last executing test programs: 2.665611216s ago: executing program 2 (id=2473): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000001c0)={'vxcan1\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@func_proto={0x2, 0x0, 0x0, 0x13, 0x2}]}, {0x0, [0x0, 0x61, 0x61, 0x2e]}}, 0x0, 0x2a}, 0x20) (async) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, 0x2202e}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20044441}, 0x20000d0) (async) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x28, 0x19, 0x7, 0xd1, 0x30, 0x10, 0xaa, 0x6, 0xfd, 0x8, 0x6, 0x40, 0x0, 0x7b}, 0xe) (async) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000440)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000040)=0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000003c0)={r4, 0x1}, &(0x7f0000000400)=0x8) 2.495039168s ago: executing program 2 (id=2477): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x11, &(0x7f0000000040)=0x3, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) ioctl$OCFS2_IOC_RESVSP64(r0, 0x4030582a, &(0x7f0000000300)={0x2, 0x1, 0x2, 0xfffffffffffffffd, 0x3, 0x5}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x1c8, 0x65, 0x300, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2}, {0x0, 0xb}, {0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ARP_OP_MASK={0x5, 0x3e, 0x7}, @TCA_FLOWER_KEY_ARP_THA_MASK={0xa, 0x42, [0xff, 0x0, 0xff, 0xff, 0xff, 0xff]}]}}, @TCA_RATE={0x6, 0x5, {0xb, 0x40}}, @filter_kind_options=@f_basic={{0xa}, {0x16c, 0x2, [@TCA_BASIC_ACT={0x168, 0x3, [@m_sample={0x68, 0x17, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x3}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x1ff}]}, {0x29, 0x6, "64a8416e1a2ad4f08a507ade2030959fbaf47dae3d8c5509c5f67bbd00abca8965993d237d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_xt={0xfc, 0xc, 0x0, 0x0, {{0x7}, {0x28, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}]}, {0xad, 0x6, "2dbf268a304e872a0d7f589c8901efee8571a53c4f0062991873d363eeca75f7594e303fa6758fe5d09d4f9ffd072918848212ec1896728111b3c61d1de320181a72e0f47ddfe150f87d3d5d6ddc89258e07ea93abbbaa8b9538526f3018c8a1b0e044cee5833db84e522dd97d547504650f4a6186a9bdc8a084ea8dcb9ee2d96d67813c5f9ee6a009727f36b1bb22dc537ebc9f6caf615e577911012fe6258c81fc98b7d7995175bc"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x40008c5}, 0x82050) socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000540)="120000001200e7ef007b0000ffff000000a19f7b979cdcfc9b614c418e129352541c2c48a604b2c54a59c50ea85ebce7782165aab7887c44a8b6c7a764fd927e062fbea5e171471c6fa39e84b3433432e817921a", 0x54, 0x801, 0x0, 0x47) recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f00000029c0)=""/95, 0x5f}, {&(0x7f0000000fc0)=""/4093, 0xffd}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x303}, "0e57b3d487e2db32", "a9df7ccffde8899f914d4f2c3e263509", "3c36a51c", "6775c975b6b15e11"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f64e40992f79ecf0", "53c272d8b763f690b35605dff8a4a8d2", "021000", "72392a24199b5903"}, 0x28) r1 = socket(0x1e, 0x4, 0x45) bind$inet(r1, 0x0, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f00000005c0)="c800b66cf7e6a5", 0x7}], 0x1) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f00000006c0)=[{&(0x7f0000001980)=""/4099, 0xff1}], 0x1) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="100000000b060506000000000000000003000004"], 0x14}, 0x1, 0x0, 0x0, 0x40048c4}, 0x4000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r2, 0xe0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r2, 0xc400941d, &(0x7f0000000740)={0x0, 0x3, 0x5}) r5 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r5, &(0x7f0000000340)=ANY=[@ANYRES8=r2, @ANYRESOCT=r5, @ANYRES32=r2, @ANYRES32=r1, @ANYRESHEX=r4], 0x8fee) recvmsg(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000005580)=""/4084, 0xff4}, {&(0x7f0000000140)=""/159, 0x9f}], 0x2}, 0x2000) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r5, 0xf503, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r3, 0xc4089434, &(0x7f0000000bc0)={r4, 0x5a3, 0x0, [0x80000000001, 0x0, 0x8000000000000000, 0x3, 0x3], [0xfffc, 0x6, 0x3, 0xfff, 0x6, 0xfffffffffffffffa, 0x4, 0x7, 0x82b, 0x3e, 0x5, 0x404, 0x8, 0x4, 0x3, 0x3ff, 0x7, 0x6, 0x3, 0x9, 0x80000001, 0x6, 0x7, 0x6, 0x9, 0x7, 0x4, 0x5, 0x1000, 0x5, 0x1, 0x2, 0x6, 0x0, 0x77a, 0x80000, 0x7, 0x5, 0x8, 0x9e42, 0x8, 0xfffffffffffffffa, 0x31a, 0x80000001, 0x37a, 0x8, 0x101, 0x1, 0x7fffffff, 0x8, 0xb95, 0xd69, 0x100, 0x8, 0x7, 0x7, 0x5, 0x9, 0x9, 0x8000, 0x8000000000000001, 0x80000000, 0xfffffff7ffffffff, 0x100000001, 0x5, 0x3, 0x4, 0x7ff, 0xd, 0x7, 0x42, 0x5, 0x1000, 0x5, 0x6, 0x7, 0x3, 0x0, 0x8, 0x8, 0xe, 0x1, 0x0, 0x3041, 0x3, 0x9, 0xffffffffffffffff, 0x5, 0x6, 0x6, 0xffffffffffffffff, 0xb6, 0x7fffffff, 0x3ff, 0x7, 0xbc, 0xb4da, 0x0, 0x200, 0x1, 0x40, 0x2, 0x8, 0x401, 0x1, 0x5, 0x81, 0x1, 0x100, 0x10000, 0x80000000, 0x19, 0x0, 0x3, 0x4, 0x4, 0x7fffffffffffffff, 0xfffffffffffff000, 0x7, 0x1, 0x1]}) ioctl$BTRFS_IOC_BALANCE_V2(r3, 0xc4009420, &(0x7f0000001000)={0xe, 0x1, {0x9, @usage=0x4, r4, 0x24a, 0x81, 0x1, 0x0, 0x0, 0x42, @usage=0x81, 0x80003, 0x2, [0x6, 0xdb1, 0xffff, 0x4, 0x8, 0xffffffffffffffff]}, {0x3, @struct={0x7, 0x4}, r6, 0x9, 0x5, 0x7f8, 0x9, 0x4, 0x10, @usage=0x5, 0x0, 0x0, [0x1, 0x4, 0xff, 0x59cc, 0x349dbeaf, 0x6]}, {0x1, @struct={0x8c, 0x2}, 0x0, 0x0, 0x80000000, 0xfff, 0x7, 0x18, 0x6, @struct={0x9, 0x8}, 0x46, 0x4, [0x3, 0x5, 0x9, 0x8, 0x61c8, 0x450]}, {0x3, 0x7, 0x401}}) ioctl$XFS_IOC_ERROR_CLEARALL(r3, 0x40085875) 2.261075538s ago: executing program 3 (id=2483): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x537b, 0x100}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x9}]}, 0x3c}}, 0x0) (async) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000003400)={&(0x7f00000033c0)={0x20, 0x1402, 0x1, 0x4f9, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_NET_NS_FD={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x4000082) (async) recvmsg(r3, &(0x7f0000000280)={&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000300)=""/166, 0xa6}, {&(0x7f00000003c0)=""/183, 0xb7}, {&(0x7f0000000480)=""/130, 0x82}, {&(0x7f00000000c0)=""/47, 0x2f}], 0x4}, 0x0) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r5) r7 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000940), r5) sendmsg$NET_DM_CMD_STOP(r5, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x14, r7, 0x10, 0x70bd29, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000840}, 0x20040800) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r8], 0x1c}}, 0x0) (async) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$IEEE802154_DISASSOCIATE_REQ(r5, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x54, r9, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x9}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x24044015) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001140)={0x18, 0x40, 0x107, 0x70bd26, 0x0, {0x4, 0x7c}, [@nested={0x4, 0x1c2}]}, 0x18}, 0x1, 0x0, 0x0, 0x4048081}, 0xc000) (async) sendto$inet6(r1, &(0x7f0000000180)="4f1fb169648a8d52a0a8ec8a7adcf2081bb91e3a0afbffda51e50574ef7f70f78f84f4bd5a1096c518c6439bb76795d56b751d98564865f83348c4c775f975c315dc04f8a4052923f9b1ac5df4ab07abdd1ccbb122940580ccff49d8560effa5c759b51070ad0f1b0883e5e3eac7a914bfbab8e790c3b97926e56f09fe", 0x7d, 0x4004880, &(0x7f0000000200)={0xa, 0x4e21, 0x4, @mcast2, 0xa}, 0x1c) (async) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw-serpent-sse2\x00'}, 0x58) r10 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r10, &(0x7f0000000000)={0x27}, 0x62) (async) listen(r10, 0x807) (async) close(r10) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f00000007c0)={r3, &(0x7f00000006c0)='/dev/virtual_nci\x00', 0x101000, &(0x7f0000000700)={@align=0x7, {0x7, 0x4, 0x80, 0xc}}, 0xbeb, &(0x7f0000000740), &(0x7f0000000780)=0xfffffffb}) r12 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[], 0x2c}, 0x1, 0x40030000000000}, 0x10) (async) sendmsg$SMC_PNETID_FLUSH(r11, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x40, r13, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'xfrm0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x40044}, 0x20008000) 2.182043729s ago: executing program 4 (id=2486): r0 = socket$inet_sctp(0x2, 0x5, 0x84) (async) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000100)={0x0, 0xac, "38396f3b180817db45158990804972fdcd4074875f34e07a66c1945c29ee72c20b17f5f80d6506c9bd478550332c1e4ce0c39b7e928edbe3ab96854fba0617cc5eb645cf2b5df36072fdad17cdd352bebc1dccce40ff3d668faaeeed697ddc56f7569ba815d95c6d0119360ca3e445d22693050971f713f105eb623629b9a3e14476725ee75d5e0787fb12fcd46b929fff8577328152163abd0748fa1dd2e9f85f589df83c1af93d46638d1a"}, &(0x7f0000000240)=0xb4) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000840)={r1, 0x7f, 0x30}, &(0x7f0000000880)=0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x80, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_SEQ_ADJ_REPLY={0x1c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x5}]}]}, 0x80}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELCHAIN={0x154, 0x5, 0xa, 0x201, 0x0, 0x0, {0x3}, [@NFTA_CHAIN_HOOK={0x50, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2e0138fa}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_to_team\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'gretap0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}]}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x7}, @NFTA_CHAIN_COUNTERS={0x34, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8001}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x50}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xe9e}]}, @NFTA_CHAIN_USERDATA={0x4f, 0xc, "6a597be87c8819fc15f0598bb8e2092f78b690211af50d6316b2bbd9029b737987eb251bca34a9531f5b66f3b34d0eb2a8c9543701df67d9139b1bbec3298d94bcb220d6b832a087829115"}, @NFTA_CHAIN_COUNTERS={0x64, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x9}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x401}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x2}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x2}]}]}, @NFT_MSG_DELCHAIN={0xd4, 0x5, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_FLAGS={0x8}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_CHAIN_COUNTERS={0x7c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xffffffffffffff04}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xb59}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xab}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x80}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xffff}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xfffffffffffffff9}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x80000000}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x99d7}]}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}]}, @NFT_MSG_NEWTABLE={0x88, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_TABLE_USERDATA={0x6c, 0x6, "8c2ab0cd944ba11f2153a2c7364bb57019cd3846ba29cb381004076b66b48b2b0a7e2df577dd244dd9e4aa43eb6126876d120a451713a5cf7e1d340e1df092cdea32c86100dfe23c9e9157934af92491c1341d2e75aa7c2409afc5147b0a40012b9a77f1184df231"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELFLOWTABLE={0x44, 0x18, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELFLOWTABLE={0xb0, 0x18, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x54, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x4}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x401}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pimreg1\x00'}, {0x14, 0x1, 'vcan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_FLAGS={0x8}]}, @NFT_MSG_DELOBJ={0x28, 0x14, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_TYPE={0x8}]}, @NFT_MSG_NEWSETELEM={0x28, 0xc, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x1c, 0x16, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWTABLE={0xc8, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_USERDATA={0x8f, 0x6, "e7d0c6e486cf7693e49a3e0a1bbf8c8adb2b718a9aa1a1fdf6e23d37f147aaac68bc146b3a528981b4ba18e0b23923f1e979a74ba7be48f0d342371000620b695ede1541767542dd95065cc29fa5d4fb1c3070929610e48b01a556da16c159a61e0f92ea6bd0b44eecea72f771af4a19814deb7d2bbda8002f1f3bc5c2728d2ab4d25069ffadbed9cc9231"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x500}, 0x1, 0x0, 0x0, 0x4041}, 0xc055) (async) r3 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) (async, rerun: 64) getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (rerun: 64) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40000) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000004b00)=@newtfilter={0x5c, 0x2c, 0xd27, 0x0, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x5, 0xfff3}, {0x0, 0xffe0}, {0xe, 0x7}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_IPV6_DST_MASK={0x14, 0x11, [0xff000000, 0xffffff00, 0xffffff00, 0x7f]}, @TCA_FLOWER_KEY_IPV6_DST={0x14, 0x10, @empty}]}}]}, 0x5c}}, 0x4) (async) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) r6 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_int(r6, 0x0, 0x2, &(0x7f0000000000), 0x4) bind$inet(r6, &(0x7f0000000300)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 2.089833427s ago: executing program 3 (id=2487): r0 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800) getsockopt$packet_buf(r0, 0x107, 0xd, &(0x7f0000000040)=""/75, &(0x7f00000000c0)=0x4b) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000001200)={{r0, &(0x7f0000000100)='-{\x00', 0x38840, &(0x7f0000000140)={@align=0x7, {0x0, 0x0, 0xfff, 0x2}}, 0x138e1a32, &(0x7f0000000180)={@_ha_fsid}, &(0x7f00000001c0)=0x2}, {[0x6, 0x815f, 0x9, 0x841b]}, 0x3a1, 0x1000, &(0x7f0000000200)=""/4096}) getsockopt$MRT(r1, 0x0, 0xcf, &(0x7f0000001280), &(0x7f00000012c0)=0x4) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000001340), r1) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000001440)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x44, r2, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x81}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xe}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x400}]}, 0x44}, 0x1, 0x0, 0x0, 0x4080084}, 0x4000000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), r1) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f0000001580)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001540)={&(0x7f0000001500)={0x2c, r3, 0x2, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44}, 0x4040002) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TESTMODE(r4, &(0x7f00000027c0)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002780)={&(0x7f0000001600)={0x1154, r3, 0x8, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1, 0x76}}}}, [@NL80211_ATTR_TESTDATA={0x1004, 0x45, "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"}, @NL80211_ATTR_TESTDATA={0x4}, @NL80211_ATTR_TESTDATA={0x6e, 0x45, "4e44c1d2200194355c57842c77c40e1a218c3d88bc6087a19117fbda598a053e8eced91688319ce5d25cb65c831399dd0c755e1300497a0bd14bf2dc2d704bd2c8b3230acd8df3fc298d200a4b2d4eb2def22597b0ae4e3267bbe684829b64a88f267636d8f289624e58"}, @NL80211_ATTR_TESTDATA={0xbb, 0x45, "2e9d570f25f8e8386c4abf0439123f48a0da54c28d38385251fe43d0a37a0f5e8ca4ad09b2037da4436db4a06dcaac0d99d8bc804f6448ca08d3b8215da02a504ceaa571e81cf65422db9822797c819d39bbe62176825022e0746945d4c749034b475e1faf711b2e9a9ab75087db0afc6f8576aa80c1fe9218d361f76c5b0a426e072ea08edfe07266ac7a15252d444747b0caaecbbb113ec369382966aff1da95d1c044413e5306370a98de9c6e80723257559383e2f1"}]}, 0x1154}, 0x1, 0x0, 0x0, 0x2}, 0x40000) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r4, &(0x7f0000002900)={&(0x7f0000002800)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000028c0)={&(0x7f0000002840)={0x5c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x6ef}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x80) r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002940)={r1, 0x0, 0x25, 0x1, @void}, 0x10) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000002bc0)={{r0, &(0x7f00000029c0)='-*{\x00', 0x109000, &(0x7f0000002a00)={@_ha_fsid={[0x10001, 0x7]}, {0x3a, 0xd, 0x2dc7, 0x80000001}}, 0x15, &(0x7f0000002a40)={@_ha_fsid}, &(0x7f0000002a80)=0x7586}, {[0x3, 0x80, 0x1, 0x4]}, 0x4, 0xc9, &(0x7f0000002ac0)=""/201}) splice(r5, &(0x7f0000002980), r6, &(0x7f0000002c40)=0x2, 0x1, 0x1) sendmsg$NL80211_CMD_RADAR_DETECT(r1, &(0x7f0000002d40)={&(0x7f0000002c80)={0x10, 0x0, 0x0, 0x8000100}, 0xc, &(0x7f0000002d00)={&(0x7f0000002cc0)={0x3c, r3, 0x2, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2c}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048011}, 0x20000000) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002dc0), r1) sendmsg$NL80211_CMD_GET_SURVEY(r6, &(0x7f0000002e80)={&(0x7f0000002d80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002e40)={&(0x7f0000002e00)={0x28, r7, 0x800, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0xba3bf44489a672ea}, 0x2004c085) sendmsg$can_bcm(r6, &(0x7f0000002fc0)={&(0x7f0000002ec0), 0x10, &(0x7f0000002f80)={&(0x7f0000002f00)={0x6, 0x0, 0x4, {0x0, 0x2710}, {0x77359400}, {0x3, 0x1, 0x1}, 0x1, @canfd={{0x0, 0x1, 0x1}, 0xf, 0x3, 0x0, 0x0, "2e2b69ac49e730bc732f111519879027b6668f948a8e40788c52dfd1f78c587a6de6391c19bd24080a6193e7cfabb97db7c28fcc17c81164c4482493f7c0eaea"}}, 0x80}, 0x1, 0x0, 0x0, 0x20000004}, 0x20014050) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000003040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r6, &(0x7f0000003100)={&(0x7f0000003000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000030c0)={&(0x7f0000003080)={0x28, r3, 0x400, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x10001, 0x2d}}}}}, 0x28}}, 0x4) ioctl$XFS_IOC_GETPARENTS(r0, 0xc028583e, &(0x7f00000032c0)={{[0xf280, 0xfe000000, 0x7, 0x3]}, 0x0, 0x3, 0x9, 0x0, &(0x7f0000003140)=[{{@_ha_fsid={[0x0, 0x8001]}, {0x0, 0x93e9, 0x7ff, 0x1}}, 0x1, 0x0, 'nl80211\x00'}, {{@align=0x10, {0x3, 0x0, 0x2, 0x1}}, 0x3, 0x0, 'batadv\x00'}, {{@_ha_fsid={[0x7, 0x9]}, {0x3, 0xd, 0x7f, 0x2a}}, 0x6, 0x0, '-[\x99,\x00'}, {{@_ha_fsid={[0x81, 0x5]}, {0xd, 0x3, 0x1, 0x1}}, 0x3, 0x0, '-{\x00'}, {{@align=0x8, {0xd, 0xff01, 0x1ff, 0x6}}, 0x3, 0x0, ',+\x00'}, {{@_ha_fsid={[0x9f9, 0x400]}, {0x7fff, 0x1, 0x5, 0xf46}}, 0xffffffaf, 0x0, '\x00'}, {{@align=0xffffffff, {0x7, 0x3, 0x6}}, 0xffffffff, 0x0, '\x00'}, {{@align=0x7, {0x2, 0x8, 0x4fb, 0x15}}, 0xa, 0x0, ']\x00'}, {{@align=0x2, {0x38, 0xf801, 0x4, 0x10001}}, 0x4, 0x0, 'nl80211\x00'}, {{@_ha_fsid={[0x7, 0x5]}, {0x8, 0x7, 0x8}}, 0xa, 0x0, '0000:00:10.0\x00'}]}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000004740)={&(0x7f0000003300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000004700)={&(0x7f0000003340)={0x1398, r7, 0x300, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x2f}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xbc}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98f}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CSA_IES={0x1324, 0xb9, 0x0, 0x1, [@beacon_params=[@NL80211_ATTR_IE={0x95, 0x2a, [@sec_chan_ofs={0x3e, 0x1, 0x2}, @preq={0x82, 0x25, {{}, 0x4, 0x4, 0x6, @device_a, 0x0, @void, 0x2, 0xd59, 0x1, [{{0x1, 0x0, 0x1}, @broadcast, 0x8}]}}, @mesh_id={0x72, 0x6}, @gcr_ga={0xbd, 0x6, @device_b}, @chsw_timing={0x68, 0x4, {0x9, 0x6}}, @random_vendor={0xdd, 0x49, "61edb78ee5808d1279f500246591f131d1f4034099cba6ee85187f65a92bf76fe7b473da463b3d0c6643301afc8de38d9aaa53de7f798eebf81f06c14183c6ccc40bd1e67f7a4aabb9"}, @ext_channel_switch={0x3c, 0x4, {0x1, 0xc0, 0xb0, 0x4}}]}, @NL80211_ATTR_BEACON_TAIL={0xe5, 0xf, [@tim={0x5, 0xca, {0xa, 0x52, 0x1, "21099d0fb105e1f73722e110f3eba7fd3f5cb6709bb23ab404c89ce16b83dd838689681cabc9ae98bacfa94038ed6797ecf9058bdb662969802bde276eb283a0cf52eb6245f2b8f14902353ae0995c136cb577c1db6d0be23a6800fcbf399aecd46e73f5ffd3d31dc0d98f62a65669cce7d68b9dea4c967a552cf77fdcb8a6c2b340fc89731c0dc6ef39618b47538c941056cc0ef5fc62c8690114433cb0d9412958bfde470f2fa84c1fa30d2bfd08528dc6d914b599afdd0662bb8f34a8e174da18d473e35e27"}}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x69}}, @mesh_config={0x71, 0x7, {0x1, 0x1, 0x0, 0x1, 0x2, 0x10, 0x60}}, @challenge={0x10, 0x1, 0x5d}]}, @NL80211_ATTR_FTM_RESPONDER={0x1160, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x86, 0x2, "cb8e29a1dc6171064508a6e306591f758b2603146088095728a74f83e9ac9ea222f3f554ea591f463ce0aabd3e3620be00fef99ef5819cffc3888177f7a0e50da14d3886a3e5e83ad6d55dd77ddbd31b21522cb6ecbb45a9b2ab3ee422198d3c79d2beb8899b5092893333408519fd4e3e4fe799a50fb6b2ea22243168f2f4f99f30"}, @NL80211_FTM_RESP_ATTR_LCI={0x13, 0x2, "a67653ec869955fff00aade388ec59"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x1004, 0x2, "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"}, @NL80211_FTM_RESP_ATTR_LCI={0x93, 0x2, "21fa749621532b1ac713eb9461d0f90739ac2ff0f35ee220497979367854a60a97a26b0d0f0d328e77d42d52fe4ccfb6cfdfac0a198898b3db4fd0fc96297664689d80285ee6a02a3d0fd035800fc65a73add678a92732cde5582cae63be5961657d69f080cf1c24a13f6a92f35253e6b5d32bf4065df3b9140031a6cdb4bd5a62095676c6fedcb62d8c94606ee6f5"}, @NL80211_FTM_RESP_ATTR_LCI={0x21, 0x2, "68b5f5cfe9dec07d65310d57683fb37e1b76358e50f5d3024d349bf586"}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x36, 0x80, [@ssid={0x0, 0x17, @random="421c52e2fa0c6e96c4124fee110cbe40c3b188726a31c8"}, @mesh_id={0x72, 0x6}, @mesh_id={0x72, 0x6}, @dsss={0x3, 0x1, 0x64}, @chsw_timing={0x68, 0x4, {0x2, 0x80}}]}], @NL80211_ATTR_CSA_C_OFF_BEACON={0x8, 0xba, [0x8, 0x2]}]}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xa2}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x29b}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x7f}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x1398}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000081) write$cgroup_subtree(r6, &(0x7f0000004780)={[{0x2b, 'cpu'}, {0x10, 'net_prio'}]}, 0xf) ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000047c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000004840)={{{@in6=@private0, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@local}}, &(0x7f0000004940)=0xe8) sendmsg$nl_generic(r1, &(0x7f0000004a40)={&(0x7f0000004800)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000004a00)={&(0x7f0000004980)={0x54, 0x2e, 0x4, 0x70bd29, 0x25dfdbff, {0x1}, [@nested={0x3f, 0x63, 0x0, 0x1, [@typed={0x8, 0x13, 0x0, 0x0, @uid=r9}, @generic="470d54085b45e6f58906146ef97dbc3e2fc77dc0e560d1d423b158d7390f6c4872f9b81ef2b13ed69031473bbb0728", @nested={0x4, 0x24}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000010}, 0x20000010) getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000004a80)={{{@in6=@private0, @in=@dev}}, {{@in=@remote}, 0x0, @in=@local}}, &(0x7f0000004b80)=0xe8) socket(0x2a, 0x5, 0x6) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000004c40)={r1, 0x58, &(0x7f0000004bc0)}, 0x10) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f0000004d40)={&(0x7f0000004c80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000004d00)={&(0x7f0000004cc0)={0x20, r2, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x0) 1.976572726s ago: executing program 3 (id=2490): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000851}, 0x24044010) r2 = socket$kcm(0xa, 0x3, 0x3a) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$inet(r3, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cfdfefdb", 0x1a000}], 0x1}, 0x0) sendmsg$rds(r3, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8800}, 0x40) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1e}}, 0x80, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x900}, 0x60) sendmmsg$inet(r0, &(0x7f0000000940)=[{{&(0x7f0000000000)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000040)="93", 0x1}], 0x1}}], 0x1, 0x4040840) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000100)={0x1, 0x200}, 0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e20, @remote}}, 0x80, 0xffff, 0xe82, 0xff, 0xa, 0x6, 0x2}, &(0x7f0000000080)=0x9c) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f00000000c0)={r4, 0x6}, 0x8) r5 = socket(0x2b, 0x80801, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2}}, @float={0x1, 0x0, 0x0, 0x10, 0x2}]}}, 0x0, 0x3e}, 0x28) r6 = socket$netlink(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r7, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) setsockopt$inet6_mtu(r5, 0x29, 0x1e, &(0x7f0000000040)=0x5, 0x4) r8 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x14, 0x601, 0x0, 0x0, {0x2b, 0xfa}}, 0x14}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r9, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x2022) sendmsg$nl_generic(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmsg(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000002700)=""/4087, 0xff7}, {&(0x7f00000016c0)=""/63, 0x3f}, {&(0x7f0000005740)=""/4093, 0xffd}, {&(0x7f0000000000)=""/23, 0x17}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000004700)=""/4103, 0x1007}, {&(0x7f0000000500)=""/155, 0x9b}, {&(0x7f00000002c0)=""/151, 0x97}, {&(0x7f00000001c0)=""/75, 0x4b}], 0x9}, 0x102) close(r0) 1.92716801s ago: executing program 4 (id=2491): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0xffff, 0x0, @loopback, 0xfffffffb}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000001840), 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="20000000021401002abd700002dcdf250800010000000000080044"], 0x20}, 0x1, 0x0, 0x0, 0x4000801}, 0x40810) 1.766966398s ago: executing program 4 (id=2492): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0xa, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) r3 = socket(0x1e, 0x4, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) close(0x3) bind$alg(r4, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) accept4(r4, 0x0, 0x0, 0x0) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="ee", 0x1}], 0x1}}], 0x1, 0x9200000000000000) recvmsg$can_raw(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/239, 0xef}, {&(0x7f0000000280)=""/70, 0x46}], 0x2}, 0x2) 1.748311783s ago: executing program 0 (id=2493): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000001900)=ANY=[@ANYRES32=r0], 0x15a8}, 0x1, 0x0, 0x0, 0xc040}, 0x44) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f00000002c0)={@private1={0xfc, 0x1, '\x00', 0x3}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, 0x9, 0x8, 0x6, 0x0, 0x4, 0x200002}) 1.670299171s ago: executing program 0 (id=2494): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x98, r1, 0x200, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010100}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x4}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4000880}, 0x8040) socket$kcm(0x29, 0x0, 0x0) r2 = accept4$tipc(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)=0x10, 0x80800) setsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f0000000240)=0x9, 0x4) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r3, 0x1, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x2}, 0x4000) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f00000003c0)=@req3={0x6156, 0x80000000, 0xde72, 0x5, 0xad80, 0x0, 0x401}, 0x1c) r4 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r4, &(0x7f0000000400)={0x18, 0x2, {0x2, @multicast1}}, 0x1e) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f0000000540)={&(0x7f0000000440), 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x70, 0x0, 0x71a, 0x70bd2d, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r5, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, r6, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SHORT_ADDR={0x6}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x40}}, 0x1) ioctl$AUTOFS_IOC_EXPIRE(r4, 0x810c9365, &(0x7f00000006c0)={{0x3, 0x7f}, 0x100, './file0\x00'}) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000800)={0x5, 0x202, 0x7, 0x6, 0x0}, &(0x7f0000000840)=0x10) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r7, 0x84, 0x6, &(0x7f0000000880)={r8, @in6={{0xa, 0x4e21, 0xe, @local, 0x9}}}, 0x84) r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000980), r5) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r5, &(0x7f0000000b00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000ac0)={&(0x7f00000009c0)={0xe8, r9, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_SECCTX={0x2d, 0x7, 'system_u:object_r:system_cron_spool_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv_slave_1\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}, @NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:zero_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}]}, 0xe8}}, 0x800) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r10, 0x11c, 0x1, &(0x7f0000000b40)=""/4096, &(0x7f0000001b40)=0x1000) r11 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000001bc0), r5) sendmsg$NLBL_CIPSOV4_C_LISTALL(r5, &(0x7f0000001cc0)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c00)={0x80, r11, 0x200, 0x70bd29, 0x2, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x6c, 0xc, 0x0, 0x1, [{0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x50c25ceb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x73122000}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x58c3224}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc567}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x72782c09}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x538de38f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe90d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2f9786d7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xeaab}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x750f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb3f8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x22682eca}]}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x801}, 0x80) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000001d40)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r5, &(0x7f0000001e40)={&(0x7f0000001d00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001e00)={&(0x7f0000001d80)={0x50, r6, 0x200, 0x70bd2a, 0x2, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SEC_LEVEL={0x1c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x1}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}]}, 0x50}, 0x1, 0x0, 0x0, 0x4001}, 0x20000080) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r13, &(0x7f0000001f40)={&(0x7f0000001e80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001f00)={&(0x7f0000001ec0)={0x28, 0x0, 0x1, 0x5, 0x0, 0x0, {0x7, 0x0, 0x9}, [@CTA_LABELS={0xc, 0x16, 0x1, 0x0, [0x3d, 0x8e10]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x7ff}]}, 0x28}}, 0xc850) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000002080)={&(0x7f0000001f80), 0xc, &(0x7f0000002040)={&(0x7f0000001fc0)={0x78, 0x0, 0x800, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan4\x00'}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan4\x00'}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0xffffffff}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan1\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) 1.517399821s ago: executing program 2 (id=2496): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x24, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x4}, @TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0xffffffffffffffff}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket$unix(0x1, 0x5, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x68, r9, 0x1, 0x0, 0x25dfdbfe, {}, [@WGDEVICE_A_PEERS={0x40, 0x8, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @loopback}}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x4085}, 0x40000) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80080004}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x1c, r9, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x4094) close(r6) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@newtfilter={0x88, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0xb, 0xfff3}, {}, {0x8, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x2, 0xffffffffffffffff, 0x6, 0x2}, 0x1}}]}, {0x4}, {0xffffffffffffff41, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x34}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x2e}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r10, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200080314000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f0000000780)="f058050000007f8f", 0x4000}], 0x2}, 0x5) 1.35474618s ago: executing program 1 (id=2498): r0 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x1, 0x0, 0x2, {0x0, 0x0, 0x0, r4, 0x18f40, 0x22008}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x2}]}}}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_FLAGS={0x8, 0x8, 0x702}]}, 0x34}}, 0x44) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295a5, 0x0, 0x0, {0xa, 0x68, 0x0, 0xc8, r2}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_FLAGS={0x8, 0x8, 0x3aa}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 1.339588297s ago: executing program 0 (id=2499): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000280), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x1c, r3, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x4008004) write$nci(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="414601", @ANYRES32=r2], 0x4) sendmsg$nl_xfrm(r0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@can_delroute={0x14c, 0x19, 0x1, 0x0, 0x0, {}, [@CGW_CS_CRC8={0x11e, 0x6, {0x47, 0x0, 0x0, 0x0, 0x0, "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", 0x0, "56e89243dad36ae9dc7283425f986bbfe5349c4e"}}, @CGW_MOD_OR={0x15, 0x2, {{{}, 0x0, 0x0, 0x0, 0x0, "80deae486c1a0221"}, 0x6}}]}, 0x14c}}, 0x0) 1.177783295s ago: executing program 1 (id=2500): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xfeb8, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000"], 0xb8}}, 0x8040) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f00000003c0)={r1, 0x68}, &(0x7f0000000400)=0x8) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000004900010000000000000000000a000700", @ANYRES32=0x0, @ANYBLOB="000000000800020000000000140001"], 0x38}}, 0x0) 263.145128ms ago: executing program 0 (id=2501): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r2 = accept(r0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xb4}}, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000280)={'bond0\x00', &(0x7f0000000200)=@ethtool_cmd={0x23, 0x8, 0x8, 0xfff, 0x0, 0x4a, 0x0, 0x8, 0x4, 0x80, 0x378, 0x2, 0x1, 0x40, 0x40, 0x3, [0x6, 0x1ff]}}) 261.793562ms ago: executing program 2 (id=2502): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000001000)={0xffffffffffffffff}) getsockopt$SO_J1939_PROMISC(r4, 0x6b, 0x2, 0x0, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}]}, 0x2c}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000020000100ecc2000000000000020020000000000100000000140003006c6f0000000000000000000000000000080002"], 0x38}, 0x1, 0x0, 0x0, 0x40008c4}, 0x88000) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 258.678247ms ago: executing program 1 (id=2503): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r1, 0x0, 0xc, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) getsockopt$ax25_int(r5, 0x101, 0x9, &(0x7f0000000140), &(0x7f0000000180)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x2f}]}, &(0x7f0000000040)='syzkaller\x00', 0x2}, 0x90) setsockopt$EBT_SO_SET_COUNTERS(r4, 0x0, 0x81, 0x0, 0x78) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f00000001c0), 0x1000000}, 0x20) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r2) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000001280)=@mangle={'mangle\x00', 0x2, 0x6, 0x750, 0x450, 0x450, 0x0, 0x290, 0x360, 0x680, 0x680, 0x680, 0x680, 0x680, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x21}, 0x0, 0x188, 0x1b0, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @local, @mcast2, @private2}}, @common=@inet=@multiport={{0x50}}]}, @HL={0x28}}, {{@ipv6={@mcast2, @dev, [], [], 'veth1_macvtap\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {}, 0x300}}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], '\x00', 'bond_slave_0\x00'}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv4=@loopback}}}, {{@uncond, 0x0, 0x208, 0x230, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, @mcast2, @mcast2, @private1, @empty, @loopback, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @remote, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0]}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x7b0) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r2) sendmsg$NL802154_CMD_NEW_INTERFACE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000eeff120000000a0004007778616e3300000008001500", @ANYRES32, @ANYBLOB="080001"], 0x30}}, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000001bc0), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x13, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x8000}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x4, 0x22, &(0x7f00000002c0)=""/34, 0x41000, 0x0, '\x00', r0, 0x0, r7, 0x8, &(0x7f0000000340)={0x8, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x2, 0x8, 0x8001, 0x9}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000400)=[r6, r3, r6], &(0x7f0000000680)=[{0x4, 0x5, 0x6, 0x4}, {0x5, 0x3, 0x10, 0x5}, {0x1, 0x4, 0x10, 0x4}, {0x3, 0x5, 0x2, 0x6}, {0x2, 0x2, 0x8, 0x7}, {0x0, 0x4, 0xe, 0x5}, {0x0, 0x2, 0xa, 0x1}], 0x10, 0x3}, 0x94) 256.600506ms ago: executing program 0 (id=2504): ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f00000003c0)={{0xffffffffffffffff, &(0x7f0000000180)='pcbc(fcrypt)\x00', 0x129000, &(0x7f00000001c0)={@_ha_fsid={[0x200, 0x7]}, {0xa45, 0x94, 0x3, 0x8001}}, 0x800, &(0x7f0000000200)={@_ha_fsid}, &(0x7f0000000240)=0x4}, {[0x200, 0x1, 0x6, 0xffffff01]}, 0x7, 0x66, &(0x7f00000002c0)=""/102}) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_MFC(r1, 0x0, 0xcd, &(0x7f0000000000)={@dev={0xac, 0x14, 0x14, 0x43}, @dev={0xac, 0x14, 0x14, 0x44}, 0x4, "957b0a386101819797d7c1bd75f5fe54f049ddca5f0c5c9bc539d170cf2e21f5", 0xfd0, 0x3504, 0x4, 0x9}, 0x3c) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e22, @loopback}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r4 = accept(r3, 0x0, 0x0) sendmmsg(r4, &(0x7f0000000280)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1000000000000000170100000800000085682e95a4f5160c122017"], 0x10}}], 0x1, 0x8001) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) recvfrom$unix(r4, &(0x7f00000005c0)=""/230, 0xe6, 0x0, 0x0, 0x0) setsockopt$packet_int(r2, 0x107, 0xe, &(0x7f0000000580)=0x8, 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="11000000040000000400"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r5, &(0x7f0000000000)="f4", &(0x7f00000000c0)=""/85}, 0x20) r6 = socket$netlink(0x10, 0x3, 0x15) setsockopt$MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd2, &(0x7f0000000480)={{0xa, 0x4e22, 0xe7, @dev={0xfe, 0x80, '\x00', 0x20}, 0x2}, {0xa, 0x4e24, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0xffffffffffffffff, {[0x86d, 0x1ff, 0xb8, 0x3bb, 0x2, 0x8, 0xbcc, 0x101]}}, 0x5c) socket$phonet_pipe(0x23, 0x5, 0x2) write(r6, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) 255.937732ms ago: executing program 3 (id=2505): syz_emit_ethernet(0x7a, &(0x7f0000000040)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, @link_local={0x3, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tipc={{0xf, 0x4, 0x0, 0x3e, 0x6c, 0x64, 0x0, 0x2, 0x6, 0x0, @loopback, @loopback, {[@noop, @timestamp={0x44, 0x24, 0x3e, 0x0, 0xf, [0x5, 0x2, 0x2, 0xea0, 0x8009, 0xc4, 0x978, 0x5]}]}}, @payload_mcast={{{{{{0x30, 0x0, 0x1, 0x1, 0x1, 0xb, 0x3, 0x2, 0x9, 0x0, 0x0, 0x5, 0x0, 0x1, 0x200, 0x2, 0x2, 0x4e20, 0x4e22}, 0x2, 0x4}, 0x4, 0x2}, 0x4}}, [0x0, 0x0, 0x0, 0x0]}}}}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) epoll_create1(0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='yeah', 0x4) (async) r1 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) (async) getsockname$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40000) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0xfff1, 0xfff3}, {0x6, 0xffe0}, {0x10, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async, rerun: 64) r4 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) (rerun: 64) ioctl$sock_bt_bnep_BNEPCONNADD(r4, 0x400442c8, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYBLOB="03000000050019ddcc1dcbdf6cc0b2c09339eaec43558e9d6f033b5042998664ad3445fb30d5be2b334f9cf5247e7d856d35ca0cc3a31a1c"]) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000280)={@private2, 0x9, 0x0, 0x1, 0x1, 0x8, 0x5}, 0x20) (async) getsockopt$inet6_int(r0, 0x29, 0x24, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 254.859477ms ago: executing program 2 (id=2506): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001340)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb0000001000000002000000000000000000000100000000000000020000"], 0x0, 0x2a, 0x0, 0x0, 0x800001}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xa, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000101840000004000000000000000000000095000000000000009500000000000000950000000000000018400000feffffff050000000000000095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x9, 0x0, 0x0, 0x7ffffff, &(0x7f0000000200), 0x10}, 0x90) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$SO_TIMESTAMP(r3, 0x1, 0x3f, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x3}, 0x94) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x24, r5, 0x1, 0x70bd29, 0x0, {{0x2}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16ad}]]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, r2, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004000}, 0x8800) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f00000002c0)=@ethtool_link_settings={0x4d, 0x400, 0xf, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x4, 0x2, 0x0, 0xfffffffc, 0x1, 0x8]}}) 254.263757ms ago: executing program 1 (id=2507): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_PROMISCUITY={0x8, 0x1e, 0xc}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0xd}]}, 0x30}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='io.stat\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_DEST(r3, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, r4, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5f}, @IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008080}, 0x20004001) sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x14, 0x601, 0x0, 0x0, {0x2b, 0xfa}}, 0x14}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4400000010003b15000008000000000000000000", @ANYRES32=0x0, @ANYRES64=0x0], 0x44}}, 0x0) socket$igmp(0x2, 0x3, 0x2) 243.177461ms ago: executing program 4 (id=2508): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket(0x10, 0x803, 0x0) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r1, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) bind$ax25(r1, &(0x7f0000000180)={{0x3, @null, 0x4}, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null]}, 0x48) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'authenc(streebog256-generic,pcbc(fcrypt-generic))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000003c0)="060000004d9070", 0x7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040084) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000009c0)={'vxcan0\x00'}) sendmsg$can_bcm(r2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl(r3, 0x8b2c, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r4, 0x8b15, &(0x7f0000000000)={'wlan1\x00', @remote}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0e00000004000000080000000a"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4040, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r8 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r7, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], 0x7ff) sendmsg$L2TP_CMD_TUNNEL_GET(r6, &(0x7f0000000200)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2}, 0xfffffffffffffd86, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="ed9e01d81ea5", @ANYRES32, @ANYBLOB="041525bd708f0563539c30811d000000000005000600030000000000000000000000000000000000000000000001140008faffffffffffffff00000000000000000006099000080000000500060076000000"], 0x5c}, 0x1, 0x0, 0x0, 0x5}, 0x10) 242.23902ms ago: executing program 3 (id=2509): sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, 0x3f7, 0x100, 0x70bd2d, 0x25dfdbfc, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4010}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0xb7, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x1e) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "dce02de9d7bd466b", "72e64b3892cb7025848c9f40363cf916", "cfff3c66", "e2b768b4bb9e0d9b"}, 0x28) sendto$inet6(r0, &(0x7f0000000000)="014b", 0x2, 0xc000, 0x0, 0x0) getpeername$unix(0xffffffffffffffff, &(0x7f0000000480), &(0x7f0000000540)=0x6e) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0xffff}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x90}}, 0x40000120) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x5c, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x5c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x7, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000008c61ed24dcf500002300000000000071800001ffffffff9500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x1000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='blkio.bfq.io_service_bytes_recursive\x00', 0x26e1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000002180)={0x0, 0x0, &(0x7f0000002140)={&(0x7f0000002000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELTABLE={0x2c, 0x2, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x6}}}, 0x54}, 0x1, 0x0, 0x0, 0x8010}, 0x0) close(r3) ioctl$SIOCSIFHWADDR(r3, 0x8b0b, &(0x7f0000000100)={'wlan1\x00', @random='\x00\x00 \x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) getpeername$packet(r3, &(0x7f00000005c0)={0x11, 0x0, 0x0}, &(0x7f0000000600)=0x14) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x2, '\x00', r6, r3, 0x5, 0x3, 0x4}, 0x50) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r7, 0x20, 0x70bd28, 0x25dfdbfd, {{}, {}, {0x14, 0x19, {0x0, 0x1, 0x2, 0x7f}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x80d4) 240.951681ms ago: executing program 1 (id=2510): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001680)={0xd, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000100000000000000000000007112bb000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r2 = socket(0x400000000010, 0x3, 0x0) (async) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r4, {0x10, 0xffe0}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x22040028}, 0x40040) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r7, 0x8946, 0x0) (async) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000003c0)={0x0, 0xcf0, 0x9, 0x1}) (async, rerun: 32) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f00000007c0)={0x0, 0x0, {0x0, @struct}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) (async, rerun: 32) ioctl$BTRFS_IOC_BALANCE_V2(r6, 0xc4009420, &(0x7f0000000bc0)={0x14, 0x4, {0x3ff, @struct={0x4, 0x4}, 0x0, 0x80000000, 0x6, 0xffffffffffffffff, 0x4, 0x5, 0xa4, @struct={0x8, 0x9}, 0x0, 0x101, [0x4, 0x9, 0xde8, 0x4, 0x2, 0x7f]}, {0xfff, @struct={0x0, 0x5}, 0x0, 0x8, 0x3, 0x3, 0x2, 0x9, 0xc, @usage=0x10000, 0x1, 0xffff, [0x81, 0xfff, 0x80000000, 0x0, 0x56]}, {0x0, @struct={0x2, 0x914}, 0x0, 0x3, 0x100000000, 0x5, 0x1fffe00000, 0xe, 0x20, @usage=0xe9, 0xa8, 0x1, [0x0, 0x2, 0x7, 0x8, 0x3, 0x8e87]}, {0x7, 0xffff, 0xfff}}) ioctl$BTRFS_IOC_BALANCE_V2(r7, 0xc4009420, &(0x7f0000000fc0)={0x10, 0x0, {0xade3, @usage=0x5, r8, 0x4, 0x100000000, 0x8, 0x5925, 0x8, 0x7b, @struct={0x95be, 0x9}, 0x1, 0x5, [0x623, 0xfffffffffffffffb, 0x4, 0x2, 0x4, 0x101]}, {0xb84, @struct={0xc8, 0x1}, r9, 0x1, 0xffffffffffff0248, 0x80000001, 0x5, 0x5, 0x2, @struct={0x8, 0x6}, 0x2, 0x1, [0x0, 0x4, 0x3, 0x4e76, 0x100000000, 0x1]}, {0x7, @usage=0x1000, r10, 0x0, 0x60252d3, 0x1000, 0x9, 0x267e, 0x92, @struct={0x10000, 0x3ff}, 0x80000001, 0xfffffff9, [0x6, 0x6, 0x3, 0x3ff, 0x7fffffffffffffff, 0x8000]}, {0x8, 0x6, 0x3}}) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000000000000007400", @ANYRES32=r11, @ANYBLOB="0000000000000000240012800b000100627269646765000014000280060027000000000005002d"], 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x80, 0x80, 0x9, 0xf, {{0x10, 0x4, 0x1, 0x2b, 0x40, 0x67, 0x0, 0x4, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x3a}, @multicast2, {[@ssrr={0x89, 0x2b, 0xbd, [@empty, @remote, @rand_addr=0x64010100, @rand_addr=0x64010101, @local, @empty, @multicast2, @remote, @broadcast, @broadcast]}]}}}}}) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) (async) r14 = socket$nl_route(0x10, 0x3, 0x0) (async) r15 = socket(0x10, 0x803, 0x0) r16 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(r15, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) (async, rerun: 64) getsockname$packet(r15, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r16, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r17, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) (async) sendmsg$nl_route(r14, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0xff, r17}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) (async) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000b0}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xf0, 0x0, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4000000}, 0x4810) 240.16551ms ago: executing program 2 (id=2511): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x1c, r7, 0xf81, 0x0, 0x0, {{}, {@val={0x8}, @void, @void}}}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newqdisc={0x2f4, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xd}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x2c4, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0xfffffff8, 0x80, 0x2ff8, 0x6, 0x0, 0xfff, 0xfffffffc, 0x0, 0x416f, 0x0, 0x8, 0x2, 0x2, 0xf, 0xffff, 0x8e}}, @TCA_GRED_DPS={0x10, 0x3, {0x6, 0xc, 0x0, 0x4}}, @TCA_GRED_STAB={0x104, 0x2, "d4c576e64cf3dfb07475930147c0ae0a642f815bc0b51f6ca005728a569d5c6a0668ead6591d405e64e346d816e95ae3904f57bccdbce8a5bff0fc94f9880141f668afb22e105bcf1af4e16991d48ed24adc4d9b3b19e4d3b73df970987d819de0897e458f23bb4f4edb7d2a2f455fcf22fe362afa4cf5f052297c124395231de4b52d9bf03100170c03f9bea359c50c93742d844267ffb6aed7a7f7db5cf97309a573ad76f38b9ebf553f2f9a5ea5a7120d3c3edf4ef1bcd5dbc024f9e664b0c07d30d9208a754a2f92273c5b51fdda05b976b8793d1f769f3f81ec0b68a66f1d1dcdfb95eaa0b5a1b85af706f290f60cd301b89f5cb303b3195bdb3c46711a"}, @TCA_GRED_MAX_P={0x8, 0x4, 0x7a8}, @TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_PARMS={0x38, 0x1, {0xf, 0x0, 0x3ff, 0x6, 0x6, 0x1131c8f5, 0x3, 0x7b37, 0xf2e4, 0x6, 0x18, 0x6, 0x10, 0x40, 0xffff7fff, 0x40}}, @TCA_GRED_MAX_P={0x8, 0x4, 0x4}, @TCA_GRED_MAX_P={0x8, 0x4, 0xffffb855}, @TCA_GRED_DPS={0x10, 0x3, {0x1, 0x10, 0x0, 0x1}}, @TCA_GRED_DPS={0x10, 0x3, {0xe, 0x9, 0x0, 0x7}}]}}]}, 0x2f4}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000022c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0xf7513c36066f8950}, 0x20000000) close(r2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r12, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f00000004c0)="f058050000007f8f", 0x300}], 0x2}, 0x5) r13 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240), 0xffffffffffffff5a) r14 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x16, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r14, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc89000000000000b5090100000000009500000000000000b509000002000000639af0ff000000008709000000000000c39af0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r13, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000000000000b70000050000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 237.836434ms ago: executing program 3 (id=2512): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@ipv6_newroute={0x44, 0x18, 0x1, 0x70bd2c, 0x0, {0xa, 0x10, 0x0, 0x0, 0xfc, 0x2, 0xff}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x8}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_DST={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}]}, 0x44}}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000100)={r5, 0x2, 0x6}, 0x10) ioctl$sock_proto_private(r3, 0x89e6, &(0x7f0000000240)="e72fbf") r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) r7 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r7, &(0x7f00000052c0)={&(0x7f0000003fc0)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000050c0)=ANY=[@ANYBLOB="2c000000ffffffff0204dadd021190261cf17d180c5deb1100b4cd8cc300"/48], 0x30}, 0x40) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r8, 0x107, 0x1, &(0x7f0000000040)={r9, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x9}}, 0x10) setsockopt$packet_add_memb(r8, 0x107, 0x1, &(0x7f00000004c0)={r9, 0x3, 0x6, @remote}, 0x10) setsockopt$packet_drop_memb(r8, 0x107, 0x2, &(0x7f0000000100)={r9, 0x1, 0x6, @local}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv4_getnexthop={0x48, 0x6a, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@NHA_OIF={0x8, 0x5, r5}, @NHA_MASTER={0x8, 0xa, 0x1}, @NHA_OIF={0x8, 0x5, r5}, @NHA_ID={0x8, 0x1, 0x1}, @NHA_OIF={0x8, 0x5, r9}, @NHA_FDB={0x4}, @NHA_GROUPS={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x880}, 0x0) socket$kcm(0x29, 0x0, 0x0) 234.541625ms ago: executing program 4 (id=2513): r0 = socket$inet(0x2, 0x2, 0x8000) close(r0) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) r2 = socket(0x1e, 0x1, 0xdf) (async) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000080)={0x0, 0x2}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000100)={r3, 0xffff, 0x3d, 0x8}, 0x10) (async) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000140)={r3, 0x8}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f00000001c0)={r4, 0x5}, 0x8) (async) r5 = socket$inet_udplite(0x2, 0x2, 0x88) (async) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={r4, 0x11}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000280)={r6, @in={{0x2, 0x4e21, @private=0xa010101}}, 0x10, 0x7}, &(0x7f0000000340)=0x90) (async) getpeername$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0}, &(0x7f00000003c0)=0x14) sendmsg$kcm(r2, &(0x7f0000000840)={&(0x7f0000000400)=@xdp={0x2c, 0xd, r7, 0x23}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000480)="2b8ec035a98cd9f2d3b401863022628a62e01744a19f8eb056ad83285a09f8aea13fd5d89ee94717804744188e190328850fa3e15dc3fc7317007adcd6e2fc60a305dd668699be3785f969138fb9f90c50e2e1da4c9ddfeeb60bb0c632e960765ce785a385cc8664f11371d04fe5a8c02989a625a9ea3f65e8553667148c75bd0e81e3c418e57ce4b144787d5139f13bfa2a2e49efae893fd0d480bcc3271f52096759516b235eacc17069840dce2fa76bc266e2927af7923bfae5e5b2c2101600265dc6c2201970d2673c79e0fb50e29e14e5b7bd9d1cf89e4f11d49f3c5b3e1ad0d2837cc9", 0xe6}, {&(0x7f0000000580)="04beda94d7d050f7a79462f37576bd7ee7866d10309e6d2f968b7f5570f73d80ddd750ae24e2ee546bc1f7b92dd3c68d78da62c7ef66ea60516f6ed4d179709d3f694cc54a", 0x45}, {&(0x7f0000000600)}, {&(0x7f0000000640)="ac763c11c442a5e58cf17a3d37d6e9687947b5532144a6167150f1892f5b9bd5e9f7870ba094a66c3ae73fcb3b7268cd1a8a64c0ea11faa2f5faac9d3e2a952f839bbc13afb219700e9fd0a4096032e6530ef1d2c3fd6a56b6cf66629b14b13981ae90fa7bd5df03e78b534883902fb9624da820478bfb2ebe362c", 0x7b}, {&(0x7f00000006c0)="437ec8e3624bfde759863905a5ed0cb541bad91716315ffe077578f0", 0x1c}], 0x5, &(0x7f0000000780)=[{0x90, 0x119, 0x534, "18c512a21aeb5dbfd8d7b26aa5426a0dbf4fefd3f82ce68380212dc3dd2490af5900357076ce7e31bc34196972065894a7e8a03041ebd48c464d050f28200739f9183690f13fe0fbf9ef9c436ba0701c70a6e45f18dd67834ce22809c0f3ea789d8a1a45ec37390d2c0166e46dde2655398d8b65ae1b9e1698bcb2aa88"}], 0x90}, 0x4004000) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000880), 0x3) ioctl$NILFS_IOCTL_SYNC(r0, 0x80086e8a, &(0x7f00000008c0)) (async) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000900)={@empty, 0xb, r7}) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000940)={0x7, 0x400, 0x2, 0x7, 0x97, 0x6f6b, 0x8, 0x9, r4}, &(0x7f0000000980)=0x20) (async) r8 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$OCFS2_IOC_GROUP_ADD64(r1, 0x40186f03, &(0x7f00000009c0)={0xa9, 0x0, 0x9}) (async) socket$kcm(0x29, 0x2, 0x0) (async) r9 = socket(0xf, 0x2, 0x80000001) vmsplice(r0, &(0x7f0000001e00)=[{&(0x7f0000000a00)="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", 0x1000}, {&(0x7f0000001a00)="016d69d0769865601422b72f9a33575bd8eb48500ac985d5fa4484761533b79bd584424301444637d304f41f3b3043afe1293fc3b7dad24d03bed85e0950c4a1ba0c7b1b42", 0x45}, {&(0x7f0000001a80)="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", 0xff}, {&(0x7f0000001b80)="9e0ab0a68674b3e553caa3a2bb0332d1c2a5bd351100f5a968e51a2958dc816d403df80440ee87da5448f029f7b47014e4e103724d7e852e4b9a7be67a091100ff322a9d80a951e8abeb84d1d3e53d4a542a77e5a80f6f4e29c525d784485e8fd5b15acf3eb992a6824922d9fec660bd7e91b8aef7403ea0e360ace7a0bf14bdffb5f272eea9c315340e45f27e70c00bd32ad599e54993ca0b06a066ee61a311437566b4fe7e08e372a22b7ba88bf7a48c46b957c88e753793", 0xb9}, {&(0x7f0000001c40)="8b12065137b01344064346e1cbc19ae055838fcf61599857380a440585b35efc5dc0a9528a75436b4335a1766569c183787fcd31c139f1d6485e6fb50ace0f730fc6d44d98f5e00292dfc4f4f016dc634eff347a9bb61434ec87e11db5ca620903d026ea005dd91590eaeb3ef972af9fff522106e35571af9f1572ca1d568d3760cbb964331f1146222ea7c5f103744e347dc7ea5f0983ee3f3ab5cd03edddb7d027a9ba04211da1bab68b47cfdd0e79fc7820cf39bf2f2da08590c5b44ccdf7cf1963c439833806f52e5dbfa5cb4e7e89bb99375f0c8d709f6c0fca765e51d7f654efbc83a3358981bfb5d4d4ac8069e52834", 0xf3}, {&(0x7f0000001d40)="d58a06f8bfe97e8271297ad73c0aaf8c75eb8b1703458645741b66cc5a9b452fc3c83c97859a45abb733c4586a5176dfceeaac2cb71f6abc7e9b9e9660de48194e5980c85cd986a4721876374842777b2caa6b8be50b5de92ab1e5caa34aea2a5925ea87da8830bae034dda4d1f31c886b6fb126dd1e7afdc6efc813377875c3a4a3824ffdbb2545e1af3439938147083e57f0b9024290d713de10d05c8e601d5d04", 0xa2}], 0x6, 0x3) (async) sendto$ax25(r9, &(0x7f0000001e80)="562ea2b05ff32cea0766567ee5600c31c36f1c285fe50da575c5ab3f2e47a53cf686847a5ca85a21b2c8879bbb986989aa0d19f055bab5fa2f24bc349e43e7fa89dd99f10edf99fa8404b143b809013b711444999e4133a05b6fefda94ba9b673a6d2bcab8e7a6322d15db7b8a5a5138a1b27100acb9a98b9e35a385643e7c4b79b4343ff6c2260b226dfc42a7a353afcd4cd889abce7bb11f1aa36ddbd48930d2f439e0c379a653ddb5c3ec1bdbfafe6e5f683168a64acb9a36b76c74334cb4dfa4", 0xc2, 0x10, &(0x7f0000001f80)={{0x3, @default, 0x7}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) (async) ioctl$FAT_IOCTL_GET_VOLUME_ID(r8, 0x80047213, &(0x7f0000002000)) (async) sendmsg$kcm(r2, &(0x7f0000003800)={&(0x7f0000002040)=@pppoe={0x18, 0x0, {0x0, @local, 'pimreg\x00'}}, 0x80, &(0x7f0000003740)=[{&(0x7f00000020c0)="fab09369e1edfac939d7e7198eef5966db8907b87784c8b67ee163848ff27d3b9bddd69064a46167b78318b42b3f4eabce6fe6464f851ba2ec77e948cfbe59a893b2004c66eea364049b44942438ddbca773807dd212f1c931691299d45e538e00972b89539fce3ed46d2f9b89895eb2f4b0b7d075b2e967dea8401f81ca2217fa6294899341e7e1b1d5fa74ea13cb6fa6750796319389452939d44497722a50eddb9af1e0788b60ff1b5e0c3d2649bf1a6f43821e87610bbec6abf6edccae5101ff5f8f22beeb121b9f8bd03115971e517498ba", 0xd4}, {&(0x7f00000021c0)="db3c13aeb034fc4c0798ff40917644e2d0e6e44a129b6ccbf63a5131ed482e081fde650a77bd256ad09c44a8f6f1d2d05a8879f6c36d628bd39aea79a6a15962bd6edc5936164a159f478bbe404bf8ccd1f5d6d11c86d182554f79eea7edf3047fc5bb5c5dd9d174b5b0f0191f7db57a2b52f6d9dc69d95501382c6d0345d24e65bb333ef5f31864c7c40dcaff63321f238da0853af9b96cf904c6426bb89b450a345bf1aaf832e37f65bc38528c", 0xae}, {&(0x7f0000002280)="11ecc131743c801d471f1fc928d629e26b8f6eeb82c9acc5f3aa264b4e3a95c5b73e7d6de3d9a6caac5dca75869b14f39b6c4728c425cc7ced304bbe0c79d899ac7138aba3a77539ef37a3e4f3603a368bd0d4cbc7f43ba241be71da62b3a35da988eb385c0378fe27b2a3ae6d4bce12a2db", 0x72}, {&(0x7f0000002300)="15121fd4f0151d092329078e3dce3cdf6470366bd2fc146b241e843a2df2ecefd03564cdbe9bea0c63471ceb56b57dfc786ffc69a1bac0aca0b305b07c8c318b94e123a0721dd3c4e377449fb49ff997ee8c84800210f8d34ed28470ee861dec3fad50b2cb954ef0409c883da24ccce44d7e4051cbc641842ce99e04f024152c77f407d7db57a70f1903fc8e4d0f1dea47deb2ee4b0387d8a7b008eafb3591efcee413cf476c85b8cc3b2d7eaf2393245f8654397428f85d4004c62ec9d852cc3767a762d7e71e1454d9e960cb08d1b223d7c02da401", 0xd6}, {&(0x7f0000002400)="e0b741ed90b975c6bf709c84c13626db42ec0b8644bedf9263e1174854a26debf9cd967dcd83ab865465d9c1a48326f8accd2e01e75b511fd52c8e177234a56a2fe8cd3934bc088eb57236ca611ed356373a24c6fe240286ef86d96578ab39ba3f83309a07e97a497f08fba93330058e709ae9fa8e279d578b1c74d1606602cd0355aaaa2c5d1e02be28c828f901caa4a95bfd66b2f47f7813483b2b7136a853fd0a6497d96216f9ecc6cc100c123a51fdde74d50dabe6afcc4481c582459a1399c8b8eaabe9ee5efc8ea2086b803d52d302fec3d79e6a45d01c3f3c4ab1570732f660bca417ab89274a6203738b2b7d639166b403", 0xf5}, {&(0x7f0000002500)="306c6da5439fb9595f0e445275010396a23c7d65f68dce8d68f2a3031f05f5f6e3068fbb4eea0d4fbdad7c7971c6888c58578c3e94a3dd02", 0x38}, {&(0x7f0000002540)="14eab15c515100c3a4362b", 0xb}, {&(0x7f0000002580)="483a7629ac801d9cc25cd9d67fad7d04dc5906e5d8637dc8a5a9daae557f0e8dc20af891c5193e2930444a3fda5fdd17e80b1cd264edf247a6ba9f57a07cd4a113760725643db0765f0d89ee6a8a2cd4929378e60bc18f3929fbc53d6426e928e388f053a1c5b5dce006d6157d9aef70e9611914d6db86f5556886d1b9b3ee56ad5a00079840c8d36cb69e9847281158397d58e442d77be37d90b3003fcf0fd743f185e1c4dd189682e8d58b3bf2f48f6f99ac88886429c978162844f7b7151b68828bc9304900400747c44c52b9bc56ee5b54706048e149908880edce357e9653edd9950fd3d909b24efb", 0xeb}, {&(0x7f0000002680)="487c3b5ca00c96260ee091cbb537f1e3e1c9df79e367b7e8c4f9b4d8aac24b80f8234c134347dccf58dec9675e9a47758e3546cae9bf5a9e23ee642a6b10d430c2fa98484fb770587c20417999edadc658aaae66d99f7eeb415820685f227d9929a2cf145d63768413dc057680bd93d5b914a2cbc834ee9a77016ff35de410bb5d244da986145628b43bb5457e824f38da72a08369038e1f5b8ef1fe9bb7d747238840a8e928a5efcbe5473e17059a142c6702e3a9b5", 0xb6}, {&(0x7f0000002740)="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", 0x1000}], 0xa}, 0x4040000) (async) setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000003840)={r3, 0x4d}, 0x8) (async) socket$kcm(0x29, 0x2, 0x0) (async) ioctl$FS_IOC_GETFLAGS(r5, 0x80086601, &(0x7f0000003880)) (async) ioctl$FITHAW(r0, 0xc0045878) 150.910575ms ago: executing program 4 (id=2514): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000005c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_ALL_SLAVES_ACTIVE={0x5}, @IFLA_BOND_NUM_PEER_NOTIF={0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x0) 4.046036ms ago: executing program 1 (id=2515): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x400}) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) recvfrom$x25(r1, &(0x7f00000001c0)=""/167, 0xa7, 0x40012100, &(0x7f00000000c0)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}}, 0x12) r2 = socket$kcm(0x2, 0xa, 0x2) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c0000001800010000470000000000000a00fc000000000000000000"], 0x1c}}, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0x2, 0x4, 0x4a0, 0xffffffff, 0xd0, 0x300, 0x300, 0xfeffffff, 0xffffffff, 0x3d0, 0x3d0, 0x3d0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev, @empty, [], [], 'macsec0\x00', 'bond_slave_0\x00', {}, {}, 0x6, 0x0, 0x1}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0x208, 0x230, 0x0, {}, [@common=@unspec=@cpu={{0x28}, {0xff, 0x1}}, @common=@rt={{0x138}, {0x7, [0x7, 0x6], 0x3, 0x8, 0x1, [@loopback, @local, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, @dev={0xfe, 0x80, '\x00', 0x3a}, @private0={0xfc, 0x0, '\x00', 0x1}, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast1, @private0, @mcast1, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, @remote], 0x9}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x500) r6 = socket(0x40000000015, 0x805, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r6) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="000088f888a8dffdffff88a8a00081"], 0x72) socket$inet6_sctp(0xa, 0x5, 0x84) 0s ago: executing program 0 (id=2516): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="b40000001900010000000000000000001d0109004d0011809ed61b77d9f16a96c594a1961ed189d63c3391c4854d66a1452ed6b21920c796c4fb58a76f04811e8a7bda7af3bdb21fcab2d6ca22909ed50d079f0b7120f9b5cb852eaa3c6ad1b9be"], 0xb4}}, 0x0) r1 = socket(0x840000000002, 0x3, 0xff) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r2, 0x29, 0x49, 0x0, 0x0) (async) sendmmsg$inet(r1, &(0x7f0000000b00)=[{{&(0x7f00000001c0)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000240)="a905000000007464000100000001000000e5c0", 0x13}, {&(0x7f0000000180)="82d903bfcb8484b98931c6c599ed9cf57c", 0x11}, {&(0x7f0000000980)="e865f05c7d89be06", 0x8}], 0x3}}], 0x1, 0x0) kernel console output (not intermixed with test programs): erface [ 120.718592][ T7500] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 120.781624][ T7500] bond0 (unregistering): Released all slaves [ 120.890477][ T7517] block nbd0: Unsupported socket: should be TCP or UNIX. [ 121.140646][ T7537] __nla_validate_parse: 14 callbacks suppressed [ 121.140665][ T7537] netlink: 4 bytes leftover after parsing attributes in process `syz.3.435'. [ 121.339888][ T7546] netlink: 72 bytes leftover after parsing attributes in process `syz.0.437'. [ 121.386193][ T7549] netlink: 72 bytes leftover after parsing attributes in process `syz.0.437'. [ 121.443634][ T7546] netlink: 12 bytes leftover after parsing attributes in process `syz.0.437'. [ 121.447359][ T7554] netlink: 40 bytes leftover after parsing attributes in process `syz.1.438'. [ 121.521884][ T7558] validate_nla: 1 callbacks suppressed [ 121.521900][ T7558] netlink: 'syz.1.438': attribute type 1 has an invalid length. [ 121.576227][ T7558] netlink: 224 bytes leftover after parsing attributes in process `syz.1.438'. [ 121.658837][ T7558] NCSI netlink: No device for ifindex 0 [ 121.669138][ T7562] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 121.681522][ T7554] netlink: 8 bytes leftover after parsing attributes in process `syz.1.438'. [ 121.705114][ T7554] netlink: 'syz.1.438': attribute type 1 has an invalid length. [ 121.764093][ T7554] netlink: 224 bytes leftover after parsing attributes in process `syz.1.438'. [ 121.808992][ T7554] NCSI netlink: No device for ifindex 0 [ 121.992653][ T7578] netlink: 'syz.3.444': attribute type 1 has an invalid length. [ 122.034200][ T7576] netlink: 32 bytes leftover after parsing attributes in process `syz.2.443'. [ 122.409956][ T7607] netlink: 44 bytes leftover after parsing attributes in process `syz.2.450'. [ 122.590943][ T7620] netlink: 'syz.3.453': attribute type 1 has an invalid length. [ 122.630817][ T7620] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 122.631775][ T13] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.656699][ T13] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.706535][ T7615] hsr0: entered promiscuous mode [ 122.711934][ T7615] macvlan2: entered allmulticast mode [ 122.757427][ T7615] hsr0: entered allmulticast mode [ 122.816688][ T7615] hsr_slave_0: entered allmulticast mode [ 122.822376][ T7615] hsr_slave_1: entered allmulticast mode [ 122.848559][ T10] IPVS: starting estimator thread 0... [ 122.884924][ T13] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.906944][ T13] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.993542][ T7633] IPVS: using max 34 ests per chain, 81600 per kthread [ 123.438364][ T7673] 8021q: VLANs not supported on ip6tnl0 [ 123.472278][ T7679] 8021q: VLANs not supported on ip6tnl0 [ 123.518841][ T7677] netlink: 'syz.4.467': attribute type 11 has an invalid length. [ 123.653208][ T7686] netlink: 'syz.0.470': attribute type 2 has an invalid length. [ 123.738993][ T7686] 9: entered promiscuous mode [ 123.813375][ T7696] tipc: Started in network mode [ 123.833632][ T7696] tipc: Node identity 02131e2e2d4e, cluster identity 4711 [ 123.851336][ T7696] tipc: Enabled bearer , priority 0 [ 124.079557][ T7698] syzkaller0: entered promiscuous mode [ 124.102845][ T7698] syzkaller0: entered allmulticast mode [ 124.113930][ T7698] tipc: Resetting bearer [ 124.226378][ T49] tipc: Resetting bearer [ 124.241401][ T7726] netlink: 'syz.1.480': attribute type 11 has an invalid length. [ 124.279922][ T7692] tipc: Resetting bearer [ 124.724449][ T3528] wlan0: Trigger new scan to find an IBSS to join [ 125.342378][ T7692] tipc: Disabling bearer [ 125.471248][ T24] tipc: Node number set to 794631726 [ 125.569664][ T7762] ipt_ECN: cannot use operation on non-tcp rule [ 125.592163][ T7762] nbd: must specify at least one socket [ 125.643582][ T7766] nbd: must specify at least one socket [ 126.508768][ T7807] netlink: 'syz.1.497': attribute type 39 has an invalid length. [ 126.638422][ T7818] netlink: 'syz.3.500': attribute type 10 has an invalid length. [ 126.666781][ T7818] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 126.721558][ T5832] Bluetooth: hci4: link tx timeout [ 126.728195][ T5832] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 126.774654][ T7823] __nla_validate_parse: 14 callbacks suppressed [ 126.774670][ T7823] netlink: 12 bytes leftover after parsing attributes in process `syz.4.502'. [ 126.936190][ T5901] IPVS: starting estimator thread 0... [ 127.043156][ T7836] IPVS: using max 29 ests per chain, 69600 per kthread [ 127.154470][ T7849] tipc: Invalid UDP bearer configuration [ 127.154518][ T7849] tipc: Enabling of bearer rejected, failed to enable media [ 127.284432][ T7855] 8021q: adding VLAN 0 to HW filter on device bond0 [ 127.321568][ T7863] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 127.341798][ T7855] bond0: (slave rose0): Enslaving as an active interface with an up link [ 127.429266][ T52] Bluetooth: hci4: link tx timeout [ 127.437187][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 127.542700][ T7876] netlink: 104 bytes leftover after parsing attributes in process `syz.1.514'. [ 127.578057][ T7878] netlink: 7 bytes leftover after parsing attributes in process `syz.2.515'. [ 127.784022][ T3528] wlan0: Trigger new scan to find an IBSS to join [ 128.117234][ T7914] netlink: 8 bytes leftover after parsing attributes in process `syz.0.524'. [ 128.301466][ T52] Bluetooth: hci4: link tx timeout [ 128.307548][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 128.312817][ T7925] netlink: 'syz.2.526': attribute type 1 has an invalid length. [ 128.385123][ T7931] netlink: 8 bytes leftover after parsing attributes in process `syz.3.529'. [ 128.398706][ T7931] netlink: 8 bytes leftover after parsing attributes in process `syz.3.529'. [ 128.408894][ T7931] netlink: 8 bytes leftover after parsing attributes in process `syz.3.529'. [ 128.420067][ T7925] netlink: 224 bytes leftover after parsing attributes in process `syz.2.526'. [ 128.766723][ T7947] netlink: 60 bytes leftover after parsing attributes in process `syz.4.533'. [ 128.803139][ T52] Bluetooth: hci4: command 0x0405 tx timeout [ 129.085538][ T7963] netlink: 8 bytes leftover after parsing attributes in process `syz.1.536'. [ 129.143247][ T7969] batadv_slave_1: entered promiscuous mode [ 129.258512][ T7971] batadv_slave_1: left promiscuous mode [ 130.192305][ T8035] tipc: Can't bind to reserved service type 1 [ 130.414047][ T8049] openvswitch: netlink: Key type 339 is out of range max 32 [ 130.425714][ T8041] bond0 (unregistering): Released all slaves [ 130.803602][ T1311] wlan0: Trigger new scan to find an IBSS to join [ 131.038101][ T8080] netlink: 'syz.2.559': attribute type 5 has an invalid length. [ 131.479657][ T8105] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 131.523405][ T8105] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 131.558325][ T8105] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 131.731466][ T6022] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.761312][ T8118] syzkaller0: entered promiscuous mode [ 131.775366][ T8118] syzkaller0: entered allmulticast mode [ 131.927595][ T8133] __nla_validate_parse: 12 callbacks suppressed [ 131.927617][ T8133] netlink: 20 bytes leftover after parsing attributes in process `syz.2.571'. [ 131.998954][ T8125] netlink: 9 bytes leftover after parsing attributes in process `syz.2.571'. [ 132.009955][ T8136] netlink: 8 bytes leftover after parsing attributes in process `syz.4.573'. [ 132.020478][ T8136] netlink: 24 bytes leftover after parsing attributes in process `syz.4.573'. [ 132.030489][ T8136] netlink: 24 bytes leftover after parsing attributes in process `syz.4.573'. [ 132.098906][ T8139] netlink: 'syz.0.572': attribute type 1 has an invalid length. [ 132.181390][ T8131] bridge1: entered promiscuous mode [ 132.189385][ T8131] bridge1: entered allmulticast mode [ 132.199203][ T8131] team0: Port device bridge1 added [ 132.222092][ T8137] bridge0: port 3(team0) entered blocking state [ 132.230940][ T8137] bridge0: port 3(team0) entered disabled state [ 132.240937][ T8137] team0: entered allmulticast mode [ 132.253879][ T8137] team_slave_1: entered allmulticast mode [ 132.264262][ T8137] team0: entered promiscuous mode [ 132.269524][ T8137] team_slave_1: entered promiscuous mode [ 132.277543][ T8137] bridge0: port 3(team0) entered blocking state [ 132.284112][ T8137] bridge0: port 3(team0) entered forwarding state [ 132.368563][ T8139] 8021q: adding VLAN 0 to HW filter on device bond1 [ 132.390131][ T8142] bond1: (slave gretap1): making interface the new active one [ 132.406772][ T8147] netlink: 8 bytes leftover after parsing attributes in process `syz.3.575'. [ 132.425245][ T8142] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 132.448557][ T8143] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 132.553529][ T8161] netlink: 8 bytes leftover after parsing attributes in process `syz.2.577'. [ 132.646637][ T8166] netlink: 'syz.0.579': attribute type 4 has an invalid length. [ 132.732805][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.844550][ T8170] dummy0: entered promiscuous mode [ 133.096365][ T8194] netlink: 12 bytes leftover after parsing attributes in process `syz.0.586'. [ 133.126321][ T8194] block nbd0: Unsupported socket: should be TCP or UNIX. [ 133.138784][ T8193] syzkaller0: entered promiscuous mode [ 133.144919][ T8193] syzkaller0: entered allmulticast mode [ 133.215575][ T8193] netlink: 'syz.4.588': attribute type 4 has an invalid length. [ 133.417417][ T8211] netlink: 44 bytes leftover after parsing attributes in process `syz.2.590'. [ 133.628008][ T8201] netlink: 28 bytes leftover after parsing attributes in process `syz.3.587'. [ 133.653284][ T8224] netlink: 'syz.0.594': attribute type 10 has an invalid length. [ 133.674781][ T8224] vxcan1: entered promiscuous mode [ 133.680329][ T8224] vxcan1: entered allmulticast mode [ 133.688282][ T8224] team0: Device vxcan1 is of different type [ 134.208343][ T8248] tipc: Started in network mode [ 134.215445][ T8248] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 134.227725][ T8248] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 134.280419][ T8248] tipc: Enabled bearer , priority 10 [ 134.289092][ T8254] vxcan1 speed is unknown, defaulting to 1000 [ 134.296760][ T8254] vxcan1 speed is unknown, defaulting to 1000 [ 134.304179][ T8254] vxcan1 speed is unknown, defaulting to 1000 [ 134.321616][ T8250] netlink: 'syz.2.601': attribute type 3 has an invalid length. [ 134.370928][ T8250] netlink: 'syz.2.601': attribute type 1 has an invalid length. [ 134.859955][ T8254] infiniband syz2: set active [ 134.873883][ T8254] infiniband syz2: added vxcan1 [ 134.894859][ T5903] vxcan1 speed is unknown, defaulting to 1000 [ 134.975511][ T8254] RDS/IB: syz2: added [ 134.986544][ T8254] smc: adding ib device syz2 with port count 1 [ 135.042108][ T8254] smc: ib device syz2 port 1 has no pnetid [ 135.104905][ T24] vxcan1 speed is unknown, defaulting to 1000 [ 135.115126][ T8254] vxcan1 speed is unknown, defaulting to 1000 [ 135.240136][ T8300] delete_channel: no stack [ 135.424284][ T24] tipc: Node number set to 1 [ 136.262966][ T8254] vxcan1 speed is unknown, defaulting to 1000 [ 136.309912][ T8369] ipt_REJECT: ECHOREPLY no longer supported. [ 136.435114][ T8369] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 136.841488][ T8254] vxcan1 speed is unknown, defaulting to 1000 [ 136.871278][ T8396] block nbd0: Unsupported socket: should be TCP or UNIX. [ 136.971672][ T8403] __nla_validate_parse: 11 callbacks suppressed [ 136.971688][ T8403] netlink: 56 bytes leftover after parsing attributes in process `syz.0.637'. [ 137.034702][ T8404] ip6gre1: entered promiscuous mode [ 137.040330][ T8404] ip6gre1: entered allmulticast mode [ 137.054858][ T8405] netlink: 232 bytes leftover after parsing attributes in process `syz.0.637'. [ 137.095272][ T8404] team0: Device ip6gre1 is of different type [ 137.183778][ T8396] "syz.1.634" (8396) uses obsolete ecb(arc4) skcipher [ 137.187118][ T8414] netlink: 8 bytes leftover after parsing attributes in process `syz.3.639'. [ 137.267564][ T8421] pim6reg: entered allmulticast mode [ 137.596857][ T8254] vxcan1 speed is unknown, defaulting to 1000 [ 138.028601][ T8466] netlink: 4 bytes leftover after parsing attributes in process `syz.1.646'. [ 138.173251][ T8466] hsr_slave_0: left promiscuous mode [ 138.225520][ T8466] hsr_slave_1: left promiscuous mode [ 138.284441][ T8254] vxcan1 speed is unknown, defaulting to 1000 [ 138.468996][ T8484] IPVS: set_ctl: invalid protocol: 2 255.255.255.255:20000 [ 138.479444][ T8483] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 138.481986][ T8485] xt_CT: You must specify a L4 protocol and not use inversions on it [ 138.713890][ T8498] netlink: 'syz.3.654': attribute type 1 has an invalid length. [ 138.825303][ T8498] 8021q: adding VLAN 0 to HW filter on device bond4 [ 138.887967][ T8505] bond4: (slave geneve3): making interface the new active one [ 138.905510][ T8505] bond4: (slave geneve3): Enslaving as an active interface with an up link [ 139.001261][ T36] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 139.095939][ T36] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 139.112636][ T36] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 139.172623][ T36] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 139.263745][ T8521] netlink: 152 bytes leftover after parsing attributes in process `syz.0.657'. [ 139.300426][ T8518] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 139.329376][ T8513] ip_vti0: left allmulticast mode [ 139.371453][ T8513] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 139.637361][ T8562] netlink: 72 bytes leftover after parsing attributes in process `syz.0.667'. [ 139.735644][ T8565] netlink: 20 bytes leftover after parsing attributes in process `syz.3.670'. [ 139.891821][ T8574] netlink: 'syz.1.673': attribute type 10 has an invalid length. [ 139.961042][ T8574] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 140.174312][ T8594] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.208429][ T8594] netlink: 20 bytes leftover after parsing attributes in process `syz.1.680'. [ 140.251552][ T8602] netlink: 12 bytes leftover after parsing attributes in process `syz.0.682'. [ 140.333359][ T8606] tipc: Started in network mode [ 140.352768][ T8606] tipc: Node identity ac14140f, cluster identity 4711 [ 140.370614][ T8606] tipc: New replicast peer: 255.255.255.255 [ 140.387272][ T8606] tipc: Enabled bearer , priority 10 [ 140.456364][ T8620] netlink: 'syz.3.685': attribute type 1 has an invalid length. [ 140.853060][ T8638] netlink: 1196 bytes leftover after parsing attributes in process `syz.4.691'. [ 140.880048][ T8641] sock: sock_timestamping_bind_phc: sock not bind to device [ 140.914906][ T8643] netlink: 'syz.0.694': attribute type 29 has an invalid length. [ 141.502644][ T24] tipc: Node number set to 2886997007 [ 141.531489][ T8675] netlink: 'syz.0.702': attribute type 1 has an invalid length. [ 141.539725][ T8675] netlink: 'syz.0.702': attribute type 3 has an invalid length. [ 141.557499][ T8675] syzkaller0: entered promiscuous mode [ 141.563689][ T8675] syzkaller0: entered allmulticast mode [ 141.985089][ T8701] netlink: 'syz.2.709': attribute type 12 has an invalid length. [ 142.048806][ T8701] bond3: option primary_reselect: invalid value (255) [ 142.061190][ T8701] bond3 (unregistering): Released all slaves [ 142.171556][ T8708] __nla_validate_parse: 38 callbacks suppressed [ 142.171575][ T8708] netlink: 4 bytes leftover after parsing attributes in process `syz.0.710'. [ 142.589515][ T8735] netlink: 'syz.2.716': attribute type 32 has an invalid length. [ 142.631438][ T8735] netlink: 8 bytes leftover after parsing attributes in process `syz.2.716'. [ 142.853847][ T8735] bond3: option coupled_control: invalid value (52) [ 142.915627][ T8735] bond3 (unregistering): Released all slaves [ 143.034188][ T8750] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 143.243884][ T8765] raw_sendmsg: syz.2.726 forgot to set AF_INET. Fix it! [ 143.471070][ T8767] netlink: 'syz.3.725': attribute type 29 has an invalid length. [ 143.663138][ T30] audit: type=1804 audit(1773890884.909:4): pid=8780 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.728" name="/newroot/139/cgroup.controllers" dev="tmpfs" ino=726 res=1 errno=0 [ 143.722854][ T8781] sctp: [Deprecated]: syz.0.730 (pid 8781) Use of struct sctp_assoc_value in delayed_ack socket option. [ 143.722854][ T8781] Use struct sctp_sack_info instead [ 143.759231][ T30] audit: type=1800 audit(1773890884.919:5): pid=8780 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.728" name="cgroup.controllers" dev="tmpfs" ino=726 res=0 errno=0 [ 143.879768][ T8791] netlink: 'syz.1.732': attribute type 39 has an invalid length. [ 144.097547][ T8796] netlink: 'syz.3.733': attribute type 1 has an invalid length. [ 144.125785][ T8796] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 144.346140][ T8809] netlink: 20 bytes leftover after parsing attributes in process `syz.1.736'. [ 144.638230][ T8825] netlink: 224 bytes leftover after parsing attributes in process `syz.1.740'. [ 144.795090][ T8834] netlink: 4 bytes leftover after parsing attributes in process `syz.3.743'. [ 144.828549][ T8834] bond5: Invalid ad_actor_system MAC address. [ 144.834848][ T8834] bond5: option ad_actor_system: invalid value (1) [ 144.856291][ T8834] bond5 (unregistering): Released all slaves [ 145.360526][ T8860] only policy match revision 0 supported [ 145.360547][ T8860] unable to load match [ 145.401959][ T8865] only policy match revision 0 supported [ 145.401977][ T8865] unable to load match [ 145.446691][ T8868] netlink: 64 bytes leftover after parsing attributes in process `syz.2.749'. [ 145.500587][ T8868] netlink: 'syz.2.749': attribute type 18 has an invalid length. [ 145.553220][ T8872] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.749'. [ 145.558251][ T8868] netlink: 4 bytes leftover after parsing attributes in process `syz.2.749'. [ 145.638753][ T8868] netlink: 'syz.2.749': attribute type 18 has an invalid length. [ 145.648833][ T8878] openvswitch: netlink: IP tunnel dst address not specified [ 145.668199][ T8878] netlink: 24 bytes leftover after parsing attributes in process `syz.3.752'. [ 145.677081][ T8868] netlink: 4 bytes leftover after parsing attributes in process `syz.2.749'. [ 145.913547][ T8886] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 145.957786][ T8889] team1: entered promiscuous mode [ 145.987869][ T8889] team1: entered allmulticast mode [ 146.168645][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 146.268618][ T8901] xt_l2tp: v2 sid > 0xffff: 1114112 [ 146.536547][ T8917] lo speed is unknown, defaulting to 1000 [ 147.014451][ T8937] xt_connbytes: Forcing CT accounting to be enabled [ 147.248881][ T8917] vxcan1 speed is unknown, defaulting to 1000 [ 147.437664][ T8960] bond5: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 147.459608][ T8960] bond5: (slave lo): Enslaving as an active interface with an up link [ 147.470477][ T8960] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 147.611297][ T8967] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 147.654943][ T8967] __nla_validate_parse: 2 callbacks suppressed [ 147.654961][ T8967] netlink: 44 bytes leftover after parsing attributes in process `syz.1.775'. [ 147.829911][ T8977] netlink: 24 bytes leftover after parsing attributes in process `syz.1.777'. [ 147.881871][ T8978] netlink: 4 bytes leftover after parsing attributes in process `syz.1.777'. [ 148.150820][ T8990] netlink: 60 bytes leftover after parsing attributes in process `syz.2.779'. [ 148.230041][ T8998] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 149.098029][ T9024] netlink: 48 bytes leftover after parsing attributes in process `syz.4.786'. [ 149.239934][ T9027] siw: device registration error -23 [ 149.275497][ T9027] dvmrp0: entered allmulticast mode [ 149.355754][ T9035] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 149.399114][ T9039] netlink: 'syz.0.793': attribute type 1 has an invalid length. [ 149.407109][ T9039] netlink: 'syz.0.793': attribute type 4 has an invalid length. [ 149.414196][ T9036] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 149.416186][ T9039] netlink: 9422 bytes leftover after parsing attributes in process `syz.0.793'. [ 149.567493][ T9047] netlink: 32 bytes leftover after parsing attributes in process `syz.1.796'. [ 149.597223][ T9047] netlink: 8 bytes leftover after parsing attributes in process `syz.1.796'. [ 149.616141][ T9047] netlink: 4 bytes leftover after parsing attributes in process `syz.1.796'. [ 149.626688][ T9047] netlink: 'syz.1.796': attribute type 14 has an invalid length. [ 149.636650][ T9047] netlink: 'syz.1.796': attribute type 13 has an invalid length. [ 150.211534][ T9079] netlink: 40 bytes leftover after parsing attributes in process `syz.3.805'. [ 150.293922][ T9082] netlink: 'syz.2.807': attribute type 1 has an invalid length. [ 150.399384][ T9082] 8021q: adding VLAN 0 to HW filter on device bond4 [ 150.439159][ T9082] bond4: (slave geneve2): making interface the new active one [ 150.465441][ T9082] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 150.527532][ T9090] vlan2: entered promiscuous mode [ 150.534557][ T9090] vlan2: entered allmulticast mode [ 150.539783][ T9090] hsr_slave_1: entered allmulticast mode [ 151.243984][ T24] vxcan1 speed is unknown, defaulting to 1000 [ 151.550313][ T9153] openvswitch: netlink: Duplicate key (type 2). [ 151.839007][ T9162] ieee802154 phy0 wpan0: encryption failed: -22 [ 152.327061][ T9190] bond3: option fail_over_mac: invalid value (16) [ 152.344774][ T9190] bond3 (unregistering): Released all slaves [ 152.750666][ T9220] __nla_validate_parse: 5 callbacks suppressed [ 152.750686][ T9220] netlink: 12 bytes leftover after parsing attributes in process `syz.4.841'. [ 152.791458][ T9223] netlink: 12 bytes leftover after parsing attributes in process `syz.1.842'. [ 152.842048][ T9228] netlink: 64 bytes leftover after parsing attributes in process `syz.3.844'. [ 152.969472][ T9236] netlink: 80 bytes leftover after parsing attributes in process `syz.0.845'. [ 152.983179][ T9236] netlink: 80 bytes leftover after parsing attributes in process `syz.0.845'. [ 153.015415][ T9236] netlink: 80 bytes leftover after parsing attributes in process `syz.0.845'. [ 153.204441][ T9246] gre1: entered promiscuous mode [ 153.219018][ T9246] gre1: entered allmulticast mode [ 153.241432][ T9251] netlink: 'syz.1.848': attribute type 1 has an invalid length. [ 153.372215][ T9250] ipvlan2: entered allmulticast mode [ 153.408336][ T9250] batadv_slave_1: entered allmulticast mode [ 153.418531][ T9250] batman_adv: batadv0: Adding interface: ipvlan2 [ 153.425701][ T9250] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 153.455481][ T9250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.467606][ T9250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.481062][ T9250] batman_adv: batadv0: Interface activated: ipvlan2 [ 153.490126][ T9260] veth0: entered promiscuous mode [ 153.499260][ T9260] netlink: 4 bytes leftover after parsing attributes in process `syz.1.853'. [ 153.638734][ T9267] syzkaller0: entered promiscuous mode [ 153.644385][ T9267] syzkaller0: entered allmulticast mode [ 153.700222][ T9271] netlink: 104 bytes leftover after parsing attributes in process `syz.0.856'. [ 153.770987][ T9274] netlink: 4 bytes leftover after parsing attributes in process `syz.0.856'. [ 153.837859][ T9271] macvtap0: entered promiscuous mode [ 153.847040][ T9271] netlink: 4 bytes leftover after parsing attributes in process `syz.0.856'. [ 154.036116][ T9294] netlink: 'syz.1.861': attribute type 2 has an invalid length. [ 154.045386][ T9271] veth0_macvtap: left promiscuous mode [ 154.089276][ T9296] netlink: 'syz.3.863': attribute type 58 has an invalid length. [ 154.116620][ T9271] macvtap0 (unregistering): left promiscuous mode [ 154.201154][ T9294] 9: entered promiscuous mode [ 154.381908][ T9306] SET target dimension over the limit! [ 154.762272][ T9326] netlink: 'syz.4.872': attribute type 2 has an invalid length. [ 154.985244][ T9316] syzkaller0: entered promiscuous mode [ 154.990886][ T9316] syzkaller0: entered allmulticast mode [ 156.130749][ T9346] macvtap0: entered promiscuous mode [ 156.138941][ T9347] veth0_macvtap: left promiscuous mode [ 156.158420][ T9347] macvtap0 (unregistering): left promiscuous mode [ 156.209809][ T9356] macvtap0: entered promiscuous mode [ 156.221724][ T9356] macvtap0: left promiscuous mode [ 156.414924][ T9367] netlink: 'syz.4.886': attribute type 1 has an invalid length. [ 156.451316][ T9362] syzkaller0: entered promiscuous mode [ 156.462492][ T9362] syzkaller0: entered allmulticast mode [ 156.616056][ T9377] netlink: 'syz.2.889': attribute type 9 has an invalid length. [ 156.721581][ T9381] lo speed is unknown, defaulting to 1000 [ 156.839298][ T9388] netlink: 'syz.4.892': attribute type 2 has an invalid length. [ 156.975082][ T9396] erspan0: entered allmulticast mode [ 157.067611][ T9381] vxcan1 speed is unknown, defaulting to 1000 [ 157.383162][ T9411] x_tables: duplicate underflow at hook 3 [ 158.257587][ T9447] __nla_validate_parse: 14 callbacks suppressed [ 158.257606][ T9447] netlink: 4 bytes leftover after parsing attributes in process `syz.2.911'. [ 158.311182][ T9447] netlink: 8 bytes leftover after parsing attributes in process `syz.2.911'. [ 158.371116][ T9447] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 158.667273][ T9457] netlink: 48 bytes leftover after parsing attributes in process `syz.4.915'. [ 158.927971][ T9471] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 159.083202][ T9472] netlink: 'syz.0.920': attribute type 1 has an invalid length. [ 159.103792][ T9472] netlink: 'syz.0.920': attribute type 2 has an invalid length. [ 159.117417][ T9472] netlink: 'syz.0.920': attribute type 1 has an invalid length. [ 159.129411][ T9478] siw: device registration error -23 [ 159.176415][ T9472] netlink: 16 bytes leftover after parsing attributes in process `syz.0.920'. [ 159.200242][ T9474] gre0: entered promiscuous mode [ 159.251716][ T9474] gre0: entered allmulticast mode [ 159.538582][ T9503] netlink: 7 bytes leftover after parsing attributes in process `syz.0.930'. [ 159.575830][ T9503] IPv6: NLM_F_CREATE should be specified when creating new route [ 159.902076][ T9533] siw: device registration error -23 [ 160.124488][ T9548] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 160.147217][ T9548] netlink: 20 bytes leftover after parsing attributes in process `syz.4.943'. [ 160.160226][ T9554] netlink: 224 bytes leftover after parsing attributes in process `syz.2.942'. [ 160.481491][ T9575] netlink: 8 bytes leftover after parsing attributes in process `syz.3.951'. [ 160.506105][ T9575] macvlan2: entered allmulticast mode [ 160.511738][ T9575] hsr0: entered allmulticast mode [ 160.517866][ T9575] hsr_slave_0: entered allmulticast mode [ 160.543854][ T9575] hsr_slave_1: entered allmulticast mode [ 160.630749][ T9575] netlink: 'syz.3.951': attribute type 1 has an invalid length. [ 160.652214][ T9575] netlink: 12 bytes leftover after parsing attributes in process `syz.3.951'. [ 160.689575][ T9586] siw: device registration error -23 [ 160.822966][ T9593] netlink: 8 bytes leftover after parsing attributes in process `syz.4.954'. [ 160.985907][ T9601] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 161.033363][ T9602] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 161.042137][ T9589] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 161.498749][ T9632] tipc: Enabled bearer , priority 0 [ 161.520107][ T9632] syzkaller0: entered promiscuous mode [ 161.534271][ T9632] syzkaller0: entered allmulticast mode [ 161.620043][ T9632] tipc: Resetting bearer [ 161.687761][ T9631] tipc: Resetting bearer [ 161.745503][ T9631] tipc: Disabling bearer [ 161.925696][ T9654] syzkaller0: entered promiscuous mode [ 161.938633][ T9654] syzkaller0: entered allmulticast mode [ 162.258960][ T9671] netlink: 'syz.0.975': attribute type 3 has an invalid length. [ 162.555048][ T9690] syzkaller0: entered promiscuous mode [ 162.576317][ T9690] syzkaller0: entered allmulticast mode [ 162.627662][ T30] audit: type=1107 audit(1773890903.889:6): pid=9694 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='bîU8ûÿÄ·þ*v-.ëg¦q°IŒ’å†m•?Ú1 Ëlè#Sš†o)Ûµ–œ€§ùÿûÛ?óÞÃÕŽVORÙ+ƒæ!°3-:JîàIäÏÝ®£Yh9¡l1¨' [ 162.839866][ T9704] netlink: 'syz.2.988': attribute type 1 has an invalid length. [ 162.982070][ T9697] tc_dump_action: action bad kind [ 163.025213][ T9710] bond6: (slave geneve3): making interface the new active one [ 163.033278][ T9710] bond6: (slave geneve3): Enslaving as an active interface with an up link [ 163.042091][ T127] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 163.059512][ T127] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 163.074438][ T127] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 163.083867][ T127] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 163.396832][ T9740] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32) [ 163.409787][ T9741] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32) [ 163.448690][ T9743] __nla_validate_parse: 5 callbacks suppressed [ 163.448705][ T9743] netlink: 104 bytes leftover after parsing attributes in process `syz.0.998'. [ 163.516918][ T9746] netlink: 'syz.2.1000': attribute type 10 has an invalid length. [ 163.543915][ T9746] netlink: 396 bytes leftover after parsing attributes in process `syz.2.1000'. [ 163.759155][ T9758] netlink: 10 bytes leftover after parsing attributes in process `syz.4.1003'. [ 163.925979][ T9763] x_tables: duplicate underflow at hook 2 [ 164.018013][ T9769] netlink: 116 bytes leftover after parsing attributes in process `syz.4.1007'. [ 164.379771][ T9798] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1013'. [ 164.613486][ T9811] tipc: Enabling of bearer rejected, media not registered [ 164.644064][ T9813] netlink: 'syz.2.1020': attribute type 5 has an invalid length. [ 164.991088][ T9829] lo speed is unknown, defaulting to 1000 [ 165.006031][ T9839] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 165.053820][ T9837] syzkaller0: entered promiscuous mode [ 165.107253][ T9837] syzkaller0: entered allmulticast mode [ 165.337921][ T9829] vxcan1 speed is unknown, defaulting to 1000 [ 166.000445][ T9887] netlink: 'syz.4.1033': attribute type 4 has an invalid length. [ 166.442259][ T9898] xt_hashlimit: size too large, truncated to 1048576 [ 166.487068][ T9905] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1037'. [ 166.514011][ T9912] ipt_REJECT: TCP_RESET invalid for non-tcp [ 166.521910][ T9916] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1039'. [ 166.585397][ T9916] IPv6: NLM_F_CREATE should be specified when creating new route [ 167.075537][ T9942] netlink: 'syz.0.1042': attribute type 1 has an invalid length. [ 167.130970][ T9942] netlink: 544 bytes leftover after parsing attributes in process `syz.0.1042'. [ 167.521171][ T9966] netlink: 'syz.0.1048': attribute type 4 has an invalid length. [ 167.533060][ T9967] netlink: 'syz.4.1046': attribute type 4 has an invalid length. [ 167.543916][ T9968] netlink: 356 bytes leftover after parsing attributes in process `syz.1.1047'. [ 167.910905][ T9982] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1050'. [ 168.183650][ T9990] syzkaller0: entered promiscuous mode [ 168.252663][T10010] netlink: 'syz.2.1054': attribute type 1 has an invalid length. [ 168.286356][T10010] netlink: 'syz.2.1054': attribute type 1 has an invalid length. [ 168.487087][T10026] netlink: 'syz.1.1058': attribute type 4 has an invalid length. [ 168.755216][T10044] netlink: 'syz.0.1061': attribute type 4 has an invalid length. [ 168.777520][T10045] __nla_validate_parse: 3 callbacks suppressed [ 168.777538][T10045] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1063'. [ 168.853699][T10046] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1063'. [ 168.897718][T10050] lo: Caught tx_queue_len zero misconfig [ 169.185172][T10059] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 169.204344][T10059] syzkaller1: linktype set to 823 [ 169.667193][T10093] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1080'. [ 169.733795][ T24] hid-generic 0005:04F3:0000.0001: item fetching failed at offset 0/1 [ 169.773099][ T24] hid-generic 0005:04F3:0000.0001: probe with driver hid-generic failed with error -22 [ 169.990334][T10118] netlink: 232 bytes leftover after parsing attributes in process `syz.3.1085'. [ 170.165647][T10129] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1086'. [ 170.280775][T10129] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1086'. [ 170.332194][T10132] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1086'. [ 170.729388][T10162] xt_hashlimit: invalid rate [ 170.787246][T10157] can: request_module (can-proto-0) failed. [ 171.052115][T10171] Cannot find del_set index 4 as target [ 171.109415][T10175] netlink: 'syz.1.1099': attribute type 1 has an invalid length. [ 171.150598][T10175] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.1099'. [ 171.175401][T10175] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1099'. [ 171.248212][T10179] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1100'. [ 171.858744][T10211] xt_connbytes: Forcing CT accounting to be enabled [ 172.363203][T10242] vlan3: entered promiscuous mode [ 172.368369][T10242] geneve1: entered promiscuous mode [ 172.413592][T10242] vlan3: entered allmulticast mode [ 172.423168][T10242] geneve1: entered allmulticast mode [ 172.440854][T10249] netlink: 'syz.1.1123': attribute type 3 has an invalid length. [ 172.776158][T10269] bridge3: entered promiscuous mode [ 172.792578][T10269] bridge3: entered allmulticast mode [ 172.801555][T10269] team0: Port device bridge3 added [ 173.376619][T10309] netlink: 'syz.1.1140': attribute type 32 has an invalid length. [ 173.575618][T10325] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 173.706629][T10329] af_packet: tpacket_rcv: packet too big, clamped from 4064 to 3952. macoff=96 [ 173.914026][T10345] __nla_validate_parse: 19 callbacks suppressed [ 173.914053][T10345] netlink: 27 bytes leftover after parsing attributes in process `syz.0.1149'. [ 174.033218][T10351] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1150'. [ 174.060641][T10353] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1151'. [ 174.489548][T10371] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1159'. [ 174.555333][T10369] delete_channel: no stack [ 174.758925][T10380] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 175.227469][T10399] veth5: entered allmulticast mode [ 175.234457][T10401] mac80211_hwsim hwsim11 ÿ: renamed from wlan1 (while UP) [ 175.352128][T10404] netlink: 'syz.1.1170': attribute type 20 has an invalid length. [ 175.361513][T10404] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1170'. [ 175.378628][T10404] netlink: 'syz.1.1170': attribute type 20 has an invalid length. [ 175.387114][T10404] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1170'. [ 175.399150][ T12] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 175.408533][ T12] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 175.423740][ T12] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 175.450478][ T12] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 175.633417][T10383] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 175.922736][T10435] netlink: 'syz.0.1179': attribute type 13 has an invalid length. [ 175.930707][T10435] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1179'. [ 175.949818][ T12] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 175.950151][T10435] netlink: 'syz.0.1179': attribute type 13 has an invalid length. [ 175.969122][ T12] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 175.976169][T10435] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1179'. [ 175.987477][ T12] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 175.996569][ T12] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 176.193922][T10445] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1182'. [ 176.205945][T10446] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1182'. [ 176.266172][T10448] bond0: entered promiscuous mode [ 176.271372][T10448] bond_slave_0: entered promiscuous mode [ 176.280845][T10448] bond_slave_1: entered promiscuous mode [ 176.288704][T10448] gretap0: entered promiscuous mode [ 176.296412][T10448] debugfs: 'hsr1' already exists in 'hsr' [ 176.302323][T10448] Cannot create hsr debugfs directory [ 176.307894][T10448] hsr1: entered promiscuous mode [ 176.363471][ T5832] Bluetooth: hci4: link tx timeout [ 176.368695][ T5832] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 176.582326][T10464] netlink: 'syz.2.1187': attribute type 4 has an invalid length. [ 176.686404][T10466] 8021q: VLANs not supported on gre0 [ 176.882956][ T52] Bluetooth: hci1: command 0x0401 tx timeout [ 177.046197][T10497] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 177.260482][T10513] netlink: 'syz.4.1202': attribute type 1 has an invalid length. [ 177.739290][T10541] lo: Caught tx_queue_len zero misconfig [ 177.748836][T10541] netem: change failed [ 177.768600][T10541] IPv6: addrconf: prefix option has invalid lifetime [ 177.911709][T10547] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 178.309042][T10567] netlink: 'syz.2.1219': attribute type 12 has an invalid length. [ 178.402875][ T52] Bluetooth: hci4: command 0x0405 tx timeout [ 178.760174][T10597] 8021q: VLANs not supported on gre0 [ 178.945288][T10607] openvswitch: netlink: EtherType 50a is less than min 600 [ 178.960174][T10604] netlink: 'syz.4.1226': attribute type 1 has an invalid length. [ 178.981526][T10607] netlink: 'syz.3.1229': attribute type 1 has an invalid length. [ 178.984016][T10604] __nla_validate_parse: 11 callbacks suppressed [ 178.984083][T10604] netlink: 476 bytes leftover after parsing attributes in process `syz.4.1226'. [ 179.010772][T10604] netlink: 1041 bytes leftover after parsing attributes in process `syz.4.1226'. [ 179.088442][T10612] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1230'. [ 179.212327][T10617] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1232'. [ 179.247786][T10619] syzkaller0: entered allmulticast mode [ 179.395281][T10617] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.403135][T10617] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.425397][T10622] netlink: 'syz.0.1234': attribute type 1 has an invalid length. [ 179.589516][T10633] netlink: 'syz.2.1236': attribute type 1 has an invalid length. [ 179.601055][T10617] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 179.636341][T10638] xt_CT: You must specify a L4 protocol and not use inversions on it [ 179.644629][T10637] netlink: 'syz.2.1236': attribute type 1 has an invalid length. [ 179.869564][T10628] ip6tnl0: Caught tx_queue_len zero misconfig [ 179.921819][T10633] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 179.925871][T10637] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 179.940718][T10653] netlink: 'syz.3.1237': attribute type 4 has an invalid length. [ 179.976296][T10622] bond3: (slave vcan1): The slave device specified does not support setting the MAC address [ 179.998808][T10622] bond3: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 180.019694][T10659] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1238'. [ 180.058281][T10622] bond3: (slave vcan1): making interface the new active one [ 180.072137][T10622] bond3: (slave vcan1): Enslaving as an active interface with an up link [ 180.491361][T10676] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 180.575791][T10676] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 180.688407][T10689] delete_channel: no stack [ 180.729326][T10690] bond7: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 180.747839][T10690] bond7 (unregistering): Released all slaves [ 180.878879][T10696] netlink: 'syz.2.1246': attribute type 3 has an invalid length. [ 180.887456][T10698] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 181.063195][T10707] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 181.260230][T10716] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 181.280905][T10716] bond2: (slave lo): Enslaving as an active interface with an up link [ 181.343416][T10716] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 181.458112][ T5901] lo speed is unknown, defaulting to 1000 [ 181.464541][ T5901] syz0: Port: 1 Link ACTIVE [ 181.469134][ T5901] lo speed is unknown, defaulting to 1000 [ 181.544938][T10728] netdevsim netdevsim4: Direct firmware load for  failed with error -2 [ 181.553993][T10728] netdevsim netdevsim4: Falling back to sysfs fallback for:  [ 181.616980][T10732] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1252'. [ 181.667283][T10739] netlink: 'syz.4.1251': attribute type 4 has an invalid length. [ 181.835005][T10749] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1257'. [ 181.849413][T10749] 8021q: VLANs not supported on ip_vti0 [ 181.937910][T10752] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1258'. [ 181.989128][T10756] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1259'. [ 182.041130][T10758] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1259'. [ 182.163488][T10763] macvtap1: entered promiscuous mode [ 182.179252][T10763] macvtap1: entered allmulticast mode [ 182.189203][T10763] veth1_vlan: entered allmulticast mode [ 182.208773][T10758] bridge4: port 1(veth0_to_bond) entered blocking state [ 182.242648][T10758] bridge4: port 1(veth0_to_bond) entered disabled state [ 182.274212][T10758] veth0_to_bond: entered allmulticast mode [ 182.295136][T10758] veth0_to_bond: entered promiscuous mode [ 182.345346][T10769] syz_tun: entered allmulticast mode [ 182.414991][T10769] syz_tun: entered promiscuous mode [ 182.478329][T10768] syz_tun: left allmulticast mode [ 183.320919][T10825] netlink: 'syz.1.1277': attribute type 1 has an invalid length. [ 183.526800][T10826] bond3: (slave geneve3): making interface the new active one [ 183.537732][T10826] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 183.566988][ T127] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 183.586367][ T127] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 183.596132][ T127] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 183.605725][ T127] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 184.170926][T10871] __nla_validate_parse: 5 callbacks suppressed [ 184.170945][T10871] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1290'. [ 184.451883][T10885] tipc: Enabled bearer , priority 2 [ 184.489894][T10885] tipc: Enabling of bearer rejected, already enabled [ 184.539484][T10856] pim6reg: entered allmulticast mode [ 184.545352][T10885] tipc: Enabling of bearer rejected, already enabled [ 184.590326][T10885] tipc: Enabling of bearer rejected, already enabled [ 184.640849][T10885] tipc: Enabling of bearer rejected, already enabled [ 184.666183][T10885] tipc: Enabling of bearer rejected, already enabled [ 184.690933][T10898] netlink: 'syz.3.1297': attribute type 11 has an invalid length. [ 184.710558][T10885] tipc: Enabling of bearer rejected, already enabled [ 184.755573][T10885] tipc: Enabling of bearer rejected, already enabled [ 184.795315][T10885] tipc: Enabling of bearer rejected, already enabled [ 184.823521][T10885] tipc: Enabling of bearer rejected, already enabled [ 184.825237][T10900] netlink: 'syz.4.1298': attribute type 15 has an invalid length. [ 184.843199][T10885] tipc: Enabling of bearer rejected, already enabled [ 184.905293][T10885] tipc: Enabling of bearer rejected, already enabled [ 184.916491][T10885] tipc: Enabling of bearer rejected, already enabled [ 184.934179][T10885] tipc: Enabling of bearer rejected, already enabled [ 185.002570][T10885] tipc: Enabling of bearer rejected, already enabled [ 185.012067][T10885] tipc: Enabling of bearer rejected, already enabled [ 185.062607][T10885] tipc: Enabling of bearer rejected, already enabled [ 185.083172][T10885] tipc: Enabling of bearer rejected, already enabled [ 185.105816][T10909] vcan1: entered promiscuous mode [ 185.111504][T10909] vcan1: entered allmulticast mode [ 185.135189][T10885] tipc: Enabling of bearer rejected, already enabled [ 185.144724][T10885] tipc: Enabling of bearer rejected, already enabled [ 185.206814][T10904] syzkaller0: entered promiscuous mode [ 185.216274][T10904] syzkaller0: entered allmulticast mode [ 185.255517][T10885] tipc: Enabling of bearer rejected, already enabled [ 185.293003][T10904] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1300'. [ 185.676750][T10948] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1309'. [ 186.414557][T10932] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1306'. [ 186.554718][T10956] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1311'. [ 186.581916][T10958] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1312'. [ 186.605034][T10956] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1311'. [ 186.683910][T10962] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1312'. [ 186.702829][T10965] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 186.736381][T10958] bridge5: port 1(erspan0) entered blocking state [ 186.773586][T10958] bridge5: port 1(erspan0) entered disabled state [ 186.781964][T10958] erspan0: entered allmulticast mode [ 186.792005][T10958] erspan0: entered promiscuous mode [ 186.800292][T10958] bridge5: port 1(erspan0) entered blocking state [ 186.807207][T10958] bridge5: port 1(erspan0) entered forwarding state [ 186.816242][T10971] batman_adv: batadv0: Adding interface: dummy0 [ 186.822663][T10971] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 186.850330][T10971] batman_adv: batadv0: Interface activated: dummy0 [ 186.879283][T10968] FAULT_INJECTION: forcing a failure. [ 186.879283][T10968] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 186.906019][T10968] CPU: 1 UID: 0 PID: 10968 Comm: syz.1.1317 Not tainted syzkaller #0 PREEMPT(full) [ 186.906048][T10968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 186.906060][T10968] Call Trace: [ 186.906068][T10968] [ 186.906076][T10968] dump_stack_lvl+0xe8/0x150 [ 186.906108][T10968] should_fail_ex+0x412/0x560 [ 186.906138][T10968] _copy_from_user+0x2d/0xb0 [ 186.906169][T10968] ___sys_sendmsg+0x1c6/0x360 [ 186.906195][T10968] ? __pfx____sys_sendmsg+0x10/0x10 [ 186.906259][T10968] ? __fget_files+0x2a/0x420 [ 186.906284][T10968] ? __fget_files+0x3a0/0x420 [ 186.906320][T10968] __x64_sys_sendmsg+0x1bd/0x2a0 [ 186.906340][T10968] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 186.906370][T10968] ? __pfx_ksys_write+0x10/0x10 [ 186.906400][T10968] do_syscall_64+0x14d/0xf80 [ 186.906417][T10968] ? trace_irq_disable+0x3b/0x150 [ 186.906443][T10968] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.906461][T10968] ? clear_bhb_loop+0x40/0x90 [ 186.906483][T10968] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.906502][T10968] RIP: 0033:0x7fcf9cf9c799 [ 186.906525][T10968] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 186.906540][T10968] RSP: 002b:00007fcf9de7f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 186.906565][T10968] RAX: ffffffffffffffda RBX: 00007fcf9d215fa0 RCX: 00007fcf9cf9c799 [ 186.906579][T10968] RDX: 0000000000000100 RSI: 00002000000002c0 RDI: 0000000000000004 [ 186.906590][T10968] RBP: 00007fcf9de7f090 R08: 0000000000000000 R09: 0000000000000000 [ 186.906601][T10968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 186.906611][T10968] R13: 00007fcf9d216038 R14: 00007fcf9d215fa0 R15: 00007fff59c73c58 [ 186.906640][T10968] [ 187.126991][T10971] bond8: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 187.144418][T10971] bond8: (slave lo): Enslaving as an active interface with an up link [ 187.159279][T10971] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 187.410977][T10998] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1323'. [ 187.725042][T11021] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.1330'. [ 187.860092][T11029] FAULT_INJECTION: forcing a failure. [ 187.860092][T11029] name failslab, interval 1, probability 0, space 0, times 0 [ 187.911542][T11029] CPU: 1 UID: 0 PID: 11029 Comm: syz.3.1331 Not tainted syzkaller #0 PREEMPT(full) [ 187.911568][T11029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 187.911579][T11029] Call Trace: [ 187.911587][T11029] [ 187.911602][T11029] dump_stack_lvl+0xe8/0x150 [ 187.911635][T11029] should_fail_ex+0x412/0x560 [ 187.911664][T11029] should_failslab+0xa8/0x100 [ 187.911690][T11029] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 187.911711][T11029] ? __alloc_skb+0x186/0x7d0 [ 187.911738][T11029] ? __alloc_skb+0x1d0/0x7d0 [ 187.911763][T11029] ? __local_bh_enable_ip+0xd0/0x130 [ 187.911793][T11029] __alloc_skb+0x1d0/0x7d0 [ 187.911825][T11029] netlink_sendmsg+0x5d4/0xb40 [ 187.911861][T11029] ? __pfx_netlink_sendmsg+0x10/0x10 [ 187.911891][T11029] ? aa_sock_msg_perm+0xf1/0x1b0 [ 187.911953][T11029] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 187.911978][T11029] ____sys_sendmsg+0x972/0x9f0 [ 187.912006][T11029] ? __pfx_____sys_sendmsg+0x10/0x10 [ 187.912034][T11029] ? import_iovec+0x73/0xa0 [ 187.912067][T11029] ___sys_sendmsg+0x2a5/0x360 [ 187.912092][T11029] ? __pfx____sys_sendmsg+0x10/0x10 [ 187.912145][T11029] ? __fget_files+0x2a/0x420 [ 187.912183][T11029] ? __fget_files+0x3a0/0x420 [ 187.912219][T11029] __x64_sys_sendmsg+0x1bd/0x2a0 [ 187.912240][T11029] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 187.912267][T11029] ? __pfx_ksys_write+0x10/0x10 [ 187.912297][T11029] do_syscall_64+0x14d/0xf80 [ 187.912314][T11029] ? trace_irq_disable+0x3b/0x150 [ 187.912340][T11029] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.912358][T11029] ? clear_bhb_loop+0x40/0x90 [ 187.912380][T11029] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.912398][T11029] RIP: 0033:0x7fe0a979c799 [ 187.912415][T11029] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 187.912430][T11029] RSP: 002b:00007fe0aa720028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 187.912448][T11029] RAX: ffffffffffffffda RBX: 00007fe0a9a15fa0 RCX: 00007fe0a979c799 [ 187.912461][T11029] RDX: 0000000000000100 RSI: 00002000000002c0 RDI: 0000000000000004 [ 187.912475][T11029] RBP: 00007fe0aa720090 R08: 0000000000000000 R09: 0000000000000000 [ 187.912486][T11029] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 187.912496][T11029] R13: 00007fe0a9a16038 R14: 00007fe0a9a15fa0 R15: 00007ffdd0382648 [ 187.912524][T11029] [ 188.159384][T11033] vcan0: tx address claim with dlc 0 [ 188.349444][T11047] netlink: 'syz.0.1335': attribute type 10 has an invalid length. [ 188.383159][T11047] dummy0: entered promiscuous mode [ 188.396049][T11047] dummy0: entered allmulticast mode [ 188.417669][T11047] team0: Port device dummy0 added [ 188.558975][T11058] netlink: 'syz.1.1339': attribute type 4 has an invalid length. [ 188.720916][T11072] netlink: 'syz.1.1344': attribute type 1 has an invalid length. [ 188.733717][T11069] siw: device registration error -23 [ 188.812251][T11077] openvswitch: netlink: Flow key attr not present in new flow. [ 189.570299][T11112] bond1: option all_slaves_active: invalid value (222) [ 189.582050][T11112] bond1 (unregistering): Released all slaves [ 189.629429][T11121] __nla_validate_parse: 5 callbacks suppressed [ 189.629445][T11121] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1356'. [ 189.718679][T11125] siw: device registration error -23 [ 189.881131][T11132] syzkaller1: entered promiscuous mode [ 189.886934][T11132] syzkaller1: entered allmulticast mode [ 190.087758][T11147] : renamed from bond0 (while UP) [ 190.292351][T11161] netlink: 'syz.1.1365': attribute type 1 has an invalid length. [ 190.312101][T11155] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1364'. [ 190.356227][T11155] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1364'. [ 190.368879][T11152] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 190.510697][T11169] FAULT_INJECTION: forcing a failure. [ 190.510697][T11169] name failslab, interval 1, probability 0, space 0, times 0 [ 190.525489][T11169] CPU: 1 UID: 0 PID: 11169 Comm: syz.1.1368 Not tainted syzkaller #0 PREEMPT(full) [ 190.525512][T11169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 190.525523][T11169] Call Trace: [ 190.525530][T11169] [ 190.525538][T11169] dump_stack_lvl+0xe8/0x150 [ 190.525569][T11169] should_fail_ex+0x412/0x560 [ 190.525597][T11169] should_failslab+0xa8/0x100 [ 190.525645][T11169] __kmalloc_noprof+0xe8/0x760 [ 190.525671][T11169] ? _ib_alloc_device+0x40/0x680 [ 190.525701][T11169] _ib_alloc_device+0x40/0x680 [ 190.525730][T11169] siw_newlink+0xea/0xde0 [ 190.525779][T11169] nldev_newlink+0x5bd/0x650 [ 190.525808][T11169] ? __pfx_nldev_newlink+0x10/0x10 [ 190.525927][T11169] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 190.525948][T11169] ? arch_stack_walk+0xfb/0x150 [ 190.526001][T11169] ? bpf_lsm_capable+0x9/0x20 [ 190.526027][T11169] ? security_capable+0x7e/0x2c0 [ 190.526054][T11169] ? __pfx_nldev_newlink+0x10/0x10 [ 190.526078][T11169] rdma_nl_rcv+0x6d7/0xa10 [ 190.526113][T11169] ? __pfx_rdma_nl_rcv+0x10/0x10 [ 190.526137][T11169] ? __netlink_lookup+0x7e4/0x8b0 [ 190.526184][T11169] ? netlink_deliver_tap+0x2e/0x1b0 [ 190.526217][T11169] netlink_unicast+0x80f/0x9b0 [ 190.526250][T11169] ? __pfx_netlink_unicast+0x10/0x10 [ 190.526275][T11169] ? netlink_sendmsg+0x650/0xb40 [ 190.526300][T11169] ? skb_put+0x11b/0x210 [ 190.526333][T11169] netlink_sendmsg+0x813/0xb40 [ 190.526369][T11169] ? __pfx_netlink_sendmsg+0x10/0x10 [ 190.526406][T11169] ? aa_sock_msg_perm+0xf1/0x1b0 [ 190.526433][T11169] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 190.526462][T11169] ____sys_sendmsg+0x972/0x9f0 [ 190.526491][T11169] ? __pfx_____sys_sendmsg+0x10/0x10 [ 190.526520][T11169] ? import_iovec+0x73/0xa0 [ 190.526553][T11169] ___sys_sendmsg+0x2a5/0x360 [ 190.526579][T11169] ? __pfx____sys_sendmsg+0x10/0x10 [ 190.526635][T11169] ? __fget_files+0x2a/0x420 [ 190.526663][T11169] ? __fget_files+0x3a0/0x420 [ 190.526702][T11169] __x64_sys_sendmsg+0x1bd/0x2a0 [ 190.526724][T11169] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 190.526754][T11169] ? __pfx_ksys_write+0x10/0x10 [ 190.526787][T11169] do_syscall_64+0x14d/0xf80 [ 190.526806][T11169] ? trace_irq_disable+0x3b/0x150 [ 190.526835][T11169] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.526855][T11169] ? clear_bhb_loop+0x40/0x90 [ 190.526879][T11169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.526899][T11169] RIP: 0033:0x7fcf9cf9c799 [ 190.526917][T11169] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 190.526933][T11169] RSP: 002b:00007fcf9de7f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 190.526953][T11169] RAX: ffffffffffffffda RBX: 00007fcf9d215fa0 RCX: 00007fcf9cf9c799 [ 190.526967][T11169] RDX: 0000000000000100 RSI: 00002000000002c0 RDI: 0000000000000004 [ 190.526979][T11169] RBP: 00007fcf9de7f090 R08: 0000000000000000 R09: 0000000000000000 [ 190.526990][T11169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 190.527001][T11169] R13: 00007fcf9d216038 R14: 00007fcf9d215fa0 R15: 00007fff59c73c58 [ 190.527033][T11169] [ 190.882223][T11171] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1369'. [ 190.907414][T11171] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 190.931798][T11171] gretap1: entered promiscuous mode [ 190.948815][T11173] netlink: 'syz.1.1370': attribute type 1 has an invalid length. [ 190.970469][T11173] netlink: 2108 bytes leftover after parsing attributes in process `syz.1.1370'. [ 190.985604][T11171] gretap1: entered allmulticast mode [ 191.034256][T11176] syzkaller1: entered promiscuous mode [ 191.039777][T11176] syzkaller1: entered allmulticast mode [ 191.058805][T11171] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1369'. [ 191.113696][T11171] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1369'. [ 191.136079][T11176] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1371'. [ 191.145522][T11176] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1371'. [ 191.156651][T11176] bridge0: port 3(dummy0) entered blocking state [ 191.163344][T11176] bridge0: port 3(dummy0) entered listening state [ 191.170032][T11176] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.177302][T11176] bridge0: port 2(bridge_slave_1) entered listening state [ 191.184721][T11176] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.192032][T11176] bridge0: port 1(bridge_slave_0) entered listening state [ 191.387443][T11187] xt_ecn: cannot match TCP bits for non-tcp packets [ 191.442233][T11191] xt_hashlimit: size too large, truncated to 1048576 [ 191.552344][T11199] tipc: Enabled bearer , priority 10 [ 191.565208][T11200] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1382'. [ 191.827035][T11206] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 192.069801][T11225] openvswitch: netlink: Flow key attr not present in new flow. [ 192.399349][T11243] syzkaller0: entered promiscuous mode [ 192.407638][T11248] netlink: 'syz.3.1393': attribute type 1 has an invalid length. [ 192.416748][T11243] syzkaller0: entered allmulticast mode [ 192.499606][T11248] 8021q: adding VLAN 0 to HW filter on device bond8 [ 192.543903][ T12] syzkaller0: tun_net_xmit 48 [ 192.586415][T11252] bond8: (slave veth3): Enslaving as an active interface with a down link [ 193.630435][T11252] bond8: (slave gretap1): making interface the new active one [ 193.639239][T11252] gretap1: entered promiscuous mode [ 193.644869][T11252] bond8: (slave gretap1): Enslaving as an active interface with an up link [ 193.693753][T11256] macvlan3: entered promiscuous mode [ 193.699095][T11256] macvlan3: entered allmulticast mode [ 193.731898][T11256] bond8: entered promiscuous mode [ 193.740074][T11256] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 193.770175][T11256] bond8: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 193.806674][T11256] bond8: left promiscuous mode [ 194.222765][ T1299] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 194.232389][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.252912][T11292] sit0: entered promiscuous mode [ 194.359288][T11300] Bluetooth: MGMT ver 1.23 [ 194.638579][T11310] __nla_validate_parse: 8 callbacks suppressed [ 194.638597][T11310] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1408'. [ 194.923725][T11321] netlink: 'syz.4.1410': attribute type 10 has an invalid length. [ 194.973914][T11323] netlink: 'syz.3.1407': attribute type 1 has an invalid length. [ 195.040904][T11321] : (slave ÿ): Enslaving as an active interface with an up link [ 195.054576][T11327] openvswitch: netlink: IP tunnel dst address not specified [ 195.136368][T11329] netlink: 120 bytes leftover after parsing attributes in process `syz.1.1411'. [ 195.162597][T11329] netlink: 'syz.1.1411': attribute type 1 has an invalid length. [ 195.197360][T11329] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1411'. [ 195.300039][T11332] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1412'. [ 195.315616][T11332] bond0 (unregistering): left promiscuous mode [ 195.340922][T11332] bond_slave_0: left promiscuous mode [ 195.368096][T11332] bond_slave_1: left promiscuous mode [ 195.389673][T11332] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 195.438430][T11332] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 195.460684][T11332] bond0 (unregistering): Released all slaves [ 195.728288][T11354] syzkaller0: entered promiscuous mode [ 195.751749][T11354] syzkaller0: entered allmulticast mode [ 195.878661][T11327] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 196.344037][T11385] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1422'. [ 196.644072][T11400] netlink: 'syz.1.1428': attribute type 10 has an invalid length. [ 196.963459][T11418] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1434'. [ 196.990908][T11423] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1435'. [ 197.018019][T11418] bridge0: entered promiscuous mode [ 197.037776][T11418] macsec1: entered promiscuous mode [ 197.047304][T11428] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1436'. [ 197.080528][T11418] macsec1: entered allmulticast mode [ 197.094370][T11428] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1436'. [ 197.104057][T11418] bridge0: entered allmulticast mode [ 197.111902][T11418] bridge0: port 4(macsec1) entered blocking state [ 197.127712][T11418] bridge0: port 4(macsec1) entered disabled state [ 197.166036][T11418] bridge0: left allmulticast mode [ 197.171245][T11418] bridge0: left promiscuous mode [ 197.231871][T11432] veth7: entered allmulticast mode [ 197.299478][T11441] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1439'. [ 197.509584][T11454] syzkaller0: entered promiscuous mode [ 197.531105][T11454] syzkaller0: entered allmulticast mode [ 197.555885][T11457] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 197.577539][T11454] 0: reclassify loop, rule prio 0, protocol 800 [ 197.797758][T11474] openvswitch: netlink: Flow key attr not present in new flow. [ 197.842780][ T52] Bluetooth: hci4: command 0x0405 tx timeout [ 197.854832][T11476] netlink: 'syz.2.1451': attribute type 10 has an invalid length. [ 197.896613][T11476] team0: Device vxcan1 is of different type [ 197.920924][T11482] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 197.932258][T11482] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 197.942117][T11484] netlink: 'syz.2.1451': attribute type 10 has an invalid length. [ 197.973908][T11481] netlink: 'syz.3.1454': attribute type 11 has an invalid length. [ 197.985861][ T10] vxcan1 speed is unknown, defaulting to 1000 [ 197.998008][T11481] Cannot find add_set index 65532 as target [ 198.007192][ T10] syz2: Port: 1 Link DOWN [ 198.052001][T11484] team0 (unregistering): Port device team_slave_0 removed [ 198.066776][T11484] team0 (unregistering): Port device team_slave_1 removed [ 198.084315][ T5903] vxcan1 speed is unknown, defaulting to 1000 [ 198.093280][ T5944] vxcan1 speed is unknown, defaulting to 1000 [ 198.099458][ T5901] vxcan1 speed is unknown, defaulting to 1000 [ 198.121261][T11493] delete_channel: no stack [ 198.376036][T11501] bond0: Removing last ns target with arp_interval on [ 198.451536][T11506] lo speed is unknown, defaulting to 1000 [ 198.993851][T11543] netlink: 'syz.4.1473': attribute type 1 has an invalid length. [ 199.023427][T11543] nbd: must specify a size in bytes for the device [ 199.405637][T11506] vxcan1 speed is unknown, defaulting to 1000 [ 199.616580][T11558] dummy0: left allmulticast mode [ 199.621822][T11558] bridge0: port 3(dummy0) entered disabled state [ 199.663368][T11558] batman_adv: batadv0: Adding interface: dummy0 [ 199.690259][T11558] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 199.765127][T11558] batman_adv: batadv0: Interface activated: dummy0 [ 199.789386][T11564] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 199.797538][T11564] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 199.858932][T11566] netlink: 'syz.1.1480': attribute type 21 has an invalid length. [ 200.037938][T11568] lo speed is unknown, defaulting to 1000 [ 200.149858][T11571] syzkaller0: entered promiscuous mode [ 200.155829][T11571] syzkaller0: entered allmulticast mode [ 200.316164][T11579] __nla_validate_parse: 5 callbacks suppressed [ 200.316183][T11579] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1485'. [ 200.354247][T11579] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1485'. [ 200.431625][T11568] vxcan1 speed is unknown, defaulting to 1000 [ 200.573403][T11574] siw: device registration error -23 [ 201.369001][ T5835] Bluetooth: hci2: command 0x0406 tx timeout [ 201.369856][ T5834] Bluetooth: hci3: command 0x0401 tx timeout [ 201.375105][ T5835] Bluetooth: hci1: command 0x0401 tx timeout [ 201.726722][T11592] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 201.916327][T11601] C: renamed from lo [ 201.944434][T11601] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 201.990809][T11601] mac80211_hwsim hwsim10 wlan0: Caught tx_queue_len zero misconfig [ 202.319347][T11618] netlink: 'syz.4.1495': attribute type 1 has an invalid length. [ 202.330945][T11618] netlink: 'syz.4.1495': attribute type 4 has an invalid length. [ 202.340261][T11618] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.1495'. [ 202.447810][T11614] bond4: ARP target 1.0.0.0 is already present [ 202.457667][T11614] bond4: option arp_ip_target: invalid value (1) [ 202.486774][T11614] bond4 (unregistering): Released all slaves [ 202.594791][T11619] tunl0: Caught tx_queue_len zero misconfig [ 202.795267][T11621] syzkaller0: entered promiscuous mode [ 202.800799][T11621] syzkaller0: entered allmulticast mode [ 203.029770][T11636] netlink: 'syz.3.1500': attribute type 16 has an invalid length. [ 203.038907][T11636] netlink: 'syz.3.1500': attribute type 17 has an invalid length. [ 203.099863][T11639] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1501'. [ 204.005826][T11631] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 204.103771][T11636] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.120600][T11636] bridge0: port 2(bridge_slave_1) entered forwarding state [ 204.133646][T11636] 8021q: adding VLAN 0 to HW filter on device bond0 [ 204.144159][T11636] 8021q: adding VLAN 0 to HW filter on device team0 [ 204.161977][T11636] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 204.213347][T11661] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1505'. [ 204.560903][T11680] C: entered allmulticast mode [ 204.585364][T11680] C: left allmulticast mode [ 204.666741][T11685] netlink: 'syz.3.1513': attribute type 2 has an invalid length. [ 204.686991][T11680] syzkaller1: entered promiscuous mode [ 204.695513][T11680] syzkaller1: entered allmulticast mode [ 204.806710][ T12] gretap1: left promiscuous mode [ 204.951200][T11699] tipc: Enabling of bearer rejected, failed to enable media [ 205.277578][T11711] netlink: 212360 bytes leftover after parsing attributes in process `syz.0.1520'. [ 205.312709][T11714] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1522'. [ 205.381243][T11716] IPVS: set_ctl: invalid protocol: 50 224.0.0.2:20004 [ 205.550386][T11728] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1527'. [ 205.576504][T11727] xt_CT: You must specify a L4 protocol and not use inversions on it [ 205.614636][T11730] "syz.1.1526" (11730) uses obsolete ecb(arc4) skcipher [ 205.635393][T11734] netlink: 'syz.3.1529': attribute type 6 has an invalid length. [ 205.650264][T11735] netlink: 'syz.3.1529': attribute type 6 has an invalid length. [ 205.679422][T11730] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1526'. [ 205.708858][T11730] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1526'. [ 205.748248][T11737] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1530'. [ 205.768583][T11739] RDS: rds_bind could not find a transport for ::ffff:172.30.0.4, load rds_tcp or rds_rdma? [ 205.781149][T11739] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1531'. [ 205.959399][T11753] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1536'. [ 205.971590][T11755] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1536'. [ 206.223588][T11769] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1540'. [ 206.232845][T11769] netlink: 320 bytes leftover after parsing attributes in process `syz.0.1540'. [ 206.262354][T11768] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 206.308942][T11768] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 206.716150][T11797] netlink: 'syz.4.1547': attribute type 1 has an invalid length. [ 206.733218][T11797] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1547'. [ 206.835532][T11805] netlink: 'syz.2.1552': attribute type 3 has an invalid length. [ 206.980532][T11819] netlink: 'syz.4.1555': attribute type 2 has an invalid length. [ 207.301627][T11840] Bluetooth: MGMT ver 1.23 [ 207.333785][T11839] validate_nla: 1 callbacks suppressed [ 207.333799][T11839] netlink: 'syz.4.1561': attribute type 1 has an invalid length. [ 207.349446][T11840] netlink: 'syz.4.1561': attribute type 1 has an invalid length. [ 207.379041][T11844] ip6tnl0: Caught tx_queue_len zero misconfig [ 207.705946][T11862] nbd0: detected capacity change from 0 to 127 [ 207.724068][T11877] netlink: 'syz.4.1571': attribute type 1 has an invalid length. [ 207.779177][ T5829] block nbd0: Receive control failed (result -104) [ 207.860307][T11882] netlink: 'syz.2.1573': attribute type 21 has an invalid length. [ 207.972366][T11882] bond10: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 207.994944][T11882] bond10 (unregistering): Released all slaves [ 208.014275][T11891] openvswitch: netlink: IP tunnel TTL not specified. [ 208.031536][T11893] netlink: 'syz.1.1575': attribute type 4 has an invalid length. [ 208.083358][T11898] netlink: 'syz.1.1575': attribute type 10 has an invalid length. [ 208.185491][T11898] dummy0: entered promiscuous mode [ 208.201108][T11898] batman_adv: batadv0: Interface deactivated: dummy0 [ 208.235619][T11898] batman_adv: batadv0: Removing interface: dummy0 [ 208.276030][T11898] bridge0: port 3(dummy0) entered blocking state [ 208.305207][T11898] bridge0: port 3(dummy0) entered disabled state [ 208.311713][T11898] dummy0: entered allmulticast mode [ 208.347833][T11898] bridge0: port 3(dummy0) entered blocking state [ 208.354423][T11898] bridge0: port 3(dummy0) entered forwarding state [ 208.631967][T11916] syzkaller0: entered promiscuous mode [ 208.639426][T11916] syzkaller0: entered allmulticast mode [ 208.775082][T11938] netlink: 'syz.2.1583': attribute type 4 has an invalid length. [ 209.349675][T11976] netlink: 'syz.1.1591': attribute type 1 has an invalid length. [ 209.366332][T11971] lo speed is unknown, defaulting to 1000 [ 209.812348][T11989] netlink: 'syz.0.1593': attribute type 4 has an invalid length. [ 209.831620][T11971] vxcan1 speed is unknown, defaulting to 1000 [ 209.916937][T11997] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 209.954539][T11997] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 209.974274][T11997] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 210.002023][T11997] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 210.012700][T11997] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 210.022792][T11997] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 210.033185][T11997] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 210.043052][T11997] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 210.053070][T11997] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 210.063346][T11997] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 210.143914][ T30] audit: type=1800 audit(1773890951.399:7): pid=12007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1597" name="memory.events" dev="tmpfs" ino=1760 res=0 errno=0 [ 210.440928][T12017] pim6reg1: entered promiscuous mode [ 210.458721][T12017] pim6reg1: entered allmulticast mode [ 210.538589][T12023] netlink: 'syz.2.1602': attribute type 3 has an invalid length. [ 210.567351][T12023] __nla_validate_parse: 24 callbacks suppressed [ 210.567369][T12023] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1602'. [ 211.047296][T12037] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1606'. [ 211.056724][T12037] xt_policy: neither incoming nor outgoing policy selected [ 212.898771][T12000] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 213.056572][T12049] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1610'. [ 213.077368][T12051] xt_HMARK: proto mask must be zero with L3 mode [ 213.115501][T12054] validate_nla: 1 callbacks suppressed [ 213.115516][T12054] netlink: 'syz.0.1612': attribute type 21 has an invalid length. [ 213.132046][T12052] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1611'. [ 213.162980][T12054] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1612'. [ 213.460672][T12079] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1617'. [ 213.506298][T12079] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1617'. [ 213.553222][T12081] siw: device registration error -23 [ 213.735312][T12086] netlink: 'syz.3.1621': attribute type 16 has an invalid length. [ 213.767949][T12086] netlink: 'syz.3.1621': attribute type 17 has an invalid length. [ 213.829579][T12086] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 213.846338][T12093] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1623'. [ 213.974178][T12099] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1624'. [ 214.002923][T12099] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1624'. [ 214.023517][T12099] openvswitch: netlink: IP tunnel dst address not specified [ 214.099926][T12109] veth0: entered promiscuous mode [ 214.105731][T12109] veth0: left promiscuous mode [ 214.638488][T12115] xt_TPROXY: Can be used only with -p tcp or -p udp [ 214.651828][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 216.145889][T12056] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 216.155086][T12064] netlink: 'syz.1.1614': attribute type 1 has an invalid length. [ 216.163357][T12064] __nla_validate_parse: 1 callbacks suppressed [ 216.163371][T12064] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1614'. [ 216.390220][T12144] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 216.754046][T12159] lo speed is unknown, defaulting to 1000 [ 216.803733][T12168] netlink: 'syz.0.1645': attribute type 2 has an invalid length. [ 216.811776][T12168] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1645'. [ 216.833580][T12166] C: renamed from lo (while UP) [ 216.847358][T12166] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 216.887919][T12170] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 216.936164][T12172] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1646'. [ 217.026618][T12181] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1651'. [ 217.045025][T12181] netlink: 'syz.4.1651': attribute type 10 has an invalid length. [ 217.058270][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 217.073246][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 217.203747][T12191] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1655'. [ 217.253482][T12191] xfrm1: entered promiscuous mode [ 217.281897][T12191] xfrm1: entered allmulticast mode [ 217.306465][T12202] sctp: [Deprecated]: syz.0.1653 (pid 12202) Use of int in max_burst socket option deprecated. [ 217.306465][T12202] Use struct sctp_assoc_value instead [ 217.346815][T12198] dvmrp0: entered allmulticast mode [ 217.353333][T12194] tipc: MTU too low for tipc bearer [ 217.445256][T12211] netlink: 'syz.3.1658': attribute type 1 has an invalid length. [ 217.578026][T12223] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1661'. [ 217.612631][T12215] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1659'. [ 217.927555][T12247] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1667'. [ 217.946624][T12251] netlink: 232 bytes leftover after parsing attributes in process `syz.0.1666'. [ 218.069316][T12255] gre1: entered promiscuous mode [ 218.077633][T12255] gre1: entered allmulticast mode [ 218.106852][ T36] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.418753][T12272] netlink: 'syz.1.1676': attribute type 1 has an invalid length. [ 218.429710][T12267] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1674'. [ 218.588455][T12285] ip6tnl0: Caught tx_queue_len zero misconfig [ 218.730416][T12293] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 218.790513][T12293] batadv1: entered allmulticast mode [ 219.425467][T12327] netlink: 'syz.4.1689': attribute type 9 has an invalid length. [ 219.433436][T12327] netlink: 'syz.4.1689': attribute type 11 has an invalid length. [ 219.441264][T12327] netlink: 'syz.4.1689': attribute type 12 has an invalid length. [ 219.841377][T12359] netlink: 'syz.0.1699': attribute type 10 has an invalid length. [ 219.868018][T12359] bridge0: port 3(team0) entered disabled state [ 219.874657][T12359] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.882284][T12359] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.122626][T12377] netlink: 'syz.4.1702': attribute type 1 has an invalid length. [ 220.935964][T12429] syzkaller0: entered promiscuous mode [ 220.941501][T12429] syzkaller0: entered allmulticast mode [ 221.610529][T12438] smc: removing ib device syz2 [ 221.683577][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 221.691403][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 221.950058][T12444] __nla_validate_parse: 12 callbacks suppressed [ 221.950079][T12444] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1721'. [ 221.972656][T12444] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 222.102809][T12448] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1722'. [ 222.128290][T12448] bond0 (unregistering): left promiscuous mode [ 222.147220][T12448] bond_slave_0: left promiscuous mode [ 222.152884][T12448] bond_slave_1: left promiscuous mode [ 222.158627][T12448] syz_tun: left promiscuous mode [ 222.166647][T12448] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 222.180981][T12448] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 222.199541][T12448] bond0 (unregistering): (slave syz_tun): Releasing backup interface [ 222.211195][T12448] bond0 (unregistering): Released all slaves [ 223.465927][T12401] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 223.483311][T12428] netlink: 'syz.4.1715': attribute type 1 has an invalid length. [ 223.496718][T12428] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1715'. [ 223.506036][T12428] netlink: 'syz.4.1715': attribute type 1 has an invalid length. [ 223.539101][T12428] netlink: 'syz.4.1715': attribute type 8 has an invalid length. [ 223.565915][T12428] netlink: 582 bytes leftover after parsing attributes in process `syz.4.1715'. [ 223.816874][T12468] netlink: 'syz.3.1728': attribute type 23 has an invalid length. [ 223.857836][T12468] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1728'. [ 223.885293][T12468] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1728'. [ 224.011697][T12477] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1732'. [ 224.426652][T12486] SET target dimension over the limit! [ 224.806371][T12488] netlink: 'syz.1.1735': attribute type 33 has an invalid length. [ 225.066039][T12468] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 225.607897][T12530] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1745'. [ 225.825785][T12542] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1749'. [ 225.878384][T12544] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1750'. [ 226.287141][T12573] netlink: 'syz.1.1758': attribute type 7 has an invalid length. [ 226.369276][T12577] netlink: set zone limit has 4 unknown bytes [ 226.647048][T12592] x_tables: unsorted underflow at hook 4 [ 226.656468][T12592] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 226.682639][T12595] syzkaller1: entered promiscuous mode [ 226.688292][T12595] syzkaller1: entered allmulticast mode [ 226.998683][T12612] __nla_validate_parse: 1 callbacks suppressed [ 226.998703][T12612] netlink: 276 bytes leftover after parsing attributes in process `syz.0.1769'. [ 227.242684][T12619] IPVS: set_ctl: invalid protocol: 59 0.0.0.0:20004 [ 227.453097][T12634] netlink: 830 bytes leftover after parsing attributes in process `syz.4.1775'. [ 227.575573][T12636] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 227.749749][T12646] ipt_ECN: cannot use operation on non-tcp rule [ 230.708543][T12654] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 230.988216][T12702] netlink: 'syz.4.1793': attribute type 10 has an invalid length. [ 231.013750][T12703] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1789'. [ 231.063890][T12702] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.089838][T12702] bridge_slave_1: left allmulticast mode [ 231.136890][T12702] bridge_slave_1: left promiscuous mode [ 231.145845][T12702] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.159721][T12702] : (slave bridge_slave_1): Enslaving as an active interface with an up link [ 231.192130][T12710] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.1794'. [ 231.225086][T12710] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 231.477204][T12727] dvmrp0: entered allmulticast mode [ 232.405212][T12793] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 232.608899][T12804] sctp: [Deprecated]: syz.2.1821 (pid 12804) Use of struct sctp_assoc_value in delayed_ack socket option. [ 232.608899][T12804] Use struct sctp_sack_info instead [ 232.628980][T12803] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 235.657444][T12809] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 235.773059][T12846] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1830'. [ 235.893288][T12856] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1831'. [ 235.951783][T12856] hsr_slave_0 (unregistering): left promiscuous mode [ 236.093708][T12870] netlink: 'syz.3.1837': attribute type 1 has an invalid length. [ 236.119197][T12870] nbd: error processing sock list [ 236.183624][T12876] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1838'. [ 236.579554][T12898] syzkaller1: entered promiscuous mode [ 236.590336][T12898] syzkaller1: entered allmulticast mode [ 236.819451][T12916] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1848'. [ 236.840527][T12916] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1848'. [ 236.917178][T12920] netlink: 'syz.0.1849': attribute type 6 has an invalid length. [ 237.021570][T12927] netlink: 'syz.4.1850': attribute type 1 has an invalid length. [ 237.029627][T12927] netlink: 'syz.4.1850': attribute type 2 has an invalid length. [ 237.041795][T12927] netlink: 'syz.4.1850': attribute type 1 has an invalid length. [ 237.050774][T12927] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1850'. [ 237.219183][T12935] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1854'. [ 237.391901][T12945] netlink: 'syz.2.1857': attribute type 21 has an invalid length. [ 237.400441][T12948] netlink: 'syz.2.1857': attribute type 21 has an invalid length. [ 237.410006][T12945] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1857'. [ 237.491165][T12948] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1857'. [ 238.327307][ T5158] block nbd0: Possible stuck request ffff888026500000: control (read@0,1024B). Runtime 30 seconds [ 238.343511][ T5158] block nbd0: Possible stuck request ffff888026500200: control (read@1024,1024B). Runtime 30 seconds [ 238.357013][ T5158] block nbd0: Possible stuck request ffff888026500400: control (read@2048,1024B). Runtime 30 seconds [ 238.368938][ T5158] block nbd0: Possible stuck request ffff888026500600: control (read@3072,1024B). Runtime 30 seconds [ 238.843719][T12972] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1864'. [ 238.899842][T12977] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 239.033294][T12985] syzkaller1: entered promiscuous mode [ 239.038837][T12985] syzkaller1: entered allmulticast mode [ 239.224173][T12996] vcan1: entered promiscuous mode [ 239.239597][T12996] vcan1: entered allmulticast mode [ 239.375997][T13006] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 239.398811][T13019] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 239.516069][T13025] bridge5: port 1(erspan0) entered disabled state [ 239.842114][T13046] ip6tnl1: entered allmulticast mode [ 240.289103][T13077] tipc: Enabling of bearer rejected, failed to enable media [ 240.592037][T13093] netlink: 'syz.2.1890': attribute type 1 has an invalid length. [ 240.635741][T13097] netlink: 'syz.3.1891': attribute type 2 has an invalid length. [ 240.943704][T13119] "syz.3.1899" (13119) uses obsolete ecb(arc4) skcipher [ 241.072991][T13128] netlink: 'syz.1.1902': attribute type 21 has an invalid length. [ 241.078662][T13129] openvswitch: netlink: Multiple metadata blocks provided [ 241.083047][T13128] IPv6: NLM_F_CREATE should be specified when creating new route [ 241.096342][T13129] __nla_validate_parse: 7 callbacks suppressed [ 241.096355][T13129] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1903'. [ 241.195585][T13133] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1902'. [ 241.344985][T13145] veth1_to_bond: entered allmulticast mode [ 241.385847][T13145] veth1_to_bond: left allmulticast mode [ 241.443765][ T24] page_pool_release_retry() stalled pool shutdown: id 69, 1 inflight 60 sec [ 241.570142][T13157] batadv_slave_0: entered promiscuous mode [ 241.611046][T13160] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 241.679331][T13155] batadv_slave_0: left promiscuous mode [ 241.870694][T13176] bridge0: port 4(gretap0) entered blocking state [ 241.898352][T13178] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1915'. [ 241.920949][T13176] bridge0: port 4(gretap0) entered disabled state [ 241.944375][T13176] gretap0: entered allmulticast mode [ 242.003827][T13185] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1917'. [ 242.016194][T13176] gretap0: entered promiscuous mode [ 242.022243][T13176] bridge0: port 4(gretap0) entered blocking state [ 242.028859][T13176] bridge0: port 4(gretap0) entered forwarding state [ 242.124524][T13195] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1919'. [ 242.146189][T13191] bridge7: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 242.168378][T13198] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1921'. [ 242.433142][T13211] ip6gre1: entered promiscuous mode [ 242.456404][ T5901] IPVS: starting estimator thread 0... [ 242.546253][T13220] netlink: 'syz.3.1929': attribute type 1 has an invalid length. [ 242.554180][T13214] IPVS: using max 29 ests per chain, 69600 per kthread [ 242.874029][T13244] sctp: [Deprecated]: syz.3.1936 (pid 13244) Use of int in maxseg socket option. [ 242.874029][T13244] Use struct sctp_assoc_value instead [ 243.340572][T13276] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 243.370857][T13278] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1946'. [ 243.822036][T13313] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1955'. [ 244.078511][T13330] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1959'. [ 244.236339][T13336] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 244.350993][T13340] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1963'. [ 244.799669][T13356] lo speed is unknown, defaulting to 1000 [ 246.456965][T13293] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 246.637426][T13379] __nla_validate_parse: 3 callbacks suppressed [ 246.637445][T13379] netlink: 288 bytes leftover after parsing attributes in process `syz.2.1973'. [ 246.676636][T13381] netlink: 232 bytes leftover after parsing attributes in process `syz.0.1974'. [ 247.030708][T13398] xt_CT: You must specify a L4 protocol and not use inversions on it [ 247.237635][T13417] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1982'. [ 247.289327][T13420] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1982'. [ 247.304211][T13413] netlink: 'syz.3.1983': attribute type 1 has an invalid length. [ 247.323941][T13420] netlink: 'syz.4.1982': attribute type 30 has an invalid length. [ 247.353077][T13417] netlink: 'syz.4.1982': attribute type 30 has an invalid length. [ 247.367042][T13413] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1983'. [ 247.409649][T13425] netlink: 'syz.1.1986': attribute type 23 has an invalid length. [ 247.423000][T13425] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1986'. [ 247.444006][ T36] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 247.462124][ T36] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 247.499151][ T36] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 247.598989][T13435] syzkaller1: entered promiscuous mode [ 247.621630][T13435] syzkaller1: entered allmulticast mode [ 247.725767][T13441] netlink: 'syz.4.1990': attribute type 1 has an invalid length. [ 247.737408][T13440] netlink: 'syz.1.1992': attribute type 10 has an invalid length. [ 247.877356][T13449] netlink: 'syz.0.1994': attribute type 2 has an invalid length. [ 247.887231][T13449] netlink: 'syz.0.1994': attribute type 1 has an invalid length. [ 247.930421][T13450] batadv0: mtu less than device minimum [ 247.961699][T13450] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 247.973739][T13450] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 247.985496][T13450] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 247.997219][T13450] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 248.008947][T13450] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 248.020604][T13450] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 248.032223][T13450] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 248.043797][T13450] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 248.055345][T13450] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 248.396594][T13476] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2001'. [ 248.604591][T13474] lo speed is unknown, defaulting to 1000 [ 248.673253][T13485] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2004'. [ 248.718568][T13494] netlink: 'syz.3.2006': attribute type 30 has an invalid length. [ 248.722252][T13493] netlink: 'syz.4.2007': attribute type 3 has an invalid length. [ 249.015817][T13502] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 249.078591][T13502] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 249.092928][T13502] gretap1: entered promiscuous mode [ 249.098177][T13502] gretap1: entered allmulticast mode [ 249.373693][T13513] bridge6: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 249.408819][T13516] netlink: 'syz.2.2015': attribute type 1 has an invalid length. [ 249.440197][T13513] IPv6: NLM_F_CREATE should be specified when creating new route [ 249.484370][T13519] netlink: 'syz.1.2014': attribute type 4 has an invalid length. [ 249.527986][T13504] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2010'. [ 249.554515][T13520] bond10: (slave gretap2): making interface the new active one [ 249.562372][T13523] netlink: 'syz.1.2014': attribute type 4 has an invalid length. [ 249.574495][T13520] bond10: (slave gretap2): Enslaving as an active interface with an up link [ 249.958282][T13540] netlink: 'syz.4.2020': attribute type 1 has an invalid length. [ 250.146262][T13550] xt_hashlimit: max too large, truncated to 1048576 [ 250.211822][T13557] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2025'. [ 250.390049][T13566] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 251.762588][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 251.769928][ C1] bridge0: topology change detected, propagating [ 251.869157][T13586] syzkaller0: entered promiscuous mode [ 251.875126][T13586] syzkaller0: entered allmulticast mode [ 251.884201][T13602] gretap0: left allmulticast mode [ 251.889297][T13602] gretap0: left promiscuous mode [ 251.896030][T13602] bridge0: port 4(gretap0) entered disabled state [ 251.905319][T13602] dummy0: left allmulticast mode [ 251.910539][T13602] bridge0: port 3(dummy0) entered disabled state [ 251.919447][T13602] bridge_slave_1: left allmulticast mode [ 251.925704][T13602] bridge_slave_1: left promiscuous mode [ 251.931469][T13602] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.941458][T13602] bridge_slave_0: left allmulticast mode [ 251.948301][T13602] bridge_slave_0: left promiscuous mode [ 251.955995][T13602] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.211005][T13624] __nla_validate_parse: 10 callbacks suppressed [ 252.211031][T13624] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2047'. [ 252.501069][T13646] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2049'. [ 252.836756][T13654] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2056'. [ 252.853704][T13656] validate_nla: 3 callbacks suppressed [ 252.853720][T13656] netlink: 'syz.1.2057': attribute type 9 has an invalid length. [ 252.894957][T13654] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 252.901174][T13663] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2059'. [ 253.024770][T13669] netlink: 'syz.0.2060': attribute type 11 has an invalid length. [ 253.033604][T13669] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2060'. [ 253.183149][T13679] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 253.192768][T13680] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2064'. [ 253.264552][T13680] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2064'. [ 253.276970][T13686] netlink: 'syz.2.2061': attribute type 1 has an invalid length. [ 253.328082][T13686] 8021q: adding VLAN 0 to HW filter on device bond11 [ 253.365931][T13689] dvmrp0: left allmulticast mode [ 253.684973][T13717] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2073'. [ 255.122552][ T5832] Bluetooth: hci4: command 0x0405 tx timeout [ 255.605296][ T1299] net_ratelimit: 11 callbacks suppressed [ 255.605316][ T1299] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 256.679263][T13717] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 256.778228][T13752] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2082'. [ 256.820348][T13752] openvswitch: netlink: Unknown nsh attribute 0 [ 256.925572][T13763] netlink: 'syz.1.2084': attribute type 3 has an invalid length. [ 257.029456][T13774] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma? [ 257.051344][T13770] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2086'. [ 257.393501][T13795] bond1: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 257.424596][T13795] bond1 (unregistering): Released all slaves [ 257.486622][T13801] netlink: 'syz.2.2096': attribute type 1 has an invalid length. [ 257.511883][T13802] netlink: 'syz.2.2096': attribute type 1 has an invalid length. [ 257.768724][T13814] netlink: 'syz.2.2098': attribute type 1 has an invalid length. [ 257.789380][T13814] __nla_validate_parse: 2 callbacks suppressed [ 257.789396][T13814] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2098'. [ 257.833294][T13808] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2098'. [ 258.065088][T13823] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2103'. [ 258.088195][T13825] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.2104'. [ 258.236674][T13837] syzkaller0: entered promiscuous mode [ 258.249571][T13837] syzkaller0: entered allmulticast mode [ 258.276698][T13836] bridge0: port 1(syz_tun) entered blocking state [ 258.283352][T13836] bridge0: port 1(syz_tun) entered disabled state [ 258.297687][T13836] syz_tun: entered allmulticast mode [ 258.310181][T13836] bridge0: port 1(syz_tun) entered blocking state [ 258.316868][T13836] bridge0: port 1(syz_tun) entered forwarding state [ 258.341381][T13842] syzkaller0: entered allmulticast mode [ 258.348833][T13843] netlink: 'syz.4.2108': attribute type 12 has an invalid length. [ 258.577046][ T5832] block nbd1: Receive control failed (result -32) [ 258.580816][T13858] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2114'. [ 258.667757][T13865] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2116'. [ 258.714064][T13869] x_tables: duplicate underflow at hook 1 [ 258.807894][T13876] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2119'. [ 258.852070][T13878] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2121'. [ 258.866014][T13878] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2121'. [ 258.877745][T13880] netlink: 'syz.2.2122': attribute type 13 has an invalid length. [ 258.889976][T13880] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2122'. [ 258.902218][T13880] netlink: 'syz.2.2122': attribute type 13 has an invalid length. [ 258.964736][T13883] netlink: 'syz.4.2123': attribute type 29 has an invalid length. [ 259.065495][T13887] netlink: 'syz.2.2124': attribute type 39 has an invalid length. [ 259.409908][T13910] syzkaller0: entered promiscuous mode [ 259.419005][T13910] syzkaller0: entered allmulticast mode [ 259.454392][T13910] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 259.646333][T13923] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 259.683394][T13928] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 260.112182][T13955] netlink: 'syz.3.2149': attribute type 1 has an invalid length. [ 260.417873][T13977] batadv_slave_0: Caught tx_queue_len zero misconfig [ 260.453419][T13975] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 260.473749][T13975] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 260.710822][T13998] netlink: 'syz.4.2159': attribute type 142 has an invalid length. [ 260.886725][T14012] veth0: entered promiscuous mode [ 260.903643][T14010] veth0: left promiscuous mode [ 261.106778][T14017] bond4: (slave vcan1): refused to change device type [ 261.366315][T14041] netlink: 'syz.4.2173': attribute type 4 has an invalid length. [ 261.480014][T14044] bond0: entered promiscuous mode [ 261.486380][T14044] 8021q: adding VLAN 0 to HW filter on device bond0 [ 261.494816][T14041] netlink: 'syz.4.2173': attribute type 4 has an invalid length. [ 261.525496][T14044] team0: left allmulticast mode [ 261.530389][T14044] team_slave_1: left allmulticast mode [ 261.539552][T14053] IPv6: NLM_F_CREATE should be specified when creating new route [ 261.547563][T14044] dummy0: left allmulticast mode [ 261.552928][T14044] team0: left promiscuous mode [ 261.558008][T14044] team_slave_1: left promiscuous mode [ 261.566751][T14044] dummy0: left promiscuous mode [ 261.570090][T14053] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 261.574818][T14044] bridge0: port 3(team0) entered disabled state [ 261.578897][T14053] IPv6: NLM_F_CREATE should be set when creating new route [ 261.578956][T14053] IPv6: NLM_F_CREATE should be set when creating new route [ 261.599677][T14053] IPv6: NLM_F_CREATE should be set when creating new route [ 261.617968][T14044] bridge_slave_1: left allmulticast mode [ 261.632781][T14044] bridge_slave_1: left promiscuous mode [ 261.639087][T14044] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.659745][T14044] bridge_slave_0: left allmulticast mode [ 261.670621][T14044] bridge_slave_0: left promiscuous mode [ 261.679252][T14044] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.856342][T14070] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 261.900219][T14072] netlink: 'syz.0.2182': attribute type 1 has an invalid length. [ 261.944560][T14072] bond4: entered promiscuous mode [ 261.950091][T14072] 8021q: adding VLAN 0 to HW filter on device bond4 [ 261.976556][T14072] bond4: (slave bridge0): making interface the new active one [ 261.984241][T14072] bridge0: entered promiscuous mode [ 261.990276][T14072] bond4: (slave bridge0): Enslaving as an active interface with an up link [ 262.408697][T14109] block nbd2: Unsupported socket: should be TCP or UNIX. [ 262.533123][T14109] nbd2: detected capacity change from 0 to 127 [ 262.541748][ T5832] block nbd2: Receive control failed (result -104) [ 262.759458][T14129] syzkaller1: entered promiscuous mode [ 262.768189][T14129] syzkaller1: entered allmulticast mode [ 263.116468][T14154] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 263.242562][T14160] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 263.315802][T14168] __nla_validate_parse: 20 callbacks suppressed [ 263.315822][T14168] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2214'. [ 263.341511][T14168] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2214'. [ 263.375500][T14172] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2214'. [ 263.387168][T14172] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2214'. [ 263.563462][T14177] nbd4: detected capacity change from 0 to 127 [ 263.648340][T14176] nbd5: detected capacity change from 0 to 127 [ 263.721710][ T5829] block nbd5: Receive control failed (result -104) [ 263.728617][ T5832] block nbd4: Receive control failed (result -32) [ 263.922015][T14216] x_tables: duplicate underflow at hook 3 [ 263.979216][T14223] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2225'. [ 264.029221][T14223] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2225'. [ 264.049147][T14223] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2225'. [ 264.125941][T14228] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2224'. [ 264.423286][T14241] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2227'. [ 264.518102][T14245] syzkaller0: entered promiscuous mode [ 264.523763][T14245] syzkaller0: entered allmulticast mode [ 265.816454][T14257] delete_channel: no stack [ 266.841051][T14204] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 267.073901][T14268] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 267.130011][T14277] validate_nla: 1 callbacks suppressed [ 267.130029][T14277] netlink: 'syz.4.2237': attribute type 1 has an invalid length. [ 267.172283][T14277] netlink: 760 bytes leftover after parsing attributes in process `syz.4.2237'. [ 267.185911][T14280] IPVS: set_ctl: invalid protocol: 52 172.20.20.170:20004 [ 267.204395][T14269] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 267.226787][T14277] x_tables: duplicate underflow at hook 3 [ 267.325832][T14274] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 267.337859][T14274] x_tables: duplicate underflow at hook 1 [ 267.415076][T14294] netlink: 'syz.0.2243': attribute type 1 has an invalid length. [ 267.433256][T14294] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 267.980203][T14322] unsupported nlmsg_type 40 [ 268.021625][T14324] siw: device registration error -23 [ 268.055514][T14324] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 268.081725][T14324] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 268.168324][T14333] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 268.369435][T14346] smc: net device wlan0 applied user defined pnetid SYZ0 [ 268.404002][ T5158] block nbd0: Possible stuck request ffff888026500000: control (read@0,1024B). Runtime 60 seconds [ 268.415488][ T5158] block nbd0: Possible stuck request ffff888026500200: control (read@1024,1024B). Runtime 60 seconds [ 268.426741][ T5158] block nbd0: Possible stuck request ffff888026500400: control (read@2048,1024B). Runtime 60 seconds [ 268.438789][ T5158] block nbd0: Possible stuck request ffff888026500600: control (read@3072,1024B). Runtime 60 seconds [ 268.507687][T14350] netlink: zone id is out of range [ 268.514245][T14350] netlink: zone id is out of range [ 268.519932][T14350] netlink: zone id is out of range [ 268.525514][T14350] netlink: zone id is out of range [ 268.545910][T14352] __nla_validate_parse: 4 callbacks suppressed [ 268.545926][T14352] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.2263'. [ 268.629624][T14352] bond1: option packets_per_slave: invalid value (18446744073709551615) [ 268.638608][T14352] bond1: option packets_per_slave: allowed values 0 - 65535 [ 268.648162][T14352] bond1 (unregistering): Released all slaves [ 268.919325][T14375] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2271'. [ 269.069855][T14388] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2270'. [ 269.251081][T14395] netlink: 196 bytes leftover after parsing attributes in process `syz.2.2274'. [ 269.288666][T14395] netlink: 196 bytes leftover after parsing attributes in process `syz.2.2274'. [ 269.307835][T14395] netlink: 19 bytes leftover after parsing attributes in process `syz.2.2274'. [ 269.474101][T14410] netlink: 'syz.2.2278': attribute type 3 has an invalid length. [ 269.838964][T14434] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2286'. [ 269.875238][T14434] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2286'. [ 269.928883][T14434] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2286'. [ 269.961480][T14441] netlink: 211856 bytes leftover after parsing attributes in process `syz.2.2289'. [ 270.712567][T14469] netlink: 'syz.4.2299': attribute type 24 has an invalid length. [ 270.998471][T14490] netlink: 'syz.4.2301': attribute type 10 has an invalid length. [ 271.075419][T14493] netlink: 'syz.0.2302': attribute type 4 has an invalid length. [ 271.207372][T14497] netlink: 'syz.2.2303': attribute type 1 has an invalid length. [ 272.128122][T14549] net_ratelimit: 56 callbacks suppressed [ 272.128145][T14549] openvswitch: netlink: Flow key attr not present in new flow. [ 272.216613][T14557] netlink: 'syz.3.2319': attribute type 1 has an invalid length. [ 272.353267][T14557] 8021q: adding VLAN 0 to HW filter on device bond10 [ 272.427163][T14559] bond10: (slave geneve4): making interface the new active one [ 272.439269][T14559] bond10: (slave geneve4): Enslaving as an active interface with an up link [ 272.456197][T14565] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 272.601382][T14576] "syz.2.2326" (14576) uses obsolete ecb(arc4) skcipher [ 272.720081][T14583] netlink: 'syz.2.2329': attribute type 2 has an invalid length. [ 273.015884][T14598] netlink: 'syz.1.2335': attribute type 4 has an invalid length. [ 273.023918][T14601] netlink: 'syz.1.2335': attribute type 4 has an invalid length. [ 273.184614][T14613] netlink: 'syz.2.2341': attribute type 4 has an invalid length. [ 273.253318][T14613] netlink: 'syz.2.2341': attribute type 4 has an invalid length. [ 273.289404][T14624] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 273.339874][T14631] sctp: [Deprecated]: syz.0.2346 (pid 14631) Use of int in maxseg socket option. [ 273.339874][T14631] Use struct sctp_assoc_value instead [ 273.569056][T14649] netlink: 'syz.3.2350': attribute type 1 has an invalid length. [ 273.719126][T14657] bond12: option packets_per_slave: invalid value (18446744073709551615) [ 273.728511][T14657] bond12: option packets_per_slave: allowed values 0 - 65535 [ 273.738620][T14657] bond12 (unregistering): Released all slaves [ 273.764240][T14662] __nla_validate_parse: 46 callbacks suppressed [ 273.764257][T14662] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2356'. [ 273.928618][T14674] netlink: 'syz.4.2360': attribute type 4 has an invalid length. [ 274.663956][T14725] ipt_ECN: cannot use operation on non-tcp rule [ 274.835298][T14739] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2380'. [ 275.005561][T14752] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2380'. [ 275.035338][T14750] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2382'. [ 275.051581][T14754] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2384'. [ 275.142696][T14759] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 275.307361][T14775] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 275.318802][T14776] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 275.394800][T14783] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2389'. [ 275.406936][T14783] openvswitch: netlink: Flow actions attr not present in new flow. [ 275.425570][T14783] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2389'. [ 275.456806][T14785] netlink: 'syz.4.2390': attribute type 2 has an invalid length. [ 275.555520][T14787] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 275.570704][T14789] IPVS: Unknown mcast interface: vcan0 [ 275.690754][T14793] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.2394'. [ 275.801593][T14801] syzkaller0: entered promiscuous mode [ 275.807858][T14801] syzkaller0: entered allmulticast mode [ 275.928014][T14812] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2400'. [ 275.948314][T14812] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2400'. [ 275.963817][T14814] netlink: 'syz.2.2398': attribute type 1 has an invalid length. [ 275.992688][T14814] 8021q: adding VLAN 0 to HW filter on device bond12 [ 276.141922][T14820] bond13: (slave ip6_vti0): Device is not bonding slave [ 276.150349][T14820] bond13: option active_slave: invalid value (ip6_vti0) [ 276.180886][T14820] bond13 (unregistering): Released all slaves [ 276.248723][T14839] xt_hashlimit: invalid rate [ 276.476057][T14855] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 276.649122][T14863] 8021q: adding VLAN 0 to HW filter on device bond5 [ 276.701914][T14863] vlan2: entered promiscuous mode [ 276.727127][T14863] bond5: entered promiscuous mode [ 276.732393][T14863] vlan2: entered allmulticast mode [ 276.738465][T14863] bond5: entered allmulticast mode [ 276.839680][T14863] bond5: (slave bridge7): making interface the new active one [ 276.850675][T14863] bridge7: entered promiscuous mode [ 276.856167][T14863] bridge7: entered allmulticast mode [ 276.883486][T14863] bond5: (slave bridge7): Enslaving as an active interface with an up link [ 277.150786][T14903] x_tables: duplicate entry at hook 1 [ 277.157336][T14905] x_tables: duplicate entry at hook 1 [ 277.353505][T14920] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 277.812741][T14945] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 278.025949][T14965] macvtap1: entered promiscuous mode [ 278.043976][T14965] macvtap1: entered allmulticast mode [ 278.053006][T14965] veth1_vlan: entered allmulticast mode [ 278.079854][T14968] macvtap2: entered promiscuous mode [ 278.086482][T14968] macvtap2: entered allmulticast mode [ 278.247540][T14979] validate_nla: 2 callbacks suppressed [ 278.247563][T14979] netlink: 'syz.2.2446': attribute type 1 has an invalid length. [ 278.278926][T14980] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 278.311157][T14979] 8021q: adding VLAN 0 to HW filter on device bond13 [ 278.377765][T14984] bond13: (slave veth11): Enslaving as an active interface with a down link [ 278.414010][T14979] bond13: (slave gretap3): making interface the new active one [ 278.434973][T14979] gretap3: entered promiscuous mode [ 278.440281][ T30] audit: type=1804 audit(1773891019.699:8): pid=14993 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2449" name="/newroot/500/cgroup.controllers" dev="tmpfs" ino=2570 res=1 errno=0 [ 278.474783][T14979] bond13: (slave gretap3): Enslaving as an active interface with an up link [ 278.513413][ T30] audit: type=1800 audit(1773891019.699:9): pid=14993 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2449" name="cgroup.controllers" dev="tmpfs" ino=2570 res=0 errno=0 [ 278.542679][T14984] macvlan3: entered promiscuous mode [ 278.552095][T14984] macvlan3: entered allmulticast mode [ 278.559593][T14984] bond13: entered promiscuous mode [ 278.597174][ T30] audit: type=1800 audit(1773891019.699:10): pid=14991 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2449" name="cgroup.controllers" dev="tmpfs" ino=2570 res=0 errno=0 [ 278.615951][T14984] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 278.647746][T14984] bond13: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 278.664624][T14984] bond13: left promiscuous mode [ 278.724772][ T12] wlan0: Trigger new scan to find an IBSS to join [ 278.810551][T14979] syz.2.2446 (14979) used greatest stack depth: 18688 bytes left [ 279.078798][T15020] bond0: entered allmulticast mode [ 279.104813][T15023] netlink: 'syz.3.2459': attribute type 17 has an invalid length. [ 279.113116][T15023] __nla_validate_parse: 9 callbacks suppressed [ 279.113130][T15023] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2459'. [ 279.142653][T15023] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2459'. [ 279.222887][T15028] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2461'. [ 279.270676][T15028] team0: Port device team_slave_0 removed [ 279.278938][T15031] netlink: 'syz.0.2463': attribute type 2 has an invalid length. [ 279.296502][T15031] netlink: 119 bytes leftover after parsing attributes in process `syz.0.2463'. [ 279.494334][T15039] netlink: 'syz.0.2465': attribute type 21 has an invalid length. [ 279.509225][T15037] tipc: Resetting bearer [ 279.515579][T15039] IPv6: NLM_F_CREATE should be specified when creating new route [ 279.527057][T15037] tipc: Resetting bearer [ 279.533072][T15039] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 279.540323][T15039] IPv6: NLM_F_CREATE should be set when creating new route [ 279.547599][T15039] IPv6: NLM_F_CREATE should be set when creating new route [ 279.554842][T15039] IPv6: NLM_F_CREATE should be set when creating new route [ 279.588327][ T12] tipc: Resetting bearer [ 279.882883][T15056] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 279.889067][T15056] syzkaller1: linktype set to 5 [ 279.912192][T15061] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2472'. [ 279.982035][T15058] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2472'. [ 280.019736][T15058] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2472'. [ 280.111916][T15070] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2474'. [ 280.175466][T15070] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.2474'. [ 280.246169][T15083] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2481'. [ 280.420050][T15090] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 280.476176][T15105] netlink: 'syz.4.2486': attribute type 3 has an invalid length. [ 280.618976][T15113] bond5: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 280.666573][T15113] bond5: (slave lo): Enslaving as an active interface with an up link [ 280.695200][T15113] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 280.764289][ T6022] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.772968][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.830526][T15119] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.841537][T15119] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 280.928580][T15119] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.939202][T15119] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 281.025760][T15119] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.054347][T15119] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 281.105288][T15143] syzkaller0: entered promiscuous mode [ 281.110912][T15143] syzkaller0: entered allmulticast mode [ 281.164494][T15119] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.175528][T15119] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 281.476876][ T173] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 281.489998][ T173] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 281.504279][ T173] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 281.514109][ T173] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 281.531279][ T173] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 281.544950][ T173] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 281.567474][ T173] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 281.589159][ T173] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 281.623432][T15161] netlink: 'syz.1.2503': attribute type 4 has an invalid length. [ 281.738389][T15172] netlink: 'syz.0.2504': attribute type 1 has an invalid length. [ 281.772770][ T173] wlan0: Trigger new scan to find an IBSS to join [ 281.849485][ T6022] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 281.859044][ T5903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 281.869781][ T1223] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 281.880054][ T5901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 281.899321][ T1223] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 281.912810][ T6022] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 281.961892][T15183] tipc: Enabling of bearer rejected, failed to enable media [ 282.348361][T15192] IPv6: NLM_F_CREATE should be specified when creating new route [ 282.379467][T15192] syzkaller0: entered allmulticast mode [ 282.428515][T15188] syzkaller0: entered promiscuous mode [ 282.434531][T15188] syzkaller0: entered allmulticast mode [ 282.463250][T15199] veth0: entered promiscuous mode [ 282.473770][T15189] veth0: left promiscuous mode [ 282.686386][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 282.708949][ C1] ------------[ cut here ]------------ [ 282.714474][ C1] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0x0 with flags 0x0 [ 282.724363][ C1] WARNING: net/mac80211/rate.c:406 at __rate_control_send_low+0x524/0x800, CPU#1: syz.2.2511/15187 [ 282.735124][ C1] Modules linked in: [ 282.739104][ C1] CPU: 1 UID: 0 PID: 15187 Comm: syz.2.2511 Not tainted syzkaller #0 PREEMPT(full) [ 282.748529][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 282.758637][ C1] RIP: 0010:__rate_control_send_low+0x5bb/0x800 [ 282.764946][ C1] Code: ff 4c 8b 7c 24 08 48 8b 44 24 38 0f b6 04 28 84 c0 0f 85 d3 01 00 00 41 8b 0f 4c 89 f7 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 <67> 48 0f b9 3a 4c 8b 74 24 30 e9 81 fe ff ff 44 89 f9 80 e1 07 80 [ 282.784603][ C1] RSP: 0018:ffffc90000a08838 EFLAGS: 00010246 [ 282.790701][ C1] RAX: 0000000000000000 RBX: 000000000000000c RCX: 0000000000000000 [ 282.798731][ C1] RDX: 00000000ffffffff RSI: 0000000000000000 RDI: ffffffff9022de30 [ 282.806758][ C1] RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000000 [ 282.814808][ C1] R10: 0000000000000004 R11: 0000000000000100 R12: ffff888030b0a028 [ 282.822826][ C1] R13: 0000000000000000 R14: ffffffff9022de30 R15: ffff8880587db138 [ 282.830820][ C1] FS: 000055556683a500(0000) GS:ffff888125560000(0000) knlGS:0000000000000000 [ 282.839803][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 282.846437][ C1] CR2: 00007fcf9de5dff8 CR3: 000000007634c000 CR4: 00000000003526f0 [ 282.854470][ C1] Call Trace: [ 282.857785][ C1] [ 282.860672][ C1] rate_control_send_low+0x1a7/0x7b0 [ 282.866062][ C1] rate_control_get_rate+0x20b/0x5d0 [ 282.871401][ C1] ieee80211_beacon_get_finish+0x3af/0x6f0 [ 282.877295][ C1] ? __pfx_ieee80211_beacon_get_finish+0x10/0x10 [ 282.883707][ C1] ? __ieee80211_beacon_get+0xce1/0x1880 [ 282.889364][ C1] __ieee80211_beacon_get+0xd3d/0x1880 [ 282.894883][ C1] ? __ieee80211_beacon_get+0x36/0x1880 [ 282.900468][ C1] ieee80211_beacon_get_tim+0xbd/0x2c0 [ 282.905992][ C1] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 282.912087][ C1] mac80211_hwsim_beacon_tx+0x3c5/0x870 [ 282.917701][ C1] ? lock_acquire+0xf0/0x2e0 [ 282.922332][ C1] __iterate_interfaces+0x2ab/0x590 [ 282.927595][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 282.933731][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 282.940963][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 282.947107][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 282.954229][ C1] mac80211_hwsim_beacon+0xbb/0x180 [ 282.959451][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 282.965356][ C1] __hrtimer_run_queues+0x53a/0xcc0 [ 282.970616][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 282.976385][ C1] ? ktime_get_update_offsets_now+0x3b2/0x3d0 [ 282.982516][ C1] hrtimer_run_softirq+0x182/0x5a0 [ 282.987667][ C1] handle_softirqs+0x22a/0x870 [ 282.992502][ C1] ? __irq_exit_rcu+0x5f/0x150 [ 282.997316][ C1] __irq_exit_rcu+0x5f/0x150 [ 283.001924][ C1] irq_exit_rcu+0x9/0x30 [ 283.006213][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 283.011877][ C1] [ 283.014846][ C1] [ 283.017807][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 283.023861][ C1] RIP: 0010:lockdep_unregister_key+0x2d5/0x350 [ 283.030043][ C1] Code: 41 0c 09 00 89 c6 48 c7 c7 d0 58 24 96 e8 e3 ea 0e 0a 90 e9 65 fe ff ff e8 c8 36 0c 0a 41 f7 c7 00 02 00 00 74 b3 fb 40 84 ed <75> b2 eb c3 90 0f 0b 90 e9 26 ff ff ff 90 0f 0b 90 e9 2e ff ff ff [ 283.049684][ C1] RSP: 0018:ffffc9001b5a7980 EFLAGS: 00000246 [ 283.055796][ C1] RAX: 0000000000000046 RBX: ffff88807bc7d268 RCX: 0000000000000046 [ 283.063800][ C1] RDX: ffffffff93dfd438 RSI: ffffffff8df0e977 RDI: ffffffff8c27b580 [ 283.071795][ C1] RBP: ffff888030c23d00 R08: ffffffff81af01d8 R09: ffffffff8e75e420 [ 283.079812][ C1] R10: dffffc0000000000 R11: fffffbfff20232d7 R12: 0000000000000000 [ 283.087825][ C1] R13: ffff88807bc7d269 R14: 0000000000001000 R15: 0000000000000a87 [ 283.095866][ C1] ? __is_module_percpu_address+0x28/0x3f0 [ 283.101723][ C1] ? __pfx_pfifo_fast_destroy+0x10/0x10 [ 283.107337][ C1] __qdisc_destroy+0x1ab/0x4a0 [ 283.112149][ C1] dev_shutdown+0x93/0x440 [ 283.116664][ C1] unregister_netdevice_many_notify+0x11a9/0x2370 [ 283.123142][ C1] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 283.129939][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 283.135796][ C1] ? ref_tracker_alloc+0x2f1/0x4c0 [ 283.140934][ C1] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 283.146436][ C1] ? tun_chr_close+0x10a/0x1c0 [ 283.151225][ C1] ? __fput+0x44f/0xa70 [ 283.155453][ C1] ? exit_to_user_mode_loop+0xed/0x480 [ 283.160959][ C1] unregister_netdevice_queue+0x31f/0x360 [ 283.166727][ C1] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 283.173005][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 283.178250][ C1] ? queue_delayed_work_on+0x171/0x1e0 [ 283.183808][ C1] __tun_detach+0x6d9/0x15d0 [ 283.188427][ C1] ? __pfx_tun_chr_close+0x10/0x10 [ 283.193593][ C1] tun_chr_close+0x10a/0x1c0 [ 283.198234][ C1] __fput+0x44f/0xa70 [ 283.202266][ C1] task_work_run+0x1d9/0x270 [ 283.206899][ C1] ? __pfx_task_work_run+0x10/0x10 [ 283.212045][ C1] exit_to_user_mode_loop+0xed/0x480 [ 283.217384][ C1] ? rcu_is_watching+0x15/0xb0 [ 283.222207][ C1] do_syscall_64+0x32d/0xf80 [ 283.226856][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.232977][ C1] ? clear_bhb_loop+0x40/0x90 [ 283.237696][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.243637][ C1] RIP: 0033:0x7f81b039c799 [ 283.248097][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 283.267768][ C1] RSP: 002b:00007ffeda716078 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 283.276248][ C1] RAX: 0000000000000000 RBX: 00007ffeda716160 RCX: 00007f81b039c799 [ 283.284260][ C1] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 283.292257][ C1] RBP: 0000000000044eac R08: 0000000000000001 R09: 0000000000000000 [ 283.300278][ C1] R10: 0000001b2fb20000 R11: 0000000000000246 R12: 00007ffeda7161a0 [ 283.308292][ C1] R13: 00007f81b0615fac R14: 0000000000044f68 R15: 00007f81b0615fa0 [ 283.316379][ C1] [ 283.319436][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 283.326745][ C1] CPU: 1 UID: 0 PID: 15187 Comm: syz.2.2511 Not tainted syzkaller #0 PREEMPT(full) [ 283.336112][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 283.346168][ C1] Call Trace: [ 283.349463][ C1] [ 283.352364][ C1] vpanic+0x56c/0xa60 [ 283.356372][ C1] ? __pfx__printk+0x10/0x10 [ 283.360971][ C1] ? __pfx_vpanic+0x10/0x10 [ 283.365520][ C1] ? is_bpf_text_address+0x292/0x2b0 [ 283.370828][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 283.376054][ C1] panic+0xc5/0xd0 [ 283.379821][ C1] ? __pfx_panic+0x10/0x10 [ 283.384291][ C1] __warn+0x315/0x4f0 [ 283.388317][ C1] ? __rate_control_send_low+0x524/0x800 [ 283.393977][ C1] ? __rate_control_send_low+0x524/0x800 [ 283.399627][ C1] __report_bug+0x29a/0x540 [ 283.404145][ C1] ? kernel_text_address+0xa5/0xe0 [ 283.409259][ C1] ? __rate_control_send_low+0x524/0x800 [ 283.414896][ C1] ? __pfx___report_bug+0x10/0x10 [ 283.419960][ C1] ? stack_trace_save+0xa9/0x100 [ 283.424903][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 283.430274][ C1] report_bug_entry+0x19a/0x290 [ 283.435136][ C1] ? __rate_control_send_low+0x5bb/0x800 [ 283.440797][ C1] ? __rate_control_send_low+0x5c0/0x800 [ 283.446503][ C1] handle_bug+0xce/0x200 [ 283.450772][ C1] exc_invalid_op+0x1a/0x50 [ 283.455313][ C1] asm_exc_invalid_op+0x1a/0x20 [ 283.460209][ C1] RIP: 0010:__rate_control_send_low+0x5bb/0x800 [ 283.466468][ C1] Code: ff 4c 8b 7c 24 08 48 8b 44 24 38 0f b6 04 28 84 c0 0f 85 d3 01 00 00 41 8b 0f 4c 89 f7 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 <67> 48 0f b9 3a 4c 8b 74 24 30 e9 81 fe ff ff 44 89 f9 80 e1 07 80 [ 283.486070][ C1] RSP: 0018:ffffc90000a08838 EFLAGS: 00010246 [ 283.492149][ C1] RAX: 0000000000000000 RBX: 000000000000000c RCX: 0000000000000000 [ 283.500143][ C1] RDX: 00000000ffffffff RSI: 0000000000000000 RDI: ffffffff9022de30 [ 283.508118][ C1] RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000000 [ 283.516095][ C1] R10: 0000000000000004 R11: 0000000000000100 R12: ffff888030b0a028 [ 283.524066][ C1] R13: 0000000000000000 R14: ffffffff9022de30 R15: ffff8880587db138 [ 283.532061][ C1] ? __rate_control_send_low+0x58d/0x800 [ 283.537710][ C1] rate_control_send_low+0x1a7/0x7b0 [ 283.543019][ C1] rate_control_get_rate+0x20b/0x5d0 [ 283.548338][ C1] ieee80211_beacon_get_finish+0x3af/0x6f0 [ 283.554202][ C1] ? __pfx_ieee80211_beacon_get_finish+0x10/0x10 [ 283.560548][ C1] ? __ieee80211_beacon_get+0xce1/0x1880 [ 283.566196][ C1] __ieee80211_beacon_get+0xd3d/0x1880 [ 283.571679][ C1] ? __ieee80211_beacon_get+0x36/0x1880 [ 283.577257][ C1] ieee80211_beacon_get_tim+0xbd/0x2c0 [ 283.582735][ C1] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 283.588835][ C1] mac80211_hwsim_beacon_tx+0x3c5/0x870 [ 283.594408][ C1] ? lock_acquire+0xf0/0x2e0 [ 283.599019][ C1] __iterate_interfaces+0x2ab/0x590 [ 283.604255][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 283.610373][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 283.617579][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 283.623662][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 283.630702][ C1] mac80211_hwsim_beacon+0xbb/0x180 [ 283.635911][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 283.641733][ C1] __hrtimer_run_queues+0x53a/0xcc0 [ 283.646957][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 283.652705][ C1] ? ktime_get_update_offsets_now+0x3b2/0x3d0 [ 283.658825][ C1] hrtimer_run_softirq+0x182/0x5a0 [ 283.663956][ C1] handle_softirqs+0x22a/0x870 [ 283.668731][ C1] ? __irq_exit_rcu+0x5f/0x150 [ 283.673527][ C1] __irq_exit_rcu+0x5f/0x150 [ 283.678159][ C1] irq_exit_rcu+0x9/0x30 [ 283.682427][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 283.688097][ C1] [ 283.691039][ C1] [ 283.693990][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 283.699974][ C1] RIP: 0010:lockdep_unregister_key+0x2d5/0x350 [ 283.706136][ C1] Code: 41 0c 09 00 89 c6 48 c7 c7 d0 58 24 96 e8 e3 ea 0e 0a 90 e9 65 fe ff ff e8 c8 36 0c 0a 41 f7 c7 00 02 00 00 74 b3 fb 40 84 ed <75> b2 eb c3 90 0f 0b 90 e9 26 ff ff ff 90 0f 0b 90 e9 2e ff ff ff [ 283.725766][ C1] RSP: 0018:ffffc9001b5a7980 EFLAGS: 00000246 [ 283.731851][ C1] RAX: 0000000000000046 RBX: ffff88807bc7d268 RCX: 0000000000000046 [ 283.739855][ C1] RDX: ffffffff93dfd438 RSI: ffffffff8df0e977 RDI: ffffffff8c27b580 [ 283.747841][ C1] RBP: ffff888030c23d00 R08: ffffffff81af01d8 R09: ffffffff8e75e420 [ 283.755819][ C1] R10: dffffc0000000000 R11: fffffbfff20232d7 R12: 0000000000000000 [ 283.763802][ C1] R13: ffff88807bc7d269 R14: 0000000000001000 R15: 0000000000000a87 [ 283.771792][ C1] ? __is_module_percpu_address+0x28/0x3f0 [ 283.777631][ C1] ? __pfx_pfifo_fast_destroy+0x10/0x10 [ 283.783194][ C1] __qdisc_destroy+0x1ab/0x4a0 [ 283.787998][ C1] dev_shutdown+0x93/0x440 [ 283.792438][ C1] unregister_netdevice_many_notify+0x11a9/0x2370 [ 283.798885][ C1] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 283.805659][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 283.811505][ C1] ? ref_tracker_alloc+0x2f1/0x4c0 [ 283.816648][ C1] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 283.822122][ C1] ? tun_chr_close+0x10a/0x1c0 [ 283.826889][ C1] ? __fput+0x44f/0xa70 [ 283.831048][ C1] ? exit_to_user_mode_loop+0xed/0x480 [ 283.836529][ C1] unregister_netdevice_queue+0x31f/0x360 [ 283.842262][ C1] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 283.848529][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 283.853740][ C1] ? queue_delayed_work_on+0x171/0x1e0 [ 283.859223][ C1] __tun_detach+0x6d9/0x15d0 [ 283.863821][ C1] ? __pfx_tun_chr_close+0x10/0x10 [ 283.868936][ C1] tun_chr_close+0x10a/0x1c0 [ 283.873551][ C1] __fput+0x44f/0xa70 [ 283.877589][ C1] task_work_run+0x1d9/0x270 [ 283.882194][ C1] ? __pfx_task_work_run+0x10/0x10 [ 283.887322][ C1] exit_to_user_mode_loop+0xed/0x480 [ 283.892627][ C1] ? rcu_is_watching+0x15/0xb0 [ 283.897424][ C1] do_syscall_64+0x32d/0xf80 [ 283.902032][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.908095][ C1] ? clear_bhb_loop+0x40/0x90 [ 283.912789][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.918697][ C1] RIP: 0033:0x7f81b039c799 [ 283.923119][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 283.942746][ C1] RSP: 002b:00007ffeda716078 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 283.951181][ C1] RAX: 0000000000000000 RBX: 00007ffeda716160 RCX: 00007f81b039c799 [ 283.959147][ C1] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 283.967120][ C1] RBP: 0000000000044eac R08: 0000000000000001 R09: 0000000000000000 [ 283.975122][ C1] R10: 0000001b2fb20000 R11: 0000000000000246 R12: 00007ffeda7161a0 [ 283.983106][ C1] R13: 00007f81b0615fac R14: 0000000000044f68 R15: 00007f81b0615fa0 [ 283.991109][ C1] [ 283.994747][ C1] Kernel Offset: disabled [ 283.999095][ C1] Rebooting in 86400 seconds..