last executing test programs: 10.644516001s ago: executing program 1 (id=2390): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2b, &(0x7f0000000000)={0x7, {{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {{0x2, 0x4e23, @local}}}, 0x108) (async) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="300300002400010026bd7000fedbdf251f0300800c0001"], 0x330}], 0x1}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x13, r3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'veth0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000040)={@empty, 0x14, r8}) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@bridge_newvlan={0x28, 0x70, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r6}, [@BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0x4, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_ID={0x8, 0x1, 0x34000}}}]}, 0x28}}, 0x0) (async, rerun: 64) sendmsg$nl_route(r2, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)=@setlink={0x98, 0x13, 0x8, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r6, 0x120, 0x40400}, [@IFLA_TXQLEN={0x8, 0xd, 0xc9}, @IFLA_PORT_SELF={0x48, 0x19, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "b8c6f1e108e412c2b1b00bbfb41722f6"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "41bf4610ac82e07bd2086b1bd13fe20f"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x3}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "bc0572f1cab6b492dd7f44b756cce41a"}]}, @IFLA_PHYS_PORT_ID={0x1d, 0x22, "7451e399d7154fa1cd99b49102d4b3300e4110604119d58468"}, @IFLA_GROUP={0x8, 0x1b, 0x21d}]}, 0x98}, 0x1, 0x0, 0x0, 0x20004008}, 0x8) (rerun: 64) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFCONF(r9, 0x8912, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@ipv6_newrule={0x2c, 0x20, 0x2d2c6d60ea1da725, 0x70bd26, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xcd, 0xff, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8}, @FIB_RULE_POLICY=@FRA_SUPPRESS_IFGROUP={0x8, 0xd, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000080}, 0x4040010) (async, rerun: 64) r10 = socket(0x10, 0x3, 0x0) (async, rerun: 64) r11 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x1a0, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x170, 0x2, [@TCA_GRED_LIMIT={0x8}, @TCA_GRED_DPS={0x10}, @TCA_GRED_STAB={0xfffffffffffffdaa, 0x2, "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"}, @TCA_GRED_DPS={0x10}, @TCA_GRED_PARMS={0x38}, @TCA_GRED_LIMIT={0x8}]}}]}, 0x1a0}}, 0x0) 9.600660747s ago: executing program 1 (id=2401): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x149e42, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x2}) (async, rerun: 32) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) (rerun: 32) ioctl$TUNSETLINK(r1, 0x400454cd, 0x1b) (async) bpf$BPF_PROG_TEST_RUN(0xe, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x89}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xdc0, 0x0, &(0x7f0000000300)="0400000071a76d2688ca006588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) (async) close(r2) (async) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)=0x0) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='ext4_es_remove_extent\x00', 0xffffffffffffffff, 0x0, 0x5}, 0x18) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r6, r7, 0x0, 0x1, &(0x7f0000000180)='\x00'}, 0x30) (async) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 9.17220389s ago: executing program 1 (id=2407): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000001380)=ANY=[@ANYBLOB="0200000000f7ffff0100000000000000000000000000005b"]) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtaction={0x70, 0x30, 0x0, 0x870bd2d, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0xa, 0x0, 0x0, {{0xb}, {0xffffffffffffffd9, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x5}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x8, 0x4000000, 0x0, 0x1ff}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x5}}}}]}]}, 0x70}}, 0x20048000) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x84, 0x18, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELFLOWTABLE={0x48, 0x18, 0xa, 0x0, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELOBJ={0x3c, 0x14, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELSET={0x40, 0xb, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x4}, @NFTA_SET_POLICY={0x8}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x23}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x40}, @NFTA_SET_DATA_TYPE={0x8}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x170}, 0x1, 0x0, 0x0, 0x20008000}, 0x200448d0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r3, &(0x7f00000005c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)=ANY=[@ANYBLOB="84005dd6", @ANYRES16=r4, @ANYBLOB="00012bbd7000fedbdf253d000000080001007063690011000200303030303a30303a31302e30000000001c008200736f757263655f6d61635f69735f6d756c74696361737400080001007063690011000200303030303a30303a31302e30000000001c008200736f757263655f6d61635f69735f6d756c74696361737400"], 0x84}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32], 0x90}, 0x1, 0x0, 0x0, 0x800}, 0x0) 8.945787004s ago: executing program 1 (id=2411): r0 = socket$netlink(0x10, 0x3, 0x12) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r1, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4044801}, 0x4000010) ioctl$AUTOFS_IOC_FAIL(r0, 0x9361, 0x1) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f0000000200)={&(0x7f0000000140), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), r0) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x80, r2, 0x0, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xa}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xc, 0x20}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}]}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syz_tun\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x30000}]}, 0x80}, 0x1, 0x0, 0x0, 0x4}, 0x28000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DAEMON(r3, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x81660354f4549ca}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0xac, r2, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x620e8}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xd1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xa}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x15e}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x48804}, 0x80) r4 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r4, 0x8953, &(0x7f0000000540)={{0x2, 0x4e21, @broadcast}, {0x1, @multicast}, 0x10, {0x2, 0x4e23, @multicast2}, 'ip6gretap0\x00'}) r5 = accept$inet(r4, &(0x7f00000005c0)={0x2, 0x0, @dev}, &(0x7f0000000600)=0x10) setsockopt$inet_buf(r5, 0x0, 0x2f, &(0x7f0000000640)="019c0ac2051c15b8c7c86522a10b8e950b0484833851650a6d9b11b3c1e60578866c48ef4354674f28bf67a5a0b4d39ecb1705e8392ad7918cbe06e42bb8107d5e86ed304072d380b56ee9d5443968cf10a44fb22a54c391755129b39df547783957a6727627badc65bf8d6a4e3f7273ad600921654aa7e0acfd41af139a5d20564a228adc90e88a9836502798b02c77a563df384cdcd568178acd454b419df6ea9317d1df1926d50228c9e5ef9f71a20fd64ea6409428aa8f475772791429a16578304df051b36927e5d8e40b25e0e9f089765afe4ac7139f29621ae84e79a563446a0afe3ebc78002a124277139ddcba69f591042a7aff58f44dc50b25a1ac19dd98e6bcdbe368c743074ad44906581d7cf781605f5d45da7ed24a3c5207fe25efa2e660f8c267dddbf328bee0bad6ad5adcd925acf561ef292c906907b06183002ff7d15fa78eda418d054ac7101e4b7f4bfbcdd687e9c9b889da55338a2864dd591ed0843f3d959a6d92764b7d4dc6665b9a07db9d8efa82e0337a1bef764a5c5c25c48390a9e552b8234ad5db1a3a440016058eb50fca52b2e8ea46db4f91d2362280c6b0a7752f2a704168f8020b34e258417ec3abb63db5b52515958945e0a8720a717c0b6c4930b6fbe3c01a23a022e757b8358a21cf3c940d0d545944c32064fb89de07447bacf49fbf771a5bd8680aeaa69ac2616e96ea025b40b8d9a6e9f85c812309c25cb4354c25b62e58f0f90f029b637df8c1038119f6beab88770b4d8324fd4fba16ec9768ceb70f2ebca4ff14984e5749995ed31f8a758db3ef128d0bfe15a8bfd223969f417f5b2e34bdd4d833894a3b4113f0d532a811ba55425018e28e4fb22eda2ae6e4c8962de860916f358eacd8a64e2f787bc404b90e569eee6f2bc54d612781e74dbabb8e4f4595509c151c68eb36e3db5b5239a028754188d80f6a7eb327f7215316ecf4e1846076445726f99ee3c86689e03259b2a6597ffb5b286a43a704f5988843e94f010ebdb2522808adf8445059041665462bff773f43cdc172f7d5443a85fabc24fc6d40d1f1f69111c1f8353cb561ad73a94824107b9ceb2a54858974fd4f8f284c298c842bb35019ce2e4976c71ba6893ee961b6058a62d1a50ea6fadfae35fed209974a389d781d31d4e6e1741b5499c6a33ed1104e815cdbd6e6bd6630f7a98117b786fd6d9d0c982fbc41ed9839c61b7ab0bc9b508d428be839dc8ac58eb2d7a3af762869ce8579177ceee2ed85d0cec18a329c6c87cccf0c0f3251715f96e77c4ae3d01aef7af1918898af3dbcbe4716f4f72aef5df6f181abeb799eb9ec24421710c2d823078e7d2aab7b7aca4dff54e5b581ecc067305913e4d6a698b44cae341d8a55ab4b772120e50ed3a04674c6914d5c377bc1d143192b733e5a665c308e2c4f0d1f745ae21c208916ccf2467d33f1796625bc8203602e3fc19590cbebc6e8bc31d9a0e07a9b1ffd432f389b579b098f97fd81cfc9120991ebbbc97095a29641275a9e65b31cfb5324725562ce9375517c192512d0935dfcd0f3bca4b049d89372bd1846dd31267540d6e0a2dd98db8fc0c95142e5547270468932d51d151339931191c3a5dff787133d99ff5ac7adc5e380ba1ce1e634fd11aa2ad0e35ad989e605e69fef9685c005617123f37a5f8c90ed121191d307f4dd727993204a7e42663171e6c6b353fd34f4fb3c3c25a6607507fe317461f242a9622bdf6f8a74625a930e96a9d4d7e990b5ef523a1d5fe2d7b7d3cc5e6fdaa19d23e5dbc562a669c523b2a5ac9e6c651466d0a7e5099d97cec0476b7b35320d7ef85153bdc18b1872050884e88c416098733ce94be72210277581a4d6122363e7923146580aed329845f6c520231620f632e7c8e7d5e56302995274aaeda1f510486ec2a39f856be38edb1e470d49beaa439d05c8c1c4757f9d119dd0512f760568230a2e61c48fdfda977f8b5b1c8d16cfc71c36d31b9e9b65b79f6aa0bea6bc1110a396a4004b3d01b18e03c25a4f51aa71cd0fb56b280a43e1bc86acfdb5b7afe288da7978cd299d8541cdd2c09f2da38df343dce5cecfa8bc5a20a23d198ce6cb9eecb24d102efa8015ad6243e0c87a31ed6aa127e0e926621ba6dc264948269c6b9d1eee7ad252a96455f61e175d5c6bfcd0bd8d95c7bb14335098180a1f008a12bff6cc76bbd54fc49627b1acd7cbf7a639724378d8d9366298cd63e8f94dbfea1e687178bc72eca3c4bc21f7032d07f8d7a66625ad591639de4c96547b5d8e17571425f38377f33490ca77b7c2028eebf69519eb919f10de7f754c0b543a0f89ccb07df54e1f7d8b38ef4f72a63d037aa638f05c8c60a9619195ed0749e0405dbfcd1442f83acb6abc65f3e3181274de360cf67c656313822260be2a430e4f2117e749dee52289beeeac223d8b9851bf21b60938977adf6a963f4206286079aa09561579e0616b6239172a505725e625669a783190e81762fbe160558bf24b1548432a0ee5d0c551b22b9c2caaba498fe6fcab7e67e4643a375ceafb8ad6ef8b464efff3c738a2dbe6a4964cff1b3dc7386656417db906c32689695a0f03ab6730add49d0be770df366fb6f49de89ffa077e4b492f8f3f4a129f5dbe1be908cd5b7d102b485ffec3d84ab2abbb4b047421f4acf3b4cae26f69c3d7f5af13564bad81ad8bf19a24f96bc1d6e57f90245a70eec1a46ad0c4549d5c533605d8835c84936b89a18225ca84a8b6e33931a92833a43117dc4bae75575d5b032b87d5187ebb78da0a40825a906c1f686de11317e3db5cc87bf7c05a101d2327a6aea28020e545e8122ffa6bc6b3cd59d6f07cb07e25f5b0de9701d502f8bee76267c97dca66e6b63242771b255631b100fcc05acbb36c3551c68d4bfeafe054db8c4324095fcad41bed26310df8fc179f18ca32672c1dcf9c8493c27e24be2232cbba2a7a8676853cfecfb4266a6931d541f01508578dbec46e0216bb5db9ff1a3a543d19f5f91d9bd9f4954031b7ba1a86e6d98ae813d7e75d934f5cf055d1ab465ec46bed6a67c9038f78961a70afc1a7ba8fbef1fa856528fcbcc6cfa9cf323e7b43c2e1667e1757738910bf5456630dd05a03ebb918e2b8bc04161bfc3141c848003c5897b48ed07f3f3fce151d06ba73cbad98a70a7a1b1f01d0dd7873a37d6ae0c860d1abe8f982f94a5f90c964aa2948b81141d149bc908c01b3ba173a174d3c7e9268eeebaa02bd3bf5dbd6f9d746ff89c0e34b1945c49a7be48074c04f1ed74214915158db857bf820ed6bec2c4c64da1298614ffa57bd7150ff257719c3d3897da5fe3007e6cddaa874154818f020c4f2b7076e5460cb9686bff524205738593365728f8ac0b442588963b964c93a39c4746002ff142cf12b2d41910a112d2789dcda10893879f4f23c54ece80d962bc12fe820cfc6b50100747fb26c0eea3d938f066dd607332c7cc347b8d23983c20d2a960d57a186286d7e6f406cda2bd813170278e17b954ec8c6b77c453d6af4e94c4b7f713fe80217c4c4315d06214d5a2499a49e148bc2a7c2f704c8d7dace89053c7cac4d20559d9695a2e806addc239be3546f871534b797f448e33f81e0afa94439991f591a97f9075eceefc5bb029bee8c9ba055079a4dee55d46601b29fdc0d48193596991b47931a8fac6d4a1ffbaa904a661d703faad515f4ca41f87e2d849531dde8c5988fd77d1195bb87aaa8ea49e56f8621c738bff1e47b22ecc669b7391cd5be6422ac64f0fc89d39904988f4d29312124ee43cc595b3c78594559785ea44cb69db2156f20a612881da1466be6f084ed1f6b324ac1a3821742ca52537570edc390e57bde810c0f5278bb2bc67002ece2b8df2899f527456414ebebfe5f0b31d885a49a72fdda0aa8575f50154f0eead60272c7856cebedc41248e089c1a05ada5a6c76f5367f0b9abc35071d93f0365ddfaaf4f9a272430a99953c7e9b10739d3031e8d8bd91e37cd978643814b8d85f282fb5ffc1d19a9c5d620c1509ab9d71327f0ef06bbfb42f62844bc406cb127ff629e5ac3e43d8657e8cf1456721d667d02b57e4ec633048d4606c182e97ee19dea16f89afc4101f7c6af6c2300e80eb6aa23bf80e0fbbbd377e18c192be98cedf528e98913c6163e53165e88aa5e6a3722313bbe61c2fc6f6ff4389804571265f12c85d8810c7d77bd4a8b4c047bb1a73de60566b19dcdc4ba83de1dd35252f1b1a4935424b464917ed1c2dc6842edd0de521b9a307546deef1c6fc88988525cbc2f9865a0b71356a864771e516c3ecd677f279f17bd62a58a14e4e60c9d387571db32ec76f02cda7e7cc157434775fcb5e1934667c9e1b1eb098b55f17a6c266f7e9651efafcd86526c4e3a954a0db76ecf4e75dc7f3e8f781fbb1b31e365f18f47612b9439a83b867c0c77154ec681d8cbf889545f0b4891a6f46b4ef360b1e6720a0c72ce411f77da5a6b24ef108b0d8a8cd589e89cb221758825ed1638886b79191cd75116e5d138c61dbc85532ea27e6a8283ea9ac83e1dcf532f0c257e21cf928afb05d28452484d9ba5e2e37beeee9466e1ecc4f8223bff29a30cddde2ab9e523ae63cc9a2b45f76feb3f48a51c87e3932cb1ee04db07d6a56f7a652cc51b27a15e080aeb2476924a0d44e22d8e031192d6d948ed7b1f22e616903e25708c1b41d749219f4aaf5c3be4d8c646cd3fb353bd7c27b89d2ae3c1760172f3ef3f70f5babe1b30709aef7c090ef2b660069e74028a35337b53b13f2932aa24d3d7160d34a8c0530d70bbc510ef991cc8fe9ac92c4dd57b8c08453b7a7b2cb12118661fad84f894ac5980a57288c673d0740dd31aba8be895bb6ba5e8bad1a3865d86a9ff33be72e2f2c622efb42950794a8fd5182a473f2a8d8922ced484b5cd0d424eb00a3283875264416095893823901e68be0f83189b13cb271a9770cd82d78990a7f3e48b978e6ef001b1b38801da4ac62f6a47347ba76f2359681d4dcdf611076932f0412b398080f3d9a1976df0c989744a676adf5d0ea6a12faae34a13dba29f5450f638066b3761d8476c1b85f2dcdf950ddc1318cd2f9e47ca87eb6083e818121d968a50074c1453e251460ad9a16b018cfa4cd06378f45b6baee5f87c4f2b15e0dda7f272129b57f011a40b763dca974e4a77f256b85259550ae80beb11c9592853e85d6f9882e067d292b45ecde99f36d3ae27af822fdeaf35f266c5ed82d840ee44d3f5f0efe6624072c4c353292db32682ae0e080645b5b8a7ea76140eb055ddbb27049e6185565d71b586969dcb52c43a7bbdb334d1576fba3d9c91370f2f0af2e57ef0162b128e581fbd037944b605f12fa44c064a3a1ef11af722173640186d41b51ba8ac86cfbc288894e203fb3e5eea8caf8d2947d367007bb48f56deb9a31ce8b489849b99c1ee7acd8f644c733227200e344fb66225f0b9a1309c3f39220a88a85ee6ecd70fdf03a0a9f626e89e60f566c68980a76c6dac37b965ecb170df2a70cde688e9a2078b532864036bfcdae898a2c98d709dcf4d5d76ec2688f9c43e4b8128a0224aab5f989de101b58ecc1ee59a05d4571213aa197bf4cfb77e9da3b89112951f3c80dad877b81bcc41f6131f338a1b362788d1f7fbf980c0a73e631ef79f627eb742b3a251d42be1e600627f199e467765e7c5341b86600f2dbb21304c0b4527d3b800b75bc2e7b4c66e8b67aae7dea8ebdec9ac3737b7a8f8c75284003f9ab36970e00f4c6e757aa5f66483e02d6243ccfe6738a", 0x1000) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001680), r0) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000001740)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x14, r6, 0x4, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40004000}, 0x24000000) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000001780)={0x0, 0x61, "833398c572a51fbc5152b08ff0c97d206a813fcc17b17b8d005ee5895c3beb408ae77339bcf419dc69c9f3a3408b30df6c5785caa5a7a92648cfb8a28143f4598f56f8160e93bc4a5bec3526a0e36cd3d410efb31479ea9a5939f9ca12c98bc6f6"}, &(0x7f0000001800)=0x69) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r5, 0x84, 0x6c, &(0x7f0000001840)={r7, 0xd2, "8416dbf31e2d9ea6e4a46f6df58d9b5f842addf84eebfa23c20a1aa94d619468ae4094384f4f3f1e8c1fe4e8660ce9c761ba90016a038e31d624f5c6e5a2e6e88aa3e2e5ef8778779e103b5ed2d7c0a06b8c33382de0f5ba03dfca59cd68ea73be0c355b5c870eed8a63caede7f22784b780f13ea767750da63d907340f402c029bc1785b298ef3fc9c629266468a276c5b89b031dcb921cdea442a7f42b36032b06a967f3d7de19425fd1aecdebcca23b3880e237e7b07ca7febb252d49e9ce67372930bf879f1c482ae974cbb67f4a4398"}, &(0x7f0000001940)=0xda) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000001b00)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001ac0)={&(0x7f00000019c0)={0xc8, 0x4, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_CHAIN_HOOK={0x34, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x47f68f07}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2833d303}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6e0fbf46}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x11d4aacf}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xfd14566}]}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_COUNTERS={0x34, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x9}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x10000}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x9}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4}, 0x80) r9 = accept$alg(r0, 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r9, 0x40049366, &(0x7f0000001b40)=0x2) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000001c40)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001c00)={&(0x7f0000001bc0)={0x2c, r6, 0x400, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "39296bf41e"}]}, 0x2c}}, 0x4400) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000001cc0)={r8, 0x38, &(0x7f0000001c80)=[@in6={0xa, 0x4e21, 0x401, @loopback, 0x8}, @in6={0xa, 0x4e21, 0x40, @mcast1, 0x6}]}, &(0x7f0000001d00)=0x10) r10 = socket(0xa, 0xa, 0x0) setsockopt$inet_sctp_SCTP_AUTH_KEY(r10, 0x84, 0x17, &(0x7f0000001d40)={r8, 0x6, 0x8d, "e7587097441a05b5065235e26a59235c7efc3e5a5f679aface02360de1f5ff4316c4c565ca76e609fc940f76bd511e9177b0bf764ff903b438f7403713d065f1ea822c6cfd7322b965019d74e3ee305f6589230761105227b541d771136b1a881b53290e9623a741dbef3f6c2378adab703d8ee451c3b5e305f5cf77db6a2879c997cec5c6aa0a1f031930d04e"}, 0x95) setsockopt$inet_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000001e00), 0x4) sendmsg$NL80211_CMD_SET_TID_CONFIG(r10, &(0x7f0000002380)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002340)={&(0x7f0000001e80)={0x494, r6, 0x4, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0x468, 0x11d, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}, {0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0xe4, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x7f, 0x1, 0x6, 0x101, 0x3, 0x0, 0x200]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_5GHZ={0x6c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x60, 0x30, 0x1, 0xb, 0x2, 0x4e, 0x2, 0x18, 0x0, 0xc, 0x1b, 0x0, 0x24, 0x6c, 0x60, 0x30, 0x5, 0x16, 0x30, 0xb, 0x6c, 0x48, 0xb, 0x2]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x0, 0x8000, 0x1, 0x6f, 0x56, 0x4, 0x1]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x6c, 0x60, 0xb, 0x12, 0x48, 0x18, 0xb, 0x1, 0x48, 0x18, 0x60, 0xb, 0x0, 0x1b, 0x6c, 0x1b, 0x6, 0x9, 0x5, 0x30, 0x4, 0x9, 0x30, 0x1, 0x36]}]}, @NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2a, 0x1ff, 0x5, 0x2, 0x9, 0x7, 0x2, 0x4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x818, 0xb7, 0x8a, 0xc77c, 0xc, 0x2ec8, 0x34a9]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x14, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x6}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xc0}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x80}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x49}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x5c}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x71}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x2ac, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd9}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x51}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x268, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xa8, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4c, 0x2, [{0x5, 0x5}, {0x0, 0x1}, {0x2, 0xa}, {0x3, 0x5}, {0x5, 0x2}, {0x1, 0x2}, {0x4, 0x9}, {0x5, 0x3}, {0x3, 0x6}, {0x0, 0x9}, {0x4, 0xa}, {0x4, 0x8}, {0x3, 0x3}, {0x5, 0x2}, {0x1}, {0x7, 0x6}, {0x1, 0x7}, {0x3, 0x9}, {0x2, 0x9}, {0x6, 0x9}, {0x1, 0x7}, {0x1, 0x2}, {0x7}, {0x0, 0xa}, {0x1, 0x7}, {0x7, 0x2}, {0x0, 0x6}, {0x1, 0x1}, {0x6, 0x8}, {0x3, 0x6}, {0x1, 0x2}, {0x0, 0x1}, {0x5, 0x4}, {0x3, 0x5}, {0x7, 0x4}, {0x2, 0x7}, {0x7, 0xa}, {0x3, 0x3}, {0x3, 0x5}, {0x0, 0x8}, {0x1, 0x8}, {0x6, 0x7}, {0x5, 0x4}, {0x2, 0xa}, {0x3, 0x4}, {0x2, 0x5}, {0x1, 0x4}, {0x4, 0x3}, {0x5}, {0x1, 0x2}, {0x2, 0x2}, {0x4, 0x8}, {0x5, 0x7}, {0x1, 0x6}, {0x0, 0x5}, {0x1, 0x8}, {0x5, 0x9}, {0x2}, {0x0, 0x9}, {0x1, 0xa}, {0x5, 0xa}, {}, {0x1, 0x2}, {0x2, 0x7}, {0x7}, {0x5, 0x4}, {0x4, 0x2}, {0x4, 0x1}, {0x1, 0x9}, {0x5, 0x1}, {0x3, 0x8}, {0x2}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x2bfe, 0xfff7, 0x1, 0x20, 0x6, 0x4, 0x8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x6, 0xc000, 0x40, 0x1, 0x13a7, 0x9, 0xd5f8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x1, 0x4, 0x1, 0x5, 0x3, 0x4, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x1, 0x4, 0x5, 0xfc3f, 0x39, 0xc, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x98, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x21, 0x1, [0xc, 0x4, 0x4, 0x30, 0xb, 0x5, 0x4, 0x4, 0x6, 0x18, 0x16, 0x2b, 0x35, 0xb, 0x12, 0x3, 0x1, 0x16, 0xd, 0x16, 0x36, 0x9, 0x0, 0x48, 0x3b, 0x30, 0x3, 0x36, 0xc]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x401, 0x1, 0xd, 0x2ed7, 0x4, 0x800, 0xffff, 0xac1d]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x0, 0x60, 0x5, 0xc, 0x6, 0x1b, 0xc, 0x1, 0x36, 0x16, 0x1, 0x24, 0x4, 0x4, 0xc, 0xc, 0x6, 0x36, 0x6, 0x60, 0x37, 0x48, 0x36, 0xb, 0x27, 0x30, 0x2, 0x60, 0x0, 0x6c]}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x24, 0x48, 0x36, 0x30, 0x48, 0x3, 0x24, 0x36]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x8145fbac9497a6cd}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xc, 0x81d, 0x1, 0x3, 0x0, 0x4, 0xfffa, 0x50]}}]}, @NL80211_BAND_6GHZ={0x54, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x1, 0x40, 0x6, 0x7, 0x0, 0x7f, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x7, 0x4, 0x1, 0xc23f, 0x4, 0x1, 0x9]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x800, 0x7ff, 0xa18, 0x5, 0x6, 0x8, 0x40cf, 0x226f]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x1, 0x5, 0x3, 0x3ff, 0x9, 0xd, 0x5]}}]}, @NL80211_BAND_5GHZ={0x30, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x6, 0x2, 0x9, 0x6a44, 0xc6b, 0x5d5b, 0x6]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_2GHZ={0xa0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x0, 0xf14, 0x100, 0x781, 0xf79, 0x5, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x9, 0x1, 0x40, 0x2, 0x8, 0x8001, 0xffff]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x39, 0x2, [{0x5, 0x5}, {0x0, 0x1}, {0x7, 0x2}, {0x6, 0x5}, {0x6}, {0x5, 0x1}, {0x4, 0x1}, {0x2, 0x5}, {0x2, 0xa}, {0x2, 0x7}, {0x3, 0x9}, {0x3, 0x4}, {0x3, 0x1}, {0x5, 0x9}, {0x1, 0x4}, {0x6, 0x7}, {0x6, 0x6}, {0x7, 0x5}, {0x7, 0x1}, {0x0, 0xa}, {0x0, 0x7}, {0x0, 0x9}, {0x3, 0x6}, {0x5, 0x3}, {0x4, 0x3}, {0x0, 0x4}, {0x5, 0x4}, {0x4, 0x7}, {0x2, 0x6}, {0x4, 0x7}, {0x4, 0x2}, {0x7, 0x2}, {0x4}, {0x1, 0x3}, {0x0, 0xa}, {0x0, 0x2}, {0x4, 0x1}, {0x6, 0x1}, {0x4}, {0x4, 0x1}, {0x1, 0x4}, {0x7, 0x5}, {0x1, 0x2}, {0x5, 0x3}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x7}, {0x4, 0x6}, {0x4, 0x6}, {0x2, 0xa}, {0x6, 0x9}, {0x0, 0x5}, {0x4, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x62db, 0x10, 0x401, 0x3, 0x0, 0xad, 0x3, 0x2]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4000, 0x8, 0x7, 0xd, 0x3, 0xb, 0x0, 0x5]}}]}]}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x6}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}]}]}, 0x494}, 0x1, 0x0, 0x0, 0x40}, 0x800) sendmsg$IPCTNL_MSG_CT_GET_STATS(r10, &(0x7f0000002480)={&(0x7f00000023c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002440)={&(0x7f0000002400)={0x14, 0x5, 0x1, 0x3, 0x0, 0x0, {0x7, 0x0, 0x2}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000002580)={'rose0\x00', &(0x7f00000024c0)=@ethtool_rx_ntuple={0x35, {0x0, @esp_ip4_spec={@local, @multicast1, 0x8c20, 0xa}, @sctp_ip4_spec={@empty, @empty, 0x4e24, 0x4e20, 0x7}, 0x2, 0x9, 0x0, 0x7ff, 0xfffffffffffffffe}}}) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000002600)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r0, &(0x7f00000026c0)={&(0x7f00000025c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002680)={&(0x7f0000002640)={0x40, r6, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040c0}, 0x20004080) 8.412859058s ago: executing program 1 (id=2417): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'netdevsim0\x00', 0x0}) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_LOOPBACK(r2, 0x65, 0x3, 0x0, 0x0) r3 = accept(r0, &(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @multicast1}}, &(0x7f0000000180)=0x80) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0xffffffff, 0x10}, &(0x7f00000002c0)=0xc) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000440)={r4, @in={{0x2, 0x4e23, @empty}}, 0x44, 0x1ff}, 0x90) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000340)=@sack_info={r4, 0x9, 0xfffffffc}, &(0x7f0000000500)=0xc) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000300000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffd62}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xc, 0x4, &(0x7f0000000080)=ANY=[@ANYRES32=r5, @ANYRESOCT], &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', r1, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) 8.052068902s ago: executing program 1 (id=2423): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) (async, rerun: 64) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (rerun: 64) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0xbf82) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) getsockname(r3, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, &(0x7f00000000c0)=0x80) (async) sendmsg$IPSET_CMD_TYPE(r2, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)={0x38, 0xd, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x38}}, 0x0) 3.036411159s ago: executing program 3 (id=2493): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xfffffffffffffff8}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}, 0x1, 0x0, 0x0, 0x24000040}, 0x0) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r0) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000140)={0x0, 0x1, 0x6, @remote}, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000eeff120000000a0004007778616e3300000008001500", @ANYRES32, @ANYBLOB="080001"], 0x30}}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x4) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) sendmsg$kcm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0x0) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r2, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=0x0) sendmsg$NFC_CMD_ENABLE_SE(r0, &(0x7f0000000280)={&(0x7f0000000100), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, r1, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@NFC_ATTR_SE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004000}, 0x24010050) 2.170517126s ago: executing program 0 (id=2508): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x34, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x1}]}, 0x34}}, 0x0) (async) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="bc04000000050104000000000000000000000000540201000000000000000000000000000000000073797a31000000000000000000000000000000000000000000000000000000003405be39dc2a3ba9f2d90eca67823d459716e3f50fc1e8682163f65134d25ad2"], 0x4bc}, 0x1, 0x0, 0x0, 0x4004811}, 0x0) 2.092438351s ago: executing program 3 (id=2509): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000014c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3a}, @NFTA_SET_EXPR={0x2c, 0x11, 0x0, 0x1, @target={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x4}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xa, 0x1, 'NFLOG\x00'}]}}}]}], {0x14, 0x10}}, 0xb0}}, 0x20000800) socket(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0xffffffb9, &(0x7f0000000280)={&(0x7f00000000c0)=@ipv6_getaddr={0x18, 0x16, 0x3c2be10bca706f15, 0x0, 0xffffffff, {0xa, 0x0, 0x10}}, 0x18}, 0x1, 0x0, 0x0, 0x44000}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0xffffffb9, &(0x7f0000000280)={&(0x7f00000000c0)=@ipv6_getaddr={0x18, 0x16, 0x3c2be10bca706f15, 0x0, 0xffffffff, {0xa, 0x0, 0x10}}, 0x18}, 0x1, 0x0, 0x0, 0x44000}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000300)={'gretap0\x00', &(0x7f0000000380)={'erspan0\x00', 0x0, 0x700, 0xb123ea9c26330488, 0x6, 0xfffffff9, {{0x17, 0x4, 0x2, 0x7, 0x5c, 0x68, 0x0, 0x10, 0x0, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x40}, {[@timestamp_addr={0x44, 0x3c, 0xf7, 0x1, 0x8, [{@private=0xa010102, 0xf5}, {@multicast2, 0x8}, {@loopback, 0x1}, {@multicast1, 0x796}, {@dev={0xac, 0x14, 0x14, 0x42}, 0x52}, {@remote, 0xb99}, {@broadcast, 0x5}]}, @generic={0x83, 0xc, "40ce98a1af3daa973161"}]}}}}}) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000300)={'gretap0\x00', &(0x7f0000000380)={'erspan0\x00', 0x0, 0x700, 0xb123ea9c26330488, 0x6, 0xfffffff9, {{0x17, 0x4, 0x2, 0x7, 0x5c, 0x68, 0x0, 0x10, 0x0, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x40}, {[@timestamp_addr={0x44, 0x3c, 0xf7, 0x1, 0x8, [{@private=0xa010102, 0xf5}, {@multicast2, 0x8}, {@loopback, 0x1}, {@multicast1, 0x796}, {@dev={0xac, 0x14, 0x14, 0x42}, 0x52}, {@remote, 0xb99}, {@broadcast, 0x5}]}, @generic={0x83, 0xc, "40ce98a1af3daa973161"}]}}}}}) connect$packet(r2, &(0x7f0000000400)={0x11, 0x6, r3, 0x1, 0xfc, 0x6, @local}, 0x14) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) (async) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x2, 0x1}, 0x20) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000003200)={'ip6tnl0\x00', &(0x7f0000003180)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000003200)={'ip6tnl0\x00', &(0x7f0000003180)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r8, @ANYBLOB="0c00990000000000000000000800a100ffff0000080026008d03000008009f"], 0x40}, 0x1, 0x0, 0x0, 0x44}, 0x0) (async) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r8, @ANYBLOB="0c00990000000000000000000800a100ffff0000080026008d03000008009f"], 0x40}, 0x1, 0x0, 0x0, 0x44}, 0x0) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r5) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r10, 0x0) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r10, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) (async) r11 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r11, 0x28, 0x0, &(0x7f0000000340)=0x3, 0x8) r12 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r12, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000680)=@ethtool_regs={0x12}}) sendmsg$ETHTOOL_MSG_DEBUG_GET(r5, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0x74, r9, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4040000}, 0xc8054) 1.975884317s ago: executing program 0 (id=2511): r0 = socket$packet(0x11, 0x2, 0x300) getsockopt(r0, 0x1, 0x2, &(0x7f00000003c0)=""/165, &(0x7f0000000480)=0xa5) (async, rerun: 64) r1 = socket$rds(0x15, 0x5, 0x0) (rerun: 64) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f0000000040)) (async) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000a00)={'wlan0\x00', 0x0}) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3) sendmsg$NL80211_CMD_DISASSOCIATE(r3, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000000)={0x30, r5, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_REASON_CODE={0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008001}, 0x840) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x2, 0x10, &(0x7f0000000040)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffff5}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (rerun: 64) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x39}]}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x31}, 0x90) 1.463715991s ago: executing program 4 (id=2515): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000440)={0x1f, 0x2, @none, 0xfffe, 0x2}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000440)={0x1f, 0x2, @none, 0xfffe, 0x2}, 0xe) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r1, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 1.408447623s ago: executing program 2 (id=2516): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000880)=@framed={{0x18, 0x5}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd, @generic, @initr0, @exit, @tail_call]}, &(0x7f0000000000)='GPL\x00', 0x4}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) 1.256823988s ago: executing program 4 (id=2517): r0 = socket(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x0, 0x0, r1}, 0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f00000001c0)={@multicast1, @private=0xa010102, r1}, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_OP={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x1, 0x0, 0x8}}]}}, @TCA_RATE={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000801}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) 1.200629197s ago: executing program 2 (id=2518): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000001300090700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000080013"], 0x30}}, 0x0) r1 = socket(0x1, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000040)={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x16, 0x8}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="620ac4ff00000000711009000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x90) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0xfffffffffffffe01, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0x10, 0x1, 'CONNSECMARK\x00'}, @NFTA_TARGET_INFO={0x5, 0x3, "ef"}, @NFTA_TARGET_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x6006}]}]}], {0x14}}, 0xa0}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)=0x0) sendto(r2, &(0x7f0000000000)="b592ee334ccb06bdb116344d4f775ad93448e1bcfeff21d1e61f", 0x1a, 0x850, &(0x7f0000000140)=@nfc={0x27, r4, 0xffffffffffffffff, 0x1}, 0x80) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}, {0x2c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "ac"}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_CMP_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xf8}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 1.019030708s ago: executing program 4 (id=2519): ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wg0\x00', 0x0}) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x8, '\x00', r0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xa, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="82000000000000000ab70300000000000085000005000000000000d9a88c8134bf1abd0000000000009500447106a85107347e93b97f00000000001f20b8453b5c0c25b6a172ef7e70877fdf8e2db942213ba5ae0c19db9a0a9fcc2075659c7618cf8ef2aac380afa6fb2eed1991788765fc054a3711bbce33794dd684fc0336748a2efd1678bd32bd7926450344e049ef3a30651c97061d0169a453b07e29aa8b275e0af48057"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 945.002023ms ago: executing program 0 (id=2520): bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="180800000018120000478c00000000000000000064585bd6020000002563540f048486bc0facf6011b6d61f5d295d47675a137a8b056276be6499f2f3d28aa5d51dbc9dcc03994553c79e784d399c9ec7e", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000002f000000b7090000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="720ac4ff000000007110ac000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) (async) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0e000091d028ef8020ab0700040005"], 0xfe33) 935.526823ms ago: executing program 2 (id=2521): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x8, 0x0) sendfile(r0, r1, 0x0, 0x8) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x149e42, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x2}) r3 = socket$kcm(0x10, 0xd, 0x0) sendmsg$kcm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec59acbc0413a1f848100000005e0c00f0ffffff180e000a001400000002801687121f", 0x75}], 0x1}, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x20) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$802154_dgram(r6, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000100)='\x00', 0x1}}, 0x40805) ioctl$sock_inet_tcp_SIOCATMARK(r5, 0x8905, &(0x7f0000000280)) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 902.473063ms ago: executing program 3 (id=2522): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001400030500008000ffdbdf25", @ANYRES32], 0x20}, 0x1, 0x0, 0x0, 0xc090}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000000)={0x6, 'veth0_vlan\x00', {0x2}, 0x101}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f00000023c0)={0x0, 'veth0_vlan\x00', {0x1}, 0xd}) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@generic={0x0, 0x0, 0x18}, 0x18) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000780)="d80000001a0081044e81f782db4cb9040a1d0800fe007c05e8fe55a115001c000200142603600e12080005007a010401a8001600200003400d000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) 810.147286ms ago: executing program 4 (id=2523): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) socket$alg(0x26, 0x5, 0x0) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r2 = accept4(r1, 0x0, 0x0, 0x800) writev(r2, 0x0, 0x0) (async) writev(r2, 0x0, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x40, 0x0, 0x8, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x3e}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_SSID={0x11, 0x34, @random="5633e5bde725f2b28b44e0b849"}]}, 0x40}, 0x1, 0x0, 0x0, 0x4800}, 0x4000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000800)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400f90071000100000000000000000ade9142b5df0007000000", @ANYRES32=r3, @ANYBLOB="0c0001800800010029000400"], 0x24}}, 0x20008000) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) (async) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r4, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x104}, {{0x0, 0x0, 0x0}, 0x80000001}, {{0x0, 0x0, 0x0}, 0x8001}, {{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f00000029c0)=""/190, 0xbe}, {&(0x7f00000028c0)=""/236, 0xec}, {&(0x7f0000002b80)=""/4100, 0x1004}, {&(0x7f0000000640)=""/68, 0x44}, {&(0x7f0000000500)=""/240, 0xf0}, {&(0x7f0000000740)=""/251, 0xfb}], 0x6}, 0x9}], 0x4, 0x4022, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000060a0b04000000000000000002000000200004801c0001800b0001007470726f787900000c00028008000140000000010900010073797a30000000000900020073797a32000000001400000011f8000000000000000000000000000a"], 0x74}}, 0x0) clock_gettime(0xaf098b49fff259ae, 0x0) (async) clock_gettime(0xaf098b49fff259ae, 0x0) syz_emit_ethernet(0x9a, &(0x7f0000002340)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "3000bb", 0x64, 0x2b, 0x0, @private2, @local, {[], {0x0, 0x0, 0x64, 0x0, @wg=@response={0x3a, 0x0, 0x0, "82f63de64f6ce2ee11028289aefdb3449391a823213e6336516748a7949bb108", "402fa83b1d661c18462075368a186092", {"9ddeb8f71aa23d391b8fa99e9816af2d", "040876a663a86d97f46b9665cc18492b"}}}}}}}}, 0x0) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) ioctl$sock_netdev_private(r0, 0x8943, &(0x7f0000000000)) socket(0x2, 0x80805, 0x0) (async) r6 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r6, &(0x7f0000000440)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f00000000c0)="99", 0x1}], 0x1}}], 0x2, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xc, &(0x7f0000000040)=@assoc_value, &(0x7f0000000000)=0x8) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000000240)={0xffff, 0x1, 0x1, 0x1, r7}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000240)={r7, 0x7}, 0x8) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000240)={r7, 0x7}, 0x8) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='memory.numa_stat\x00', 0x0, 0x0) ioctl$PPPIOCGDEBUG(r8, 0x80047441, &(0x7f00000001c0)) 798.168411ms ago: executing program 0 (id=2524): r0 = socket$inet(0x2, 0x2, 0x8e45) sendmmsg$inet(r0, &(0x7f0000000000)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_retopts={{0x18, 0x0, 0x7, {[@cipso={0x86, 0x8, 0xffffffffffffffff, [{0x2, 0x2}]}]}}}], 0x18}}], 0x1, 0x4040880) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) (async) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x34, r3, 0x11, 0x0, 0x3, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7f}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x34}}, 0x0) 736.12558ms ago: executing program 3 (id=2525): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0x70bd26, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PEER_NOTIF_DELAY={0x8, 0x1c, 0x2}]}}}]}, 0x3c}}, 0x4008000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=@gettaction={0x14, 0x32, 0x20, 0x70bd25, 0x25dfdbfb}, 0x14}}, 0x8004) r3 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd2e, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0x3}, {0xffff, 0xffff}, {0x0, 0x4}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x698472dc6a8b23b9, 0x3}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80d1}, 0x10040000) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_PREFIX={0x6, 0x2, 0x1, 0x0, ')\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRESDEC=r1], 0xfc}}, 0x40050) 507.167983ms ago: executing program 2 (id=2526): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1341, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x2) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@delchain={0x2c, 0x66, 0x221, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {}, {0xb, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004800) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002a00)=ANY=[@ANYBLOB="b7000000016d0300bfa30000000000000703000000feffff620af0fff8ffffff71a4f0ff000000002704000000ffffffdd0a05000000000014000000016d030063030400000000001d44010000000000620a00fe00ffffffdb03000000000000b5000000000000009500000000000000023bc065b70300c6dfa041b63af4a3912435b1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e5f58b7382a8b7e8177168001815548000000000000000275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7f300c095199fe3ff3128e599b0eaebbdbd732c9cc20eec363e4a8f6456e5ccae25ea21714ee18cf5d803e04d83b46e21557c0afc646cb7790b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845b9f75dd08d123deda8ebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987af1714e72ba7616536fd9aa58f2477184b6a89adaf17b0baf587aef370a2d426a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a277c7a775d55dfc28abbe9b5ea62d84f3a10746443d64364f56e24e6d2105bd901128c7e0ec82770c8206b1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee7d26b34381fcb59b854e9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67051d355d84ce97bb0c6b4a595e487efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599ddd71063be9261eee52216d009df5daf87068a608628efc56c752af4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d96c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9610f0000d36f38df9ba60248d9a0d61282dfb15eb6841bb64a1b3045024a982f3c48153baae2c4e7bf37548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c3560811ea6c3560a43364d402ccdd9069bd50b994fd6a34ee18022a579dfc0229cc0dc9881610270928eeeb883418f562ae00003ea96d10f172c0374d6eed82640700dfffffffffff499c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c64a403ade624d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca5f1380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f254a9bf93f04bf072f0bc2d38092909ef3613861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf82807773e534015ea52acb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d2a9441eb315209d199e029e9135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d8516800ef3f9a6a8906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe3907000000466f4ca2195234648e0a1ca50db6f3d9436a7d55a9ad382400000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b45eb6dc5f6a9257d2283c42efc54fa84323a3304f41ff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f928ba7554ba51dd5ab2b7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f80724a5bfc1e8890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f068840a754c02181561542c2571f983e96735600000554f327a353511ccedde99493c31ac05a7b57f03ca91a01ba2c60ca99e8ebc15ec3d59901da21afd6400000000832503969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d40460780000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120968308c31db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98c2c73e1661261173f359e93d2c80000000998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebccbaf1ea4a003fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91cda6b52a373803a9e0600f86909bc90addb7b9aee813df534aac4b32fc7741c7e3f426b9ed20debd883593ff5d691b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa000000000000006acc19808d7cf29bc974b0ea92499a419aa095e203c1bafbb9b9a7c2bca3f0a18ee4952f2d325a56390578f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa84feda91f3edb32231ec75300000000000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579c23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b88b5e7885e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d0f086b3f03b20d546fa66a72e38207c9d20035ab63de71a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db1829f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a2744c46570e8f46da1ab990ca053cbfe801000000000000000000000000000000d55d7182af2ea5f8d0ad495e3eb9421963a5a683c3dcb2d300aa3b2cfe946d2348c35f5d67d68ac07c8f84b3679e77c2e629ecec7c12c35d6b6971b8ae13cc0095f5a3bfdcffffffffffffffff61ed2b3ecfb16d19037c8c88c91dda1f904fbbc864e95ad43d6dd6d5eadbcea25682ba4b91e14c3fbfdfd1d480e7f13a65dbaa1af102d97681656bf56ff0cf36518f674237ce097d39008cc3257778de878bcd37467386f993be6d20c93a7791e7f2a155ce379b4cda2500108052aeb9bd03ffbda9ff485d6576a492d436d52edcd420e7deaa4343a0add3941ceb3a805e46beef9dca77a4edcbb42aa0caf0bbd6cec72d85540293cb4849b0610800000000000000000000000000000000f9814d5f6c8673c143ff2f901e71b8818665b56f7a03afe3d900007656659db4cb06aaaf9f02cfab5b9e61cc00e8e194299219a3f4c4c53bddea4cc48737842952ff08aeac15685df194ca89da8cf6d29a2be9779181fd5d105af5786094d9130f5826b18b9667b971a994f3fd06961912052f441e96884fcdc91f4a974242aabfc8adbadc9ca27955b5c90f1ed9a46ed044272383d3768871a9c8cfd7948aea445c55684351002ed4a4af45341de8e5e1f33624bd2ec1591dd00bbe05000000f89a928662e9b9449db34394fc5e946fadaee576e28ac0feab4e3585ed43d206218f524083840a78b723621f3b706bb7f5e42b5376642f8ad4028d4ead407240e7467d1b37a7e20690d7672c7e926fded95cf805516ad836eb730619a05af36fb28329d6feb33219cc9164461a8ba3afd5949b9a6046c53663df30a149414089c1ae8f3476236b05dde8dda4843a62c591f8d2b1a62d0db8dc826219bd87398b33e13e3a7a1511573cb1a8cdce3a8fea40792297d023ef52de2e75b9dbbfb8713178e2409b8d3b981bc2ae74621e536b9d3f09a15dada1561a8192d65cc59d7ed5a6bd610000000000000000000000000000000000000000000000b41248c570c4223a471b755ce6956908e2b0e5dbc5e71ff2373d3ed89c2e2eafac81c21ac2436d2ffacffe2fc0d601a50221c88a47b264c5129004f350963b52702c5a360000000000000000000000000000000b4077dc8a1801a8bf833350d302c5439ea3dd0f3b8eb1dc93af1fbf863d33a38a53a02ec1e5b90cb673d6b0cfe7f35b20e438653e0f73ddfc78e3e1d1cc9798af0eb9b61bb4fc72454a57237b68ea614ad898374e952784a18ffb9dc4447acd7ad28a63f88007ad8cba31a6fdd9982c97a913dffe69654d3a00b98c45ead9b9619f946c82f5789379d0d942020652ccfac45e1ef5e93e72b7d5381a3c61fbabc1286285110540075bc7aee3e595f9850b9e96887d53404add0021b198be851d9f797d964fe7501997524d28ce7b1d5f8203d9f756efd5676c5d85052030c27e2a99ee39007d9b3c305b1c7d14899b42149d6c437d863651d30426e36ff66bafa93ce3f76c18b8c91ac65b7ab49f03b7c0d0687e1ee0369e88d674f51fe69423000000000000596444d8a7bf983d6f0342b2987e520100000000000000f37cda7868234eeefbd472c7b396c182f2b9a8bf2f85ad1a7b18681784c8fcf0cf5e34baebc594de0d6c9244a834b82a162739619b5f2e3c24378417f71f855b7958fbae631a8aa30b2120a9e23d8711f529b0cd7ce6ee2b0841a4d9e82e6ef54089b64175338ed7effe440c97c663a1000000000033f9ee8bc74fb676198caf54f9a07461c30b4b65890f2b64e68eb2a265f641e68af046fb8751055c6dba7e49068656dbf01c26b3812cec4204084e4c3f5abb86121a3eddd10720d3b66a3a8033aab499cf56b7e5b01d37c1d7b4f5968040cd727efc9a1d69fa550313969508472efa833327d1bcae9167e3316f272ba2efdebf91f15b4a2bc27ea303834692d92961d3dcff0e4f55d9e3e7c66e8d3324216c4c77b95c000c5f30d56da969b1ce3a3e1a8ce5a632b3c404e7b455cac15273ce31a57dc7bed120f5396671eb7f8670ddc26ecc7461b1badfc98076c95aa811954827767c023c51e183cf1de0230912617f72169a3f9bda12d14667855757ca543b524491e213929a9d095abb9e57f33ad7e5301e5995e65246bc06f931d983596a4979d403f1b3984123633e9af67a0972612b5874f2000000009a8c3199c30dd0c416da1c22e346958bda493b297fcb98181ac449ca17a08e27ae81320e316e018fc9c77e7434079bc06ca1d315a94d177a888cc189fa5649bf5b9ab787118c29d735cc6dfaa965ea9ebbbaff83a06292aff2e3ed23750786136f113cdb04b881f721d02bd3c99b9dd3fa2713cda74eb3dd3422c736dc5c7bd3d1d008b5af391dac38341744dc38e8620fd4b35974ef1d93a907f37a84e1d630dd93fcde4aaf59e0e1f64ba3eec9da0b3d3b241fa52d9db1b137140b27434e74b783f9b62cc516f99e425ed603c5e65c0c3b08815a4aac7c1db4e47261148fa3a54359a2157b9a0fcecd54abbfaaee20f9a6dcc5380f01f22b8fd02b340118a65cef1597f5ce8d8a602120a3b2bb8ccc199dc36b2110a2200a2d3eaff9bc85ff68cd233fb2c8198682bd1c99fd7d66f3554439db4145028bc69579e516fd32253f641b0bffebc32cd3e90d67c77017ae323d8d31bd9f061d270d89737acea845067d8fd36fcce1ae9cd64beeae55d4c8159262240837b2854e5e08c58551453f1b9e46c6a7aaa972255fe7ad8f653168ce260000000000000000008b816f1b5e51781fa92c8b2c886bd992507715f8554276f56e3498156ca6d639de489096f49f2e1850d7399b1fe3801d3b2c0f65abcb67ac3ded74b099f76fee439abfb20c23864280855f395e3449859040832ea50df150deb14fc420a8e91ec84ccd338ada3c5778cbd52bcc2ac93b00e64959286b99231afa239dbefc90a21180f12a03c370980c8101d8a014f6139e998c938bccc92bfc987af6f02ec667c9597c19cc4193c09d152093013629b93e5104447e54ba7bc95ed2b3532421d6a0424c1e000000000000c1af53b85ab7060d6797a18cac2bf246a16f503e09832de7f7aa523d2325b4e3b651b1883ab9a3012f2b5b91e2782250a650d2dddca42a671f083b4a3739a651feb7c1c6903f50ce2cb6501fa22cf55230792a1e2fc902c9115a3b912dcef392b050c9a2870e7da0ca2ce908ff7bc5c72b591004ec3034b189a580e7f6ef153c04bb5599ab22686c5520a02e14a53f105d7b6a097e86b61500bdd7e6e133a9870ec9c0bb77c90702910cc39a0f3a419f12ba636b5837a5ecb110c89fb8d14da2d04175b18a14b2618d05fb58e9a832a4993472e5d068fe44e92676e484662a656d93a0f368c0cfc70c68459b61f194aac3"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 506.862828ms ago: executing program 0 (id=2527): r0 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0x0, 0x1}, 0x80, 0x0}, 0x20000000) r1 = socket$kcm(0x10, 0x2, 0x0) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r3}, 0x10) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f00000001c0)={0x5, 0x28, '\x00', 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0]}) (async) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r4, &(0x7f0000000100)={0x0, 0xfffffffffffffe53, &(0x7f00000000c0)={&(0x7f0000000140)={0x10, 0x1407, 0x400}, 0x10}}, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) (async) r6 = socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000200)={'erspan0\x00', 0x0, 0x1, 0x40, 0xffffffff, 0x401, {{0xc, 0x4, 0x2, 0x1, 0x30, 0x64, 0x0, 0x80, 0x2f, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@noop, @cipso={0x86, 0x1a, 0x3, [{0x0, 0x9, "dc88edfc77070c"}, {0x6, 0x4, "bf1c"}, {0x2, 0x5, "4606f6"}, {0x5, 0x2}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000340)={'syztnl0\x00', &(0x7f00000002c0)={'ip6gre0\x00', r7, 0x29, 0x2, 0x0, 0x800, 0x11, @mcast2, @mcast2, 0x7, 0x8000, 0xa, 0x5}}) (async) bind$l2tp6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x0, 0x1}, 0x20) (async) sendmsg$kcm(r0, &(0x7f0000001540)={&(0x7f0000000040)=@qipcrtr={0x2a, 0xffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0) 506.488256ms ago: executing program 2 (id=2528): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$kcm(r0, &(0x7f0000001900)={0x0, 0xffffffea, 0x0}, 0x20040005) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="1400000023000b6c8cfffdfccabb00f90429fc60", 0x14}], 0x1}, 0x2400c000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000030a01020000000000000000010000000900010073797a3000000000140000001100010000000000000000000000000ad85be4618049f17b898eff3bb32a7a82dea85053ab6ef317773d36d0591ee9125429de345d24ec80a03db231e9e8b0d5b957b83f56aad71b1257bacaab54f5ebffd6d033d0e5b98af469d7f18b449dc4735c7c74b1fc8c484da1"], 0x48}}, 0x0) 505.286456ms ago: executing program 4 (id=2529): r0 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@nfc_llcp, &(0x7f0000000080)=0x80, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000b00)=ANY=[@ANYBLOB="611283000000000061138c0000000000bf2000000000000007000000080000003d0301000000000095000000000000006916000000000000bf67000000000000170600000fff07006706000002000000070600000ee60000bf050000000000001f650000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070500000419311f3d2401000000000095000000000000000500000000000000950000000000000032ed3c5be95e76b67754bb12dc8c27df8ecf264e0f84f9f17d3c30e3c72fe9755ba08508460b603daf5a7d1dbdd2d17f2f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a674f888a08034b7dd399703d6c4f633a9a4f16d0a3e1282ee45a010fb94fa9de56c9d8a814261bdb94a6538b89dc6c60bf70d742a81b72bab8395fa64810b5bb8fab4d4d897db2c544c0ec50b8eac8c63d2b1cd06a39702bd547f5ebaa6954f01cef3c9bacec15e2e3b2bd352e93a22adfe8efe33ffa78b02af242f8ee5476d4ef7a6f0c4704403b9bad2b648e90fff24f69a5ef05f5408ea197ed09a9510ee6063229de2984abdd46ea3ec78e3127002ed37c2564b8f8a621483fb2a5f0321e0d831d64759d17b8c59d0f2b06e7f6b7958fb5b939af4be5e55a95f8c6d785a91c7c3f0c17ae7f9ac5ff05f5ecddf0cef90d50e763be96496661c749e21ab63a1f50b30a65a9027ba357bf8c614497ee59b68bf6a5d45c81c567e347d545741fbbbea3e47b1750f272980087b7f8a13cce7014137f250370b8a70ae3eaf6d6f17759c3886871e97d063b7f26eed3226bb0b9ee6320a2b02fea7a06a0e37182adf9a87c0f0c8cd51e56d9e5e7708f156b6cb08566bc86ba6997bb7ae18b9cdf9e6cfda9c6390190e2d468e8c38a818a6a1397b5fbbaa4ddc9a36df424135a28d1e5eaa50850ade812fe83ac7ea0136dc3729879ca51977eef8c2c546938b7b8a4656a71a783b302d7918e6c206af735e9a985cd4cda46d39bca00ff4aa309fd6a598af5e0199f1eb562875450c10d95b7ffb00"/759], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x24, r2, 0x1, 0x70bd25, 0xfffffffd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x24}}, 0x80) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400db4d", @ANYRES16=r2, @ANYBLOB="100727bd7000fbdbdf250e00000008003200f70f0000080039000a000000050035000200000008003b000400000005002d00010000000600280002000000"], 0x44}, 0x1, 0x0, 0x0, 0x8004}, 0x4000000) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bind$l2tp6(r0, &(0x7f0000000300)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffffff9, 0x1}, 0x20) syz_genetlink_get_family_id$ieee802154(&(0x7f0000001340), r4) sendmsg$IEEE802154_ADD_IFACE(r4, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000000780)=ANY=[@ANYBLOB="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", @ANYRESHEX, @ANYBLOB="330a2bbd7000fbdbdf252100000009001f007068793100000000"], 0x20}, 0x1, 0x0, 0x0, 0x240400c0}, 0x8844) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05fea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828bf209d0"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000680)=ANY=[@ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="0f000000202000fffff7ff0008432b6aa126", @ANYRES32=0x0, @ANYBLOB, @ANYRES64=0x0], 0x20) unshare(0x24060400) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x4, 0x4, 0x3, 0x0, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000080)=@raw=[@map_val={0x18, 0x0, 0x2, 0x0, r7}, @exit], &(0x7f0000000180)='syzkaller\x00', 0x2, 0xb, &(0x7f0000000340)=""/233, 0x0, 0x11}, 0x80) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000002c0), r9) sendmsg$NLBL_CALIPSO_C_LIST(r8, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000440)={0x1c, r10, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x0) sendmsg$NLBL_CALIPSO_C_REMOVE(r4, &(0x7f0000000740)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="200026bd7000fddbdf250200000041b13414b8e06409000000000200000004000200020000000800d5ee232b7a4f052706008b327da67faf0100020000000800027bad416cf8d5f691b7000200000008000100010000000800010000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x44014}, 0x40400d0) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r12 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r14 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r14, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x30, r11, 0x1, 0x0, 0x25dfdbfd, {{0x2}, {@val={0x8, 0x3, r13}, @val={0xc, 0x99, {0xf4, 0x2f}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x177f}]]}, 0x30}, 0x1, 0x0, 0x0, 0xd37697ff280d3c0e}, 0x0) r15 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_DAT_CACHE(r15, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, r2, 0x700, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c005}, 0x4081) socket$nl_netfilter(0x10, 0x3, 0xc) 478.130611ms ago: executing program 3 (id=2530): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000180)=0x10001, 0x4) accept4(r0, &(0x7f0000000080)=@qipcrtr, &(0x7f0000000140)=0x80, 0x95e71ad0b38f1419) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x3, 0x5, &(0x7f0000001380)=ANY=[@ANYBLOB="18000000000000000000000000000000850000004f000000850000000500000095"], &(0x7f0000000040)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x3}, 0x10) sendmsg$tipc(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x804) 353.734768ms ago: executing program 2 (id=2531): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r3, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x8c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x5c, 0x2, {{}, [@TCA_NETEM_SLOT={0x2c}, @TCA_NETEM_RATE={0x14}]}}}]}, 0x8c}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r5, &(0x7f0000004b40)=[{{&(0x7f0000001140)={0xa, 0x4e23, 0x10, @private2, 0x8}, 0x1c, &(0x7f00000013c0)=[{&(0x7f00000016c0)="99", 0x1}], 0x1}}, {{&(0x7f0000000000)={0xa, 0x4e24, 0x9b5d, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80}, 0x1c, &(0x7f00000015c0)=[{&(0x7f0000001700)="92", 0x1}], 0x1}}], 0x2, 0x4000090) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r6, 0x84, 0x81, &(0x7f0000000040)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r6, 0x84, 0x19, &(0x7f00000000c0)={0x0, 0x9}, 0x8) 256.738209ms ago: executing program 3 (id=2532): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') r1 = socket$inet(0x2, 0x3, 0x7f) setsockopt$inet_int(r1, 0x0, 0x3, 0x0, 0x0) unshare(0x6a040000) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000040)={0x2b, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0x0, 'dh\x00', 0x3, 0x4, 0x64}, 0x2c) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r2) ioctl$SIOCSIFHWADDR(r2, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f00000000c0)=[@in6={0xa, 0x4e24, 0xfff, @loopback, 0x1}, @in6={0xa, 0x4e23, 0x80, @loopback, 0x2}, @in6={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0xa}, 0x5}, @in={0x2, 0x4e23, @local}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}], 0x74) r3 = socket(0x8, 0x1, 0x8000000) setsockopt(r3, 0x9, 0x970, &(0x7f0000000300)="277ee0995f47da49bada0a141614c638aa2f07050bf264054d716cbedeffad4d6cb6cd7662d6dc315ee6bef28d3fded7e658eac6f49e87050b3b5620f6f783bead0ca6237d892049b046b15c1ee3c896dc4ce2024a015ebd2d8517c178a63f64d4eaf914bb2a5ad13e544b993d65dc89fe0bc6b8386b03513691368c83048e43376448013496ea", 0x87) setsockopt$inet_group_source_req(r3, 0x0, 0x2f, &(0x7f00000003c0)={0x80000001, {{0x2, 0x4e24, @local}}, {{0x2, 0x4e20, @broadcast}}}, 0x108) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x618e, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x4c, &(0x7f0000000080)=0xcdb, 0x4) connect$unix(r4, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r4, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000010000100"/20, @ANYRES32=r5, @ANYBLOB="00bf4300000000001c0012000000"], 0x3c}}, 0x0) 242.801038ms ago: executing program 0 (id=2533): r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@ieee802154={0x24, @long}, &(0x7f0000000080)=0x80) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, 0x0, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x8}, @L2TP_ATTR_MRU={0x6, 0x1d, 0xfff8}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @remote}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x4000884) recvmsg$can_bcm(r0, &(0x7f0000002340)={&(0x7f00000001c0)=@in={0x2, 0x0, @initdev}, 0x80, &(0x7f00000022c0)=[{&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/1, 0x1}, {&(0x7f0000001280)=""/4096, 0x1000}, {&(0x7f0000002280)=""/33, 0x21}], 0x4, &(0x7f0000002300)=""/29, 0x1d}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000002380)={0x0, @broadcast, @dev}, &(0x7f00000023c0)=0xc) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000002400)={@mcast2, @empty, @mcast2, 0x6, 0x8, 0x4, 0x9b150895708e9b49, 0x5, 0x80200000, r1}) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000002480)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f00000026c0)={'ip6gretap0\x00', 0x8}) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f00000027c0)={&(0x7f0000002700)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002780)={&(0x7f0000002740)={0x14, 0x3, 0x2, 0x201, 0x0, 0x0, {0x5, 0x0, 0x3}, ["", "", "", "", "", "", ""]}, 0x14}}, 0x40097) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000002800)={r0, 0xd27, 0xb99e71e, 0x5}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002840)={0x1b, 0x0, 0x0, 0x400000, 0x0, 0x1, 0x7, '\x00', r1, r2, 0x3, 0x4}, 0x50) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000028c0)={'wg2\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f0000002900)={@local, @ipv4={'\x00', '\xff\xff', @loopback}, @private1, 0x7, 0x0, 0xf, 0x400, 0xf, 0x4000040, r3}) getsockname$llc(r2, &(0x7f0000002980)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f00000029c0)=0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000002a40), r2) sendmsg$L2TP_CMD_NOOP(r4, &(0x7f0000002b40)={&(0x7f0000002a00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002b00)={&(0x7f0000002a80)={0x4c, r5, 0x600, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x81}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r2}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xe}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x10}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000004}, 0x4004000) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002bc0), r4) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000002cc0)={&(0x7f0000002b80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002c80)={&(0x7f0000002c00)={0x80, r6, 0x2, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xe94}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x100}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x6}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000) ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f0000002d00)=0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000002d40)={{{@in6=@mcast2, @in6=@loopback, 0x4e21, 0x1, 0x4e22, 0x0, 0x0, 0x20, 0x60, 0x3b, r3, r7}, {0x0, 0x3, 0x3, 0x145d0456, 0x5, 0x7, 0x4, 0x6}, {0x80000000, 0x0, 0x8000000000000000, 0xffffffffffffffff}, 0xffffffff, 0x6e6bb6, 0x2, 0x1, 0x2, 0x3}, {{@in6=@mcast1, 0x4d3, 0x3c}, 0xa, @in6=@private1, 0x3507, 0x0, 0x2, 0xa, 0x8, 0x7d, 0xa}}, 0xe8) shutdown(r2, 0x1) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002e80), r0) getsockname$packet(r0, &(0x7f0000002ec0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000002f00)=0x14) sendmsg$ETHTOOL_MSG_TSINFO_GET(r8, &(0x7f0000002fc0)={&(0x7f0000002e40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002f80)={&(0x7f0000002f40)={0x40, r9, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40080}, 0x8805) bpf$OBJ_GET_PROG(0x7, &(0x7f0000003040)=@o_path={&(0x7f0000003000)='./file0\x00', 0x0, 0x4b9ae60cdedd8873, r2}, 0x18) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r2, 0xc038943b, &(0x7f00000030c0)={0x0, 0x8, '\x00', 0x0, &(0x7f0000003080)=[0x0]}) r11 = syz_genetlink_get_family_id$gtp(&(0x7f0000003140), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r2, &(0x7f0000003200)={&(0x7f0000003100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000031c0)={&(0x7f0000003180)={0x1c, r11, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000008}, 0x48810) socket$can_bcm(0x1d, 0x2, 0x2) 0s ago: executing program 4 (id=2534): r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000001780)={{0x0, 0x6}}, 0x10) (async) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) bind$alg(r1, &(0x7f00000002c0)={0x26, 'hash\x00', 0x0, 0x0, 'tgr192\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) (async) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r2) sendmsg$TIPC_NL_KEY_FLUSH(r2, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="08010000", @ANYRES16=r4, @ANYBLOB="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"], 0x108}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) (async) setsockopt$inet6_tcp_int(r3, 0x6, 0x6, &(0x7f0000000180)=0x1, 0x4) getsockopt$inet6_tcp_int(r3, 0x6, 0x6, 0x0, &(0x7f0000000040)) r5 = accept4(r1, 0x0, 0x0, 0x0) (async) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async, rerun: 64) r7 = accept4(r6, 0x0, 0x0, 0x80000) (rerun: 64) sendmsg$xdp(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)="60481a316f1aa678318d8d77bf44cced0b70bfcbc4905b8152f20c18be2eeef743f54cb7a16bbb6e3bf2fbbe9ff7481627c2561e1a6c8b02f0eb88c7f32f68b9e2423a0fe87501577efd40b70965d66b09f2cdeb159d2d3d6c095271ce37fbf7fb3712f3e95b9aacc6c1af787c5bdcfcc9b313bd46d1fc3d148d86d5ffb261ace6c45c2fbdced8e4b45e4358b95d4212e53ef729d308e08ed3e683813c1dcac50bf343bc65be49dbd852caf9a2d0656abc82adf0651c4ac76bf558a3179de6c947fb553be50db8ba2860b2483934d5d39cbcc8bc393eb926dbdb8de385f7d627982072679d9853515e79", 0xea}, {&(0x7f00000005c0)="63311794932b42fa800fe297013ca7feab7756ef7824de8a320ce51a7d2a8f9354bbec77c836bc975b39c022940880a890aff150d32e9641e2ec516273f54e5b972dfa3ba0ce3d330c754f50784dd3d120ebfa42481477f49fb6de051c98a3aff4f0cb9f1ea7841c11fe0f25b2dd3f90d203d9c390a2031dffeb947bd6b9c329a50d95eb82723641a7cdcb20a10068b5fde7f93c3ac3b2653dd2db5d3855a43ec44a301f0079ffe4437a5fe135d5fa92fa", 0xb1}, {&(0x7f00000007c0)="dba348f3686f64658eef3472e762256ef8a9583e6b06ed88c2ef46e6f984e69058e797f054e94bf370b74113ad8d0db3393d6d488248ca023e8aa857d2d69f24712bc88cbd2a39190c437931fd386fe3d82738f55e2268975f389b01d0603267672f7f2c80", 0x65}], 0x3, 0x0, 0x0, 0x20000080}, 0x440000d0) sendmmsg$alg(r5, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) (async) syz_genetlink_get_family_id$team(&(0x7f00000001c0), r5) r8 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r8, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) (async) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r9 = socket$tipc(0x1e, 0x2, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], 0x1b8}, 0x1, 0x0, 0x0, 0x4008010}, 0x4000800) (async) bind$tipc(r9, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) (async, rerun: 32) setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) (async, rerun: 32) close(0x3) (async, rerun: 32) unshare(0x400) (rerun: 32) kernel console output (not intermixed with test programs): er0> [ 127.635565][ T1157] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.645598][ T7024] netlink: 'syz.4.268': attribute type 7 has an invalid length. [ 127.663279][ T1157] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.674988][ T7026] netlink: 'syz.1.269': attribute type 1 has an invalid length. [ 127.733980][ T7026] netlink: 'syz.1.269': attribute type 1 has an invalid length. [ 127.959386][ T7052] netlink: 'syz.1.274': attribute type 21 has an invalid length. [ 128.051820][ T7052] netlink: 'syz.1.274': attribute type 1 has an invalid length. [ 128.305694][ T7065] team0: No ports can be present during mode change [ 128.430530][ T7065] team0 (unregistering): Port device team_slave_0 removed [ 128.447345][ T7065] team0 (unregistering): Port device team_slave_1 removed [ 128.487523][ T7072] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 128.704248][ T7079] veth5: entered allmulticast mode [ 130.045263][ T7139] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 130.114016][ T7141] tipc: Enabling of bearer rejected, failed to enable media [ 130.150039][ T7155] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551614) [ 130.179809][ T7155] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 130.205524][ T7148] tipc: Enabling of bearer rejected, failed to enable media [ 130.218632][ T7155] __nla_validate_parse: 7 callbacks suppressed [ 130.218655][ T7155] netlink: 16 bytes leftover after parsing attributes in process `syz.3.297'. [ 130.234931][ T7139] netlink: 8 bytes leftover after parsing attributes in process `syz.0.295'. [ 130.339968][ T7154] netlink: 60 bytes leftover after parsing attributes in process `syz.1.298'. [ 130.663325][ T7171] netlink: 20 bytes leftover after parsing attributes in process `syz.4.301'. [ 130.707611][ T7173] !: renamed from bond_slave_0 (while UP) [ 130.985787][ T6705] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x2 [ 131.004776][ T7189] Unsupported ieee802154 address type: 0 [ 131.117869][ T7193] netlink: 12 bytes leftover after parsing attributes in process `syz.3.307'. [ 131.155914][ T7193] netlink: 8 bytes leftover after parsing attributes in process `syz.3.307'. [ 131.195049][ T7193] netlink: 4 bytes leftover after parsing attributes in process `syz.3.307'. [ 131.385981][ T7209] delete_channel: no stack [ 131.415818][ T7207] delete_channel: no stack [ 131.570764][ T7216] netlink: 84 bytes leftover after parsing attributes in process `syz.3.313'. [ 131.615803][ T7220] xt_limit: Overflow, try lower: 271964/0 [ 131.701413][ T7224] syz.4.315 uses old SIOCAX25GETINFO [ 131.769350][ T7229] netlink: 24 bytes leftover after parsing attributes in process `syz.2.316'. [ 132.188006][ T7251] sctp: [Deprecated]: syz.4.322 (pid 7251) Use of struct sctp_assoc_value in delayed_ack socket option. [ 132.188006][ T7251] Use struct sctp_sack_info instead [ 132.331385][ T7256] validate_nla: 69 callbacks suppressed [ 132.331408][ T7256] netlink: 'syz.2.324': attribute type 58 has an invalid length. [ 132.394576][ T7256] netlink: 20 bytes leftover after parsing attributes in process `syz.2.324'. [ 132.451201][ T7256] sctp: [Deprecated]: syz.2.324 (pid 7256) Use of struct sctp_assoc_value in delayed_ack socket option. [ 132.451201][ T7256] Use struct sctp_sack_info instead [ 132.500602][ T7256] netlink: 'syz.2.324': attribute type 1 has an invalid length. [ 133.104752][ T7298] netlink: 'syz.3.334': attribute type 1 has an invalid length. [ 133.921609][ T7337] unknown channel width for channel at 909000KHz? [ 133.934899][ T7333] netlink: 'syz.4.349': attribute type 2 has an invalid length. [ 133.958563][ T7337] unknown channel width for channel at 909000KHz? [ 133.989800][ T7337] unknown channel width for channel at 909000KHz? [ 135.020318][ T7359] netlink: 'syz.4.353': attribute type 33 has an invalid length. [ 135.761949][ T7392] veth0: entered promiscuous mode [ 135.772395][ T7384] veth0: left promiscuous mode [ 136.237630][ T7421] __nla_validate_parse: 18 callbacks suppressed [ 136.237655][ T7421] netlink: 48 bytes leftover after parsing attributes in process `syz.4.369'. [ 136.267426][ T7434] netlink: 'syz.2.372': attribute type 2 has an invalid length. [ 136.991995][ T7442] netlink: 8 bytes leftover after parsing attributes in process `syz.3.375'. [ 137.189588][ T7456] netlink: 20 bytes leftover after parsing attributes in process `syz.1.378'. [ 137.217763][ T7458] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 137.237081][ T7460] netlink: 8 bytes leftover after parsing attributes in process `syz.3.379'. [ 137.425124][ T7471] netlink: 4 bytes leftover after parsing attributes in process `syz.2.380'. [ 137.490267][ T7473] netlink: 20 bytes leftover after parsing attributes in process `syz.3.383'. [ 138.047490][ T7494] netlink: 104 bytes leftover after parsing attributes in process `syz.0.390'. [ 138.338050][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.563378][ T7524] lo: entered promiscuous mode [ 138.641201][ T7524] tunl0: entered promiscuous mode [ 138.686515][ T7524] gre0: entered promiscuous mode [ 138.718149][ T7530] netlink: 'syz.0.399': attribute type 12 has an invalid length. [ 138.756790][ T7524] gretap0: entered promiscuous mode [ 138.783165][ T7524] erspan0: entered promiscuous mode [ 138.825080][ T7524] ip_vti0: entered promiscuous mode [ 139.195639][ T7548] netlink: 8 bytes leftover after parsing attributes in process `syz.0.403'. [ 139.450755][ T7559] netlink: 'syz.3.407': attribute type 1 has an invalid length. [ 139.476045][ T7559] netlink: 180 bytes leftover after parsing attributes in process `syz.3.407'. [ 139.543085][ T7568] netlink: 76 bytes leftover after parsing attributes in process `syz.0.409'. [ 139.552849][ T7568] nbd: illegal input index 1279413326 [ 139.558696][ T7568] nbd: illegal input index 1279413326 [ 139.567383][ T7568] nbd: illegal input index 1279413326 [ 139.573009][ T7568] nbd: illegal input index 1279413326 [ 139.605799][ T55] block nbd0: Possible stuck request ffff888025277000: control (read@0,4096B). Runtime 30 seconds [ 139.638947][ T36] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 139.676671][ T7559] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 139.692701][ T7568] nbd: illegal input index 1279413326 [ 139.703448][ T7568] nbd: illegal input index 1279413326 [ 139.733389][ T7568] nbd: illegal input index 1279413326 [ 139.780947][ T7568] nbd: illegal input index 1279413326 [ 139.817912][ T7568] nbd: illegal input index 1279413326 [ 139.857462][ T7568] nbd: illegal input index 1279413326 [ 139.909674][ T7568] nbd: illegal input index 1279413326 [ 139.930575][ T7568] nbd: illegal input index 1279413326 [ 139.950052][ T7568] nbd: illegal input index 1279413326 [ 139.989036][ T7568] nbd: illegal input index 1279413326 [ 140.002636][ T7568] nbd: illegal input index 1279413326 [ 140.017737][ T7568] nbd: illegal input index 1279413326 [ 140.026549][ T7568] nbd: illegal input index 1279413326 [ 140.032345][ T7568] nbd: illegal input index 1279413326 [ 140.040376][ T7568] nbd: illegal input index 1279413326 [ 140.048004][ T7568] nbd: illegal input index 1279413326 [ 140.055009][ T7568] nbd: illegal input index 1279413326 [ 140.060793][ T7568] nbd: illegal input index 1279413326 [ 140.067844][ T7568] nbd: illegal input index 1279413326 [ 140.075748][ T7568] nbd: illegal input index 1279413326 [ 140.081586][ T7568] nbd: illegal input index 1279413326 [ 140.088651][ T7568] nbd: illegal input index 1279413326 [ 140.099664][ T7568] nbd: illegal input index 1279413326 [ 140.108060][ T7568] nbd: illegal input index 1279413326 [ 140.124126][ T7568] nbd: illegal input index 1279413326 [ 140.129880][ T7568] nbd: illegal input index 1279413326 [ 140.146727][ T7568] nbd: illegal input index 1279413326 [ 140.170249][ T7568] nbd: illegal input index 1279413326 [ 140.192158][ T7568] nbd: illegal input index 1279413326 [ 140.213326][ T7568] nbd: illegal input index 1279413326 [ 140.236734][ T7568] nbd: illegal input index 1279413326 [ 140.249980][ T7590] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 140.283440][ T7568] nbd: illegal input index 1279413326 [ 140.292344][ T7590] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.307711][ T7568] nbd: illegal input index 1279413326 [ 140.315743][ T7568] nbd: illegal input index 1279413326 [ 140.535006][ T7590] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 140.550758][ T7590] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.563796][ T7601] netlink: 'syz.3.419': attribute type 3 has an invalid length. [ 140.718600][ T7590] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 140.735645][ T7590] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.919954][ T7590] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 140.931422][ T7590] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.959917][ T7609] syzkaller1: entered promiscuous mode [ 140.967281][ T7609] syzkaller1: entered allmulticast mode [ 141.188821][ T37] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.221343][ T37] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.292462][ T7629] netlink: 'syz.4.425': attribute type 29 has an invalid length. [ 141.321605][ T36] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.331850][ T36] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.395850][ T36] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.423633][ T36] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.465588][ T36] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.504187][ T36] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.685370][ T7644] bridge2: entered promiscuous mode [ 141.691423][ T7644] bridge2: entered allmulticast mode [ 141.984717][ T7656] veth3: entered allmulticast mode [ 142.448508][ T7677] IPv6: NLM_F_CREATE should be specified when creating new route [ 142.475913][ T7675] __nla_validate_parse: 42 callbacks suppressed [ 142.475936][ T7675] netlink: 8 bytes leftover after parsing attributes in process `syz.4.440'. [ 142.489283][ T7680] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 142.503435][ T7677] netlink: 12 bytes leftover after parsing attributes in process `syz.2.441'. [ 142.582928][ T7678] tipc: Started in network mode [ 142.588896][ T7678] tipc: Node identity eeaa6980b74a, cluster identity 4711 [ 142.598857][ T7678] tipc: Enabled bearer , priority 0 [ 142.611992][ T7677] netlink: 28 bytes leftover after parsing attributes in process `syz.2.441'. [ 142.617949][ T7675] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 142.634264][ T7675] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 142.642515][ T7675] gretap1: entered promiscuous mode [ 142.649259][ T7675] gretap1: entered allmulticast mode [ 142.748105][ T7693] netlink: 8 bytes leftover after parsing attributes in process `syz.2.441'. [ 142.763792][ T7693] netlink: 4 bytes leftover after parsing attributes in process `syz.2.441'. [ 142.806701][ T7685] 8021q: adding VLAN 0 to HW filter on device bond3 [ 142.814900][ T7695] netlink: 256 bytes leftover after parsing attributes in process `syz.3.446'. [ 142.828302][ T7685] bond2: (slave bond3): Enslaving as an active interface with an up link [ 142.837561][ T7695] unsupported nlmsg_type 40 [ 142.847109][ T7688] syzkaller0: entered promiscuous mode [ 142.859266][ T7688] syzkaller0: entered allmulticast mode [ 142.877146][ T7677] 8021q: adding VLAN 0 to HW filter on device bond2 [ 143.009778][ T7675] tipc: Resetting bearer [ 143.016427][ T7701] netlink: 'syz.1.448': attribute type 1 has an invalid length. [ 143.103144][ T7675] tipc: Disabling bearer [ 143.120101][ T7706] netlink: 8 bytes leftover after parsing attributes in process `syz.3.451'. [ 143.388181][ T7717] netlink: 184 bytes leftover after parsing attributes in process `syz.4.453'. [ 143.594922][ T7721] netlink: 8 bytes leftover after parsing attributes in process `syz.1.456'. [ 143.624842][ T7721] netlink: 12 bytes leftover after parsing attributes in process `syz.1.456'. [ 143.787581][ T7731] netlink: 'syz.4.458': attribute type 1 has an invalid length. [ 144.030016][ T7736] netlink: 'syz.2.460': attribute type 4 has an invalid length. [ 147.657978][ T7895] __nla_validate_parse: 10 callbacks suppressed [ 147.658000][ T7895] netlink: 24 bytes leftover after parsing attributes in process `syz.4.499'. [ 148.078320][ T7915] syzkaller0: refused to change device tx_queue_len [ 148.194384][ T7918] netlink: 44 bytes leftover after parsing attributes in process `syz.3.506'. [ 148.226857][ T7918] netlink: 44 bytes leftover after parsing attributes in process `syz.3.506'. [ 148.352927][ T7925] vlan2: entered promiscuous mode [ 148.558283][ T7932] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 148.593828][ T7935] netlink: 'syz.0.513': attribute type 4 has an invalid length. [ 148.660393][ T7935] netlink: 'syz.0.513': attribute type 4 has an invalid length. [ 149.077130][ T7952] IPVS: set_ctl: invalid protocol: 108 172.20.20.30:20003 [ 149.121503][ T7952] netlink: 28 bytes leftover after parsing attributes in process `syz.2.521'. [ 149.185219][ T7957] netlink: 8 bytes leftover after parsing attributes in process `syz.2.521'. [ 149.354314][ T7961] netlink: 'syz.4.522': attribute type 4 has an invalid length. [ 149.577150][ T7963] netlink: 4 bytes leftover after parsing attributes in process `syz.2.523'. [ 149.589993][ T7968] netlink: 4 bytes leftover after parsing attributes in process `syz.4.525'. [ 149.595114][ T7967] netlink: 8 bytes leftover after parsing attributes in process `syz.0.524'. [ 149.618387][ T7968] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 149.637105][ T7968] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 149.661620][ T7968] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 149.680309][ T7968] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 149.872299][ T7976] netlink: 64 bytes leftover after parsing attributes in process `syz.3.528'. [ 150.088869][ T7985] netlink: 4 bytes leftover after parsing attributes in process `syz.4.531'. [ 150.104090][ T7982] netlink: 'syz.2.529': attribute type 4 has an invalid length. [ 150.136936][ T7985] bridge_slave_1 (unregistering): left allmulticast mode [ 150.148547][ T7985] bridge_slave_1 (unregistering): left promiscuous mode [ 150.174615][ T7985] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.506537][ T8002] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 150.844870][ T5870] Bluetooth: hci4: link tx timeout [ 150.851405][ T5870] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 151.324657][ T8028] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 151.366129][ T8028] netlink: 'syz.1.543': attribute type 5 has an invalid length. [ 151.527812][ T8037] netlink: zone id is out of range [ 151.552888][ T8030] syzkaller0: entered promiscuous mode [ 151.569040][ T8037] netlink: get zone limit has 8 unknown bytes [ 151.579363][ T8042] netlink: 'syz.1.547': attribute type 11 has an invalid length. [ 151.593828][ T8030] syzkaller0: entered allmulticast mode [ 151.609203][ T8033] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 152.884219][ T5870] Bluetooth: hci4: command 0x0406 tx timeout [ 153.784751][ T8092] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 153.845211][ T8092] sctp: [Deprecated]: syz.4.558 (pid 8092) Use of int in max_burst socket option. [ 153.845211][ T8092] Use struct sctp_assoc_value instead [ 154.098033][ T8105] __nla_validate_parse: 3 callbacks suppressed [ 154.098059][ T8105] netlink: 4 bytes leftover after parsing attributes in process `syz.0.562'. [ 154.276193][ T8113] gtp0: entered promiscuous mode [ 154.842364][ T8142] netlink: 404 bytes leftover after parsing attributes in process `syz.2.574'. [ 154.853291][ T8145] netlink: 4 bytes leftover after parsing attributes in process `syz.1.575'. [ 154.855313][ T8142] netlink: 28 bytes leftover after parsing attributes in process `syz.2.574'. [ 154.872436][ T8142] netlink: 28 bytes leftover after parsing attributes in process `syz.2.574'. [ 154.883043][ T8142] netlink: 20 bytes leftover after parsing attributes in process `syz.2.574'. [ 154.904303][ T8145] netlink: 12 bytes leftover after parsing attributes in process `syz.1.575'. [ 155.128878][ T8157] netlink: 'syz.3.579': attribute type 28 has an invalid length. [ 155.236139][ T8157] netlink: 'syz.3.579': attribute type 28 has an invalid length. [ 155.351169][ T8169] team0: No ports can be present during mode change [ 155.416876][ T8173] netlink: 8 bytes leftover after parsing attributes in process `syz.0.581'. [ 155.455295][ T8173] netlink: 'syz.0.581': attribute type 5 has an invalid length. [ 155.463012][ T8173] netlink: 20 bytes leftover after parsing attributes in process `syz.0.581'. [ 155.541672][ T8179] netlink: 44 bytes leftover after parsing attributes in process `syz.3.584'. [ 156.517737][ T8227] netlink: 'syz.2.600': attribute type 9 has an invalid length. [ 156.556012][ T8228] Bluetooth: MGMT ver 1.23 [ 157.200553][ T8261] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 4032 [ 158.466052][ T8305] netlink: 'syz.0.622': attribute type 4 has an invalid length. [ 158.600000][ T8311] syzkaller1: entered promiscuous mode [ 158.618910][ T8311] syzkaller1: entered allmulticast mode [ 159.290214][ T8348] __nla_validate_parse: 14 callbacks suppressed [ 159.290235][ T8348] netlink: 4 bytes leftover after parsing attributes in process `syz.2.633'. [ 159.562862][ T8368] netlink: 4 bytes leftover after parsing attributes in process `syz.2.638'. [ 159.575901][ T8368] bridge_slave_1: left allmulticast mode [ 159.581616][ T8368] bridge_slave_1: left promiscuous mode [ 159.596612][ T8368] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.666900][ T8368] bridge_slave_0: left allmulticast mode [ 159.680562][ T8368] bridge_slave_0: left promiscuous mode [ 159.686779][ T8368] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.786039][ T8377] netlink: 12 bytes leftover after parsing attributes in process `syz.0.641'. [ 159.930031][ T8381] netlink: 288 bytes leftover after parsing attributes in process `syz.2.642'. [ 160.172541][ T8398] syzkaller0: entered promiscuous mode [ 160.186991][ T8398] syzkaller0: entered allmulticast mode [ 160.236110][ T8398] netlink: 112 bytes leftover after parsing attributes in process `syz.2.646'. [ 160.489460][ T5183] Bluetooth: hci4: command 0x0406 tx timeout [ 160.885447][ T8424] netlink: 40 bytes leftover after parsing attributes in process `syz.0.651'. [ 161.129986][ T8435] netlink: 240 bytes leftover after parsing attributes in process `syz.0.655'. [ 161.495194][ T8449] netlink: 24 bytes leftover after parsing attributes in process `syz.4.659'. [ 161.633389][ T8449] netlink: 'syz.4.659': attribute type 1 has an invalid length. [ 161.733215][ T8464] netlink: 36 bytes leftover after parsing attributes in process `syz.0.663'. [ 161.838959][ T8449] netlink: 28 bytes leftover after parsing attributes in process `syz.4.659'. [ 161.905701][ T8457] veth9: entered promiscuous mode [ 161.962130][ T8466] sctp: [Deprecated]: syz.3.664 (pid 8466) Use of struct sctp_assoc_value in delayed_ack socket option. [ 161.962130][ T8466] Use struct sctp_sack_info instead [ 162.596622][ T8503] veth0: entered promiscuous mode [ 162.655165][ T8503] veth0: left promiscuous mode [ 163.301929][ T8530] syzkaller0: entered promiscuous mode [ 163.308036][ T8530] syzkaller0: entered allmulticast mode [ 163.538464][ T8542] sock: sock_timestamping_bind_phc: sock not bind to device [ 163.568600][ T8542] sock: sock_timestamping_bind_phc: sock not bind to device [ 163.582093][ T8546] ieee802154 phy1 wpan1: encryption failed: -22 [ 163.609960][ T8542] sock: sock_timestamping_bind_phc: sock not bind to device [ 163.922843][ T8552] netlink: 'syz.4.686': attribute type 3 has an invalid length. [ 164.281187][ T8575] netlink: 'syz.2.692': attribute type 10 has an invalid length. [ 164.313918][ T8575] __nla_validate_parse: 5 callbacks suppressed [ 164.313937][ T8575] netlink: 40 bytes leftover after parsing attributes in process `syz.2.692'. [ 164.555235][ T8594] tipc: Enabled bearer , priority 0 [ 164.570914][ T8595] trusted_key: syz.0.696 sent an empty control message without MSG_MORE. [ 164.581808][ T8591] netlink: 'syz.0.696': attribute type 39 has an invalid length. [ 164.591841][ T8594] netlink: 'syz.3.697': attribute type 2 has an invalid length. [ 164.600063][ T8594] netlink: 1184 bytes leftover after parsing attributes in process `syz.3.697'. [ 164.661771][ T8594] tipc: Resetting bearer [ 164.679413][ T8593] tipc: Disabling bearer [ 164.920058][ T8605] netlink: 4 bytes leftover after parsing attributes in process `syz.4.700'. [ 165.048105][ T8608] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 165.592998][ T8627] netlink: 8 bytes leftover after parsing attributes in process `syz.2.708'. [ 166.244369][ T5870] Bluetooth: hci4: command 0x0406 tx timeout [ 166.577689][ T8672] netlink: 'syz.1.720': attribute type 1 has an invalid length. [ 166.620991][ T8672] 8021q: adding VLAN 0 to HW filter on device bond3 [ 166.637931][ T8672] openvswitch: netlink: IPv6 tunnel dst address is zero [ 166.807629][ T8672] veth7: entered promiscuous mode [ 166.839310][ T8672] bond3: (slave veth7): Enslaving as an active interface with a down link [ 166.861487][ T8677] vlan3: entered allmulticast mode [ 166.869004][ T8677] bond3: entered allmulticast mode [ 166.877587][ T8677] bond3: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 167.238220][ T8697] netlink: 3648 bytes leftover after parsing attributes in process `syz.1.728'. [ 167.249889][ T8697] netlink: 3648 bytes leftover after parsing attributes in process `syz.1.728'. [ 167.530969][ T8708] netlink: 'syz.4.732': attribute type 21 has an invalid length. [ 167.542167][ T8708] netlink: 'syz.4.732': attribute type 6 has an invalid length. [ 167.552636][ T8708] netlink: 132 bytes leftover after parsing attributes in process `syz.4.732'. [ 167.669820][ T8716] netlink: 'syz.1.735': attribute type 11 has an invalid length. [ 167.687790][ T8717] sctp: [Deprecated]: syz.4.734 (pid 8717) Use of int in maxseg socket option. [ 167.687790][ T8717] Use struct sctp_assoc_value instead [ 168.353847][ T8741] netlink: 20 bytes leftover after parsing attributes in process `syz.4.744'. [ 168.525166][ T8753] vlan3: entered allmulticast mode [ 168.545291][ T8753] bond0: entered allmulticast mode [ 168.551120][ T8749] netlink: 16 bytes leftover after parsing attributes in process `syz.2.748'. [ 168.561285][ T8753] bond_slave_0: entered allmulticast mode [ 168.568134][ T8749] netlink: 224 bytes leftover after parsing attributes in process `syz.2.748'. [ 168.578380][ T8753] bond_slave_1: entered allmulticast mode [ 168.785564][ T8763] sctp: [Deprecated]: syz.4.752 (pid 8763) Use of int in max_burst socket option. [ 168.785564][ T8763] Use struct sctp_assoc_value instead [ 168.802156][ T8759] tipc: Enabled bearer , priority 0 [ 168.852858][ T8759] syzkaller0: entered promiscuous mode [ 168.859468][ T8759] syzkaller0: entered allmulticast mode [ 168.914206][ T8759] tipc: Resetting bearer [ 168.939825][ T8769] netlink: 'syz.3.755': attribute type 10 has an invalid length. [ 168.992478][ T8757] tipc: Resetting bearer [ 169.043167][ T8757] tipc: Disabling bearer [ 169.117132][ T8769] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 169.134851][ T8774] block nbd2: server does not support multiple connections per device. [ 169.194284][ T8771] geneve2: entered promiscuous mode [ 169.210434][ T8774] block nbd2: shutting down sockets [ 169.379549][ T8789] netlink: 'syz.1.759': attribute type 1 has an invalid length. [ 169.400677][ T8788] __nla_validate_parse: 1 callbacks suppressed [ 169.400703][ T8788] netlink: 8 bytes leftover after parsing attributes in process `syz.3.761'. [ 169.427375][ T8789] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 169.447700][ T8791] netlink: 12 bytes leftover after parsing attributes in process `syz.0.760'. [ 169.528725][ T8792] netlink: 8 bytes leftover after parsing attributes in process `syz.3.761'. [ 169.636329][ T8797] netlink: 104 bytes leftover after parsing attributes in process `syz.3.761'. [ 169.685075][ T55] block nbd0: Possible stuck request ffff888025277000: control (read@0,4096B). Runtime 60 seconds [ 169.817570][ T8802] netlink: 3 bytes leftover after parsing attributes in process `syz.4.763'. [ 170.547684][ T8821] syzkaller0: entered promiscuous mode [ 170.564779][ T8821] syzkaller0: entered allmulticast mode [ 170.628092][ T8839] netlink: 4 bytes leftover after parsing attributes in process `syz.1.776'. [ 170.910610][ T8850] netlink: 1 bytes leftover after parsing attributes in process `syz.2.780'. [ 170.942533][ T8850] xt_policy: neither incoming nor outgoing policy selected [ 172.929947][ T8881] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 173.431045][ T8896] netlink: 16 bytes leftover after parsing attributes in process `syz.1.790'. [ 173.586936][ T8912] sctp: [Deprecated]: syz.0.792 (pid 8912) Use of int in maxseg socket option. [ 173.586936][ T8912] Use struct sctp_assoc_value instead [ 174.087056][ T30] audit: type=1800 audit(1755808297.601:2): pid=8909 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.792" name="memory.events" dev="tmpfs" ino=818 res=0 errno=0 [ 174.472801][ T8961] netlink: 'syz.2.805': attribute type 21 has an invalid length. [ 174.495897][ T8961] netlink: 152 bytes leftover after parsing attributes in process `syz.2.805'. [ 174.794838][ T8971] netlink: 'syz.0.808': attribute type 1 has an invalid length. [ 174.844647][ T8975] netlink: 52 bytes leftover after parsing attributes in process `syz.3.809'. [ 174.911160][ T8971] 8021q: adding VLAN 0 to HW filter on device bond2 [ 174.927428][ T8983] netlink: 'syz.2.811': attribute type 1 has an invalid length. [ 175.041445][ T8981] vlan0: entered allmulticast mode [ 175.049019][ T8981] veth1: entered allmulticast mode [ 175.056662][ T8981] bond2: (slave vlan0): Opening slave failed [ 175.205893][ T8992] netlink: 8 bytes leftover after parsing attributes in process `syz.3.815'. [ 175.895161][ T9031] netlink: 'syz.2.827': attribute type 30 has an invalid length. [ 175.920314][ T9017] af_packet: tpacket_rcv: packet too big, clamped from 112 to 4294967272. macoff=96 [ 175.939600][ T9031] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 175.967492][ T9031] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 176.047007][ T9033] netlink: 12 bytes leftover after parsing attributes in process `syz.4.828'. [ 176.083280][ T9034] netlink: 20 bytes leftover after parsing attributes in process `syz.4.828'. [ 176.099268][ T9034] netlink: 20 bytes leftover after parsing attributes in process `syz.4.828'. [ 176.110627][ T9033] netlink: 12 bytes leftover after parsing attributes in process `syz.4.828'. [ 176.261321][ T9042] netlink: 1196 bytes leftover after parsing attributes in process `syz.0.829'. [ 176.484258][ T9057] netlink: 'syz.2.834': attribute type 1 has an invalid length. [ 176.552270][ T9063] netlink: 8 bytes leftover after parsing attributes in process `syz.2.834'. [ 176.573059][ T9063] netlink: 24 bytes leftover after parsing attributes in process `syz.2.834'. [ 176.615277][ T9067] netlink: 'syz.4.837': attribute type 1 has an invalid length. [ 176.657172][ T9059] netlink: 'syz.0.835': attribute type 4 has an invalid length. [ 176.682327][ T9062] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 176.730277][ T9062] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 176.755447][ T9071] 8021q: adding VLAN 0 to HW filter on device bond2 [ 176.768477][ T9071] bond1: (slave bond2): making interface the new active one [ 176.786879][ T9071] bond1: (slave bond2): Enslaving as an active interface with an up link [ 176.897497][ T9067] bond1: (slave gretap2): Enslaving as a backup interface with an up link [ 176.951566][ T9071] 8021q: adding VLAN 0 to HW filter on device bond1 [ 177.120350][ T9088] netlink: 'syz.4.841': attribute type 6 has an invalid length. [ 177.292990][ T9097] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 177.771912][ T9121] tipc: Enabling of bearer rejected, failed to enable media [ 178.768721][ T9163] syzkaller1: entered promiscuous mode [ 178.813858][ T9163] syzkaller1: entered allmulticast mode [ 178.950826][ T9169] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 178.989886][ T9169] netlink: 'syz.1.863': attribute type 1 has an invalid length. [ 179.253042][ T9169] 8021q: adding VLAN 0 to HW filter on device bond4 [ 179.536542][ T9189] vlan0: entered promiscuous mode [ 179.549619][ T9190] __nla_validate_parse: 7 callbacks suppressed [ 179.549640][ T9190] netlink: 28 bytes leftover after parsing attributes in process `syz.1.868'. [ 179.552027][ T9189] bridge0: entered promiscuous mode [ 179.892366][ T9204] netlink: 'syz.3.872': attribute type 7 has an invalid length. [ 179.909210][ T9204] openvswitch: netlink: VXLAN extension message has 11 unknown bytes. [ 179.950815][ T9204] netlink: 8 bytes leftover after parsing attributes in process `syz.3.872'. [ 180.000478][ T9211] bridge_slave_0: left allmulticast mode [ 180.033684][ T9211] bridge_slave_0: left promiscuous mode [ 180.089781][ T9211] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.117464][ T9211] bridge_slave_1: left allmulticast mode [ 180.120327][ T9216] netlink: 20 bytes leftover after parsing attributes in process `syz.0.873'. [ 180.142208][ T9211] bridge_slave_1: left promiscuous mode [ 180.152289][ T9211] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.196627][ T9219] netlink: 'syz.4.877': attribute type 1 has an invalid length. [ 180.207953][ T9219] netlink: 224 bytes leftover after parsing attributes in process `syz.4.877'. [ 180.209327][ T9211] bond0: (slave bond_slave_0): Releasing backup interface [ 180.218326][ T9219] nbd: couldn't find a device at index 1 [ 180.238085][ T9211] bond0: (slave bond_slave_1): Releasing backup interface [ 180.255241][ T9211] team0: Port device team_slave_0 removed [ 180.263081][ T9211] team0: Port device team_slave_1 removed [ 180.270367][ T9211] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 180.279212][ T9211] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 180.298880][ T9204] dummy0: entered promiscuous mode [ 180.308323][ T9204] batadv_slave_1: entered promiscuous mode [ 180.316261][ T9204] debugfs: 'hsr1' already exists in 'hsr' [ 180.322151][ T9204] Cannot create hsr debugfs directory [ 180.509540][ T9230] smc: net device bond0 applied user defined pnetid SYZ2 [ 180.549855][ T9232] netlink: 2 bytes leftover after parsing attributes in process `syz.0.882'. [ 180.552244][ T9228] netlink: 'syz.3.880': attribute type 10 has an invalid length. [ 180.570471][ T9230] netlink: 14 bytes leftover after parsing attributes in process `syz.4.881'. [ 180.671648][ T9234] netlink: 14 bytes leftover after parsing attributes in process `syz.4.881'. [ 180.790312][ T9241] netlink: 12 bytes leftover after parsing attributes in process `syz.1.884'. [ 180.961677][ T9252] netlink: 'syz.1.887': attribute type 13 has an invalid length. [ 180.977926][ T9250] netlink: 100 bytes leftover after parsing attributes in process `syz.0.885'. [ 181.077455][ T9230] smc: removing net device bond0 with user defined pnetid SYZ2 [ 181.106126][ T9230] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 181.141599][ T9230] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 181.190338][ T9230] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 181.245194][ T9230] bond0 (unregistering): Released all slaves [ 181.437996][ T9265] netlink: 'syz.3.892': attribute type 1 has an invalid length. [ 181.468321][ T9265] netlink: 224 bytes leftover after parsing attributes in process `syz.3.892'. [ 181.588274][ T9272] netlink: 'syz.0.894': attribute type 29 has an invalid length. [ 181.955975][ T9286] netlink: 'syz.0.897': attribute type 1 has an invalid length. [ 182.212117][ T9296] "syz.0.901" (9296) uses obsolete ecb(arc4) skcipher [ 182.402687][ T9295] syzkaller0: entered promiscuous mode [ 182.425050][ T9295] syzkaller0: entered allmulticast mode [ 185.480917][ T9345] veth3: entered promiscuous mode [ 185.859852][ T9371] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 185.870068][ T9372] __nla_validate_parse: 5 callbacks suppressed [ 185.870090][ T9372] netlink: 156 bytes leftover after parsing attributes in process `syz.4.918'. [ 185.883888][ T9369] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 186.104654][ T9380] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 186.131181][ T9381] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 186.258868][ T9385] netlink: 76 bytes leftover after parsing attributes in process `syz.2.925'. [ 186.516258][ T9400] netlink: 12 bytes leftover after parsing attributes in process `syz.3.926'. [ 186.958972][ T9416] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 186.975463][ T12] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 187.337286][ T9431] netlink: 52 bytes leftover after parsing attributes in process `syz.3.934'. [ 187.378590][ T9431] netlink: 52 bytes leftover after parsing attributes in process `syz.3.934'. [ 187.400893][ T9431] netlink: 52 bytes leftover after parsing attributes in process `syz.3.934'. [ 187.440169][ T9431] netlink: 52 bytes leftover after parsing attributes in process `syz.3.934'. [ 187.475941][ T9431] netlink: 52 bytes leftover after parsing attributes in process `syz.3.934'. [ 187.486939][ T9431] netlink: 52 bytes leftover after parsing attributes in process `syz.3.934'. [ 187.502358][ T9431] netlink: 52 bytes leftover after parsing attributes in process `syz.3.934'. [ 187.662513][ T9441] netlink: 'syz.2.938': attribute type 16 has an invalid length. [ 187.686944][ T9441] wg1: entered promiscuous mode [ 187.692070][ T9441] wg1: entered allmulticast mode [ 187.847603][ T9447] tipc: Enabled bearer , priority 0 [ 187.865591][ T9447] syzkaller0: entered promiscuous mode [ 187.888436][ T9447] syzkaller0: entered allmulticast mode [ 187.965058][ T9447] tipc: Resetting bearer [ 188.035458][ T9446] tipc: Resetting bearer [ 188.103786][ T9446] tipc: Disabling bearer [ 188.489320][ T9478] netdevsim netdevsim3 : renamed from netdevsim0 (while UP) [ 188.722841][ T9484] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 188.752680][ T9484] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 188.774142][ T9485] wg1 speed is unknown, defaulting to 1000 [ 188.992130][ T5183] Bluetooth: hci4: command 0x0406 tx timeout [ 189.200424][ T9524] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ULvyآDUDw}z [ 189.289490][ T9525] syzkaller0: entered promiscuous mode [ 189.311260][ T9525] syzkaller0: entered allmulticast mode [ 189.728609][ T9549] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 189.728617][ T9550] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 190.557252][ T9580] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.609929][ T9580] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.864975][ T9595] netlink: 'syz.4.976': attribute type 1 has an invalid length. [ 190.977271][ T9595] smc: adding net device bond0 with user defined pnetid SYZ2 [ 190.987702][ T9595] 8021q: adding VLAN 0 to HW filter on device bond0 [ 191.040816][ T9601] netlink: 'syz.1.981': attribute type 7 has an invalid length. [ 191.124486][ T9590] bond0: (slave geneve2): making interface the new active one [ 191.168735][ T9590] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 191.218237][ T9608] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 191.363802][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 191.472594][ T9615] __nla_validate_parse: 73 callbacks suppressed [ 191.472615][ T9615] netlink: 4 bytes leftover after parsing attributes in process `syz.4.985'. [ 191.891837][ T9626] netlink: 'syz.3.987': attribute type 11 has an invalid length. [ 191.935258][ T9626] netlink: 224 bytes leftover after parsing attributes in process `syz.3.987'. [ 192.107698][ T9624] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 192.131357][ T9611] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 192.211652][ T9611] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 192.325510][ T9645] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 192.333102][ T9645] IPv6: NLM_F_CREATE should be set when creating new route [ 192.340477][ T9645] IPv6: NLM_F_CREATE should be set when creating new route [ 192.347841][ T9645] IPv6: NLM_F_CREATE should be set when creating new route [ 192.379032][ T9646] tipc: Cannot configure node identity twice [ 192.401443][ T9645] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 192.524895][ T9611] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 192.530876][ T9611] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 192.541139][ T9649] netlink: 40 bytes leftover after parsing attributes in process `syz.1.992'. [ 192.764792][ T9611] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 192.804512][ T9611] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 192.854787][ T9661] openvswitch: netlink: Message has 4 unknown bytes. [ 192.861569][ T9661] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 193.004805][ T9611] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 193.042708][ T9611] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 193.130829][ T9672] netlink: 'syz.2.1000': attribute type 83 has an invalid length. [ 193.185619][ T9611] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 193.191601][ T9611] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 193.715848][ T9692] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1005'. [ 194.821640][ T9735] syzkaller0: entered promiscuous mode [ 194.835949][ T9735] syzkaller0: entered allmulticast mode [ 194.845671][ T9733] tipc: Enabled bearer , priority 0 [ 194.886049][ T9734] netlink: 'syz.0.1015': attribute type 11 has an invalid length. [ 194.932055][ T9734] netlink: 'syz.0.1015': attribute type 11 has an invalid length. [ 194.964582][ T9734] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1015'. [ 194.994534][ T9738] tipc: Resetting bearer [ 195.024939][ T9744] netlink: 'syz.4.1016': attribute type 7 has an invalid length. [ 195.098965][ T9738] tipc: Disabling bearer [ 195.210173][ T9744] : entered promiscuous mode [ 195.495082][ T9761] netlink: 'syz.1.1019': attribute type 10 has an invalid length. [ 195.520835][ T9764] netlink: 'syz.4.1021': attribute type 1 has an invalid length. [ 195.561350][ T9768] netlink: 'syz.0.1022': attribute type 1 has an invalid length. [ 195.594489][ T9764] netlink: 'syz.4.1021': attribute type 11 has an invalid length. [ 195.608251][ T9773] sctp: [Deprecated]: syz.1.1019 (pid 9773) Use of int in max_burst socket option. [ 195.608251][ T9773] Use struct sctp_assoc_value instead [ 195.625610][ T9764] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1021'. [ 195.640518][ T9768] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 196.002772][ T9794] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1028'. [ 196.029806][ T9795] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1027'. [ 196.148148][ T9803] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1028'. [ 196.300560][ T9811] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1027'. [ 196.326052][ T9801] hsr0 speed is unknown, defaulting to 1000 [ 196.344792][ T9801] hsr0 speed is unknown, defaulting to 1000 [ 196.375264][ T9801] hsr0 speed is unknown, defaulting to 1000 [ 196.511963][ T9801] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 196.657719][ T9807] syzkaller1: entered promiscuous mode [ 196.713618][ T9807] syzkaller1: entered allmulticast mode [ 196.773393][ T9801] hsr0 speed is unknown, defaulting to 1000 [ 196.839010][ T9827] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1035'. [ 196.870225][ T9801] hsr0 speed is unknown, defaulting to 1000 [ 196.908889][ T9801] hsr0 speed is unknown, defaulting to 1000 [ 196.940576][ T9801] hsr0 speed is unknown, defaulting to 1000 [ 197.037584][ T9801] hsr0 speed is unknown, defaulting to 1000 [ 197.096721][ T9834] tipc: Enabled bearer , priority 0 [ 197.111553][ T9834] syzkaller0: entered promiscuous mode [ 197.120303][ T9834] syzkaller0: entered allmulticast mode [ 197.230908][ T9845] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1038'. [ 197.308826][ T9828] syzkaller0: entered promiscuous mode [ 197.317068][ T9828] syzkaller0: entered allmulticast mode [ 197.320764][ T9850] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1039'. [ 197.350358][ T9834] tipc: Resetting bearer [ 198.203656][ T5923] tipc: Node number set to 1507879296 [ 199.197411][ T9850] team_slave_0: entered promiscuous mode [ 199.203337][ T9850] team_slave_1: entered promiscuous mode [ 199.212041][ T9850] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 199.220530][ T9850] team0: Device macvtap1 is already an upper device of the team interface [ 199.235940][ T9850] team_slave_0: left promiscuous mode [ 199.241566][ T9850] team_slave_1: left promiscuous mode [ 199.278253][ T9831] tipc: Resetting bearer [ 199.317636][ T9831] tipc: Disabling bearer [ 199.768870][ T55] block nbd0: Possible stuck request ffff888025277000: control (read@0,4096B). Runtime 90 seconds [ 199.780353][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.991069][ T9888] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1049'. [ 200.197956][ T9907] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1050'. [ 200.403727][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 200.413383][ T9920] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1052'. [ 200.452547][ T9926] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1052'. [ 200.855680][ T9942] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1060'. [ 201.201941][ T9947] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.499230][ T9947] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.532102][ T9967] netlink: 'syz.2.1066': attribute type 1 has an invalid length. [ 201.577904][ T9967] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1066'. [ 201.600603][ T9967] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1066'. [ 201.765956][ T9947] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.002203][ T9947] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.334292][ T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.560278][ T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.590969][ T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.671174][ T147] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.975767][T10010] syzkaller1: entered promiscuous mode [ 202.982842][T10010] syzkaller1: entered allmulticast mode [ 203.073160][T10029] veth1_macvtap: left promiscuous mode [ 203.410046][T10044] netlink: 'syz.0.1084': attribute type 1 has an invalid length. [ 203.448260][T10044] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1084'. [ 203.448479][T10045] lo: entered promiscuous mode [ 203.501703][T10045] tunl0: entered promiscuous mode [ 203.533074][T10045] gre0: entered promiscuous mode [ 203.619985][T10045] gretap0: entered promiscuous mode [ 203.707032][T10045] erspan0: entered promiscuous mode [ 203.778017][T10045] ip_vti0: entered promiscuous mode [ 204.426786][T10094] netlink: 'syz.4.1095': attribute type 2 has an invalid length. [ 204.466909][T10094] netlink: 1184 bytes leftover after parsing attributes in process `syz.4.1095'. [ 204.540289][T10103] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1098'. [ 204.709925][T10111] TCP: TCP_TX_DELAY enabled [ 205.097349][T10121] netlink: 'syz.4.1103': attribute type 1 has an invalid length. [ 205.952336][T10158] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1113'. [ 205.973829][T10158] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1113'. [ 206.335089][T10175] netlink: 'syz.4.1118': attribute type 6 has an invalid length. [ 206.937439][T10193] netlink: 165 bytes leftover after parsing attributes in process `syz.0.1123'. [ 207.151690][T10202] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1125'. [ 207.472125][T10218] veth0: entered promiscuous mode [ 207.508526][T10218] netlink: 'syz.3.1130': attribute type 1 has an invalid length. [ 207.750984][T10224] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1132'. [ 207.808791][T10217] veth0: left promiscuous mode [ 207.891511][T10224] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1132'. [ 208.676579][T10254] netlink: 'syz.3.1139': attribute type 33 has an invalid length. [ 208.714165][T10254] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1139'. [ 208.856155][T10263] netlink: 'syz.4.1141': attribute type 1 has an invalid length. [ 208.923774][T10263] netlink: 'syz.4.1141': attribute type 1 has an invalid length. [ 209.476769][T10293] wireguard: wg1: Could not create IPv4 socket [ 209.575484][T10293] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1148'. [ 209.851093][T10307] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1152'. [ 209.879574][T10307] netlink: 'syz.1.1152': attribute type 26 has an invalid length. [ 209.913255][T10309] smc: net device erspan0 applied user defined pnetid SYZ0 [ 209.913636][T10307] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1152'. [ 210.120798][T10315] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1155'. [ 210.196152][T10318] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1155'. [ 210.568766][T10327] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1158'. [ 211.412394][T10364] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1166'. [ 211.790950][T10379] netlink: 'syz.2.1173': attribute type 11 has an invalid length. [ 211.815894][T10379] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1173'. [ 212.050066][T10397] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 212.112953][T10394] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 212.230689][T10403] vlan0: entered promiscuous mode [ 212.338673][T10407] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1179'. [ 212.871184][T10433] openvswitch: netlink: IPv4 tun info is not correct [ 212.988220][T10433] syzkaller1: entered promiscuous mode [ 213.016483][T10433] syzkaller1: entered allmulticast mode [ 213.888936][T10467] __nla_validate_parse: 4 callbacks suppressed [ 213.888959][T10467] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1195'. [ 214.287591][T10486] netlink: 184 bytes leftover after parsing attributes in process `syz.0.1201'. [ 214.344015][T10486] xt_socket: unknown flags 0xd0 [ 214.706019][T10508] netlink: 'syz.4.1207': attribute type 75 has an invalid length. [ 214.739778][T10511] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 215.007300][T10522] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1209'. [ 215.161498][T10527] netlink: 'syz.4.1211': attribute type 11 has an invalid length. [ 215.205956][T10527] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1211'. [ 215.669219][T10545] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1218'. [ 215.728581][T10549] veth0_to_team: entered promiscuous mode [ 215.743937][T10549] veth0_to_team: entered allmulticast mode [ 215.791961][T10553] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1220'. [ 215.826707][T10551] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1218'. [ 215.903098][T10558] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1221'. [ 216.140816][T10564] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1222'. [ 216.171699][T10570] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1224'. [ 216.577457][T10594] tipc: Enabling of bearer rejected, failed to enable media [ 217.043779][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 217.365166][T10630] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 218.576347][T10680] syzkaller1: entered promiscuous mode [ 218.613134][T10680] syzkaller1: entered allmulticast mode [ 218.911725][T10692] tipc: Failed to remove unknown binding: 66,1,1/1507879296:1627168/1627170 [ 218.932015][T10696] __nla_validate_parse: 5 callbacks suppressed [ 218.932120][T10696] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1258'. [ 218.977043][T10692] tipc: Failed to remove unknown binding: 66,1,1/1507879296:1627168/1627170 [ 219.067655][T10700] tipc: Started in network mode [ 219.092891][T10700] tipc: Node identity 7619cf37769e, cluster identity 4711 [ 219.114360][T10700] tipc: Enabled bearer , priority 0 [ 219.180425][T10704] netlink: 'syz.3.1261': attribute type 1 has an invalid length. [ 219.191880][T10708] syzkaller0: entered promiscuous mode [ 219.203749][T10704] netlink: 228 bytes leftover after parsing attributes in process `syz.3.1261'. [ 219.222453][T10708] syzkaller0: entered allmulticast mode [ 219.290735][T10700] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 219.793755][T10710] tipc: Enabled bearer , priority 0 [ 220.133908][ T5943] tipc: Node number set to 8900407 [ 220.273835][T10708] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1260'. [ 221.465319][T10718] tipc: Resetting bearer [ 221.490733][T10719] syzkaller0: entered promiscuous mode [ 221.503794][T10719] syzkaller0: entered allmulticast mode [ 221.599873][T10697] tipc: Resetting bearer [ 221.692825][T10697] tipc: Disabling bearer [ 221.756007][T10719] tipc: Resetting bearer [ 221.842585][T10719] tipc: Disabling bearer [ 221.899787][T10739] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1269'. [ 221.900528][T10726] netlink: 'syz.3.1265': attribute type 13 has an invalid length. [ 221.918989][T10739] netlink: 120 bytes leftover after parsing attributes in process `syz.1.1269'. [ 221.919084][T10739] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1269'. [ 222.057143][T10746] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1270'. [ 222.259378][T10749] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1271'. [ 222.313744][T10749] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1271'. [ 222.377975][T10765] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 222.434290][T10764] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 222.739878][T10777] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1277'. [ 223.338558][T10811] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 223.365151][T10811] batman_adv: batadv0: Adding interface: wlan1 [ 223.436678][T10811] batman_adv: batadv0: The MTU of interface wlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.513701][T10811] batman_adv: batadv0: Not using interface wlan1 (retrying later): interface not active [ 224.132471][T10840] __nla_validate_parse: 3 callbacks suppressed [ 224.132492][T10840] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1296'. [ 224.460743][T10858] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1299'. [ 224.626890][T10863] sctp: [Deprecated]: syz.0.1300 (pid 10863) Use of int in max_burst socket option. [ 224.626890][T10863] Use struct sctp_assoc_value instead [ 224.706695][T10866] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1301'. [ 225.026561][T10878] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1305'. [ 225.080487][T10878] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1305'. [ 225.104919][T10878] 0{X: renamed from gretap0 [ 225.161627][T10878] 0{X: left promiscuous mode [ 225.197400][T10878] 0{X: entered allmulticast mode [ 225.226257][T10878] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 225.294653][T10889] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1308'. [ 225.323130][T10883] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 225.347748][T10897] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1308'. [ 225.406397][T10885] tipc: Started in network mode [ 225.416070][T10885] tipc: Node identity f603c01eb022, cluster identity 4711 [ 225.431243][T10885] tipc: Enabled bearer , priority 0 [ 225.463089][T10897] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 225.640525][T10907] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1311'. [ 225.662856][T10908] tipc: Resetting bearer [ 225.757283][T10882] tipc: Disabling bearer [ 226.004676][T10920] bridge0: port 2(veth0_to_bridge) entered blocking state [ 226.068307][T10920] bridge0: port 2(veth0_to_bridge) entered disabled state [ 226.095024][T10920] veth0_to_bridge: entered allmulticast mode [ 226.103370][T10920] veth0_to_bridge: entered promiscuous mode [ 226.191023][T10920] dvmrp0: entered allmulticast mode [ 226.252580][T10920] dvmrp0: left allmulticast mode [ 227.040663][T10966] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.1324'. [ 227.738007][ T30] audit: type=1800 audit(1755808351.261:3): pid=10993 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1328" name="memory.events" dev="tmpfs" ino=1286 res=0 errno=0 [ 227.903567][ T30] audit: type=1804 audit(1755808351.301:4): pid=10993 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1328" name="/newroot/247/memory.events" dev="tmpfs" ino=1286 res=1 errno=0 [ 228.331966][T11015] netlink: 'syz.2.1334': attribute type 1 has an invalid length. [ 228.393760][T11018] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1334'. [ 229.646606][T11068] netlink: 'syz.1.1345': attribute type 1 has an invalid length. [ 229.788570][T11070] netdevsim netdevsim4: Firmware load for '..' refused, path contains '..' component [ 229.844726][ T55] block nbd0: Possible stuck request ffff888025277000: control (read@0,4096B). Runtime 120 seconds [ 230.032907][T11078] __nla_validate_parse: 4 callbacks suppressed [ 230.032931][T11078] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1348'. [ 230.054468][T11085] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 230.143030][T11087] bridge5: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 230.748630][T11109] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 230.856903][T11113] netlink: 'syz.3.1359': attribute type 1 has an invalid length. [ 231.060357][T11127] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1363'. [ 231.072082][T11127] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1363'. [ 231.106276][T11128] macvlan2: entered promiscuous mode [ 231.119859][T11128] macvlan2: entered allmulticast mode [ 231.151039][T11128] bond1: entered promiscuous mode [ 231.161907][T11128] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 231.180852][T11128] bond1: left promiscuous mode [ 231.228780][T11117] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 231.243351][T11117] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 231.299127][T11122] gretap1: entered promiscuous mode [ 231.323053][T11122] bond1: (slave gretap1): making interface the new active one [ 231.334261][T11122] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 231.363960][T11127] vlan0: entered allmulticast mode [ 231.386186][T11127] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 232.275042][T11176] siw: device registration error -23 [ 232.297311][T11176] siw: device registration error -23 [ 232.342337][T11182] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1375'. [ 232.373730][T11182] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1375'. [ 232.496271][T11189] netlink: 'syz.3.1379': attribute type 8 has an invalid length. [ 232.659053][T11193] netlink: 'syz.0.1382': attribute type 1 has an invalid length. [ 232.767214][T11196] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1381'. [ 232.801345][T11196] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1381'. [ 232.831727][T11199] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 232.852978][T11203] netlink: 'syz.1.1383': attribute type 10 has an invalid length. [ 232.871988][T11199] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 232.914564][T11196] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1381'. [ 232.962618][T11193] gretap1: entered promiscuous mode [ 233.008108][T11193] bond3: (slave gretap1): making interface the new active one [ 233.021069][T11193] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 233.042232][T11203] bridge_slave_1: left allmulticast mode [ 233.061534][T11193] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1382'. [ 233.064064][T11203] bridge_slave_1: left promiscuous mode [ 233.084437][T11203] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.101165][T11203] bridge_slave_1: entered allmulticast mode [ 233.109288][T11203] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 233.135357][T11207] macvlan0: entered promiscuous mode [ 233.141690][T11207] macvlan0: entered allmulticast mode [ 233.156842][T11207] bond3: entered promiscuous mode [ 233.164538][T11207] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 233.204112][T11207] bond3: (slave macvlan0): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 233.244259][T11207] bond3: left promiscuous mode [ 233.725096][T11243] netlink: 'syz.1.1392': attribute type 10 has an invalid length. [ 233.838808][T11193] bond0 (unregistering): Released all slaves [ 233.999392][T11243] bond0: (slave wlan1): Releasing backup interface [ 234.112670][T11243] mac80211_hwsim hwsim9 wlan1: left allmulticast mode [ 234.277843][T11261] netlink: 'syz.2.1398': attribute type 10 has an invalid length. [ 234.406601][T11268] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1400'. [ 234.472410][T11270] netlink: 'syz.2.1401': attribute type 5 has an invalid length. [ 235.759872][T11319] __nla_validate_parse: 4 callbacks suppressed [ 235.759896][T11319] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1412'. [ 235.851875][T11329] IPVS: ip_vs_add_dest(): server weight less than zero [ 236.163937][T10116] udevd[10116]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 236.251507][T10116] udevd[10116]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 236.468971][T11361] sctp: [Deprecated]: syz.1.1424 (pid 11361) Use of int in max_burst socket option deprecated. [ 236.468971][T11361] Use struct sctp_assoc_value instead [ 236.655617][T11373] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1426'. [ 236.949602][T11384] netlink: 'syz.1.1429': attribute type 16 has an invalid length. [ 236.976486][T11384] netlink: 'syz.1.1429': attribute type 3 has an invalid length. [ 236.999637][T11384] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1429'. [ 237.029461][T11384] netlink: 'syz.1.1429': attribute type 16 has an invalid length. [ 237.056211][T11384] netlink: 'syz.1.1429': attribute type 3 has an invalid length. [ 237.109113][T11384] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1429'. [ 237.444980][T11395] netlink: 'syz.2.1433': attribute type 24 has an invalid length. [ 237.664434][T11402] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1435'. [ 237.820846][ T5878] IPVS: starting estimator thread 0... [ 237.821058][T11404] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 237.917832][T11412] IPVS: using max 27 ests per chain, 64800 per kthread [ 237.925619][T11416] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1435'. [ 237.925649][T11416] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1435'. [ 238.087903][T11419] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1440'. [ 238.118368][T11419] netlink: 272 bytes leftover after parsing attributes in process `syz.3.1440'. [ 238.143381][T11419] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1440'. [ 238.179057][T11423] team0: Device gtp0 is of different type [ 239.430725][T11476] openvswitch: netlink: Tunnel attr 303 out of range max 16 [ 239.450790][T11480] netlink: 'syz.4.1459': attribute type 2 has an invalid length. [ 239.702315][T11489] netlink: 'syz.3.1461': attribute type 1 has an invalid length. [ 239.977745][T11499] bond2: (slave bridge2): making interface the new active one [ 240.018546][T11499] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 240.269079][T11520] tipc: Enabling of bearer rejected, failed to enable media [ 240.420477][T11524] netlink: 'syz.4.1471': attribute type 1 has an invalid length. [ 240.634966][T11529] tipc: Enabling of bearer rejected, failed to enable media [ 241.033694][T11548] __nla_validate_parse: 12 callbacks suppressed [ 241.033718][T11548] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1479'. [ 241.271504][T11563] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1483'. [ 241.307958][T11564] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1482'. [ 241.512269][T11535] team0 (unregistering): Port device team_slave_0 removed [ 241.530467][T11535] team0 (unregistering): Port device team_slave_1 removed [ 241.537483][T11575] netlink: 'syz.4.1484': attribute type 1 has an invalid length. [ 241.828814][T11591] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1487'. [ 241.920550][T11597] sch_fq: defrate 0 ignored. [ 242.262226][T11614] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1494'. [ 242.470865][T11623] netlink: 'syz.1.1498': attribute type 10 has an invalid length. [ 242.541134][T11623] team0: Port device dummy0 added [ 242.593037][T11627] netlink: 'syz.1.1498': attribute type 10 has an invalid length. [ 242.688197][T11627] team0: Port device dummy0 removed [ 242.738498][T11627] dummy0: entered allmulticast mode [ 242.778313][T11627] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 242.963280][T11641] tipc: Enabled bearer , priority 0 [ 242.975618][T11641] syzkaller0: entered promiscuous mode [ 242.982404][T11643] netlink: 'syz.3.1506': attribute type 11 has an invalid length. [ 242.996127][T11641] syzkaller0: entered allmulticast mode [ 243.036247][T11643] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1506'. [ 243.059174][T11641] tipc: Resetting bearer [ 243.080287][T11641] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1505'. [ 243.100711][T11641] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1505'. [ 243.143762][T11640] tipc: Resetting bearer [ 243.256177][T11640] tipc: Disabling bearer [ 243.492653][T11668] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1514'. [ 243.625259][T11673] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 243.652525][T11668] netlink: 184 bytes leftover after parsing attributes in process `syz.0.1514'. [ 244.750671][T11729] IPVS: set_ctl: invalid protocol: 11612 172.20.20.187:21 [ 244.833624][T11716] raw_sendmsg: syz.1.1530 forgot to set AF_INET. Fix it! [ 244.919668][T11737] netlink: 'syz.3.1535': attribute type 1 has an invalid length. [ 244.934563][T11734] lo: left promiscuous mode [ 244.949087][T11734] tunl0: left promiscuous mode [ 244.977330][T11734] gre0: left promiscuous mode [ 244.990947][T11734] gretap0: left promiscuous mode [ 245.008874][T11734] erspan0: left promiscuous mode [ 245.027160][T11734] ip_vti0: left promiscuous mode [ 245.721379][T11734] vlan2: left allmulticast mode [ 245.753658][T11734] veth0_to_bond: left allmulticast mode [ 245.759991][T11734] veth3: left allmulticast mode [ 245.770641][T11734] ip6erspan0: left promiscuous mode [ 245.782011][T11734] veth5: left allmulticast mode [ 245.791820][T11734] gretap1: left promiscuous mode [ 245.798482][T11734] gretap1: left allmulticast mode [ 245.816061][T11734] gtp0: left promiscuous mode [ 245.993289][T11752] bridge0: entered promiscuous mode [ 246.025925][T11752] bridge0: entered allmulticast mode [ 246.061119][ T5971] wg1 speed is unknown, defaulting to 1000 [ 246.092660][ T5971] syz2: Port: 1 Link DOWN [ 246.155103][ T1157] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.204726][ T1157] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.261967][ T1157] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.293711][ T1157] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.314157][T11788] __nla_validate_parse: 12 callbacks suppressed [ 246.314178][T11788] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1543'. [ 246.484272][T11802] netlink: 348 bytes leftover after parsing attributes in process `syz.3.1546'. [ 246.659784][T11815] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1550'. [ 246.993619][T11821] 8021q: adding VLAN 0 to HW filter on device bond7 [ 247.068036][T11821] bond7: entered allmulticast mode [ 247.116403][T11821] bond0: (slave bond7): Enslaving as an active interface with a down link [ 247.237951][T11833] netlink: 71 bytes leftover after parsing attributes in process `syz.0.1553'. [ 247.435224][T11838] syzkaller1: entered promiscuous mode [ 247.441224][T11838] syzkaller1: entered allmulticast mode [ 247.471764][T11840] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1556'. [ 247.526594][T11844] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 247.562821][T11851] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 247.802378][T11856] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1561'. [ 247.836722][T11856] bridge0: left allmulticast mode [ 248.020156][T11869] netlink: 'syz.1.1565': attribute type 64 has an invalid length. [ 248.074055][T11869] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1565'. [ 248.328726][T11885] netlink: 'syz.1.1569': attribute type 25 has an invalid length. [ 248.425336][T11888] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1570'. [ 248.541869][T11893] IPVS: Unknown mcast interface: syzkaller1 [ 248.816718][T11903] netlink: 'syz.3.1577': attribute type 1 has an invalid length. [ 248.920563][T11905] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1577'. [ 248.949255][T11903] bond3 (unregistering): Released all slaves [ 248.979280][T11910] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1577'. [ 250.964122][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 254.377613][T12107] __nla_validate_parse: 11 callbacks suppressed [ 254.377638][T12107] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1629'. [ 254.428242][T12107] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1629'. [ 254.464424][T12107] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1629'. [ 254.696901][T12120] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1634'. [ 254.716628][T12120] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 255.147098][T12144] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1641'. [ 255.229141][T12147] tipc: New replicast peer: 0.0.0.0 [ 255.254715][T12147] tipc: Enabled bearer , priority 10 [ 255.306751][T12147] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa [ 255.343171][T12147] netlink: 'syz.2.1642': attribute type 5 has an invalid length. [ 255.467965][T12156] wg1 speed is unknown, defaulting to 1000 [ 255.502341][T12156] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1647'. [ 255.648586][T12166] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1649'. [ 255.755855][T12170] tipc: Enabled bearer , priority 0 [ 255.785621][T12170] syzkaller0: entered promiscuous mode [ 255.786656][T12166] netlink: 'syz.4.1649': attribute type 24 has an invalid length. [ 255.791163][T12170] syzkaller0: entered allmulticast mode [ 256.070986][T12168] tipc: Resetting bearer [ 256.156754][T12168] tipc: Disabling bearer [ 256.379787][ T24] tipc: Node number set to 1176616990 [ 256.625217][T12216] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1662'. [ 256.930386][T12225] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1665'. [ 257.099727][T12235] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1668'. [ 257.273757][T12193] lec:lec_atm_close: lec0: Shut down! [ 257.735845][T12265] siw: device registration error -23 [ 257.847439][T12267] netlink: 'syz.4.1678': attribute type 27 has an invalid length. [ 257.984110][T12274] 0{X: entered promiscuous mode [ 257.993150][T12274] debugfs: 'hsr1' already exists in 'hsr' [ 258.028144][T12274] Cannot create hsr debugfs directory [ 258.044622][T12274] hsr1: Slave A (erspan0) is not up; please bring it up to get a fully working HSR network [ 258.055350][T12274] hsr1: Slave B (30{X) is not up; please bring it up to get a fully working HSR network [ 258.080595][T12272] bond0: entered promiscuous mode [ 258.087349][T12272] !: entered promiscuous mode [ 258.092672][T12272] bond_slave_1: entered promiscuous mode [ 258.102798][T12272] bond0: left promiscuous mode [ 258.108464][T12272] !: left promiscuous mode [ 258.115020][T12272] bond_slave_1: left promiscuous mode [ 258.451178][T12302] FAULT_INJECTION: forcing a failure. [ 258.451178][T12302] name failslab, interval 1, probability 0, space 0, times 1 [ 258.498661][T12302] CPU: 1 UID: 0 PID: 12302 Comm: syz.3.1687 Not tainted syzkaller #0 PREEMPT(full) [ 258.498692][T12302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 258.498714][T12302] Call Trace: [ 258.498723][T12302] [ 258.498733][T12302] dump_stack_lvl+0x189/0x250 [ 258.498764][T12302] ? __pfx____ratelimit+0x10/0x10 [ 258.498793][T12302] ? __pfx_dump_stack_lvl+0x10/0x10 [ 258.498825][T12302] ? __pfx__printk+0x10/0x10 [ 258.498862][T12302] ? __pfx___might_resched+0x10/0x10 [ 258.498883][T12302] ? fs_reclaim_acquire+0x7d/0x100 [ 258.498922][T12302] should_fail_ex+0x414/0x560 [ 258.498955][T12302] should_failslab+0xa8/0x100 [ 258.498989][T12302] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 258.499018][T12302] ? __alloc_skb+0x112/0x2d0 [ 258.499055][T12302] __alloc_skb+0x112/0x2d0 [ 258.499091][T12302] netlink_ack+0x146/0xa50 [ 258.499119][T12302] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 258.499157][T12302] ? __pfx_rcu_preempt_deferred_qs_irqrestore+0x10/0x10 [ 258.499198][T12302] netlink_rcv_skb+0x28c/0x470 [ 258.499226][T12302] ? rcu_is_watching+0x15/0xb0 [ 258.499253][T12302] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 258.499286][T12302] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 258.499329][T12302] ? netlink_deliver_tap+0x2e/0x1b0 [ 258.499368][T12302] netlink_unicast+0x82f/0x9e0 [ 258.499405][T12302] ? __pfx_netlink_unicast+0x10/0x10 [ 258.499435][T12302] ? netlink_sendmsg+0x642/0xb30 [ 258.499464][T12302] ? skb_put+0x11b/0x210 [ 258.499487][T12302] netlink_sendmsg+0x805/0xb30 [ 258.499529][T12302] ? __pfx_netlink_sendmsg+0x10/0x10 [ 258.499564][T12302] ? aa_sock_msg_perm+0xf1/0x1d0 [ 258.499598][T12302] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 258.499620][T12302] ? __pfx_netlink_sendmsg+0x10/0x10 [ 258.499653][T12302] __sock_sendmsg+0x219/0x270 [ 258.499684][T12302] ____sys_sendmsg+0x505/0x830 [ 258.499711][T12302] ? __pfx_____sys_sendmsg+0x10/0x10 [ 258.499741][T12302] ? import_iovec+0x74/0xa0 [ 258.499767][T12302] ___sys_sendmsg+0x21f/0x2a0 [ 258.499790][T12302] ? __pfx____sys_sendmsg+0x10/0x10 [ 258.499857][T12302] ? __fget_files+0x2a/0x420 [ 258.499888][T12302] ? __fget_files+0x3a0/0x420 [ 258.499932][T12302] __x64_sys_sendmsg+0x19b/0x260 [ 258.499958][T12302] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 258.499991][T12302] ? __pfx_ksys_write+0x10/0x10 [ 258.500016][T12302] ? rcu_is_watching+0x15/0xb0 [ 258.500043][T12302] ? do_syscall_64+0xbe/0x3b0 [ 258.500078][T12302] do_syscall_64+0xfa/0x3b0 [ 258.500107][T12302] ? lockdep_hardirqs_on+0x9c/0x150 [ 258.500136][T12302] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.500157][T12302] ? clear_bhb_loop+0x60/0xb0 [ 258.500183][T12302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.500203][T12302] RIP: 0033:0x7fec2bb8ebe9 [ 258.500223][T12302] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 258.500241][T12302] RSP: 002b:00007fec2c9ae038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 258.500270][T12302] RAX: ffffffffffffffda RBX: 00007fec2bdb5fa0 RCX: 00007fec2bb8ebe9 [ 258.500286][T12302] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 258.500298][T12302] RBP: 00007fec2c9ae090 R08: 0000000000000000 R09: 0000000000000000 [ 258.500311][T12302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 258.500323][T12302] R13: 00007fec2bdb6038 R14: 00007fec2bdb5fa0 R15: 00007ffc1919dc78 [ 258.500357][T12302] [ 258.875296][T12284] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 259.515662][T12340] IPVS: set_ctl: invalid protocol: 136 127.0.0.1:20003 [ 259.523521][T12342] __nla_validate_parse: 11 callbacks suppressed [ 259.523542][T12342] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1699'. [ 259.543356][T12342] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1699'. [ 259.568516][T12340] IPVS: set_ctl: invalid protocol: 4 172.20.20.170:20003 [ 259.736563][T12345] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1700'. [ 259.934390][ T55] block nbd0: Possible stuck request ffff888025277000: control (read@0,4096B). Runtime 150 seconds [ 260.372463][T12380] netlink: 'syz.2.1712': attribute type 10 has an invalid length. [ 260.402167][T12390] netlink: 'syz.4.1713': attribute type 1 has an invalid length. [ 260.424187][T12390] netlink: 236 bytes leftover after parsing attributes in process `syz.4.1713'. [ 260.460982][T12392] netlink: 'syz.4.1713': attribute type 1 has an invalid length. [ 260.489187][T12392] netlink: 236 bytes leftover after parsing attributes in process `syz.4.1713'. [ 260.652610][T12398] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1717'. [ 260.654475][T12396] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 260.735920][T12404] netlink: 'syz.3.1716': attribute type 21 has an invalid length. [ 260.750194][T12404] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1716'. [ 260.854361][T12409] FAULT_INJECTION: forcing a failure. [ 260.854361][T12409] name failslab, interval 1, probability 0, space 0, times 0 [ 260.913600][T12409] CPU: 0 UID: 0 PID: 12409 Comm: syz.0.1718 Not tainted syzkaller #0 PREEMPT(full) [ 260.913631][T12409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 260.913653][T12409] Call Trace: [ 260.913662][T12409] [ 260.913671][T12409] dump_stack_lvl+0x189/0x250 [ 260.913703][T12409] ? __pfx____ratelimit+0x10/0x10 [ 260.913734][T12409] ? __pfx_dump_stack_lvl+0x10/0x10 [ 260.913760][T12409] ? __pfx__printk+0x10/0x10 [ 260.913787][T12409] ? netlink_unicast+0x82f/0x9e0 [ 260.913816][T12409] ? ___sys_sendmsg+0x21f/0x2a0 [ 260.913836][T12409] ? do_syscall_64+0xfa/0x3b0 [ 260.913879][T12409] should_fail_ex+0x414/0x560 [ 260.913913][T12409] should_failslab+0xa8/0x100 [ 260.913947][T12409] kmem_cache_alloc_noprof+0x73/0x3c0 [ 260.913976][T12409] ? skb_clone+0x212/0x3a0 [ 260.914004][T12409] skb_clone+0x212/0x3a0 [ 260.914032][T12409] __netlink_deliver_tap+0x404/0x850 [ 260.914078][T12409] ? netlink_deliver_tap+0x2e/0x1b0 [ 260.914111][T12409] netlink_deliver_tap+0x19c/0x1b0 [ 260.914144][T12409] netlink_sendskb+0x68/0x140 [ 260.914175][T12409] netlink_unicast+0x397/0x9e0 [ 260.914200][T12409] ? __asan_memcpy+0x40/0x70 [ 260.914234][T12409] ? __pfx_netlink_unicast+0x10/0x10 [ 260.914270][T12409] netlink_rcv_skb+0x28c/0x470 [ 260.914302][T12409] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 260.914337][T12409] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 260.914380][T12409] ? netlink_deliver_tap+0x2e/0x1b0 [ 260.914426][T12409] netlink_unicast+0x82f/0x9e0 [ 260.914463][T12409] ? __pfx_netlink_unicast+0x10/0x10 [ 260.914492][T12409] ? netlink_sendmsg+0x642/0xb30 [ 260.914519][T12409] ? skb_put+0x11b/0x210 [ 260.914540][T12409] netlink_sendmsg+0x805/0xb30 [ 260.914582][T12409] ? __pfx_netlink_sendmsg+0x10/0x10 [ 260.914617][T12409] ? aa_sock_msg_perm+0xf1/0x1d0 [ 260.914661][T12409] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 260.914684][T12409] ? __pfx_netlink_sendmsg+0x10/0x10 [ 260.914716][T12409] __sock_sendmsg+0x219/0x270 [ 260.914748][T12409] ____sys_sendmsg+0x505/0x830 [ 260.914776][T12409] ? __pfx_____sys_sendmsg+0x10/0x10 [ 260.914808][T12409] ? import_iovec+0x74/0xa0 [ 260.914836][T12409] ___sys_sendmsg+0x21f/0x2a0 [ 260.914862][T12409] ? __pfx____sys_sendmsg+0x10/0x10 [ 260.914922][T12409] ? __fget_files+0x2a/0x420 [ 260.914955][T12409] ? __fget_files+0x3a0/0x420 [ 260.915001][T12409] __x64_sys_sendmsg+0x19b/0x260 [ 260.915026][T12409] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 260.915060][T12409] ? __pfx_ksys_write+0x10/0x10 [ 260.915086][T12409] ? rcu_is_watching+0x15/0xb0 [ 260.915113][T12409] ? do_syscall_64+0xbe/0x3b0 [ 260.915148][T12409] do_syscall_64+0xfa/0x3b0 [ 260.915177][T12409] ? lockdep_hardirqs_on+0x9c/0x150 [ 260.915206][T12409] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.915227][T12409] ? clear_bhb_loop+0x60/0xb0 [ 260.915253][T12409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.915274][T12409] RIP: 0033:0x7f521958ebe9 [ 260.915294][T12409] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 260.915311][T12409] RSP: 002b:00007f521a4c9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 260.915334][T12409] RAX: ffffffffffffffda RBX: 00007f52197b5fa0 RCX: 00007f521958ebe9 [ 260.915349][T12409] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 260.915362][T12409] RBP: 00007f521a4c9090 R08: 0000000000000000 R09: 0000000000000000 [ 260.915375][T12409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 260.915387][T12409] R13: 00007f52197b6038 R14: 00007f52197b5fa0 R15: 00007ffd342572c8 [ 260.915422][T12409] [ 261.299893][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.390839][T12414] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1716'. [ 261.458451][T12424] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1721'. [ 261.458616][T12425] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1721'. [ 261.477905][T12424] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 261.485759][T12424] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 261.498781][T12424] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 261.506927][T12424] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 261.849667][T12441] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 262.489964][T12477] FAULT_INJECTION: forcing a failure. [ 262.489964][T12477] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 262.504328][T12477] CPU: 0 UID: 0 PID: 12477 Comm: syz.3.1738 Not tainted syzkaller #0 PREEMPT(full) [ 262.504358][T12477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 262.504372][T12477] Call Trace: [ 262.504380][T12477] [ 262.504390][T12477] dump_stack_lvl+0x189/0x250 [ 262.504422][T12477] ? __pfx____ratelimit+0x10/0x10 [ 262.504462][T12477] ? __pfx_dump_stack_lvl+0x10/0x10 [ 262.504488][T12477] ? __pfx__printk+0x10/0x10 [ 262.504533][T12477] should_fail_ex+0x414/0x560 [ 262.504568][T12477] _copy_to_user+0x31/0xb0 [ 262.504595][T12477] simple_read_from_buffer+0xe1/0x170 [ 262.504634][T12477] proc_fail_nth_read+0x1b3/0x220 [ 262.504664][T12477] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 262.504693][T12477] ? rw_verify_area+0x2a6/0x4d0 [ 262.504720][T12477] ? __lock_acquire+0xab9/0xd20 [ 262.504750][T12477] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 262.504776][T12477] vfs_read+0x200/0xa30 [ 262.504803][T12477] ? fdget_pos+0x247/0x320 [ 262.504828][T12477] ? __pfx___mutex_lock+0x10/0x10 [ 262.504860][T12477] ? __pfx_vfs_read+0x10/0x10 [ 262.504890][T12477] ? __fget_files+0x2a/0x420 [ 262.504928][T12477] ? __fget_files+0x3a0/0x420 [ 262.504959][T12477] ? __fget_files+0x2a/0x420 [ 262.505003][T12477] ksys_read+0x145/0x250 [ 262.505035][T12477] ? __pfx_ksys_read+0x10/0x10 [ 262.505060][T12477] ? rcu_is_watching+0x15/0xb0 [ 262.505088][T12477] ? do_syscall_64+0xbe/0x3b0 [ 262.505124][T12477] do_syscall_64+0xfa/0x3b0 [ 262.505153][T12477] ? lockdep_hardirqs_on+0x9c/0x150 [ 262.505183][T12477] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.505204][T12477] ? clear_bhb_loop+0x60/0xb0 [ 262.505231][T12477] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.505252][T12477] RIP: 0033:0x7fec2bb8d5fc [ 262.505272][T12477] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 262.505291][T12477] RSP: 002b:00007fec2c9ae030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 262.505314][T12477] RAX: ffffffffffffffda RBX: 00007fec2bdb5fa0 RCX: 00007fec2bb8d5fc [ 262.505330][T12477] RDX: 000000000000000f RSI: 00007fec2c9ae0a0 RDI: 0000000000000006 [ 262.505344][T12477] RBP: 00007fec2c9ae090 R08: 0000000000000000 R09: 0000000000000000 [ 262.505357][T12477] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 262.505369][T12477] R13: 00007fec2bdb6038 R14: 00007fec2bdb5fa0 R15: 00007ffc1919dc78 [ 262.505404][T12477] [ 263.037098][T12486] tipc: Enabled bearer , priority 0 [ 263.068312][T12486] syzkaller0: entered promiscuous mode [ 263.093889][T12486] syzkaller0: entered allmulticast mode [ 263.139925][T12486] tipc: Resetting bearer [ 263.184913][T12495] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 263.203917][T12485] tipc: Resetting bearer [ 263.268698][T12485] tipc: Disabling bearer [ 263.294112][T12498] netlink: 'syz.4.1746': attribute type 10 has an invalid length. [ 263.304465][T12498] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 263.530952][T12513] netlink: 'syz.3.1749': attribute type 10 has an invalid length. [ 264.031727][T12535] netlink: 'syz.0.1755': attribute type 20 has an invalid length. [ 264.069611][ T37] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 264.078896][T12535] netlink: 'syz.0.1755': attribute type 20 has an invalid length. [ 264.089275][ T37] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 264.125367][ T37] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 264.149451][ T37] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 264.303776][T12544] bond0: entered promiscuous mode [ 264.319201][T12544] bond0: entered allmulticast mode [ 264.334072][T12544] 8021q: adding VLAN 0 to HW filter on device bond0 [ 264.608688][T12564] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 264.789407][T12574] netlink: 'syz.3.1764': attribute type 21 has an invalid length. [ 264.840515][T12574] __nla_validate_parse: 12 callbacks suppressed [ 264.840535][T12574] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1764'. [ 264.876435][T12578] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1764'. [ 265.226339][T12588] pim6reg1: entered promiscuous mode [ 265.231711][T12588] pim6reg1: entered allmulticast mode [ 265.318760][T12592] sctp: [Deprecated]: syz.3.1772 (pid 12592) Use of struct sctp_assoc_value in delayed_ack socket option. [ 265.318760][T12592] Use struct sctp_sack_info instead [ 265.359603][T12592] sctp: [Deprecated]: syz.3.1772 (pid 12592) Use of struct sctp_assoc_value in delayed_ack socket option. [ 265.359603][T12592] Use struct sctp_sack_info instead [ 265.664248][T12608] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 265.892893][T12622] netlink: 220 bytes leftover after parsing attributes in process `syz.2.1778'. [ 265.925938][T12625] netlink: 'syz.1.1777': attribute type 1 has an invalid length. [ 266.147059][T12631] bond9: (slave bridge7): making interface the new active one [ 266.166605][T12631] bond9: (slave bridge7): Enslaving as an active interface with an up link [ 266.377181][T12644] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1783'. [ 266.438722][T12648] netlink: 71 bytes leftover after parsing attributes in process `syz.3.1786'. [ 266.441199][T12644] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1783'. [ 266.459602][T12643] !: renamed from dummy0 [ 266.476425][T12645] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1783'. [ 266.543867][T12645] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1783'. [ 267.915871][T12702] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1802'. [ 267.951399][T12702] openvswitch: netlink: Flow actions attr not present in new flow. [ 267.973798][T12709] "syz.4.1806" (12709) uses obsolete ecb(arc4) skcipher [ 268.016621][T12702] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1802'. [ 268.702800][T12741] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 268.744924][T12741] bridge3: entered promiscuous mode [ 268.805106][T12748] netlink: 'syz.3.1816': attribute type 32 has an invalid length. [ 268.827270][T12748] (unnamed net_device) (uninitialized): option coupled_control: invalid value (52) [ 270.091198][T12798] __nla_validate_parse: 12 callbacks suppressed [ 270.091222][T12798] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.1829'. [ 270.830304][T12812] netlink: 'syz.3.1835': attribute type 12 has an invalid length. [ 270.849588][T12812] netlink: 'syz.3.1835': attribute type 29 has an invalid length. [ 270.869402][T12812] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1835'. [ 270.920240][T12812] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1835'. [ 271.066752][T12825] netlink: 'syz.2.1838': attribute type 3 has an invalid length. [ 271.152762][T12827] netlink: 'syz.3.1839': attribute type 1 has an invalid length. [ 271.173968][T12827] netlink: 228 bytes leftover after parsing attributes in process `syz.3.1839'. [ 271.222346][T12836] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1842'. [ 271.283108][T12836] IPVS: set_ctl: invalid protocol: 60 127.0.0.1:20003 [ 271.304697][T12835] delete_channel: no stack [ 271.812091][T12865] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1850'. [ 271.848015][T12865] sctp: [Deprecated]: syz.3.1850 (pid 12865) Use of struct sctp_assoc_value in delayed_ack socket option. [ 271.848015][T12865] Use struct sctp_sack_info instead [ 271.955311][T12879] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1853'. [ 271.996168][T12879] netem: invalid attributes len -24 [ 272.014756][T12879] netem: change failed [ 272.540070][T12905] sctp: [Deprecated]: syz.4.1860 (pid 12905) Use of int in maxseg socket option. [ 272.540070][T12905] Use struct sctp_assoc_value instead [ 272.741707][T12916] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1865'. [ 272.862823][T12923] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1866'. [ 272.877314][T12923] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1866'. [ 273.480833][T12957] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 273.501994][T12952] netlink: 'syz.1.1873': attribute type 5 has an invalid length. [ 273.537558][T12958] tipc: Enabled bearer , priority 0 [ 273.584494][T12952] geneve2: entered promiscuous mode [ 273.622538][T12952] geneve2: entered allmulticast mode [ 273.652631][T12958] syzkaller0: entered promiscuous mode [ 273.663584][T12958] syzkaller0: entered allmulticast mode [ 273.689789][ T1140] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 273.713596][ T1140] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 273.777398][ T1140] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 273.793197][ T1140] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 273.824439][T12958] tipc: Resetting bearer [ 273.888939][T12956] tipc: Resetting bearer [ 273.958420][T12956] tipc: Disabling bearer [ 274.101084][T12978] netlink: 'syz.1.1881': attribute type 1 has an invalid length. [ 274.288931][T12979] bond10: (slave bridge9): making interface the new active one [ 274.318228][T12979] bond10: (slave bridge9): Enslaving as an active interface with an up link [ 275.025530][T13022] bridge_slave_1: left allmulticast mode [ 275.031861][T13022] bridge_slave_1: left promiscuous mode [ 275.041383][T13022] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.053200][T13022] bridge_slave_0: left allmulticast mode [ 275.061516][T13022] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.555642][T13051] __nla_validate_parse: 11 callbacks suppressed [ 275.555666][T13051] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1899'. [ 275.858274][T13070] netlink: 'syz.3.1904': attribute type 1 has an invalid length. [ 275.866776][T13070] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1904'. [ 275.883370][T13023] mpoa:mpoad_close: () going down [ 276.297815][T13087] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 276.406150][T13090] tc_dump_action: action bad kind [ 276.459445][T13092] netlink: 'syz.3.1911': attribute type 2 has an invalid length. [ 276.479969][T11782] IPVS: starting estimator thread 0... [ 276.529405][T13095] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1909'. [ 276.547815][T13095] nbd: nbd0 already in use [ 276.603983][T13094] IPVS: using max 28 ests per chain, 67200 per kthread [ 276.689762][T13102] netlink: 'syz.0.1913': attribute type 3 has an invalid length. [ 276.770263][T13110] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1915'. [ 276.790145][T13110] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1915'. [ 276.976753][T13123] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1920'. [ 277.292886][T13138] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1925'. [ 277.422125][T13142] erspan0: entered promiscuous mode [ 277.428472][T13142] vlan2: entered promiscuous mode [ 277.520537][T13145] netlink: ct family unspecified [ 277.525998][T13145] openvswitch: netlink: Actions may not be safe on all matching packets [ 277.924502][T13166] netlink: 'syz.0.1935': attribute type 12 has an invalid length. [ 277.951667][T13166] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1935'. [ 277.979737][T13166] netlink: 'syz.0.1935': attribute type 12 has an invalid length. [ 278.023277][T13166] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1935'. [ 278.287135][T13180] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1940'. [ 278.529096][T13193] tipc: Enabled bearer , priority 0 [ 278.555726][T13193] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode [ 278.586271][T13193] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode [ 278.703037][T13197] bond0: (slave wlan1): Releasing backup interface [ 279.216183][T13224] nftables ruleset with unbound chain [ 279.480591][T13242] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144 [ 280.468390][T13290] netlink: 'syz.2.1977': attribute type 10 has an invalid length. [ 280.487245][T13290] bond0: (slave wlan1): Opening slave failed [ 280.780244][T13305] __nla_validate_parse: 13 callbacks suppressed [ 280.780266][T13305] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1983'. [ 281.145750][T13328] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.1989'. [ 281.307357][T13337] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1991'. [ 281.514834][T13353] netlink: 'syz.1.1994': attribute type 1 has an invalid length. [ 281.549356][T13353] netlink: 232 bytes leftover after parsing attributes in process `syz.1.1994'. [ 281.572726][T13353] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1994'. [ 281.873224][T13370] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1996'. [ 282.252642][T13382] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2000'. [ 282.338902][T13389] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2002'. [ 282.351648][T13386] wg1 speed is unknown, defaulting to 1000 [ 282.371613][T13386] hsr0 speed is unknown, defaulting to 1000 [ 282.586329][T13393] geneve2: entered promiscuous mode [ 282.591617][T13393] geneve2: entered allmulticast mode [ 282.608517][ T147] netdevsim netdevsim3 : set [1, 1] type 2 family 0 port 19999 - 0 [ 282.637094][ T147] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 282.655594][ T147] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 283.465619][T13414] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2010'. [ 284.374452][ T147] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 284.816334][T13439] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2017'. [ 285.099902][T13453] netlink: 'syz.1.2021': attribute type 6 has an invalid length. [ 285.134506][T13455] netlink: 'syz.1.2021': attribute type 6 has an invalid length. [ 285.450130][T13472] netlink: 'syz.0.2030': attribute type 4 has an invalid length. [ 285.470373][T13472] netlink: 'syz.0.2030': attribute type 4 has an invalid length. [ 285.655026][T13483] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 285.901259][T13495] __nla_validate_parse: 2 callbacks suppressed [ 285.901279][T13495] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2038'. [ 286.290507][T13517] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2042'. [ 286.342058][T13510] team0: Device vti1 is of different type [ 286.449954][T13521] IPv6: NLM_F_CREATE should be specified when creating new route [ 286.458994][T13521] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 286.466402][T13521] IPv6: NLM_F_CREATE should be set when creating new route [ 286.473731][T13521] IPv6: NLM_F_CREATE should be set when creating new route [ 286.486390][T13521] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 286.703897][T13535] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2048'. [ 287.281827][T13575] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2055'. [ 287.545184][T13591] netlink: 'syz.4.2061': attribute type 5 has an invalid length. [ 287.554012][T13591] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2061'. [ 287.730941][T13601] IPVS: set_ctl: invalid protocol: 58 224.0.0.1:20003 [ 287.850356][T13603] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2066'. [ 287.867534][T13609] netlink: 64985 bytes leftover after parsing attributes in process `syz.3.2067'. [ 288.035461][T13617] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2069'. [ 288.104229][T13616] delete_channel: no stack [ 288.288421][T13630] netlink: 'syz.0.2076': attribute type 4 has an invalid length. [ 288.599668][T13646] netlink: 240 bytes leftover after parsing attributes in process `syz.4.2081'. [ 288.623807][T13646] IPVS: Unknown mcast interface: vcan0 [ 288.665869][T13648] netlink: 240 bytes leftover after parsing attributes in process `syz.4.2081'. [ 288.808839][T13653] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 288.966106][T13660] netlink: 'syz.3.2086': attribute type 1 has an invalid length. [ 289.009967][T13660] netlink: 'syz.3.2086': attribute type 1 has an invalid length. [ 289.018863][T13664] netlink: 'syz.4.2088': attribute type 1 has an invalid length. [ 289.030659][T13660] netlink: 'syz.3.2086': attribute type 2 has an invalid length. [ 289.053179][T13664] NCSI netlink: No device for ifindex 0 [ 289.691789][T13695] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 289.877726][T13706] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 290.004274][ T55] block nbd0: Possible stuck request ffff888025277000: control (read@0,4096B). Runtime 180 seconds [ 291.657892][T13790] __nla_validate_parse: 10 callbacks suppressed [ 291.657916][T13790] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2128'. [ 291.951352][T13805] netlink: 'syz.3.2134': attribute type 27 has an invalid length. [ 291.961809][T13806] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2133'. [ 292.250533][T13822] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2138'. [ 292.432391][T13835] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2141'. [ 292.462648][T13835] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2141'. [ 292.553201][T13823] syzkaller0: entered promiscuous mode [ 292.584664][T13823] syzkaller0: entered allmulticast mode [ 292.616733][T13846] netlink: 216 bytes leftover after parsing attributes in process `syz.1.2143'. [ 295.577127][T13879] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 295.617108][T13881] dvmrp1: entered allmulticast mode [ 295.842253][T13894] netlink: 'syz.0.2157': attribute type 1 has an invalid length. [ 295.936930][T13894] 8021q: adding VLAN 0 to HW filter on device bond4 [ 295.939698][T13904] netlink: 'syz.2.2158': attribute type 2 has an invalid length. [ 295.962431][T13900] bond4: (slave geneve2): making interface the new active one [ 295.976629][T13900] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 295.996929][ T1140] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.011204][T13904] netlink: 'syz.2.2158': attribute type 8 has an invalid length. [ 296.071599][ T1140] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.095933][T13908] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 296.106214][T13904] netlink: 1148 bytes leftover after parsing attributes in process `syz.2.2158'. [ 296.111159][ T1140] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.142660][ T1140] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.289158][T13912] wg1 speed is unknown, defaulting to 1000 [ 296.306579][T13912] hsr0 speed is unknown, defaulting to 1000 [ 296.782512][T13930] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2167'. [ 296.813233][T13933] netlink: 'syz.3.2167': attribute type 11 has an invalid length. [ 296.884795][T13939] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2167'. [ 296.987019][T13946] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2171'. [ 297.408515][T13965] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2177'. [ 297.427111][T13965] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2177'. [ 297.507833][T13970] pimreg: entered allmulticast mode [ 297.641436][T13978] netlink: 'syz.4.2182': attribute type 21 has an invalid length. [ 297.652830][T13978] IPv6: NLM_F_CREATE should be specified when creating new route [ 297.674355][T13978] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 297.684362][T13978] IPv6: NLM_F_CREATE should be set when creating new route [ 297.694500][T13978] IPv6: NLM_F_CREATE should be set when creating new route [ 297.702496][T13978] IPv6: NLM_F_CREATE should be set when creating new route [ 297.721180][T13980] (unnamed net_device) (uninitialized): ARP target 1.0.0.0 is already present [ 297.733847][T13980] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (1) [ 297.808062][T13983] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 297.994722][T13989] netlink: 'syz.0.2186': attribute type 1 has an invalid length. [ 298.141498][T13994] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 298.198897][T13998] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2189'. [ 298.209857][T13998] nbd: nbd0 already in use [ 298.221251][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888059502000: rx timeout, send abort [ 298.233259][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff888059502000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 299.648880][T14043] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2201'. [ 300.965729][T14009] vlan2: entered allmulticast mode [ 300.970924][T14009] mac80211_hwsim hwsim3 wlan0: entered allmulticast mode [ 300.980046][T14030] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2198'. [ 300.992707][T14043] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-tlb(5) [ 301.004827][T14030] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2198'. [ 301.374003][T14061] tc_dump_action: action bad kind [ 301.580495][ T147] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20002 - 0 [ 301.600735][ T147] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20002 - 0 [ 301.612251][T14075] netlink: 'syz.4.2214': attribute type 24 has an invalid length. [ 301.632254][ T147] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20002 - 0 [ 301.658738][ T147] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20002 - 0 [ 301.678880][T14079] netlink: 'syz.4.2214': attribute type 24 has an invalid length. [ 301.784330][T14082] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2216'. [ 301.845976][T14087] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2216'. [ 301.886974][T14094] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2218'. [ 301.985114][T14098] vxlan0: entered promiscuous mode [ 301.990494][T14098] vxlan0: entered allmulticast mode [ 302.323207][T14117] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2224'. [ 302.422203][T14125] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 302.444954][T14125] netlink: 'syz.0.2227': attribute type 1 has an invalid length. [ 302.642421][T14134] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2231'. [ 302.740585][T14144] tipc: Enabling of bearer rejected, failed to enable media [ 302.926307][T14152] netlink: 'syz.1.2236': attribute type 6 has an invalid length. [ 303.176186][T14164] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2239'. [ 303.189323][T14164] netlink: 48643 bytes leftover after parsing attributes in process `syz.4.2239'. [ 303.250623][T14170] geneve3: entered promiscuous mode [ 303.297454][T14170] geneve3: entered allmulticast mode [ 303.328573][ T147] netdevsim netdevsim1 eth0: set [1, 2] type 2 family 0 port 19999 - 0 [ 303.361195][ T147] netdevsim netdevsim1 eth1: set [1, 2] type 2 family 0 port 19999 - 0 [ 303.417056][T14166] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.427811][T14166] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 303.447544][ T147] netdevsim netdevsim1 eth2: set [1, 2] type 2 family 0 port 19999 - 0 [ 303.523259][T14174] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2243'. [ 303.549537][T14174] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2243'. [ 303.685154][T14191] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2247'. [ 303.789103][T14194] netlink: 'syz.4.2249': attribute type 12 has an invalid length. [ 303.821953][T14194] netlink: 'syz.4.2249': attribute type 29 has an invalid length. [ 303.947181][T14208] netem: incorrect gi model size [ 303.952542][T14208] netem: change failed [ 304.244161][T14226] netlink: 'syz.2.2257': attribute type 7 has an invalid length. [ 304.405494][T14233] netlink: 'syz.0.2259': attribute type 1 has an invalid length. [ 304.413449][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88805a91c800: rx timeout, send abort [ 304.422306][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff88805a91c800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 304.463671][T14233] netlink: 'syz.0.2259': attribute type 1 has an invalid length. [ 304.559189][T14241] mac80211_hwsim hwsim11 : renamed from wlan1 [ 304.598619][T14237] netlink: 'syz.2.2261': attribute type 11 has an invalid length. [ 304.958704][T14166] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.004120][T14166] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 305.036148][T14166] netdevsim netdevsim1 eth2 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0 [ 305.128381][T14166] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.163262][T14166] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 305.184973][T14166] netdevsim netdevsim1 eth1 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0 [ 305.248238][T14273] netlink: 'syz.3.2269': attribute type 5 has an invalid length. [ 305.325994][T14278] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 305.402165][T14166] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.439948][T14166] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 305.451893][T14166] netdevsim netdevsim1 eth0 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0 [ 305.614201][ T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 305.627028][ T13] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 305.636142][ T13] netdevsim netdevsim1 eth0: set [1, 2] type 2 family 0 port 6081 - 0 [ 305.657284][ T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 305.670486][ T13] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 305.678909][ T13] netdevsim netdevsim1 eth1: set [1, 2] type 2 family 0 port 6081 - 0 [ 305.732157][ T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 305.741459][ T12] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 305.751883][ T12] netdevsim netdevsim1 eth2: set [1, 2] type 2 family 0 port 6081 - 0 [ 305.776785][ T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 305.792378][ T12] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 305.806444][ T12] netdevsim netdevsim1 eth3: set [1, 2] type 2 family 0 port 6081 - 0 [ 306.328857][T14321] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 306.631660][T14340] validate_nla: 3 callbacks suppressed [ 306.631682][T14340] netlink: 'syz.1.2289': attribute type 3 has an invalid length. [ 306.884371][T14352] __nla_validate_parse: 15 callbacks suppressed [ 306.884395][T14352] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2292'. [ 306.916265][T14352] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2292'. [ 307.101633][T14365] netlink: 'syz.4.2295': attribute type 21 has an invalid length. [ 307.147172][T14365] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2295'. [ 307.201192][T14365] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2295'. [ 307.570155][T14385] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 307.658794][T14390] netlink: 'syz.0.2305': attribute type 4 has an invalid length. [ 307.692646][T14390] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2305'. [ 307.787774][T14396] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2308'. [ 307.822916][T14396] netlink: 'syz.1.2308': attribute type 33 has an invalid length. [ 307.972623][T14398] netlink: 236 bytes leftover after parsing attributes in process `syz.2.2309'. [ 308.182681][T14421] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 308.217733][T14421] bond0: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 308.249702][T14421] bond0: (slave ipvlan0): Setting fail_over_mac to active for active-backup mode [ 308.292730][T14421] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 308.424928][T14422] netlink: 14560 bytes leftover after parsing attributes in process `syz.3.2315'. [ 308.609229][T14434] Unsupported ieee802154 address type: 0 [ 309.042385][T14455] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 309.552019][T14484] netlink: 'syz.3.2333': attribute type 10 has an invalid length. [ 309.571489][T14484] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2333'. [ 309.658980][T14484] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 309.768441][T14492] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2337'. [ 312.479946][T14557] tap0: tun_chr_ioctl cmd 2148553947 [ 312.799370][T14579] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 312.826977][T14580] __nla_validate_parse: 3 callbacks suppressed [ 312.827003][T14580] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2363'. [ 312.907895][T14580] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2363'. [ 312.952103][T14580] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2363'. [ 313.135022][T14601] netlink: 'syz.1.2366': attribute type 8 has an invalid length. [ 313.148257][T14601] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2366'. [ 313.361074][T14607] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2369'. [ 313.546064][T14620] wireguard: wg1: Could not create IPv4 socket [ 313.735281][T14628] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2375'. [ 313.992764][T14633] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2377'. [ 314.321163][T14653] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2383'. [ 314.714739][T14673] bond0: (slave 1!): Releasing backup interface [ 314.767775][T14673] bond0: (slave bond_slave_1): Releasing backup interface [ 314.798973][T14673] team0: Port device team_slave_0 removed [ 314.829493][T14673] team0: Port device team_slave_1 removed [ 314.873701][T14673] bond2: (slave bond3): Releasing backup interface [ 314.908800][T14675] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2387'. [ 314.918474][T14674] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2387'. [ 315.042132][T14677] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check. [ 315.111883][T14689] 8021q: VLANs not supported on ip6_vti0 [ 315.412513][T14707] bridge0: port 1(veth0_to_bridge) entered blocking state [ 315.458056][T14707] bridge0: port 1(veth0_to_bridge) entered disabled state [ 315.481242][T14707] veth0_to_bridge: entered allmulticast mode [ 315.498136][T14707] veth0_to_bridge: entered promiscuous mode [ 315.506117][T14712] 8021q: VLANs not supported on vxcan1 [ 315.573196][T14716] openvswitch: netlink: Duplicate or invalid key (type 0). [ 315.596102][T14716] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 316.485637][T14764] 0{X: renamed from gretap0 [ 316.519081][T14764] 0{X: entered allmulticast mode [ 316.559446][T14764] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 316.829405][T14782] netlink: 'syz.0.2416': attribute type 11 has an invalid length. [ 316.961359][T14788] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.950002][T14837] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 318.211843][T14850] __nla_validate_parse: 15 callbacks suppressed [ 318.211867][T14850] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2440'. [ 318.555710][T14872] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2443'. [ 318.953055][T14895] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2449'. [ 319.042420][T14898] netlink: 'syz.4.2450': attribute type 1 has an invalid length. [ 319.049833][T14903] xt_policy: too many policy elements [ 319.057442][T14898] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2450'. [ 319.115592][T14898] nbd: couldn't find device at index 1048576 [ 319.179780][T14907] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2452'. [ 319.232460][T14910] netlink: 'syz.2.2452': attribute type 5 has an invalid length. [ 319.260180][T14913] netlink: 'syz.0.2453': attribute type 1 has an invalid length. [ 319.268021][T14912] syzkaller0: entered allmulticast mode [ 319.292843][T14913] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 319.391961][T14921] dvmrp1: left allmulticast mode [ 319.946492][T14947] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2459'. [ 319.968823][T14947] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2459'. [ 320.060587][T14950] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2462'. [ 320.083725][ T55] block nbd0: Possible stuck request ffff888025277000: control (read@0,4096B). Runtime 210 seconds [ 320.228113][T14957] sysfs: cannot create duplicate filename '/class/ieee80211/!寿$ULvyآDUDw}z' [ 320.240518][T14957] CPU: 0 UID: 0 PID: 14957 Comm: syz.3.2464 Not tainted syzkaller #0 PREEMPT(full) [ 320.240547][T14957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 320.240561][T14957] Call Trace: [ 320.240570][T14957] [ 320.240581][T14957] dump_stack_lvl+0x189/0x250 [ 320.240619][T14957] ? __pfx_dump_stack_lvl+0x10/0x10 [ 320.240647][T14957] ? __pfx__printk+0x10/0x10 [ 320.240685][T14957] ? kernfs_path_from_node+0x2f/0x290 [ 320.240711][T14957] ? kernfs_path_from_node+0x250/0x290 [ 320.240734][T14957] ? kernfs_path_from_node+0x2f/0x290 [ 320.240765][T14957] sysfs_warn_dup+0x8e/0xa0 [ 320.240788][T14957] sysfs_do_create_link_sd+0xc0/0x110 [ 320.240817][T14957] device_add_class_symlinks+0x1cf/0x240 [ 320.240844][T14957] device_add+0x475/0xb50 [ 320.240872][T14957] wiphy_register+0x1ba6/0x28d0 [ 320.240921][T14957] ? __pfx_wiphy_register+0x10/0x10 [ 320.240949][T14957] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 320.240980][T14957] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 320.241028][T14957] ieee80211_register_hw+0x3425/0x4080 [ 320.241071][T14957] ? ieee80211_register_hw+0x1471/0x4080 [ 320.241103][T14957] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 320.241132][T14957] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 320.241170][T14957] ? __hrtimer_setup+0x187/0x210 [ 320.241195][T14957] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 320.241230][T14957] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 320.241294][T14957] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 320.241320][T14957] ? trace_kmalloc+0x1f/0xd0 [ 320.241346][T14957] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 320.241377][T14957] ? kstrndup+0xbf/0x160 [ 320.241412][T14957] hwsim_new_radio_nl+0xea4/0x1b10 [ 320.241443][T14957] ? __pfx___nla_validate_parse+0x10/0x10 [ 320.241494][T14957] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 320.241539][T14957] ? __nla_parse+0x40/0x60 [ 320.241577][T14957] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 320.241613][T14957] genl_family_rcv_msg_doit+0x212/0x300 [ 320.241648][T14957] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 320.241691][T14957] ? bpf_lsm_capable+0x9/0x20 [ 320.241719][T14957] ? security_capable+0x7e/0x2e0 [ 320.241761][T14957] genl_rcv_msg+0x60e/0x790 [ 320.241794][T14957] ? __pfx_genl_rcv_msg+0x10/0x10 [ 320.241817][T14957] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 320.241863][T14957] netlink_rcv_skb+0x205/0x470 [ 320.241892][T14957] ? __lock_acquire+0xab9/0xd20 [ 320.241924][T14957] ? __pfx_genl_rcv_msg+0x10/0x10 [ 320.241950][T14957] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 320.242015][T14957] ? down_read+0x1ad/0x2e0 [ 320.242053][T14957] genl_rcv+0x28/0x40 [ 320.242076][T14957] netlink_unicast+0x82f/0x9e0 [ 320.242116][T14957] ? __pfx_netlink_unicast+0x10/0x10 [ 320.242148][T14957] ? netlink_sendmsg+0x642/0xb30 [ 320.242178][T14957] ? skb_put+0x11b/0x210 [ 320.242203][T14957] netlink_sendmsg+0x805/0xb30 [ 320.242249][T14957] ? __pfx_netlink_sendmsg+0x10/0x10 [ 320.242287][T14957] ? aa_sock_msg_perm+0xf1/0x1d0 [ 320.242324][T14957] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 320.242347][T14957] ? __pfx_netlink_sendmsg+0x10/0x10 [ 320.242378][T14957] __sock_sendmsg+0x219/0x270 [ 320.242405][T14957] ____sys_sendmsg+0x505/0x830 [ 320.242431][T14957] ? __pfx_____sys_sendmsg+0x10/0x10 [ 320.242467][T14957] ? import_iovec+0x74/0xa0 [ 320.242499][T14957] ___sys_sendmsg+0x21f/0x2a0 [ 320.242525][T14957] ? __pfx____sys_sendmsg+0x10/0x10 [ 320.242594][T14957] ? __fget_files+0x2a/0x420 [ 320.242627][T14957] ? __fget_files+0x3a0/0x420 [ 320.242673][T14957] __x64_sys_sendmsg+0x19b/0x260 [ 320.242699][T14957] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 320.242733][T14957] ? rcu_is_watching+0x15/0xb0 [ 320.242760][T14957] ? do_syscall_64+0xbe/0x3b0 [ 320.242797][T14957] do_syscall_64+0xfa/0x3b0 [ 320.242829][T14957] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.242850][T14957] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 320.242871][T14957] ? clear_bhb_loop+0x60/0xb0 [ 320.242898][T14957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.242919][T14957] RIP: 0033:0x7fec2bb8ebe9 [ 320.242940][T14957] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 320.242959][T14957] RSP: 002b:00007fec2c9ae038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 320.242982][T14957] RAX: ffffffffffffffda RBX: 00007fec2bdb5fa0 RCX: 00007fec2bb8ebe9 [ 320.243009][T14957] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 320.243022][T14957] RBP: 00007fec2bc11e19 R08: 0000000000000000 R09: 0000000000000000 [ 320.243035][T14957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 320.243048][T14957] R13: 00007fec2bdb6038 R14: 00007fec2bdb5fa0 R15: 00007ffc1919dc78 [ 320.243085][T14957] [ 321.050140][T14976] netlink: 'syz.4.2471': attribute type 2 has an invalid length. [ 321.072542][T14976] netlink: 244 bytes leftover after parsing attributes in process `syz.4.2471'. [ 321.132293][T14979] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2472'. [ 321.405653][T14996] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 321.598281][T15008] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 321.618061][T15005] netlink: 'syz.3.2480': attribute type 1 has an invalid length. [ 322.275291][T15048] netlink: 'syz.3.2493': attribute type 4 has an invalid length. [ 322.643679][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 322.654189][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.062586][T15090] netlink: 'syz.4.2507': attribute type 4 has an invalid length. [ 323.508929][T15115] __nla_validate_parse: 7 callbacks suppressed [ 323.508951][T15115] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2512'. [ 323.534985][T15115] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2512'. [ 324.198771][T15135] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2518'. [ 324.300363][T15139] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.2520'. [ 324.386488][T15144] netlink: 'syz.3.2522': attribute type 28 has an invalid length. [ 324.397355][T15143] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode [ 324.405281][T15144] netlink: 'syz.3.2522': attribute type 3 has an invalid length. [ 324.405307][T15144] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2522'. [ 324.443535][T15143] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode [ 324.591642][T15155] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 324.693075][T15159] netlink: 'syz.0.2527': attribute type 10 has an invalid length. [ 324.703603][T15159] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2527'. [ 324.741450][T15159] dummy0: entered promiscuous mode [ 324.806496][T15159] bridge0: port 2(dummy0) entered blocking state [ 324.813047][T15159] bridge0: port 2(dummy0) entered disabled state [ 324.832099][T15159] dummy0: entered allmulticast mode [ 325.174689][T15188] IPVS: set_ctl: invalid protocol: 43 172.30.0.4:20000 [ 325.216274][T15185] wg1 speed is unknown, defaulting to 1000 [ 325.240967][T15185] hsr0 speed is unknown, defaulting to 1000 [ 325.245383][T15179] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2532'. [ 325.269822][T15179] virtio_net virtio1 eth0: entered promiscuous mode [ 325.284588][T15179] virtio_net virtio1 eth0: entered allmulticast mode [ 325.637250][T15201] netlink: 'syz.0.2535': attribute type 23 has an invalid length. [ 325.651958][T15203] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.2537'. [ 325.816120][T15207] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2539'. [ 326.239740][T15227] wg1 speed is unknown, defaulting to 1000 [ 326.249941][T15227] hsr0 speed is unknown, defaulting to 1000 [ 329.583718][ T5233] udevd[5233]: worker [6097] /devices/virtual/block/nbd0 timeout; kill it [ 329.592467][ T5233] udevd[5233]: seq 11411 '/devices/virtual/block/nbd0' killed [ 350.163959][ T55] block nbd0: Possible stuck request ffff888025277000: control (read@0,4096B). Runtime 240 seconds [ 380.244265][ T55] block nbd0: Possible stuck request ffff888025277000: control (read@0,4096B). Runtime 270 seconds [ 384.087501][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 410.323880][ T55] block nbd0: Possible stuck request ffff888025277000: control (read@0,4096B). Runtime 300 seconds [ 440.403800][ T55] block nbd0: Possible stuck request ffff888025277000: control (read@0,4096B). Runtime 330 seconds [ 445.528651][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 460.884166][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 470.489041][ T55] block nbd0: Possible stuck request ffff888025277000: control (read@0,4096B). Runtime 360 seconds [ 478.163894][ T31] INFO: task udevd:6097 blocked for more than 143 seconds. [ 478.175041][ T31] Not tainted syzkaller #0 [ 478.181259][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 478.194459][ T31] task:udevd state:D stack:21928 pid:6097 tgid:6097 ppid:5233 task_flags:0x400140 flags:0x00004006 [ 478.211687][ T31] Call Trace: [ 478.217815][ T31] [ 478.221219][ T31] __schedule+0x1798/0x4cc0 [ 478.227367][ T31] ? __pfx___schedule+0x10/0x10 [ 478.240277][ T31] ? schedule+0x91/0x360 [ 478.245853][ T31] schedule+0x165/0x360 [ 478.257616][ T31] io_schedule+0x80/0xd0 [ 478.265723][ T31] folio_wait_bit_common+0x6b0/0xb90 [ 478.277404][ T31] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 478.291696][ T31] ? __pfx_wake_page_function+0x10/0x10 [ 478.304363][ T31] ? __filemap_get_folio+0x760/0xaf0 [ 478.318050][ T31] ? do_read_cache_folio+0x4e9/0x590 [ 478.325648][ T31] do_read_cache_folio+0x1aa/0x590 [ 478.338052][ T31] ? __pfx_blkdev_read_folio+0x10/0x10 [ 478.345539][ T31] read_part_sector+0xb6/0x2b0 [ 478.353758][ T31] adfspart_check_POWERTEC+0x8c/0xf30 [ 478.362410][ T31] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 478.374877][ T31] ? __pfx_adfspart_check_POWERTEC+0x10/0x10 [ 478.383906][ T31] bdev_disk_changed+0x75f/0x14b0 [ 478.391755][ T31] ? __pfx_bdev_disk_changed+0x10/0x10 [ 478.399902][ T31] ? wait_on_inode+0xc0/0x230 [ 478.405447][ T31] blkdev_get_whole+0x380/0x510 [ 478.415851][ T31] bdev_open+0x31e/0xd30 [ 478.420896][ T31] blkdev_open+0x3a8/0x510 [ 478.427510][ T31] ? __pfx_blkdev_open+0x10/0x10 [ 478.439543][ T31] do_dentry_open+0x950/0x13f0 [ 478.445280][ T31] vfs_open+0x3b/0x340 [ 478.457943][ T31] ? path_openat+0x2ecd/0x3830 [ 478.465514][ T31] path_openat+0x2ee5/0x3830 [ 478.477671][ T31] ? arch_stack_walk+0xfc/0x150 [ 478.486027][ T31] ? stack_depot_save_flags+0x40/0x860 [ 478.494164][ T31] ? __pfx_path_openat+0x10/0x10 [ 478.501711][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.513951][ T31] do_filp_open+0x1fa/0x410 [ 478.521833][ T31] ? __lock_acquire+0xab9/0xd20 [ 478.528275][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 478.535167][ T31] ? _raw_spin_unlock+0x28/0x50 [ 478.542345][ T31] ? alloc_fd+0x64c/0x6c0 [ 478.548540][ T31] do_sys_openat2+0x121/0x1c0 [ 478.558374][ T31] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 478.566571][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 478.573660][ T31] ? rcu_is_watching+0x15/0xb0 [ 478.579642][ T31] __x64_sys_openat+0x138/0x170 [ 478.587771][ T31] do_syscall_64+0xfa/0x3b0 [ 478.594576][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.602211][ T31] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 478.608990][ T31] ? clear_bhb_loop+0x60/0xb0 [ 478.614453][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.620533][ T31] RIP: 0033:0x7f07fa1c8407 [ 478.625338][ T31] RSP: 002b:00007ffcb5911220 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 478.634469][ T31] RAX: ffffffffffffffda RBX: 00007f07f9b9b880 RCX: 00007f07fa1c8407 [ 478.642570][ T31] RDX: 00000000000a0800 RSI: 0000557167af6570 RDI: ffffffffffffff9c [ 478.651251][ T31] RBP: 0000557167af5910 R08: 0000000000000000 R09: 0000000000000000 [ 478.659972][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000557167b15f60 [ 478.668792][ T31] R13: 0000557167b03190 R14: 0000000000000000 R15: 0000557167b15f60 [ 478.677227][ T31] [ 478.680342][ T31] [ 478.680342][ T31] Showing all locks held in the system: [ 478.688528][ T31] 1 lock held by khungtaskd/31: [ 478.693604][ T31] #0: ffffffff8e139ea0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 478.703977][ T31] 2 locks held by getty/5623: [ 478.708768][ T31] #0: ffff8880304240a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 478.719109][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 478.730573][ T31] 1 lock held by udevd/6097: [ 478.735829][ T31] #0: ffff888142b90358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 478.745429][ T31] [ 478.747975][ T31] ============================================= [ 478.747975][ T31] [ 478.757166][ T31] NMI backtrace for cpu 0 [ 478.757193][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 478.757215][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 478.757229][ T31] Call Trace: [ 478.757237][ T31] [ 478.757246][ T31] dump_stack_lvl+0x189/0x250 [ 478.757281][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 478.757305][ T31] ? __pfx__printk+0x10/0x10 [ 478.757350][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 478.757380][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 478.757409][ T31] ? __pfx__printk+0x10/0x10 [ 478.757467][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 478.757505][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 478.757535][ T31] watchdog+0xf93/0xfe0 [ 478.757571][ T31] ? watchdog+0x1de/0xfe0 [ 478.757614][ T31] kthread+0x711/0x8a0 [ 478.757646][ T31] ? __pfx_watchdog+0x10/0x10 [ 478.757676][ T31] ? __pfx_kthread+0x10/0x10 [ 478.757706][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 478.757735][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 478.757771][ T31] ? __pfx_kthread+0x10/0x10 [ 478.757813][ T31] ret_from_fork+0x3f9/0x770 [ 478.757841][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 478.757875][ T31] ? __switch_to_asm+0x39/0x70 [ 478.758070][ T31] ? __switch_to_asm+0x33/0x70 [ 478.758102][ T31] ? __pfx_kthread+0x10/0x10 [ 478.758131][ T31] ret_from_fork_asm+0x1a/0x30 [ 478.758177][ T31] [ 478.758186][ T31] Sending NMI from CPU 0 to CPUs 1: [ 478.963018][ C1] NMI backtrace for cpu 1 [ 478.963041][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 478.963063][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 478.963075][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 478.963108][ C1] Code: 13 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d f3 c6 0e 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 478.963126][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c2 [ 478.963144][ C1] RAX: 96c1caf979754c00 RBX: ffffffff819683a8 RCX: 96c1caf979754c00 [ 478.963158][ C1] RDX: 0000000000000001 RSI: ffffffff8d9b6a9b RDI: ffffffff8be33300 [ 478.963172][ C1] RBP: ffffc90000197f20 R08: ffff8880b8732f9b R09: 1ffff110170e65f3 [ 478.963196][ C1] R10: dffffc0000000000 R11: ffffed10170e65f4 R12: ffffffff8fa37e30 [ 478.963210][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff11003a58b40 [ 478.963223][ C1] FS: 0000000000000000(0000) GS:ffff888125d1b000(0000) knlGS:0000000000000000 [ 478.963239][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 478.963252][ C1] CR2: 0000000000000000 CR3: 000000000df36000 CR4: 00000000003526f0 [ 478.963268][ C1] Call Trace: [ 478.963278][ C1] [ 478.963286][ C1] default_idle+0x13/0x20 [ 478.963305][ C1] default_idle_call+0x74/0xb0 [ 478.963331][ C1] do_idle+0x1e8/0x510 [ 478.963356][ C1] ? __pfx_do_idle+0x10/0x10 [ 478.963386][ C1] cpu_startup_entry+0x44/0x60 [ 478.963405][ C1] start_secondary+0x101/0x110 [ 478.963436][ C1] common_startup_64+0x13e/0x147 [ 478.963472][ C1] [ 478.972741][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 478.972770][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 478.972801][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 478.972819][ T31] Call Trace: [ 478.972835][ T31] [ 478.972849][ T31] dump_stack_lvl+0x99/0x250 [ 478.972890][ T31] ? __asan_memcpy+0x40/0x70 [ 478.972922][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 478.972955][ T31] ? __pfx__printk+0x10/0x10 [ 478.973008][ T31] vpanic+0x281/0x750 [ 478.973044][ T31] ? __pfx_vpanic+0x10/0x10 [ 478.973075][ T31] ? preempt_schedule+0xae/0xc0 [ 478.973113][ T31] ? preempt_schedule_common+0x83/0xd0 [ 478.973155][ T31] panic+0xb9/0xc0 [ 478.973186][ T31] ? __pfx_panic+0x10/0x10 [ 478.973227][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 478.973290][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 478.973330][ T31] watchdog+0xfd2/0xfe0 [ 478.973375][ T31] ? watchdog+0x1de/0xfe0 [ 478.973427][ T31] kthread+0x711/0x8a0 [ 478.973467][ T31] ? __pfx_watchdog+0x10/0x10 [ 478.973502][ T31] ? __pfx_kthread+0x10/0x10 [ 478.973539][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 478.973571][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 478.973605][ T31] ? __pfx_kthread+0x10/0x10 [ 478.973640][ T31] ret_from_fork+0x3f9/0x770 [ 478.973672][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 478.973708][ T31] ? __switch_to_asm+0x39/0x70 [ 478.973744][ T31] ? __switch_to_asm+0x33/0x70 [ 478.973778][ T31] ? __pfx_kthread+0x10/0x10 [ 478.973813][ T31] ret_from_fork_asm+0x1a/0x30 [ 478.973868][ T31] [ 479.464230][ T31] Kernel Offset: disabled [ 479.470425][ T31] Rebooting in 86400 seconds..