last executing test programs: 6m3.934634403s ago: executing program 1 (id=1632): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0xd8}, 0x1, 0x0, 0x0, 0x2004c011}, 0x90) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x4000) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x642, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f00000006c0)={&(0x7f00000005c0), 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x2c, 0x3, 0x8, 0x201, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x9100}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @icmp}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44}, 0x20000804) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYRES64=r1, @ANYRES32=r2], 0x38}, 0x1, 0x0, 0x0, 0x4081}, 0x400d4) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_int(r4, 0x29, 0x1a, &(0x7f0000000000)=0x7ff, 0x4) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8953, &(0x7f0000000340)={{0x2, 0x0, @rand_addr=0x640100ff}, {0x1, @broadcast}, 0x4a, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x35}}, 'syz_tun\x00'}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000540)=[@in6={0xa, 0x4e23, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}], 0x1c) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r6 = accept4$alg(r5, 0x0, 0x0, 0x0) sendmmsg$sock(r6, &(0x7f0000003380)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000002380)="fb", 0x1}], 0x1}}], 0x1, 0x20000000) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) read$alg(r6, &(0x7f00000012c0)=""/4109, 0x100d) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f0000000440), &(0x7f0000000300)=0x8) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYRESDEC=r2, @ANYRES32=0x0, @ANYBLOB="00000000010000003000128009000100766c616e00000000200002800c0002001e0000001f00000006000100fc0f00000600050088a8000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3], 0x60}}, 0x8000) bpf$ENABLE_STATS(0x20, &(0x7f0000000000), 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r2) sendmsg$nl_generic(r7, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001100)=ANY=[@ANYRESDEC=r4, @ANYRES16=r3], 0x14}}, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r8, 0x84, 0x81, &(0x7f0000000080)=""/4076, &(0x7f00000010c0)=0xfec) 6m2.960712369s ago: executing program 1 (id=1647): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYRES8], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000003c0)={0x8, 0x8, 0x20e, 0x1, 0xeb, 0x33c, 0x8, 0x8}, 0x20) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000640)={0x0, @in6={{0xa, 0x4e20, 0x6, @loopback, 0x84b}}, 0x80000081, 0x0, 0x3fc, 0x40005, 0xd0, 0x0, 0x2d}, 0x9c) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback, 0xfffffffd}}, 0x0, 0x0, 0x300, 0x0, 0x54, 0x6}, 0x9c) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="12000000020000000400000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r5}, &(0x7f0000000040), &(0x7f0000000140)=r3}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r5}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r3}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="8dffffff0600"}) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB='\t\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00042bbd7000fcdbdf2564000000080001000100000008000300", @ANYRES32=r2, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x404a084}, 0x1) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000080)={r5, &(0x7f0000000040)}, 0x20) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x1) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000400)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r7, 0x84, 0x18, &(0x7f0000000040)={r8, 0x9e2}, 0x8) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r9, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) r10 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r10, &(0x7f0000000000)={0x1f, @none}, 0x8) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @fils_params, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0xe800}]}, 0x30}}, 0x0) 6m1.670676789s ago: executing program 1 (id=1660): r0 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='@\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000ffff000000000000000000000000000000000006000000000000"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000280), &(0x7f00000000c0)='%+9llu \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r2}, 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r2}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x10, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000ff0500000000000000000000b7080000000000007b8af8ff00000000b7080000ff0100007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7059c000800000085000000a500000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x10, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000ff0500000000000000000000b7080000000000007b8af8ff00000000b7080000ff0100007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7059c000800000085000000a500000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) write(0xca, &(0x7f00000000c0)="050e", 0x2) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(r3, 0x40109441, &(0x7f0000000440)={0x2, 0x1}) (async) ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(r3, 0x40109441, &(0x7f0000000440)={0x2, 0x1}) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8}, @NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_RANGE_TO_DATA={0x4}, @NFTA_RANGE_FROM_DATA={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x6}}}, 0x84}}, 0x0) 6m1.598776489s ago: executing program 1 (id=1667): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r1, @ANYBLOB="0108000007500500580012800b0001006272696467650000480002800500190002000000050017"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) r3 = accept$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000080)=0x14) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000100)=@req3={0xec0, 0x6, 0xbd9, 0x3, 0x7fffffff, 0xfffffff8, 0x9}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x0, 0x0, 0x0, 0xccd21cca, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='h'], 0x68}, 0x9}, 0x0) 6m1.482841403s ago: executing program 1 (id=1670): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) r2 = socket$kcm(0x10, 0x2, 0x0) (async) syz_emit_ethernet(0x46, &(0x7f0000000340)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "108f84", 0x10, 0x3a, 0x0, @private2, @local, {[], @ni={0x8c, 0x0, 0x0, 0x4, 0x7e20, 0x200000080}}}}}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) (async) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) (async) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="5c00000011006bec9e3be15c6e17aa3107b6ed2e0d000000ba090000160af3653c001ac004000202080002000300010006000000eab556a705251e615739a5e851f60a84c9f4c493803794fc9a26f4e786a6d0000300000000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x2000c810) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000100)='\\\x00\x00\x00', 0x4}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x8}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r5, &(0x7f0000000100), 0x0}, 0x20) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan1\x00'}) (async) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r7, &(0x7f00000001c0), 0xe) (async) listen(r7, 0x0) (async) sendmsg$NL80211_CMD_SET_BEACON(r6, &(0x7f0000000b40)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="6c060200", @ANYRES16=r1, @ANYBLOB="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"], 0x66c}, 0x1, 0x0, 0x0, 0x20040011}, 0x4) (async) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2c, r1, 0x5, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0x9, 0x34, @random="33446ce5f8"}, @NL80211_ATTR_MAC_HINT={0xa, 0xc8, @random="a8093784819e"}]}, 0x2c}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f0000001000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELRULE={0x14, 0x8, 0xa, 0x200, 0x0, 0x0, {0x3, 0x0, 0x3}}, @NFT_MSG_DELRULE={0x14, 0x8, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x9}}, @NFT_MSG_DELSET={0x14, 0xb, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x4}}, @NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8}}, @NFT_MSG_NEWFLOWTABLE={0x6c, 0x16, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x40, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pim6reg\x00'}, {0x14, 0x1, 'netpci0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6b}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xe4}, 0x1, 0x0, 0x0, 0x48003}, 0x8000) 6m1.179066842s ago: executing program 1 (id=1676): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@map, 0xffffffffffffffff, 0x4}, 0x10) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4040000) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'pimreg0\x00', 0x0}) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r3, 0x25, 0x0, @void}, 0x10) (async) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, 0x27, 0x1, 0x70bd29, 0x25dfdbff, {0x6, 0x1}}, 0x14}}, 0xc000) 5m45.983396844s ago: executing program 32 (id=1676): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@map, 0xffffffffffffffff, 0x4}, 0x10) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4040000) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'pimreg0\x00', 0x0}) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r3, 0x25, 0x0, @void}, 0x10) (async) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, 0x27, 0x1, 0x70bd29, 0x25dfdbff, {0x6, 0x1}}, 0x14}}, 0xc000) 2m43.383995407s ago: executing program 5 (id=3032): r0 = socket$inet(0x2, 0x4000000805, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r5, 0x29, 0x20, &(0x7f00000000c0), 0x0) sendmsg$TIPC_NL_LINK_GET(r4, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x20000800) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)={0x4c, 0x1, 0x4, 0x1, 0x0, 0x0, {0xe2e4e67761683fba}, [@NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x8}, @NFULA_CFG_MODE={0xa, 0x2, {0x1, 0x2}}, @NFULA_CFG_MODE={0xa, 0x2, {0x1ff}}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x5}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0xb}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x4c}}, 0x10000010) sendmmsg(r0, &(0x7f0000000e40)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000000300)=[{&(0x7f00000000c0)="ae", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x10, 0x84, 0x5}], 0x10}}], 0x2, 0x0) 2m43.172618553s ago: executing program 5 (id=3034): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000003040)=[{}], 0x1, 0x3) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') unshare(0x20400) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x70, 0xff00, 0x90, [0x0, 0x0, 0x0, 0x0, 0x200000001300, 0x200000001330], 0x0, 0x0, &(0x7f0000001300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000080000000000000000000000000000000020000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000"]}, 0x108) 2m42.82178604s ago: executing program 5 (id=3036): r0 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x25, 0x1a, @val=@iter={&(0x7f0000000040), 0x10}}, 0x20) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) sendto$inet6(r1, &(0x7f0000000240)='\x00', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) r2 = socket$inet(0x2, 0x0, 0x6) bind$inet(r2, &(0x7f00000003c0)={0x2, 0x4e24, @private=0xa010102}, 0x10) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000000)=0x81, 0x4) recvmmsg(r1, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}, 0x1ff}], 0x1, 0x40000001, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000280)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000100)={'lo\x00', &(0x7f0000000000)=@ethtool_cmd={0x4a, 0x6f8, 0x898c, 0x80, 0x6, 0x4, 0x9c, 0xb, 0x3, 0x1, 0xed, 0xfffffff9, 0x66a, 0x4, 0x8, 0x8, [0x7f, 0x6]}}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x5, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500000000000069108e0000000000bc001000000000009500000000000000ef4f7c81f5427c16bd2aacf32cdbb47063fd9a7bb1f3ad622c3261f324e081c0ea39bd16d9869302cc08fbd94867708cb208e22cc0ad536525e3b39869285c126353f6a49bc5abc6b9a4eab313655286ee33a56f03b665dd5f1739bda6accc3b9b0d26450d3161263aed01194269a5fba4553bb18fa1f37e2f68a8ef81f090829d0ee04b52611a41642b31a6fe2653171379cc327fc11e38418b589777f8c8ddcbf88df947a05937ea"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xcb, &(0x7f00000002c0)=""/203, 0x41100, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 2m41.773708556s ago: executing program 5 (id=3045): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x0, 0x8e}, 0x28) (async, rerun: 64) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (rerun: 64) sendmsg$netlink(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="180100002000010000000000fcdbdf250501f2800f0018007d3a2e9c5bc85c23277d0000140001"], 0x118}], 0x1, 0x0, 0x0, 0x20008001}, 0x0) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r0, 0x1, 0x3}, 0x48) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB="bfa200000000000007020000fcfeffff620200000000000018110000", @ANYRES32=r2, @ANYBLOB="000000000000000085000000010000001500070000000000bf06000000000000bf610000000000000701000004000000850000007b000000bf610000000000000701000004000000850000005d000000b70000000000000095"], &(0x7f0000000500)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m41.236768646s ago: executing program 5 (id=3049): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$igmp6(0xa, 0x3, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000100)=0x0) sendmsg$nl_generic(r2, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0xe0, 0x22, 0x2, 0x70bd29, 0x25dfdbfb, {0x19}, [@typed={0xc, 0xae, 0x0, 0x0, @str='ethtool\x00'}, @nested={0xc0, 0x58, 0x0, 0x1, [@nested={0x4, 0x149}, @typed={0x8, 0x10d, 0x0, 0x0, @pid=r3}, @generic="52033e199444fbdec62eeb5d118d99b69845b199935a78a6a76856ef954e95109508ce633d60435e543fc76ccfc4ad360313f4f5df2f5c53af667d767fb5be857be1d5650d056ecb5ba66ed78244749713cabb1f4d4c6134e38e6f707a90c0d6c2c95731fdbb124315039843254159193de99891a366dbd56ae55cc4849598c8da96c44e433e36ad05e5680fcfb615fa9f3e1a8a958c6bca7fdcc82d7ffd112a77d776fcc908a46947ce00e54d6371cd"]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x40080}, 0x4000000) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) shutdown(0xffffffffffffffff, 0x1) r4 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f0000000080)=0x1, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="740000001000210400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa8886004000024001280090001007866726d000000001400028008000100010000000800020011000000050021000000000008000a00", @ANYRES32, @ANYBLOB='\n\x00:'], 0x74}}, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="ad43000000f45400000001"], 0x14}}, 0x0) 2m40.197788671s ago: executing program 5 (id=3055): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1a, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000300000000000000fe02001085000000b700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x77, '\x00', 0x0, @tracing=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r0) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'virt_wifi0\x00', @random="000500000020"}) (async) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'virt_wifi0\x00', @random="000500000020"}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbff, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x8090}, 0x4) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000001840)=ANY=[@ANYRES32=r3], 0xb) (async) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000001840)=ANY=[@ANYRES32=r3], 0xb) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000100)={r3, 0x10001}, &(0x7f0000000140)=0x8) 2m25.136932372s ago: executing program 33 (id=3055): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1a, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000300000000000000fe02001085000000b700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x77, '\x00', 0x0, @tracing=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r0) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'virt_wifi0\x00', @random="000500000020"}) (async) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'virt_wifi0\x00', @random="000500000020"}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbff, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x8090}, 0x4) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000001840)=ANY=[@ANYRES32=r3], 0xb) (async) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000001840)=ANY=[@ANYRES32=r3], 0xb) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000100)={r3, 0x10001}, &(0x7f0000000140)=0x8) 44.501624581s ago: executing program 2 (id=4325): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x1}, 0x20) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[], 0x0, 0x37, 0x0, 0x1}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000900), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r2, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000180)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="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"/263], 0x50}, 0x1, 0x0, 0x0, 0x20040001}, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="0900000004000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="0200000001000000000900"/28], 0x48) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000280)=[{&(0x7f0000000080)="580000001400add4050000000000000001117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ffff0100f5c71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r5, 0x8983, &(0x7f0000000040)={0x1, 'bridge_slave_0\x00', {}, 0x7ff}) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0xc, 0x4, 0x4, 0x7, 0x0, r4, 0x0, '\x00', 0x0, r0, 0x0, 0x1}, 0x48) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f00000000c0)) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)={0x5c, 0x42, 0x1, 0x0, 0x0, {0x3, 0x1}, [@generic="0f000000", @typed={0x3c, 0x1, 0x0, 0x0, @binary="00112233445566778899aabb86dd2c00001c00002b0001110000010101010253aa58fe6cbdf0357065ae44132403b1fd606412c3258e2b67"}, @nested={0x4, 0x8002}, @nested={0x4, 0x8003}]}, 0x5c}}, 0x0) 44.326103575s ago: executing program 2 (id=4329): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) syz_emit_ethernet(0x32, &(0x7f0000000000)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}, @void, {@ipv4={0x800, @generic={{0x9, 0x4, 0x0, 0x0, 0x24, 0x64, 0x0, 0x0, 0xc84cf8fe4733a687, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0xc}, {[@ssrr={0x89, 0x7, 0xef, [@multicast1=0xe000006a]}, @cipso={0x86, 0x6}]}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x1f, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = epoll_create(0x4) pipe(&(0x7f0000000040)={0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000500)={0x90000000}) getpeername$packet(0xffffffffffffffff, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000500)=0x14) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000540)=0xffffffffffffffff, 0x4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x800001, 0x10012, r5, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x3}, 0x50) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) writev(r7, &(0x7f0000000400)=[{&(0x7f00000002c0)="a609a89c9edd34187123b5adceb3968557f4e107445a53c0815c9636d00f896d1e8cd8de77a79f1e3e2c53ddf1bb9f8ac5cb5257ff4e8b960026bc4244c4b09179a97dffdf02563e23546d3e78f944e7e2fee2a00b6313048fe354223318badb21d8c086669c5f7772f4a6d90d0997babdf79f7d557e055b3e6f2e4f41ec06a39a57b9ccc00bbca22395e41f9e9652af665f0e1603fb85d4799d54d44c706ff8df9bb805b182a1260b5936ae44f649b5e2fdca240984dcd0033ec28aeaaa686608c5", 0xc2}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r7, 0x0) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000800)=@raw=[@alu={0x7, 0x0, 0x9, 0xa, 0x6, 0xffffffffffffffe0, 0xffffffffffffffff}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8000}, @call={0x85, 0x0, 0x0, 0x90}, @generic={0x40, 0x2, 0x2, 0x9, 0x7}, @generic={0x54, 0x7, 0x7, 0x4, 0x1ff}], &(0x7f0000000180)='syzkaller\x00', 0xe, 0x84, &(0x7f0000000400)=""/132, 0x41000, 0x1, '\x00', r3, 0x0, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000580)={0x2, 0xc, 0xdfffffff}, 0x10, 0x1379, r0, 0x0, &(0x7f00000006c0)=[r0, r5, r6, r7], 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r8, 0xf, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xe2}, 0x50) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8481f0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x1, 0xffffffffffffffff, 0xfff}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r11, 0xffffffffffffffff}, &(0x7f0000000600), &(0x7f00000001c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000008000000000000000600000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000ff738af8ff00000000bfa200000000000007020000f8ffffff"], 0x0, 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x17, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000500080000000000000000692204000000000095"], 0x0, 0x5}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000700850000002d"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r13, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x28, 0xb, 0x6, 0x1, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}}, 0x0) r14 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), r2) sendmsg$L2TP_CMD_TUNNEL_GET(r10, &(0x7f00000007c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000200)={0x1c, r14, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@L2TP_ATTR_PW_TYPE={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc801) 43.324189227s ago: executing program 2 (id=4332): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa2f01, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) r1 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r1, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="120000000000000029000000", @ANYRESOCT=r0], 0x108}}], 0x1, 0xc040) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f00000003c0)=@ccm_128={{0x303}, "ffffffffffffffff", "e071e70aed0a5ef79f52ae34f3a61cf7", "88318644", "a915950f158d5a6b"}, 0x28) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r3, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, '\x00', "de0000006deed7f21d74bc440900", "9884f958", "060000000000f8c7"}, 0x28) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r4, &(0x7f0000000840)={0x1f, 0x0, @fixed, 0x0, 0x3}, 0xe) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvfrom(r2, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) writev(r2, &(0x7f00000005c0)=[{&(0x7f0000000140)='X', 0x1}], 0x1) setsockopt$sock_int(r3, 0x1, 0x45, &(0x7f00000000c0)=0xffff1885, 0x4) socket$pppl2tp(0x18, 0x1, 0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'vlan0\x00', 0x6bf1c2d5adba8c32}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0x7, 0x0, 0x0) r6 = socket$kcm(0x2, 0x3, 0x2) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000308010200000000000480080003400000000008000440000000000800064000000000080005400000000008000740000000000800014000000000080002400000002006000240000000e1040003000600"/96], 0x60}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000002000000000000000000000b020000000000000000000001053f0000000000000000000001000005000000000000000001"], 0x0, 0x4e, 0x0, 0x0, 0x0, 0x10000, @value=r3}, 0x28) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) socket$nl_netfilter(0x10, 0x3, 0xc) 42.922484333s ago: executing program 2 (id=4343): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x49, 0x1}, 0x50) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70300000100000085000000c0000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000ac0)=@bpf_ext={0x1c, 0xf, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xffffffff}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000340)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x52b2, r2, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r3 = socket(0xa, 0x4, 0x3a) setsockopt$inet6_int(r3, 0x29, 0xd1, &(0x7f0000000040)=0x20f, 0x4) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000580), &(0x7f0000000180)=0x1) setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000140)={0x0, 0x1}, 0xc) 42.657091183s ago: executing program 2 (id=4347): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000004900010028bd7000fddbdf250a0000003c68cc2628e8bab0b02835c839", @ANYRES32=r0, @ANYRESDEC=r0], 0x1c}, 0x1, 0x0, 0x0, 0x24044801}, 0x200488a0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x68}, 0x1, 0x0, 0x0, 0x2404c0d1}, 0xc000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, "0000000000000208", "5171bb74cd3660dab9e200", "d8a024e5", "20000926000200"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x1c) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000000)={0xc7f0}, 0x10) write(r3, &(0x7f0000000600)="240000001a005f0214f9f4070009040081000000fd000002000000000800040001e628d9", 0x24) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[@ANYBLOB="2400000047000701feffffffffffffff04000000080001"], 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0x24008802) connect$pppl2tp(r3, &(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x1, 0x4, 0x1, 0x3}}, 0x26) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000001840), 0x4) close(0x3) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="650a00000000000061112800000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) 42.549383959s ago: executing program 2 (id=4350): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000140)=@ethtool_pauseparam={0x13, 0x0, 0xfffffffd, 0x6}}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, 0x27, 0x1, 0x70bd29, 0x0, {0x6, 0x1}}, 0x14}}, 0xc000) 27.486856417s ago: executing program 34 (id=4350): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000140)=@ethtool_pauseparam={0x13, 0x0, 0xfffffffd, 0x6}}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, 0x27, 0x1, 0x70bd29, 0x0, {0x6, 0x1}}, 0x14}}, 0xc000) 3.865862797s ago: executing program 3 (id=4789): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x2b}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x840}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f00000000c0)={r2, r2, 0x7, 0x2, &(0x7f0000000040)='9f', 0xe, 0x4, 0x8, 0x9, 0x3, 0x3, 0x2, 'syz1\x00'}) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x94) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000001c0)={0x44, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x31, 0x0, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}, @generic="50bb2d6f67d29d6fabadb107d0"]}]}, 0x44}], 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x22) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r3, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 3.827883343s ago: executing program 7 (id=4790): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) sendmsg$inet6(r0, &(0x7f0000000100)={&(0x7f00000022c0)={0xa, 0x2, 0x0, @dev={0xfe, 0x80, '\x00', 0x17}, 0x9}, 0x1c, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="280000000000000029000000040000003c0102000000040200020401"], 0x28}, 0xc0) 3.351501657s ago: executing program 7 (id=4794): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0xfffffffc, @empty, 0x7}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) listen(r0, 0xc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x7}]}]}, 0x30}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r5, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x800) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000200), 0xffffffc1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r6, 0x0) 3.345931644s ago: executing program 3 (id=4795): r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000340)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x4, 0x21, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, 0x80, 0x8000, 0x80000001}}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) listen(r1, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f00000006c0)={@val={0xa, 0x883e}, @void, @eth={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @void, {@ipv6={0x86dd, @generic={0x7, 0x6, "9ba796", 0x0, 0x88, 0x0, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}}}, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth0\x00', 0x0}) r6 = socket(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c0000001800dd8d00000000000000000200000000000005000000000600150001000000280016802400010000000000000000000004010020000020000000000000000000000000000001"], 0x4c}}, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r4, 0x6611) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=@deltfilter={0x23cc, 0x2d, 0x8, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x10, 0x8}, {0xc, 0x6}, {0x8, 0x7}}, [@TCA_RATE={0x6, 0x5, {0xff}}, @filter_kind_options=@f_fw={{0x7}, {0x860, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'veth1_to_bridge\x00'}, @TCA_FW_POLICE={0x848, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x8}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xf32, 0x7, 0x8, 0xff, 0xfffffff8, 0x5, 0x2, 0x9, 0x4, 0x2, 0x9, 0x7, 0xa, 0x3, 0x0, 0x2, 0x1, 0x0, 0x9, 0x6, 0x0, 0x3, 0x5, 0x1, 0x8, 0x1, 0x1, 0xfffffff9, 0x2d84, 0x1, 0x2, 0xe, 0x401, 0x4, 0x7, 0x8, 0xfffffffc, 0x4, 0x7c, 0x2, 0x1, 0x0, 0xfffffff3, 0x4000, 0x5, 0x1, 0x5, 0x1, 0x9f, 0x6, 0x5, 0x4, 0x7, 0x0, 0x9, 0x10000, 0x0, 0x100, 0x400, 0x1, 0x4, 0x9, 0x4, 0x1, 0x94db, 0x0, 0x90d, 0x36b, 0x6, 0x7, 0xfffffffb, 0x300, 0x75df, 0x2, 0x7fff, 0xc, 0x6, 0x4, 0xcb, 0x800, 0x0, 0x5, 0xb0, 0x8000, 0x7, 0x4, 0x6, 0x9, 0x2e9, 0x80, 0x7, 0xb02b, 0x10, 0x8a80, 0x1, 0x2, 0x401, 0x6, 0x5, 0x3, 0xff, 0x5, 0x0, 0xabd, 0x987, 0x4, 0x81, 0x7, 0x8, 0x6, 0x1, 0x6, 0xffff, 0x2, 0x800, 0x5, 0x8, 0x6, 0x0, 0x5, 0x9, 0x81, 0x2, 0x2, 0x9, 0x401, 0x7, 0x6, 0x9, 0x3, 0xff, 0xfffffff8, 0x0, 0x2, 0x1, 0x8, 0x12000000, 0x6, 0xffffffff, 0x3, 0x9, 0x7, 0x4, 0x4, 0x2, 0x10001, 0x7fffffff, 0xffff, 0xae23, 0x4b38, 0x7, 0x81, 0xfffffffa, 0x5, 0xd9a, 0x0, 0x2, 0x1, 0xfb, 0xd9be, 0x3b58, 0xcf, 0x5, 0x7fffffff, 0x2, 0x616, 0x8, 0x6e32d40d, 0xfffffff9, 0x1ff, 0x3, 0x3, 0x5, 0x12000000, 0x8001, 0x0, 0x6, 0x6, 0x800, 0x7, 0x1, 0x6, 0xff, 0x3, 0x1, 0x9, 0x4, 0x4, 0x4, 0x2, 0x4, 0x3, 0x3, 0x6, 0x3, 0x800, 0xfffffe01, 0x1, 0x8, 0x10f, 0xffffffff, 0x3, 0x3, 0xa, 0x8, 0x5, 0x88, 0x9, 0x8ad2, 0x1, 0x7f, 0xb, 0x4, 0x8, 0x3, 0x1, 0x0, 0x40, 0x8, 0x6, 0x7fffffff, 0x200, 0x5, 0x4, 0x0, 0x1, 0x7, 0x8, 0x3, 0x1, 0x400, 0x7, 0x28, 0x401, 0xffffffff, 0x9, 0x3, 0x80, 0x3, 0x2, 0x8, 0x3, 0x7, 0x0, 0xd, 0x9, 0x3, 0xf35, 0x6, 0xe79, 0x7, 0x7, 0x0, 0x3, 0x2, 0xa1]}, @TCA_POLICE_RATE={0x404, 0x2, [0xffffffff, 0x10, 0x0, 0x3, 0xfffffffc, 0x0, 0xa1, 0x9, 0x101, 0x80, 0x9, 0x4, 0x1, 0x80000000, 0x3, 0x8, 0x80000001, 0x6b11, 0x600, 0x9, 0x6, 0x4, 0x9, 0x7, 0x38a, 0x3, 0x4, 0x9, 0x0, 0x6059, 0x2, 0x1, 0xfffffff9, 0x3ff, 0xffff, 0x6, 0x83f, 0x3, 0x7, 0xb0, 0x8, 0x79, 0x4, 0x4, 0xc, 0x8a6, 0x9, 0x8, 0x7, 0x9, 0x6fcc, 0x2, 0x2, 0x9, 0xff000000, 0x6, 0x3, 0x2, 0x8, 0x0, 0x8, 0xc, 0x0, 0x9, 0x4, 0x8, 0x2, 0x7, 0x10001, 0x7, 0x0, 0x5, 0x3, 0x7, 0x4, 0xb80e, 0x2, 0x0, 0x7fffffff, 0xfffffff0, 0x0, 0x6, 0x4, 0xf, 0x2, 0x6, 0x6, 0x7, 0x9, 0x8, 0x8, 0x200, 0x8000, 0xa0000, 0xef5, 0x1ff, 0x10001, 0x7, 0x101, 0xb2, 0xa8, 0x5, 0x3, 0x71e329e9, 0x3, 0x5, 0x0, 0x5, 0x6, 0xff, 0x4, 0x9, 0x0, 0x50, 0x200, 0xa, 0x1, 0x40, 0x3, 0x12, 0x6, 0x8, 0x8, 0x100, 0x1, 0x7, 0xfffffc19, 0x7, 0xa, 0x6, 0x4, 0x2, 0x7, 0xfffffff7, 0x19, 0x200, 0x4, 0x3, 0x4d, 0xc05, 0x5, 0xab7e, 0x8d77, 0x5, 0x1, 0xe4f, 0x5, 0x9, 0x80000000, 0xf5437ab, 0x800, 0x8, 0x4, 0x100, 0x0, 0x8, 0x3, 0xe, 0x0, 0x0, 0x2, 0x101, 0x8, 0xffffffff, 0x400, 0xfffffffa, 0xfffffffe, 0x100, 0x7, 0x4, 0x1, 0x6, 0x80000001, 0x8001, 0x9, 0x3, 0x10, 0xfffff412, 0x81f, 0x9, 0xb, 0x9, 0x100, 0x5c1, 0x7fffffff, 0xb, 0x1, 0x80000000, 0x3, 0x7, 0x5, 0x3, 0x8f9, 0x2, 0xd, 0x7, 0x4256, 0xffffffff, 0x2, 0x2, 0x0, 0x80000000, 0x3, 0x7, 0x5, 0xff, 0x4, 0x8, 0x8, 0x3, 0x6, 0x6852, 0xffff, 0x4, 0xfffff976, 0x8, 0xd789, 0x4, 0x1, 0x2, 0x80000000, 0x8, 0xffffffff, 0x6, 0x8, 0x6, 0xcb, 0x7cc0, 0x7fffffff, 0x80000001, 0x5, 0x3, 0x7, 0x6, 0x3ff, 0x6, 0x7, 0x2, 0x8, 0xc4f, 0x2, 0x9, 0xff, 0x3, 0x5, 0x8, 0x10, 0x8, 0x4ff7, 0x5ad, 0x8, 0x8, 0x7fffffff, 0x1000000, 0x8, 0x9]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x72}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xfffffffffffffffc}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x9}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3ff}]}]}}, @filter_kind_options=@f_u32={{0x8}, {0x20, 0x2, [@TCA_U32_FLAGS={0x8, 0xb, 0x5}, @TCA_U32_INDEV={0x14, 0x8, 'sit0\x00'}]}}, @filter_kind_options=@f_matchall={{0xd}, {0x1b00, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x1, 0xf}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x5}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x3}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x4, 0xe}}, @TCA_MATCHALL_ACT={0x1abc, 0x2, [@m_ct={0xec, 0x16, 0x0, 0x0, {{0x7}, {0x34, 0x2, 0x0, 0x1, [@TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e21}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e22}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @empty}, @TCA_CT_ACTION={0x6, 0x3, 0x20}, @TCA_CT_MARK_MASK={0x8, 0x6, 0xfffffff9}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e20}]}, {0x91, 0x6, "3bed19565e1198d79b5a143d12776c801cfaaeffe70191e2114de000c055f0cdbb777144452f47d556adc1d90634eddf40f6e858315012a22a0e8816734e9b622b4fb750aac7e9d70f2d0ede918f59a73eaadad2a936296c67640eb80bc4ab632914315dc30b02e20e811c3e3d8644e4201e2c9f66bffe25bfa98fe4baba919f8a8ce492666fcf98b182e3e1f4"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_police={0x1924, 0x1c, 0x0, 0x0, {{0xb}, {0x18e8, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xffffffffffff0000}, @TCA_POLICE_RATE={0x404, 0x2, [0xd, 0x3, 0x8, 0x800, 0x5, 0x8, 0x4, 0x2, 0x2, 0xd, 0x200, 0x8, 0x3, 0x7fff, 0x8, 0x7, 0x1, 0x4, 0x80, 0x10, 0x1, 0x5, 0xa, 0x7fff, 0xffffff5c, 0x6, 0x8, 0x7, 0x7000000, 0x8, 0x400, 0x1, 0xad9, 0x5, 0x2e, 0x1, 0xc, 0x4, 0xfff, 0x0, 0x2, 0x6, 0xf15e, 0x0, 0x38, 0x20, 0x2, 0x80000000, 0x1, 0xc652, 0x5, 0x0, 0xca80, 0x800, 0xffffffff, 0x6, 0x6, 0xa6ce, 0x4, 0x6, 0x5, 0x100, 0x6, 0x8, 0x21, 0x5, 0x1, 0x5b30, 0x4, 0x200, 0x8, 0x401, 0x80, 0x1, 0x2, 0x100, 0xfffffffe, 0x10000, 0x4, 0x2, 0x0, 0x2, 0x6, 0x0, 0x4, 0x3, 0x6, 0x3, 0x7, 0x4, 0x5, 0x0, 0x3, 0xffffffff, 0x7fff, 0x0, 0x6, 0x6, 0x9a36, 0x8, 0x2, 0x1ff, 0xe33d, 0x2, 0x9, 0x10001, 0x81, 0xd, 0x2, 0x3, 0xf7, 0x9, 0x0, 0x63e, 0x4, 0x0, 0x1, 0x0, 0x8, 0xd, 0x8, 0x0, 0xfffffff9, 0x6, 0xd, 0xe, 0x1, 0x200, 0xfffffff1, 0x1c00000, 0x10001, 0xfffffffe, 0x6, 0x2, 0x8, 0x1, 0x10001, 0x5, 0x9, 0xfff, 0x6, 0x3, 0x0, 0x8, 0x7, 0x3ff, 0x9, 0x8, 0x6, 0x0, 0xb, 0x80, 0x3, 0x9, 0xffffffe0, 0x97, 0x5, 0x9, 0x1, 0x8, 0x4, 0x10001, 0x7, 0x7, 0x200, 0x3ff, 0x2, 0x61a, 0xb921, 0x7, 0x8001, 0x2, 0x6, 0x3, 0x1, 0x1000, 0x491, 0x0, 0x4, 0x1, 0x4313, 0x0, 0xfffffffe, 0x6a5d0cde, 0x100, 0x8000, 0x8, 0x3, 0xb, 0x5, 0x60000, 0x5, 0x6, 0x9, 0x8001, 0x3, 0x0, 0xffff, 0x4, 0x30, 0x2, 0x7, 0x0, 0x4, 0xf, 0x1, 0x4, 0x7, 0x0, 0x6, 0x2, 0x8, 0x21, 0x3, 0x7fff, 0x0, 0xf28, 0x400, 0x9, 0x3, 0xd02, 0x4a, 0x9, 0x5, 0x3, 0x11fc, 0x10001, 0xc0000000, 0xffffffff, 0x8, 0x8, 0x0, 0xa, 0x0, 0x1, 0x7f, 0x8, 0xfffffffd, 0xe, 0x8, 0x4000000, 0x20000, 0x10000, 0xfffffe01, 0x5, 0x90000, 0x5, 0x8, 0x8, 0x10000, 0x9, 0x180, 0x3, 0x5b64, 0x4, 0xa]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}, @TCA_POLICE_RESULT={0x8, 0x5, 0x100}], [@TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x80000001, 0x2, 0x9, 0x4902, 0x101, 0xf852, 0xc6, 0x7, 0x5, 0x2400, 0x80, 0x2, 0x6, 0x7, 0x1, 0x10001, 0x49, 0xf, 0x81, 0x400, 0x9, 0x10, 0x9, 0x47, 0x7, 0x3, 0x3, 0x0, 0x800, 0x3ff, 0x1, 0x5b, 0x5, 0x922a, 0xe, 0x1, 0x8, 0xd, 0x4a3f, 0x6, 0xe35, 0xe697, 0x6, 0x6, 0x9, 0x8, 0x6a, 0x7f, 0xe, 0x2, 0x9, 0x10001, 0x8, 0x800000, 0x8000, 0xfffffffa, 0xe23, 0x5, 0x8, 0x3aa, 0x1c0000, 0x5, 0x6, 0x2, 0x4, 0x0, 0x6, 0xed57, 0x4, 0x1, 0x4, 0x8c, 0x0, 0x9, 0x7, 0x1, 0x4, 0x4, 0x3, 0x8, 0xec9, 0x8, 0x7, 0xffffff08, 0x2, 0xfffffff1, 0x4, 0xfffffff2, 0x2, 0x0, 0x8, 0x1, 0x3, 0x4b, 0x3, 0x7, 0x1, 0xfffffffe, 0xffff0000, 0x1, 0x0, 0x8001, 0xe4, 0xfffffff4, 0xd, 0x6, 0xff, 0x3a8bcc41, 0x5, 0x9, 0xfffffffb, 0x81, 0x5, 0x9, 0x5, 0x0, 0x3ff, 0x0, 0xff, 0xc5, 0x8, 0x3, 0x757, 0xfffffffe, 0x7fffffff, 0x2, 0x7, 0x2, 0x0, 0x6, 0xfffffffd, 0x7, 0x1, 0x9, 0x8, 0x5, 0x4, 0xbc9, 0x0, 0x8, 0x1, 0x7ff, 0x7, 0x40, 0xffffffff, 0x8001, 0x7fffffff, 0x0, 0x5, 0x2, 0x5, 0x8, 0x7, 0xfffffff7, 0x800, 0x9, 0x6, 0xf18d, 0xb, 0x9, 0x1, 0x0, 0x8, 0x81, 0x3, 0x1, 0x0, 0x8, 0xc, 0x200, 0x2, 0x6, 0x5, 0x7, 0x4, 0x2, 0x1a4f, 0x2, 0xfff, 0xffff, 0x4, 0xfffffe01, 0x6, 0x7, 0x5d3d, 0x48c3, 0x4b9, 0x0, 0x8001, 0x0, 0x3, 0x9, 0x6, 0xd22, 0x8001, 0x9, 0x7fffffff, 0x5, 0xff, 0x3, 0x9, 0x0, 0x2, 0x3, 0xf64, 0x200, 0x338e, 0xb45, 0x5, 0x1, 0x5, 0x7fff, 0x8, 0x1, 0x9, 0x1, 0x1, 0x2, 0x3, 0x0, 0x1, 0x6b, 0x88d, 0x1, 0x4, 0x400, 0x5, 0xac9c, 0x4, 0x800, 0x6, 0x9, 0x1, 0x10000, 0x5, 0x3ff, 0xfffffffa, 0x7fffffff, 0x3, 0x0, 0x609, 0x417, 0xc, 0x4, 0x9, 0x3, 0x9, 0xfffff893, 0x4, 0xfffffff7, 0x6, 0xfffffffb, 0x1, 0x7f, 0x8]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x16f, 0x66, 0x6, 0x2, 0x2da, 0x6, 0x0, 0x7, 0x8, 0x2, 0x8, 0x9, 0xc57, 0xf7a, 0xd260, 0x251, 0x9, 0x0, 0x200, 0x990, 0x7, 0x4, 0x7, 0x4, 0xb06, 0x4, 0x4, 0x1f, 0x7, 0xdaf2, 0x1, 0x8, 0xe4, 0x88, 0x3, 0x5, 0x3, 0x7, 0x8, 0x9, 0x7, 0x9, 0x8000, 0xd4, 0x6, 0x1, 0x1, 0x40, 0x0, 0x2cf, 0x9, 0x10, 0xd4, 0x4, 0x0, 0xffff8001, 0x1c000, 0xdd1, 0x792d, 0x1a0, 0x9, 0x7ff, 0x8001, 0x0, 0x0, 0x3, 0x7, 0x9, 0x0, 0xfffffff6, 0x6, 0x1, 0x7, 0x5, 0x7ff, 0xffffffff, 0xffffffff, 0x8, 0xb9c, 0x6, 0x3, 0x3ff, 0x9, 0x4, 0x0, 0x7, 0x3, 0x43, 0x8, 0xe7, 0x1ff, 0x8, 0x3, 0x8, 0xfffffffd, 0x4, 0x10001, 0x101, 0x2, 0x401, 0xc, 0x7, 0x9, 0x800, 0x100, 0x6, 0xe2e, 0x3, 0x401, 0x4f, 0x3, 0x6, 0x80, 0x1ff, 0x3, 0xde, 0x5, 0xfffffff8, 0x2, 0x8, 0x9, 0x6, 0x9, 0xffff, 0x9, 0x7fff, 0x2, 0x9, 0x7fffffff, 0xffffe1ba, 0x19b5, 0x7, 0x0, 0x2, 0x18, 0xe, 0xfffff001, 0x4, 0x6, 0x10000, 0x2, 0x80000000, 0x3, 0xfffffff8, 0x8, 0x6de6, 0x4, 0x10001, 0x2, 0x1, 0x80000000, 0x1, 0x8f6, 0x1ff, 0x2, 0x5b, 0x8, 0xfffffffb, 0x5, 0x9, 0x5, 0x5575, 0x3, 0x6, 0x3, 0xc54, 0x7, 0x7, 0x3, 0xf, 0x6, 0x6, 0x0, 0x5, 0x0, 0xffffff84, 0x3, 0xab56, 0xffffffff, 0x499, 0xfa3, 0x7, 0x7b5afee8, 0xfffffc01, 0x0, 0x7, 0x4, 0x2, 0x7, 0xff, 0x1, 0x4, 0x5, 0xe01, 0x1, 0x7, 0x3ff, 0xfffffffe, 0x6, 0x9, 0xfffffff9, 0x4, 0x0, 0x0, 0x63df, 0xa3df, 0xa, 0x1, 0x3, 0x3, 0x1, 0x40, 0x7, 0x2, 0x401, 0x8, 0x80000000, 0x4, 0x9, 0x5, 0x1, 0x7, 0x0, 0x3ff, 0x47, 0x1, 0x81, 0x2, 0x8, 0x9, 0x40, 0x5, 0x3, 0x3, 0xf5c, 0x81, 0x0, 0xa5, 0x1, 0x8, 0x0, 0x3, 0x4, 0x1, 0x5, 0xd9d0, 0x101, 0x7, 0x2, 0x0, 0xfffffe01, 0x4, 0xfff, 0x8, 0x8, 0x4]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x800}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}, @TCA_POLICE_RATE64={0xc, 0x8, 0x200}, @TCA_POLICE_RATE={0x404, 0x2, [0x7c31, 0x9, 0x9, 0xfffffff6, 0xd, 0x0, 0xd, 0x9, 0x64, 0x3, 0x7, 0xa, 0x80000000, 0x6, 0x5, 0x4, 0x10000, 0x1, 0x5, 0x8, 0xffffff12, 0x1040, 0xb, 0xc64, 0xfffffff7, 0x800, 0x2c67b7d0, 0x1ff, 0xfffffffd, 0x187, 0x9, 0x8, 0x9b, 0xbd, 0xffffffff, 0xc0, 0x3, 0x8, 0xfffff91c, 0x0, 0x80, 0xc3d2, 0xdca, 0x3ff, 0x2, 0x7, 0x7ff, 0x4, 0x6, 0x8, 0x101, 0x5, 0xffff7fff, 0x67f9, 0x1, 0x2, 0x400, 0xf216, 0x4, 0xf, 0x16d, 0x2b11, 0x4, 0x1ff, 0x6, 0x8, 0x9, 0x3, 0x7, 0x0, 0xfffffff9, 0x4, 0x8, 0xfffffffc, 0xe6, 0x3, 0xb, 0x81, 0x80, 0x3, 0x8, 0x8001, 0x3, 0x4, 0x50000, 0x1, 0x10000, 0x2, 0x7, 0x3, 0x8f, 0x1, 0x7, 0x2, 0x9, 0x8c, 0x9, 0x919, 0x8, 0x8001, 0x44b, 0x6, 0x691, 0xff, 0x1, 0x8, 0xfffffff8, 0x2, 0x4, 0x400, 0x0, 0xc, 0x800, 0xfffffff9, 0x2000000, 0xd, 0x5, 0x7fffffff, 0x4, 0x3, 0x71e, 0x7f1, 0x3, 0x8, 0x18, 0x2, 0x6, 0x2, 0x8001, 0x3, 0x3, 0x4, 0x9, 0x8, 0x7, 0x9, 0x7dad, 0x7, 0xf, 0x4, 0x0, 0x9, 0x20003, 0x3, 0x401, 0x2, 0x7a, 0x6, 0x10001, 0xfff, 0x800, 0x5, 0x1, 0x5, 0x1, 0x7fff, 0x0, 0xffffff56, 0x10, 0x7, 0x8, 0x9, 0x9, 0x5, 0x7, 0x40, 0xa, 0x51, 0xb, 0x8001, 0x40, 0x3, 0xffffffff, 0xc0000000, 0xc, 0x5, 0x8, 0x10, 0x6, 0x9, 0xfffffff9, 0x60, 0xfffffff5, 0x3, 0x0, 0x6, 0xf8, 0x4, 0x5534, 0xffffffff, 0xd, 0x80000000, 0x5, 0x6302, 0x9, 0x4, 0x7, 0x7fffffff, 0xffffffff, 0x0, 0x7, 0xffffffff, 0x3, 0x9, 0x1, 0x4b8, 0x8, 0x4b4a, 0x8, 0x7, 0xffff, 0x200, 0x7, 0x5dd1, 0x6, 0x8, 0x4d24, 0x1, 0x4, 0x1, 0x5, 0xf, 0x8, 0xe3, 0x832, 0x1, 0x7, 0x8f, 0xffff, 0x3, 0xe, 0x2, 0x6, 0x3, 0x2, 0x7, 0x0, 0x6, 0x8, 0x1, 0x3, 0x10001, 0x7, 0x6314, 0x7, 0xffffff80, 0xf38f, 0x4, 0xffff, 0x7fffffff, 0x5, 0x8, 0x190b, 0x7, 0x6, 0x1]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x155, 0x10000000, 0x60c3, 0x81, 0x8, {0x80, 0x2, 0x1, 0x4, 0x8, 0x1}, {0x9, 0x1, 0x2, 0x7ff, 0x800, 0x1}, 0x1, 0x40, 0x5}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0x100, 0x1, 0x43, 0x98, 0x8a9, 0x40, 0x9, 0x8, 0x10000, 0x2, 0x8000, 0x9, 0x7, 0x4, 0x7, 0xf7a, 0x100, 0xfffffff8, 0x0, 0x4353, 0x0, 0x3, 0x4, 0x7, 0x9, 0x0, 0x2, 0x3, 0x4, 0x0, 0x41, 0x1, 0x9, 0x8, 0x1056, 0x6, 0xaf75, 0x5, 0x9, 0x10001, 0x7fff, 0x6, 0x101, 0x3d, 0x1ff, 0xe0000000, 0x8, 0xfffffffa, 0xc7c, 0x9, 0x5, 0x3, 0x1000, 0x4, 0x3, 0x2, 0x2, 0x1, 0x5, 0x401, 0x6, 0x0, 0x2, 0xfffffffd, 0x800, 0x7, 0x1400000, 0x7, 0x7f, 0xa, 0x10001, 0x8000, 0x0, 0x3, 0x4, 0x0, 0xe33, 0x8001, 0xa27, 0x8000, 0x10, 0x1000, 0x3, 0x396e, 0x3, 0x401, 0x9, 0x9, 0xb6f, 0x3d60, 0x4, 0x100, 0x90, 0x8001, 0x6, 0x8, 0x40, 0x3, 0x4, 0xfffffffb, 0x113, 0x80, 0x4, 0x6, 0xa6, 0x0, 0x40, 0x78fc4c7d, 0x40, 0x5, 0x40000000, 0x1, 0xa25f, 0x4, 0x40, 0x5, 0x7302, 0x7f, 0x1, 0x1bc, 0xffff, 0x1, 0xca, 0xf5d6, 0x3ff, 0x7, 0x7, 0xc6ffdac, 0x9, 0x81, 0x9, 0xffff, 0x7, 0x7, 0x4, 0x3, 0x0, 0xfc000000, 0x2, 0x3, 0x8000, 0x101, 0x1ff, 0x0, 0x101, 0x1, 0x9, 0x9ba00000, 0x3, 0x5, 0xf, 0x8, 0x7fff, 0x3, 0xba, 0x7fffffff, 0x6, 0xa, 0x1, 0x6d, 0x8, 0x5, 0x4, 0xffffff7f, 0x2, 0x800, 0xc, 0x7, 0x6, 0x7f, 0x5, 0x3, 0x7, 0x6282df42, 0x2, 0x401, 0x5, 0x4, 0x105, 0x4, 0x2, 0x0, 0x1d, 0x10000, 0x7, 0xbb8, 0x2, 0x6, 0x8, 0x4, 0x327, 0x8, 0x5, 0x80, 0x7, 0x0, 0x7, 0x5, 0x3, 0x2, 0x80000000, 0x6, 0x1, 0x10000000, 0x6, 0x1, 0x2, 0x2, 0x0, 0xffffffff, 0x4, 0x1, 0x9, 0x4, 0x2, 0x1, 0x10001, 0x2253, 0x2ac, 0x4, 0x3, 0x9, 0xfdd8, 0x3, 0x5, 0x8, 0x8, 0x10001, 0x9, 0xfffffff6, 0x1, 0x9, 0x3, 0x4ffe, 0x19, 0x7, 0x6, 0x1d0e075b, 0x165e942c, 0x3, 0x8d7d, 0xfffff801, 0x1, 0xfffff001, 0xc, 0x200, 0x566, 0xa9, 0x665, 0xc391, 0x5, 0x80000000, 0x1, 0x7, 0xfffffe01]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x843}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x20000011, 0x7, 0x2def, 0x1, {0x10, 0x1, 0xff, 0x1, 0x1, 0x7}, {0x96, 0x2, 0x9, 0x1, 0x395, 0x3}, 0x1, 0x2, 0x2397}}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xb7, 0x2, 0x9, 0x8, 0x800, 0xfffffffa, 0x5, 0x2, 0x5, 0x6, 0x6, 0xf2f, 0x8, 0x6, 0x0, 0x8, 0x1, 0x7fff, 0x3, 0x1, 0x8, 0x0, 0x40, 0x36, 0xff0, 0x4, 0x2, 0x7ff, 0xce, 0x426, 0x6, 0x657e, 0x4, 0x6, 0x0, 0x8, 0x2, 0x80000000, 0x9, 0x4, 0x6, 0x100, 0x3172, 0x81, 0x9, 0x100, 0x3, 0x0, 0x4e, 0x3, 0x9, 0x1, 0xff, 0x6, 0x100, 0x1, 0x8, 0x3, 0x5, 0x9, 0x9, 0x1ff, 0x3, 0x800, 0x1, 0x7, 0x3, 0xf243, 0x7, 0x10, 0x2, 0x400, 0xc, 0x8, 0x0, 0x7f, 0x5, 0xf8, 0xfff, 0xffff, 0x4, 0x8, 0x7f, 0x400, 0x512, 0x5, 0x7fffffff, 0x6, 0x2f58, 0x7, 0x35, 0xa, 0x1, 0x5, 0xdf, 0x4a, 0xfffffffb, 0x9, 0xfffffff8, 0xa3eed76, 0x7, 0x7, 0x5049, 0x5, 0x0, 0x3, 0x9e, 0x6, 0x5, 0x982, 0x0, 0xfe8, 0x2, 0x81, 0x2, 0x101, 0x2, 0x7, 0x2, 0xc99, 0x8, 0x1790, 0x3ff, 0x4, 0x252, 0x10001, 0x4, 0xde52, 0x8, 0x3, 0x0, 0x0, 0x3, 0x4, 0x3, 0x5, 0x81, 0x5, 0x7f, 0xf1a, 0x0, 0x1, 0x8, 0xffff6976, 0xffffffff, 0x7, 0x0, 0x1, 0x6, 0xf, 0x538d, 0x7, 0x8, 0x3, 0x7d50, 0x7, 0x8f69, 0xe, 0x6, 0x1000, 0x3, 0xff, 0x1, 0xfff, 0x8, 0xb, 0x3, 0x5, 0x2000000, 0x4, 0x800, 0x2, 0x8, 0x7, 0x5a2dcb6f, 0x50, 0x590, 0x0, 0x4, 0xc, 0x1, 0x35, 0xe, 0x40, 0x100, 0x2, 0x8, 0xde83, 0x1, 0x1, 0x3ff, 0x80, 0xfffffa34, 0x8, 0x6, 0x8000, 0xfffffffb, 0x20a, 0xa1f3, 0x200, 0x6, 0xfffffff9, 0xf7, 0x5, 0x5, 0x3, 0x9, 0x6, 0x10000, 0x80000000, 0x7, 0x7, 0x9, 0x3, 0x8, 0x6, 0x5, 0x7, 0x200000, 0x92e6, 0x6, 0x200, 0x80, 0x8, 0x4, 0x1000000, 0xe3e3, 0x50b3, 0x2, 0x40, 0x2b9d06d9, 0x5, 0xa, 0x2, 0x1, 0x5, 0x9, 0x7084, 0x7, 0x8, 0x9, 0x2, 0x3c59, 0x1, 0x2, 0x80000001, 0x8, 0x6, 0x9, 0xd, 0x5800, 0x1, 0x6, 0x5, 0x3]}]]}, {0x11, 0x6, "298216ffd681cb4c0410e7cf70"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_tunnel_key={0x5c, 0xd, 0x0, 0x0, {{0xf}, {0x2c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x4}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @local}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x7fffffff}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}]}, {0x4}, {0xc}, {0xc, 0x8, {0x6, 0x1}}}}, @m_bpf={0x4c, 0xf, 0x0, 0x0, {{0x8}, {0x10, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0xc, 0x4, [{0x1, 0x0, 0x4}]}]}, {0x17, 0x6, "4fc9d424f73c99d02e1b62340c07c3f026cddb"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x4}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x0, 0xd}}]}}]}, 0x23cc}}, 0x20000000) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003c00)={0x6, 0x1a, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3ff}, @generic={0x3, 0xf, 0x7, 0xc, 0x2}, @call={0x85, 0x0, 0x0, 0xb2}, @generic={0x9, 0xe, 0x1, 0x2}, @tail_call, @exit], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000340)='GPL\x00', 0x5e, 0x1000, &(0x7f0000002b00)=""/4096, 0x41000, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000003b00)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000003b40)={0x3, 0x1, 0x800, 0x3fc}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000003b80)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1], &(0x7f0000003bc0)=[{0x5, 0x4, 0x2, 0x6}, {0x1, 0x2, 0xb, 0x9}, {0x1, 0x2, 0xe, 0xc}, {0x4, 0x4, 0xe, 0x5}], 0x10, 0x1}, 0x94) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r8, &(0x7f0000003cc0)={0x4}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0xb4}}, &(0x7f0000000480)='GPL\x00'}, 0x80) socket$unix(0x1, 0x2, 0x0) 2.618673404s ago: executing program 0 (id=4800): syz_emit_ethernet(0x6c, &(0x7f0000000000)={@broadcast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x5e, 0x65, 0x0, 0x0, 0x2f, 0x0, @private, @empty}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x88a8, 0x0, 0x0, [0xff, 0x0]}, {0x0, 0x0, 0x0, 0x0, 0x11}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x3]}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0x7}}}, {}, {0x8, 0x6558, 0xfffffffd}}}}}}, 0x0) 2.618158337s ago: executing program 6 (id=4801): socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x9) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="180200000000000000000000000000008500000027000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) socket$packet(0x11, 0x2, 0x300) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000000206010200000000000000000000000005bd00070000000900020073797a0f00000000000000800500150001000000050004000000000015000300680900683a69702c70f578472b6e657400000000050005000000000000"], 0x5c}, 0x1, 0x0, 0x0, 0xc040}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000440)={@val, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x452c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0x5865}}}}}}}, 0xfdef) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r0}, &(0x7f0000000380), &(0x7f0000000480)=r2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2.507987689s ago: executing program 3 (id=4802): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000240)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf84, 0x3}, 0x1c) (async) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000240)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf84, 0x3}, 0x1c) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'gretap0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x8b}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x3c) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0x3, 0x2) (async) r5 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @broadcast}) socket$netlink(0x10, 0x3, 0x0) (async) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x0) write$tun(r4, &(0x7f0000001440)={@val={0x8, 0x800}, @val={0x5, 0x0, 0x6, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0xfde1, 0x66, 0x0, 0xb, 0x89, 0x0, @rand_addr=0x64010102, @broadcast}, "3297e3ba"}}, 0xfdef) setsockopt$inet_group_source_req(r2, 0x0, 0x2b, &(0x7f0000000300)={0x6, {{0x2, 0x4e21, @local}}, {{0x2, 0x4e22, @remote}}}, 0x108) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000004c0)={'gretap0\x00', &(0x7f0000000440)={'ip_vti0\x00', r3, 0x8, 0x10, 0x4c, 0x6, {{0xe, 0x4, 0x3, 0x2e, 0x38, 0x68, 0x0, 0x1, 0x2d, 0x0, @private=0xa010102, @multicast1, {[@end, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x1f, 0xff, [@broadcast, @multicast1, @loopback, @broadcast, @empty, @remote, @private=0xa010101]}]}}}}}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="08000200ac1414aa"], 0x20}}, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="4805000015", 0x5}], 0x1) (async) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="4805000015", 0x5}], 0x1) socket$inet6(0x10, 0x3, 0x0) (async) r7 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r7, &(0x7f0000000000)='s', 0x573, 0x800, 0x0, 0x4b6ae4f95a5de35b) 2.413677725s ago: executing program 0 (id=4804): setsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000000000)=0x9, 0x2) r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x10, 0x0) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f00000000c0)) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000680)={{0xffffffffffffffff, &(0x7f0000000100)='-.\x00', 0x500, &(0x7f0000000140)={@_ha_fsid={[0x953e, 0xa228]}, {0x2, 0x7, 0x4, 0x7ff}}, 0x2, &(0x7f0000000180)={@_ha_fsid}, &(0x7f00000001c0)=0x1}, 0x4, &(0x7f0000000600)=[{0x1, 0x80000001, &(0x7f0000000200)='[\x00', &(0x7f0000000240)="e8f466e309e90bea23d36674c1c148966936b9f6db5e2749d5ef89472539b7e91727d87ddf880c9d5499f3dbd5ab79ba1dcc6ec9e507bbc72c9242a3db3c213680e50fa2bc476404e0262d21db56bc0d3f9348fbe9f702c5ff51afb63fb7a848d47a44d39ce2f380b747db5c0e97004e85b56a1ddf85", 0x76, 0xa}, {0x3, 0x4, &(0x7f00000002c0)='(\x00', &(0x7f0000000300)="748365f40d7966e6c7b4952de1f4a2c1ec394f5c9be967c66ada29e21600b4a0b90c8db44f14cbe02d04bf1102e7cde0b153ecb265747b9b4111b801de2b3ee3f61927619c98cf54c427398e174f768a6868269ab5d05f5da3647b7455b95406a25e858fc0f95d6447e9b60d0b422bce2d5f", 0x72, 0x20}, {0x2, 0x8, &(0x7f0000000380)='\x00', &(0x7f00000003c0)="61dac5e3a2bfd37d8118332052eb8834fff330882a154aa98e9732556f33e0ae3f7027c311c17da1b8899d2a572803b5f4fc8d57e77c65fe526c2096af33c64fab1ebaca1552171ac4c33d88681258c12f28a9afe7aaae9557c074cda4d8759df6c7ec0e724ff90a75ea2427853b5b0719733f3b64a0fdb85a84dd42c52f9915a4c24812c5c2035f9105e122bbe3b079e83f8d843eb0701a866e549b61739b58b4fdd7bac8a3d01c82e3831f80266eb7ffe98ebe145228867d4c97f8d303f607eb7909c20713835da8a52259afd9f3d0aa1f92aa40e4ef4e40b9732e31b0629841b57b1fb82f205b4fc86c586fd31ed35d0db93f7461", 0xf6, 0x8}, {0x2, 0x3ff, &(0x7f00000004c0)='\x00', &(0x7f0000000500)="1d4bf83cab7aecb62de7314c43e420989a1e003b35d6f29ba91aa33d715b2ed9e51e82dfa16c6d8a36b3fed868aae8f7c313a03f1c6a99fee699410a50cc73142d682d18697f45877ce114eb42a061eafcf471803a313f0eb1b54d3b43a1702c6ced88c2a4e367dccfa7d59fe23cae5126455d05216aa9d6baa43f44c72ad936da995005c3e1108eb94bd7c414b215d0bc8a6a8f5ef54c85228005f6f84b77940554e9e62905759483280564bc4cb33b9e47bfab6384763ba90a16c08144e91249adf7524502671d552d26188f4be8881797dd", 0xd3}]}) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000740), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000780)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000880)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x58, r2, 0x20, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x8}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x14c}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x1}, @ETHTOOL_A_CHANNELS_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0xd}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x9}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000805}, 0x90) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000900), r1) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000a80)={'tunl0\x00', &(0x7f0000000940)={'syztnl0\x00', r3, 0x10, 0x7, 0xb, 0x6, {{0x45, 0x4, 0x2, 0x3f, 0x114, 0x65, 0x0, 0x6, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@ra={0x94, 0x4}, @lsrr={0x83, 0x27, 0xc, [@broadcast, @broadcast, @loopback, @dev={0xac, 0x14, 0x14, 0x19}, @dev={0xac, 0x14, 0x14, 0xd}, @local, @private=0xa010102, @remote, @dev={0xac, 0x14, 0x14, 0x1e}]}, @timestamp_prespec={0x44, 0x34, 0x15, 0x3, 0x6, [{@loopback, 0x9}, {@multicast1, 0xb}, {@multicast1, 0xffffff81}, {@empty, 0xffff}, {@multicast2, 0x7f}, {@loopback, 0x3}]}, @end, @cipso={0x86, 0x25, 0xffffffffffffffff, [{0x5, 0x10, "f4909ccfab82446f54fc7c79d9ea"}, {0x7, 0xf, "78955a3a1e835d1dc029a4855c"}]}, @timestamp_prespec={0x44, 0x1c, 0xf7, 0x3, 0x7, [{@broadcast}, {@private=0xa010102, 0x200}, {@broadcast, 0x81}]}, @lsrr={0x83, 0x17, 0x67, [@empty, @remote, @private=0xa010101, @multicast1, @loopback]}, @generic={0x7, 0x11, "80fec2bab1a30330a2d473159a8ac2"}, @timestamp_addr={0x44, 0x2c, 0x8, 0x1, 0x3, [{@empty, 0x1}, {@dev={0xac, 0x14, 0x14, 0x37}, 0x6}, {@multicast1, 0x3f15f4b7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}, {@dev={0xac, 0x14, 0x14, 0x2a}}]}, @ssrr={0x89, 0xb, 0xa5, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r4, &(0x7f0000000c00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0xe8, r5, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x34, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010101}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xbf}]}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20000820}, 0x2000c000) r7 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c40)={'dvmrp0\x00'}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000d80)={0x8, 0x0}, 0x8) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000dc0)={0xffffffffffffffff, 0xf, 0x18}, 0xc) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x16, 0xe, &(0x7f0000000c80)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @map_fd={0x18, 0xe, 0x1, 0x0, r1}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x128}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xbe9}}], &(0x7f0000000d00)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @flow_dissector, r1, 0x8, &(0x7f0000000d40)={0x3, 0x5}, 0x8, 0x10, 0x0, 0x0, r8, 0xffffffffffffffff, 0x0, &(0x7f0000000e00)=[r1, r1, r1, r9], 0x0, 0x10, 0xfffffffe}, 0x94) getsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000001200)={@mcast2, 0x0}, &(0x7f0000001240)=0x14) sendmsg$inet(r7, &(0x7f0000001400)={&(0x7f0000000f00)={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10, &(0x7f00000011c0)=[{&(0x7f0000000f40)="c5ba38c018721fffd397b137a0a333f327198eadea26e6e3f83acebb5fe4b314abc90a3439bca4d9102681a7d38b30b22ae5e6aeecf55f04593be3058158c9a6602204c7882d1995a8fb68dbf5fb7c388124231d6611f298014e7023ce7ff2c30dae3c0efeb40395c78fb716d47c52a1113ae4626583299e8bd58bb63fde029e7af6b2ec05e8cbfa3679177e3051cc7488846744", 0x94}, {&(0x7f0000001000)="3a942d1cd1d372894fd834dbe546361af40cda363063cef729cd37a19eadb4f02e3ce248a2a2fa863315e9086f390255b64bf82724da894dfabcbd2b4c95482ccff28c509095ba5daa68fedf5eb91e67eed7b25fdace3f409aa974f712b0d1d616f323519cca2585840bc1d1bb0c6772e5ed6090e85fa1269ef9a1ba97fa0a638a5ef917cf991c8ad22c328b", 0x8c}, {&(0x7f00000010c0)="d7ef790abcdb50da4f91465a4bedcf5d1d3710a048725bfd6e24c62b5048e8ca579fc1aa80998340aa6e449678a16b5252527a47caf8e93da5da6ef4b5dd0584e84397c0afc4ceb454fbe70027dca96b329b3f9a5c4aa04659547dfb317bbc1a4612b30873b4aae12d7387ebc24f9c37a141ce91f6cf8b8b4fa8446433ecbc3d60946ab6da1c6e5b4dd68c6d37c2cdd1a4dea71b1725dcc5d207e8f5f3c6bf6bee257306e4ce2b6d151f4a0122d7a89df255a31945dfbe8a631e5f10c02f3c838835497b8af356bdce35743443e1ce371117e27a752f7cfcb99b", 0xda}], 0x3, &(0x7f0000001280)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r11, @rand_addr=0x64010102, @multicast1}}}, @ip_tos_u8={{0x11}}, @ip_ttl={{0x14, 0x0, 0x2, 0x63cf5aef}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_retopts={{0x40, 0x0, 0x7, {[@ssrr={0x89, 0x7, 0xa1, [@initdev={0xac, 0x1e, 0x1, 0x0}]}, @noop, @timestamp_prespec={0x44, 0x24, 0xf1, 0x3, 0xf, [{@private=0xa010100}, {@broadcast}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}, {@broadcast}]}, @ra={0x94, 0x4}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xfffffc01}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @remote, @private=0xa010102}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x778}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_retopts={{0x68, 0x0, 0x7, {[@lsrr={0x83, 0x27, 0xf1, [@local, @local, @remote, @multicast1, @remote, @multicast2, @loopback, @remote, @multicast2]}, @generic={0x82, 0x7, "23ad2d0c8f"}, @rr={0x7, 0x13, 0x32, [@broadcast, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @rr={0x7, 0x13, 0xd7, [@multicast2, @empty, @multicast2, @multicast2]}, @ra={0x94, 0x4, 0x1}]}}}], 0x178}, 0x44080) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000001440)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000001480)={{{@in6=@private1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast2}}, &(0x7f0000001580)=0xe8) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000015c0)={0x0, 0x0, 0x0}, &(0x7f0000001600)=0xc) setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001640)={r12, r13, r14}, 0xc) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000001680)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x8, 0x1, 0x2, 0x2, 0x9, 0x9c9}, &(0x7f00000016c0)=0x20) r15 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_attach_bpf(r15, 0x1, 0x32, &(0x7f0000001700)=r1, 0x4) ioctl$BTRFS_IOC_ENCODED_WRITE(r10, 0x40809440, &(0x7f0000001840)={&(0x7f0000001800)=[{&(0x7f0000001740)="e5df7249147290fbbd836fb46705dba1947ad84b896061b566bac489240280334351d6b311a4f35e28d33d82bbb9b3b69914a112e65bbcc7d339093f879fd17a0f7dc6ec0fc1b49b0d85a881626a5ceef03096b2a73d4668a2bc118820532673846ef8165b0e02d74a73493f8200108d7149160c160c6aa2f9b6eb8b814f6408f0189a", 0x83}], 0x1, 0x8000000000000001, 0x0, 0x1, 0x100000000, 0x3, 0x7, 0x4}) nanosleep(&(0x7f00000018c0)={0x0, 0x989680}, &(0x7f0000001900)) sendmsg$OSF_MSG_ADD(r1, &(0x7f0000002340)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002300)={&(0x7f0000001980)={0x964, 0x0, 0x5, 0x301, 0x0, 0x0, {0x0, 0x0, 0x7}, [{{0x254, 0x1, {{0x3, 0x9}, 0x2, 0x40, 0x40, 0x8, 0x17, 'syz1\x00', "26ef20fa900d3d74e6eb2d6748fa7fa22b80bd498890b930913049549164c1db", "202d23c83f2dabf19d27b0542cc650ffabd370b1bf7a554102ade61e1cd90f3b", [{0xa, 0x7, {0x1, 0xe0f}}, {0x1, 0x3, {0x2, 0x8}}, {0x9, 0x22f, {0x1}}, {0x4, 0x7f, {0x3, 0x4f9}}, {0x4, 0xec, {0x0, 0x5}}, {0x1, 0x3a6}, {0xffff, 0x3ff, {0x2, 0x5}}, {0xfffa, 0x8001, {0x2, 0x5}}, {0x8, 0x1, {0x1, 0x2}}, {0x1, 0x4cb, {0x3, 0x5}}, {0x8, 0x2, {0x3, 0x7}}, {0x1, 0x1, {0x0, 0x97}}, {0x3, 0x2, {0x3, 0x3}}, {0x75a, 0x7, {0x3, 0x5717}}, {0x6, 0x1ffe, {0x2, 0x80000000}}, {0x4, 0x40, {0x3}}, {0xac, 0xb, {0x2, 0xcd}}, {0xe68, 0x6, {0x1, 0x40}}, {0xfffb, 0x1, {0x3, 0xfffffff8}}, {0x4, 0x6, {0x1, 0x7}}, {0xad, 0x4, {0x1, 0x3}}, {0x2cae, 0x401, {0x3, 0x9}}, {0x3d, 0x9, {0x1, 0xe}}, {0x0, 0x96f, {0x3, 0x1}}, {0x2, 0x3, {0x1}}, {0x2, 0x8b9, {0x2, 0x6}}, {0x6, 0x5, {0x3, 0x40}}, {0x9, 0x8, {0x3, 0x7}}, {0x807, 0x0, {0x3, 0x4}}, {0x3, 0xfffd, {0x3, 0x7fffffff}}, {0x0, 0x4, {0x1, 0x92e1}}, {0x7, 0x7f, {0x1, 0x7}}, {0x4, 0x9, {0x0, 0x2}}, {0x7b87, 0x2, {0x1, 0x8}}, {0x9, 0x7f, {0x0, 0x1}}, {0x9, 0x5, {0x2, 0x5}}, {0x1, 0x14, {0x3, 0xb}}, {0x4, 0x401, {0x0, 0x800}}, {0x1, 0x88df, {0x1, 0x9}}, {0x2, 0x3, {0x2, 0x38b}}]}}}, {{0x254, 0x1, {{0x2, 0xfffffffc}, 0xd9, 0xe, 0x9450, 0x7, 0x3, 'syz1\x00', "92eb4947656d9899f6a3610f1ad33b0f10eb9023253afa1b69bc12db58a75b87", "6305cec8ea2812dccd90a5dfdba2156236fb21599269e32fdfcec2ec1f70b343", [{0x1000, 0x0, {0x0, 0x1}}, {0x6, 0xdf, {0x0, 0x5}}, {0x2, 0xfffe, {0x0, 0xdbdc}}, {0xfff7, 0x9, {0x3, 0x54}}, {0x0, 0xb38d, {0x1, 0x8}}, {0x0, 0x2, {0x1, 0x7}}, {0x1ff, 0x8, {0x2, 0x5}}, {0x8001, 0x7, {0x0, 0xac}}, {0x85, 0x4, {0x1, 0xf}}, {0x1, 0x5000, {0x2, 0x7cf}}, {0x7, 0x4ed, {0x0, 0x101}}, {0x1, 0x3, {0x3, 0x90d}}, {0x0, 0x9, {0x1}}, {0x90, 0xe, {0x0, 0x574}}, {0x0, 0xddd, {0x2, 0x3}}, {0xfffe, 0x1000, {0x1, 0x2df}}, {0x8, 0x1, {0x2, 0xfffffc01}}, {0x1, 0x1, {0x3, 0x293}}, {0x4, 0x6, {0x2, 0x88}}, {0x9, 0x4c5, {0x1, 0x3}}, {0xfffe, 0x4, {0x2, 0x7f}}, {0x662, 0x1, {0x0, 0x6ca}}, {0x0, 0x7ff, {0x2, 0x401}}, {0x7, 0x0, {0x1, 0x6}}, {0x4, 0x7f, {0x1, 0xae}}, {0x1, 0x7, {0x0, 0x919c}}, {0x9, 0x0, {0x0, 0xfff}}, {0x9, 0x5f, {0x2, 0x3}}, {0x0, 0x7b5, {0x1, 0x10000}}, {0x7, 0x3, {0x0, 0x7}}, {0x3, 0x7, {0x0, 0x70000000}}, {0xa, 0x5, {0x1, 0x7fff}}, {0x3, 0x1, {0x2, 0x7c50000}}, {0x0, 0x8, {0x1, 0x401}}, {0x1, 0x9c1, {0x0, 0x101}}, {0x8, 0x3e2, {0x0, 0x7e}}, {0x7, 0x5, {0x1, 0x2}}, {0x5bc, 0x2, {0x1, 0xffffff78}}, {0x2, 0xfffd, {0x3, 0x7}}, {0x7, 0x8, {0x0, 0x5}}]}}}, {{0x254, 0x1, {{0x3, 0xbe}, 0x5, 0x0, 0x8, 0x3, 0x10, 'syz1\x00', "c542519c034b66c7dd29365d6fc85bd88fa9b3ce4d5822f8757b97b957544672", "1102d0de38977414a7a9e5a91b5746088fc1a4fd9eefb78dbcd3c7d62a3a7447", [{0xe, 0x7, {0x1, 0x1}}, {0x4, 0x4, {0x0, 0xc}}, {0x1, 0xfa, {0x0, 0x3}}, {0x101, 0x8, {0x1, 0x200}}, {0x5, 0x9, {0x0, 0x9}}, {0x8, 0x0, {0x2, 0xb7d9}}, {0x8, 0x400, {0x3, 0x9a}}, {0x9, 0x81, {0x0, 0xe2}}, {0xfff, 0x1, {0x0, 0x7}}, {0x5, 0xe, {0x0, 0x291269dc}}, {0xe, 0x5, {0x1, 0x656}}, {0x1, 0x7, {0x1, 0x1}}, {0xff00, 0x5, {0x0, 0x2}}, {0xd6, 0x4, {0x1, 0x6}}, {0xd52, 0x7, {0x0, 0xa632}}, {0x7, 0xff, {0x3, 0x1}}, {0x2, 0x5}, {0x1000, 0x5, {0x2, 0x2}}, {0x401, 0x6, {0x0, 0xe7f}}, {0x8000, 0x2, {0x3, 0xbec}}, {0x5, 0x3467, {0x0, 0xb}}, {0x1020, 0x0, {0x3, 0x4}}, {0x8, 0x2, {0x1, 0x3}}, {0x3, 0x0, {0x2, 0x6}}, {0x3, 0x2, {0x1, 0x81}}, {0x3, 0x81, {0x1, 0x7}}, {0xc3c2, 0x4a67, {0x1, 0x2}}, {0xb, 0x29c1, {0x0, 0x10001}}, {0x11, 0x200, {0x0, 0x8}}, {0x1, 0x4}, {0x3, 0xe63d, {0x3, 0x9}}, {0x6, 0x6, {0x2, 0xd4e}}, {0x5, 0x6, {0x1, 0x8000}}, {0xfffe, 0x9, {0x2, 0x76}}, {0xf, 0x5, {0x0, 0x7}}, {0x1, 0x6, {0x1, 0x7f}}, {0x1, 0x4, {0x2, 0x5}}, {0x1, 0xba9, {0x2, 0x2}}, {0x6, 0xa9, {0x3, 0x5}}, {0x2265, 0x0, {0x1, 0x2}}]}}}, {{0x254, 0x1, {{0x0, 0x1}, 0x7, 0xc0, 0x6, 0x190, 0x0, 'syz1\x00', "0a1398c5ecdcda59ed32ffe18af077d9190f77689fbe23a48996e9e984bce2f6", "7ea266f47d0d6856a59ddceaf10543d3130eef22fc7db05927c12f79468d9365", [{0x5, 0x7, {0x3}}, {0x5, 0x3ff, {0x1, 0x9}}, {0x2eea, 0x80, {0x2, 0x9}}, {0x300, 0x800, {0x3, 0x8}}, {0x2, 0x2, {0x3, 0x6}}, {0x3, 0x3ff, {0x2, 0xffffffff}}, {0x101, 0x8, {0x3, 0x7}}, {0x100, 0x6, {0x0, 0x9}}, {0x5, 0x0, {0x1, 0x2}}, {0x65, 0x4, {0x3, 0x15}}, {0x101, 0x5, {0x2, 0x4}}, {0xef6, 0x40, {0x3, 0x7aa}}, {0x3, 0x1, {0x2, 0x8}}, {0x0, 0x1ff, {0x1, 0x3}}, {0x2, 0x4057, {0x0, 0x5}}, {0x6, 0xfa72, {0x3, 0xfff}}, {0x8, 0x0, {0x2, 0x9}}, {0x8, 0x6, {0x1, 0x51}}, {0x6, 0x1, {0x2, 0x6}}, {0x160, 0x8, {0x3, 0x6}}, {0x7, 0x8, {0x3, 0x1}}, {0x6, 0x3e5c, {0x2, 0x4}}, {0x8, 0x0, {0x0, 0x3}}, {0x6, 0x869, {0x3, 0xfffffff8}}, {0x7f7, 0x400, {0x3, 0x6}}, {0x8, 0x2, {0x1, 0x100}}, {0xfff8, 0x5, {0x2, 0x4}}, {0x5, 0x2, {0x2, 0x2}}, {0x0, 0x5, {0x1, 0x9}}, {0x2, 0x5, {0x0, 0x3}}, {0x4, 0x3, {0x3}}, {0x40, 0xd85d, {0x1, 0x8}}, {0x8, 0x101, {0x1, 0x9}}, {0xcb, 0x5, {0x3, 0x5}}, {0x2, 0x0, {0x1}}, {0x1000, 0x8, {0x1, 0x4}}, {0x7, 0xa, {0x2, 0x4a4}}, {0x4, 0x9, {0x0, 0x5}}, {0x8, 0x6, {0x1}}, {0x6, 0x3, {0x0, 0x6}}]}}}]}, 0x964}, 0x1, 0x0, 0x0, 0x4004810}, 0x90) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000002380)={'gretap0\x00', @local}) socket$nl_route(0x10, 0x3, 0x0) 2.251578016s ago: executing program 0 (id=4805): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='yeah', 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x3, @mcast1, 0x2}, 0x1c) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r1, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000c40)=[{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)="7db49fdb07ac1af786f979a7c4c98f4a30507687a32c16c61e034cb67357e38da3fbe77aa31c827b802222469f1809decbb3a12e1757d1ac4ca0cfbbc289bc69b43b1b7d2e896183837a7224005c40412d2937969050f4a048a1af3723b7dc", 0x5f}, {&(0x7f0000000600)="a55b2c8f73dfa037f58774af75d97ac0c02173e2c7efc30f342a5e29dfdc47280776b0deecfb7e4911e4dd33096e8823fb8ba706e431aa", 0x37}], 0x2, &(0x7f0000000740)=[@assoc={0x18, 0x117, 0x4, 0x86}], 0x18, 0xc840}], 0x1, 0x84) recvmsg$can_raw(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000080)=""/35, 0x23}, {&(0x7f0000000640)=""/172, 0xac}], 0x2}, 0x62) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000240)={0x0, 0x964, 0x89f8}, 0x8) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000080)=[{&(0x7f0000000200)="580000001400add427323b472545b45602117fffffff810000400e227f000001925aa80020007b00090080007f000006e809000000ff0000fe88be37c7a6ae69ffffffffffffffffffe7ee00050000000000000200000000", 0x58}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_skb}, 0x94) syz_emit_ethernet(0x11, &(0x7f0000000140)={@multicast, @remote, @void, {@x25={0x805, {0x3, 0x4, 0x2e}}}}, &(0x7f0000000180)={0x1, 0x2, [0x9ee, 0xcf0, 0xd7e, 0xef4]}) 2.138030292s ago: executing program 0 (id=4806): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x3, [@union, @var={0x1, 0x0, 0x0, 0x11, 0x1}]}, {0x0, [0x5f]}}, 0x0, 0x37}, 0x20) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x400}]}}]}, 0x38}}, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4058587a, &(0x7f0000000400)={{r6, &(0x7f0000000140)='/dev/virtual_nci\x00', 0x100, &(0x7f0000000180)={@align=0x7ff, {0xfffa, 0x7, 0x6, 0x7}}, 0x2, &(0x7f0000000340)={@_ha_fsid}, &(0x7f0000000380)=0x3}, {[0xff, 0xfffffffb, 0x10000, 0x8]}, 0xff, 0x0, &(0x7f00000003c0)}) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), r5) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_RINGS_GET(r8, &(0x7f0000000780)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000740)={&(0x7f00000005c0)={0x174, r9, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x4}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x80, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}]}]}, 0x174}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="01beffffff0100", @ANYRES32=r4, @ANYRES8=r7, @ANYRES16=r3, @ANYRESDEC=r2, @ANYBLOB="29b0e2872f95daf158be3a25bfce1bf1087ef448485f23dd35ffa5363d33d2b3f6e4367fe5413e4b25aef535309e310c4c54387c07cca5a6e0eccad8567571", @ANYRES8=r7, @ANYBLOB="134f961295b5be5b81d7e78817ca972bddc5466c224f4bbc3a67853c4a7f41144efd142385479cabb2000e4ebe105d8e5a580537ee8c65c9aa2ea2149287a234b474306c22", @ANYRESDEC=r1, @ANYRES16=r1, @ANYRESDEC=r3, @ANYRESHEX=r5, @ANYRES8=0x0], 0x1c}}, 0x4008054) write$nci(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="41040201"], 0x7) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x68, 0x2, 0x6, 0x1, 0x6000006, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x68}}, 0x0) 2.090725394s ago: executing program 7 (id=4807): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001900010000000000000000001c14000022535686f9ff0000"], 0x1c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001900010000000000000000001c14000022535686f9ff0000"], 0x1c}}, 0x0) (async) 1.965892182s ago: executing program 6 (id=4808): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2f00}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_REMOTE={0x8, 0x7, @rand_addr=0x64010101}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x4c}}, 0x24000000) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000072000000180100002020702500000000802020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$FS_IOC_FSGETXATTR(r3, 0x801c581f, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@ipv6_newaddrlabel={0x38, 0x48, 0x3, 0x0, 0x0, {}, [@IFAL_ADDRESS={0x14, 0x1, @empty}, @IFAL_LABEL={0x8, 0x2, 0xffffffff}]}, 0x38}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) socket$xdp(0x2c, 0x3, 0x0) (async) socket$xdp(0x2c, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2f00}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_REMOTE={0x8, 0x7, @rand_addr=0x64010101}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x4c}}, 0x24000000) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000072000000180100002020702500000000802020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) ioctl$FS_IOC_FSGETXATTR(r3, 0x801c581f, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@ipv6_newaddrlabel={0x38, 0x48, 0x3, 0x0, 0x0, {}, [@IFAL_ADDRESS={0x14, 0x1, @empty}, @IFAL_LABEL={0x8, 0x2, 0xffffffff}]}, 0x38}}, 0x0) (async) 1.807794459s ago: executing program 7 (id=4809): r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000080)={0x20c, r0, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xbd4}]}, @TIPC_NLA_SOCK={0x4}, @TIPC_NLA_SOCK={0xd8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x81}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x100}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x10001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xd}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x720}]}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x92}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x40}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x101}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffff5aa}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}]}]}, @TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xb}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xde51}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xdc4c}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1000}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xeee}]}, @TIPC_NLA_MEDIA={0x7c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6e9486f1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3b}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80000001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xf6}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}]}]}, 0x20c}, 0x1, 0x0, 0x0, 0x10}, 0x44010) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400480}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x4c, r3, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004094}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) r6 = accept4$tipc(r5, &(0x7f0000000580)=@id, &(0x7f00000005c0)=0x10, 0x80000) sendmsg$NL80211_CMD_RADAR_DETECT(r2, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r1, 0x4, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xf}]}, 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r2) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000780)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(r7, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x30, r1, 0x10, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x5, 0x32}}}}, [@NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0xadf2}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000800}, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f0000000880), 0x4001, 0x0) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000900), r2) sendmsg$MPTCP_PM_CMD_GET_ADDR(r7, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x804}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x6c, r9, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xfe15}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x24, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xc}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x9}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40000}, 0x800) r10 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x81800) sendmmsg$alg(r10, &(0x7f0000000a40), 0x0, 0x41) r11 = socket$pptp(0x18, 0x1, 0x2) ioctl$BTRFS_IOC_SUBVOL_CREATE(r11, 0x5000940e, &(0x7f0000000a80)={{r2}, "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"}) r12 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001ac0), r7) sendmsg$IPVS_CMD_GET_INFO(r2, &(0x7f0000001b80)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001b40)={&(0x7f0000001b00)={0x30, r12, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x481}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}]}]}, 0x30}}, 0x40800) ioctl$sock_inet_SIOCSIFPFLAGS(r10, 0x8934, &(0x7f0000001bc0)={'nr0\x00'}) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r10, 0x8010661b, &(0x7f0000001c00)) r13 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r13, 0x84, 0x13, &(0x7f0000001c40)=0x80, 0x4) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001cc0), r2) ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f0000001d00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r7, &(0x7f0000001dc0)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x14108}, 0xc, &(0x7f0000001d80)={&(0x7f0000001d40)={0x1c, r14, 0x300, 0x13, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r15}, @void}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80001}, 0x20000000) 1.806997477s ago: executing program 4 (id=4810): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)="ad18d4a3a6bf19be635978e863e20aa9722e5e9399", 0x15}, 0x1, 0x0, 0x0, 0x48000}, 0x2004c844) 1.618547064s ago: executing program 3 (id=4811): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) socket$netlink(0x10, 0x3, 0x400000000000004) socket$xdp(0x2c, 0x3, 0x0) (async) socket$tipc(0x1e, 0x2, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff00000000711067000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x90) (async) socket$kcm(0x23, 0x5, 0x0) (async) socket$kcm(0x2, 0x3, 0x2) (async) socket$nl_rdma(0x10, 0x3, 0x14) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)) (async) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r0], 0xc4}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) 1.480841375s ago: executing program 0 (id=4812): r0 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000040)={'filter\x00', 0x0, [0x4, 0x8, 0x8]}, &(0x7f00000000c0)=0x44) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x801, 0x84) (async) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r3, &(0x7f00000001c0)="c2", 0x1, 0x4050, &(0x7f0000000180)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) shutdown(r3, 0x1) (async) shutdown(r3, 0x1) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x8000000, 0xffff}, &(0x7f0000000200)=0xc) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) (async) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) (async) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r5, 0x107, 0x16, &(0x7f0000000100)={0x0, 0x0}, 0x10) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x20, r4, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x64, r4, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x9}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x9}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x10001}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x3}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x7}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x8}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x8d}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x4}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x4}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x800}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000010}, 0x4044) bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x6, 0x4, &(0x7f00000010c0)=@raw=[@generic={0x15, 0x0, 0x0, 0x2}, @generic={0x81, 0x1, 0x0, 0xffff}, @generic={0x1, 0x0, 0x0, 0x0, 0x56}, @generic={0x95}], &(0x7f00000011c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) 1.469976956s ago: executing program 4 (id=4813): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r4, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc0008000500090000001400040073"], 0x58}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), r5) sendmsg$GTP_CMD_GETPDP(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, r6, 0x323, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x15}, 0x4) sendmsg$DEVLINK_CMD_TRAP_GET(r5, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x84, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}]}, 0x84}, 0x1, 0x0, 0x0, 0x4044}, 0x40001) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r1) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x2c, r7, 0x1, 0x70bd28, 0x30000, {0x1a}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}, @IFLA_IPTUN_TTL={0x5}]}}}]}, 0x40}}, 0x0) 1.274395877s ago: executing program 6 (id=4814): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x38}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newtaction={0x5c, 0x30, 0x301, 0x0, 0xfffffffe, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xffffffff}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x5c}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e24, 0x6bb, @ipv4={'\x00', '\xff\xff', @local}, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000001c0), 0x34) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000004c0)=@gcm_256={{0x303, 0x3a}, "56db7a2700f81000", "a8ef1a3a33071799b7bbebfa6dc371290d0e3808802000", "336819df", "3fef2c2800008700"}, 0x38) writev(r1, &(0x7f0000000680)=[{&(0x7f0000000000)="43dd8d8e3148495d31d2d2203bd32c52e305ae17d681050513c1e82850026867dfbfa73ff8987b0373f2e900d491e952c3ea379e849bf0d19cf178524e6e9cd0a08255c7085837baf4e48c6988545a90cbc0b1faea73f276eb9de26e38319a5c002737a2a9f0850cf21ac72d58d16e90823b8d6539ebe3eddbb513250642a6509ac3dbef31a2537cefae8970438c028a059cf29c0a8758a183b771f99b35f746db57e48de77ac265c1d897fc3eecf078cbbfd7650b1909d1cd713e6d5e068349bc761670f63ca5f144cba13f2337a5d6040a8be0421933a004dcf758efa6af32765efe0c558d0b2ede2069ba4d53f30e", 0xf0}], 0x1) socket$nl_rdma(0x10, 0x3, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000a80)=ANY=[@ANYBLOB="3c0000001800dd8d00000000fdffffff020000000000000600000000060015000100000018001680140001"], 0x3c}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r3) ioctl$SIOCSIFHWADDR(r3, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="38000000011401000000000000000000090002007379736977"], 0x38}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 1.273275848s ago: executing program 7 (id=4815): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x0, 0x0, {0x7, r2}, [@MDBA_SET_ENTRY={0x20, 0x1, {r3, 0x0, 0x0, 0x0, {@in6_addr=@dev={0xfe, 0x80, '\x00', 0x2b}, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff}) (async) r5 = socket$packet(0x11, 0x3, 0x300) splice(r4, 0x0, r5, 0x0, 0x10500, 0x0) (async) write$cgroup_devices(r4, &(0x7f0000000100)={'b', ' *:* ', 'rw\x00'}, 0x9) 1.098353673s ago: executing program 3 (id=4816): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x1419, 0x1}, 0x10}}, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newneigh={0x30, 0x1c, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, r3, 0x0, 0x11}, [@NDA_DST_MAC={0xa, 0x1, @link_local}, @NDA_FLAGS_EXT={0x8, 0xf, 0x1}]}, 0x30}}, 0x0) r4 = socket$inet_sctp(0x2, 0x400000000001, 0x84) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x16, 0x9}]}, 0x10) (async) sendto$inet(r4, &(0x7f0000000800)='u', 0x1, 0x801, &(0x7f0000000040)={0x2, 0x4e23, @private=0xa010100}, 0x10) (async, rerun: 64) listen(r4, 0xda8c) (rerun: 64) 1.003502405s ago: executing program 0 (id=4817): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) sendmsg$IEEE802154_LLSEC_DEL_DEV(r1, 0x0, 0x4000000) sendmsg$NL802154_CMD_SET_TX_POWER(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="010200000000fddbdf250c000000"], 0x14}, 0x1, 0x0, 0x0, 0x4004090}, 0x44000) sendmsg$IEEE802154_LIST_IFACE(r1, 0x0, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES64=r0, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r2], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) openat$tun(0xffffffffffffff9c, &(0x7f00000012c0), 0x201, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="140100001400210200000000fcdbdf25030100800c0002"], 0x114}], 0x1}, 0x0) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400109"], 0x87) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xfffffffe}, 0x10}, 0x23) r4 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r6 = socket$packet(0x11, 0x3, 0x300) splice(r5, 0x0, r6, 0x0, 0x10500, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x24, 0x2, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x51}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0xb0}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x358, 0x0, 0x4c, 0x1a, 0x160, 0x73, 0x288, 0x258, 0x258, 0x288, 0x258, 0x3, 0x0, {[{{@ipv6={@private0, @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x0, 0x7}}, @common=@unspec=@connlimit={{0x40}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x0, {@ipv4=@remote, 'team_slave_1\x00'}}}, {{@uncond, 0x0, 0xf8, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000001b00)=@security={'security\x00', 0xe, 0x4, 0x470, 0xffffffff, 0x0, 0x260, 0x138, 0xffffffff, 0xffffffff, 0x3a0, 0x3a0, 0x3a0, 0xffffffff, 0x4, &(0x7f0000001300), {[{{@uncond, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@mh={{0x28}, {"74f3", 0x1}}, @common=@mh={{0x28}, {"67f1", 0x1}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x6, 0x9, {0x3}}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, [0xffffff00, 0xff000000, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffff00, 0xff, 0xff], 'ip6_vti0\x00', 'bond_slave_0\x00', {0xff}, {}, 0x2c, 0xff, 0x2, 0x4}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@ah={{0x30}, {[0x4d4, 0x4d5], 0x6, 0x3, 0x1}}, @common=@ipv6header={{0x28}, {0x31, 0x50}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x9}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xffffffff, 0xff000000, 0xffffffff, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffff00], 'ip6gretap0\x00', 'veth0_to_batadv\x00', {}, {0xff}, 0x1d, 0x7, 0x6, 0x8}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@eui64={{0x28}}, @common=@dst={{0x48}, {0x3, 0x6, 0x0, [0x1000, 0x4, 0x6, 0x2, 0x7, 0x8000, 0xf, 0xb468, 0xfff, 0x1000, 0x5, 0x40, 0x5, 0x4, 0xf6e, 0xfff], 0xe}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x83, 0xb, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x4c, 0x42, 0x1, 0x0, 0x25dfdbfc, {0x3, 0x1}, [@generic="0f000000", @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x47}}}, @nested={0x4, 0x8002}, @typed={0x14, 0x6f, 0x0, 0x0, @ipv6=@mcast1}, @typed={0x8, 0x26, 0x0, 0x0, @fd=r4}]}, 0x4c}}, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r4) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r4, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r9, 0x1, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r4) sendmsg$NL80211_CMD_STOP_AP(r10, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r11, 0x8, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8800}, 0x20000010) 602.467493ms ago: executing program 4 (id=4818): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x6b}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0xfffffecb}, 0x48) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r1, 0xfffffffc) syz_emit_ethernet(0x33, &(0x7f0000000180)={@local, @multicast, @void, {@arp={0x806, @generic={0x110, 0x9000, 0x6, 0x2, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2b}, 'GH', @broadcast, "e05f3e9e3a49a33036ec2b3d4e55a8"}}}}, 0x0) 601.62607ms ago: executing program 6 (id=4819): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="900000000002010400000000000000000a000000040001803c0003800c00029905000100000000002c00018014110300fe8000000000000000000000000000bb14000400000000000000000000000000000000003c0002802c00018014000300fc00000000000000000000000000000014000400ff0200000000000000000000000000010c000280050001"], 0x90}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@ipv4_delrule={0x24, 0x21, 0x4, 0x70bd29, 0x25dfdbfd, {0x2, 0x80, 0x0, 0x1, 0x8, 0x0, 0x0, 0x0, 0x10008}, [@FRA_SRC={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xf}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000080}, 0x4080) 494.337782ms ago: executing program 4 (id=4820): syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r0, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000b1f8306e05d1e4aab009c16b5c05077115d0749619ca39f89974785ae0619b77c6585f678ac92a3b6b4148f56b43c3dd75d75f97c8f92f60a2def458df05e2fbfb3e849b2b3cffd4f29446ae60dd76654b2639b2bc14350706214a6ab7a712d4317fbc3ca01d0d3ed6110b3775903141a5091a4d3db8eb335414fbdb288aba73aaf6d18000a3a2a069cf7f9402e1425bb6bc370576aa1faea0fe222671ecf99038fce8dba53dcb11f87cca"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x54, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2f00}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_REMOTE={0x8, 0x7, @rand_addr=0x64010101}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e22}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x54}}, 0x24000000) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@ifindex, r1, 0x11}, 0xa) 425.493746ms ago: executing program 6 (id=4821): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="9df4da52400a35ef54000000322df40c4baaa59a476fb005307408f272570d", @ANYRES16=r3, @ANYBLOB="010028bd7000fedbdf25140000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000000000008000b000000000006001100070000000800150005000000"], 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4800) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000080)=0x8, 0x4) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0xe22}, 0x1c) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400), r0) sendmsg$IPVS_CMD_GET_DAEMON(r6, &(0x7f0000000900)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000780)={0x114, r7, 0x400, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x10000}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4}}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@local}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@loopback}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_DAEMON={0x70, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvlan1\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_macvtap\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}]}, 0x114}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000000) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)={0x48, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x11, 0xf9, "4e477de48bb9abaeb62ee0ec1c"}], @NL80211_ATTR_MAC_HINT={0xa, 0xc8, @random="c61a7af61029"}]}, 0x48}}, 0x44040) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000026c0)={0x0, 'hsr0\x00', {0x3}, 0x8}) pselect6(0x40, &(0x7f0000000000)={0x664, 0x8d, 0x0, 0x72d7, 0x8, 0x6, 0x2, 0x10001}, &(0x7f0000000040)={0x6, 0x3, 0xe63, 0x8, 0x98, 0xb0, 0x7, 0x6}, &(0x7f0000000240)={0x1, 0x4, 0x100000001, 0x8, 0x7, 0xfffffffffffffffa, 0xd, 0x407c}, &(0x7f00000003c0), &(0x7f0000000300)={&(0x7f00000002c0)={[0x3e40]}, 0x8}) r10 = socket$kcm(0x2, 0xa, 0x2) socket(0x1e, 0x80805, 0x0) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f0000000500)={'hsr0\x00', &(0x7f00000004c0)=@ethtool_sfeatures={0x3b, 0x2, [{0x200, 0x4a39b33c}, {0x2, 0xb}]}}) 214.021561ms ago: executing program 4 (id=4822): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000001c0)=r0}, 0x20) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000080)={0x6, 0xa, 0x4, 0x1, 0x6, 0x0, 0x0, 0x8, 0x80, 0x8, 0x0, 0x0, 0x0, 0x4}, 0xe) (async) shutdown(r2, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000340)=[@in={0x2, 0xfffe, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f00000002c0)={r3, 0xa3, 0x4991, 0x7}, &(0x7f0000000300)=0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0}, 0x4) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xa, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x5a}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ipvlan0\x00', 0x0}) (async) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x503, 0x70bd2a, 0x4, {0x0, 0x0, 0x0, 0x0, 0x38018, 0x201a0}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x3c}}, 0x800) r7 = syz_genetlink_get_family_id$team(&(0x7f0000000140), 0xffffffffffffffff) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000300)={'syztnl0\x00', &(0x7f0000000280)={'syztnl2\x00', 0x0, 0x29, 0x5, 0x2, 0x5, 0x20, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, 0x700, 0x8000, 0xe4a5, 0x4}}) sendmsg$TEAM_CMD_OPTIONS_GET(r6, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)={0x154, r7, 0x21a, 0x70bd2a, 0x25dfdbf9, {}, [{{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x6, 0xe, 0x2, 0x2}, {0x6, 0x8, 0x6, 0x1000}, {0x2965, 0xa, 0x2, 0x401}]}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r8}}, {0x8}}}]}}]}, 0x154}, 0x1, 0x0, 0x0, 0x810}, 0x10) r9 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r9, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r9, &(0x7f00000000c0)={&(0x7f0000000180)=@qipcrtr={0x2a, 0x4, 0x2}, 0x80, &(0x7f0000003880)=[{&(0x7f00000002c0)="27031c00160016000000001106afacf706e1054000006558", 0x18}, {&(0x7f0000000640)="22ea7e2bb1b280b1718a70a8f814e3ba81f4d19edcce18b75bf5034bb80875257d68b199f247eac81ab52f03e698103d9d05000000000000007017285d0e1b1dabc9ec2d341f383840698a3fb95e9b1aaf2bb8cb0191e7e392db050fa06124f73d1c36daaca9921f207f88516871989276bad26884d4208acc499b17a4d62f2bbb14db3e0007478df45cff3aa28b8e92621be927ca29819dee3285effdab982e387002c3d38fb39d0c01de235b9f10e0ca40f84bf2d57e92fff34cc8c27d81acd4665c91d4d8cb8b843e996c598047b5c3e3572b3a3012ad63fd354f546f", 0xde}], 0x2}, 0x0) r10 = socket$unix(0x1, 0x2, 0x0) sendmmsg(r10, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000017c0)=ANY=[@ANYBLOB="880000000000000006000000ffffffffff4846433e69b26eef04f9b7e3d94be89bb28a1145a6e9f463c160c6753347003862bcc01f630aee90e7954160278d4d6e138f95c0a426b3cc98ebbbe6586429a3048f9b1d1c56d8b612fa05932d16bc7e04d10719f3ebf946f5fd6399bd7ffe1101aab1a50f0bc692a5ef77fd39983c510beb9c439d8a9070000000000000000b01000004000000b5d6580de37aa2f80304bac25710bf891b995bd31ecfebbe2b576e97a4fd1685f4b9bd68becc2255f1e53be44794c5c0f25edd9fbc59a94cbb6b5e7266559bae1873ec493ddf8ef3ff69b04be162b016158ad9ce414c7e46b400000000000000101000000000000002010000feffffff63b71ca7e9a131b7049ab4067710a6110864f81875a85a95ec208f8b912de055933f1bd26e2c2c5db931ce1c100c8fad34b75a62459bcbf1a5d50461103a9734e380d3580cc17a6cbf43567e4aa5c30f2dee16f0047f2654feb31d41a6a273951ba54c58be7196f4e39f16cd61442bbd9f301ca835d42de3a1b577b39c84ad23870b7603f42aa9991f405ac1ec2306812f40ff721146e40e7ce7aacc2a72d2c6f340da45c4193f87ba2da83efc6d9900dcb4293809018ab31898e1d0ca57d7dc722d6f255b766d02b872df20ccb1d123c66221e42e554b4a77702149612daed21de9bba9f1bb9591cd1e7456325217651c40484d3af62ccc92445209eca14265cae7124d98306db302bf16afa5367f48da29105cd383685f827f084434cd935a87571e5814b837aafa524f6a8a7f5e56cd72ea01eda4b6cc5885f00eb79488bde4ca40abc7e09cbd4e6210ca357f776db996664a6d1678480535933e99eda18402128045d09097b3fb4f10d471dd56a63f642240f8e91f956ce3e75c119faede2c8e35155f18ad78cb3c6801c4e12b9617ebccd6c9695ef19a57a217810b861070c02794b4716d715cebfb3a62eb17f87ac0d8c501ab71a3b15d3138da1a8af0d892c6243e9c2fa06f979db2d8e44bc2d6b8236c88f533ec00ca7389d272c1ddea5908115c2c8fe486c87b0de5a5cb3962bd1ca7dc578634ef29772a2c8a60fbdfbf384c52f5b884dc52cd6ea247756034b6a53da507c712b018440a68629e3d14fd7f02410f68aff44840fba2116c50b330a4d9c4732b9dff960068dd77c89c355c66ea6a9eef972e089b06999162ca096310f5595f698771f66ffb323875db24d63e50eb9fce7ce3b93b0a4e3fffaae9fa2bf6ee2a2583d48adaa1025132e9e55a37906c2546d8c73b00f868a04ce39586f17ab12b0a534ed09d783c5b160e17ea43d99843d61d34f0d6ecbd451bb4ff87b02c13dbc66b25792ca1dcd581339ec6189737979f5543c82b927d06d82a21f53bfcf86b80d056e74a39368507d2cd4cbc1797328f522c5b8b60acd8f4f01de9cb1a57403b0bcc3195a680b76bbe793d03e1c11cdf416298687498c68b3daf09f8424ddca8d01dbe2297c67a24e78ea3dc01b412097f848f3911bc3a8665a035e1ad578c5adf201691a12951e38a396fda95945904f9bb74ec32bbf5dde5dc7eaaa0e0976a82dc811287a8dbf62db21bb0a925c7126c4687a61531b1814f05343211d354ff51fbecfd6fd8e29a860107523fae25d420d524f4652161a7005bd05b243422f19f5db74ab78cf15e31add631b85b4de958b65e9ad3f7b4c8d0a57d34b1ef108cdb52c72e6fda5ec91dc77fcc80bcab8ec2bb354e9d7e327bc097c0071080562d0c392a243d322be404b8560a9b14a6e44c0cbee90f1b611c1ebe9a228581f52329aacf720d6c33e965b1457d808bc4b297f6c76cf89198b0e67e5102048c33c0909f93d1428f23b663d0762e36df7c7d1868bb70fa7b113cfaa0b11065f6e8ff0a49f8180b847d1770bea9463edae670e1a89b247647f48a46485516b7ec1b8ef422339f19bd1cf0bda415cafc96991c47d5a9f0b4cf1d3c2be4575955b0edd9c2858b920f77d0ef954c843773213c04f3993be79f8144324db6a6e016b3d9c2d4b6d68cd2dce9fddd5cc2bbc6c324ba20a8f9bee349efbc6794becc8b17c4d45a4f265acc0c6d8feca6e3cd2050bd8c6f948ed27dafd908b217f275baabe22f634c95d650efb11c611acf517335c72ef54839238ddd7f0f798aa9d0bcc71ffa321caa37256b327033080173bbc95713581980bc2f5287e8e8ec6172915b5230d711236848cd13cb4eac96e8399c2c880358ca264e48674dd8590c7227a2604cd3ffb2f5a78082e30a465cc8a897853a2c65d558c5e4796e35598ac39d7f16f23c123d42a42eb3b303834b37d7d3cc5df18c8aa837e04859a0c69c5718d93e693a05f741b62ff305cacec0590d68b96d5d52be9d4f49fd358fca2e328fff7b1b240a2add11f064cf6cbc913b7570b7d27e49a30948c7bacfda5c06639c5d2da796a1ba8166bf3f1d6e834567f25229301be2f63b8b7e8dbc9421d9f5a1744f0e885b92feaa5f49600ab96a3224e08003058741faf8b197b1783176f3859627668cad92f1b07f3bb0bd50bc622b09b078b091b77d2fd9340215b03db263cb5532661f48f0968e1ca5af67b9e22e3dea14eb0c5fc1e77b49d3630fb4a76990c939c22e7d08597a2d6c062e64a787cd86ac5992e8c211089ca1a1a469e1499dbbaee5fcd7e2c4f9cddf1f7ad70a4f6131ade9037f36d43dde993255864fc30a945cfc855dcd375b97ac2a17f5d236945656d1f576f2bdc76beea57bdf254ff568c3b6566bca22cd616ef438116c0c76705cc3c02ea124067bab17c2d3482891ffabf5b1e9bdc664b87773ef2602f9357a747c40926f5083fb6a01c5dd9a18df2becb5a67506b35c6d220818594c16dd7843a8c343327fef919717b09a81e5fef6d48caf51283acaaf750e3aed3cb6aa51470e866b753a9f3ba3447b1c4779efde0bc8d6ec83899c6921a9f87d5d032058c5c7f5f1c5a07097cebda2dd748d116c4e6180e3b0b09997abee326027dc30bfbe81fb520be5d889a6f7b0ff206ea6c8b9c903ca0e2d4379cfaaa31824aba0b113c866b807354ce1b5cb81ec6966a19108bf0c6cc804e7092d46c93dbfecef9398b5c7abab159fa86f05368a1c7596e12a5684ea1d7340ab7535014487bdd53094298cae30ae9b3c96c87efcaeeb2368ac6f0102d3cfd8b97e2f63f9ab1bf4eef0387f59209d0fbd583e0f463edb379eb47a7482489e4488c639c21feb03d14c893f7444c450b192fded364ae84c92f89d4ed2a15423e4befe54a8ec10f19dd1219e5de45cdb91b089d1149d899ae451e8e9c807d13479bda9278ae30e9aa320faedbe1277011659fd4382ee1ed1532fe02159f39b25ead1a18828d402540d1472d5a37adb61484b10dd6426e6be03974b6b14ec028a218846f7b3122a2a1e1f784b8081fae862458e7fe7557cf000d3173311574f9551f1911d84631ba651b67d151fce54434dba6c3cfa70a74fb52855c732cf0426420bae9d69dd11e9fb433bbd3f47fb260fe14d1a9ee38e2579841691016f722a7b7a5c119f894b101dd151b0ee37d711ae71ecd3b5b2bcb5b050eb75964c917c34bce76f33e27dd3328e70aaf0673f0f09322e4219e86ee06b9503dfaa3e6691b11f8635fea3575ebceebc5d7c73c65b9e90d6c027f014a1f149c6d3871aabc094092479f71796be1558ce297b37575530e4be6f0424fbedc590d6a062c4c5d36f3962169ccf04fb4a96d7a3658c738ab782e85223a9ba00f762ce4deab752bc11bd594acaa1dd91104ba6d2d78a26a2c5c5cdc213fb8c1a0829e74f37040b975183ef87fc44599c48c69a0d25d7f8c02c1faf34fbf9f12c139f18fdf8cf7eeedbf9a99e9d224dd80f74aa51193db5dcafe9025e9d894bb8b2b50c3f874d743f9fde8bf033c38f2ed68d4d7d4908a4be0c3146ddfe08efeca226905e1db63cbe1adbb7b511759fac494805b32142623024a3c11df94f5813b45ce4f5940eda7fba7e683086a0a5441100bf8f8edbec02ce48e70431ad8f7ac6695ebd6050439e151cc039b9d20c088fe181452da8b7bb7eec4734c036f2cd5dc9d342abc3d59cddf61e818eef28cd394fcf4ae5271476666c269961841b96f4e7e5aa45baaf5849b5d6903e339b57d119012b324693e36d9b8e6de7533cc1e2f8346fd9a8bfa05f6fec57a621952f3b0217a562af0621f04fc671751b16accc28e8f401c1fce292cea8d708fd4dfe408575bb78d331c739ebd60ec584e1516f5ae0be3d1bc8d665f6e0b670c7b36ad72b018dc08236d7852e5e7246afb39002eec05ed4999ef5b09d4fcb411aaf41a31f3baf2c71fa8a798618b226b8c554d59f0f38822668a53bd2412bfb0b395356f019243c9034e9610799071314c61fc82891c0fe0005687c2a5a868e7dbeac4c18194df53761f10f01f075ec7688bc597b571792be24ec77665c7b173d09255bce73c4a9ebd3dfcf0b383769fdd094633d2f7a884bb9c696eca2243cb9e2d885b045611e0b154de81f75fd8152d48ca098ec8946de0727ed921486847d12511ab022b0a631feef841edff17ca10f5bc011a3796a2883755b526663407a166143a4cc4d80744cb3657a20cb81c3fe45610fd35f73ca9042849236a0afa215f19c152db74864bd8d9c32b9f4b1fce2bc94be7b3892cb19885a74b65bb79f4cfc569dfbe636cc5acb1560d14ac43346c2e0bc1d347eab5fd6832225b5d47490d4c980f029753803178e3e31deb547c4eb09632fa171b1d0d4c8edf8cccaa3439dac16a5dbc9a2bf1199c307588f7e6960d3dc77370431f57bcdc7b701eb8b22d2055f2e7859f4ee498f398456cb6f51be8140c408d2836b8d5e373cbfd80f41e29422ccbe55754d870f7df1d4d2cc34a941e46ea5b161a92a6aa8582ed08d5b646e22de1a31fe9a851435c6d4bc774b701aedf3cd737ccddbe6a39f6de0a46f49ab8f5c88a17f9fe9e181ebc8e75c110b49284e120730cd95693b0b5ffe1c1ad05f623b05a606aefedd13ff1df4ec63f8ead184066007041dfd888a5f15462c1dbfab64dde798ed09d821e62c76ce4c18253e91fca732afec9abe38da481232874856779607b07299c25931ea3ab6c5002faa3e2e443d0f680e6ff4a2a669b29b160af1f024a888550326603e7b7e33458b6d747974689870afe98e49723fbf0d800f8ca4a9febc6f02e57adebab1e0f8711497b19fc2992a1cd0657f6204c3a8ae9b640099076dcc95f73e50d39f2e0a0a26e2cbbf5bddcab169047f51907980c15b3164dc1353b92b5b1e44a4584ab4e0c53a70d856ea11eb70b0dd12c69ca73e8eb19cb8465c9ce71fda096bb139d286da09e5d45a4635d583a62881ca3497bb8e8a6c1d1d7eb6b4de398db2d3a8bb684beb81e4ad2d9b90f199849b073d7da80c812b385ef7893bdc79060125a2ec2f6225cf056a0d485c3e8426a68d2f90bcf28c1271f3e61466bb89b99d465893961bb5eb6098f2f72bf8fae18c4fa762155d62879202cbab9bc763a69f8825465a914283bb3d30e3c9b98117dec87b89e38753ab46ce33aed08134537cb902a0c99e430b4f09d43f91279b4e524a86a978623d0de9a2da28694daf1ac626f0cc0bde3dd6b269db35ba8dc409f3173cda20af02ac6e7e6d778db8c294fdbbf14c5d39923596d18e2081e35d0ad0c72a4f140e3e9465c79f7a4b6fc77b4d63841ee80297832024d4bad424deb318ad93cdf453985f5a21e155b2c75778f4b673757b2a333ccec747e85f0d0d091a0d3817de47661d807e3341d057c655fce777586b9cd9f5a8063add2cda4a5aab706e4d7c8bebc64ea454eeca48066b83b89878b80b0494433e884f50721a88d5b817b7f6d2215bf10f96cf0a2b16eecdf04791339a64c28e971fc934252779edcba5e5f2bf6f2a1ca9470804afe5f8e62be0a0c87584faddf5bbcd6c085c7c65ae414af641344abbc2a29798c312d505174bb654b690824bf90be8985def558378c107d6fdce617f3abfde5c1acc4087265dc7489529771406ef1c601c0235d3bdc8725be9dd3c3452419105fbc117bcb0bf9c64abbfde56fff2bb4bb0ef2980100b33ba4c03318b8df069b11274b25246b79ef4d71e57bb38ec92beb646a8086d3635d1ad8e0f4f218073447e52b16265c218dc18b73e746a901eb28135d938000000000000000d010000d40000008670bf2194d9297170708836b74f5406427821b1c1f53d2e89ffcc5c7e738003e25305091faa270010100000000000000100000001"], 0x2260}}], 0x1, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x8, &(0x7f0000000100)=@framed={{0x18, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @exit={0x95, 0x0, 0x7b00}, @call={0x85, 0x0, 0x0, 0x13}]}, &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x41000}, 0x94) 188.067765ms ago: executing program 7 (id=4823): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB="11000100550001000000000800000000070000003369ea025f0b71c428ea9b18487e7cd28b8daef75540c5fd660a218c46a5e58d058c924d2828b4035dc5c2e2b0c592bdc58f44404c49a78485c5f71f0f0cdadca1fb822948e4b011448fd4ae0e8c7aa9e0c13b409d8f31644b68c63360c241ab6598a21e22b85a2d3c4cfb67d7f3d38bd9d8d02fbfca21dd1ce555d76697fc2764b161c22c12dba4c6bbf1c663a345a6851e5599ed33493671423f202333d3326c6c342c0d80e8c37178fa7306c63ffc2aac134ed50af9f1755032", @ANYRES32=0x0], 0x18}}, 0x0) (async) accept4$inet(r0, 0x0, &(0x7f0000000000), 0x0) 125.735814ms ago: executing program 6 (id=4824): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x1, @empty, 0x8}, 0x1c) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000280)={0x0, 0x0, 0x4, 0x0, '\x00', [{0x1, 0x8, 0x1, 0x1, 0x1, 0x80000000}, {0x9, 0x40, 0x3, 0x6}], ['\x00', '\x00', '\x00', '\x00']}) sendto$inet6(r2, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x6, @mcast1}, 0x1c) sendto$inet6(r2, &(0x7f0000000e80)="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", 0x5c6, 0x6d91fb6102d8910c, 0x0, 0xfffffffffffffe38) recvfrom(r2, &(0x7f0000001a80)=""/4038, 0xfc6, 0x40020100, 0x0, 0x0) writev(r2, &(0x7f0000000580)=[{&(0x7f0000000c80)='x', 0x1}], 0x1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000480)={0x7, 0x1, 0x836, 0x8, 0x7}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 49.70989ms ago: executing program 3 (id=4825): r0 = socket(0x2, 0x2, 0x7be) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4001}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000180)={'syzkaller1\x00', {0x2, 0x0, @rand_addr=0x64010101}}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', 0x1}) r3 = socket$inet_sctp(0x2, 0x5, 0x84) bind(r3, &(0x7f00000000c0)=@in={0x2, 0x270f, @rand_addr=0x64010101}, 0x10) listen(r3, 0x5) write$tun(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="0000080001031400e803140008004500005c000000004084b019640101026401010104d2270f000000000000000002"], 0x6a) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000000)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x800, 0x1, 0x0, 0xd, 0x80, 0x80}, 0x20) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)="b2242857d814c9bffb422ea6281c4ea6a113b905b2c58ecbb946baa82f726406d6b6aff54b587ae622935748b46448d4241b16a4c5a91f81d5b35c3c9d11690064662fec202e1bbbc206a801", 0x4c}], 0x1) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002a00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0xfffffffffffffe2e) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={r5, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x6, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x21, &(0x7f0000000280)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f00000002c0), &(0x7f0000000300), 0x8, 0xc6, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000100)={0x1d, r7, 0x0, {}, 0xfd}, 0x18) connect$can_j1939(r6, &(0x7f0000000080)={0x1d, r7, 0x0, {0x0, 0xf0, 0x2}, 0x2}, 0x18) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000004c0)={0x0, @dev, @multicast1}, &(0x7f0000000500)=0xc) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000005c0)={'ip6tnl0\x00', &(0x7f0000000540)={'syztnl0\x00', 0x0, 0x4, 0x93, 0x89, 0xfffffffc, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00', 0x20, 0x700, 0x1, 0xfffffff9}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000680)={'syztnl1\x00', &(0x7f0000000800)={'syztnl0\x00', 0x0, 0x2f, 0x6, 0x6, 0x80, 0x30, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x80, 0x8000, 0x300000, 0xb96}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000740)={'gre0\x00', &(0x7f00000006c0)={'erspan0\x00', 0x0, 0x700, 0x7825, 0x6, 0x80000001, {{0xa, 0x4, 0x3, 0x0, 0x28, 0x67, 0x0, 0x6, 0x4, 0x0, @empty, @private=0xa010101, {[@rr={0x7, 0x13, 0x30, [@broadcast, @multicast2, @local, @loopback]}]}}}}}) getpeername$packet(r0, &(0x7f0000000780)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000007c0)=0x14) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'pimreg0\x00', 0x0}) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x0, 0x0, 0xe, 0x1}, @enum]}}, 0x0, 0x32}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r10, r9, 0x25, 0x0, @val=@netfilter={0x1, 0x0, 0x7}}, 0x20) 0s ago: executing program 4 (id=4826): r0 = socket$inet6(0xa, 0x80002, 0x0) getsockopt$inet6_udp_int(r0, 0x11, 0x66, 0x0, &(0x7f0000000b80)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xe, &(0x7f0000000d00)=ANY=[@ANYRESOCT=r0], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x400}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) kernel console output (not intermixed with test programs): iscuous mode [ 466.994251][T18293] veth0_macvtap: entered promiscuous mode [ 467.017435][T18293] veth1_macvtap: entered promiscuous mode [ 467.023370][T18450] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 467.077642][T18457] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 467.093258][T18293] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 467.182607][T18293] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 467.214731][T18458] geneve2: entered promiscuous mode [ 467.214757][T18458] geneve2: entered allmulticast mode [ 467.307782][ T7992] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.308774][ T7992] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.308845][ T7992] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.308988][ T7992] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.552580][ T7188] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 467.552606][ T7188] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 467.670890][ T7188] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 467.670923][ T7188] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 467.954665][T18486] 8021q: VLANs not supported on ip6_vti0 [ 467.973540][T16125] hid-generic 0005:0008:000B.0002: unknown main item tag 0x0 [ 467.973680][T16125] hid-generic 0005:0008:000B.0002: reserved main item tag 0xd [ 467.973711][T16125] hid-generic 0005:0008:000B.0002: unknown main item tag 0x0 [ 467.973737][T16125] hid-generic 0005:0008:000B.0002: unknown main item tag 0x0 [ 467.973763][T16125] hid-generic 0005:0008:000B.0002: unknown main item tag 0x0 [ 467.973789][T16125] hid-generic 0005:0008:000B.0002: unknown main item tag 0x0 [ 467.973814][T16125] hid-generic 0005:0008:000B.0002: unknown main item tag 0x0 [ 467.973840][T16125] hid-generic 0005:0008:000B.0002: unknown main item tag 0x0 [ 467.973879][T16125] hid-generic 0005:0008:000B.0002: unknown main item tag 0x0 [ 467.973905][T16125] hid-generic 0005:0008:000B.0002: unknown main item tag 0x0 [ 467.973951][T16125] hid-generic 0005:0008:000B.0002: unknown main item tag 0x1 [ 467.973977][T16125] hid-generic 0005:0008:000B.0002: item fetching failed at offset 25/78 [ 467.974730][T16125] hid-generic 0005:0008:000B.0002: probe with driver hid-generic failed with error -22 [ 468.160996][T18477] __nla_validate_parse: 11 callbacks suppressed [ 468.161021][T18477] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3248'. [ 468.233818][T18497] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3248'. [ 468.426800][ T4932] Bluetooth: hci2: command tx timeout [ 469.316480][T18533] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 469.442924][T18533] xt_CT: No such helper "netbios-ns" [ 469.820990][T18556] bond1: option resend_igmp: invalid value (32767) [ 469.821016][T18556] bond1: option resend_igmp: allowed values 0 - 255 [ 469.843896][T18566] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3268'. [ 469.843921][T18566] netlink: 14 bytes leftover after parsing attributes in process `syz.6.3268'. [ 469.863520][T18556] bond1 (unregistering): Released all slaves [ 469.912908][T18572] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3268'. [ 469.912932][T18572] netlink: 14 bytes leftover after parsing attributes in process `syz.6.3268'. [ 470.140807][T18577] bond1: invalid ARP target 0.0.0.0 specified for addition [ 470.140836][T18577] bond1: option arp_ip_target: invalid value (0) [ 470.144303][T18577] bond1 (unregistering): Released all slaves [ 470.207115][T18584] validate_nla: 1 callbacks suppressed [ 470.207137][T18584] netlink: 'syz.4.3274': attribute type 12 has an invalid length. [ 470.207152][T18584] netlink: 'syz.4.3274': attribute type 29 has an invalid length. [ 470.207165][T18584] netlink: 148 bytes leftover after parsing attributes in process `syz.4.3274'. [ 470.207182][T18584] netlink: 'syz.4.3274': attribute type 2 has an invalid length. [ 470.393749][T18590] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 470.409481][T18588] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 470.506608][ T4932] Bluetooth: hci2: command tx timeout [ 470.973909][T18615] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3281'. [ 471.573611][T18629] mac80211_hwsim hwsim38 : renamed from wlan1 (while UP) [ 471.834426][T18642] tipc: Started in network mode [ 471.834461][T18642] tipc: Node identity 7e39cbcda423, cluster identity 4711 [ 471.834632][T18642] tipc: Enabled bearer , priority 0 [ 471.835104][T18646] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3289'. [ 471.883745][T18642] syzkaller0: MTU too low for tipc bearer [ 471.883773][T18642] tipc: Disabling bearer [ 471.969348][T18649] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3290'. [ 472.760032][T18684] Bluetooth: hci0: unsupported parameter 5161 [ 472.760058][T18684] Bluetooth: hci0: unsupported parameter 8192 [ 472.760070][T18684] Bluetooth: hci0: unsupported parameter 5161 [ 472.760082][T18684] Bluetooth: hci0: unsupported parameter 8192 [ 473.126343][T18708] xt_hashlimit: size too large, truncated to 1048576 [ 473.205096][T18710] xt_hashlimit: size too large, truncated to 1048576 [ 473.767574][T18732] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 473.802167][T18732] __nla_validate_parse: 7 callbacks suppressed [ 473.802191][T18732] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3313'. [ 473.816653][T18732] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3313'. [ 473.922038][T18736] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3316'. [ 474.100883][T18750] netlink: 'syz.6.3320': attribute type 15 has an invalid length. [ 474.100909][T18750] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3320'. [ 474.141893][T18754] netlink: 'syz.4.3321': attribute type 9 has an invalid length. [ 474.141917][T18754] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3321'. [ 474.143951][T18754] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3321'. [ 474.154933][T18750] netlink: 'syz.6.3320': attribute type 15 has an invalid length. [ 474.154952][T18750] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3320'. [ 474.157159][ T7989] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 474.157203][ T7989] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 474.157235][ T7989] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 474.157267][ T7989] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 474.298025][T18754] vlan2: entered promiscuous mode [ 474.298051][T18754] gretap0: entered promiscuous mode [ 474.394084][T18760] netlink: 'syz.6.3324': attribute type 1 has an invalid length. [ 474.685987][T18775] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 474.964708][T18791] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5 [ 474.993581][T18793] openvswitch: netlink: nsh attr 1 has unexpected len 4 expected 8 [ 475.021145][T18793] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 477.732126][T18778] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 478.623654][T18872] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3346'. [ 478.623690][T18872] openvswitch: netlink: Missing key (keys=c0, expected=40300) [ 478.733055][T18881] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3346'. [ 478.803705][T18888] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3349'. [ 478.951109][T18892] netlink: 'syz.3.3352': attribute type 13 has an invalid length. [ 479.143831][T18911] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3354'. [ 479.297822][T18916] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3356'. [ 479.301982][T18916] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3356'. [ 479.592928][T18921] bond0: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 479.609795][T18921] bond0 (unregistering): Released all slaves [ 479.674467][T18934] netlink: 'syz.4.3361': attribute type 4 has an invalid length. [ 479.772325][T18939] raw_sendmsg: syz.6.3362 forgot to set AF_INET. Fix it! [ 479.849550][T18934] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3361'. [ 479.941695][T18946] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3364'. [ 480.040113][T18944] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3364'. [ 480.056820][T18952] netlink: 'syz.0.3365': attribute type 18 has an invalid length. [ 480.145471][ T7186] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 480.157280][T14152] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 480.158281][T14152] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 480.158314][T14152] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 480.222162][T18960] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3366'. [ 480.307823][T18957] netlink: 132 bytes leftover after parsing attributes in process `syz.6.3366'. [ 480.340264][T18968] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3367'. [ 481.006528][T19007] netlink: 'syz.0.3376': attribute type 10 has an invalid length. [ 481.035137][T19007] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 481.052969][T19007] netlink: 'syz.0.3376': attribute type 10 has an invalid length. [ 481.053107][T19007] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 481.053380][T19007] netlink: 'syz.0.3376': attribute type 10 has an invalid length. [ 481.053465][T19007] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 481.053770][T19007] netlink: 'syz.0.3376': attribute type 10 has an invalid length. [ 481.053854][T19007] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 481.054103][T19007] netlink: 'syz.0.3376': attribute type 10 has an invalid length. [ 481.054183][T19007] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 481.061026][T19007] netlink: 'syz.0.3376': attribute type 10 has an invalid length. [ 481.061144][T19007] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 481.061389][T19007] netlink: 'syz.0.3376': attribute type 10 has an invalid length. [ 481.061462][T19007] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 481.061740][T19007] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 481.062025][T19007] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 481.080496][T19007] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 481.080864][T19007] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 481.081164][T19007] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 481.081461][T19007] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 481.081739][T19007] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 481.082014][T19007] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 481.298526][T19019] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3380'. [ 481.695879][T19029] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 482.058986][T19064] FAULT_INJECTION: forcing a failure. [ 482.058986][T19064] name failslab, interval 1, probability 0, space 0, times 0 [ 482.059026][T19064] CPU: 0 UID: 0 PID: 19064 Comm: syz.2.3393 Not tainted syzkaller #0 PREEMPT(full) [ 482.059049][T19064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 482.059061][T19064] Call Trace: [ 482.059070][T19064] [ 482.059080][T19064] dump_stack_lvl+0xe8/0x150 [ 482.059116][T19064] should_fail_ex+0x410/0x560 [ 482.059147][T19064] should_failslab+0xa8/0x100 [ 482.059174][T19064] __kmalloc_cache_noprof+0xa3/0x600 [ 482.059197][T19064] ? __kmalloc_cache_noprof+0x14d/0x600 [ 482.059215][T19064] ? sctp_add_bind_addr+0x8c/0x370 [ 482.059248][T19064] ? sctp_add_bind_addr+0x8c/0x370 [ 482.059277][T19064] sctp_add_bind_addr+0x8c/0x370 [ 482.059305][T19064] sctp_copy_local_addr_list+0x31a/0x4e0 [ 482.059338][T19064] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 482.059369][T19064] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 482.059404][T19064] ? sctp_v4_is_any+0x35/0x60 [ 482.059424][T19064] ? sctp_copy_one_addr+0x93/0x360 [ 482.059457][T19064] sctp_bind_addr_copy+0xb3/0x3c0 [ 482.059488][T19064] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 482.059519][T19064] sctp_connect_new_asoc+0x2ff/0x6b0 [ 482.059547][T19064] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 482.059579][T19064] ? __local_bh_enable_ip+0xd6/0x140 [ 482.059604][T19064] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 482.059630][T19064] ? security_sctp_bind_connect+0x7e/0x2c0 [ 482.059656][T19064] sctp_sendmsg+0x159b/0x2d00 [ 482.059696][T19064] ? __pfx_sctp_sendmsg+0x10/0x10 [ 482.059726][T19064] ? __lock_acquire+0x747/0x2de0 [ 482.059773][T19064] ? aa_sock_msg_perm+0xfc/0x210 [ 482.059797][T19064] ? sock_rps_record_flow+0x19/0x350 [ 482.059823][T19064] ? inet_sendmsg+0x298/0x320 [ 482.059845][T19064] ? __pfx_inet_sendmsg+0x10/0x10 [ 482.059864][T19064] sock_sendmsg_nosec+0x10e/0x180 [ 482.059889][T19064] ____sys_sendmsg+0x54e/0x850 [ 482.059923][T19064] ? __pfx_____sys_sendmsg+0x10/0x10 [ 482.059962][T19064] ? import_iovec+0x73/0xa0 [ 482.059990][T19064] ___sys_sendmsg+0x2a5/0x360 [ 482.060015][T19064] ? __lock_acquire+0x747/0x2de0 [ 482.060042][T19064] ? __pfx____sys_sendmsg+0x10/0x10 [ 482.060076][T19064] ? kstrtouint+0x6e/0xe0 [ 482.060136][T19064] ? __fget_files+0x2a/0x420 [ 482.060163][T19064] ? __fget_files+0x3a2/0x420 [ 482.060201][T19064] __sys_sendmmsg+0x273/0x4d0 [ 482.060234][T19064] ? __pfx___sys_sendmmsg+0x10/0x10 [ 482.060269][T19064] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 482.060310][T19064] ? ksys_write+0x242/0x270 [ 482.060341][T19064] ? __pfx_ksys_write+0x10/0x10 [ 482.060376][T19064] __x64_sys_sendmmsg+0xa0/0xc0 [ 482.060406][T19064] do_syscall_64+0x166/0x520 [ 482.060428][T19064] ? trace_irq_disable+0x3b/0x140 [ 482.060448][T19064] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 482.060469][T19064] ? clear_bhb_loop+0x70/0xc0 [ 482.060494][T19064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 482.060514][T19064] RIP: 0033:0x7fa1cc59e159 [ 482.060534][T19064] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 482.060551][T19064] RSP: 002b:00007fa1cd408028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 482.060575][T19064] RAX: ffffffffffffffda RBX: 00007fa1cc825fa0 RCX: 00007fa1cc59e159 [ 482.060590][T19064] RDX: 0000000000000002 RSI: 0000200000000e40 RDI: 0000000000000003 [ 482.060603][T19064] RBP: 00007fa1cd408090 R08: 0000000000000000 R09: 0000000000000000 [ 482.060615][T19064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 482.060627][T19064] R13: 00007fa1cc826038 R14: 00007fa1cc825fa0 R15: 00007fff33ba37d8 [ 482.060661][T19064] [ 482.394720][T19068] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 482.810415][T19084] sock: sock_set_timeout: `syz.3.3397' (pid 19084) tries to set negative timeout [ 482.825743][ T4932] Bluetooth: hci6: unexpected cc 0x2003 length: 0 < 9 [ 482.929190][T19090] xt_REDIRECT: bad rangesize 26624. [ 483.204024][T19112] openvswitch: netlink: Missing key (keys=c0, expected=880) [ 483.290157][T19118] macvlan0: entered promiscuous mode [ 483.630034][ T4932] Bluetooth: hci0: command 0x0c20 tx timeout [ 483.632474][T19088] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 484.024283][T19146] validate_nla: 10 callbacks suppressed [ 484.024305][T19146] netlink: 'syz.2.3418': attribute type 4 has an invalid length. [ 484.175133][T19153] __nla_validate_parse: 4 callbacks suppressed [ 484.175155][T19153] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3421'. [ 484.274829][T19160] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3424'. [ 484.276304][T19161] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3424'. [ 484.342677][T19165] veth0: entered promiscuous mode [ 484.359371][T19164] veth0: left promiscuous mode [ 484.441651][T19171] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3428'. [ 484.443309][T19170] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 484.455170][T19170] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 484.470678][T19170] ip_tables: iptables: counters copy to user failed while replacing table [ 484.484585][T19173] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3430'. [ 484.487586][T16874] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 484.512703][T19173] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3430'. [ 484.556221][T19173] syzkaller0: entered promiscuous mode [ 484.557461][T19173] syzkaller0: entered allmulticast mode [ 484.579338][T19173] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3430'. [ 484.829824][T16874] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 484.954763][T19193] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3436'. [ 484.967793][T19197] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3438'. [ 485.123688][T19197] ipvlan2: entered allmulticast mode [ 485.123868][T19197] syz_tun: entered allmulticast mode [ 485.301577][T14152] IPVS: starting estimator thread 0... [ 485.400165][T19214] IPVS: using max 23 ests per chain, 55200 per kthread [ 485.490515][T19224] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3444'. [ 486.521754][T19264] netlink: 'syz.4.3452': attribute type 1 has an invalid length. [ 486.894473][ T7188] IPVS: starting estimator thread 0... [ 486.976587][T19286] IPVS: using max 23 ests per chain, 55200 per kthread [ 487.042800][T19296] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 487.160105][T19303] IPVS: Unknown mcast interface: dvmrp1 [ 487.415664][T19313] netlink: 'syz.4.3462': attribute type 1 has an invalid length. [ 487.454225][T19320] netlink: 'syz.3.3467': attribute type 12 has an invalid length. [ 487.552633][T19323] bond1: (slave geneve3): making interface the new active one [ 487.555043][T19323] bond1: (slave geneve3): Enslaving as an active interface with an up link [ 487.666623][T14164] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 487.668066][T14175] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 487.668112][T14175] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 487.668148][T14175] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 488.123710][T19349] Failure starting scanning (-16) [ 488.202406][T19355] --map-set only usable from mangle table [ 489.214942][T19408] __nla_validate_parse: 75 callbacks suppressed [ 489.214965][T19408] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3492'. [ 489.502719][T19427] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3501'. [ 489.652723][T19431] bond3: (slave bond_slave_0): Device is not our slave [ 489.652751][T19431] bond3: option active_slave: invalid value (bond_slave_0) [ 489.657588][T19431] bond3 (unregistering): Released all slaves [ 489.777617][T19448] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3505'. [ 489.785033][T19433] bond1: entered promiscuous mode [ 489.850926][T19435] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3502'. [ 489.886567][T19447] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 489.918809][T19453] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3507'. [ 490.060709][T19462] netlink: 240 bytes leftover after parsing attributes in process `syz.0.3508'. [ 490.061463][T19462] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3508'. [ 490.063190][T19462] x_tables: duplicate underflow at hook 1 [ 490.064666][T19462] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 490.092352][T19463] netlink: 'syz.6.3509': attribute type 2 has an invalid length. [ 490.223217][T19467] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3510'. [ 492.899374][T19453] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 493.131664][T19497] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3517'. [ 493.257430][T19502] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 493.348136][T19513] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3520'. [ 493.804706][T19539] rB: renamed from lo (while UP) [ 494.514419][T19563] 8021q: adding VLAN 0 to HW filter on device bond0 [ 494.620709][T19566] bond0: (slave geneve2): making interface the new active one [ 494.638512][T19566] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 494.813095][T19593] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3544'. [ 494.987427][T19586] syzkaller0: entered promiscuous mode [ 494.987455][T19586] syzkaller0: entered allmulticast mode [ 495.009884][T19600] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 495.039716][T19603] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3547'. [ 495.187307][T19612] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3550'. [ 495.209987][T19614] netlink: 'syz.0.3549': attribute type 2 has an invalid length. [ 495.382382][T19624] netlink: 'syz.0.3552': attribute type 10 has an invalid length. [ 497.534208][T19624] syz_tun: entered promiscuous mode [ 497.547197][T19624] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 497.867575][ C1] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 497.894381][T19648] xt_NETMAP: bad rangesize 37. [ 497.894660][T19648] netlink: 'syz.6.3560': attribute type 10 has an invalid length. [ 497.894689][T19648] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 497.928761][T19648] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3560'. [ 497.966390][T19661] xt_NETMAP: bad rangesize 37. [ 497.966590][T19648] netlink: 'syz.6.3560': attribute type 10 has an invalid length. [ 497.966619][T19648] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 497.970322][T19659] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3560'. [ 497.994966][T19664] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3563'. [ 498.359468][T19673] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3567'. [ 498.398392][T19676] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3567'. [ 498.403353][T19676] bridge0: port 2(bridge_slave_1) entered disabled state [ 498.405641][T19676] bridge0: port 1(bridge_slave_0) entered disabled state [ 498.688670][T19687] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3570'. [ 498.920878][T19693] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3573'. [ 498.985753][T19693] team0 (unregistering): Port device team_slave_0 removed [ 499.017509][T19693] team0 (unregistering): Port device team_slave_1 removed [ 499.063450][T19700] tun0: tun_chr_ioctl cmd 1074025675 [ 499.063479][T19700] tun0: persist disabled [ 499.354065][T19709] openvswitch: netlink: Flow actions attr not present in new flow. [ 499.488279][ T7186] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 499.502876][T19714] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 499.502910][T19714] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 499.502942][T19714] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 499.518103][T19714] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 499.657929][T14164] smbdirect: ib_dev[syz2] removed [ 502.318356][T19715] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 502.321128][T19722] netlink: 'syz.3.3581': attribute type 1 has an invalid length. [ 502.321151][T19722] __nla_validate_parse: 4 callbacks suppressed [ 502.321164][T19722] netlink: 240 bytes leftover after parsing attributes in process `syz.3.3581'. [ 502.321179][T19722] netlink: 'syz.3.3581': attribute type 1 has an invalid length. [ 502.539321][T19752] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3590'. [ 502.540735][T19749] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3590'. [ 502.611071][T19753] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3588'. [ 502.630146][T19749] macvtap1: entered promiscuous mode [ 502.630163][T19749] vlan0: entered promiscuous mode [ 502.630542][T19749] macvtap1: entered allmulticast mode [ 502.632129][T19749] vlan0: entered allmulticast mode [ 502.632142][T19749] veth0_vlan: entered allmulticast mode [ 502.660495][T19764] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3589'. [ 502.732640][T19763] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 503.034128][T19775] netlink: 104 bytes leftover after parsing attributes in process `syz.6.3595'. [ 503.045895][T19774] netlink: 104 bytes leftover after parsing attributes in process `syz.6.3595'. [ 503.130376][T19782] 8021q: adding VLAN 0 to HW filter on device bond2 [ 503.187552][T19797] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3600'. [ 503.197774][T19792] 8021q: adding VLAN 0 to HW filter on device bond3 [ 503.757511][T19824] netlink: 220 bytes leftover after parsing attributes in process `syz.2.3610'. [ 503.757535][T19824] tc_dump_action: action bad kind [ 504.593118][T19880] ip_tables: iptables: counters copy to user failed while replacing table [ 504.762828][T19886] netlink: 'syz.2.3626': attribute type 1 has an invalid length. [ 504.822527][T19886] bond1: entered promiscuous mode [ 504.822997][T19886] 8021q: adding VLAN 0 to HW filter on device bond1 [ 504.864020][T19892] tipc: Started in network mode [ 504.864052][T19892] tipc: Node identity aaaaaaaaaa1, cluster identity 4711 [ 504.864535][T19892] tipc: Enabled bearer , priority 8 [ 504.936001][T19886] 8021q: adding VLAN 0 to HW filter on device bond1 [ 504.936454][T19886] bond1: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 504.936474][T19886] bond1: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 504.979833][T19886] bond1: (slave ip6gre2): making interface the new active one [ 504.979860][T19886] ip6gre2: entered promiscuous mode [ 504.983047][T19886] bond1: (slave ip6gre2): Enslaving as an active interface with an up link [ 505.152365][T19906] sctp: [Deprecated]: syz.2.3630 (pid 19906) Use of struct sctp_assoc_value in delayed_ack socket option. [ 505.152365][T19906] Use struct sctp_sack_info instead [ 505.290238][T19914] netlink: 'syz.6.3632': attribute type 1 has an invalid length. [ 505.475705][T19923] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3636'. [ 505.718461][T19934] netlink: 'syz.0.3641': attribute type 1 has an invalid length. [ 505.739803][T19938] netlink: 'syz.0.3641': attribute type 1 has an invalid length. [ 505.884019][T19949] FAULT_INJECTION: forcing a failure. [ 505.884019][T19949] name failslab, interval 1, probability 0, space 0, times 0 [ 505.884052][T19949] CPU: 0 UID: 0 PID: 19949 Comm: syz.3.3644 Not tainted syzkaller #0 PREEMPT(full) [ 505.884075][T19949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 505.884087][T19949] Call Trace: [ 505.884095][T19949] [ 505.884105][T19949] dump_stack_lvl+0xe8/0x150 [ 505.884139][T19949] should_fail_ex+0x410/0x560 [ 505.884169][T19949] should_failslab+0xa8/0x100 [ 505.884195][T19949] __kmalloc_cache_noprof+0xa3/0x600 [ 505.884221][T19949] ? __kmalloc_cache_noprof+0x14d/0x600 [ 505.884239][T19949] ? sctp_add_bind_addr+0x8c/0x370 [ 505.884267][T19949] ? sctp_add_bind_addr+0x8c/0x370 [ 505.884303][T19949] sctp_add_bind_addr+0x8c/0x370 [ 505.884336][T19949] sctp_copy_local_addr_list+0x31a/0x4e0 [ 505.884368][T19949] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 505.884396][T19949] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 505.884430][T19949] ? sctp_v4_is_any+0x35/0x60 [ 505.884449][T19949] ? sctp_copy_one_addr+0x93/0x360 [ 505.884481][T19949] sctp_bind_addr_copy+0xb3/0x3c0 [ 505.884521][T19949] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 505.884551][T19949] sctp_connect_new_asoc+0x2ff/0x6b0 [ 505.884578][T19949] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 505.884607][T19949] ? __local_bh_enable_ip+0xd6/0x140 [ 505.884631][T19949] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 505.884657][T19949] ? security_sctp_bind_connect+0x7e/0x2c0 [ 505.884681][T19949] sctp_sendmsg+0x159b/0x2d00 [ 505.884718][T19949] ? __pfx_sctp_sendmsg+0x10/0x10 [ 505.884747][T19949] ? __lock_acquire+0x747/0x2de0 [ 505.884783][T19949] ? aa_sock_msg_perm+0xfc/0x210 [ 505.884806][T19949] ? sock_rps_record_flow+0x19/0x350 [ 505.884830][T19949] ? inet_sendmsg+0x298/0x320 [ 505.884851][T19949] ? __pfx_inet_sendmsg+0x10/0x10 [ 505.884868][T19949] sock_sendmsg_nosec+0x10e/0x180 [ 505.884892][T19949] ____sys_sendmsg+0x54e/0x850 [ 505.884924][T19949] ? __pfx_____sys_sendmsg+0x10/0x10 [ 505.884959][T19949] ? import_iovec+0x73/0xa0 [ 505.884986][T19949] ___sys_sendmsg+0x2a5/0x360 [ 505.885009][T19949] ? __lock_acquire+0x747/0x2de0 [ 505.885034][T19949] ? __pfx____sys_sendmsg+0x10/0x10 [ 505.885063][T19949] ? kstrtouint+0x6e/0xe0 [ 505.885122][T19949] ? __fget_files+0x2a/0x420 [ 505.885146][T19949] ? __fget_files+0x3a2/0x420 [ 505.885185][T19949] __sys_sendmmsg+0x273/0x4d0 [ 505.885216][T19949] ? __pfx___sys_sendmmsg+0x10/0x10 [ 505.885250][T19949] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 505.885292][T19949] ? ksys_write+0x242/0x270 [ 505.885322][T19949] ? __pfx_ksys_write+0x10/0x10 [ 505.885360][T19949] __x64_sys_sendmmsg+0xa0/0xc0 [ 505.885390][T19949] do_syscall_64+0x166/0x520 [ 505.885412][T19949] ? trace_irq_disable+0x3b/0x140 [ 505.885431][T19949] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.885451][T19949] ? clear_bhb_loop+0x70/0xc0 [ 505.885477][T19949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.885526][T19949] RIP: 0033:0x7f7a71b9e159 [ 505.885546][T19949] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 505.885564][T19949] RSP: 002b:00007f7a72a37028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 505.885587][T19949] RAX: ffffffffffffffda RBX: 00007f7a71e25fa0 RCX: 00007f7a71b9e159 [ 505.885602][T19949] RDX: 0000000000000002 RSI: 0000200000000e40 RDI: 0000000000000003 [ 505.885615][T19949] RBP: 00007f7a72a37090 R08: 0000000000000000 R09: 0000000000000000 [ 505.885628][T19949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 505.885640][T19949] R13: 00007f7a71e26038 R14: 00007f7a71e25fa0 R15: 00007ffc70501148 [ 505.885675][T19949] [ 505.979523][ T5781] tipc: Node number set to 12233386 [ 506.192276][T19955] netlink: 'syz.6.3646': attribute type 1 has an invalid length. [ 506.380399][T19965] bridge0: port 2(bridge_slave_1) entered blocking state [ 506.380557][T19965] bridge0: port 2(bridge_slave_1) entered forwarding state [ 506.380943][T19965] bridge0: port 1(bridge_slave_0) entered blocking state [ 506.381075][T19965] bridge0: port 1(bridge_slave_0) entered forwarding state [ 506.412790][ T5763] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 506.474181][T19965] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 506.502716][T19965] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 506.540892][T19955] bridge1: entered promiscuous mode [ 506.551711][T19955] bond3: (slave bridge1): making interface the new active one [ 506.559379][T19955] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 506.617504][T19962] bridge2: entered promiscuous mode [ 506.645561][T19962] bond3: (slave bridge2): Enslaving as a backup interface with an up link [ 506.645639][T19967] v: renamed from veth0_vlan (while UP) [ 506.724709][T19981] xfrm1: entered promiscuous mode [ 506.724732][T19981] xfrm1: entered allmulticast mode [ 506.737624][ T7186] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 506.738686][ T7186] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 506.738725][ T7186] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 506.738756][ T7186] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 506.817989][ T1226] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 506.918533][T19994] netlink: Unknown conntrack attr (type=1542, max=9) [ 506.918577][T19994] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 506.920439][T19985] netlink: 'syz.2.3654': attribute type 10 has an invalid length. [ 507.002360][T19985] .`: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 507.026992][T19997] tunl0: entered promiscuous mode [ 507.034385][T19997] netlink: 'syz.4.3657': attribute type 3 has an invalid length. [ 507.182425][T20007] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 507.187063][T20009] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 507.210692][T20008] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 507.228920][T20007] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 507.249782][T20019] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 507.287831][T20013] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 507.527464][T20032] netlink: 'syz.2.3666': attribute type 3 has an invalid length. [ 507.636747][T20035] syzkaller0: left promiscuous mode [ 507.636774][T20035] syzkaller0: left allmulticast mode [ 507.741195][T20037] __nla_validate_parse: 9 callbacks suppressed [ 507.741264][T20037] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3668'. [ 507.741285][T20037] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3668'. [ 507.780017][ T4932] Bluetooth: hci6: ISO packet too small [ 507.972486][T20043] tipc: Can't bind to reserved service type 2 [ 508.044257][T20046] syzkaller1: entered promiscuous mode [ 508.044282][T20046] syzkaller1: entered allmulticast mode [ 508.058235][T20047] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3670'. [ 508.116137][T20043] netlink: Failed to add %pB helper -22 [ 508.116201][T20043] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 508.664969][T20069] ipt_REJECT: TCP_RESET invalid for non-tcp [ 508.860504][T20081] netlink: 'syz.0.3683': attribute type 11 has an invalid length. [ 508.863435][T20080] xt_l2tp: v2 doesn't support IP mode [ 508.894890][T20085] netlink: 'syz.0.3683': attribute type 11 has an invalid length. [ 508.915866][T20086] FAULT_INJECTION: forcing a failure. [ 508.915866][T20086] name failslab, interval 1, probability 0, space 0, times 0 [ 508.915901][T20086] CPU: 1 UID: 0 PID: 20086 Comm: syz.2.3685 Not tainted syzkaller #0 PREEMPT(full) [ 508.915922][T20086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 508.915933][T20086] Call Trace: [ 508.915942][T20086] [ 508.915960][T20086] dump_stack_lvl+0xe8/0x150 [ 508.915997][T20086] should_fail_ex+0x410/0x560 [ 508.916026][T20086] should_failslab+0xa8/0x100 [ 508.916055][T20086] __kmalloc_cache_noprof+0xa3/0x600 [ 508.916077][T20086] ? __kmalloc_cache_noprof+0x14d/0x600 [ 508.916096][T20086] ? sctp_add_bind_addr+0x8c/0x370 [ 508.916128][T20086] ? sctp_add_bind_addr+0x8c/0x370 [ 508.916165][T20086] sctp_add_bind_addr+0x8c/0x370 [ 508.916199][T20086] sctp_copy_local_addr_list+0x31a/0x4e0 [ 508.916230][T20086] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 508.916260][T20086] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 508.916293][T20086] ? sctp_v4_is_any+0x35/0x60 [ 508.916312][T20086] ? sctp_copy_one_addr+0x93/0x360 [ 508.916344][T20086] sctp_bind_addr_copy+0xb3/0x3c0 [ 508.916374][T20086] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 508.916405][T20086] sctp_connect_new_asoc+0x2ff/0x6b0 [ 508.916432][T20086] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 508.916463][T20086] ? __local_bh_enable_ip+0xd6/0x140 [ 508.916489][T20086] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 508.916515][T20086] ? security_sctp_bind_connect+0x7e/0x2c0 [ 508.916540][T20086] sctp_sendmsg+0x159b/0x2d00 [ 508.916583][T20086] ? __pfx_sctp_sendmsg+0x10/0x10 [ 508.916611][T20086] ? __lock_acquire+0x747/0x2de0 [ 508.916648][T20086] ? aa_sock_msg_perm+0xfc/0x210 [ 508.916671][T20086] ? sock_rps_record_flow+0x19/0x350 [ 508.916698][T20086] ? inet_sendmsg+0x298/0x320 [ 508.916720][T20086] ? __pfx_inet_sendmsg+0x10/0x10 [ 508.916739][T20086] sock_sendmsg_nosec+0x10e/0x180 [ 508.916766][T20086] ____sys_sendmsg+0x54e/0x850 [ 508.916800][T20086] ? __pfx_____sys_sendmsg+0x10/0x10 [ 508.916838][T20086] ? import_iovec+0x73/0xa0 [ 508.916868][T20086] ___sys_sendmsg+0x2a5/0x360 [ 508.916895][T20086] ? __lock_acquire+0x747/0x2de0 [ 508.916921][T20086] ? __pfx____sys_sendmsg+0x10/0x10 [ 508.916963][T20086] ? kstrtouint+0x6e/0xe0 [ 508.917026][T20086] ? __fget_files+0x2a/0x420 [ 508.917051][T20086] ? __fget_files+0x3a2/0x420 [ 508.917088][T20086] __sys_sendmmsg+0x273/0x4d0 [ 508.917121][T20086] ? __pfx___sys_sendmmsg+0x10/0x10 [ 508.917154][T20086] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 508.917196][T20086] ? ksys_write+0x242/0x270 [ 508.917225][T20086] ? __pfx_ksys_write+0x10/0x10 [ 508.917260][T20086] __x64_sys_sendmmsg+0xa0/0xc0 [ 508.917288][T20086] do_syscall_64+0x166/0x520 [ 508.917310][T20086] ? trace_irq_disable+0x3b/0x140 [ 508.917330][T20086] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 508.917349][T20086] ? clear_bhb_loop+0x70/0xc0 [ 508.917372][T20086] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 508.917391][T20086] RIP: 0033:0x7fa1cc59e159 [ 508.917412][T20086] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 508.917430][T20086] RSP: 002b:00007fa1cd408028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 508.917452][T20086] RAX: ffffffffffffffda RBX: 00007fa1cc825fa0 RCX: 00007fa1cc59e159 [ 508.917465][T20086] RDX: 0000000000000002 RSI: 0000200000000e40 RDI: 0000000000000003 [ 508.917478][T20086] RBP: 00007fa1cd408090 R08: 0000000000000000 R09: 0000000000000000 [ 508.917491][T20086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 508.917503][T20086] R13: 00007fa1cc826038 R14: 00007fa1cc825fa0 R15: 00007fff33ba37d8 [ 508.917538][T20086] [ 509.169322][T20093] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3686'. [ 509.243969][T20095] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3687'. [ 509.368617][T20095] bond2 (unregistering): Released all slaves [ 509.422157][T20107] xt_addrtype: ipv6 does not support BROADCAST matching [ 509.438064][T20109] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3687'. [ 509.484731][T20107] xt_addrtype: ipv6 does not support BROADCAST matching [ 509.582525][T20109] bond2 (unregistering): Released all slaves [ 509.752470][T20111] veth5: entered allmulticast mode [ 509.753047][T20126] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3695'. [ 509.863826][T20130] FAULT_INJECTION: forcing a failure. [ 509.863826][T20130] name failslab, interval 1, probability 0, space 0, times 0 [ 509.863863][T20130] CPU: 1 UID: 0 PID: 20130 Comm: syz.4.3697 Not tainted syzkaller #0 PREEMPT(full) [ 509.863886][T20130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 509.863898][T20130] Call Trace: [ 509.863907][T20130] [ 509.863915][T20130] dump_stack_lvl+0xe8/0x150 [ 509.863951][T20130] should_fail_ex+0x410/0x560 [ 509.863979][T20130] should_failslab+0xa8/0x100 [ 509.864015][T20130] __kmalloc_cache_noprof+0xa3/0x600 [ 509.864039][T20130] ? __kmalloc_cache_noprof+0x14d/0x600 [ 509.864058][T20130] ? sctp_add_bind_addr+0x8c/0x370 [ 509.864085][T20130] ? sctp_add_bind_addr+0x8c/0x370 [ 509.864125][T20130] sctp_add_bind_addr+0x8c/0x370 [ 509.864158][T20130] sctp_copy_local_addr_list+0x31a/0x4e0 [ 509.864191][T20130] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 509.864220][T20130] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 509.864253][T20130] ? sctp_v4_is_any+0x35/0x60 [ 509.864271][T20130] ? sctp_copy_one_addr+0x93/0x360 [ 509.864304][T20130] sctp_bind_addr_copy+0xb3/0x3c0 [ 509.864334][T20130] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 509.864372][T20130] sctp_connect_new_asoc+0x2ff/0x6b0 [ 509.864401][T20130] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 509.864432][T20130] ? __local_bh_enable_ip+0xd6/0x140 [ 509.864456][T20130] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 509.864483][T20130] ? security_sctp_bind_connect+0x7e/0x2c0 [ 509.864507][T20130] sctp_sendmsg+0x159b/0x2d00 [ 509.864546][T20130] ? __pfx_sctp_sendmsg+0x10/0x10 [ 509.864575][T20130] ? __lock_acquire+0x747/0x2de0 [ 509.864613][T20130] ? aa_sock_msg_perm+0xfc/0x210 [ 509.864636][T20130] ? sock_rps_record_flow+0x19/0x350 [ 509.864661][T20130] ? inet_sendmsg+0x298/0x320 [ 509.864684][T20130] ? __pfx_inet_sendmsg+0x10/0x10 [ 509.864703][T20130] sock_sendmsg_nosec+0x10e/0x180 [ 509.864728][T20130] ____sys_sendmsg+0x54e/0x850 [ 509.864763][T20130] ? __pfx_____sys_sendmsg+0x10/0x10 [ 509.864801][T20130] ? import_iovec+0x73/0xa0 [ 509.864831][T20130] ___sys_sendmsg+0x2a5/0x360 [ 509.864855][T20130] ? __lock_acquire+0x747/0x2de0 [ 509.864880][T20130] ? __pfx____sys_sendmsg+0x10/0x10 [ 509.864913][T20130] ? kstrtouint+0x6e/0xe0 [ 509.864975][T20130] ? __fget_files+0x2a/0x420 [ 509.865011][T20130] ? __fget_files+0x3a2/0x420 [ 509.865050][T20130] __sys_sendmmsg+0x273/0x4d0 [ 509.865082][T20130] ? __pfx___sys_sendmmsg+0x10/0x10 [ 509.865120][T20130] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 509.865163][T20130] ? ksys_write+0x242/0x270 [ 509.865196][T20130] ? __pfx_ksys_write+0x10/0x10 [ 509.865231][T20130] __x64_sys_sendmmsg+0xa0/0xc0 [ 509.865259][T20130] do_syscall_64+0x166/0x520 [ 509.865281][T20130] ? trace_irq_disable+0x3b/0x140 [ 509.865301][T20130] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 509.865322][T20130] ? clear_bhb_loop+0x70/0xc0 [ 509.865346][T20130] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 509.865366][T20130] RIP: 0033:0x7f50af59e159 [ 509.865386][T20130] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 509.865403][T20130] RSP: 002b:00007f50b048d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 509.865426][T20130] RAX: ffffffffffffffda RBX: 00007f50af825fa0 RCX: 00007f50af59e159 [ 509.865441][T20130] RDX: 0000000000000002 RSI: 0000200000000e40 RDI: 0000000000000003 [ 509.865454][T20130] RBP: 00007f50b048d090 R08: 0000000000000000 R09: 0000000000000000 [ 509.865466][T20130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 509.865479][T20130] R13: 00007f50af826038 R14: 00007f50af825fa0 R15: 00007fff7f446e78 [ 509.865512][T20130] [ 510.429878][T20146] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3706'. [ 510.590520][T20150] ipvlan2: entered allmulticast mode [ 510.590545][T20150] virt_wifi0: entered allmulticast mode [ 510.597330][T20150] batman_adv: batadv0: Adding interface: ipvlan2 [ 510.597347][T20150] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 510.597374][T20150] batman_adv: batadv0: Interface activated: ipvlan2 [ 510.664873][T20157] FAULT_INJECTION: forcing a failure. [ 510.664873][T20157] name failslab, interval 1, probability 0, space 0, times 0 [ 510.664909][T20157] CPU: 0 UID: 0 PID: 20157 Comm: syz.3.3708 Not tainted syzkaller #0 PREEMPT(full) [ 510.664932][T20157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 510.664953][T20157] Call Trace: [ 510.664962][T20157] [ 510.664971][T20157] dump_stack_lvl+0xe8/0x150 [ 510.665011][T20157] should_fail_ex+0x410/0x560 [ 510.665041][T20157] should_failslab+0xa8/0x100 [ 510.665070][T20157] __kmalloc_cache_noprof+0xa3/0x600 [ 510.665092][T20157] ? __kmalloc_cache_noprof+0x14d/0x600 [ 510.665110][T20157] ? sctp_add_bind_addr+0x8c/0x370 [ 510.665138][T20157] ? sctp_add_bind_addr+0x8c/0x370 [ 510.665175][T20157] sctp_add_bind_addr+0x8c/0x370 [ 510.665210][T20157] sctp_copy_local_addr_list+0x31a/0x4e0 [ 510.665242][T20157] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 510.665271][T20157] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 510.665307][T20157] ? sctp_v4_is_any+0x35/0x60 [ 510.665325][T20157] ? sctp_copy_one_addr+0x93/0x360 [ 510.665357][T20157] sctp_bind_addr_copy+0xb3/0x3c0 [ 510.665387][T20157] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 510.665418][T20157] sctp_connect_new_asoc+0x2ff/0x6b0 [ 510.665445][T20157] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 510.665477][T20157] ? __local_bh_enable_ip+0xd6/0x140 [ 510.665502][T20157] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 510.665528][T20157] ? security_sctp_bind_connect+0x7e/0x2c0 [ 510.665554][T20157] sctp_sendmsg+0x159b/0x2d00 [ 510.665596][T20157] ? __pfx_sctp_sendmsg+0x10/0x10 [ 510.665626][T20157] ? __lock_acquire+0x747/0x2de0 [ 510.665664][T20157] ? aa_sock_msg_perm+0xfc/0x210 [ 510.665688][T20157] ? sock_rps_record_flow+0x19/0x350 [ 510.665713][T20157] ? inet_sendmsg+0x298/0x320 [ 510.665736][T20157] ? __pfx_inet_sendmsg+0x10/0x10 [ 510.665754][T20157] sock_sendmsg_nosec+0x10e/0x180 [ 510.665780][T20157] ____sys_sendmsg+0x54e/0x850 [ 510.665812][T20157] ? __pfx_____sys_sendmsg+0x10/0x10 [ 510.665849][T20157] ? import_iovec+0x73/0xa0 [ 510.665878][T20157] ___sys_sendmsg+0x2a5/0x360 [ 510.665902][T20157] ? __lock_acquire+0x747/0x2de0 [ 510.665928][T20157] ? __pfx____sys_sendmsg+0x10/0x10 [ 510.665968][T20157] ? kstrtouint+0x6e/0xe0 [ 510.666030][T20157] ? __fget_files+0x2a/0x420 [ 510.666055][T20157] ? __fget_files+0x3a2/0x420 [ 510.666094][T20157] __sys_sendmmsg+0x273/0x4d0 [ 510.666127][T20157] ? __pfx___sys_sendmmsg+0x10/0x10 [ 510.666165][T20157] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 510.666207][T20157] ? ksys_write+0x242/0x270 [ 510.666239][T20157] ? __pfx_ksys_write+0x10/0x10 [ 510.666275][T20157] __x64_sys_sendmmsg+0xa0/0xc0 [ 510.666305][T20157] do_syscall_64+0x166/0x520 [ 510.666328][T20157] ? trace_irq_disable+0x3b/0x140 [ 510.666347][T20157] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.666366][T20157] ? clear_bhb_loop+0x70/0xc0 [ 510.666391][T20157] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.666410][T20157] RIP: 0033:0x7f7a71b9e159 [ 510.666429][T20157] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 510.666444][T20157] RSP: 002b:00007f7a72a37028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 510.666468][T20157] RAX: ffffffffffffffda RBX: 00007f7a71e25fa0 RCX: 00007f7a71b9e159 [ 510.666482][T20157] RDX: 0000000000000002 RSI: 0000200000000e40 RDI: 0000000000000003 [ 510.666495][T20157] RBP: 00007f7a72a37090 R08: 0000000000000000 R09: 0000000000000000 [ 510.666507][T20157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 510.666519][T20157] R13: 00007f7a71e26038 R14: 00007f7a71e25fa0 R15: 00007ffc70501148 [ 510.666555][T20157] [ 510.669884][T20150] ipvlan3: entered allmulticast mode [ 510.722899][T20150] batman_adv: batadv0: Adding interface: ipvlan3 [ 510.722915][T20150] batman_adv: batadv0: The MTU of interface ipvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 510.722941][T20150] batman_adv: The newly added mac address (72:c5:2e:62:63:13) already exists on: ipvlan2 [ 510.722955][T20150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.722967][T20150] batman_adv: batadv0: Interface activated: ipvlan3 [ 510.986703][T20165] netlink: 208 bytes leftover after parsing attributes in process `syz.0.3710'. [ 511.112346][T20169] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3711'. [ 511.401697][T20170] syzkaller1: entered promiscuous mode [ 511.401718][T20170] syzkaller1: entered allmulticast mode [ 512.094524][T20214] macvlan1: entered allmulticast mode [ 512.201853][T20221] openvswitch: netlink: Duplicate key (type 0). [ 512.418693][T20224] l2tp_ppp: sess 2/0: no socket in recv [ 512.701890][T20240] syzkaller1: entered promiscuous mode [ 512.701914][T20240] syzkaller1: entered allmulticast mode [ 512.704679][T20244] netlink: 'syz.2.3729': attribute type 4 has an invalid length. [ 512.730055][T20244] netlink: 'syz.2.3729': attribute type 4 has an invalid length. [ 513.081840][T20258] __nla_validate_parse: 3 callbacks suppressed [ 513.081864][T20258] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3735'. [ 513.092741][T20261] netlink: 104 bytes leftover after parsing attributes in process `syz.6.3733'. [ 513.425162][T20270] bond4 (unregistering): Released all slaves [ 513.729112][T20298] xt_TPROXY: Can be used only with -p tcp or -p udp [ 513.829089][T20303] bond2: option fail_over_mac: invalid value (16) [ 513.833435][T20303] bond2 (unregistering): Released all slaves [ 514.423196][T20331] netlink: 'syz.2.3751': attribute type 6 has an invalid length. [ 514.628120][ T5277] veth1_vlan: left promiscuous mode [ 514.798528][T20352] hsr0: entered allmulticast mode [ 514.798553][T20352] hsr_slave_0: entered allmulticast mode [ 514.798571][T20352] hsr_slave_1: entered allmulticast mode [ 514.952407][T20362] netlink: 'syz.6.3757': attribute type 23 has an invalid length. [ 515.084757][T20362] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3757'. [ 515.927779][T20423] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3767'. [ 515.927808][T20423] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3767'. [ 516.282967][T20438] sctp: [Deprecated]: syz.6.3768 (pid 20438) Use of struct sctp_assoc_value in delayed_ack socket option. [ 516.282967][T20438] Use struct sctp_sack_info instead [ 516.611850][T20452] rdma_op ffff888028b6e238 conn xmit_rdma 0000000000000000 [ 516.678369][T20447] bond4: Unable to set peer notification delay as MII monitoring is disabled [ 516.697455][T20447] bond4 (unregistering): Released all slaves [ 517.094810][T20480] netlink: 1092 bytes leftover after parsing attributes in process `syz.6.3778'. [ 517.237865][T20486] pim6reg: entered allmulticast mode [ 517.298441][T20482] netlink: 84 bytes leftover after parsing attributes in process `syz.4.3777'. [ 517.315970][T20482] netlink: 84 bytes leftover after parsing attributes in process `syz.4.3777'. [ 517.325695][T20486] pim6reg: left allmulticast mode [ 517.738073][T20514] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3787'. [ 517.738104][T20514] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3787'. [ 517.745312][T20514] netlink: 'syz.3.3787': attribute type 1 has an invalid length. [ 517.803752][T20514] bond1: entered promiscuous mode [ 517.803821][T20514] bond1: entered allmulticast mode [ 517.804187][T20514] 8021q: adding VLAN 0 to HW filter on device bond1 [ 517.839531][T20518] erspan1: entered allmulticast mode [ 517.851195][T20519] FAULT_INJECTION: forcing a failure. [ 517.851195][T20519] name failslab, interval 1, probability 0, space 0, times 0 [ 517.851226][T20519] CPU: 1 UID: 0 PID: 20519 Comm: syz.0.3789 Not tainted syzkaller #0 PREEMPT(full) [ 517.851248][T20519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 517.851259][T20519] Call Trace: [ 517.851266][T20519] [ 517.851275][T20519] dump_stack_lvl+0xe8/0x150 [ 517.851317][T20519] should_fail_ex+0x410/0x560 [ 517.851346][T20519] should_failslab+0xa8/0x100 [ 517.851373][T20519] __kmalloc_cache_noprof+0xa3/0x600 [ 517.851394][T20519] ? __kmalloc_cache_noprof+0x14d/0x600 [ 517.851413][T20519] ? sctp_add_bind_addr+0x8c/0x370 [ 517.851441][T20519] ? sctp_add_bind_addr+0x8c/0x370 [ 517.851477][T20519] sctp_add_bind_addr+0x8c/0x370 [ 517.851515][T20519] sctp_copy_local_addr_list+0x31a/0x4e0 [ 517.851546][T20519] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 517.851577][T20519] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 517.851609][T20519] ? sctp_v4_is_any+0x35/0x60 [ 517.851628][T20519] ? sctp_copy_one_addr+0x93/0x360 [ 517.851659][T20519] sctp_bind_addr_copy+0xb3/0x3c0 [ 517.851687][T20519] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 517.851715][T20519] sctp_connect_new_asoc+0x2ff/0x6b0 [ 517.851743][T20519] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 517.851775][T20519] ? __local_bh_enable_ip+0xd6/0x140 [ 517.851825][T20519] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 517.851853][T20519] ? security_sctp_bind_connect+0x7e/0x2c0 [ 517.851879][T20519] sctp_sendmsg+0x159b/0x2d00 [ 517.851918][T20519] ? __pfx_sctp_sendmsg+0x10/0x10 [ 517.851947][T20519] ? __lock_acquire+0x747/0x2de0 [ 517.851984][T20519] ? aa_sock_msg_perm+0xfc/0x210 [ 517.852007][T20519] ? sock_rps_record_flow+0x19/0x350 [ 517.852031][T20519] ? inet_sendmsg+0x298/0x320 [ 517.852053][T20519] ? __pfx_inet_sendmsg+0x10/0x10 [ 517.852071][T20519] sock_sendmsg_nosec+0x10e/0x180 [ 517.852096][T20519] ____sys_sendmsg+0x54e/0x850 [ 517.852128][T20519] ? __pfx_____sys_sendmsg+0x10/0x10 [ 517.852167][T20519] ? import_iovec+0x73/0xa0 [ 517.852196][T20519] ___sys_sendmsg+0x2a5/0x360 [ 517.852220][T20519] ? __lock_acquire+0x747/0x2de0 [ 517.852246][T20519] ? __pfx____sys_sendmsg+0x10/0x10 [ 517.852279][T20519] ? kstrtouint+0x6e/0xe0 [ 517.852349][T20519] ? __fget_files+0x2a/0x420 [ 517.852375][T20519] ? __fget_files+0x3a2/0x420 [ 517.852412][T20519] __sys_sendmmsg+0x273/0x4d0 [ 517.852446][T20519] ? __pfx___sys_sendmmsg+0x10/0x10 [ 517.852484][T20519] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 517.852528][T20519] ? ksys_write+0x242/0x270 [ 517.852560][T20519] ? __pfx_ksys_write+0x10/0x10 [ 517.852598][T20519] __x64_sys_sendmmsg+0xa0/0xc0 [ 517.852628][T20519] do_syscall_64+0x166/0x520 [ 517.852651][T20519] ? trace_irq_disable+0x3b/0x140 [ 517.852671][T20519] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 517.852692][T20519] ? clear_bhb_loop+0x70/0xc0 [ 517.852718][T20519] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 517.852737][T20519] RIP: 0033:0x7f505419e159 [ 517.852757][T20519] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 517.852775][T20519] RSP: 002b:00007f5054fc1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 517.852798][T20519] RAX: ffffffffffffffda RBX: 00007f5054425fa0 RCX: 00007f505419e159 [ 517.852811][T20519] RDX: 0000000000000002 RSI: 0000200000000e40 RDI: 0000000000000003 [ 517.852824][T20519] RBP: 00007f5054fc1090 R08: 0000000000000000 R09: 0000000000000000 [ 517.852836][T20519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 517.852848][T20519] R13: 00007f5054426038 R14: 00007f5054425fa0 R15: 00007fffc4003d68 [ 517.852884][T20519] [ 517.862418][T20523] netlink: 'syz.3.3787': attribute type 1 has an invalid length. [ 517.864654][T20524] netlink: 'syz.3.3787': attribute type 1 has an invalid length. [ 517.917310][T20523] bond2: entered promiscuous mode [ 517.919351][T20523] bond2: entered allmulticast mode [ 517.920180][T20523] 8021q: adding VLAN 0 to HW filter on device bond2 [ 517.957286][T20524] bond3: entered promiscuous mode [ 517.957315][T20524] bond3: entered allmulticast mode [ 517.957662][T20524] 8021q: adding VLAN 0 to HW filter on device bond3 [ 518.668131][T20554] syzkaller0: entered promiscuous mode [ 518.668157][T20554] syzkaller0: entered allmulticast mode [ 518.722725][T20554] netlink: 'syz.6.3796': attribute type 3 has an invalid length. [ 518.722750][T20554] __nla_validate_parse: 1 callbacks suppressed [ 518.722760][T20554] netlink: 3 bytes leftover after parsing attributes in process `syz.6.3796'. [ 518.878042][T20568] FAULT_INJECTION: forcing a failure. [ 518.878042][T20568] name failslab, interval 1, probability 0, space 0, times 0 [ 518.878079][T20568] CPU: 1 UID: 0 PID: 20568 Comm: syz.3.3801 Not tainted syzkaller #0 PREEMPT(full) [ 518.878102][T20568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 518.878115][T20568] Call Trace: [ 518.878123][T20568] [ 518.878132][T20568] dump_stack_lvl+0xe8/0x150 [ 518.878169][T20568] should_fail_ex+0x410/0x560 [ 518.878200][T20568] should_failslab+0xa8/0x100 [ 518.878227][T20568] __kmalloc_cache_noprof+0xa3/0x600 [ 518.878249][T20568] ? __kmalloc_cache_noprof+0x14d/0x600 [ 518.878269][T20568] ? sctp_add_bind_addr+0x8c/0x370 [ 518.878297][T20568] ? sctp_add_bind_addr+0x8c/0x370 [ 518.878335][T20568] sctp_add_bind_addr+0x8c/0x370 [ 518.878370][T20568] sctp_copy_local_addr_list+0x31a/0x4e0 [ 518.878403][T20568] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 518.878433][T20568] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 518.878468][T20568] ? sctp_v4_is_any+0x35/0x60 [ 518.878487][T20568] ? sctp_copy_one_addr+0x93/0x360 [ 518.878522][T20568] sctp_bind_addr_copy+0xb3/0x3c0 [ 518.878553][T20568] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 518.878586][T20568] sctp_connect_new_asoc+0x2ff/0x6b0 [ 518.878614][T20568] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 518.878646][T20568] ? __local_bh_enable_ip+0xd6/0x140 [ 518.878671][T20568] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 518.878697][T20568] ? security_sctp_bind_connect+0x7e/0x2c0 [ 518.878723][T20568] sctp_sendmsg+0x159b/0x2d00 [ 518.878764][T20568] ? __pfx_sctp_sendmsg+0x10/0x10 [ 518.878794][T20568] ? __lock_acquire+0x747/0x2de0 [ 518.878833][T20568] ? aa_sock_msg_perm+0xfc/0x210 [ 518.878857][T20568] ? sock_rps_record_flow+0x19/0x350 [ 518.878883][T20568] ? inet_sendmsg+0x298/0x320 [ 518.878906][T20568] ? __pfx_inet_sendmsg+0x10/0x10 [ 518.878933][T20568] sock_sendmsg_nosec+0x10e/0x180 [ 518.878958][T20568] ____sys_sendmsg+0x54e/0x850 [ 518.878993][T20568] ? __pfx_____sys_sendmsg+0x10/0x10 [ 518.879032][T20568] ? import_iovec+0x73/0xa0 [ 518.879063][T20568] ___sys_sendmsg+0x2a5/0x360 [ 518.879088][T20568] ? __lock_acquire+0x747/0x2de0 [ 518.879114][T20568] ? __pfx____sys_sendmsg+0x10/0x10 [ 518.879149][T20568] ? kstrtouint+0x6e/0xe0 [ 518.879211][T20568] ? __fget_files+0x2a/0x420 [ 518.879236][T20568] ? __fget_files+0x3a2/0x420 [ 518.879275][T20568] __sys_sendmmsg+0x273/0x4d0 [ 518.879309][T20568] ? __pfx___sys_sendmmsg+0x10/0x10 [ 518.879349][T20568] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 518.879392][T20568] ? ksys_write+0x242/0x270 [ 518.879424][T20568] ? __pfx_ksys_write+0x10/0x10 [ 518.879463][T20568] __x64_sys_sendmmsg+0xa0/0xc0 [ 518.879494][T20568] do_syscall_64+0x166/0x520 [ 518.879517][T20568] ? trace_irq_disable+0x3b/0x140 [ 518.879537][T20568] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.879563][T20568] ? clear_bhb_loop+0x70/0xc0 [ 518.879588][T20568] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.879608][T20568] RIP: 0033:0x7f7a71b9e159 [ 518.879630][T20568] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 518.879646][T20568] RSP: 002b:00007f7a72a37028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 518.879670][T20568] RAX: ffffffffffffffda RBX: 00007f7a71e25fa0 RCX: 00007f7a71b9e159 [ 518.879685][T20568] RDX: 0000000000000002 RSI: 0000200000000e40 RDI: 0000000000000003 [ 518.879698][T20568] RBP: 00007f7a72a37090 R08: 0000000000000000 R09: 0000000000000000 [ 518.879711][T20568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 518.879723][T20568] R13: 00007f7a71e26038 R14: 00007f7a71e25fa0 R15: 00007ffc70501148 [ 518.879759][T20568] [ 518.925757][T20570] netlink: 4912 bytes leftover after parsing attributes in process `syz.0.3802'. [ 519.313407][T20586] netlink: 'syz.3.3804': attribute type 4 has an invalid length. [ 519.349837][T20590] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3808'. [ 519.349860][T20590] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3808'. [ 519.562847][T20597] netlink: 'syz.0.3809': attribute type 10 has an invalid length. [ 519.825847][T20605] FAULT_INJECTION: forcing a failure. [ 519.825847][T20605] name failslab, interval 1, probability 0, space 0, times 0 [ 519.825884][T20605] CPU: 0 UID: 0 PID: 20605 Comm: syz.6.3814 Not tainted syzkaller #0 PREEMPT(full) [ 519.825907][T20605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 519.825919][T20605] Call Trace: [ 519.825927][T20605] [ 519.825936][T20605] dump_stack_lvl+0xe8/0x150 [ 519.825972][T20605] should_fail_ex+0x410/0x560 [ 519.826003][T20605] should_failslab+0xa8/0x100 [ 519.826032][T20605] __kmalloc_cache_noprof+0xa3/0x600 [ 519.826054][T20605] ? __kmalloc_cache_noprof+0x14d/0x600 [ 519.826073][T20605] ? sctp_add_bind_addr+0x8c/0x370 [ 519.826100][T20605] ? sctp_add_bind_addr+0x8c/0x370 [ 519.826137][T20605] sctp_add_bind_addr+0x8c/0x370 [ 519.826171][T20605] sctp_copy_local_addr_list+0x31a/0x4e0 [ 519.826204][T20605] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 519.826239][T20605] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 519.826274][T20605] ? sctp_v4_is_any+0x35/0x60 [ 519.826292][T20605] ? sctp_copy_one_addr+0x93/0x360 [ 519.826319][T20605] sctp_bind_addr_copy+0xb3/0x3c0 [ 519.826342][T20605] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 519.826366][T20605] sctp_connect_new_asoc+0x2ff/0x6b0 [ 519.826386][T20605] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 519.826410][T20605] ? __local_bh_enable_ip+0xd6/0x140 [ 519.826438][T20605] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 519.826458][T20605] ? security_sctp_bind_connect+0x7e/0x2c0 [ 519.826476][T20605] sctp_sendmsg+0x159b/0x2d00 [ 519.826508][T20605] ? __pfx_sctp_sendmsg+0x10/0x10 [ 519.826530][T20605] ? __lock_acquire+0x747/0x2de0 [ 519.826558][T20605] ? aa_sock_msg_perm+0xfc/0x210 [ 519.826576][T20605] ? sock_rps_record_flow+0x19/0x350 [ 519.826595][T20605] ? inet_sendmsg+0x298/0x320 [ 519.826612][T20605] ? __pfx_inet_sendmsg+0x10/0x10 [ 519.826626][T20605] sock_sendmsg_nosec+0x10e/0x180 [ 519.826644][T20605] ____sys_sendmsg+0x54e/0x850 [ 519.826670][T20605] ? __pfx_____sys_sendmsg+0x10/0x10 [ 519.826699][T20605] ? import_iovec+0x73/0xa0 [ 519.826722][T20605] ___sys_sendmsg+0x2a5/0x360 [ 519.826741][T20605] ? __lock_acquire+0x747/0x2de0 [ 519.826760][T20605] ? __pfx____sys_sendmsg+0x10/0x10 [ 519.826785][T20605] ? kstrtouint+0x6e/0xe0 [ 519.826832][T20605] ? __fget_files+0x2a/0x420 [ 519.826852][T20605] ? __fget_files+0x3a2/0x420 [ 519.826882][T20605] __sys_sendmmsg+0x273/0x4d0 [ 519.826907][T20605] ? __pfx___sys_sendmmsg+0x10/0x10 [ 519.826939][T20605] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 519.826972][T20605] ? ksys_write+0x242/0x270 [ 519.826997][T20605] ? __pfx_ksys_write+0x10/0x10 [ 519.827026][T20605] __x64_sys_sendmmsg+0xa0/0xc0 [ 519.827054][T20605] do_syscall_64+0x166/0x520 [ 519.827075][T20605] ? trace_irq_disable+0x3b/0x140 [ 519.827096][T20605] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.827116][T20605] ? clear_bhb_loop+0x70/0xc0 [ 519.827142][T20605] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.827162][T20605] RIP: 0033:0x7fed4a19e159 [ 519.827182][T20605] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 519.827200][T20605] RSP: 002b:00007fed483f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 519.827223][T20605] RAX: ffffffffffffffda RBX: 00007fed4a425fa0 RCX: 00007fed4a19e159 [ 519.827238][T20605] RDX: 0000000000000002 RSI: 0000200000000e40 RDI: 0000000000000003 [ 519.827251][T20605] RBP: 00007fed483f6090 R08: 0000000000000000 R09: 0000000000000000 [ 519.827264][T20605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 519.827276][T20605] R13: 00007fed4a426038 R14: 00007fed4a425fa0 R15: 00007fff5edf0918 [ 519.827311][T20605] [ 519.894050][T20608] syzkaller0: Caught tx_queue_len zero misconfig [ 520.169959][T20617] netlink: 288 bytes leftover after parsing attributes in process `syz.6.3818'. [ 520.177091][T20616] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3817'. [ 520.177416][T20617] netlink: 'syz.6.3818': attribute type 58 has an invalid length. [ 520.177430][T20617] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3818'. [ 520.258994][T20619] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3819'. [ 520.270973][T20619] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 520.614015][ T7184] tipc: Subscription rejected, illegal request [ 520.652624][T20644] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3825'. [ 521.060244][T20660] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 521.060285][T20660] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.090376][T20668] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3829'. [ 521.203327][T20660] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 521.203365][T20660] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.431127][T20691] netlink: 'syz.3.3836': attribute type 2 has an invalid length. [ 521.441098][T20660] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 521.441131][T20660] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.614187][T20660] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 521.614256][T20660] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.804011][T20712] netlink: 'syz.3.3840': attribute type 10 has an invalid length. [ 522.106294][ T7186] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 522.106340][ T7186] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.189714][T14168] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 522.189747][T14168] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.192676][ T4169] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 522.192709][ T4169] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.350227][T20669] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 522.350266][T20669] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.518379][T20669] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 522.518416][T20669] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.609641][T20749] netlink: 'syz.2.3853': attribute type 21 has an invalid length. [ 522.642862][T20669] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 522.642897][T20669] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.729527][T20755] IPVS: Unknown mcast interface: lo [ 522.994716][T20771] No such timeout policy "syz0" [ 523.016153][T20772] netlink: 'syz.4.3862': attribute type 7 has an invalid length. [ 523.016177][T20772] netlink: 'syz.4.3862': attribute type 8 has an invalid length. [ 524.245076][T20834] ip_tables: iptables: counters copy to user failed while replacing table [ 524.255872][T20834] netlink: 'syz.2.3878': attribute type 1 has an invalid length. [ 524.255894][T20834] __nla_validate_parse: 14 callbacks suppressed [ 524.255905][T20834] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3878'. [ 524.255920][T20834] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3878'. [ 524.256318][T20834] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3878'. [ 524.480972][T20840] veth1_macvtap: left promiscuous mode [ 524.481004][T20840] macsec0: entered promiscuous mode [ 524.583942][T20844] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3882'. [ 524.846899][T20858] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3884'. [ 524.967258][ T31] audit: type=1800 audit(1789833522.841:12): pid=20863 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3887" name=680B20 dev="tmpfs" ino=882 res=0 errno=0 [ 525.172295][T20871] netlink: 'syz.4.3889': attribute type 2 has an invalid length. [ 525.293576][T20877] netlink: 'syz.6.3893': attribute type 9 has an invalid length. [ 525.295112][T20878] netlink: NAT attribute has 4 unknown bytes [ 525.295149][T20878] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 525.355564][T20882] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3893'. [ 525.356205][T20882] --map-set only usable from mangle table [ 525.499830][T20889] Bluetooth: ISO socket layer initialized [ 525.500651][ T4932] Bluetooth: hci0: unexpected event for opcode 0x2003 [ 525.503667][T20889] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3897'. [ 525.829436][T20903] mac80211_hwsim hwsim41 syzkaller0: entered promiscuous mode [ 525.829466][T20903] mac80211_hwsim hwsim41 syzkaller0: entered allmulticast mode [ 526.160394][T20937] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3910'. [ 526.179347][T20937] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3910'. [ 526.363091][T20949] openvswitch: netlink: Duplicate or invalid key (type 0). [ 526.486042][T20957] netlink: 'syz.2.3916': attribute type 1 has an invalid length. [ 526.534036][T20957] 8021q: adding VLAN 0 to HW filter on device bond2 [ 526.655081][T20965] netlink: ct family unspecified [ 526.670350][T20966] netlink: 240 bytes leftover after parsing attributes in process `syz.4.3918'. [ 526.846480][ T7184] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 526.846532][ T7184] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.846705][ T7184] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 526.846730][ T7184] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.886242][ T7184] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 526.886275][ T7184] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.887989][ T7188] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 526.888013][ T7188] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.942757][T20975] xt_hashlimit: size too large, truncated to 1048576 [ 527.000955][T20975] xt_hashlimit: size too large, truncated to 1048576 [ 527.808594][T21025] netlink: 'syz.2.3935': attribute type 10 has an invalid length. [ 527.853178][T21025] team0: Port device dummy0 added [ 528.573284][T16124] hid-generic 0005:0008:0009.0003: hidraw0: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 528.703353][T21066] tipc: MTU too low for tipc bearer [ 528.732672][ T9] hid-generic 0005:0008:0009.0004: hidraw0: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 528.984364][T21073] fido_id[21073]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci2/hci2:200/report_descriptor': No such file or directory [ 529.574012][T21105] xt_CT: No such helper "snmp_trap" [ 529.594731][T21114] Bluetooth: hci0: unsupported parameter 5134 [ 529.594753][T21114] Bluetooth: hci0: unsupported parameter 8192 [ 529.594765][T21114] Bluetooth: hci0: unsupported parameter 5134 [ 529.594778][T21114] Bluetooth: hci0: unsupported parameter 8192 [ 530.211022][ T4932] Bluetooth: hci2: ISO packet for unknown connection handle 2723 [ 530.224089][T21158] __nla_validate_parse: 6 callbacks suppressed [ 530.224112][T21158] netlink: 148 bytes leftover after parsing attributes in process `syz.6.3963'. [ 530.785711][T21180] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 530.832882][T21185] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3966'. [ 530.833988][T21189] vlan3: entered allmulticast mode [ 530.834007][T21189] bond0: entered allmulticast mode [ 530.834020][T21189] bond_slave_0: entered allmulticast mode [ 530.834036][T21189] bond_slave_1: entered allmulticast mode [ 530.911232][T21185] veth2: entered promiscuous mode [ 530.911257][T21185] veth2: entered allmulticast mode [ 530.983620][T21196] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3971'. [ 530.983648][T21196] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3971'. [ 530.983665][T21196] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3971'. [ 531.005484][T21188] xt_CT: No such helper "snmp_trap" [ 531.289829][T21208] netlink: 84 bytes leftover after parsing attributes in process `syz.0.3975'. [ 531.748137][T21236] netlink: 'syz.6.3981': attribute type 1 has an invalid length. [ 531.781011][T21230] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3978'. [ 532.002515][ T4932] block nbd11: Receive control failed (result -32) [ 532.289635][T21259] macsec1: entered promiscuous mode [ 532.471959][T21271] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3991'. [ 532.626055][T21276] bond0: Error: Cannot enslave bond to itself. [ 532.846827][T21287] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3997'. [ 533.309125][T21268] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 533.329879][T21292] netlink: Failed to add helper -22 [ 533.329940][T21292] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 533.517072][T21304] x_tables: duplicate underflow at hook 1 [ 533.537781][T21304] netlink: 'syz.0.4002': attribute type 21 has an invalid length. [ 533.866190][T21265] Bluetooth: hci3: command tx timeout [ 533.936806][T21325] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4009'. [ 533.964387][T21327] tunl0: entered promiscuous mode [ 533.970142][T21327] netlink: 'syz.6.4008': attribute type 3 has an invalid length. [ 534.060691][T21335] netlink: 'syz.3.4012': attribute type 10 has an invalid length. [ 534.121918][T21336] IPv6: NLM_F_CREATE should be specified when creating new route [ 534.181830][T21338] vlan0: entered promiscuous mode [ 534.206712][T21338] openvswitch: netlink: Message has 512 unknown bytes. [ 534.242249][T21342] openvswitch: netlink: Flow key attr not present in new flow. [ 534.242523][T21342] openvswitch: netlink: Flow key attr not present in new flow. [ 534.242759][T21342] openvswitch: netlink: Flow key attr not present in new flow. [ 534.327869][T21348] netlink: 'syz.0.4015': attribute type 2 has an invalid length. [ 534.505849][T21265] Bluetooth: hci6: command 0x0406 tx timeout [ 534.583865][T21365] netlink: NAT flags may be given only when NAT range (SRC or DST) is also specified. [ 534.583903][T21365] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 534.589759][T21365] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 535.256669][T21395] __nla_validate_parse: 8 callbacks suppressed [ 535.256693][T21395] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4022'. [ 535.298011][T21395] geneve2: entered promiscuous mode [ 535.298037][T21395] geneve2: entered allmulticast mode [ 535.330506][T21392] IPVS: persistence engine module ip_vs_pe_ not found [ 535.738080][T21413] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4026'. [ 535.921804][T21429] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4030'. [ 535.921832][T21429] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4030'. [ 536.184516][T21439] netlink: 'syz.2.4033': attribute type 21 has an invalid length. [ 536.184661][T21439] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4033'. [ 536.233696][T21439] netlink: 'syz.2.4033': attribute type 5 has an invalid length. [ 536.233721][T21439] netlink: 3 bytes leftover after parsing attributes in process `syz.2.4033'. [ 536.248695][T21444] net_ratelimit: 1 callbacks suppressed [ 536.248713][T21444] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 536.253257][T21444] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4035'. [ 536.253380][T21444] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 536.292444][T21444] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 536.572328][T21451] veth1_macvtap: mtu less than device minimum [ 536.594620][T21455] netlink: 'syz.4.4040': attribute type 8 has an invalid length. [ 536.608808][T21454] bridge_slave_0: left allmulticast mode [ 536.608834][T21454] bridge_slave_0: left promiscuous mode [ 536.609062][T21454] bridge0: port 1(bridge_slave_0) entered disabled state [ 536.630122][ T5781] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 536.648964][T21454] bridge_slave_1: left allmulticast mode [ 536.648992][T21454] bridge_slave_1: left promiscuous mode [ 536.649279][T21454] bridge0: port 2(bridge_slave_1) entered disabled state [ 536.687915][T21454] bond0: (slave bond_slave_0): Releasing backup interface [ 536.697142][T21454] bond0: (slave bond_slave_1): Releasing backup interface [ 536.741173][T21454] team0: Port device team_slave_0 removed [ 536.775774][T21454] team0: Port device team_slave_1 removed [ 536.778514][T21454] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 536.778539][T21454] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 536.783779][T21454] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 536.783802][T21454] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 536.790651][T21463] netlink: 'syz.2.4042': attribute type 1 has an invalid length. [ 536.792657][T21454] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 536.797692][T21456] team0: Mode changed to "broadcast" [ 536.946048][T21463] 8021q: adding VLAN 0 to HW filter on device bond3 [ 537.000393][T21463] openvswitch: netlink: Key type 30 is not supported [ 537.002731][T21463] netlink: 1204 bytes leftover after parsing attributes in process `syz.2.4042'. [ 537.031236][T21469] netlink: 'syz.3.4044': attribute type 1 has an invalid length. [ 537.031260][T21469] netlink: 'syz.3.4044': attribute type 2 has an invalid length. [ 537.041712][T21469] netlink: 'syz.3.4044': attribute type 1 has an invalid length. [ 537.041734][T21469] netlink: 'syz.3.4044': attribute type 2 has an invalid length. [ 537.196196][ T9] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 537.503131][T21492] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 537.651155][T21499] netlink: 'syz.3.4056': attribute type 1 has an invalid length. [ 537.655778][T21499] block nbd296: server does not support multiple connections per device. [ 537.663165][T21499] block nbd296: shutting down sockets [ 538.014752][T21518] netlink: 64 bytes leftover after parsing attributes in process `syz.6.4060'. [ 538.081761][T21518] tipc: Enabled bearer , priority 10 [ 538.199421][T21528] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 538.666306][T21561] IPVS: set_ctl: invalid protocol: 131 0.0.0.0:20004 [ 538.699672][T21553] netlink: 'syz.4.4069': attribute type 4 has an invalid length. [ 538.699696][T21553] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4069'. [ 538.699860][T21553] netlink: 'syz.4.4069': attribute type 4 has an invalid length. [ 538.700013][T21553] netlink: 'syz.4.4069': attribute type 4 has an invalid length. [ 538.700180][T21553] netlink: 'syz.4.4069': attribute type 4 has an invalid length. [ 538.854251][T21563] bond4: option fail_over_mac: invalid value (16) [ 538.861121][T21563] bond4 (unregistering): Released all slaves [ 538.944361][T21576] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 539.542510][T21584] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 539.542553][T21584] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.878205][T21584] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 539.878244][T21584] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.930764][T21613] openvswitch: netlink: IPv4 frag type 44 is out of range max 2 [ 540.060810][T21612] 8021q: adding VLAN 0 to HW filter on device bond4 [ 540.189731][ T4932] Bluetooth: hci4: connection err: -111 [ 540.192661][T21584] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 540.192696][T21584] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.357719][T21628] ip_tables: iptables: counters copy to user failed while replacing table [ 540.380646][T21584] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 540.382901][T21584] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.604126][T21636] __nla_validate_parse: 73 callbacks suppressed [ 540.604150][T21636] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4092'. [ 540.675456][T14152] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 540.675488][T14152] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.758045][T21636] mac80211_hwsim hwsim41 syzkaller0: left promiscuous mode [ 540.758074][T21636] mac80211_hwsim hwsim41 syzkaller0: left allmulticast mode [ 540.857355][ T7184] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 540.857391][ T7184] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.865869][ T7184] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 540.865899][ T7184] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.866013][ T4169] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 540.866036][ T4169] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.032044][T21653] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4096'. [ 541.379180][T21668] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4102'. [ 541.393740][T21668] .`: renamed from bond0 [ 541.427745][ T4169] IPVS: starting estimator thread 0... [ 541.517008][T21672] IPVS: using max 27 ests per chain, 64800 per kthread [ 541.680804][ T31] audit: type=1804 audit(1789833539.551:13): pid=21681 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.4105" name="/newroot/290/cgroup.controllers" dev="tmpfs" ino=1497 res=1 errno=0 [ 541.680862][ T31] audit: type=1800 audit(1789833539.551:14): pid=21681 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4105" name="cgroup.controllers" dev="tmpfs" ino=1497 res=0 errno=0 [ 541.800427][T21691] ip_tables: iptables: counters copy to user failed while replacing table [ 541.977903][T21694] siw: device registration error -23 [ 542.062092][T21700] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4111'. [ 542.509063][T21729] x_tables: duplicate underflow at hook 3 [ 542.636663][T21738] validate_nla: 130 callbacks suppressed [ 542.636680][T21738] netlink: 'syz.3.4124': attribute type 8 has an invalid length. [ 542.910819][T21745] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4126'. [ 542.938363][T21745] xfrm1: entered promiscuous mode [ 542.939734][T21745] xfrm1: entered allmulticast mode [ 543.091858][T21763] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4129'. [ 545.477035][T21725] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 545.931556][T21791] netlink: 256 bytes leftover after parsing attributes in process `syz.6.4138'. [ 545.946750][T21796] netlink: 'syz.6.4138': attribute type 25 has an invalid length. [ 546.159865][T21805] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 549.368812][T21822] netlink: 348 bytes leftover after parsing attributes in process `syz.4.4146'. [ 549.793224][T21842] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4153'. [ 549.798042][T21843] netlink: 88 bytes leftover after parsing attributes in process `syz.3.4153'. [ 549.896081][T21846] syzkaller0: entered promiscuous mode [ 549.896105][T21846] syzkaller0: entered allmulticast mode [ 550.078239][T21853] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4156'. [ 550.574533][T21873] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4161'. [ 550.574776][T21873] block nbd12: server does not support multiple connections per device. [ 550.578430][T21873] block nbd12: shutting down sockets [ 550.850322][T21883] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4163'. [ 551.325078][T21900] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4166'. [ 551.689166][T21908] netlink: 'syz.6.4168': attribute type 21 has an invalid length. [ 551.689194][T21908] netlink: 128 bytes leftover after parsing attributes in process `syz.6.4168'. [ 551.739394][T21909] netlink: 'syz.6.4168': attribute type 21 has an invalid length. [ 551.739419][T21909] netlink: 128 bytes leftover after parsing attributes in process `syz.6.4168'. [ 551.792111][T21915] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4170'. [ 551.844404][T21911] ovs-s: entered promiscuous mode [ 551.852575][T21908] netlink: 'syz.6.4168': attribute type 4 has an invalid length. [ 551.852597][T21908] netlink: 'syz.6.4168': attribute type 5 has an invalid length. [ 551.852610][T21908] netlink: 3 bytes leftover after parsing attributes in process `syz.6.4168'. [ 551.856225][T21909] netlink: 'syz.6.4168': attribute type 4 has an invalid length. [ 551.856243][T21909] netlink: 'syz.6.4168': attribute type 5 has an invalid length. [ 551.856253][T21909] netlink: 3 bytes leftover after parsing attributes in process `syz.6.4168'. [ 551.856512][T21915] bridge_slave_1: left allmulticast mode [ 551.856535][T21915] bridge_slave_1: left promiscuous mode [ 551.857394][T21915] bridge0: port 2(bridge_slave_1) entered disabled state [ 551.962521][T21915] bridge_slave_0: left allmulticast mode [ 551.964473][T21915] bridge_slave_0: left promiscuous mode [ 551.964769][T21915] bridge0: port 1(bridge_slave_0) entered disabled state [ 552.156450][T21926] openvswitch: netlink: IP tunnel dst address not specified [ 552.473720][T21935] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4177'. [ 552.486335][T21938] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4177'. [ 552.514956][T21937] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4178'. [ 552.681324][T21937] bond0 (unregistering): Released all slaves [ 553.318495][T21972] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 553.341173][T21972] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 553.492312][T21972] syzkaller0: entered promiscuous mode [ 553.492339][T21972] syzkaller0: entered allmulticast mode [ 553.498687][T21977] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4188'. [ 553.525557][T21972] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 553.546448][T21972] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 553.873905][T21986] netlink: 'syz.0.4189': attribute type 30 has an invalid length. [ 554.185012][T21998] sctp: [Deprecated]: syz.3.4194 (pid 21998) Use of int in max_burst socket option deprecated. [ 554.185012][T21998] Use struct sctp_assoc_value instead [ 554.241909][T22002] netlink: 'syz.4.4196': attribute type 1 has an invalid length. [ 554.241934][T22002] netlink: 'syz.4.4196': attribute type 3 has an invalid length. [ 554.241950][T22002] NCSI netlink: No device for ifindex 813332851 [ 555.308274][ T4932] Bluetooth: hci2: command tx timeout [ 555.327565][T14175] netdevsim netdevsim6 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0 [ 555.327874][ T13] netdevsim netdevsim6 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0 [ 555.327910][ T13] netdevsim netdevsim6 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0 [ 555.327943][ T13] netdevsim netdevsim6 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0 [ 555.409978][T22059] openvswitch: netlink: Unexpected mask (mask=10000010, allowed=10058) [ 555.523595][T22062] xt_policy: output policy not valid in PREROUTING and INPUT [ 555.535823][T22062] netlink: 'syz.0.4219': attribute type 1 has an invalid length. [ 555.582243][ T31] audit: type=1107 audit(1789833553.451:15): pid=22065 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً5%UA٠0ltݕ/ 6򊨊' [ 555.912885][T22081] syzkaller1: entered promiscuous mode [ 555.912911][T22081] syzkaller1: entered allmulticast mode [ 556.094404][T22090] bridge3: entered promiscuous mode [ 556.103900][T22090] bond5: (slave bridge3): making interface the new active one [ 556.105158][T22090] bond5: (slave bridge3): Enslaving as an active interface with an up link [ 556.147581][T22090] bridge4: entered promiscuous mode [ 556.151288][T22090] bond5: (slave bridge4): Enslaving as a backup interface with an up link [ 556.359895][T21265] Bluetooth: hci4: ISO packet for unknown connection handle 2723 [ 556.745100][T22127] __nla_validate_parse: 7 callbacks suppressed [ 556.745121][T22127] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4232'. [ 556.948753][ T7188] IPVS: starting estimator thread 0... [ 557.036352][T22145] IPVS: using max 27 ests per chain, 64800 per kthread [ 557.241901][T22162] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4240'. [ 557.298470][T22167] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4240'. [ 557.480323][T22174] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4245'. [ 557.483887][T22175] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4243'. [ 557.813697][T22192] validate_nla: 2 callbacks suppressed [ 557.813717][T22192] netlink: 'syz.2.4250': attribute type 2 has an invalid length. [ 557.813729][T22192] netlink: 'syz.2.4250': attribute type 8 has an invalid length. [ 557.813740][T22192] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4250'. [ 557.868412][T22203] bridge0: port 3(ipvlan2) entered blocking state [ 557.868906][T22203] bridge0: port 3(ipvlan2) entered disabled state [ 557.869055][T22203] ipvlan2: entered allmulticast mode [ 557.869072][T22203] bridge0: entered allmulticast mode [ 557.874771][T22203] ipvlan2: left allmulticast mode [ 557.874791][T22203] bridge0: left allmulticast mode [ 557.976003][T16126] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 558.242978][T22227] bond0 (unregistering): Released all slaves [ 558.271196][T22239] syzkaller0: left promiscuous mode [ 558.271232][T22239] syzkaller0: left allmulticast mode [ 558.278455][T22241] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4257'. [ 558.278478][T22241] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4257'. [ 558.278491][T22241] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4257'. [ 558.471010][T22254] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4259'. [ 558.514845][T22212] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 558.515115][T22212] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 558.536789][T16126] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 558.633928][T22265] netlink: 'syz.2.4264': attribute type 12 has an invalid length. [ 558.633951][T22265] netlink: 'syz.2.4264': attribute type 29 has an invalid length. [ 558.633969][T22265] netlink: 'syz.2.4264': attribute type 1 has an invalid length. [ 558.633981][T22265] netlink: 'syz.2.4264': attribute type 2 has an invalid length. [ 558.634228][T22266] netlink: 'syz.2.4264': attribute type 12 has an invalid length. [ 558.634245][T22266] netlink: 'syz.2.4264': attribute type 29 has an invalid length. [ 558.634259][T22266] netlink: 'syz.2.4264': attribute type 1 has an invalid length. [ 558.634271][T22266] netlink: 'syz.2.4264': attribute type 2 has an invalid length. [ 558.635142][T22265] ip_tables: iptables: counters copy to user failed while replacing table [ 558.656411][T22266] ip_tables: iptables: counters copy to user failed while replacing table [ 558.833867][T16126] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 558.988973][T22229] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 559.165417][T22277] openvswitch: netlink: Missing key (keys=50, expected=80) [ 559.226595][T16124] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 559.292159][T22283] xt_cluster: node mask cannot exceed total number of nodes [ 559.297675][T22285] Bluetooth: hci0: unsupported parameter 5135 [ 559.297698][T22285] Bluetooth: hci0: unsupported parameter 8192 [ 559.297709][T22285] Bluetooth: hci0: unsupported parameter 5135 [ 559.297720][T22285] Bluetooth: hci0: unsupported parameter 8192 [ 559.315692][T16124] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 559.409826][T22285] openvswitch: netlink: Flow actions attr not present in new flow. [ 559.550132][T22293] sit1: entered promiscuous mode [ 559.550158][T22293] sit1: entered allmulticast mode [ 559.569916][T22294] batman_adv: batadv0: Adding interface: syzkaller0 [ 559.569935][T22294] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 559.569964][T22294] batman_adv: batadv0: Interface activated: syzkaller0 [ 559.619637][T22292] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 559.685185][T22292] batman_adv: batadv0: Removing interface: syzkaller0 [ 560.347623][T22339] mac80211_hwsim hwsim41 syzkaller0: entered promiscuous mode [ 560.347652][T22339] mac80211_hwsim hwsim41 syzkaller0: entered allmulticast mode [ 560.508940][T22344] bridge: RTM_NEWNEIGH with invalid ether address [ 560.717126][T22356] nbd: must specify at least one socket [ 560.937944][T22362] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 561.464959][T22395] sctp: [Deprecated]: syz.2.4302 (pid 22395) Use of int in max_burst socket option deprecated. [ 561.464959][T22395] Use struct sctp_assoc_value instead [ 561.631523][T22398] syzkaller0: entered promiscuous mode [ 561.631549][T22398] syzkaller0: entered allmulticast mode [ 561.846178][T22410] __nla_validate_parse: 14 callbacks suppressed [ 561.846204][T22410] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4308'. [ 561.896307][T22414] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4308'. [ 562.185582][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 562.198248][T22428] No such timeout policy "syz0" [ 562.372157][T22437] xt_TCPMSS: Only works on TCP SYN packets [ 562.453297][T22443] netlink: 65047 bytes leftover after parsing attributes in process `syz.6.4319'. [ 562.498916][T16124] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 562.712543][T22453] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 562.776046][T22459] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4325'. [ 562.949828][T22465] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4328'. [ 563.040501][T22474] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4328'. [ 563.044931][T22477] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4328'. [ 563.074504][T22479] batman_adv: batadv0: Adding interface: wlan1 [ 563.074524][T22479] batman_adv: batadv0: The MTU of interface wlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 563.074553][T22479] batman_adv: batadv0: Interface activated: wlan1 [ 563.146553][ C1] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 563.157286][T16124] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 563.173175][T22482] netlink: 288 bytes leftover after parsing attributes in process `syz.3.4333'. [ 563.398466][T22482] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4333'. [ 563.398573][T22482] nbd: must specify a size in bytes for the device [ 563.698939][T22493] netlink: 5120 bytes leftover after parsing attributes in process `syz.0.4336'. [ 564.067784][T22510] Cannot find del_set index 0 as target [ 564.307008][T22522] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 564.716409][T22533] bond0 (unregistering): Released all slaves [ 564.759796][T22543] syzkaller0: entered promiscuous mode [ 564.759821][T22543] syzkaller0: entered allmulticast mode [ 564.778697][T22543] validate_nla: 3 callbacks suppressed [ 564.778718][T22543] netlink: 'syz.0.4351': attribute type 1 has an invalid length. [ 564.778917][T22543] block nbd296: server does not support multiple connections per device. [ 564.779250][T22543] block nbd296: shutting down sockets [ 564.865119][T22545] netlink: set zone limit has 4 unknown bytes [ 564.990395][T22545] syzkaller0: entered promiscuous mode [ 564.990432][T22545] syzkaller0: entered allmulticast mode [ 565.225545][T21265] Bluetooth: hci4: command 0x0406 tx timeout [ 565.321365][T22563] netlink: 'syz.3.4356': attribute type 2 has an invalid length. [ 565.322289][T22566] netlink: 'syz.6.4358': attribute type 9 has an invalid length. [ 565.459477][T22563] bond4 (unregistering): Released all slaves [ 565.564605][T22583] tipc: Enabled bearer , priority 0 [ 565.578283][T22586] syzkaller0: MTU too low for tipc bearer [ 565.578306][T22586] tipc: Disabling bearer [ 565.814318][T22593] syzkaller1: entered promiscuous mode [ 565.814345][T22593] syzkaller1: entered allmulticast mode [ 566.743233][T22622] netlink: 'syz.4.4370': attribute type 1 has an invalid length. [ 566.791741][T22626] netlink: 'syz.0.4373': attribute type 8 has an invalid length. [ 566.822286][ T4932] Bluetooth: hci3: ACL packet too small [ 566.860355][T22626] TC_ACT_REPEAT abuse ? [ 566.861757][T22629] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 566.862970][T22629] __nla_validate_parse: 12 callbacks suppressed [ 566.862989][T22629] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4374'. [ 566.863010][T22629] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4374'. [ 566.863028][T22629] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4374'. [ 566.931923][T22631] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4375'. [ 566.931969][T22631] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4375'. [ 567.060575][T22634] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input6 [ 567.083620][T22637] netlink: 'syz.0.4377': attribute type 3 has an invalid length. [ 567.107870][T22637] netlink: 'syz.0.4377': attribute type 10 has an invalid length. [ 567.108023][T22637] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 567.348241][T22644] bond4 (unregistering): Released all slaves [ 567.495062][T22654] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4382'. [ 567.703859][T22668] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4386'. [ 567.718048][T22670] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4385'. [ 567.718757][T22670] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4385'. [ 567.943461][T22681] netlink: 'syz.4.4392': attribute type 1 has an invalid length. [ 567.961113][T22681] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4392'. [ 568.081641][T22681] hsr_slave_1 (unregistering): left promiscuous mode [ 568.681270][T22725] netlink: 'syz.4.4402': attribute type 1 has an invalid length. [ 568.708460][T22727] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 568.712251][T22725] 8021q: adding VLAN 0 to HW filter on device bond0 [ 568.746570][T22723] bond0: (slave geneve4): making interface the new active one [ 568.748183][T22723] bond0: (slave geneve4): Enslaving as an active interface with an up link [ 569.064098][T22738] xt_CT: No such helper "netbios-ns" [ 569.545533][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 569.670704][T22761] xfrm1: entered promiscuous mode [ 569.670721][T22761] xfrm1: entered allmulticast mode [ 569.982479][T22778] netlink: 'syz.6.4418': attribute type 3 has an invalid length. [ 570.432555][T22800] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 570.496296][T22802] openvswitch: netlink: Flow key attr not present in new flow. [ 570.913355][T22820] netdevsim netdevsim4 : renamed from netdevsim0 (while UP) [ 571.650281][T22860] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 572.739579][T22926] __nla_validate_parse: 10 callbacks suppressed [ 572.739601][T22926] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4458'. [ 572.766908][T22920] netlink: Failed to add helper -22 [ 572.766971][T22920] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 572.856836][T22931] ip6t_rt: `--rt-type 0' required before `--rt-0-*' [ 572.934721][T22934] IPVS: set_ctl: invalid protocol: 94 172.20.20.187:20000 [ 573.299056][T22952] netlink: 1044 bytes leftover after parsing attributes in process `syz.0.4466'. [ 574.058279][T22977] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4468'. [ 574.078513][T22979] netlink: 'syz.6.4468': attribute type 1 has an invalid length. [ 574.078962][T22977] netlink: 'syz.6.4468': attribute type 1 has an invalid length. [ 574.207605][T22977] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4468'. [ 574.219883][T22977] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4468'. [ 574.430322][T22991] netlink: 'syz.6.4473': attribute type 5 has an invalid length. [ 574.623565][T22997] sch_tbf: burst 0 is lower than device gre0 mtu (1500) ! [ 575.065120][T23019] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4480'. [ 575.065182][T23019] netlink: 10 bytes leftover after parsing attributes in process `syz.3.4480'. [ 575.068175][T23021] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4481'. [ 575.164348][T23019] netlink: 10 bytes leftover after parsing attributes in process `syz.3.4480'. [ 575.387142][T23032] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4485'. [ 575.407127][T23034] sctp: [Deprecated]: syz.4.4484 (pid 23034) Use of int in max_burst socket option deprecated. [ 575.407127][T23034] Use struct sctp_assoc_value instead [ 575.458133][T21826] udevd[21826]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 575.472265][ T4932] Bluetooth: hci3: command 0x0406 tx timeout [ 575.640298][T23032] netlink: 'syz.0.4485': attribute type 23 has an invalid length. [ 575.680905][T23047] tipc: Enabled bearer , priority 11 [ 575.717072][T23047] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 575.718171][T23047] lo: entered promiscuous mode [ 575.718984][T23047] gre0: entered promiscuous mode [ 575.746627][T23047] tipc: Resetting bearer [ 575.748830][T23047] tipc: Resetting bearer [ 575.750490][T23047] gretap0: entered promiscuous mode [ 575.765992][T23047] erspan0: entered promiscuous mode [ 575.770276][T23047] ip_vti0: entered promiscuous mode [ 576.044143][T23066] netlink: 'syz.3.4491': attribute type 5 has an invalid length. [ 576.059637][T23067] lo: left promiscuous mode [ 576.163076][T23075] Cannot find add_set index 4 as target [ 576.206947][T23076] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 576.254344][T16122] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 576.254365][T16122] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 576.268151][ T7186] wlan1: send auth to 08:02:11:00:00:00 (try 2/3) [ 576.268309][ T7186] wlan1: send auth to 08:02:11:00:00:00 (try 3/3) [ 576.268451][ T7186] wlan1: authentication with 08:02:11:00:00:00 timed out [ 576.302314][T23079] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 576.321109][T23082] netlink: Invalid conntrack timeout [ 576.321212][T23082] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 576.359344][T23076] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 576.404925][T23076] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 576.422689][T23083] bridge0: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 576.816498][T23094] pim6reg: entered allmulticast mode [ 576.817881][T23094] team0: entered allmulticast mode [ 576.819822][T23094] team0: left allmulticast mode [ 576.819958][T23094] pim6reg: left allmulticast mode [ 577.135034][T23107] bond4: entered promiscuous mode [ 577.135052][T23107] bond4: entered allmulticast mode [ 577.667083][T23125] bond0: option ad_select: unable to set because the bond device is up [ 578.320954][T23148] __nla_validate_parse: 3 callbacks suppressed [ 578.320977][T23148] netlink: 244 bytes leftover after parsing attributes in process `syz.3.4512'. [ 578.989866][T23162] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4517'. [ 579.060066][T23164] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4518'. [ 579.060784][T23164] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4518'. [ 579.107593][T23164] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4518'. [ 579.108006][T23165] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4518'. [ 579.229821][T23172] netlink: 'syz.4.4519': attribute type 1 has an invalid length. [ 579.229846][T23172] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4519'. [ 579.494498][T23176] syzkaller0: entered promiscuous mode [ 579.494526][T23176] syzkaller0: entered allmulticast mode [ 579.797370][T23190] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4524'. [ 579.863005][T23196] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4523'. [ 579.987544][ T4932] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 580.003592][ T4932] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 580.015486][ T4932] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 580.062066][ T4932] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 580.082238][ T4932] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 582.191922][ T4932] Bluetooth: hci7: command tx timeout [ 582.890032][T23222] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4532'. [ 583.378043][T23198] C speed is unknown, defaulting to 1000 [ 583.504668][T23260] __nla_validate_parse: 3 callbacks suppressed [ 583.504692][T23260] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4542'. [ 583.514575][T23260] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4542'. [ 583.580231][T23267] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 583.621038][T23267] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 583.913755][T23282] syzkaller1: entered promiscuous mode [ 583.913783][T23282] syzkaller1: entered allmulticast mode [ 584.163849][T23259] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 584.206466][T23302] netlink: 10 bytes leftover after parsing attributes in process `syz.6.4551'. [ 584.233058][T23198] bridge0: port 1(bridge_slave_0) entered blocking state [ 584.247494][T23198] bridge0: port 1(bridge_slave_0) entered disabled state [ 584.247693][T23198] bridge_slave_0: entered allmulticast mode [ 584.249933][T23198] bridge_slave_0: entered promiscuous mode [ 584.272357][ T4932] Bluetooth: hci7: command tx timeout [ 584.275490][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 584.288513][T23198] bridge0: port 2(bridge_slave_1) entered blocking state [ 584.288619][T23198] bridge0: port 2(bridge_slave_1) entered disabled state [ 584.288763][T23198] bridge_slave_1: entered allmulticast mode [ 584.295016][T23198] bridge_slave_1: entered promiscuous mode [ 584.399866][T23198] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 584.403807][T23198] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 584.524749][T23198] team0: Port device team_slave_0 added [ 584.524939][T23313] lo: entered allmulticast mode [ 584.529432][T23198] team0: Port device team_slave_1 added [ 584.598391][T23198] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 584.598411][T23198] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 584.598437][T23198] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 584.605327][T23198] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 584.605345][T23198] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 584.605370][T23198] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 584.739836][T23198] hsr_slave_0: entered promiscuous mode [ 584.742248][T23198] hsr_slave_1: entered promiscuous mode [ 584.742764][T23198] debugfs: 'hsr0' already exists in 'hsr' [ 584.742786][T23198] Cannot create hsr debugfs directory [ 584.977696][T23326] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4559'. [ 585.061711][T23335] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4561'. [ 585.061771][T23335] openvswitch: netlink: Missing key (keys=c0, expected=880) [ 585.239619][T23198] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 585.261700][T23198] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 585.262780][T23198] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 585.291707][T23198] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 585.297821][T23198] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 585.312685][T23340] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4562'. [ 585.330635][T23198] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 585.364919][T23198] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 585.387954][T23198] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 585.429000][T23352] netlink: 3604 bytes leftover after parsing attributes in process `syz.4.4564'. [ 585.451578][T23342] ipt_ECN: cannot use operation on non-tcp rule [ 585.482109][T23352] netlink: 'syz.4.4564': attribute type 1 has an invalid length. [ 585.613235][T23357] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 585.718743][T23365] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4569'. [ 585.837449][T23198] 8021q: adding VLAN 0 to HW filter on device bond0 [ 585.908244][T23198] 8021q: adding VLAN 0 to HW filter on device team0 [ 585.934510][T14156] bridge0: port 1(bridge_slave_0) entered blocking state [ 585.934604][T14156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 585.966575][T23371] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4572'. [ 585.966736][T23371] netlink: 6 bytes leftover after parsing attributes in process `syz.0.4572'. [ 586.000339][ T7189] bridge0: port 2(bridge_slave_1) entered blocking state [ 586.000404][ T7189] bridge0: port 2(bridge_slave_1) entered forwarding state [ 586.345457][ T4932] Bluetooth: hci7: command tx timeout [ 586.401875][T23393] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 586.842364][T23198] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 587.439390][T23427] netlink: 'syz.3.4582': attribute type 1 has an invalid length. [ 587.575116][T23431] 8021q: adding VLAN 0 to HW filter on device bond4 [ 587.638628][T23432] bond4: (slave bridge9): making interface the new active one [ 587.641288][T23432] bond4: (slave bridge9): Enslaving as an active interface with an up link [ 587.678614][T23434] netlink: 'syz.4.4584': attribute type 12 has an invalid length. [ 587.763438][T23198] veth0_vlan: entered promiscuous mode [ 587.824826][T23198] veth1_vlan: entered promiscuous mode [ 587.972739][T23198] veth0_macvtap: entered promiscuous mode [ 587.998123][T23198] veth1_macvtap: entered promiscuous mode [ 588.014790][T23439] netlink: 'syz.3.4585': attribute type 10 has an invalid length. [ 588.095134][T23198] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 588.164186][T23198] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 588.249425][T14156] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.250608][T14156] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.250669][T14156] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.250703][T14156] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.427042][ T4932] Bluetooth: hci7: command tx timeout [ 588.539547][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 588.539569][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 588.608316][T14156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 588.608340][T14156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 588.610886][T23452] __nla_validate_parse: 8 callbacks suppressed [ 588.610905][T23452] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4589'. [ 588.630278][T23452] ip_tables: iptables: counters copy to user failed while replacing table [ 588.648060][T23452] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4589'. [ 588.648129][T23452] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 588.893882][T23458] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4592'. [ 589.019936][T23465] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4525'. [ 589.019969][T23465] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4525'. [ 589.105748][T23468] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 589.274088][T23475] netlink: 'syz.7.4596': attribute type 30 has an invalid length. [ 589.274111][T23475] netlink: 56 bytes leftover after parsing attributes in process `syz.7.4596'. [ 589.292856][T23481] netlink: 88 bytes leftover after parsing attributes in process `syz.0.4595'. [ 589.293019][T23481] netlink: 88 bytes leftover after parsing attributes in process `syz.0.4595'. [ 589.293161][T23481] netlink: 88 bytes leftover after parsing attributes in process `syz.0.4595'. [ 589.294461][T23481] netlink: 88 bytes leftover after parsing attributes in process `syz.0.4595'. [ 589.338671][T23478] Cannot find map_set index 135 as target [ 591.299128][T23581] syzkaller0: entered promiscuous mode [ 591.299152][T23581] syzkaller0: entered allmulticast mode [ 591.414497][T23588] erspan0: entered promiscuous mode [ 591.427068][T23588] vlan2: entered promiscuous mode [ 592.158720][T14164] tipc: Subscription rejected, illegal request [ 592.162730][ T7186] IPVS: starting estimator thread 0... [ 592.250845][T23632] IPVS: using max 24 ests per chain, 57600 per kthread [ 593.409369][T23683] syzkaller1: entered promiscuous mode [ 593.409394][T23683] syzkaller1: entered allmulticast mode [ 593.500297][T23686] 8021q: adding VLAN 0 to HW filter on device bond5 [ 593.658845][T23701] __nla_validate_parse: 47 callbacks suppressed [ 593.658868][T23701] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4665'. [ 593.831116][T23708] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4665'. [ 594.179154][ T4932] Bluetooth: hci4: ISO packet for unknown connection handle 2723 [ 594.714448][T23779] x_tables: ip_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 594.816316][T23781] xt_recent: Unsupported userspace flags (000000b1) [ 594.923862][T23788] ipt_REJECT: TCP_RESET invalid for non-tcp [ 595.062145][T23793] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 595.068968][T23793] netlink: 'syz.6.4683': attribute type 10 has an invalid length. [ 595.081614][T23793] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 595.135864][T23800] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4686'. [ 595.382716][T23811] syzkaller1: entered promiscuous mode [ 595.382740][T23811] syzkaller1: entered allmulticast mode [ 595.653137][T23831] bond7: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 595.814624][T23837] sch_tbf: peakrate 4 is lower than or equals to rate 24576 ! [ 595.816124][T23841] sch_tbf: peakrate 4 is lower than or equals to rate 24576 ! [ 595.949013][T23847] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4695'. [ 596.016790][T23847] macsec1: entered promiscuous mode [ 596.016815][T23847] bridge0: entered promiscuous mode [ 596.017096][T23847] macsec1: entered allmulticast mode [ 596.017111][T23847] bridge0: entered allmulticast mode [ 596.054628][T23847] bridge0: port 3(macsec1) entered blocking state [ 596.054760][T23847] bridge0: port 3(macsec1) entered disabled state [ 596.084263][T23847] bridge0: left allmulticast mode [ 596.107729][ T9] bridge0: left promiscuous mode [ 596.130882][T23851] netlink: 'syz.3.4696': attribute type 1 has an invalid length. [ 596.130905][T23851] netlink: 'syz.3.4696': attribute type 3 has an invalid length. [ 596.130918][T23851] netlink: 172 bytes leftover after parsing attributes in process `syz.3.4696'. [ 596.130956][T23851] NCSI netlink: No device for ifindex 813332851 [ 596.431854][T23871] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 596.448819][T23871] netlink: 84 bytes leftover after parsing attributes in process `syz.6.4702'. [ 596.519588][T23877] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4703'. [ 596.543673][T23877] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 596.614729][T23877] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 596.656833][T23880] ip_vti0: entered promiscuous mode [ 596.677754][T23880] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4703'. [ 597.060047][T23896] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4708'. [ 597.063429][T23896] netlink: 256 bytes leftover after parsing attributes in process `syz.6.4708'. [ 598.812513][T23978] __nla_validate_parse: 7 callbacks suppressed [ 598.812534][T23978] netlink: 156 bytes leftover after parsing attributes in process `syz.6.4728'. [ 598.826489][T23980] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 598.850341][T14178] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 598.850368][T14178] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 598.995805][T23701] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 599.099211][T23989] netlink: 144 bytes leftover after parsing attributes in process `syz.6.4731'. [ 599.320341][T23996] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4734'. [ 599.753454][T24017] netlink: 'syz.4.4742': attribute type 2 has an invalid length. [ 599.753479][T24017] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4742'. [ 600.115117][T24038] netlink: 'syz.7.4749': attribute type 1 has an invalid length. [ 600.404432][T24051] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4754'. [ 600.442040][T24048] can: request_module (can-proto-0) failed. [ 600.552453][T24058] openvswitch: netlink: Invalid VLAN frame [ 600.584238][T24056] gtp1: entered promiscuous mode [ 600.584263][T24056] gtp1: entered allmulticast mode [ 600.694528][T24064] sctp: [Deprecated]: syz.4.4760 (pid 24064) Use of int in max_burst socket option. [ 600.694528][T24064] Use struct sctp_assoc_value instead [ 600.784841][T24064] netlink: 'syz.4.4760': attribute type 4 has an invalid length. [ 601.003027][T24067] 8021q: adding VLAN 0 to HW filter on device macsec2 [ 601.057166][T24079] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4765'. [ 601.057226][T24079] netlink: 'syz.0.4765': attribute type 3 has an invalid length. [ 601.079079][T24077] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4763'. [ 601.167210][T24080] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 601.309694][T24083] syzkaller1: entered promiscuous mode [ 601.309720][T24083] syzkaller1: entered allmulticast mode [ 601.530809][T24095] netlink: NAT attribute has 8 unknown bytes [ 601.530847][T24095] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 601.581706][T24097] netlink: 'syz.6.4770': attribute type 12 has an invalid length. [ 601.756319][T24097] syzkaller1: entered promiscuous mode [ 601.756344][T24097] syzkaller1: entered allmulticast mode [ 602.883080][T24126] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 603.060525][T24128] pim6reg: entered allmulticast mode [ 603.225141][T24138] geneve3: entered promiscuous mode [ 603.243019][T24137] tipc: Enabling of bearer rejected, failed to enable media [ 603.526684][T16125] hid-generic 0005:0008:0009.0005: hidraw0: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 603.604931][T24151] fido_id[24151]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci7/hci7:200/report_descriptor': No such file or directory [ 603.856658][T14153] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 603.856708][T14153] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 603.856744][T14153] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 603.856777][T14153] netdevsim netdevsim4 : set [0, 0] type 1 family 0 port 8472 - 0 [ 604.717671][T24189] netlink: 72 bytes leftover after parsing attributes in process `syz.6.4801'. [ 604.852882][T24194] syzkaller1: entered promiscuous mode [ 604.852906][T24194] syzkaller1: entered allmulticast mode [ 605.912618][T24233] netlink: 'syz.4.4813': attribute type 11 has an invalid length. [ 606.493911][T24262] netlink: 'syz.0.4817': attribute type 2 has an invalid length. [ 606.493937][T24262] netlink: 244 bytes leftover after parsing attributes in process `syz.0.4817'. [ 606.593324][T24262] xt_l2tp: v2 doesn't support IP mode [ 606.638400][T24266] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4819'. [ 606.709214][T24269] netlink: 'syz.4.4820': attribute type 1 has an invalid length. [ 606.829851][T24271] bond2: (slave gretap3): making interface the new active one [ 606.831691][T24271] bond2: (slave gretap3): Enslaving as an active interface with an up link [ 607.238223][T24279] netlink: 16215 bytes leftover after parsing attributes in process `syz.6.4824'. [ 607.310591][ T32] INFO: task syz.5.3055:17763 blocked for more than 143 seconds. [ 607.310621][ T32] Not tainted syzkaller #0 [ 607.310632][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 607.310641][ T32] task:syz.5.3055 state:D stack:26960 pid:17763 tgid:17762 ppid:12865 task_flags:0x400140 flags:0x00080002 [ 607.310718][ T32] Call Trace: [ 607.310727][ T32] [ 607.310741][ T32] __schedule+0x17db/0x58f0 [ 607.310828][ T32] ? __pfx___schedule+0x10/0x10 [ 607.310862][ T32] ? schedule+0x90/0x2b0 [ 607.310888][ T32] schedule+0x164/0x2b0 [ 607.310912][ T32] schedule_preempt_disabled+0x13/0x30 [ 607.310934][ T32] __mutex_lock+0x7c1/0x1550 [ 607.310965][ T32] ? __mutex_lock+0x5d4/0x1550 [ 607.310992][ T32] ? nfsd_nl_version_get_doit+0x17c/0xd20 [ 607.311136][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 607.311167][ T32] ? __nlmsg_put+0xef/0x1b0 [ 607.311299][ T32] ? genlmsg_put+0x137/0x2e0 [ 607.311327][ T32] nfsd_nl_version_get_doit+0x17c/0xd20 [ 607.311362][ T32] ? __nla_parse+0x40/0x60 [ 607.311399][ T32] ? __pfx_nfsd_nl_version_get_doit+0x10/0x10 [ 607.311426][ T32] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 607.311450][ T32] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 607.311483][ T32] genl_family_rcv_msg_doit+0x233/0x340 [ 607.311516][ T32] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 607.311552][ T32] ? __lock_acquire+0x747/0x2de0 [ 607.311589][ T32] genl_rcv_msg+0x614/0x7a0 [ 607.311621][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 607.311644][ T32] ? __pfx_nfsd_nl_version_get_doit+0x10/0x10 [ 607.311686][ T32] netlink_rcv_skb+0x226/0x4a0 [ 607.311716][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 607.311742][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 607.311789][ T32] ? down_read+0x2be/0x330 [ 607.311820][ T32] genl_rcv+0x28/0x40 [ 607.311842][ T32] netlink_unicast+0x7bd/0x940 [ 607.311890][ T32] netlink_sendmsg+0x813/0xb40 [ 607.311930][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 607.311969][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 607.311997][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 607.312033][ T32] sock_sendmsg_nosec+0x13a/0x180 [ 607.312059][ T32] ____sys_sendmsg+0x54e/0x850 [ 607.344160][ T32] ? __pfx_____sys_sendmsg+0x10/0x10 [ 607.344242][ T32] ? import_iovec+0x73/0xa0 [ 607.344276][ T32] ___sys_sendmsg+0x2a5/0x360 [ 607.344301][ T32] ? __lock_acquire+0x747/0x2de0 [ 607.344329][ T32] ? __pfx____sys_sendmsg+0x10/0x10 [ 607.344361][ T32] ? futex_wake+0x51b/0x5f0 [ 607.344462][ T32] ? __fget_files+0x2a/0x420 [ 607.344492][ T32] ? __fget_files+0x3a2/0x420 [ 607.344531][ T32] __x64_sys_sendmsg+0x1b1/0x290 [ 607.344563][ T32] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 607.344618][ T32] do_syscall_64+0x166/0x520 [ 607.344642][ T32] ? trace_irq_disable+0x3b/0x140 [ 607.344664][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 607.344687][ T32] ? clear_bhb_loop+0x70/0xc0 [ 607.344713][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 607.344734][ T32] RIP: 0033:0x7fe76ed9e159 [ 607.344754][ T32] RSP: 002b:00007fe76fcf2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 607.344778][ T32] RAX: ffffffffffffffda RBX: 00007fe76f025fa0 RCX: 00007fe76ed9e159 [ 607.344792][ T32] RDX: 0000000000000004 RSI: 0000200000000000 RDI: 0000000000000004 [ 607.344805][ T32] RBP: 00007fe76ee3506b R08: 0000000000000000 R09: 0000000000000000 [ 607.344818][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 607.344831][ T32] R13: 00007fe76f026038 R14: 00007fe76f025fa0 R15: 00007ffef391b738 [ 607.344866][ T32] [ 607.344918][ T32] [ 607.344918][ T32] Showing all locks held in the system: [ 607.344938][ T32] locks held by pr/ttyS0/16: 1, last CPU#0: [ 607.345047][ T32] #0: ffffffff8ec364f8 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60 [ 607.345159][ T32] locks held by khungtaskd/32: 1, last CPU#0: [ 607.345320][ T32] #0: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 607.345406][ T32] locks held by getty/5372: 2, on CPU#1: [ 607.345419][ T32] #0: ffff888035ac40a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 607.345547][ T32] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 607.345609][ T32] locks held by kworker/u8:19/7189: 3, last CPU#0: [ 607.345624][ T32] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 607.345716][ T32] #1: ffffc90002f17c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 607.345771][ T32] #2: ffff888034e37258 (&devlink->lock_key#8){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb40 [ 607.345915][ T32] locks held by syz.1.1676/12190: 2, on CPU#1: [ 607.345930][ T32] #0: ffffffff902c42e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 607.345980][ T32] #1: ffffffff8f09f580 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 607.346046][ T32] locks held by kworker/u8:38/14171: 3, last CPU#1: [ 607.346060][ T32] #0: ffff88801b68b018 (&pool->lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2d/0x160 [ 607.346112][ T32] #1: ffff8880b8724408 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x57/0x7d0 [ 607.346162][ T32] #2: ffff8880b8726118 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x904/0xed0 [ 607.346249][ T32] locks held by syz.5.3055/17763: 2, on CPU#0: [ 607.346263][ T32] #0: ffffffff902c42e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 607.346310][ T32] #1: ffffffff8f09f580 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_get_doit+0x17c/0xd20 [ 607.346365][ T32] locks held by syz.2.4350/22541: 2, on CPU#0: [ 607.346378][ T32] #0: ffffffff902c42e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 607.346425][ T32] #1: ffffffff8f09f580 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 607.346475][ T32] locks held by syz.0.4817/24262: 2, last CPU#1: [ 607.346489][ T32] #0: ffff8880538303b8 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 607.346549][ T32] #1: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 607.346602][ T32] locks held by syz.6.4824/24284: 2, last CPU#1: [ 607.346615][ T32] #0: ffff888025229d38 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 607.346666][ T32] #1: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 607.346717][ T32] locks held by syz.7.4823/24286: 2, last CPU#1: [ 607.346731][ T32] #0: ffff888053835038 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 607.346783][ T32] #1: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 607.346833][ T32] locks held by syz.4.4826/24283: 2, last CPU#0: [ 607.346846][ T32] #0: ffff88802522f678 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 607.346897][ T32] #1: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 607.346949][ T32] [ 607.346954][ T32] ============================================= [ 607.346954][ T32] [ 607.346963][ T32] NMI backtrace for cpu 0 [ 607.346977][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 607.346998][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 607.347009][ T32] Call Trace: [ 607.347025][ T32] [ 607.347033][ T32] dump_stack_lvl+0xe8/0x150 [ 607.347061][ T32] nmi_cpu_backtrace+0x274/0x2d0 [ 607.347142][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 607.347190][ T32] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 607.347223][ T32] sys_info+0x135/0x170 [ 607.347247][ T32] watchdog+0xfd7/0x1030 [ 607.347276][ T32] ? watchdog+0x1c7/0x1030 [ 607.347305][ T32] kthread+0x38b/0x480 [ 607.347326][ T32] ? __pfx_watchdog+0x10/0x10 [ 607.347343][ T32] ? __pfx_kthread+0x10/0x10 [ 607.347365][ T32] ret_from_fork+0x514/0xb70 [ 607.347389][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 607.347409][ T32] ? __switch_to+0xc89/0x1420 [ 607.347459][ T32] ? __pfx_kthread+0x10/0x10 [ 607.347480][ T32] ret_from_fork_asm+0x1a/0x30 [ 607.347524][ T32] [ 607.347553][ T32] Sending NMI from CPU 0 to CPUs 1: [ 607.347579][ C1] NMI backtrace for cpu 1 [ 607.347593][ C1] CPU: 1 UID: 0 PID: 4971 Comm: klogd Not tainted syzkaller #0 PREEMPT(full) [ 607.347613][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 607.347623][ C1] RIP: 0010:__lock_acquire+0x2e/0x2de0 [ 607.347645][ C1] Code: 56 41 55 41 54 53 48 81 ec e8 00 00 00 65 48 8b 05 bf ee f1 11 48 89 84 24 e0 00 00 00 65 48 8b 05 8f ee f1 11 48 89 44 24 08 <45> 31 f6 83 3d f8 40 d7 0e 00 0f 84 90 14 00 00 48 89 fb 48 8b 07 [ 607.347662][ C1] RSP: 0018:ffffc90000a18ca0 EFLAGS: 00000086 [ 607.347678][ C1] RAX: ffff88807f291f40 RBX: 0000000000000001 RCX: 0000000000000002 [ 607.347691][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff9aa2a748 [ 607.347703][ C1] RBP: ffff88807f291f40 R08: 0000000000000001 R09: 0000000000000001 [ 607.347714][ C1] R10: dffffc0000000000 R11: fffff520001431d0 R12: ffffffff9aa2a748 [ 607.347728][ C1] R13: 0000000000000002 R14: 0000000000000000 R15: 0000000000000046 [ 607.347740][ C1] FS: 00007f9879a7dc80(0000) GS:ffff888124dce000(0000) knlGS:0000000000000000 [ 607.347756][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 607.347769][ C1] CR2: 00007f1610d556c8 CR3: 000000007f7fe000 CR4: 00000000003526f0 [ 607.347787][ C1] Call Trace: [ 607.347794][ C1] [ 607.347803][ C1] ? ktime_get+0x45/0x220 [ 607.347822][ C1] ? __lock_acquire+0x747/0x2de0 [ 607.347843][ C1] ? __pfx_clockevents_program_event+0x10/0x10 [ 607.347869][ C1] lock_acquire+0x115/0x350 [ 607.347886][ C1] ? ktime_get_update_offsets_now+0x5d/0x3e0 [ 607.347910][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 607.347933][ C1] ? ktime_get_update_offsets_now+0x5d/0x3e0 [ 607.347954][ C1] seqcount_lockdep_reader_access+0x55/0x100 [ 607.347972][ C1] ? ktime_get_update_offsets_now+0x5d/0x3e0 [ 607.347993][ C1] ktime_get_update_offsets_now+0x5d/0x3e0 [ 607.348017][ C1] hrtimer_run_softirq+0xf7/0x2e0 [ 607.348044][ C1] handle_softirqs+0x226/0x860 [ 607.348067][ C1] ? do_softirq+0x77/0xd0 [ 607.348090][ C1] ? __alloc_skb+0x18d/0x7a0 [ 607.348142][ C1] ? __alloc_skb+0x18d/0x7a0 [ 607.348161][ C1] do_softirq+0x77/0xd0 [ 607.348183][ C1] [ 607.348190][ C1] [ 607.348198][ C1] __local_bh_enable_ip+0x100/0x140 [ 607.348220][ C1] __alloc_skb+0x1b1/0x7a0 [ 607.348242][ C1] alloc_skb_with_frags+0xc6/0x760 [ 607.348284][ C1] ? kasan_save_track+0x4f/0x80 [ 607.348302][ C1] ? kasan_save_track+0x3e/0x80 [ 607.348319][ C1] ? kasan_save_free_info+0x40/0x50 [ 607.348342][ C1] ? __kasan_slab_free+0x5c/0x80 [ 607.348360][ C1] ? kfree+0x1c5/0x650 [ 607.348383][ C1] ? syslog_print+0x57c/0x610 [ 607.348402][ C1] ? do_syslog+0x583/0x7d0 [ 607.348420][ C1] ? __x64_sys_syslog+0x7c/0x90 [ 607.348442][ C1] sock_alloc_send_pskb+0x878/0x990 [ 607.348474][ C1] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 607.348504][ C1] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 607.348537][ C1] unix_dgram_sendmsg+0x4da/0x17b0 [ 607.348591][ C1] ? lockdep_hardirqs_on+0x7b/0x110 [ 607.348614][ C1] ? kfree+0x1c5/0x650 [ 607.348636][ C1] ? syslog_print+0x57c/0x610 [ 607.348660][ C1] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 607.348676][ C1] ? __lock_acquire+0x747/0x2de0 [ 607.348695][ C1] ? aa_sock_msg_perm+0x129/0x210 [ 607.348719][ C1] ? apparmor_socket_sendmsg+0x98/0x360 [ 607.348739][ C1] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 607.348755][ C1] sock_sendmsg_nosec+0x13a/0x180 [ 607.348774][ C1] __sys_sendto+0x408/0x5a0 [ 607.348794][ C1] ? bpf_lsm_capable+0x9/0x20 [ 607.348812][ C1] ? __pfx___sys_sendto+0x10/0x10 [ 607.348844][ C1] ? rcu_is_watching+0x16/0xb0 [ 607.348867][ C1] __x64_sys_sendto+0xde/0x100 [ 607.348888][ C1] do_syscall_64+0x166/0x520 [ 607.348908][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 607.348926][ C1] ? clear_bhb_loop+0x70/0xc0 [ 607.348947][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 607.348964][ C1] RIP: 0033:0x7f9879bcd407 [ 607.348979][ C1] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 607.348993][ C1] RSP: 002b:00007ffe6f5dd150 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 607.349011][ C1] RAX: ffffffffffffffda RBX: 00007f9879a7dc80 RCX: 00007f9879bcd407 [ 607.349024][ C1] RDX: 000000000000004c RSI: 00007ffe6f5dd290 RDI: 0000000000000003 [ 607.349035][ C1] RBP: 00007ffe6f5dd6c0 R08: 0000000000000000 R09: 0000000000000000 [ 607.349046][ C1] R10: 0000000000004000 R11: 0000000000000202 R12: 00007ffe6f5dd6d8 [ 607.349059][ C1] R13: 00007ffe6f5dd290 R14: 0000000000000031 R15: 00007ffe6f5dd290 [ 607.349079][ C1] [ 607.349577][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 608.563584][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 608.572694][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 608.582747][ T32] Call Trace: [ 608.586031][ T32] [ 608.588966][ T32] vpanic+0x56d/0xa60 [ 608.592963][ T32] ? __pfx_vpanic+0x10/0x10 [ 608.597478][ T32] ? console_srcu_read_unlock+0x3a/0x60 [ 608.603031][ T32] panic+0xc5/0xd0 [ 608.606760][ T32] ? __pfx_panic+0x10/0x10 [ 608.611185][ T32] ? wq_watchdog_touch+0xf9/0x160 [ 608.616213][ T32] ? nmi_trigger_cpumask_backtrace+0x24d/0x390 [ 608.622376][ T32] watchdog+0x1030/0x1030 [ 608.626715][ T32] ? watchdog+0x1c7/0x1030 [ 608.631141][ T32] kthread+0x38b/0x480 [ 608.635216][ T32] ? __pfx_watchdog+0x10/0x10 [ 608.639901][ T32] ? __pfx_kthread+0x10/0x10 [ 608.644495][ T32] ret_from_fork+0x514/0xb70 [ 608.649091][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 608.654207][ T32] ? __switch_to+0xc89/0x1420 [ 608.658893][ T32] ? __pfx_kthread+0x10/0x10 [ 608.663485][ T32] ret_from_fork_asm+0x1a/0x30 [ 608.668273][ T32] [ 608.671429][ T32] Kernel Offset: disabled [ 608.675749][ T32] Rebooting in 86400 seconds..