hci0: unsupported parameter 8192 [ 523.277826][T23541] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4585'. [ 523.411967][T23541] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4585'. [ 523.563409][T23549] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.4586'. [ 523.563440][T23549] veth0_to_bond: default FDB implementation only supports local addresses [ 524.428478][T23601] netlink: 192 bytes leftover after parsing attributes in process `syz.3.4596'. [ 524.794571][ T5632] block nbd2: Receive control failed (result -32) [ 524.799636][T23614] block nbd3: Receive control failed (result -32) [ 524.802920][T23614] block nbd3: Receive control failed (result -32) [ 524.806090][ T5637] block nbd2: Receive control failed (result -32) [ 525.051380][T23634] netlink: 'syz.3.4601': attribute type 1 has an invalid length. [ 525.090252][T23634] 8021q: adding VLAN 0 to HW filter on device bond8 [ 525.109410][T23634] bond7: (slave veth0_to_bond): Releasing active interface [ 525.109436][T23634] veth0_to_bond: left promiscuous mode [ 525.109608][T23634] veth0_to_bond: left allmulticast mode [ 525.120232][T23634] bond8: (slave veth0_to_bond): making interface the new active one [ 525.128139][T23634] bond8: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 525.174403][T23634] bond8: entered promiscuous mode [ 525.174426][T23634] veth0_to_bond: entered promiscuous mode [ 525.174619][T23634] bond8: entered allmulticast mode [ 525.174632][T23634] veth0_to_bond: entered allmulticast mode [ 525.350468][T23639] macvlan2: entered promiscuous mode [ 525.350521][T23639] macvlan2: entered allmulticast mode [ 525.373153][T23639] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 525.403164][T23639] bond8: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of veth0_to_bond [ 525.476650][T23647] ªªªªª»: renamed from dummy0 (while UP) [ 525.566701][T23645] syzkaller1: entered promiscuous mode [ 525.566724][T23645] syzkaller1: entered allmulticast mode [ 525.815892][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 528.004390][T23634] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 528.219398][T23690] netlink: 92 bytes leftover after parsing attributes in process `syz.2.4610'. [ 528.239766][T23694] netlink: 'syz.3.4611': attribute type 28 has an invalid length. [ 528.239789][T23694] netlink: 'syz.3.4611': attribute type 3 has an invalid length. [ 528.239801][T23694] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4611'. [ 528.271410][T23685] Bluetooth: hci0: unsupported parameter 5161 [ 528.271432][T23685] Bluetooth: hci0: unsupported parameter 8192 [ 528.271443][T23685] Bluetooth: hci0: unsupported parameter 5161 [ 528.271455][T23685] Bluetooth: hci0: unsupported parameter 8192 [ 528.442063][T23708] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4614'. [ 528.498678][T23714] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4614'. [ 528.499415][T23714] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4614'. [ 528.499806][T23714] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4614'. [ 528.500387][T23714] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4614'. [ 528.500591][T23714] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4614'. [ 528.585884][T23716] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4616'. [ 531.089345][T23677] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 531.092813][T23684] netlink: 'syz.1.4609': attribute type 1 has an invalid length. [ 531.092832][T23684] netlink: 228 bytes leftover after parsing attributes in process `syz.1.4609'. [ 531.513545][T23750] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 531.513582][T23750] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 531.513646][T23750] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 531.650791][T23755] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 531.680457][T23629] block nbd4: Receive control failed (result -32) [ 532.057794][T23789] vlan3: entered allmulticast mode [ 532.057817][T23789] gretap0: entered allmulticast mode [ 532.059246][T23789] batman_adv: batadv0: Adding interface: vlan3 [ 532.059262][T23789] batman_adv: batadv0: The MTU of interface vlan3 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 532.059291][T23789] batman_adv: batadv0: Not using interface vlan3 (retrying later): interface not active [ 532.063105][T23789] netlink: 'syz.3.4638': attribute type 2 has an invalid length. [ 532.171169][T23736] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 532.445863][T23813] FAULT_INJECTION: forcing a failure. [ 532.445863][T23813] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 532.445893][T23813] CPU: 1 UID: 0 PID: 23813 Comm: syz.1.4645 Not tainted syzkaller #0 PREEMPT(full) [ 532.445913][T23813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 532.445924][T23813] Call Trace: [ 532.445931][T23813] [ 532.445939][T23813] dump_stack_lvl+0xe8/0x150 [ 532.445971][T23813] should_fail_ex+0x3eb/0x540 [ 532.445997][T23813] _copy_from_user+0x2d/0xb0 [ 532.446021][T23813] ___sys_sendmsg+0x1c6/0x360 [ 532.446041][T23813] ? __lock_acquire+0x747/0x2de0 [ 532.446068][T23813] ? __pfx____sys_sendmsg+0x10/0x10 [ 532.446128][T23813] ? __fget_files+0x3a2/0x420 [ 532.446151][T23813] ? __fget_files+0x2a/0x420 [ 532.446184][T23813] __x64_sys_sendmsg+0x1b1/0x290 [ 532.446207][T23813] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 532.446252][T23813] do_syscall_64+0x166/0x520 [ 532.446275][T23813] ? trace_irq_disable+0x3b/0x140 [ 532.446300][T23813] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.446319][T23813] ? clear_bhb_loop+0x70/0xc0 [ 532.446343][T23813] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.446364][T23813] RIP: 0033:0x7f729d3a8f19 [ 532.446382][T23813] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 532.446398][T23813] RSP: 002b:00007f729e1b7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 532.446418][T23813] RAX: ffffffffffffffda RBX: 00007f729d625fa0 RCX: 00007f729d3a8f19 [ 532.446432][T23813] RDX: 0000000000040800 RSI: 0000200000000340 RDI: 0000000000000003 [ 532.446444][T23813] RBP: 00007f729e1b7090 R08: 0000000000000000 R09: 0000000000000000 [ 532.446456][T23813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 532.446467][T23813] R13: 00007f729d626038 R14: 00007f729d625fa0 R15: 00007ffed33e34a8 [ 532.446499][T23813] [ 533.064741][T22243] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 533.089427][T23852] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 533.092891][T23852] netlink: 'syz.2.4656': attribute type 21 has an invalid length. [ 533.564389][T23864] __nla_validate_parse: 11 callbacks suppressed [ 533.564404][T23864] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4660'. [ 533.657418][T23871] syzkaller0: left promiscuous mode [ 533.657442][T23871] syzkaller0: left allmulticast mode [ 533.660616][T23871] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4662'. [ 535.807119][T23883] ip_tables: iptables: counters copy to user failed while replacing table [ 535.956896][T23846] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 536.165975][T23897] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4669'. [ 536.183184][T23897] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.4669'. [ 536.213582][T23900] xt_socket: unknown flags 0xc [ 536.228892][T23905] xt_socket: unknown flags 0xc [ 536.302787][T23908] xt_CT: No such helper "netbios-ns" [ 536.303618][T23896] xt_CT: No such helper "netbios-ns" [ 536.780706][T23941] geneve0: entered allmulticast mode [ 536.839259][T23943] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4679'. [ 536.923639][T23955] netlink: 156 bytes leftover after parsing attributes in process `syz.0.4678'. [ 537.275784][T23966] netlink: 88 bytes leftover after parsing attributes in process `syz.1.4683'. [ 537.397996][T23962] tcf_pedit_act: 7 callbacks suppressed [ 537.398016][T23962] tc action pedit unable to extract header offset for header type (0x5) [ 537.398028][T23962] tc action pedit unable to extract header offset for header type (0x5) [ 537.398039][T23962] tc action pedit unable to extract header offset for header type (0x5) [ 537.398050][T23962] tc action pedit unable to extract header offset for header type (0x5) [ 537.398061][T23962] tc action pedit unable to extract header offset for header type (0x5) [ 537.398072][T23962] tc action pedit unable to extract header offset for header type (0x5) [ 537.398083][T23962] tc action pedit unable to extract header offset for header type (0x5) [ 537.398094][T23962] tc action pedit unable to extract header offset for header type (0x5) [ 537.398106][T23962] tc action pedit unable to extract header offset for header type (0x5) [ 537.398117][T23962] tc action pedit unable to extract header offset for header type (0x5) [ 537.398140][T23962] 0: reclassify loop, rule prio 0, protocol 800 [ 537.398649][T23962] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4682'. [ 537.617121][T23985] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4686'. [ 537.693212][T23987] syzkaller1: entered promiscuous mode [ 537.693281][T23987] syzkaller1: entered allmulticast mode [ 538.251274][T24022] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 538.329576][T24027] netlink: 'syz.3.4700': attribute type 11 has an invalid length. [ 538.329599][T24027] netlink: 'syz.3.4700': attribute type 4 has an invalid length. [ 538.329611][T24027] netlink: 232 bytes leftover after parsing attributes in process `syz.3.4700'. [ 538.330379][T24030] netlink: 'syz.3.4700': attribute type 11 has an invalid length. [ 538.330396][T24030] netlink: 'syz.3.4700': attribute type 4 has an invalid length. [ 538.486892][T24028] IPVS: length: 239 != 24 [ 538.581623][T24042] __nla_validate_parse: 2 callbacks suppressed [ 538.581643][T24042] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4704'. [ 538.581660][T24042] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4704'. [ 538.583902][T24042] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4704'. [ 538.990799][T24062] netlink: 'syz.3.4712': attribute type 3 has an invalid length. [ 539.030403][T24064] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 539.031014][T24061] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 539.157443][T24071] bond0: (slave bond_slave_1): Releasing backup interface [ 539.806253][T24097] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4723'. [ 539.893034][T24099] : renamed from bond0 (while UP) [ 540.050047][T24115] netlink: 'syz.1.4730': attribute type 4 has an invalid length. [ 540.065159][T24117] netlink: 76 bytes leftover after parsing attributes in process `syz.4.4726'. [ 540.160918][T24120] FAULT_INJECTION: forcing a failure. [ 540.160918][T24120] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 540.160948][T24120] CPU: 1 UID: 0 PID: 24120 Comm: syz.2.4731 Not tainted syzkaller #0 PREEMPT(full) [ 540.160969][T24120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 540.160980][T24120] Call Trace: [ 540.160988][T24120] [ 540.160996][T24120] dump_stack_lvl+0xe8/0x150 [ 540.161030][T24120] should_fail_ex+0x3eb/0x540 [ 540.161057][T24120] _copy_from_iter+0x1d3/0x1680 [ 540.161079][T24120] ? __alloc_skb+0x27a/0x7a0 [ 540.161099][T24120] ? __alloc_skb+0x27a/0x7a0 [ 540.161119][T24120] ? __alloc_skb+0x27a/0x7a0 [ 540.161136][T24120] ? __pfx__copy_from_iter+0x10/0x10 [ 540.161159][T24120] ? kmem_cache_alloc_node_noprof+0x1f4/0x600 [ 540.161181][T24120] ? __alloc_skb+0x27a/0x7a0 [ 540.161197][T24120] ? __alloc_skb+0x27a/0x7a0 [ 540.161222][T24120] ? netlink_sendmsg+0x64f/0xb20 [ 540.161249][T24120] ? skb_put+0x112/0x210 [ 540.161272][T24120] netlink_sendmsg+0x6bb/0xb20 [ 540.161304][T24120] ? __pfx_netlink_sendmsg+0x10/0x10 [ 540.161334][T24120] ? aa_sock_msg_perm+0x144/0x210 [ 540.161375][T24120] ? apparmor_socket_sendmsg+0x98/0x360 [ 540.161398][T24120] ? lock_acquire+0x115/0x350 [ 540.161423][T24120] ? __pfx_netlink_sendmsg+0x10/0x10 [ 540.161448][T24120] sock_sendmsg_nosec+0x14e/0x190 [ 540.161476][T24120] sock_write_iter+0x2de/0x3e0 [ 540.161501][T24120] ? __pfx_sock_write_iter+0x10/0x10 [ 540.161533][T24120] ? bpf_lsm_file_permission+0x9/0x20 [ 540.161557][T24120] ? security_file_permission+0x75/0x260 [ 540.161588][T24120] vfs_write+0x612/0xba0 [ 540.161619][T24120] ? __pfx_vfs_write+0x10/0x10 [ 540.161644][T24120] ? __fget_files+0x3a2/0x420 [ 540.161665][T24120] ? __fget_files+0x2a/0x420 [ 540.161691][T24120] ? fdget+0x1ac/0x250 [ 540.161721][T24120] ksys_write+0x150/0x270 [ 540.161748][T24120] ? __pfx_ksys_write+0x10/0x10 [ 540.161783][T24120] do_syscall_64+0x166/0x520 [ 540.161807][T24120] ? trace_irq_disable+0x3b/0x140 [ 540.161830][T24120] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 540.161849][T24120] ? clear_bhb_loop+0x70/0xc0 [ 540.161871][T24120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 540.161889][T24120] RIP: 0033:0x7fd4a73a8f19 [ 540.161907][T24120] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 540.161923][T24120] RSP: 002b:00007fd4a81d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 540.161943][T24120] RAX: ffffffffffffffda RBX: 00007fd4a7625fa0 RCX: 00007fd4a73a8f19 [ 540.161957][T24120] RDX: 000000000000004c RSI: 0000200000000100 RDI: 0000000000000003 [ 540.161969][T24120] RBP: 00007fd4a81d5090 R08: 0000000000000000 R09: 0000000000000000 [ 540.161980][T24120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 540.161991][T24120] R13: 00007fd4a7626038 R14: 00007fd4a7625fa0 R15: 00007fff7febd6f8 [ 540.162025][T24120] [ 541.003479][T24156] netlink: 'syz.3.4741': attribute type 8 has an invalid length. [ 541.093258][T24163] syzkaller0: entered promiscuous mode [ 541.093287][T24163] syzkaller0: entered allmulticast mode [ 542.911771][T24103] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 543.067555][T24168] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4746'. [ 543.108279][T24168] team_slave_0: Caught tx_queue_len zero misconfig [ 543.128246][T24176] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4748'. [ 543.128272][T24176] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4748'. [ 543.244527][ T30] audit: type=1800 audit(1794301739.533:3): pid=24177 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4749" name=680B20 dev="tmpfs" ino=1493 res=0 errno=-22 [ 543.443225][T24185] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4750'. [ 543.704012][T24203] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4755'. [ 544.325844][T24219] netlink: 'syz.0.4759': attribute type 3 has an invalid length. [ 544.325865][T24219] netlink: 666 bytes leftover after parsing attributes in process `syz.0.4759'. [ 544.331509][T24219] veth0_virt_wifi: Caught tx_queue_len zero misconfig [ 544.431941][T24225] netlink: 'syz.2.4758': attribute type 10 has an invalid length. [ 544.453721][T24225] team0: Port device dummy0 added [ 545.037556][T24238] batadv_slave_0: Caught tx_queue_len zero misconfig [ 546.675210][T24249] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4768'. [ 546.760440][T24205] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 546.763939][T24217] netlink: 'syz.2.4758': attribute type 2 has an invalid length. [ 547.061268][T24262] Bluetooth: hci0: unsupported parameter 5135 [ 547.061289][T24262] Bluetooth: hci0: unsupported parameter 8192 [ 547.061310][T24262] Bluetooth: hci0: unsupported parameter 5135 [ 547.061322][T24262] Bluetooth: hci0: unsupported parameter 8192 [ 547.092582][T24260] batman_adv: batadv0: Adding interface: syz_tun [ 547.092599][T24260] batman_adv: batadv0: The MTU of interface syz_tun is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 547.092626][T24260] batman_adv: batadv0: Interface activated: syz_tun [ 547.307003][T24271] syzkaller0: entered promiscuous mode [ 547.307025][T24271] syzkaller0: entered allmulticast mode [ 547.666808][T24285] netlink: 256 bytes leftover after parsing attributes in process `syz.2.4778'. [ 548.230101][T22241] bond4 (unregistering): (slave gretap2): Releasing active interface [ 548.362321][T22241] bond0 (unregistering): (slave geneve2): Releasing active interface [ 548.474116][T22241] bond6 (unregistering): (slave bridge4): Releasing backup interface [ 548.531189][T22241] bond1 (unregistering): Released all slaves [ 548.549975][T22241] bond2 (unregistering): Released all slaves [ 548.567899][T22241] bond3 (unregistering): Released all slaves [ 548.590286][T22241] bond4 (unregistering): Released all slaves [ 548.614405][T22241] bond5 (unregistering): Released all slaves [ 548.653922][T22241] bond0 (unregistering): Released all slaves [ 548.681512][T22241] bond6 (unregistering): Released all slaves [ 548.700864][T22241] bond7 (unregistering): Released all slaves [ 548.727964][T22241] bond8 (unregistering): (slave wireguard3): Releasing backup interface [ 548.727996][T22241] wireguard3: left promiscuous mode [ 548.729716][T22241] bond8 (unregistering): Released all slaves [ 548.761520][T22241] bond9 (unregistering): Released all slaves [ 548.781428][T24285] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4778'. [ 548.912668][ T5815] wg0 speed is unknown, defaulting to 1000 [ 548.912708][ T5815] syz0: Port: 1 Link DOWN [ 549.004116][T22241] ovs-dp0: left promiscuous mode [ 549.180050][T22241] tipc: Left network mode [ 549.610732][T24334] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4787'. [ 549.716855][T24330] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4786'. [ 550.883071][T22241] hsr_slave_0: left promiscuous mode [ 550.892430][T22241] hsr_slave_1: left promiscuous mode [ 550.923805][T22241] veth1_macvtap: left promiscuous mode [ 551.513630][ T62] smbdirect: ib_dev[syz0] removed [ 551.949526][T22241] IPVS: stop unused estimator thread 0... [ 552.179371][T24313] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 552.480352][T24417] ip_tables: iptables: counters copy to user failed while replacing table [ 552.499928][T24418] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 552.524628][T22242] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 552.543271][T24420] openvswitch: netlink: Duplicate or invalid key (type 0). [ 552.543306][T24420] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 552.631901][T24430] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4799'. [ 553.813953][T24449] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 553.891268][T24453] syzkaller0: entered promiscuous mode [ 553.891284][T24453] syzkaller0: entered allmulticast mode [ 555.398856][T24408] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 555.627090][T24469] Bluetooth: hci0: unsupported parameter 5161 [ 555.627128][T24469] Bluetooth: hci0: unsupported parameter 8192 [ 555.627142][T24469] Bluetooth: hci0: unsupported parameter 5161 [ 555.627154][T24469] Bluetooth: hci0: unsupported parameter 8192 [ 555.627390][T24470] x_tables: duplicate underflow at hook 1 [ 555.733122][T24477] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4813'. [ 555.733410][T24477] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4813'. [ 556.119842][T24500] netlink: 'syz.2.4816': attribute type 29 has an invalid length. [ 556.119864][T24500] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4816'. [ 556.170293][T24502] netlink: 'syz.2.4816': attribute type 29 has an invalid length. [ 556.170396][T24502] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4816'. [ 556.333776][T24508] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4818'. [ 556.342431][T24510] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4818'. [ 556.382190][T24508] vlan2: entered promiscuous mode [ 556.382213][T24508] bond0: entered promiscuous mode [ 556.382225][T24508] bond_slave_0: entered promiscuous mode [ 556.386303][T24508] bond_slave_1: entered promiscuous mode [ 556.386527][T24508] bond5: entered promiscuous mode [ 556.488538][T24515] Set syz1 is full, maxelem 246 reached [ 556.576429][T24521] netlink: 'syz.4.4820': attribute type 6 has an invalid length. [ 556.870064][T24533] netlink: 7 bytes leftover after parsing attributes in process `syz.2.4824'. [ 556.908801][T24537] veth0_macvtap: left promiscuous mode [ 556.951194][T24537] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4827'. [ 556.978462][T24542] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4829'. [ 556.983030][T24540] bond0: (slave vlan2): Error -34 calling dev_set_mtu [ 557.145471][T24537] hsr_slave_1 (unregistering): left promiscuous mode [ 557.628285][T24581] x_tables: duplicate underflow at hook 1 [ 557.659679][T24572] can: request_module (can-proto-0) failed. [ 557.817664][T24586] netlink: 'syz.1.4843': attribute type 1 has an invalid length. [ 557.817906][T24586] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4843'. [ 557.817928][T24586] netlink: 'syz.1.4843': attribute type 5 has an invalid length. [ 558.319219][T24624] netlink: 'syz.2.4853': attribute type 10 has an invalid length. [ 558.589122][T24641] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 558.591119][T24642] netlink: 'syz.3.4859': attribute type 4 has an invalid length. [ 558.634343][T24645] netlink: 'syz.2.4860': attribute type 2 has an invalid length. [ 558.830640][T24661] netlink: 'syz.2.4863': attribute type 1 has an invalid length. [ 558.860576][T24661] bond0: entered promiscuous mode [ 558.860870][T24661] 8021q: adding VLAN 0 to HW filter on device bond0 [ 558.883844][T24661] syz.2.4863: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 558.883934][T24661] CPU: 1 UID: 0 PID: 24661 Comm: syz.2.4863 Not tainted syzkaller #0 PREEMPT(full) [ 558.883955][T24661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 558.883968][T24661] Call Trace: [ 558.883974][T24661] [ 558.883982][T24661] dump_stack_lvl+0xe8/0x150 [ 558.884004][T24661] warn_alloc+0x24d/0x270 [ 558.884017][T24661] ? stack_depot_save_flags+0x33/0x810 [ 558.884035][T24661] ? __pfx_warn_alloc+0x10/0x10 [ 558.884050][T24661] ? kasan_save_track+0x4f/0x80 [ 558.884066][T24661] ? __kasan_kmalloc+0x93/0xb0 [ 558.884080][T24661] ? xsk_init_queue+0x8a/0xe0 [ 558.884091][T24661] ? xsk_setsockopt+0x52a/0x960 [ 558.884102][T24661] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 558.884131][T24661] __vmalloc_node_range_noprof+0x12c/0x16f0 [ 558.884161][T24661] ? rcu_is_watching+0x16/0xb0 [ 558.884180][T24661] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 558.884192][T24661] ? __kmalloc_cache_noprof+0x31c/0x600 [ 558.884206][T24661] ? __kmalloc_cache_noprof+0x148/0x600 [ 558.884219][T24661] ? xskq_create+0x56/0x220 [ 558.884234][T24661] xskq_create+0x148/0x220 [ 558.884246][T24661] ? xsk_init_queue+0x8a/0xe0 [ 558.884262][T24661] xsk_init_queue+0x8a/0xe0 [ 558.884276][T24661] xsk_setsockopt+0x52a/0x960 [ 558.884289][T24661] ? __pfx_xsk_setsockopt+0x10/0x10 [ 558.884300][T24661] ? __pfx_aa_sk_perm+0x10/0x10 [ 558.884322][T24661] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 558.884336][T24661] ? __pfx_xsk_setsockopt+0x10/0x10 [ 558.884348][T24661] do_sock_setsockopt+0x17c/0x1b0 [ 558.884364][T24661] __x64_sys_setsockopt+0x13d/0x1b0 [ 558.884379][T24661] do_syscall_64+0x166/0x520 [ 558.884391][T24661] ? trace_irq_disable+0x3b/0x140 [ 558.884405][T24661] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 558.884416][T24661] ? clear_bhb_loop+0x70/0xc0 [ 558.884429][T24661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 558.884439][T24661] RIP: 0033:0x7fd4a73a8f19 [ 558.884450][T24661] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 558.884460][T24661] RSP: 002b:00007fd4a81d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 558.884471][T24661] RAX: ffffffffffffffda RBX: 00007fd4a7625fa0 RCX: 00007fd4a73a8f19 [ 558.884478][T24661] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 558.884484][T24661] RBP: 00007fd4a7437f6d R08: 0000000000000004 R09: 0000000000000000 [ 558.884490][T24661] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000000 [ 558.884497][T24661] R13: 00007fd4a7626038 R14: 00007fd4a7625fa0 R15: 00007fff7febd6f8 [ 558.884514][T24661] [ 558.895460][T24661] Mem-Info: [ 558.895476][T24661] active_anon:6281 inactive_anon:0 isolated_anon:0 [ 558.895476][T24661] active_file:0 inactive_file:43439 isolated_file:0 [ 558.895476][T24661] unevictable:0 dirty:58 writeback:0 [ 558.895476][T24661] slab_reclaimable:12922 slab_unreclaimable:118982 [ 558.895476][T24661] mapped:29566 shmem:533 pagetables:3599 [ 558.895476][T24661] sec_pagetables:0 bounce:0 [ 558.895476][T24661] kernel_misc_reclaimable:0 [ 558.895476][T24661] free:1285823 free_pcp:16683 free_cma:0 [ 558.895563][T24661] Node 0 active_anon:25124kB inactive_anon:0kB active_file:0kB inactive_file:173548kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:118264kB dirty:232kB writeback:0kB shmem:2132kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15956kB pagetables:14252kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 558.895617][T24661] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 558.895667][T24661] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 558.895723][T24661] lowmem_reserve[]: 0 2463 2465 2465 2465 [ 558.895756][T24661] Node 0 DMA32 free:1189028kB boost:0kB min:33920kB low:42400kB high:50880kB reserved_highatomic:0kB free_highatomic:0kB active_anon:25124kB inactive_anon:0kB active_file:0kB inactive_file:173548kB unevictable:0kB writepending:232kB zspages:0kB present:3129332kB managed:2522828kB mlocked:0kB bounce:0kB free_pcp:66728kB local_pcp:26248kB free_cma:0kB [ 558.895812][T24661] lowmem_reserve[]: 0 0 1 1 1 [ 558.895842][T24661] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1392kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 558.895895][T24661] lowmem_reserve[]: 0 0 0 0 0 [ 558.895925][T24661] Node 1 Normal free:3938904kB boost:0kB min:55960kB low:69948kB high:83936kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 558.895978][T24661] lowmem_reserve[]: 0 0 0 0 0 [ 558.896008][T24661] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 558.896143][T24661] Node 0 DMA32: 3235*4kB (UME) 1074*8kB (UME) 388*16kB (UME) 461*32kB (UME) 204*64kB (UME) 276*128kB (UME) 406*256kB (UM) 276*512kB (U) 145*1024kB (UM) 18*2048kB (UME) 163*4096kB (UM) = 1189116kB [ 558.896291][T24661] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 558.896379][T24661] Node 1 Normal: 4*4kB (UM) 7*8kB (UM) 11*16kB (UM) 13*32kB (UM) 9*64kB (UM) 5*128kB (UM) 7*256kB (UM) 4*512kB (UM) 1*1024kB (M) 2*2048kB (U) 959*4096kB (M) = 3938904kB [ 558.896567][T24661] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 558.896583][T24661] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 558.896599][T24661] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 558.896614][T24661] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 558.896629][T24661] 43968 total pagecache pages [ 558.896639][T24661] 0 pages in swap cache [ 558.896646][T24661] Free swap = 124996kB [ 558.896653][T24661] Total swap = 124996kB [ 558.896660][T24661] 2097051 pages RAM [ 558.896666][T24661] 0 pages HighMem/MovableOnly [ 558.896672][T24661] 434380 pages reserved [ 558.896679][T24661] 0 pages cma reserved [ 558.932420][T24661] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 558.932446][T24661] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 558.932461][T24661] bond0: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 559.735970][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 559.968848][T24708] xt_ipcomp: unknown flags 1D [ 560.692857][T24737] netlink: 'syz.3.4887': attribute type 1 has an invalid length. [ 560.793954][T24740] ip_tables: iptables: counters copy to user failed while replacing table [ 561.348610][T24766] netlink: 'syz.2.4896': attribute type 11 has an invalid length. [ 561.348632][T24766] __nla_validate_parse: 19 callbacks suppressed [ 561.348643][T24766] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4896'. [ 561.542641][T24770] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4897'. [ 561.554173][T24770] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 561.557021][T24770] bridge0: port 3(netdevsim0) entered disabled state [ 561.598093][T24782] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4899'. [ 561.622015][T24770] bridge_slave_1: left allmulticast mode [ 561.622042][T24770] bridge_slave_1: left promiscuous mode [ 561.622277][T24770] bridge0: port 2(bridge_slave_1) entered disabled state [ 561.652579][T24770] bridge_slave_0: left allmulticast mode [ 561.652605][T24770] bridge_slave_0: left promiscuous mode [ 561.652852][T24770] bridge0: port 1(bridge_slave_0) entered disabled state [ 562.342698][T24804] netlink: 9 bytes leftover after parsing attributes in process `syz.1.4901'. [ 562.559726][T24815] veth1_macvtap: Caught tx_queue_len zero misconfig [ 562.598216][T24815] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4906'. [ 562.714326][T24820] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4907'. [ 562.831281][T24826] ip_tables: iptables: counters copy to user failed while replacing table [ 562.852099][T24828] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4909'. [ 563.450032][T24841] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 563.559400][T24849] ip_tables: iptables: counters copy to user failed while replacing table [ 563.759598][T24847] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4916'. [ 563.901767][T24859] mac80211_hwsim hwsim34 wlan0: entered promiscuous mode [ 563.981185][T24872] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4921'. [ 564.069068][T24862] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4921'. [ 564.132484][T24876] FAULT_INJECTION: forcing a failure. [ 564.132484][T24876] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 564.132512][T24876] CPU: 0 UID: 0 PID: 24876 Comm: syz.1.4925 Not tainted syzkaller #0 PREEMPT(full) [ 564.132533][T24876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 564.132544][T24876] Call Trace: [ 564.132551][T24876] [ 564.132559][T24876] dump_stack_lvl+0xe8/0x150 [ 564.132592][T24876] should_fail_ex+0x3eb/0x540 [ 564.132620][T24876] _copy_from_user+0x2d/0xb0 [ 564.132644][T24876] do_sock_getsockopt+0x1fa/0x640 [ 564.132673][T24876] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 564.132711][T24876] ? __fget_files+0x3a2/0x420 [ 564.132734][T24876] ? __fget_files+0x2a/0x420 [ 564.132766][T24876] __x64_sys_getsockopt+0x1a4/0x240 [ 564.132797][T24876] do_syscall_64+0x166/0x520 [ 564.132824][T24876] ? trace_irq_disable+0x3b/0x140 [ 564.132849][T24876] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.132867][T24876] ? clear_bhb_loop+0x70/0xc0 [ 564.132891][T24876] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.132909][T24876] RIP: 0033:0x7f729d3a8f19 [ 564.132927][T24876] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 564.132943][T24876] RSP: 002b:00007f729e1b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 564.132963][T24876] RAX: ffffffffffffffda RBX: 00007f729d625fa0 RCX: 00007f729d3a8f19 [ 564.132977][T24876] RDX: 0000000000000003 RSI: 000000000000011d RDI: 0000000000000003 [ 564.132988][T24876] RBP: 00007f729e1b7090 R08: 0000200000000000 R09: 0000000000000000 [ 564.133001][T24876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 564.133012][T24876] R13: 00007f729d626038 R14: 00007f729d625fa0 R15: 00007ffed33e34a8 [ 564.133046][T24876] [ 564.526300][T24887] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 564.566212][T24887] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 565.885750][T24937] FAULT_INJECTION: forcing a failure. [ 565.885750][T24937] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 565.885782][T24937] CPU: 0 UID: 0 PID: 24937 Comm: syz.2.4939 Not tainted syzkaller #0 PREEMPT(full) [ 565.885804][T24937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 565.885816][T24937] Call Trace: [ 565.885826][T24937] [ 565.885834][T24937] dump_stack_lvl+0xe8/0x150 [ 565.885869][T24937] should_fail_ex+0x3eb/0x540 [ 565.885898][T24937] _copy_from_user+0x2d/0xb0 [ 565.885924][T24937] sockptr_to_sockopt+0xc0/0x3a0 [ 565.885948][T24937] ? __pfx_sockptr_to_sockopt+0x10/0x10 [ 565.885970][T24937] ? __might_fault+0xaf/0x130 [ 565.885997][T24937] do_sock_getsockopt+0x36c/0x640 [ 565.886024][T24937] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 565.886062][T24937] ? __fget_files+0x3a2/0x420 [ 565.886085][T24937] ? __fget_files+0x2a/0x420 [ 565.886116][T24937] __x64_sys_getsockopt+0x1a4/0x240 [ 565.886148][T24937] do_syscall_64+0x166/0x520 [ 565.886171][T24937] ? trace_irq_disable+0x3b/0x140 [ 565.886196][T24937] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 565.886215][T24937] ? clear_bhb_loop+0x70/0xc0 [ 565.886239][T24937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 565.886257][T24937] RIP: 0033:0x7fd4a73a8f19 [ 565.886275][T24937] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 565.886291][T24937] RSP: 002b:00007fd4a81d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 565.886312][T24937] RAX: ffffffffffffffda RBX: 00007fd4a7625fa0 RCX: 00007fd4a73a8f19 [ 565.886326][T24937] RDX: 0000000000000003 RSI: 000000000000011d RDI: 0000000000000003 [ 565.886337][T24937] RBP: 00007fd4a81d5090 R08: 0000200000000000 R09: 0000000000000000 [ 565.886350][T24937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 565.886362][T24937] R13: 00007fd4a7626038 R14: 00007fd4a7625fa0 R15: 00007fff7febd6f8 [ 565.886395][T24937] [ 566.959037][T24972] FAULT_INJECTION: forcing a failure. [ 566.959037][T24972] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 566.959067][T24972] CPU: 1 UID: 0 PID: 24972 Comm: syz.2.4950 Not tainted syzkaller #0 PREEMPT(full) [ 566.959087][T24972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 566.959098][T24972] Call Trace: [ 566.959106][T24972] [ 566.959113][T24972] dump_stack_lvl+0xe8/0x150 [ 566.959147][T24972] should_fail_ex+0x3eb/0x540 [ 566.959174][T24972] _copy_to_user+0x31/0xb0 [ 566.959201][T24972] do_sock_getsockopt+0x4c1/0x640 [ 566.959230][T24972] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 566.959267][T24972] ? __fget_files+0x3a2/0x420 [ 566.959290][T24972] ? __fget_files+0x2a/0x420 [ 566.959320][T24972] __x64_sys_getsockopt+0x1a4/0x240 [ 566.959351][T24972] do_syscall_64+0x166/0x520 [ 566.959374][T24972] ? trace_irq_disable+0x3b/0x140 [ 566.959398][T24972] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.959426][T24972] ? clear_bhb_loop+0x70/0xc0 [ 566.959449][T24972] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.959467][T24972] RIP: 0033:0x7fd4a73a8f19 [ 566.959488][T24972] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 566.959504][T24972] RSP: 002b:00007fd4a81d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 566.959524][T24972] RAX: ffffffffffffffda RBX: 00007fd4a7625fa0 RCX: 00007fd4a73a8f19 [ 566.959539][T24972] RDX: 0000000000000003 RSI: 000000000000011d RDI: 0000000000000003 [ 566.959550][T24972] RBP: 00007fd4a81d5090 R08: 0000200000000000 R09: 0000000000000000 [ 566.959563][T24972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 566.959574][T24972] R13: 00007fd4a7626038 R14: 00007fd4a7625fa0 R15: 00007fff7febd6f8 [ 566.959607][T24972] [ 567.329083][T24977] __nla_validate_parse: 4 callbacks suppressed [ 567.329105][T24977] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4952'. [ 567.329131][T24977] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4952'. [ 567.430248][T24977] geneve2: entered promiscuous mode [ 567.812284][T24989] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4956'. [ 568.044513][T24999] netlink: 666 bytes leftover after parsing attributes in process `syz.3.4959'. [ 568.140274][T24999] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4959'. [ 568.546761][T25015] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4963'. [ 568.892719][T25028] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4966'. [ 568.982431][T25034] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4967'. [ 569.077755][T25028] vlan2: entered promiscuous mode [ 569.077777][T25028] bond0: entered promiscuous mode [ 569.077789][T25028] bond_slave_0: entered promiscuous mode [ 569.078336][T25028] bond_slave_1: entered promiscuous mode [ 569.690886][T25059] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4974'. [ 569.802613][T25059] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4974'. [ 570.487464][T25079] validate_nla: 1 callbacks suppressed [ 570.487670][T25079] netlink: 'syz.4.4980': attribute type 1 has an invalid length. [ 570.574586][T25079] netlink: 'syz.4.4980': attribute type 1 has an invalid length. [ 570.799686][T25092] syzkaller0: entered promiscuous mode [ 570.799914][T25092] syzkaller0: entered allmulticast mode [ 570.897795][T25092] openvswitch: netlink: Flow key attr not present in new flow. [ 571.434728][T25122] xt_NFQUEUE: number of total queues is 0 [ 572.128110][T25148] netlink: 'syz.2.4995': attribute type 4 has an invalid length. [ 572.582879][T25171] __nla_validate_parse: 12 callbacks suppressed [ 572.582898][T25171] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5002'. [ 572.795288][T25179] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5003'. [ 572.853680][T25182] netlink: 'syz.3.5004': attribute type 11 has an invalid length. [ 572.853701][T25182] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5004'. [ 572.921228][T25171] macvtap0: entered promiscuous mode [ 572.921260][T25171] vlan0: entered promiscuous mode [ 572.922532][T25171] macvtap0: entered allmulticast mode [ 572.922550][T25171] vlan0: entered allmulticast mode [ 572.922560][T25171] veth0_vlan: entered allmulticast mode [ 573.092354][T25182] netlink: 'syz.3.5004': attribute type 11 has an invalid length. [ 573.092375][T25182] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5004'. [ 573.395164][T25182] netlink: 'syz.3.5004': attribute type 11 has an invalid length. [ 573.395186][T25182] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5004'. [ 573.479716][T25196] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5009'. [ 573.479741][T25196] netlink: 50 bytes leftover after parsing attributes in process `syz.2.5009'. [ 573.479759][T25196] netlink: 50 bytes leftover after parsing attributes in process `syz.2.5009'. [ 573.594031][T25182] netlink: 'syz.3.5004': attribute type 11 has an invalid length. [ 573.594053][T25182] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5004'. [ 573.828679][T25196] 8021q: adding VLAN 0 to HW filter on device bond3 [ 573.858997][T25196] bond3 (unregistering): Released all slaves [ 574.265743][T25218] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5012'. [ 574.266543][T25218] tc_dump_action: action bad kind [ 574.804749][T25253] bridge: RTM_NEWNEIGH with invalid state 0x20 [ 575.070573][T25260] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 575.216611][T25271] bond4: entered allmulticast mode [ 575.216634][T25271] wireguard0: entered allmulticast mode [ 575.222633][T25271] bond4: left allmulticast mode [ 575.222653][T25271] wireguard0: left allmulticast mode [ 577.552944][T25236] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 577.664409][T25289] __nla_validate_parse: 6 callbacks suppressed [ 577.664430][T25289] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5031'. [ 577.714700][T25289] vlan3: entered promiscuous mode [ 577.714725][T25289] hsr0: entered promiscuous mode [ 577.786023][T25291] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5032'. [ 577.786775][T25291] netlink: 'syz.2.5032': attribute type 2 has an invalid length. [ 577.821686][T25289] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5031'. [ 577.905300][T25289] hsr_slave_0: left promiscuous mode [ 577.975192][T25289] hsr_slave_1: left promiscuous mode [ 578.150483][T25298] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5033'. [ 578.240513][T25306] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5033'. [ 578.270722][T25307] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5036'. [ 578.472896][T25306] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5033'. [ 578.550259][T25293] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5034'. [ 578.551187][T25293] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5034'. [ 578.888491][T25320] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5041'. [ 579.024107][T25323] bridge0: entered allmulticast mode [ 581.610747][T25414] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 581.917189][T25426] block nbd5: Unsupported socket: should be TCP or UNIX. [ 582.114201][T25441] netlink: 'syz.4.5067': attribute type 2 has an invalid length. [ 582.908732][T25475] netlink: 'syz.2.5078': attribute type 7 has an invalid length. [ 582.908755][T25475] netlink: 'syz.2.5078': attribute type 8 has an invalid length. [ 583.194172][T25482] __nla_validate_parse: 49 callbacks suppressed [ 583.194192][T25482] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5079'. [ 583.353272][T25479] veth0_to_bridge: entered promiscuous mode [ 583.465683][T25477] veth0_to_bridge: left promiscuous mode [ 584.709891][T25531] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5093'. [ 585.195760][T25550] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5095'. [ 587.564750][T25608] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5100'. [ 587.583408][T25611] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5100'. [ 587.720289][T25610] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5099'. [ 587.907196][T25608] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5100'. [ 588.639268][T25636] ip_tables: iptables: counters copy to user failed while replacing table [ 589.144800][T25644] syzkaller1: entered promiscuous mode [ 589.156711][T25644] syzkaller1: entered allmulticast mode [ 589.216403][T25658] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5111'. [ 589.352906][T25661] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5111'. [ 589.662716][T25677] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5113'. [ 589.844797][T25682] netlink: 'syz.1.5116': attribute type 4 has an invalid length. [ 589.863951][T25683] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5114'. [ 590.554716][T25720] ipt_ah: unknown flags FF [ 590.889434][T25730] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5124'. [ 591.042416][T25735] openvswitch: netlink: nsh attr 0 has unexpected len 94 expected 0 [ 591.511757][T25755] xt_CT: You must specify a L4 protocol and not use inversions on it [ 591.562582][T25758] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5133'. [ 591.562606][T25758] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5133'. [ 591.603655][T25755] netlink: 'syz.0.5132': attribute type 1 has an invalid length. [ 591.689547][T25765] netlink: 41 bytes leftover after parsing attributes in process `syz.2.5134'. [ 591.689569][T25765] netlink: 140 bytes leftover after parsing attributes in process `syz.2.5134'. [ 591.785105][T25766] openvswitch: netlink: Multiple metadata blocks provided [ 591.792013][T25755] bond6: entered promiscuous mode [ 591.794200][T25755] 8021q: adding VLAN 0 to HW filter on device bond6 [ 591.829429][T25765] netlink: 41 bytes leftover after parsing attributes in process `syz.2.5134'. [ 592.157255][T25776] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 592.584178][T25790] IPv6: sit3: Disabled Multicast RS [ 593.400833][T25833] xt_hashlimit: size too large, truncated to 1048576 [ 594.281666][T25867] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 594.463310][T25868] tipc: Enabling of bearer rejected, failed to enable media [ 595.642347][T25906] xt_l2tp: v2 tid > 0xffff: 4294967295 [ 595.669862][T25907] __nla_validate_parse: 5 callbacks suppressed [ 595.669880][T25907] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.5167'. [ 595.716454][T25907] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 595.750411][T25907] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.5167'. [ 595.797883][T25913] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5168'. [ 595.809134][T25909] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 595.948795][T25915] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5170'. [ 596.091979][T25924] netlink: 'syz.1.5172': attribute type 1 has an invalid length. [ 596.212651][T25924] 8021q: adding VLAN 0 to HW filter on device bond6 [ 596.323932][T25929] bond6: (slave gretap1): making interface the new active one [ 596.339631][T25929] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 596.804461][T25961] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5182'. [ 596.941358][T25966] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5184'. [ 597.194219][T25977] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 597.236277][T25978] tipc: Enabled bearer , priority 10 [ 597.293810][T25985] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5188'. [ 597.294124][T25985] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5188'. [ 597.328992][T25984] mac80211_hwsim hwsim34 wlan0: left promiscuous mode [ 597.343755][T25985] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5188'. [ 597.343994][T25985] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5188'. [ 597.356376][T25996] tipc: Enabling of bearer rejected, already enabled [ 597.634139][T26002] FAULT_INJECTION: forcing a failure. [ 597.634139][T26002] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 597.634170][T26002] CPU: 1 UID: 0 PID: 26002 Comm: syz.2.5191 Not tainted syzkaller #0 PREEMPT(full) [ 597.634191][T26002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 597.634202][T26002] Call Trace: [ 597.634210][T26002] [ 597.634218][T26002] dump_stack_lvl+0xe8/0x150 [ 597.634252][T26002] should_fail_ex+0x3eb/0x540 [ 597.634281][T26002] _copy_from_user+0x2d/0xb0 [ 597.634306][T26002] do_sock_getsockopt+0x1fa/0x640 [ 597.634334][T26002] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 597.634370][T26002] ? __fget_files+0x3a2/0x420 [ 597.634391][T26002] ? __fget_files+0x2a/0x420 [ 597.634428][T26002] __x64_sys_getsockopt+0x1a4/0x240 [ 597.634459][T26002] do_syscall_64+0x166/0x520 [ 597.634482][T26002] ? trace_irq_disable+0x3b/0x140 [ 597.634511][T26002] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.634530][T26002] ? clear_bhb_loop+0x70/0xc0 [ 597.634551][T26002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.634569][T26002] RIP: 0033:0x7fd4a73a8f19 [ 597.634587][T26002] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 597.634603][T26002] RSP: 002b:00007fd4a81d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 597.634623][T26002] RAX: ffffffffffffffda RBX: 00007fd4a7625fa0 RCX: 00007fd4a73a8f19 [ 597.634637][T26002] RDX: 0000000000000002 RSI: 000000000000011a RDI: 0000000000000003 [ 597.634648][T26002] RBP: 00007fd4a81d5090 R08: 0000200000000280 R09: 0000000000000000 [ 597.634661][T26002] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000001 [ 597.634672][T26002] R13: 00007fd4a7626038 R14: 00007fd4a7625fa0 R15: 00007fff7febd6f8 [ 597.634705][T26002] [ 597.868135][T26010] netlink: 'syz.4.5193': attribute type 26 has an invalid length. [ 597.939062][T26010] netlink: 'syz.4.5193': attribute type 26 has an invalid length. [ 598.185950][T26023] xfrm0: entered promiscuous mode [ 598.185972][T26023] xfrm0: entered allmulticast mode [ 598.519892][T26043] bridge0: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 598.786440][T26056] FAULT_INJECTION: forcing a failure. [ 598.786440][T26056] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 598.786468][T26056] CPU: 0 UID: 0 PID: 26056 Comm: syz.4.5205 Not tainted syzkaller #0 PREEMPT(full) [ 598.786489][T26056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 598.786499][T26056] Call Trace: [ 598.786506][T26056] [ 598.786515][T26056] dump_stack_lvl+0xe8/0x150 [ 598.786550][T26056] should_fail_ex+0x3eb/0x540 [ 598.786579][T26056] _copy_to_user+0x31/0xb0 [ 598.786607][T26056] simple_read_from_buffer+0xe1/0x170 [ 598.786638][T26056] proc_fail_nth_read+0x1bb/0x230 [ 598.786662][T26056] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 598.786686][T26056] ? rw_verify_area+0x24a/0x4c0 [ 598.786712][T26056] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 598.786731][T26056] vfs_read+0x213/0xa80 [ 598.786767][T26056] ? __pfx___mutex_lock+0x10/0x10 [ 598.786800][T26056] ? __pfx_vfs_read+0x10/0x10 [ 598.786826][T26056] ? __fget_files+0x2a/0x420 [ 598.786848][T26056] ? __fget_files+0x3a2/0x420 [ 598.786869][T26056] ? __fget_files+0x2a/0x420 [ 598.786896][T26056] ? fdget+0x1ac/0x250 [ 598.786927][T26056] ksys_read+0x150/0x270 [ 598.786961][T26056] ? __pfx_ksys_read+0x10/0x10 [ 598.786982][T26056] ? fput+0xa0/0xd0 [ 598.787015][T26056] do_syscall_64+0x166/0x520 [ 598.787037][T26056] ? trace_irq_disable+0x3b/0x140 [ 598.787062][T26056] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 598.787081][T26056] ? clear_bhb_loop+0x70/0xc0 [ 598.787104][T26056] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 598.787123][T26056] RIP: 0033:0x7fe71336974e [ 598.787141][T26056] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 598.787156][T26056] RSP: 002b:00007fe7142acfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 598.787175][T26056] RAX: ffffffffffffffda RBX: 00007fe7142ad6c0 RCX: 00007fe71336974e [ 598.787189][T26056] RDX: 000000000000000f RSI: 00007fe7142ad0a0 RDI: 0000000000000004 [ 598.787200][T26056] RBP: 00007fe7142ad090 R08: 0000000000000000 R09: 0000000000000000 [ 598.787212][T26056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 598.787223][T26056] R13: 00007fe713626038 R14: 00007fe713625fa0 R15: 00007ffc7bf1aff8 [ 598.787257][T26056] [ 599.191339][T26065] bond3: option min_links: invalid value (18446744073709551614) [ 599.191365][T26065] bond3: option min_links: allowed values 0 - 2147483647 [ 599.327887][T26065] bond3 (unregistering): Released all slaves [ 599.906551][T26070] bond3: option min_links: invalid value (18446744073709551614) [ 599.906575][T26070] bond3: option min_links: allowed values 0 - 2147483647 [ 599.912943][T26070] bond3 (unregistering): Released all slaves [ 600.114133][T26098] netlink: 'syz.1.5217': attribute type 22 has an invalid length. [ 600.270472][T26098] netlink: 'syz.1.5217': attribute type 22 has an invalid length. [ 600.743276][T26126] __nla_validate_parse: 70 callbacks suppressed [ 600.743299][T26126] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5224'. [ 600.763276][T26126] netlink: 'syz.0.5224': attribute type 1 has an invalid length. [ 600.853740][T26130] netlink: 'syz.4.5225': attribute type 1 has an invalid length. [ 600.853764][T26130] netlink: 228 bytes leftover after parsing attributes in process `syz.4.5225'. [ 600.889291][T26126] netlink: 'syz.0.5224': attribute type 1 has an invalid length. [ 601.284768][T26129] bond7 (unregistering): Released all slaves [ 601.324155][T26149] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 601.695939][T26166] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5233'. [ 601.738672][T26168] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5234'. [ 601.843190][T26174] netlink: 100 bytes leftover after parsing attributes in process `syz.3.5235'. [ 601.847671][T26173] netlink: 4337 bytes leftover after parsing attributes in process `syz.1.5234'. [ 601.847710][T26173] openvswitch: netlink: Actions may not be safe on all matching packets [ 602.038275][T26182] syzkaller0: entered promiscuous mode [ 602.038298][T26182] syzkaller0: entered allmulticast mode [ 603.428209][T26222] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5249'. [ 603.574505][T26238] netlink: 'syz.4.5253': attribute type 3 has an invalid length. [ 603.814315][T26245] mac80211_hwsim hwsim41 syzkaller1: entered promiscuous mode [ 603.814343][T26245] mac80211_hwsim hwsim41 syzkaller1: entered allmulticast mode [ 603.977209][T26256] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5255'. [ 604.029413][T26249] netlink: 'syz.0.5256': attribute type 10 has an invalid length. [ 604.029434][T26249] netlink: 55 bytes leftover after parsing attributes in process `syz.0.5256'. [ 604.126182][T26260] netlink: 'syz.1.5258': attribute type 4 has an invalid length. [ 604.187089][T26262] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5256'. [ 604.291120][T26270] sctp: [Deprecated]: syz.3.5260 (pid 26270) Use of struct sctp_assoc_value in delayed_ack socket option. [ 604.291120][T26270] Use struct sctp_sack_info instead [ 604.881273][T26280] netlink: 'syz.2.5262': attribute type 1 has an invalid length. [ 604.992247][T26282] bond3: (slave geneve3): making interface the new active one [ 604.992871][T26282] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 605.022950][ T1860] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 605.023005][ T1860] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 605.023039][ T1860] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 605.023071][ T1860] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 605.028785][T26287] rdma_rxe: rxe_newlink: failed to add tunl0 [ 605.032673][T26288] rdma_rxe: rxe_newlink: failed to add tunl0 [ 605.129769][T26280] 8021q: adding VLAN 0 to HW filter on device bond3 [ 607.447453][T26272] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 607.824199][T26313] __nla_validate_parse: 3 callbacks suppressed [ 607.824221][T26313] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5272'. [ 607.918104][T26310] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5270'. [ 607.918369][T26318] netlink: 'syz.1.5274': attribute type 10 has an invalid length. [ 607.921770][T26326] xt_NETMAP: bad rangesize 37. [ 607.922395][T26326] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5273'. [ 608.247903][T26335] Bluetooth: ISO socket layer initialized [ 608.287536][T26336] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5276'. [ 610.821974][T26318] 8021q: adding VLAN 0 to HW filter on device team0 [ 610.824294][T26318] team0: entered promiscuous mode [ 610.824314][T26318] team_slave_0: entered promiscuous mode [ 610.824504][T26318] team_slave_1: entered promiscuous mode [ 610.828332][T26318] bond0: (slave team0): Enslaving as an active interface with a down link [ 610.832258][T26340] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5278'. [ 610.832280][T26340] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5278'. [ 610.833163][T26340] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5278'. [ 610.833180][T26340] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5278'. [ 611.633689][T26383] netlink: 'syz.1.5288': attribute type 1 has an invalid length. [ 611.802060][T26383] bond7: entered promiscuous mode [ 611.803635][T26383] 8021q: adding VLAN 0 to HW filter on device bond7 [ 611.837895][T26385] bond7: (slave bridge6): making interface the new active one [ 611.837920][T26385] bridge6: entered promiscuous mode [ 611.840108][T26385] bond7: (slave bridge6): Enslaving as an active interface with an up link [ 611.857849][T26391] netlink: 144 bytes leftover after parsing attributes in process `syz.2.5290'. [ 612.107170][T26388] 8021q: adding VLAN 0 to HW filter on device bond4 [ 612.652708][T26421] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5298'. [ 612.836605][T26421] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5298'. [ 612.840967][T26435] netlink: 256 bytes leftover after parsing attributes in process `syz.2.5302'. [ 612.949427][T26440] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5303'. [ 613.032846][T26442] netlink: 'syz.1.5304': attribute type 24 has an invalid length. [ 613.049184][T26442] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5304'. [ 613.066595][T26442] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5304'. [ 613.241822][T26446] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5306'. [ 613.391720][T26448] bridge0: port 1(bridge_slave_0) entered disabled state [ 613.861881][T26465] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5311'. [ 614.027894][T26473] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5315'. [ 614.122072][T26477] Cannot find add_set index 0 as target [ 614.188095][T26477] nbd: socks must be embedded in a SOCK_ITEM attr [ 614.612092][T26506] netlink: 'syz.2.5321': attribute type 13 has an invalid length. [ 614.633014][T26506] tipc: Started in network mode [ 614.633113][T26506] tipc: Node identity ac14142f, cluster identity 4711 [ 614.633496][T26506] tipc: Enabling of bearer rejected, failed to enable media [ 614.973757][T26516] tipc: Failed to remove unknown binding: 66,1,1/0:79640381/79640383 [ 614.994474][T26516] wg2: Caught tx_queue_len zero misconfig [ 615.243292][T26519] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5326'. [ 615.353591][T26519] 8021q: adding VLAN 0 to HW filter on device bond9 [ 615.487309][T26529] netlink: 'syz.2.5330': attribute type 10 has an invalid length. [ 615.494742][T26529] macvlan1: entered promiscuous mode [ 615.494766][T26529] macvlan1: entered allmulticast mode [ 615.600162][T26529] veth1_vlan: entered allmulticast mode [ 615.617270][T26532] netlink: 'syz.1.5331': attribute type 1 has an invalid length. [ 615.625704][T26529] : (slave macvlan1): Enslaving as an active interface with an up link [ 615.652119][T26536] netlink: 'syz.0.5333': attribute type 1 has an invalid length. [ 615.652141][T26536] netlink: 228 bytes leftover after parsing attributes in process `syz.0.5333'. [ 615.683043][T26538] netlink: 'syz.3.5334': attribute type 1 has an invalid length. [ 615.694359][T26538] Bluetooth: hci0: unsupported parameter 5135 [ 615.694379][T26538] Bluetooth: hci0: unsupported parameter 8192 [ 615.694392][T26538] Bluetooth: hci0: unsupported parameter 5135 [ 615.694404][T26538] Bluetooth: hci0: unsupported parameter 8192 [ 615.847308][T26548] openvswitch: netlink: Message has 70 unknown bytes. [ 615.847346][T26548] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 616.342371][T26561] 8021q: adding VLAN 0 to HW filter on device team0 [ 616.562489][T26568] syz_tun: entered allmulticast mode [ 616.717866][T26573] tunl0: Caught tx_queue_len zero misconfig [ 616.801013][T26573] netlink: 'syz.0.5343': attribute type 1 has an invalid length. [ 616.918986][T26567] syz_tun: left allmulticast mode [ 617.281907][T26588] syzkaller0: entered promiscuous mode [ 617.281929][T26588] syzkaller0: entered allmulticast mode [ 617.354475][T26594] netlink: 'syz.3.5350': attribute type 1 has an invalid length. [ 617.461716][T26594] bond9: entered promiscuous mode [ 617.465556][T26594] 8021q: adding VLAN 0 to HW filter on device bond9 [ 618.038642][T26627] xt_hashlimit: Unknown mode mask 2000, kernel too old? [ 618.543471][T26647] __nla_validate_parse: 6 callbacks suppressed [ 618.543492][T26647] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5366'. [ 618.813808][T26658] xt_LOG: level 8 >= 8 [ 619.068560][T26677] netlink: 14 bytes leftover after parsing attributes in process `syz.4.5373'. [ 619.159753][T26677] dummy0 (unregistering): left promiscuous mode [ 619.163701][T26683] netlink: 'syz.1.5376': attribute type 2 has an invalid length. [ 619.191743][T26683] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5376'. [ 619.191766][T26683] netlink: 'syz.1.5376': attribute type 1 has an invalid length. [ 619.191779][T26683] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5376'. [ 619.259177][T26685] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5375'. [ 620.130405][T26717] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5387'. [ 620.173226][T26720] netlink: 256 bytes leftover after parsing attributes in process `syz.0.5388'. [ 620.340431][T26731] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5392'. [ 620.448871][T26734] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5393'. [ 620.448989][T26734] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 620.449744][T26738] netlink: 45 bytes leftover after parsing attributes in process `syz.1.5391'. [ 620.501265][T26745] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 620.742035][T26734] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 621.042707][T26765] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 621.084195][T26765] x_tables: unsorted underflow at hook 3 [ 621.094010][T26768] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 621.225956][T26772] syzkaller0: left promiscuous mode [ 621.226144][T26772] syzkaller0: left allmulticast mode [ 621.363115][T26772] tipc: Started in network mode [ 621.363149][T26772] tipc: Node identity 56ce027b312f, cluster identity 4711 [ 621.363943][T26772] tipc: Enabled bearer , priority 0 [ 621.642798][T26796] netlink: 'syz.1.5406': attribute type 83 has an invalid length. [ 622.475095][ T5726] tipc: Node number set to 1742799483 [ 622.657693][T26844] netlink: 'syz.3.5419': attribute type 1 has an invalid length. [ 622.840881][T26855] lo: entered allmulticast mode [ 623.649433][T26857] lo: left allmulticast mode [ 623.718792][T26894] syzkaller0: entered promiscuous mode [ 623.718816][T26894] syzkaller0: entered allmulticast mode [ 623.854449][T26911] netlink: 'syz.0.5438': attribute type 2 has an invalid length. [ 623.957578][T26915] netlink: 'syz.1.5436': attribute type 2 has an invalid length. [ 624.287184][T26924] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 624.332856][T26932] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 624.580034][T26943] bond0: (slave team0): Releasing backup interface [ 624.581769][T26943] team0: left promiscuous mode [ 624.581787][T26943] team_slave_0: left promiscuous mode [ 624.582008][T26943] team_slave_1: left promiscuous mode [ 624.659068][T26945] __nla_validate_parse: 40 callbacks suppressed [ 624.659090][T26945] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5448'. [ 624.660263][T26943] bond0: (slave bond_slave_0): Releasing backup interface [ 624.661101][T26943] bond_slave_0: left promiscuous mode [ 624.663809][T26943] bond0: (slave bond_slave_1): Releasing backup interface [ 624.664698][T26943] bond_slave_1: left promiscuous mode [ 624.715742][T26943] team0: Port device team_slave_0 removed [ 624.741295][T26943] team0: Port device team_slave_1 removed [ 624.755895][T26943] bond3: (slave gretap0): Releasing backup interface [ 624.762105][T26943] bond4: (slave wireguard0): Releasing backup interface [ 624.762131][T26943] wireguard0: left promiscuous mode [ 624.771026][T26954] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5449'. [ 624.801408][T26943] bond6: (slave gretap1): Releasing active interface [ 624.816447][T26943] bond7: (slave bridge6): Releasing backup interface [ 624.816473][T26943] bridge6: left promiscuous mode [ 625.186343][T26959] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 625.293004][T26962] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 625.725718][T26988] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5454'. [ 625.753053][T26982] sctp: [Deprecated]: syz.3.5457 (pid 26982) Use of struct sctp_assoc_value in delayed_ack socket option. [ 625.753053][T26982] Use struct sctp_sack_info instead [ 625.800242][T26982] set_target_v0_checkentry: 23 callbacks suppressed [ 625.800263][T26982] SET target dimension over the limit! [ 626.923930][T27030] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5467'. [ 627.246482][T27046] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5472'. [ 627.312975][T27055] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5475'. [ 627.569547][T27062] syzkaller0: left promiscuous mode [ 627.569569][T27062] syzkaller0: left allmulticast mode [ 628.071245][T27080] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5481'. [ 628.071273][T27080] block nbd5: Unsupported socket: should be TCP or UNIX. [ 628.454104][T27098] syzkaller1: entered promiscuous mode [ 628.454128][T27098] syzkaller1: entered allmulticast mode [ 628.627988][T27103] tipc: Enabling of bearer rejected, failed to enable media [ 629.062754][T27125] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5496'. [ 629.561883][T27141] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 630.328162][T27175] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5513'. [ 630.328186][T27175] bridge: RTM_NEWNEIGH with invalid ether address [ 630.331791][T27175] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5513'. [ 630.331811][T27175] bridge: RTM_NEWNEIGH with invalid ether address [ 630.673586][T27190] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5519'. [ 630.673725][T27190] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 630.748085][T27190] netlink: 80 bytes leftover after parsing attributes in process `syz.0.5519'. [ 630.849682][T27191] lo: Caught tx_queue_len zero misconfig [ 630.918552][T27202] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5520'. [ 630.947483][T27202] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5520'. [ 631.293038][T27213] rxe_eth0 speed is unknown, defaulting to 1000 [ 631.491679][T27222] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5527'. [ 631.507386][T27222] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5527'. [ 631.509620][T27222] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5527'. [ 631.538042][T27223] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5525'. [ 632.252817][T27248] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 632.311421][T27244] macsec1: entered promiscuous mode [ 632.311444][T27244] bridge0: entered promiscuous mode [ 632.328563][T27244] macsec1: entered allmulticast mode [ 632.328585][T27244] bridge0: entered allmulticast mode [ 632.348986][T27244] bridge0: port 1(macsec1) entered blocking state [ 632.350157][T27244] bridge0: port 1(macsec1) entered disabled state [ 632.398574][T27244] bridge0: left allmulticast mode [ 632.398601][T27244] bridge0: left promiscuous mode [ 632.950810][T27267] netlink: 'syz.2.5538': attribute type 1 has an invalid length. [ 632.955194][T27268] netlink: 'syz.2.5538': attribute type 1 has an invalid length. [ 633.116087][T27267] 8021q: adding VLAN 0 to HW filter on device bond6 [ 633.297272][T27270] bond6: (slave veth5): Enslaving as an active interface with a down link [ 633.591456][T27273] mac80211_hwsim hwsim39 wlan1: entered promiscuous mode [ 633.592057][T27273] bond6: (slave wlan1): Opening slave failed [ 633.684410][T27279] bridge6: entered allmulticast mode [ 634.019091][T27285] mac80211_hwsim hwsim41 syzkaller1: left promiscuous mode [ 634.019118][T27285] mac80211_hwsim hwsim41 syzkaller1: left allmulticast mode [ 634.396108][T27295] tipc: Invalid UDP bearer configuration [ 634.396156][T27295] tipc: Enabling of bearer rejected, failed to enable media [ 634.615906][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 634.680947][T27302] tipc: Resetting bearer [ 634.801863][T27307] netlink: 'syz.1.5547': attribute type 1 has an invalid length. [ 634.819259][T27302] tipc: Disabling bearer [ 634.822427][T27307] netlink: 'syz.1.5547': attribute type 1 has an invalid length. [ 634.963611][T27313] netlink: 'syz.3.5548': attribute type 1 has an invalid length. [ 634.963633][T27313] netlink: 'syz.3.5548': attribute type 4 has an invalid length. [ 634.963983][T27313] netlink: 'syz.3.5548': attribute type 1 has an invalid length. [ 634.963998][T27313] netlink: 'syz.3.5548': attribute type 4 has an invalid length. [ 634.964226][T27313] netlink: 'syz.3.5548': attribute type 1 has an invalid length. [ 634.964239][T27313] netlink: 'syz.3.5548': attribute type 4 has an invalid length. [ 635.401466][T27329] tc mirred: Loop (syzkaller1:ingress --> syzkaller1:ingress) [ 635.401556][T27329] 0: reclassify loop, rule prio 0, protocol 03 [ 635.603371][ C1] vcan0: j1939_tp_rxtimer: 0xffff888033337000: rx timeout, send abort [ 635.603610][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888033337000: 0x2ff01: (3) A timeout occurred and this is the connection abort to close the session. [ 635.633650][T27334] xt_l2tp: invalid flags combination: 8 [ 635.646877][T27335] __nla_validate_parse: 137 callbacks suppressed [ 635.646896][T27335] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5554'. [ 635.651313][ C1] vcan0: j1939_tp_rxtimer: 0xffff888033336800: rx timeout, send abort [ 635.651519][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888033336c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 636.116989][T27353] netlink: 17 bytes leftover after parsing attributes in process `syz.1.5558'. [ 636.151356][ C1] vcan0: j1939_tp_rxtimer: 0xffff888033336800: abort rx timeout. Force session deactivation [ 636.170039][T27352] bond0: option ad_select: unable to set because the bond device is up [ 636.327561][T27352] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5557'. [ 636.501271][T27362] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5559'. [ 637.123215][T27389] netlink: 516 bytes leftover after parsing attributes in process `syz.3.5564'. [ 637.153284][T27385] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5565'. [ 637.621356][T27413] xt_cluster: node mask cannot exceed total number of nodes [ 637.655567][T27414] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5571'. [ 637.958116][T27425] tipc: Failed to remove unknown binding: 66,0,0/0:3542906601/3542906603 [ 637.958147][T27425] tipc: Failed to remove unknown binding: 66,0,0/0:3542906601/3542906602 [ 637.958390][T27425] tipc: Failed to remove unknown binding: 66,0,0/0:3542906601/3542906603 [ 637.958412][T27425] tipc: Failed to remove unknown binding: 66,0,0/0:3542906601/3542906602 [ 639.383927][T27482] ip_tables: iptables: counters copy to user failed while replacing table [ 639.466588][T27482] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5594'. [ 639.633674][T27490] validate_nla: 256 callbacks suppressed [ 639.633697][T27490] netlink: 'syz.3.5597': attribute type 2 has an invalid length. [ 639.722305][T27497] netlink: 'syz.3.5599': attribute type 2 has an invalid length. [ 639.736248][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 639.815000][T23629] block nbd5: Receive control failed (result -32) [ 640.161082][T27510] IPv6: NLM_F_REPLACE set, but no existing node found! [ 640.178339][T27511] netlink: 'syz.3.5601': attribute type 83 has an invalid length. [ 640.317118][T27514] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5602'. [ 640.317656][T27516] ip_tables: iptables: counters copy to user failed while replacing table [ 640.677675][T27528] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 640.747733][T27536] netlink: 'syz.0.5608': attribute type 4 has an invalid length. [ 640.747756][T27536] netlink: 156 bytes leftover after parsing attributes in process `syz.0.5608'. [ 640.751446][T27536] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 640.777164][T27535] netlink: 'syz.0.5608': attribute type 10 has an invalid length. [ 640.822029][T27538] ip_tables: iptables: counters copy to user failed while replacing table [ 640.963983][T27551] ip_tables: iptables: counters copy to user failed while replacing table [ 641.250264][T27557] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5612'. [ 641.250289][T27557] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5612'. [ 641.437811][T27565] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5615'. [ 642.250196][T27589] ip_tables: iptables: counters copy to user failed while replacing table [ 642.380886][T27592] Cannot find del_set index 3 as target [ 642.652109][T27599] tipc: Resetting bearer [ 642.652378][T27599] tipc: Resetting bearer [ 642.672560][T27606] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5622'. [ 642.783578][T23627] block nbd6: Receive control failed (result -32) [ 642.783687][T23629] block nbd6: Receive control failed (result -32) [ 643.139814][T27623] netlink: 'syz.2.5630': attribute type 1 has an invalid length. [ 643.157209][T27621] syz_tun: entered allmulticast mode [ 643.198257][T27625] openvswitch: netlink: IP tunnel dst address not specified [ 643.201339][T27623] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5630'. [ 643.253172][T27621] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5628'. [ 643.336985][T27619] syz_tun: left allmulticast mode [ 643.346114][T27631] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5630'. [ 643.631267][T27641] netlink: 'syz.1.5636': attribute type 8 has an invalid length. [ 643.718148][T27636] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5633'. [ 643.851217][T27644] sctp: [Deprecated]: syz.3.5635 (pid 27644) Use of struct sctp_assoc_value in delayed_ack socket option. [ 643.851217][T27644] Use struct sctp_sack_info instead [ 643.871446][T27644] block nbd0: reconnected socket [ 643.888904][T23627] block nbd0: Receive control failed (result -32) [ 644.072894][T27650] bridge3: entered promiscuous mode [ 644.072940][T27650] bridge3: entered allmulticast mode [ 644.082028][T27652] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5640'. [ 644.305552][T27665] netlink: 'syz.3.5645': attribute type 10 has an invalid length. [ 644.307424][T27665] netdevsim netdevsim3 netdevsim3: entered allmulticast mode [ 644.331635][T27665] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 644.339142][T27665] team0: Port device netdevsim3 added [ 644.552844][T27667] ip_tables: iptables: counters copy to user failed while replacing table [ 644.855372][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 645.768177][T27712] netlink: 'syz.0.5656': attribute type 1 has an invalid length. [ 645.877704][T27712] bond10: entered promiscuous mode [ 645.878152][T27712] 8021q: adding VLAN 0 to HW filter on device bond10 [ 646.082730][T27717] bond10: (slave bridge2): making interface the new active one [ 646.082756][T27717] bridge2: entered promiscuous mode [ 646.111566][T27717] bond10: (slave bridge2): Enslaving as an active interface with an up link [ 646.334648][T27732] __nla_validate_parse: 6 callbacks suppressed [ 646.334668][T27732] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5659'. [ 646.334693][T27732] netlink: 'syz.2.5659': attribute type 8 has an invalid length. [ 646.584390][T27741] netlink: 256 bytes leftover after parsing attributes in process `syz.3.5664'. [ 646.584426][T27741] netlink: 256 bytes leftover after parsing attributes in process `syz.3.5664'. [ 647.493097][T23629] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 647.512099][T23629] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 647.516083][T23629] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 647.536235][T23629] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 647.537139][T23629] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 647.543386][T23627] [ 647.559616][T23627] ====================================================== [ 647.566634][T23627] WARNING: possible circular locking dependency detected [ 647.573667][T23627] syzkaller #0 Not tainted [ 647.578096][T23627] ------------------------------------------------------ [ 647.585129][T23627] kworker/u9:1/23627 is trying to acquire lock: [ 647.591384][T23627] ffff88801d28d210 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_link_sibling+0x539/0x6b0 [ 647.601868][T23627] [ 647.601868][T23627] but task is already holding lock: [ 647.609244][T23627] ffff88801d28d180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x41/0x510 [ 647.618668][T23627] [ 647.618668][T23627] which lock already depends on the new lock. [ 647.618668][T23627] [ 647.629075][T23627] [ 647.629075][T23627] the existing dependency chain (in reverse order) is: [ 647.638173][T23627] [ 647.638173][T23627] -> #9 (&root->kernfs_rwsem){++++}-{4:4}: [ 647.646180][T23627] down_write+0x91/0x200 [ 647.650964][T23627] kernfs_add_one+0x41/0x510 [ 647.656083][T23627] kernfs_create_dir_ns+0x18c/0x220 [ 647.661821][T23627] internal_create_group+0x440/0x1180 [ 647.667731][T23627] cpuhp_invoke_callback+0x434/0x810 [ 647.673569][T23627] cpuhp_issue_call+0x3f0/0x750 [ 647.678970][T23627] __cpuhp_setup_state_cpuslocked+0x3f4/0x6f0 [ 647.685572][T23627] __cpuhp_setup_state+0x3f/0x60 [ 647.691049][T23627] do_one_initcall+0x250/0x870 [ 647.696345][T23627] do_initcall_level+0x10a/0x1a0 [ 647.701814][T23627] do_initcalls+0x59/0xa0 [ 647.706678][T23627] kernel_init_freeable+0x29d/0x3e0 [ 647.712412][T23627] kernel_init+0x22/0x1d0 [ 647.717260][T23627] ret_from_fork+0x514/0xb70 [ 647.722379][T23627] ret_from_fork_asm+0x1a/0x30 [ 647.727664][T23627] [ 647.727664][T23627] -> #8 (cpuhp_state_mutex){+.+.}-{4:4}: [ 647.735503][T23627] [ 647.735503][T23627] -> #7 (cpu_hotplug_lock){++++}-{0:0}: [ 647.743250][T23627] cpus_read_lock+0x3d/0x160 [ 647.748376][T23627] static_key_slow_inc+0x12/0x30 [ 647.753835][T23627] nbd_genl_reconnect_sock_cb+0x69a/0xbb0 [ 647.760084][T23627] nbd_genl_foreach_sock+0x265/0x450 [ 647.765898][T23627] nbd_genl_reconfigure+0xbbb/0x1040 [ 647.771710][T23627] genl_family_rcv_msg_doit+0x233/0x340 [ 647.777793][T23627] genl_rcv_msg+0x614/0x7a0 [ 647.782819][T23627] netlink_rcv_skb+0x226/0x4a0 [ 647.788126][T23627] genl_rcv+0x28/0x40 [ 647.792638][T23627] netlink_unicast+0x8ef/0xa80 [ 647.797937][T23627] netlink_sendmsg+0x7f0/0xb20 [ 647.803252][T23627] sock_sendmsg_nosec+0x14e/0x190 [ 647.808809][T23627] ____sys_sendmsg+0x54e/0x850 [ 647.814094][T23627] ___sys_sendmsg+0x2a5/0x360 [ 647.819290][T23627] __x64_sys_sendmsg+0x1b1/0x290 [ 647.824755][T23627] do_syscall_64+0x166/0x520 [ 647.829889][T23627] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 647.836302][T23627] [ 647.836302][T23627] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 647.843940][T23627] __mutex_lock+0x197/0x15a0 [ 647.849056][T23627] nbd_queue_rq+0x373/0xff0 [ 647.854078][T23627] blk_mq_dispatch_rq_list+0x499/0x1990 [ 647.860152][T23627] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 647.866995][T23627] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 647.873490][T23627] blk_mq_run_work_fn+0x167/0x2f0 [ 647.879034][T23627] process_scheduled_works+0xc3d/0x1630 [ 647.885102][T23627] worker_thread+0xa47/0xfb0 [ 647.890212][T23627] kthread+0x38b/0x480 [ 647.894800][T23627] ret_from_fork+0x514/0xb70 [ 647.899930][T23627] ret_from_fork_asm+0x1a/0x30 [ 647.905210][T23627] [ 647.905210][T23627] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 647.912407][T23627] __mutex_lock+0x197/0x15a0 [ 647.917516][T23627] nbd_queue_rq+0xc1/0xff0 [ 647.922447][T23627] blk_mq_dispatch_rq_list+0x499/0x1990 [ 647.928520][T23627] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 647.935358][T23627] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 647.941845][T23627] blk_mq_run_work_fn+0x167/0x2f0 [ 647.947381][T23627] process_scheduled_works+0xc3d/0x1630 [ 647.953441][T23627] worker_thread+0xa47/0xfb0 [ 647.958549][T23627] kthread+0x38b/0x480 [ 647.963131][T23627] ret_from_fork+0x514/0xb70 [ 647.968232][T23627] ret_from_fork_asm+0x1a/0x30 [ 647.973513][T23627] [ 647.973513][T23627] -> #4 (set->srcu){.+.+}-{0:0}: [ 647.980624][T23627] __synchronize_srcu+0xca/0x2f0 [ 647.986081][T23627] elevator_switch+0x1e8/0x7b0 [ 647.991362][T23627] elevator_change+0x2fa/0x480 [ 647.996637][T23627] elevator_set_default+0x375/0x440 [ 648.002351][T23627] blk_register_queue+0x404/0x4f0 [ 648.007886][T23627] __add_disk+0x6b8/0xdb0 [ 648.012723][T23627] add_disk_fwnode+0x100/0x3a0 [ 648.017998][T23627] nbd_dev_add+0x733/0xb60 [ 648.022925][T23627] nbd_init+0x168/0x1f0 [ 648.027595][T23627] do_one_initcall+0x250/0x870 [ 648.032871][T23627] do_initcall_level+0x10a/0x1a0 [ 648.038322][T23627] do_initcalls+0x59/0xa0 [ 648.043161][T23627] kernel_init_freeable+0x29d/0x3e0 [ 648.048869][T23627] kernel_init+0x22/0x1d0 [ 648.053713][T23627] ret_from_fork+0x514/0xb70 [ 648.058812][T23627] ret_from_fork_asm+0x1a/0x30 [ 648.064097][T23627] [ 648.064097][T23627] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 648.071903][T23627] __mutex_lock+0x197/0x15a0 [ 648.077035][T23627] elevator_change+0x1af/0x480 [ 648.082319][T23627] elevator_set_none+0xb5/0x140 [ 648.087684][T23627] blk_mq_update_nr_hw_queues+0x60b/0x1b70 [ 648.094000][T23627] nbd_start_device+0x189/0xb30 [ 648.099362][T23627] nbd_genl_connect+0x167d/0x1cd0 [ 648.104895][T23627] genl_family_rcv_msg_doit+0x233/0x340 [ 648.110991][T23627] genl_rcv_msg+0x614/0x7a0 [ 648.116008][T23627] netlink_rcv_skb+0x226/0x4a0 [ 648.121291][T23627] genl_rcv+0x28/0x40 [ 648.125782][T23627] netlink_unicast+0x8ef/0xa80 [ 648.131060][T23627] netlink_sendmsg+0x7f0/0xb20 [ 648.136339][T23627] sock_sendmsg_nosec+0x14e/0x190 [ 648.141880][T23627] ____sys_sendmsg+0x54e/0x850 [ 648.147156][T23627] ___sys_sendmsg+0x2a5/0x360 [ 648.152342][T23627] __x64_sys_sendmsg+0x1b1/0x290 [ 648.157791][T23627] do_syscall_64+0x166/0x520 [ 648.162902][T23627] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 648.169311][T23627] [ 648.169311][T23627] -> #2 (&q->q_usage_counter(io)#51){++++}-{0:0}: [ 648.177918][T23627] blk_alloc_queue+0x544/0x690 [ 648.183210][T23627] __blk_mq_alloc_disk+0x194/0x390 [ 648.188838][T23627] nbd_dev_add+0x494/0xb60 [ 648.193766][T23627] nbd_init+0x168/0x1f0 [ 648.198439][T23627] do_one_initcall+0x250/0x870 [ 648.203712][T23627] do_initcall_level+0x10a/0x1a0 [ 648.209164][T23627] do_initcalls+0x59/0xa0 [ 648.214004][T23627] kernel_init_freeable+0x29d/0x3e0 [ 648.219725][T23627] kernel_init+0x22/0x1d0 [ 648.224610][T23627] ret_from_fork+0x514/0xb70 [ 648.229710][T23627] ret_from_fork_asm+0x1a/0x30 [ 648.234985][T23627] [ 648.234985][T23627] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 648.242184][T23627] fs_reclaim_acquire+0x71/0x100 [ 648.247641][T23627] kmem_cache_alloc_noprof+0x5f/0x600 [ 648.253531][T23627] __kernfs_iattrs+0xdd/0x380 [ 648.258717][T23627] kernfs_iop_setattr+0xe6/0x3f0 [ 648.264165][T23627] notify_change+0xbba/0xea0 [ 648.269264][T23627] do_truncate+0x1c2/0x250 [ 648.274201][T23627] path_openat+0x18a6/0x20f0 [ 648.279322][T23627] do_file_open+0x23e/0x4a0 [ 648.284359][T23627] do_sys_openat2+0x115/0x200 [ 648.289558][T23627] __x64_sys_openat+0x138/0x170 [ 648.294926][T23627] do_syscall_64+0x166/0x520 [ 648.300044][T23627] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 648.306452][T23627] [ 648.306452][T23627] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 648.314960][T23627] __lock_acquire+0x164c/0x2de0 [ 648.320331][T23627] lock_acquire+0x115/0x350 [ 648.325349][T23627] down_write+0x91/0x200 [ 648.330111][T23627] kernfs_link_sibling+0x539/0x6b0 [ 648.335734][T23627] kernfs_add_one+0x30a/0x510 [ 648.340919][T23627] kernfs_create_dir_ns+0x18c/0x220 [ 648.346638][T23627] sysfs_create_dir_ns+0x12f/0x2a0 [ 648.352310][T23627] kobject_add_internal+0x622/0xcd0 [ 648.358020][T23627] kobject_add+0x163/0x240 [ 648.362947][T23627] device_add+0x3fa/0xb80 [ 648.367785][T23627] hci_conn_add_sysfs+0xd5/0x210 [ 648.373240][T23627] hci_conn_complete_evt+0x8a8/0x1350 [ 648.379143][T23627] hci_event_packet+0x6cd/0xf10 [ 648.384515][T23627] hci_rx_work+0x2b4/0x1110 [ 648.389532][T23627] process_scheduled_works+0xc3d/0x1630 [ 648.395602][T23627] worker_thread+0xa47/0xfb0 [ 648.400711][T23627] kthread+0x38b/0x480 [ 648.405290][T23627] ret_from_fork+0x514/0xb70 [ 648.410394][T23627] ret_from_fork_asm+0x1a/0x30 [ 648.415669][T23627] [ 648.415669][T23627] other info that might help us debug this: [ 648.415669][T23627] [ 648.425880][T23627] Chain exists of: [ 648.425880][T23627] &root->kernfs_iattr_rwsem --> cpuhp_state_mutex --> &root->kernfs_rwsem [ 648.425880][T23627] [ 648.440294][T23627] Possible unsafe locking scenario: [ 648.440294][T23627] [ 648.447733][T23627] CPU0 CPU1 [ 648.453084][T23627] ---- ---- [ 648.458435][T23627] lock(&root->kernfs_rwsem); [ 648.463189][T23627] lock(cpuhp_state_mutex); [ 648.470286][T23627] lock(&root->kernfs_rwsem); [ 648.477561][T23627] lock(&root->kernfs_iattr_rwsem); [ 648.482837][T23627] [ 648.482837][T23627] *** DEADLOCK *** [ 648.482837][T23627] [ 648.490966][T23627] locks held by kworker/u9:1/23627: 4, last CPU#0: [ 648.497450][T23627] #0: ffff88807ecb2948 ((wq_completion)hci3#2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 648.508420][T23627] #1: ffffc9000e267c40 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 648.520424][T23627] #2: ffff88805220c0b8 (&hdev->lock){+.+.}-{4:4}, at: hci_conn_complete_evt+0xba/0x1350 [ 648.530261][T23627] #3: ffff88801d28d180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x41/0x510 [ 648.540087][T23627] [ 648.540087][T23627] stack backtrace: [ 648.545972][T23627] CPU: 0 UID: 0 PID: 23627 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT(full) [ 648.555527][T23627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 648.565579][T23627] Workqueue: hci3 hci_rx_work [ 648.570259][T23627] Call Trace: [ 648.573532][T23627] [ 648.576464][T23627] dump_stack_lvl+0xe8/0x150 [ 648.581062][T23627] print_circular_bug+0x2e2/0x300 [ 648.586090][T23627] check_noncircular+0x12f/0x150 [ 648.591030][T23627] __lock_acquire+0x164c/0x2de0 [ 648.595881][T23627] ? __lock_acquire+0x747/0x2de0 [ 648.600819][T23627] lock_acquire+0x115/0x350 [ 648.605317][T23627] ? kernfs_link_sibling+0x539/0x6b0 [ 648.610606][T23627] down_write+0x91/0x200 [ 648.614856][T23627] ? kernfs_link_sibling+0x539/0x6b0 [ 648.620140][T23627] ? __pfx_down_write+0x10/0x10 [ 648.624991][T23627] ? kernfs_root+0x1c/0x230 [ 648.629492][T23627] ? kernfs_root+0x1c/0x230 [ 648.633988][T23627] ? kernfs_root+0x1c/0x230 [ 648.638483][T23627] ? kernfs_root+0x1ea/0x230 [ 648.643070][T23627] kernfs_link_sibling+0x539/0x6b0 [ 648.648185][T23627] kernfs_add_one+0x30a/0x510 [ 648.652858][T23627] kernfs_create_dir_ns+0x18c/0x220 [ 648.658055][T23627] sysfs_create_dir_ns+0x12f/0x2a0 [ 648.663169][T23627] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 648.668802][T23627] ? do_raw_spin_unlock+0xf5/0x200 [ 648.673919][T23627] kobject_add_internal+0x622/0xcd0 [ 648.679127][T23627] kobject_add+0x163/0x240 [ 648.683543][T23627] ? __pfx_kobject_add+0x10/0x10 [ 648.688485][T23627] ? get_device_parent+0x366/0x3a0 [ 648.693600][T23627] device_add+0x3fa/0xb80 [ 648.697930][T23627] hci_conn_add_sysfs+0xd5/0x210 [ 648.702867][T23627] hci_conn_complete_evt+0x8a8/0x1350 [ 648.708235][T23627] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 648.714218][T23627] ? __pfx_hci_conn_complete_evt+0x10/0x10 [ 648.720113][T23627] ? skb_pull_data+0xf0/0x200 [ 648.724798][T23627] hci_event_packet+0x6cd/0xf10 [ 648.729736][T23627] ? __pfx_hci_conn_complete_evt+0x10/0x10 [ 648.735541][T23627] ? __pfx_hci_event_packet+0x10/0x10 [ 648.741084][T23627] ? kcov_remote_start+0x523/0x7e0 [ 648.746193][T23627] ? hci_send_to_monitor+0xdf/0x600 [ 648.751383][T23627] hci_rx_work+0x2b4/0x1110 [ 648.755888][T23627] ? process_scheduled_works+0x97a/0x1630 [ 648.761606][T23627] process_scheduled_works+0xc3d/0x1630 [ 648.767169][T23627] ? __pfx_process_scheduled_works+0x10/0x10 [ 648.773165][T23627] ? assign_work+0x3cf/0x5d0 [ 648.777772][T23627] worker_thread+0xa47/0xfb0 [ 648.782380][T23627] kthread+0x38b/0x480 [ 648.786454][T23627] ? __pfx_worker_thread+0x10/0x10 [ 648.791578][T23627] ? __pfx_kthread+0x10/0x10 [ 648.796184][T23627] ret_from_fork+0x514/0xb70 [ 648.800784][T23627] ? save_fpregs_to_fpstate+0x176/0x200 [ 648.806335][T23627] ? __pfx_ret_from_fork+0x10/0x10 [ 648.811440][T23627] ? __switch_to+0xc78/0x1410 [ 648.816118][T23627] ? __pfx_kthread+0x10/0x10 [ 648.820704][T23627] ret_from_fork_asm+0x1a/0x30 [ 648.825477][T23627] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 648.905677][T27777] ip_tables: iptables: counters copy to user failed while replacing table [ 649.101328][T27783] Bluetooth: MGMT ver 1.23 [ 649.185418][T27782] netlink: 288 bytes leftover after parsing attributes in process `syz.0.5670'. [ 649.677776][T27782] batman_adv: batadv0: Interface deactivated: syz_tun [ 649.728127][T27782] batman_adv: batadv0: Removing interface: syz_tun [ 649.882940][T25266] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 649.882975][T25266] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 649.963641][T25266] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 649.963678][T25266] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 650.043073][T25266] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 650.043109][T25266] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 650.127291][T25266] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 650.127327][T25266] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 650.226451][T25266] tipc: Resetting bearer [ 650.442703][T25266] tipc: Disabling bearer [ 650.481844][T25266] bond10 (unregistering): (slave bridge2): Releasing backup interface [ 650.481870][T25266] bridge2 (unregistering): left promiscuous mode [ 650.511854][T25266] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 650.512059][T25266] bond_slave_0: left promiscuous mode [ 650.513478][T25266] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 650.513752][T25266] bond_slave_1: left promiscuous mode [ 650.528798][T25266] bond0 (unregistering): (slave bond5): Releasing backup interface [ 650.532409][T25266] bond5 (unregistering): left promiscuous mode [ 650.533198][T25266] bond0 (unregistering): Released all slaves [ 650.587934][T25266] bond1 (unregistering): Released all slaves [ 650.593342][T25266] bond2 (unregistering): Released all slaves [ 650.612383][T25266] bond3 (unregistering): Released all slaves [ 650.624802][T25266] bond4 (unregistering): Released all slaves [ 650.646462][T25266] bond5 (unregistering): Released all slaves [ 650.652213][T25266] bond6 (unregistering): Released all slaves [ 650.673489][T25266] bond7 (unregistering): Released all slaves [ 650.693675][T25266] bond8 (unregistering): Released all slaves [ 650.706813][T25266] bond9 (unregistering): Released all slaves [ 650.712176][T25266] bond10 (unregistering): Released all slaves [ 650.829702][T25266] tipc: Left network mode [ 651.376475][ T5298] 8021q: adding VLAN 0 to HW filter on device eth1 [ 651.827181][T25266] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 651.827327][T25266] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 651.891500][T25266] veth1_macvtap: left promiscuous mode [ 651.891885][T25266] veth0_macvtap: left promiscuous mode [ 652.220734][T25266] team_slave_1 (unregistering): left allmulticast mode [ 652.221567][T25266] team0 (unregistering): Port device team_slave_1 removed [ 652.241445][T25266] team_slave_0 (unregistering): left allmulticast mode [ 652.242020][T25266] team0 (unregistering): Port device team_slave_0 removed [ 652.384031][ T5298] 8021q: adding VLAN 0 to HW filter on device eth2 [ 652.671130][T25266] IPVS: stop unused estimator thread 0... [ 652.887172][ T5298] 8021q: adding VLAN 0 to HW filter on device eth3 [ 653.269448][ T5298] 8021q: adding VLAN 0 to HW filter on device eth4